last executing test programs: 3m42.042265016s ago: executing program 3 (id=656): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x1, &(0x7f0000000180)=0x6}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper], 0x51, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b9a"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/144, 0x90, 0x1, 0x7}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x9, 0x0, 0x2d}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 3m41.090482811s ago: executing program 3 (id=661): r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x6000001a}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) close(0x3) read$char_usb(r1, &(0x7f0000001980)=""/179, 0xb3) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)={0x80000000}) write$cgroup_subtree(r1, 0x0, 0xfe3a) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r0, @ANYRES32=r0], 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 3m38.054595018s ago: executing program 3 (id=708): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x189) getdents64(r1, &(0x7f0000000100)=""/33, 0x21) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x48, &(0x7f0000000040)=0x2, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x6, @private1={0xfc, 0x1, '\x00', 0x7}, 0x5}, 0x1c) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000008, 0x12, r0, 0x2b09d000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 3m38.023523218s ago: executing program 3 (id=709): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x4, @any, 0xfffa}, 0xe) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet(0x2, 0x3, 0x9) (async) socket$inet(0x2, 0x3, 0x9) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, 0x0) syz_clone3(0x0, 0x0) (async) syz_clone3(0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x458, 0x4018, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "169ac5ee"}]}}, 0x0}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) (async) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r6, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r6, 0x0) write$selinux_load(r5, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux', "a5199fcdafdf3bb7cc4c8bc74a5ec2b0d07a2123b1ffffc2b5877ed2f506d04eb3c4c94cca1ae1060238c6ebf2a309079606000000"}, 0x45) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) futex(&(0x7f0000000040)=0x2, 0x84, 0x2, 0x0, 0x0, 0x22) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 3m36.346889754s ago: executing program 3 (id=728): ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) r1 = dup2(r0, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000280)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000100)="2e0f3767660f71d7eb670fc7fb0fe351df0f30c162de02650f381cc0f20f129e0000ba4000b008ee0fc7bb0000", 0x2d}], 0x1, 0x70, &(0x7f0000000180)=[@flags={0x3, 0x50a00}], 0x1) read(r2, &(0x7f00000001c0)=""/98, 0x62) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4a0100, 0x0) 3m36.286572065s ago: executing program 3 (id=729): ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x0, 0x4, 0x0, 0x0, 0x10, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3m20.778263034s ago: executing program 32 (id=729): ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x0, 0x4, 0x0, 0x0, 0x10, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3m17.299804178s ago: executing program 0 (id=947): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000900)={0x110, 0x0, &(0x7f0000000a00)=[@request_death={0x400c630e, 0x1}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000600)={@flat=@weak_handle={0x77682a85, 0x1000}, @fda={0x66646185, 0x7, 0x0, 0x1b}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000580)={0x0, 0x18, 0x38}}, 0x400}, @register_looper, @exit_looper, @increfs={0x40046304, 0x2}, @exit_looper, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000940)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x9, 0x0, 0x15}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000009c0)={0x0, 0x18, 0x38}}, 0x1000}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000680)={@flat=@weak_handle={0x77682a85, 0x0, 0x3}, @fda={0x66646185, 0xa, 0x0, 0x14}, @flat=@handle={0x73682a85, 0x1, 0x2}}, &(0x7f0000000700)={0x0, 0x18, 0x38}}}, @increfs={0x40046304, 0x3}, @acquire={0x40046305, 0x2}], 0xa0, 0x0, &(0x7f0000000840)="0da380c7e5a795a3de8ee4b2e6e7130b6c63753332989c1a4251418ea9d8ba6c13703be81e81902f1a02f5367018452ff9ecc539a9a23f415a1881bfedbfdf2ec0576de96201d142b8950205384254595523ee56a31d5586025ec43d57f7b7a051ac53ed8f2fcd3d97cf11510f9fa89aec3f0b5d500a56487562e3e3ed98c0e1ed8c7af6c8fce4b9d4b0aef93a659a1500ab1e4bac41ecc77ff849218fb9dd2c"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000002a40), 0x200, 0x0) ioctl$BLKREPORTZONE(r1, 0xc0101282, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2040, 0x110) (async) io_setup(0x7, &(0x7f0000000140)=0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) io_submit(r3, 0x1, &(0x7f0000001b00)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x7, 0x8, r5, 0x0, 0x0, 0x5}]) r6 = userfaultfd(0x1) io_submit(r3, 0x7, &(0x7f0000001780)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x5, r2, &(0x7f0000000200)="94c20a9a4fcad787286f7619501caed63d1d69fd70bbc5e6412dd5143d349a217d79ba956b35a83abc537e9c287dee73d07e84a1aa3c1b097dbc2f5e3913673124dc724fe6d607e8e3b710ad48f54370d3a7c2d10c6f224472985362662123b1eaaf76f25e91108c", 0x68, 0x3, 0x0, 0x1, r2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x6, r2, &(0x7f0000000300)="790e619a1835866deecf48f0e08b5c2e45d2a9497f840bf251923f664700226f4c729532af4aad63cd84b71b692da56847f338a96a6cf6069e0f7b917797893ac7ec80ce6e5a18cc06ce8d7f58f5883536a42b7373f28f11fdad9a33c451e297ee", 0x61, 0xbfdb}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x7, r2, &(0x7f00000003c0)="0a7856d188cdcff3ee1a13df31606d3c7253a21937e4bfcf2f2cf3e9b3e00e42c978f3823cf75ca0a320717c620feff5ffa8af1cc402", 0x36, 0x3, 0x0, 0x2, r2}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x5, 0x6, r0, &(0x7f0000002b80)="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", 0x1085, 0x100005, 0x0, 0x3}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x6, 0x8, r6, &(0x7f0000001480)="75120ff91a22ddeb490ee72274", 0xd, 0x200, 0x0, 0x2}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x5, 0xe, r0, &(0x7f0000001500)="dbe121471b70f70dcd293b3e9a29ebb43f82873978e4e537130f152d69ca98bfe44caaf58fbeacd5a9d593fc25a1ddf05eef61badb41d16534ea6db8f64d64131e13ea53027aa6d7fabe94a87cf4f39a9811c134fead35ef8d40b1ddd7e7f3e9efc5c3b99d5dfc49609558ebd44c17ee90fbb53813af552983914f284bc0f7661ffe2b93cbf78664ef23b63eafd50c8b9e870fcdffcebcb9a0c1c183bbeb4b4919622ab29f502ae8e07f18f57b703327dfa899450e57fb936d6ce27da0dda08dd0cb12f485ea7d43d1c9da57d053231b1d0222acaeccb6b2ed5e46bb3e66c391685e182b824caba6ae0ab1dc0fae1db582", 0xf1, 0x1, 0x0, 0x2, r2}, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x5, 0x10, r0, &(0x7f0000001640)="3f8925107cb24d7e8617852bed0e6fbf08424bff9152483020c488829ae0f520d529a82e3d96c23e8aa949a50678330690318bbc11c23a8ccbf07bd031ebaf4b3e729c6191671599b57f513a37f72ed4685ca73424c9394227f46eb4819f9fdcb303e1b3eb6ca1122800005c9c344fb126c82fdec4f2802ba936aeadcc6f211a765f5183a90352980862a566304c80eaf2f64bd5a05c3d552e331bc60afb1dc63c9e37cd3e590e488feb9dcb2fe788b9dd3bbd321817382bc7776019661cefa9fe4cc0c8c137209ec99be5fd8388cba0163306182613c74d6c6c17c23fb8390ea8fa0937d0897ded462a", 0xea, 0x9}]) (async) copy_file_range(r0, &(0x7f0000000500)=0x7a, r6, &(0x7f0000000540)=0x2, 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x0, 0xf}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) (async) r7 = syz_open_dev$loop(&(0x7f0000000480), 0x8, 0x8002) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80000) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r8, 0x80585414, 0x0) (async) ioctl$IOC_PR_RELEASE(r7, 0x401070ca, &(0x7f00000004c0)={0x6, 0x6}) 3m17.12903905s ago: executing program 0 (id=959): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r0, 0x4196ccce67868bab, 0x0, 0x80000}, 0x14}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff}) syz_clone3(&(0x7f0000000600)={0x200040000, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0xfffffffffffffff7) prctl$PR_GET_KEEPCAPS(0x7) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) 3m17.021988822s ago: executing program 0 (id=961): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x369a02, 0x109) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x369a02, 0x109) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000023c0)='fscrypt:', &(0x7f0000002400)='./file0\x00', r0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125b2ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb03bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2033aae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b85b7b26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1111c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c669bb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b2967cbfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d6748c2ce5bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4658098549646bd63175adf77b5cdcf102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4baea02fa76fb4830aebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f8426a9049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21abfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e0068607000000fb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9fb4000000f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002afea6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b46e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae66444a8f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0xdd52d6c}}, 0x1006) (async) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e24, 0x1000, @rand_addr=' \x01\x00', 0x4}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) (async) setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) (async) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) write$cgroup_subtree(r4, &(0x7f00000023c0)=ANY=[@ANYBLOB='1-2:5/', @ANYRES32=0x0], 0x31) (async) write$cgroup_subtree(r4, &(0x7f00000023c0)=ANY=[@ANYBLOB='1-2:5/', @ANYRES32=0x0], 0x31) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000180)=0x140, 0x4) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000180)=0x140, 0x4) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000200)=0x0) ioprio_set$pid(0x2, r6, 0x0) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) modify_ldt$read(0x0, 0x0, 0x0) read(r7, &(0x7f0000000080)=""/93, 0xffffff6c) 3m17.013211302s ago: executing program 0 (id=963): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, r2, 0x1, 0x70bd27, 0x8, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x28}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r7, 0x0, 0x0, 0x0, &(0x7f0000000080)) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/image_size', 0x20000, 0x20) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r8}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000280)={0x0, 0x18, 0xe}}, 0x10}], 0x0, 0x0, 0x0}) 3m16.895377714s ago: executing program 0 (id=964): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0xfffffffffffffffc, {0x88, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x4000, 0x25daa903, 0xffffffffffffffff, 0x0, 0xffffffff, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="002204", 0x3) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) 3m16.770583806s ago: executing program 0 (id=965): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x65, 0x0, &(0x7f0000000140)="6efa86ba44c4dcef07b59db7e9a27f48a6e930da91c08c993e71a416eb2235d1314cf41411de9aa874429c871656ff38656d42c237a569b22dc9923150d6eb5b381125c2173cdb022eb5d8fc7a7df730ad34e08a536eaca88d851d6505f7b2b6831911631a"}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x65, 0x0, &(0x7f0000000140)="6efa86ba44c4dcef07b59db7e9a27f48a6e930da91c08c993e71a416eb2235d1314cf41411de9aa874429c871656ff38656d42c237a569b22dc9923150d6eb5b381125c2173cdb022eb5d8fc7a7df730ad34e08a536eaca88d851d6505f7b2b6831911631a"}) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) (async) 3m16.750999886s ago: executing program 33 (id=965): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x65, 0x0, &(0x7f0000000140)="6efa86ba44c4dcef07b59db7e9a27f48a6e930da91c08c993e71a416eb2235d1314cf41411de9aa874429c871656ff38656d42c237a569b22dc9923150d6eb5b381125c2173cdb022eb5d8fc7a7df730ad34e08a536eaca88d851d6505f7b2b6831911631a"}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x65, 0x0, &(0x7f0000000140)="6efa86ba44c4dcef07b59db7e9a27f48a6e930da91c08c993e71a416eb2235d1314cf41411de9aa874429c871656ff38656d42c237a569b22dc9923150d6eb5b381125c2173cdb022eb5d8fc7a7df730ad34e08a536eaca88d851d6505f7b2b6831911631a"}) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) (async) 3m14.928251364s ago: executing program 2 (id=996): ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x18) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$incfs(r1, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000003c0)=""/115, 0x73}], 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x40106726, &(0x7f00000000c0)) socketpair(0x1f, 0x4, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mount$incfs(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000004640)=[{{&(0x7f0000000180)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/85, 0x55}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000000400)=""/193, 0xc1}, {&(0x7f0000000500)=""/161, 0xa1}], 0x4}, 0x4}, {{&(0x7f0000000340)=@xdp, 0x80, &(0x7f0000000900)=[{&(0x7f00000005c0)=""/255, 0xff}, {&(0x7f00000006c0)=""/163, 0xa3}, {&(0x7f0000000780)=""/150, 0x96}, {&(0x7f0000000840)=""/192, 0xc0}], 0x4, &(0x7f0000000940)=""/160, 0xa0}, 0x5}, {{&(0x7f0000000a00)=@alg, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000a80)=""/22, 0x16}], 0x1, &(0x7f0000001180)=""/4096, 0x1000}, 0x82d}, {{&(0x7f0000000b00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000b80)=""/162, 0xa2}, {&(0x7f0000000c40)=""/7, 0x7}, {&(0x7f0000000c80)=""/28, 0x1c}], 0x3, &(0x7f0000000d00)=""/133, 0x85}, 0x6}, {{&(0x7f0000000dc0)=@nfc, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e40)=""/184, 0xb8}, {&(0x7f0000002180)=""/4096, 0x1000}], 0x2, &(0x7f0000000f40)=""/106, 0x6a}, 0x1}, {{&(0x7f0000000fc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f00000032c0)=[{&(0x7f0000001040)=""/148, 0x94}, {&(0x7f0000003180)=""/87, 0x57}, {&(0x7f0000003200)=""/136, 0x88}, {&(0x7f0000001100)=""/34, 0x22}], 0x4, &(0x7f0000003300)=""/208, 0xd0}, 0xe}, {{&(0x7f0000003400)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000004500)=[{&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f0000004480)=""/74, 0x4a}], 0x2, &(0x7f0000004540)=""/226, 0xe2}, 0x2}], 0x7, 0x2041, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r6, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x80, 0x4, 0x0, @loopback, @broadcast}}}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendfile(r0, r0, 0x0, 0x7ffff000) getpid() 3m14.855713985s ago: executing program 2 (id=997): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0xb2) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400) epoll_create1(0x0) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000140)={r1, 0x70, 0x1000}, 0x0, &(0x7f0000000180)="2493906180c24c70888e07ce58e7fc788f8bd315a89d7009311ac85691132313c3f30704e45f0c5501f398d9299d10b4da40cf91f2e3dda58bcb130dc84f0a5c4964cc9996f028c767d3fbecc88f3480e3b58d60f0005ac37238942af1fece6ff436d579f97e25ab41ede8af4c43dc50", &(0x7f0000000200)=""/4096) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') inotify_init1(0x400) read$eventfd(r2, &(0x7f0000000080), 0x8) ioctl$KVM_CREATE_VCPU(r0, 0x7709, 0x2) 3m14.838314806s ago: executing program 2 (id=998): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = userfaultfd(0x80001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, 0x4000}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x91, 0x20, 0x40, 0x738, 0x4540, 0xd8f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xeb, 0x8, 0x2, 0xe2, 0x5d, 0x9b, 0x6, [], [{{0x9, 0x5, 0x2, 0x8, 0x400, 0x7, 0xae, 0x18}}, {{0x9, 0x5, 0xf, 0xc, 0x20, 0x6, 0x8, 0x1}}]}}]}}]}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28131, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x80, 0x8000, 0xb, 0x10000006, {{0xa, 0x4, 0x2, 0x5, 0x28, 0x66, 0x0, 0xff, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @rand_addr=0x64010101, {[@end, @ra={0x94, 0x4, 0x1}, @generic={0x0, 0xc, "3d0cec10bad8b17f8d8b"}]}}}}}) r5 = syz_open_procfs(0x0, &(0x7f0000004440)='net/ptype\x00') read$FUSE(r5, &(0x7f0000004480)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r7 = epoll_create(0x3) epoll_wait(r7, &(0x7f0000000000)=[{}], 0x1, 0x1ff) setuid(r6) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x175ed7016f3e6230}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=@getsadinfo={0xcc, 0x23, 0x200, 0x70bd25, 0x25dfdbff, 0x0, [@policy={0xac, 0x7, {{@in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e22, 0x0, 0x4e23, 0x0, 0x2, 0x80, 0x20, 0x3b, r4, r6}, {0xfff, 0x0, 0x6, 0x7, 0x0, 0x6, 0x2, 0x4dcd}, {0x3, 0x8, 0x4, 0x3}, 0x0, 0x6e6bb3, 0x1, 0x1}}, @offload={0xc, 0x1c, {r8, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x40000c4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @flat=@weak_binder={0x77622a85, 0xa, 0x3}, @flat=@weak_binder={0x77622a85, 0x1, 0x4}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303}, "74b658a7aa0b2d59", "a4918a29c9ea8feb40a19d514e52f36f", "c7e0a3c2", "ff9019438d66c38c"}, 0x28) ppoll(&(0x7f0000000600)=[{0xffffffffffffffff, 0x100}, {r1, 0x4088}, {r0, 0x8040}, {r2, 0xc0}, {r5, 0x8600}, {0xffffffffffffffff, 0xb009}, {0xffffffffffffffff, 0xa18}, {0xffffffffffffffff, 0x2}], 0x8, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 3m14.518191341s ago: executing program 2 (id=999): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000000)=0x2, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r1}, 0x10) (async) pread64(r0, &(0x7f00000000c0)=""/2, 0x2, 0x5) bind$can_raw(r0, &(0x7f0000000100), 0x10) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) ioctl$F2FS_IOC_SEC_TRIM_FILE(r2, 0x4018f514, &(0x7f0000000200)={0x9c, 0x6, 0x2}) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000240)={0x6c, 0x1, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1]}, 0x10) (async) tee(r2, r2, 0x5, 0x0) (async) sendmsg$can_bcm(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x1d, r4}, 0x10, &(0x7f0000000340)={&(0x7f00000002c0)={0x7, 0x0, 0x58a3, {0x77359400}, {0x77359400}, {0x4, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1}, 0x4, 0x1, 0x0, 0x0, "d0a71cbb2a7e290132251ffca5153a8834328eec8d63c93dcfc6fbe774d37778bd8d19056d3c235c052744a09186392239220c7132c47591c7b93f3751525452"}}, 0x80}, 0x1, 0x0, 0x0, 0x4040001}, 0x8811) (async) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r6 = signalfd4(r0, &(0x7f0000000400)={[0x16c90632]}, 0x8, 0x0) (async) read$FUSE(r5, &(0x7f0000000440)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000002480)={0x50, 0x0, r7, {0x7, 0x2b, 0x4, 0xffffffffc0080880, 0xc09, 0x7, 0x5af3, 0xd2, 0x0, 0x0, 0x10, 0x2}}, 0x50) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f0000002500), 0x4) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000004b00)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@mcast2}}, &(0x7f0000004c00)=0xe8) (async) statx(r5, &(0x7f0000004c40)='./file0\x00', 0x0, 0x4, &(0x7f0000004c80)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000004d80)=0x0) syz_fuse_handle_req(r5, &(0x7f0000002540)="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", 0x2000, &(0x7f00000052c0)={&(0x7f0000004540)={0x50, 0x0, 0x7, {0x7, 0x2b, 0x1, 0x8000000, 0x6, 0x529f, 0x8, 0x3, 0x0, 0x0, 0x40, 0x10}}, &(0x7f00000045c0)={0x18, 0xffffffffffffffda, 0x5, {0x5}}, &(0x7f0000004600)={0x18, 0x0, 0x6, {0x1}}, &(0x7f0000004640)={0x18, 0xffffffffffffffda, 0x9, {0x1}}, &(0x7f0000004680)={0x18, 0x0, 0x8, {0x4}}, &(0x7f00000046c0)={0x28, 0x0, 0xf46, {{0x1000, 0x2, 0x2, r10}}}, &(0x7f0000004700)={0x60, 0x0, 0x8000000000000001, {{0x0, 0x100000000, 0x2, 0xd3, 0x40, 0x5, 0x81, 0xf5a}}}, &(0x7f0000004780)={0x18, 0xfffffffffffffff5, 0x0, {0x5}}, &(0x7f00000047c0)={0x11, 0x0, 0x3ff, {'\x00'}}, &(0x7f0000004800)={0x20, 0xffffffffffffffda, 0x0, {0x0, 0x1c}}, &(0x7f0000004840)={0x78, 0x0, 0x4d6c, {0x8, 0x7fffffff, 0x0, {0x1, 0xffff, 0x8001, 0x4, 0x0, 0x7fff, 0x8, 0x8, 0x5, 0x6000, 0xd61, r8, r9, 0x0, 0x2}}}, &(0x7f00000048c0)={0x90, 0x0, 0x1, {0x2, 0x2, 0x6, 0x4, 0x3, 0x7fffffff, {0x0, 0xce, 0x9, 0xee, 0x5, 0x4, 0x586a, 0xe0f3, 0x1, 0x8000, 0x10001, r8, r9, 0x7fff, 0xc}}}, &(0x7f0000004980)={0x150, 0x0, 0x1, [{0x5, 0x8, 0x12, 0x9, './cgroup.net/syz0\x00'}, {0x0, 0x6, 0x0, 0x3b}, {0x4, 0x3, 0x1, 0x46d9, '+'}, {0x6, 0xfffffffffffffff3, 0x6, 0xfffffffb, 'vcan0\x00'}, {0x6, 0xffffffffffffffff, 0x1, 0x1000, '\x00'}, {0x6, 0x1ff, 0x19, 0x3, '/selinux/avc/cache_stats\x00'}, {0x1, 0xdb9, 0x16, 0x3, 'cpuset.effective_mems\x00'}, {0x2, 0xfffffffffffffffc, 0x16, 0x2, 'cpuset.effective_mems\x00'}]}, &(0x7f0000004dc0)={0x298, 0x0, 0x1, [{{0x3, 0x1, 0x2, 0x6, 0x0, 0x8, {0x0, 0x0, 0xfffffffffffffe83, 0x5, 0x3, 0x5, 0x4, 0xc7, 0x80000001, 0x8000, 0x4, r12, r9, 0x7ff, 0xca22}}, {0x4, 0x6, 0x0, 0xfffffffb}}, {{0x1, 0x0, 0xdba1, 0x633, 0x7, 0x7, {0x0, 0x8, 0x4, 0xc8, 0x2, 0x80, 0x1, 0x85b, 0x6, 0xa000, 0x2, r13, r9, 0x3, 0x3}}, {0x4, 0x6, 0x3, 0x8, ']\'$'}}, {{0x5, 0x0, 0x5, 0x8000, 0xfffffffc, 0xa, {0x4, 0x5d, 0x161babc3, 0xa, 0x1ff, 0x5, 0x1, 0x100, 0xa, 0x2000, 0x6, 0xffffffffffffffff, r9, 0x4, 0x4}}, {0x1, 0x3, 0x6, 0x4, 'vcan0\x00'}}, {{0x1, 0x3, 0xffffffffffffffff, 0x8, 0x14aa, 0xf93f, {0x5, 0xf59, 0x0, 0x1, 0x80000000, 0x100000000, 0xff, 0x5, 0x6, 0x6000, 0x6, r14, r9, 0x0, 0xfffffff6}}, {0x2, 0x1, 0x16, 0xe, 'cpuset.effective_mems\x00'}}]}, &(0x7f0000005080)={0xa0, 0x0, 0x668, {{0x3, 0x1, 0xffffffffffffff80, 0xb, 0x2, 0x0, {0x2, 0x1, 0x5, 0x5, 0xf, 0x2, 0x8, 0xfffffc00, 0x2, 0x1000, 0xc8c, r8, r9, 0x5, 0x5}}, {0x0, 0x10}}}, &(0x7f0000005140)={0x20, 0x0, 0x4, {0x6cb3, 0x4, 0x6, 0x800}}, &(0x7f0000005180)={0x130, 0x0, 0x9, {0x0, 0x5, 0x0, '\x00', {0x1, 0x6, 0x5, 0x3, r8, r9, 0x4000, '\x00', 0xc0b6, 0xfffffffffffffffe, 0xff, 0xb3, {0x0, 0x3}, {0x9, 0x81}, {0x1, 0x3}, {0x2, 0xffffffff}, 0x10001, 0x48, 0x9, 0x87}}}}) (async) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000005480)={&(0x7f0000005380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000005440)={&(0x7f00000053c0)={0x60, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4d}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x73}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x8091) add_key(&(0x7f00000054c0)='cifs.idmap\x00', &(0x7f0000005500)={'syz', 0x3}, &(0x7f0000005540)="1cd3242e51f9790a335d60d05407f8d1cf6f54c134f6cc99d88c749b34286e23a48438b92af9898f5b7c619c8988729a0a187b925c3b148f3f3efe13f1e1cd01c8710afcdafd38dbbfa69ae2166a4138423de6c0203808c16864350c15af60fc4cd6dca0581538cb9e6518597b79f5f513b744620ab612f07858765c70b23e2db0d0c68bf21818ea6adaf65dcc38bd5512306e4b96a1ba487fda76c62987697722638a2c80ef2d71a1bb3be3ce6d5d8ff16d463b0f18284afab1a688840bf74463ac46a01824206b919b649c7fc43bcb", 0xd0, 0xfffffffffffffffe) (async) ioctl$SNAPSHOT_UNFREEZE(r3, 0x3302) (async) execve(&(0x7f0000005640)='./file0\x00', &(0x7f0000005800)={[&(0x7f0000005680)='\xfa\x00', &(0x7f00000056c0)='cifs.idmap\x00', &(0x7f0000005700)='+', &(0x7f0000005740)='\x00', &(0x7f0000005780)='/selinux/avc/cache_stats\x00', &(0x7f00000057c0)='$\x00']}, &(0x7f0000005940)={[&(0x7f0000005840)='cpuset.effective_mems\x00', &(0x7f0000005880)='\\/\x00', &(0x7f00000058c0)='syz', &(0x7f0000005900)='\'\'']}) r15 = openat$cgroup_ro(r5, &(0x7f0000005980)='cgroup.controllers\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r15, 0x80049370, &(0x7f00000059c0)) (async) mount$fuse(0x0, &(0x7f0000005a00)='./file0\x00', &(0x7f0000005a40), 0x1, &(0x7f0000005a80)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r13}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[{@default_permissions}], [{@smackfsroot={'smackfsroot', 0x3d, 'cgroup.controllers\x00'}}, {@dont_appraise}, {@context={'context', 0x3d, 'system_u'}}, {@subj_role={'subj_role', 0x3d, '\\/\x00'}}, {@dont_measure}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@pcr={'pcr', 0x3d, 0x1b}}]}}) (async) sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000005d00)={&(0x7f0000005bc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000005cc0)={&(0x7f0000005c40)={0x60, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @loopback}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010101}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast2}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r11}, @GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040000}, 0x891) 3m14.517663231s ago: executing program 2 (id=1000): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/prev\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0xfe26, 0x800) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000380), 0x228280, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x3002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x29, 0x805, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x1001, 0x2}, 0x1c) r6 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000300)=@req={0x10001, 0x4, 0x200003a2, 0x7fff}, 0x10) sendmsg$tipc(r5, &(0x7f0000000600)={&(0x7f0000000180)=@id={0x1e, 0x3, 0x1, {0x4e22, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48154}, 0x4008011) sendto(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x100, 0x100) open_tree(r9, &(0x7f0000000140)='./file0\x00', 0x1100) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0xc0000, 0x0) read(0xffffffffffffffff, &(0x7f0000000240)=""/123, 0x7b) socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) 3m13.95441292s ago: executing program 2 (id=1010): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000080)={0x9, 0x6, 0x3, 0x3, 0x0, [0xffffffff, 0x80000000, 0x10, 0x14c]}) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r1, &(0x7f0000000140)={0x0, 0x38, &(0x7f00000000c0)={&(0x7f0000000700)={0x14, 0x15, 0x12b, 0x70bd28, 0x25dfdbfc, {0xa, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008941}, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r4) (async) r5 = dup(r4) r6 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) (async) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_uid={'access', 0x3d, r7}}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_uid={'access', 0x3d, r7}}]}}) fchdir(r2) (async) fchdir(r2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') r8 = syz_open_dev$usbmon(&(0x7f0000000000), 0x2df, 0x80) ioctl$MON_IOCG_STATS(r8, 0x80089203, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) (async) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r9, &(0x7f0000002f40)={0x2020}, 0x2020) 2m58.863619182s ago: executing program 34 (id=1010): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000080)={0x9, 0x6, 0x3, 0x3, 0x0, [0xffffffff, 0x80000000, 0x10, 0x14c]}) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r1, &(0x7f0000000140)={0x0, 0x38, &(0x7f00000000c0)={&(0x7f0000000700)={0x14, 0x15, 0x12b, 0x70bd28, 0x25dfdbfc, {0xa, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008941}, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r4) (async) r5 = dup(r4) r6 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) (async) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_uid={'access', 0x3d, r7}}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_uid={'access', 0x3d, r7}}]}}) fchdir(r2) (async) fchdir(r2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') r8 = syz_open_dev$usbmon(&(0x7f0000000000), 0x2df, 0x80) ioctl$MON_IOCG_STATS(r8, 0x80089203, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) (async) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r9, &(0x7f0000002f40)={0x2020}, 0x2020) 16.820124561s ago: executing program 4 (id=3228): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0xfffffffffffffffc, {0x88, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x4000, 0x25daa903, 0xffffffffffffffff, 0x0, 0xffffffff, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000200)="205dd03ef2b4f47dcfc191ad6177c88559d56d0000a0794901c88009764378ce753afe6e3dd6f077a4968f7d8850e1fb1c3af530eeb217f69df3da2c4667c04b781af145e62576dfdc93d2037934826796d593fa56e8013bf516e435dc870afa96363a354a8db71ffb00717890b0b5a70fd9f5d52fae0c5946e4311ff25347d580c9416b1386333956450c780e7f43fb961e39df37bb25531c1c4f75a9660c891ee9930fae7e7c30fb085541326ab5367cae642090b380ad5f432594fc1c00f2707a3d01", 0xc4}], 0x1}, 0x2) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x8, 0x0, 0x2, 0x2, 0x4, 0x8}, &(0x7f00000000c0)=0x20) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) 16.794341371s ago: executing program 4 (id=3229): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r1, &(0x7f0000000a40)={0x2020}, 0x2020) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10b, 0x2}) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc9a, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0xfffffffffffffce6}}, 0x10}], 0x0, 0x0, 0x0}) 16.793390151s ago: executing program 4 (id=3230): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x15, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="10030600e4ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) close(r2) syz_clone(0x88280, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 16.734344892s ago: executing program 4 (id=3231): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000008, 0x12, r0, 0x2b09d000) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0xffffffc0}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000940)=""/4089, 0xff9}, {&(0x7f0000003180)=""/172, 0xac}, {&(0x7f0000000580)=""/259, 0x103}, {&(0x7f0000000780)=""/241, 0xf1}, {&(0x7f00000034c0)=""/197, 0xc5}, {&(0x7f00000035c0)=""/61, 0x3d}, {&(0x7f0000000200)=""/248, 0xf8}, {&(0x7f00000003c0)=""/164, 0xa4}, {&(0x7f0000000140)=""/88, 0x58}], 0x9}, 0x1}, {{0x0, 0x0, 0x0}, 0xd}], 0x4, 0x2100, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000001980)={0x4, [0x0, 0x0, 0x0, 0x0]}) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x2}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000c40)={0x40000000, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e21, @local}}}, 0x108) socket(0x5, 0x2, 0x9) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f00000001c0)=0x8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000c40)={"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"}) preadv(r2, &(0x7f0000000700)=[{&(0x7f0000003600)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/155, 0x9b}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000380)=""/68, 0x44}, {&(0x7f0000000400)=""/124, 0x7c}, {&(0x7f0000000480)=""/245, 0xf5}, {&(0x7f0000000580)=""/187, 0xbb}, {&(0x7f0000000640)=""/130, 0x82}, {&(0x7f0000001d80)=""/4096, 0x1000}], 0x9, 0x7, 0x1d) r6 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(r6, 0x545c, 0x200000000000000) r7 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x2) syz_usb_control_io(r7, &(0x7f0000000440)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="20036a0000006a05ba0f"], 0x0, 0x0, 0x0, 0x0}, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x1180, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000001940)='./binderfs/binder0\x00', 0x802, 0x0) r8 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) 16.23543179s ago: executing program 4 (id=3236): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x4d9, 0xa067, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x20, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xfe, 0x9}}}}}]}}]}}, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) r3 = eventfd(0x6) io_submit(r2, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x8, r3, 0x0, 0x0, 0x2a}]) syz_usb_control_io$hid(r1, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80040, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xaece, 0x1) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002208000000aa"], 0x0}, 0x0) socket(0x80000000000000a, 0x2, 0x0) r7 = syz_usb_connect$printer(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) io_setup(0x6, &(0x7f0000000000)) io_setup(0x8, &(0x7f0000000040)) io_setup(0x5, &(0x7f0000000080)) io_setup(0x7fff, &(0x7f00000000c0)) io_setup(0x10, &(0x7f0000000100)) syz_usb_disconnect(0xffffffffffffffff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x4a900) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 16.034582253s ago: executing program 4 (id=3238): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc018aec0, &(0x7f00000000c0)={0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r4, 0x4e, 0x0) write$binfmt_script(r3, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "d1113f85f729881f5f36ae4bd0caf8ce03aa27c8804d641e59040000007fd884a79195232e281832a5caaab9769dc24d77dddb3f2599eebf19fbd7aadcba6004ddfc054e"}, 0x4f) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f0000000000)=[@release], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 15.966867794s ago: executing program 35 (id=3238): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc018aec0, &(0x7f00000000c0)={0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r4, 0x4e, 0x0) write$binfmt_script(r3, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "d1113f85f729881f5f36ae4bd0caf8ce03aa27c8804d641e59040000007fd884a79195232e281832a5caaab9769dc24d77dddb3f2599eebf19fbd7aadcba6004ddfc054e"}, 0x4f) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f0000000000)=[@release], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 4.56286482s ago: executing program 7 (id=3466): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) pipe(0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000280)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f00000021c0), 0x4f, 0x3}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet6(r1, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4a21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x1000}, 0x1c, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB="e2100000"]) 4.278436444s ago: executing program 7 (id=3473): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x1) r1 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x5}) ioprio_set$pid(0x2, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) read(r0, &(0x7f0000000140)=""/103, 0x67) 3.475660077s ago: executing program 7 (id=3481): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$getflags(r1, 0x401) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x24, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}, @flat=@handle={0x73682a85, 0x1100, 0x2}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 3.461081247s ago: executing program 7 (id=3482): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xfffffffc, 0x400, 0x3, 0x0, 0x1a, "d9000000000000000b00000000000000008000"}) write$binfmt_aout(r0, &(0x7f00000007c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRES8=r0, @ANYRES32=0x0, @ANYRESDEC=r0], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x80000001, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006c40)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095fc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) read$FUSE(r2, &(0x7f0000003980)={0x2020}, 0xfe57) read$FUSE(r2, &(0x7f0000000940)={0x2020}, 0x2020) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1000, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) r6 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000540)=ANY=[@ANYRES64=r4], 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f00000005c0)={0xff, 0x7, 0x8000000, 0x522}, 0x10) syz_usb_control_io(r6, 0x0, 0x0) r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) connect$bt_l2cap(r5, &(0x7f0000000580)={0x1f, 0x4174, @any, 0x9, 0x2}, 0xe) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000500)=ANY=[@ANYBLOB="00185ffaaeebfe6fe4330d9e24ce46d4eaeffaebd05141eb370e6138bf8f27caffffffd870c1e95ca0bd955c9a8bc61ca7"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000640)={0x0, 0x9, 0x5, "9c5a2259a3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="403a00000f884001751b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r7, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x20, 0x3, 0x86, {0x86, 0x30, "fb6c794d262c19e4902365f552b4beab98b49b15b0308a474063cd4356dfd8fe003b8cc9976d92950aa6b96a3aacf0f9ec10072195221beef3e73561777ba59e5152de2fa301386ae9f3c84c566eaeed119a6da451c6091b4d63084239c8b2c716453891324384d03986550b27ebd6ef1b53afc2c202038c945e5d9d643cdc63b1832325"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x30, 0x5a, "144fdfeae0c08bc10da171a0db3c675edcf3220291bb4e2475f7877da380a57ba6d0f0b0089379da9d4e83c91d061957bf75193b0ee997d79e36c35dcf3a6e213ae0ded2545b27a9866bf0448ce9aa1befd5f8766807adac2a02"}, &(0x7f0000000200)={0x0, 0xa, 0x1}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0xffff, 0x0, 0x0, 0x0, 0x8001, 0x8e5, 0x100, 0x9, 0x4, 0x0, 0x4, 0xd}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0xb}, &(0x7f0000000300)={0x20, 0x83, 0x2}, &(0x7f0000000340)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000380)={0x20, 0x89, 0x2, 0x1}}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r8, 0x890c, &(0x7f0000000340)={@dev={0xfe, 0x80, '\x00', 0xe}, @empty, @ipv4={'\x00', '\xff\xff', @empty}, 0x200, 0xb, 0xf78, 0x500, 0x5, 0x1000000}) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 2.202298836s ago: executing program 5 (id=3515): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x3a, 0x1a, 0x0, 0x0) syz_open_procfs(0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) socket$inet6(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {r1, r2+60000000}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendfile(r0, r0, 0x0, 0x7ffff000) 2.201947716s ago: executing program 5 (id=3516): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000040), 0xd, 0x101000) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x804) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = syz_io_uring_setup(0x5d02, &(0x7f0000000000)={0x0, 0x6f3, 0x80, 0x1, 0x51}, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x500, &(0x7f0000000080)={0x0, 0x0, 0xb2, 0x0, 0x4, 0x0, r1}, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$hiddev(&(0x7f0000000040), 0xd, 0x101000) (async) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x804) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) syz_io_uring_setup(0x5d02, &(0x7f0000000000)={0x0, 0x6f3, 0x80, 0x1, 0x51}, &(0x7f0000000100), &(0x7f0000000140)) (async) syz_io_uring_setup(0x500, &(0x7f0000000080)={0x0, 0x0, 0xb2, 0x0, 0x4, 0x0, r1}, 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) 1.708802744s ago: executing program 5 (id=3520): r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)={0x2000000}) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x13f74540403f8301}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000021c0)=[@dead_binder_done, @dead_binder_done, @request_death={0x400c630e, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)={@fd, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd}, &(0x7f00000020c0)}}], 0xffffffffffffff95, 0x0, 0x0}) 1.697594294s ago: executing program 5 (id=3521): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) (rerun: 32) 1.642668695s ago: executing program 5 (id=3522): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000002117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES16=r4]) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async, rerun: 64) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYRES32=r4]) (async, rerun: 64) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0x9250) (async) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r5, 0x0) (async) poll(&(0x7f0000000080)=[{r3, 0x8021}, {r2, 0x4082}], 0x2, 0x7052) 1.053939614s ago: executing program 1 (id=3528): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0xfe37, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f00000012c0)=[{&(0x7f0000000080)=""/152, 0x98}], 0x1, &(0x7f00000015c0)=[{&(0x7f0000001340)=""/189, 0xbd}], 0x1, 0x0) syz_open_procfs(r2, &(0x7f00000001c0)='net/ip6_tables_names\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000224effffffff", 0x58}], 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x0, 0xf}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 998.566225ms ago: executing program 1 (id=3532): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000740)={0x30}, 0x30) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x4000010, r1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x14, r3, 0x701, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8814) syz_genetlink_get_family_id$team(&(0x7f0000000140), r2) socket$igmp6(0xa, 0x3, 0x2) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)={0x4}) 998.323915ms ago: executing program 1 (id=3534): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000840)=ANY=[@ANYBLOB="cc00000001020108000000000000000002000008b80001800c00028005000100840000000c00028005000100060000002c000180"], 0xcc}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000080) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000140)=[@dead_binder_done], 0x0, 0x0, &(0x7f00000002c0)}) 930.719696ms ago: executing program 1 (id=3536): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) fadvise64(r0, 0x1003, 0x9, 0x5) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f0000000040)=0x2, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) unshare(0x22020600) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = getpid() r3 = gettid() rt_tgsigqueueinfo(r2, r3, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x3}) r4 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) ppoll(&(0x7f0000000140)=[{r4}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a13, 0x202812, r0, 0x7dfff000) 831.109927ms ago: executing program 6 (id=3540): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) writev(r0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000200)="100e670873968ef09ad2dc91a457ec22b19fc326b944f5c4c818", 0x1a}], 0x2) socket$inet6(0xa, 0x3, 0x1000) close_range(r0, r0, 0x0) 820.584817ms ago: executing program 6 (id=3541): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) futex(&(0x7f0000000140)=0x2, 0xc, 0x1, 0x0, &(0x7f0000000300), 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) unshare(0x4020000) 819.479487ms ago: executing program 5 (id=3542): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x5, 0x0, &(0x7f0000000140)=[@request_death], 0x0, 0x0, 0x0}) syz_usb_connect$printer(0x0, 0x2d, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/74, 0x32a000, 0x800, 0x0, 0x3}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000080)={0x21, 0x3, 0x0, {0x6}}, 0x21) read$FUSE(r2, &(0x7f0000000180)={0x2020}, 0x2020) 818.942677ms ago: executing program 6 (id=3543): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000008440)=[{{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000003140)="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", 0x1000}, {&(0x7f0000000cc0)="bb771a8052ac677dc9f88509aefb3864e6738abcea4526d8919f68279bf33a7297", 0x21}], 0x2, &(0x7f00000042c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x101}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0xae, [@multicast2, @empty]}, @end, @timestamp_prespec={0x44, 0x34, 0x55, 0x3, 0xe, [{@multicast1, 0x5}, {@private=0xa010100, 0x8000}, {@private=0xa010100, 0xa}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@multicast2, 0xb66}, {@multicast2, 0x7}]}, @timestamp_addr={0x44, 0x1c, 0xe1, 0x1, 0xf, [{@multicast2, 0x40000000}, {@multicast1, 0x4}, {@rand_addr=0x64010102, 0x8}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x29}, @empty}}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffc}}], 0x160}}, {{&(0x7f0000004440)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f00000045c0)=[{&(0x7f0000004480)="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", 0xfa}, {&(0x7f0000004580)="44bf432a85cb6b11994910267207eecf12bb7a801d9aae841f", 0x19}], 0x2, &(0x7f0000004600)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xfa}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}], 0x48}}, {{&(0x7f0000004680)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000005b40)=[{&(0x7f00000046c0)="2aa96e248ddf1d5df59daa5d18731ca5ac2ccdbe51cdb1908b639f450cefa510", 0x20}, {&(0x7f0000004700)="3405dc65f65baea2cd0ca5ce3cd62584eaa00f0d25fdbfc68c379dc9ac4ea50d6716bcffbb718b9db85687575f791e654d857582c67421654d14a13e76fb13d077bd8f30f89415f2ace89148f6c0fa704e2805852943304eadec548ce3129377e3f818633a8f0c18d4a301b914dffccea092b5a0c202abc23c066e1586023438c1002e124a43206ef3b272848bcfa35db6d49f75c36c8713f037e4edf822e59e1e5f61de80e77896a916e687198f7ce247efbafeeb8669f05dd125f467b4431c3a3d9eafc8e00eb341fb68ba857ec8db664f858bd830f9366ecd344dad9d4330b29222516e8d49", 0xe7}, {&(0x7f0000004800)="f79e56531471a691ad56af8b761537f62465d1e715c1bf414ce29d43d81d3ab59174b062c85596109ed02ce0f3a45c32c37b6807e7e9cbff44edf57297a53f032ce49b3e9ce45c685c613f81d309d311d2abc08eddd7a48332e7e0874f50ced9902fc3086ad3a1dbf7ba39dc322cd77a4f7c55d2ea343ce426cfae1947065cccd4be14964c44173e6953a756711fd0453ac476db47acc8b08f1935eebd4a83afb65944c3cf32dc277d4812c0c688bddf7effd2fb38c1e10a279cb072db968b55288b94aac8f98732f7b4a238235494fc9ed858f27d74", 0xd6}, {&(0x7f0000004900)="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", 0x1000}, {&(0x7f0000005900)="6a273ba41ce9294ee8c62f36702f05d9d5f24bfba9cda03a3f79b16cebc05be7773b0dd1c4bfe5901ad0879246fc3420c25d91d6b0ba7b060ab3de74e83342e201e9258da95b3b61817b3cbab70e4f0963eebf3493edff0ee3907517f8734c10f2283703bca484ebfe1c666af0e7afb9684a575d18c642ae3cef418be594c66cc15ce4776f1e5385f3dc60f5ef97e58922cfb45169e06b50f6a54c481f61ea59b8d3b4f7290e9ae1314d25d531156242ba47dd23b850ad5d7db73c2295596e9c8a0ae781ec6ea385dd3068a7428c925ee45c20843419d65b28be0b9b7121a3d638c389d6ca5d64", 0xe7}, {&(0x7f0000005a00)="a122810c0513abdf0d4f87fd9961d5775b250ccc3f5bca6dde9bfac959f80c2469ac9e44200faeac4cd29122fa4bbfafc14720dda8a87024d2", 0x39}, {&(0x7f0000005a40)="61b8be537dc8d136b723a7ad6b180de61552912fc731f2db3253c2a4e8c4137c48ce7016c2b0f6b31410475d2b753105a3f04fc7dc40e5c6f02a98b7694667566fde22146961c624373600c1819a39eb864499ac7b3fca8068864e68d32176cd16ce21725b19145ef9bf8fdde440f9a551752930e4b7974128f93bdbbc7f8e95992df2a069bf8ae3908c8e24debae78b5c76bf267912f2f119607c267881c020cdeee7bfcd393d71e339ea9e5df980caa3bbedfe272e14afeb870e6a5ccded60f1b06c201cbd4587f04558bbd3d368347f988cd56cae", 0xd6}], 0x7, &(0x7f0000005bc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0x91, 0x3, 0x8, [{@broadcast, 0x6}, {@empty, 0x1}, {@multicast1, 0x7}, {@dev={0xac, 0x14, 0x14, 0x20}, 0xffff8001}, {@empty, 0xff}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x101}}], 0x70}}, {{0x0, 0x0, &(0x7f0000006340)=[{&(0x7f0000005c80)}, {&(0x7f0000005d80)="94b446788d1f", 0x6}, {&(0x7f0000005e80)="e913424b5b", 0x5}, {&(0x7f0000005f00)="f5140fd5d12c", 0x6}, {&(0x7f0000006000)="1477cc489b", 0x5}, {&(0x7f0000006100)="a4e3ef", 0x3}], 0x6, &(0x7f0000006400)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xaef7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}, @ip_retopts={{0x18, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0x86, 0x0, 0x4, [0xfffffff5]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10}}], 0xb0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x4000000) 804.655088ms ago: executing program 6 (id=3544): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000740), 0x0, 0x0, 0x0}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r5) (async) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) (async, rerun: 32) ptrace$cont(0x20, r6, 0x0, 0x0) (async, rerun: 32) ptrace$cont(0x1f, r6, 0xfffffffffffffffc, 0x3) (async, rerun: 64) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') (rerun: 64) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x20c5, 0x0) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x540b, &(0x7f0000000140)) (async) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000b000054d560b000000019003000000000000"]) (async) close(r4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 730.587799ms ago: executing program 6 (id=3545): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) sendmsg$IPCTNL_MSG_EXP_NEW(r1, 0x0, 0x24000840) timer_create(0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0xb, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) pipe(&(0x7f00000001c0)) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) (async) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r1, 0x0, 0x24000840) (async) timer_create(0x0, 0x0, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_int(r3, 0x29, 0xb, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 729.718189ms ago: executing program 6 (id=3546): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x30) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa1, &(0x7f0000000340)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f, 0x3, 0x1, 0xb, 0x10, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x2}, [@selector_unit={0x8, 0x24, 0x5, 0x2, 0x79, "f395bb"}, @feature_unit={0xd, 0x24, 0x6, 0x5, 0x5, 0x3, [0x4, 0x2, 0x8], 0x1}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x305, 0x6, 0x9, 0x8, 0x80, 0x4}, @feature_unit={0xf, 0x24, 0x6, 0x6, 0x4, 0x4, [0x8, 0x6, 0x7, 0x9], 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0x4, 0x0, {0x7, 0x25, 0x1, 0x81, 0x4, 0x462}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x7f, 0x1, 0x5, {0x7, 0x25, 0x1, 0x82, 0x80, 0x3}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd(0x3) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000000c0)={0xefff, 0x11101000, 0x8, r5, 0x8}) syz_clone3(&(0x7f0000000580)={0x80002000, &(0x7f0000000080), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0xb}, &(0x7f00000003c0)=""/247, 0xf7, &(0x7f00000004c0)=""/176, &(0x7f0000000200)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x9, {r1}}, 0x58) r7 = syz_clone3(&(0x7f0000001800)={0x100080000, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680), {0x36}, &(0x7f00000006c0)=""/209, 0xd1, &(0x7f00000007c0)=""/4096, &(0x7f00000017c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x5, {r2}}, 0x58) setpgid(r6, r7) close(r4) fcntl$setpipe(r2, 0x407, 0x0) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10}}, 0x50) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0x2000000) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 448.050424ms ago: executing program 7 (id=3547): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, 0x0, r1) r2 = syz_clone(0x20820000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r2, 0x9, 0x0, 0x0) unshare(0x4000400) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) mkdir(&(0x7f0000001f40)='./file0\x00', 0x84) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmsg(r6, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x160) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000380)={r5, 0x1, 0x0, @random="83f047e9529c"}, 0x10) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000001000/0x3000)=nil, 0x3000}, 0x7}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[]) madvise(&(0x7f00001d7000/0x4000)=nil, 0x4000, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) fstat(r0, &(0x7f0000000440)) (async) setresuid(0x0, 0x0, r1) (async) syz_clone(0x20820000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) prlimit64(r2, 0x9, 0x0, 0x0) (async) unshare(0x4000400) (async) userfaultfd(0x80001) (async) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) (async) mkdir(&(0x7f0000001f40)='./file0\x00', 0x84) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) recvmsg(r6, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x160) (async) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x6, @broadcast}, 0x10) (async) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000380)={r5, 0x1, 0x0, @random="83f047e9529c"}, 0x10) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000001000/0x3000)=nil, 0x3000}, 0x7}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[]) (async) madvise(&(0x7f00001d7000/0x4000)=nil, 0x4000, 0x12) (async) 70.222499ms ago: executing program 1 (id=3549): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0) (async) execveat(r0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x1}]) mount(&(0x7f0000000300), &(0x7f0000000100)='.\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) (async) mount(&(0x7f0000000300), &(0x7f0000000100)='.\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) (async) listen(r2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x7ff, 0xf, 0x7, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x62, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0xd, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0xa, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x3, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x6, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x81, 0xfffffff3, 0x129432e6, 0x2, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0xfffdfffe, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x43, 0xbc45, 0x48c93690, 0x42, 0x4], [0x6, 0x418, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x1ff, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x0, 0x0, 0x1ef, 0x5, 0x3, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x4, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x404, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x6, 0x3, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x400001, 0xa, 0x0, 0xff, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x4, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') (async) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r4 = socket(0x9, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000580)={0x10, 0x1a, 0x1, 0xfffffffd, 0x25dfdc01}, 0x10}], 0x1, 0x0, 0x0, 0x4080}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, 0x42, 0xa01, 0x1, 0x0, {0x2}}, 0x14}}, 0x0) read$FUSE(r3, &(0x7f0000002f40)={0x2020}, 0x2020) creat(&(0x7f0000000080)='./cgroup\x00', 0x160) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) (async) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) 3.0227ms ago: executing program 7 (id=3550): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x12, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000140)=[@register_looper, @decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=3551): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket(0xf, 0x2, 0x0) (async, rerun: 32) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) (rerun: 32) syz_usb_control_io(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="380400f7", @ANYRES16=r4, @ANYRES64=r1], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 64) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)={0x38, r4, 0x300, 0x70bd25, 0x25dfdbff, {{}, {}, {0x1c, 0x17, {0x9, 0x80000001, @l2={'ib', 0x3a, 'team_slave_0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x805}, 0x844) (rerun: 64) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0xfffff7fffffffffb) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={@mcast2, @mcast1, @loopback, 0x1, 0x3, 0x0, 0x100, 0x4, 0x47e00e3}) (async) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="12011003000000103402030109022d0001011098080904000601030106ab292101040701225201090100"/63], &(0x7f0000000440)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0xfc, 0x7f, 0x6, 0x8, 0x9}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x42b}}, {0xf3, &(0x7f0000000340)=@string={0xf3, 0x3, "805801a577073cae8a9e5148e2937f88a528f9120bbf526f5024ae301deafc7bab1552ae5bd77335662b773ca44f9da776061d3fd48d3c87d83e4b2618c648002fa44101043a91f2f0fd65717402535ac312ef2a5c1ca313ece1607b9979664b0c800155b2896abab2557a6f63d95f53af7a9e8db6b07c94c3ff4497ac4df9947a0fd06d50e80094ff5c76d3021f16b04feed9d5fe306da68aca99f2720f8955619047ff4f8d203b6cbfe8d72f2231530d7ed03bc388deba15a6da304b9a8db9fca684e8a047c71ce955c3d71991a7d42655fcec4444ec24f05645ccb1cbc7b1e76dd60faf5008246240b8532e676a43c5"}}]}) (async) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x7c, 0x20000, 0x0, 0x1}, 0x1c) r7 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) (async) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000400)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x60, &(0x7f0000000300), 0x0, 0xc, 0x0, 0x0, 0x5, 0x5f8480, 0x0}) (async) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): fi_do_coredump+0x10/0x10 [ 163.577254][ T5291] ? asm_exc_page_fault+0x2b/0x30 [ 163.577287][ T5291] ? __kasan_slab_free+0x6a/0x80 [ 163.577318][ T5291] ? kmem_cache_free+0x1c1/0x4c0 [ 163.577347][ T5291] get_signal+0x11fd/0x14f0 [ 163.577375][ T5291] arch_do_signal_or_restart+0x96/0x720 [ 163.577410][ T5291] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 163.577444][ T5291] irqentry_exit_to_user_mode+0x4e/0xb0 [ 163.577472][ T5291] irqentry_exit+0x16/0x60 [ 163.577501][ T5291] exc_page_fault+0x66/0xc0 [ 163.577527][ T5291] asm_exc_page_fault+0x2b/0x30 [ 163.577550][ T5291] RIP: 0033:0x7f9e0c78e931 [ 163.577569][ T5291] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 163.577589][ T5291] RSP: 002b:0000000000000020 EFLAGS: 00010217 [ 163.577610][ T5291] RAX: 0000000000000000 RBX: 00007f9e0c9b6080 RCX: 00007f9e0c78e929 [ 163.577628][ T5291] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000000 [ 163.577643][ T5291] RBP: 00007f9e0c810b39 R08: 0000000000000000 R09: 0000000000000000 [ 163.577659][ T5291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.577673][ T5291] R13: 0000000000000000 R14: 00007f9e0c9b6080 R15: 00007fffd28c59b8 [ 163.577693][ T5291] [ 163.746753][ T9] usb 6-1: USB disconnect, device number 20 [ 163.768562][ T31] usb 7-1: device descriptor read/8, error -71 [ 163.934745][ T5291] memory: usage 280448kB, limit 307200kB, failcnt 37259 [ 164.075626][ T31] usb 7-1: device descriptor read/8, error -71 [ 164.076121][ T755] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 164.092166][ T5291] memory+swap: usage 411320kB, limit 9007199254740988kB, failcnt 0 [ 164.100525][ T5291] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 164.117455][ T5291] Memory cgroup stats for /syz5: [ 164.117656][ T5291] cache 298942464 [ 164.136580][ T5291] rss 249856 [ 164.146707][ T5291] rss_huge 0 [ 164.150268][ T5291] shmem 298942464 [ 164.157972][ T5291] mapped_file 0 [ 164.161489][ T5291] dirty 0 [ 164.164457][ T5291] writeback 0 [ 164.178027][ T5291] workingset_refault_anon 34 [ 164.187771][ T5291] workingset_refault_file 0 [ 164.197698][ T5291] swap 127840256 [ 164.201712][ T5291] swapcached 151552 [ 164.210203][ T5291] pgpgin 252970 [ 164.213766][ T5291] pgpgout 179892 [ 164.217746][ T5675] tmpfs: Unknown parameter 'appraise' [ 164.222251][ T5291] pgfault 74234 [ 164.226707][ T5291] pgmajfault 22 [ 164.230282][ T5291] inactive_anon 277618688 [ 164.234700][ T5291] active_anon 21581824 [ 164.238851][ T5291] inactive_file 0 [ 164.242705][ T5291] active_file 0 [ 164.246465][ T5291] unevictable 0 [ 164.247541][ T755] usb 2-1: Using ep0 maxpacket: 8 [ 164.251020][ T5291] hierarchical_memory_limit 314572800 [ 164.257529][ T755] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 164.261450][ T5291] hierarchical_memsw_limit 9223372036854771712 [ 164.270995][ T755] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.276791][ T5291] total_cache 298942464 [ 164.289423][ T5291] total_rss 249856 [ 164.290695][ T755] usb 2-1: config 0 descriptor?? [ 164.293213][ T5291] total_rss_huge 0 [ 164.302178][ T5291] total_shmem 298942464 [ 164.306363][ T5291] total_mapped_file 0 [ 164.310509][ T5291] total_dirty 0 [ 164.313994][ T5291] total_writeback 0 [ 164.318297][ T5291] total_workingset_refault_anon 34 [ 164.323849][ T5291] total_workingset_refault_file 0 [ 164.329086][ T5291] total_swap 127840256 [ 164.333171][ T5291] total_swapcached 151552 [ 164.337681][ T5291] total_pgpgin 252970 [ 164.341920][ T5291] total_pgpgout 179892 [ 164.345995][ T5291] total_pgfault 74234 [ 164.350050][ T5291] total_pgmajfault 22 [ 164.354045][ T5291] total_inactive_anon 277618688 [ 164.359146][ T5291] total_active_anon 21581824 [ 164.364002][ T5291] total_inactive_file 0 [ 164.368304][ T5291] total_active_file 0 [ 164.372307][ T5291] total_unevictable 0 [ 164.376296][ T5291] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1646,pid=5284,uid=0 [ 164.391301][ T5291] Memory cgroup out of memory: Killed process 5284 (syz.5.1646) total-vm:90084kB, anon-rss:940kB, file-rss:57856kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 164.434193][ T5293] syz.5.1646 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 164.487445][ T5293] CPU: 1 UID: 0 PID: 5293 Comm: syz.5.1646 Not tainted 6.12.30-syzkaller-g94ce385c22d5 #0 16e511e29439c8b2668c1520ec6e7e54ef5e5f6a [ 164.487486][ T5293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 164.487502][ T5293] Call Trace: [ 164.487510][ T5293] [ 164.487519][ T5293] __dump_stack+0x21/0x30 [ 164.487551][ T5293] dump_stack_lvl+0x10c/0x190 [ 164.487580][ T5293] ? __cfi_dump_stack_lvl+0x10/0x10 [ 164.487606][ T5293] ? ___ratelimit+0x3f7/0x5a0 [ 164.487632][ T5293] dump_stack+0x19/0x20 [ 164.487657][ T5293] dump_header+0xd7/0x490 [ 164.487690][ T5293] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 164.487715][ T5293] oom_kill_process+0x4c0/0x7e0 [ 164.487738][ T5293] ? sched_clock_cpu+0x75/0x400 [ 164.487764][ T5293] out_of_memory+0x7ee/0xbd0 [ 164.487785][ T5293] ? __cfi_out_of_memory+0x10/0x10 [ 164.487805][ T5293] ? mutex_lock_killable+0x104/0x1c0 [ 164.487839][ T5293] ? __cfi_mutex_lock_killable+0x10/0x10 [ 164.487870][ T5293] mem_cgroup_out_of_memory+0x279/0x350 [ 164.487901][ T5293] ? drain_obj_stock+0xed0/0xed0 [ 164.487933][ T5293] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 164.487963][ T5293] try_charge_memcg+0x8f7/0xde0 [ 164.487990][ T5293] ? __cfi_try_charge_memcg+0x10/0x10 [ 164.488015][ T5293] ? __alloc_pages_noprof+0x30d/0x6c0 [ 164.488040][ T5293] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 164.488064][ T5293] ? __folio_batch_add_and_move+0x2ab/0x370 [ 164.488087][ T5293] __mem_cgroup_charge+0xf6/0x410 [ 164.488114][ T5293] ? __kasan_check_write+0x18/0x20 [ 164.488141][ T5293] ? _raw_spin_lock+0x8c/0x120 [ 164.488175][ T5293] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 164.488205][ T5293] shmem_alloc_and_add_folio+0x86d/0x1050 [ 164.488244][ T5293] ? put_swap_device+0x130/0x130 [ 164.488278][ T5293] ? shmem_huge_global_enabled+0x2da/0x360 [ 164.488313][ T5293] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 164.488346][ T5293] ? __kasan_check_write+0x18/0x20 [ 164.488372][ T5293] ? _raw_spin_lock+0x8c/0x120 [ 164.488405][ T5293] shmem_get_folio_gfp+0x5f0/0x1380 [ 164.488441][ T5293] ? shmem_get_folio+0xc0/0xc0 [ 164.488470][ T5293] ? follow_page_pte+0xa5c/0xb90 [ 164.488494][ T5293] ? inode_to_bdi+0x6d/0x100 [ 164.488520][ T5293] shmem_write_begin+0xf4/0x270 [ 164.488556][ T5293] generic_perform_write+0x330/0x960 [ 164.488586][ T5293] ? __cfi_generic_perform_write+0x10/0x10 [ 164.488612][ T5293] ? down_write+0xe9/0x2a0 [ 164.488641][ T5293] ? file_update_time+0xa3/0x220 [ 164.488665][ T5293] shmem_file_write_iter+0x105/0x130 [ 164.488689][ T5293] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 164.488714][ T5293] __kernel_write_iter+0x392/0x830 [ 164.488743][ T5293] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 164.488768][ T5293] ? __cfi___kernel_write_iter+0x10/0x10 [ 164.488796][ T5293] ? get_dump_page+0x160/0x220 [ 164.488818][ T5293] ? __asan_memset+0x39/0x50 [ 164.488851][ T5293] ? iov_iter_bvec+0xc0/0x180 [ 164.488884][ T5293] dump_user_range+0xb06/0xdf0 [ 164.488914][ T5293] ? __cfi_dump_emit+0x10/0x10 [ 164.488941][ T5293] ? __cfi_dump_user_range+0x10/0x10 [ 164.488970][ T5293] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 164.489000][ T5293] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 164.489031][ T5293] elf_core_dump+0x2cd9/0x3810 [ 164.489069][ T5293] ? __cfi_elf_core_dump+0x10/0x10 [ 164.489111][ T5293] ? dump_interrupted+0xf0/0xf0 [ 164.489138][ T5293] ? filp_open+0x182/0x1d0 [ 164.489161][ T5293] ? 0xffffffffff600000 [ 164.489180][ T5293] do_coredump+0x1bf7/0x2bd0 [ 164.489211][ T5293] ? __cfi_do_coredump+0x10/0x10 [ 164.489239][ T5293] ? asm_exc_page_fault+0x2b/0x30 [ 164.489272][ T5293] ? __kasan_slab_free+0x6a/0x80 [ 164.489304][ T5293] ? kmem_cache_free+0x1c1/0x4c0 [ 164.489334][ T5293] get_signal+0x11fd/0x14f0 [ 164.489362][ T5293] arch_do_signal_or_restart+0x96/0x720 [ 164.489394][ T5293] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 164.489429][ T5293] irqentry_exit_to_user_mode+0x4e/0xb0 [ 164.489459][ T5293] irqentry_exit+0x16/0x60 [ 164.489487][ T5293] exc_page_fault+0x66/0xc0 [ 164.489514][ T5293] asm_exc_page_fault+0x2b/0x30 [ 164.489538][ T5293] RIP: 0033:0x7f9e0c78e931 [ 164.489557][ T5293] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 164.489577][ T5293] RSP: 002b:0000000000000020 EFLAGS: 00010217 [ 164.489598][ T5293] RAX: 0000000000000000 RBX: 00007f9e0c9b6080 RCX: 00007f9e0c78e929 [ 164.489615][ T5293] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000000 [ 164.489630][ T5293] RBP: 00007f9e0c810b39 R08: 0000000000000000 R09: 0000000000000000 [ 164.489646][ T5293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.489661][ T5293] R13: 0000000000000000 R14: 00007f9e0c9b6080 R15: 00007fffd28c59b8 [ 164.489679][ T5293] [ 164.489688][ T5293] memory: usage 295536kB, limit 307200kB, failcnt 37568 [ 164.501895][ T5680] bpf: Bad value for 'gid' [ 164.667054][ T5293] memory+swap: usage 409372kB, limit 9007199254740988kB, failcnt 0 [ 165.001471][ T5293] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 165.019715][ T5691] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 165.077435][ T5293] Memory cgroup stats for /syz5: [ 165.077591][ T5293] cache 292691968 [ 165.101898][ T5663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.110841][ T5293] rss 77824 [ 165.114005][ T5293] rss_huge 0 [ 165.115840][ T5663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.119042][ T5293] shmem 292691968 [ 165.137519][ T5700] tc_dump_action: action bad kind [ 165.188657][ T5293] mapped_file 0 [ 165.192626][ T5293] dirty 0 [ 165.263718][ T5293] writeback 28672 [ 165.273066][ T5293] workingset_refault_anon 35 [ 165.357461][ T49] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 165.377729][ T5293] workingset_refault_file 0 [ 165.445146][ T5293] swap 127840256 [ 165.487448][ T5293] swapcached 155648 [ 165.491396][ T5293] pgpgin 261272 [ 165.516904][ T5293] pgpgout 189729 [ 165.527207][ T5293] pgfault 74774 [ 165.544445][ T49] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 165.560732][ T49] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 165.575740][ T5293] pgmajfault 23 [ 165.577549][ T49] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 165.601331][ T5293] inactive_anon 281686016 [ 165.605364][ T49] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 165.617574][ T5293] active_anon 10481664 [ 165.621417][ T49] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 165.621697][ T5293] inactive_file 0 [ 165.635258][ T49] usb 6-1: Product: syz [ 165.641796][ T49] usb 6-1: Manufacturer: syz [ 165.650072][ T49] usb 6-1: SerialNumber: syz [ 165.716087][ T5293] active_file 0 [ 165.746384][ T5293] unevictable 0 [ 165.793814][ T5293] hierarchical_memory_limit 314572800 [ 165.827439][ T5293] hierarchical_memsw_limit 9223372036854771712 [ 165.854067][ T5738] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 165.854115][ T5738] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 165.866166][ T49] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 165.883048][ T5738] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:141 [ 165.907438][ T5293] total_cache 292691968 [ 165.977699][ T5293] total_rss 77824 [ 165.987452][ T5293] total_rss_huge 0 [ 165.991740][ T5293] total_shmem 292691968 [ 166.016243][ T5293] total_mapped_file 0 [ 166.020356][ T5293] total_dirty 0 [ 166.024590][ T5293] total_writeback 28672 [ 166.089074][ T5698] binder: Binderfs stats mode cannot be changed during a remount [ 166.096275][ T5293] total_workingset_refault_anon 35 [ 166.136696][ T5293] total_workingset_refault_file 0 [ 166.137967][ T9] usb 6-1: USB disconnect, device number 21 [ 166.160579][ T9] usblp0: removed [ 166.167475][ T49] usb 7-1: new low-speed USB device number 19 using dummy_hcd [ 166.206146][ T5293] total_swap 127840256 [ 166.240842][ T5293] total_swapcached 155648 [ 166.245420][ T5293] total_pgpgin 261272 [ 166.256627][ T755] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 166.275111][ T755] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 166.297474][ T49] usb 7-1: device descriptor read/64, error -71 [ 166.317580][ T755] asix 2-1:0.0: probe with driver asix failed with error -71 [ 166.344985][ T755] usb 2-1: USB disconnect, device number 9 [ 166.363709][ T5293] total_pgpgout 189729 [ 166.448188][ T5752] overlayfs: failed to clone lowerpath [ 166.453834][ T5293] total_pgfault 74774 [ 166.485624][ T36] audit: type=1400 audit(1750806497.691:497): avc: denied { name_bind } for pid=5753 comm="syz.1.1803" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 166.527289][ T5293] total_pgmajfault 23 [ 166.537492][ T49] usb 7-1: device descriptor read/64, error -71 [ 166.613282][ T5293] total_inactive_anon 281686016 [ 166.709063][ T5293] total_active_anon 10481664 [ 166.738509][ T5293] total_inactive_file 0 [ 166.777475][ T49] usb 7-1: new low-speed USB device number 20 using dummy_hcd [ 166.781697][ T5293] total_active_file 0 [ 166.787682][ T5780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1812'. [ 166.807494][ T5293] total_unevictable 0 [ 166.811567][ T5293] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1646,pid=5278,uid=0 [ 166.851018][ T5784] overlayfs: failed to clone upperpath [ 166.883182][ T5293] Memory cgroup out of memory: OOM victim 5278 (syz.5.1646) is already exiting. Skip killing the task [ 166.927462][ T49] usb 7-1: device descriptor read/64, error -71 [ 166.941041][ T5279] syz.5.1646 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 166.967605][ T5279] CPU: 1 UID: 0 PID: 5279 Comm: syz.5.1646 Not tainted 6.12.30-syzkaller-g94ce385c22d5 #0 16e511e29439c8b2668c1520ec6e7e54ef5e5f6a [ 166.967647][ T5279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 166.967664][ T5279] Call Trace: [ 166.967672][ T5279] [ 166.967682][ T5279] __dump_stack+0x21/0x30 [ 166.967717][ T5279] dump_stack_lvl+0x10c/0x190 [ 166.967746][ T5279] ? __cfi_dump_stack_lvl+0x10/0x10 [ 166.967773][ T5279] ? ___ratelimit+0x3f7/0x5a0 [ 166.967799][ T5279] dump_stack+0x19/0x20 [ 166.967833][ T5279] dump_header+0xd7/0x490 [ 166.967868][ T5279] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 166.967894][ T5279] oom_kill_process+0x4c0/0x7e0 [ 166.967916][ T5279] ? sched_clock_cpu+0x75/0x400 [ 166.967945][ T5279] out_of_memory+0x7ee/0xbd0 [ 166.967966][ T5279] ? __cfi_out_of_memory+0x10/0x10 [ 166.967987][ T5279] ? mutex_lock_killable+0x104/0x1c0 [ 166.968017][ T5279] ? __cfi_mutex_lock_killable+0x10/0x10 [ 166.968047][ T5279] mem_cgroup_out_of_memory+0x279/0x350 [ 166.968079][ T5279] ? drain_obj_stock+0xed0/0xed0 [ 166.968112][ T5279] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 166.968143][ T5279] try_charge_memcg+0x8f7/0xde0 [ 166.968170][ T5279] ? __cfi_try_charge_memcg+0x10/0x10 [ 166.968196][ T5279] ? __alloc_pages_noprof+0x30d/0x6c0 [ 166.968222][ T5279] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 166.968247][ T5279] ? __folio_batch_add_and_move+0x2ab/0x370 [ 166.968271][ T5279] __mem_cgroup_charge+0xf6/0x410 [ 166.968300][ T5279] ? __kasan_check_write+0x18/0x20 [ 166.968328][ T5279] ? _raw_spin_lock+0x8c/0x120 [ 166.968362][ T5279] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 166.968393][ T5279] shmem_alloc_and_add_folio+0x86d/0x1050 [ 166.968433][ T5279] ? put_swap_device+0x130/0x130 [ 166.968468][ T5279] ? shmem_huge_global_enabled+0x2da/0x360 [ 166.968502][ T5279] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 166.968536][ T5279] ? __kasan_check_write+0x18/0x20 [ 166.968564][ T5279] ? _raw_spin_lock+0x8c/0x120 [ 166.968595][ T5279] shmem_get_folio_gfp+0x5f0/0x1380 [ 166.968623][ T5279] ? shmem_get_folio+0xc0/0xc0 [ 166.968655][ T5279] ? follow_page_pte+0xa5c/0xb90 [ 166.968680][ T5279] ? inode_to_bdi+0x6d/0x100 [ 166.968706][ T5279] shmem_write_begin+0xf4/0x270 [ 166.968742][ T5279] generic_perform_write+0x330/0x960 [ 166.968773][ T5279] ? __cfi_generic_perform_write+0x10/0x10 [ 166.968801][ T5279] ? down_write+0xe9/0x2a0 [ 166.968840][ T5279] ? file_update_time+0xa3/0x220 [ 166.968866][ T5279] shmem_file_write_iter+0x105/0x130 [ 166.968891][ T5279] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 166.968917][ T5279] __kernel_write_iter+0x392/0x830 [ 166.968947][ T5279] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 166.968972][ T5279] ? __cfi___kernel_write_iter+0x10/0x10 [ 166.969001][ T5279] ? get_dump_page+0x160/0x220 [ 166.969025][ T5279] ? __asan_memset+0x39/0x50 [ 166.969052][ T5279] ? iov_iter_bvec+0xc0/0x180 [ 166.969086][ T5279] dump_user_range+0xb06/0xdf0 [ 166.969118][ T5279] ? __cfi_dump_emit+0x10/0x10 [ 166.969146][ T5279] ? __cfi_dump_user_range+0x10/0x10 [ 166.969176][ T5279] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 166.969207][ T5279] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 166.969240][ T5279] elf_core_dump+0x2cd9/0x3810 [ 166.969278][ T5279] ? __cfi_elf_core_dump+0x10/0x10 [ 166.969320][ T5279] ? dump_interrupted+0xf0/0xf0 [ 166.969347][ T5279] ? filp_open+0x182/0x1d0 [ 166.969371][ T5279] ? 0xffffffffff600000 [ 166.969390][ T5279] do_coredump+0x1bf7/0x2bd0 [ 166.969422][ T5279] ? __cfi_do_coredump+0x10/0x10 [ 166.969449][ T5279] ? asm_exc_page_fault+0x2b/0x30 [ 166.969482][ T5279] ? __kasan_slab_free+0x6a/0x80 [ 166.969515][ T5279] ? kmem_cache_free+0x1c1/0x4c0 [ 166.969545][ T5279] get_signal+0x11fd/0x14f0 [ 166.969574][ T5279] arch_do_signal_or_restart+0x96/0x720 [ 166.969603][ T5279] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 166.969633][ T5279] irqentry_exit_to_user_mode+0x4e/0xb0 [ 166.969659][ T5279] irqentry_exit+0x16/0x60 [ 166.969684][ T5279] exc_page_fault+0x66/0xc0 [ 166.969708][ T5279] asm_exc_page_fault+0x2b/0x30 [ 166.969728][ T5279] RIP: 0033:0x7f9e0c78e931 [ 166.969744][ T5279] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 166.969761][ T5279] RSP: 002b:0000000000000020 EFLAGS: 00010217 [ 166.969780][ T5279] RAX: 0000000000000000 RBX: 00007f9e0c9b6080 RCX: 00007f9e0c78e929 [ 166.969794][ T5279] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000000 [ 166.969807][ T5279] RBP: 00007f9e0c810b39 R08: 0000000000000000 R09: 0000000000000000 [ 166.969820][ T5279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.969868][ T5279] R13: 0000000000000000 R14: 00007f9e0c9b6080 R15: 00007fffd28c59b8 [ 166.969885][ T5279] [ 166.969893][ T5279] memory: usage 307200kB, limit 307200kB, failcnt 38602 [ 167.443705][ T5279] memory+swap: usage 432072kB, limit 9007199254740988kB, failcnt 0 [ 167.452133][ T5279] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 167.459563][ T5279] Memory cgroup stats for /syz5: [ 167.461029][ T5279] cache 314220544 [ 167.469833][ T5279] rss 245760 [ 167.475867][ T5279] rss_huge 0 [ 167.479187][ T5279] shmem 314220544 [ 167.483072][ T5279] mapped_file 0 [ 167.483362][ T5795] overlay: ./file1 is not a directory [ 167.486605][ T5279] dirty 0 [ 167.486617][ T5279] writeback 0 [ 167.498499][ T5279] workingset_refault_anon 74 [ 167.501609][ T36] audit: type=1326 audit(1750806498.711:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5799 comm="syz.4.1821" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f50b4b8e929 code=0x0 [ 167.503261][ T5279] workingset_refault_file 0 [ 167.531299][ T5279] swap 127868928 [ 167.534887][ T5279] swapcached 126976 [ 167.539211][ T5279] pgpgin 286746 [ 167.543030][ T5279] pgpgout 209946 [ 167.546881][ T5279] pgfault 92785 [ 167.550426][ T5279] pgmajfault 52 [ 167.553907][ T5279] inactive_anon 114552832 [ 167.558660][ T5279] active_anon 200019968 [ 167.563003][ T5279] inactive_file 0 [ 167.567009][ T5279] active_file 0 [ 167.570564][ T5279] unevictable 0 [ 167.574064][ T5279] hierarchical_memory_limit 314572800 [ 167.579958][ T5279] hierarchical_memsw_limit 9223372036854771712 [ 167.586290][ T5279] total_cache 314220544 [ 167.590557][ T49] usb 7-1: device descriptor read/64, error -71 [ 167.595339][ T5279] total_rss 245760 [ 167.600643][ T5279] total_rss_huge 0 [ 167.604392][ T5279] total_shmem 314220544 [ 167.608649][ T5279] total_mapped_file 0 [ 167.612663][ T5279] total_dirty 0 [ 167.616133][ T5279] total_writeback 0 [ 167.619966][ T5279] total_workingset_refault_anon 74 [ 167.625211][ T5279] total_workingset_refault_file 0 [ 167.630422][ T5279] total_swap 127868928 [ 167.634606][ T5279] total_swapcached 126976 [ 167.639208][ T5279] total_pgpgin 286746 [ 167.643552][ T5279] total_pgpgout 209946 [ 167.647762][ T5279] total_pgfault 92785 [ 167.651762][ T5279] total_pgmajfault 52 [ 167.655750][ T5279] total_inactive_anon 114552832 [ 167.660646][ T5279] total_active_anon 200019968 [ 167.665340][ T5279] total_inactive_file 0 [ 167.669544][ T5279] total_active_file 0 [ 167.673574][ T5279] total_unevictable 0 [ 167.677632][ T5279] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1646,pid=5296,uid=0 [ 167.692531][ T5279] Memory cgroup out of memory: Killed process 5296 (syz.5.1646) total-vm:90084kB, anon-rss:940kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:1000 [ 167.709811][ T49] usb usb7-port1: attempt power cycle [ 168.047450][ T49] usb 7-1: new low-speed USB device number 21 using dummy_hcd [ 168.083503][ T5299] syz.5.1646 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 168.088505][ T49] usb 7-1: device descriptor read/8, error -71 [ 168.107192][ T5299] CPU: 0 UID: 0 PID: 5299 Comm: syz.5.1646 Not tainted 6.12.30-syzkaller-g94ce385c22d5 #0 16e511e29439c8b2668c1520ec6e7e54ef5e5f6a [ 168.107233][ T5299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 168.107249][ T5299] Call Trace: [ 168.107258][ T5299] [ 168.107268][ T5299] __dump_stack+0x21/0x30 [ 168.107300][ T5299] dump_stack_lvl+0x10c/0x190 [ 168.107328][ T5299] ? __cfi_dump_stack_lvl+0x10/0x10 [ 168.107355][ T5299] ? ___ratelimit+0x3f7/0x5a0 [ 168.107382][ T5299] dump_stack+0x19/0x20 [ 168.107411][ T5299] dump_header+0xd7/0x490 [ 168.107444][ T5299] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 168.107469][ T5299] oom_kill_process+0x4c0/0x7e0 [ 168.107491][ T5299] ? sched_clock_cpu+0x75/0x400 [ 168.107526][ T5299] out_of_memory+0x7ee/0xbd0 [ 168.107547][ T5299] ? __cfi_out_of_memory+0x10/0x10 [ 168.107567][ T5299] ? mutex_lock_killable+0x92/0x1c0 [ 168.107595][ T5299] ? __cfi_mutex_lock_killable+0x10/0x10 [ 168.107623][ T5299] mem_cgroup_out_of_memory+0x279/0x350 [ 168.107653][ T5299] ? drain_obj_stock+0xed0/0xed0 [ 168.107684][ T5299] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 168.107714][ T5299] try_charge_memcg+0x8f7/0xde0 [ 168.107741][ T5299] ? __cfi_try_charge_memcg+0x10/0x10 [ 168.107766][ T5299] ? __alloc_pages_noprof+0x30d/0x6c0 [ 168.107790][ T5299] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 168.107814][ T5299] ? __folio_batch_add_and_move+0x2ab/0x370 [ 168.107838][ T5299] __mem_cgroup_charge+0xf6/0x410 [ 168.107864][ T5299] ? __kasan_check_write+0x18/0x20 [ 168.107890][ T5299] ? _raw_spin_lock+0x8c/0x120 [ 168.107924][ T5299] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 168.107953][ T5299] shmem_alloc_and_add_folio+0x86d/0x1050 [ 168.107991][ T5299] ? put_swap_device+0x130/0x130 [ 168.108024][ T5299] ? shmem_huge_global_enabled+0x2da/0x360 [ 168.108057][ T5299] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 168.108089][ T5299] ? __kasan_check_write+0x18/0x20 [ 168.108114][ T5299] ? _raw_spin_lock+0x8c/0x120 [ 168.108147][ T5299] shmem_get_folio_gfp+0x5f0/0x1380 [ 168.108181][ T5299] ? shmem_get_folio+0xc0/0xc0 [ 168.108209][ T5299] ? follow_page_pte+0xa5c/0xb90 [ 168.108233][ T5299] ? inode_to_bdi+0x6d/0x100 [ 168.108258][ T5299] shmem_write_begin+0xf4/0x270 [ 168.108292][ T5299] generic_perform_write+0x330/0x960 [ 168.108321][ T5299] ? __cfi_generic_perform_write+0x10/0x10 [ 168.108347][ T5299] ? down_write+0xe9/0x2a0 [ 168.108375][ T5299] ? file_update_time+0xa3/0x220 [ 168.108399][ T5299] shmem_file_write_iter+0x105/0x130 [ 168.108423][ T5299] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 168.108447][ T5299] __kernel_write_iter+0x392/0x830 [ 168.108476][ T5299] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 168.108500][ T5299] ? __cfi___kernel_write_iter+0x10/0x10 [ 168.108536][ T5299] ? get_dump_page+0x160/0x220 [ 168.108558][ T5299] ? __asan_memset+0x39/0x50 [ 168.108584][ T5299] ? iov_iter_bvec+0xc0/0x180 [ 168.108616][ T5299] dump_user_range+0xb06/0xdf0 [ 168.108646][ T5299] ? __cfi_dump_emit+0x10/0x10 [ 168.108672][ T5299] ? __cfi_dump_user_range+0x10/0x10 [ 168.108701][ T5299] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 168.108730][ T5299] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 168.108761][ T5299] elf_core_dump+0x2cd9/0x3810 [ 168.108800][ T5299] ? __cfi_elf_core_dump+0x10/0x10 [ 168.108843][ T5299] ? dump_interrupted+0xf0/0xf0 [ 168.108870][ T5299] ? filp_open+0x182/0x1d0 [ 168.108894][ T5299] ? 0xffffffffff600000 [ 168.108913][ T5299] do_coredump+0x1bf7/0x2bd0 [ 168.108945][ T5299] ? __cfi_do_coredump+0x10/0x10 [ 168.108972][ T5299] ? asm_exc_page_fault+0x2b/0x30 [ 168.109006][ T5299] ? __kasan_slab_free+0x6a/0x80 [ 168.109039][ T5299] ? kmem_cache_free+0x1c1/0x4c0 [ 168.109070][ T5299] get_signal+0x11fd/0x14f0 [ 168.109098][ T5299] arch_do_signal_or_restart+0x96/0x720 [ 168.109130][ T5299] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 168.109165][ T5299] irqentry_exit_to_user_mode+0x4e/0xb0 [ 168.109195][ T5299] irqentry_exit+0x16/0x60 [ 168.109224][ T5299] exc_page_fault+0x66/0xc0 [ 168.109252][ T5299] asm_exc_page_fault+0x2b/0x30 [ 168.109275][ T5299] RIP: 0033:0x7f9e0c78e931 [ 168.109293][ T5299] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 168.109313][ T5299] RSP: 002b:0000000000000020 EFLAGS: 00010217 [ 168.109333][ T5299] RAX: 0000000000000000 RBX: 00007f9e0c9b6080 RCX: 00007f9e0c78e929 [ 168.109350][ T5299] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000000 [ 168.109365][ T5299] RBP: 00007f9e0c810b39 R08: 0000000000000000 R09: 0000000000000000 [ 168.109380][ T5299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.109394][ T5299] R13: 0000000000000000 R14: 00007f9e0c9b6080 R15: 00007fffd28c59b8 [ 168.109413][ T5299] [ 168.228539][ T49] usb 7-1: device descriptor read/8, error -71 [ 168.359658][ T5299] memory: usage 281304kB, limit 307200kB, failcnt 44384 [ 168.597191][ T5299] memory+swap: usage 421456kB, limit 9007199254740988kB, failcnt 0 [ 168.605359][ T5299] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 168.612761][ T5299] Memory cgroup stats for /syz5: [ 168.612917][ T5299] cache 302628864 [ 168.621757][ T5299] rss 237568 [ 168.624976][ T5299] rss_huge 0 [ 168.628243][ T5299] shmem 302628864 [ 168.631891][ T5299] mapped_file 0 [ 168.635485][ T5299] dirty 0 [ 168.639888][ T5299] writeback 0 [ 168.643830][ T5299] workingset_refault_anon 95 [ 168.657215][ T5299] workingset_refault_file 0 [ 168.657609][ T49] usb 7-1: new low-speed USB device number 22 using dummy_hcd [ 168.661814][ T5299] swap 122990592 [ 168.672879][ T5299] swapcached 434176 [ 168.678218][ T5299] pgpgin 293782 [ 168.682510][ T5299] pgpgout 219739 [ 168.686135][ T5299] pgfault 92920 [ 168.690034][ T5299] pgmajfault 68 [ 168.693635][ T5299] inactive_anon 188497920 [ 168.698354][ T5299] active_anon 114667520 [ 168.698628][ T49] usb 7-1: device descriptor read/8, error -71 [ 168.702717][ T5299] inactive_file 0 [ 168.702730][ T5299] active_file 0 [ 168.702738][ T5299] unevictable 0 [ 168.702746][ T5299] hierarchical_memory_limit 314572800 [ 168.702756][ T5299] hierarchical_memsw_limit 9223372036854771712 [ 168.731173][ T5299] total_cache 302628864 [ 168.735424][ T5299] total_rss 237568 [ 168.739350][ T5299] total_rss_huge 0 [ 168.743238][ T5299] total_shmem 302628864 [ 168.747596][ T5299] total_mapped_file 0 [ 168.751887][ T5299] total_dirty 0 [ 168.755459][ T5299] total_writeback 0 [ 168.766078][ T5299] total_workingset_refault_anon 95 [ 168.771299][ T5299] total_workingset_refault_file 0 [ 168.777961][ T5299] total_swap 122990592 [ 168.782907][ T5299] total_swapcached 434176 [ 168.787282][ T5299] total_pgpgin 293782 [ 168.791355][ T5299] total_pgpgout 219739 [ 168.795529][ T5299] total_pgfault 92920 [ 168.800158][ T5299] total_pgmajfault 68 [ 168.803322][ T5827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1830'. [ 168.804612][ T5299] total_inactive_anon 188497920 [ 168.804625][ T5299] total_active_anon 114667520 [ 168.823177][ T5299] total_inactive_file 0 [ 168.827570][ T5299] total_active_file 0 [ 168.831575][ T5299] total_unevictable 0 [ 168.835667][ T5299] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1646,pid=5293,uid=0 [ 168.850940][ T5299] Memory cgroup out of memory: Killed process 5293 (syz.5.1646) total-vm:90084kB, anon-rss:940kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:1000 [ 168.858797][ T49] usb 7-1: device descriptor read/8, error -71 [ 168.927941][ T36] audit: type=1400 audit(1750806500.141:499): avc: denied { remount } for pid=5785 comm="syz.5.1814" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 168.944083][ T5840] /dev/rnullb0: Can't lookup blockdev [ 168.977690][ T49] usb usb7-port1: unable to enumerate USB device [ 170.048165][ T9] hid (null): bogus close delimiter [ 170.055753][ T9] hid-generic 0000:007F:FFFFFFFE.0007: bogus close delimiter [ 170.063481][ T9] hid-generic 0000:007F:FFFFFFFE.0007: item 0 2 2 10 parsing failed [ 170.078474][ T9] hid-generic 0000:007F:FFFFFFFE.0007: probe with driver hid-generic failed with error -22 [ 170.098675][ T5881] /dev/rnullb0: Can't lookup blockdev [ 170.624029][ T5885] cgroup: Bad value for 'name' [ 171.823012][ T5903] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1857'. [ 171.848153][ T5907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1858'. [ 171.933251][ T5919] binder: Bad value for 'max' [ 172.443788][ T36] audit: type=1400 audit(1750806503.651:500): avc: denied { write } for pid=5959 comm="syz.4.1875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 172.557541][ T36] audit: type=1400 audit(1750806503.761:501): avc: denied { setattr } for pid=5964 comm="syz.4.1877" name="file0" dev="tmpfs" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 172.639994][ T36] audit: type=1400 audit(1750806503.851:502): avc: denied { add_name } for pid=5972 comm="syz.5.1881" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 172.661822][ T36] audit: type=1400 audit(1750806503.851:503): avc: denied { create } for pid=5972 comm="syz.5.1881" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 172.684806][ T36] audit: type=1400 audit(1750806503.851:504): avc: denied { associate } for pid=5972 comm="syz.5.1881" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 172.732533][ T36] audit: type=1326 audit(1750806503.941:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5978 comm="syz.4.1883" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f50b4b8e929 code=0x0 [ 173.089237][ T36] audit: type=1400 audit(1750806504.301:506): avc: denied { create } for pid=6000 comm="syz.6.1891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 173.150042][ T6001] netlink: 'syz.6.1891': attribute type 11 has an invalid length. [ 173.191168][ T6004] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 173.199468][ T6004] rust_binder: Write failure EINVAL in pid:176 [ 173.629615][ T36] audit: type=1326 audit(1750806504.831:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5989 comm="syz.5.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0c78e929 code=0x7fc00000 [ 173.917908][ T6043] overlayfs: failed to clone upperpath [ 174.065089][ T6066] overlayfs: failed to clone upperpath [ 174.127241][ T6077] binder: Bad value for 'stats' [ 174.167473][ T49] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 174.221606][ T6092] fuse: Bad value for 'group_id' [ 174.226675][ T6092] fuse: Bad value for 'group_id' [ 174.318614][ T49] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 174.326783][ T49] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 174.338538][ T49] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 174.349677][ T49] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 174.360902][ T49] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 174.373830][ T49] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 174.382927][ T49] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.391627][ T49] usb 7-1: config 0 descriptor?? [ 174.396862][ T6041] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 174.614774][ T36] audit: type=1400 audit(1750806505.821:508): avc: denied { bind } for pid=6118 comm="syz.4.1936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 174.820535][ T6126] overlayfs: missing 'lowerdir' [ 175.121004][ T49] usbhid 7-1:0.0: can't add hid device: -71 [ 175.127178][ T49] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 175.138208][ T49] usb 7-1: USB disconnect, device number 23 [ 175.421962][ T36] audit: type=1400 audit(1750806506.631:509): avc: denied { execute } for pid=6157 comm="syz.1.1952" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=33010 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 175.422426][ T6158] overlayfs: conflicting options: userxattr,redirect_dir=on [ 176.428879][ T6206] overlayfs: failed to clone upperpath [ 176.740361][ T6223] IPv6: NLM_F_CREATE should be specified when creating new route [ 176.748300][ T6223] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 176.755727][ T6223] IPv6: NLM_F_CREATE should be set when creating new route [ 176.904968][ T6256] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:200 [ 176.922552][ T305] Bluetooth: hci0: Frame reassembly failed (-84) [ 178.038071][ T36] audit: type=1400 audit(1750806509.251:510): avc: denied { create } for pid=6294 comm="syz.4.2000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 178.957497][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 178.957548][ T1785] Bluetooth: hci0: command 0x1003 tx timeout [ 179.217504][ T9] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 179.367532][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 179.374062][ T9] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 179.384070][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.393731][ T9] usb 7-1: config 0 descriptor?? [ 180.320448][ T6336] tmpfs: Unknown parameter '' [ 180.436038][ T6348] fuse: Bad value for 'user_id' [ 180.441086][ T6348] fuse: Bad value for 'user_id' [ 180.607876][ T6303] cgroup: subsys name conflicts with all [ 180.628331][ T6380] overlayfs: failed to clone upperpath [ 180.718077][ T36] audit: type=1326 audit(1750806511.931:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6386 comm="syz.5.2031" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e0c78e929 code=0x0 [ 180.814711][ T9] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 180.824993][ T9] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 180.836053][ T9] asix 7-1:0.0: probe with driver asix failed with error -71 [ 180.844536][ T9] usb 7-1: USB disconnect, device number 24 [ 181.341183][ T9] hid-generic C98F:0003:0000.0008: unknown main item tag 0x0 [ 181.349232][ T9] hid-generic C98F:0003:0000.0008: unknown main item tag 0x0 [ 181.357229][ T9] hid-generic C98F:0003:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 181.378948][ T6400] fido_id[6400]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 181.407010][ T6404] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 181.407034][ T6404] rust_binder: Read failure Err(EFAULT) in pid:215 [ 181.517992][ T6411] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:222 [ 181.532546][ T6412] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.619673][ T6425] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:226 [ 181.664724][ T6437] 9pnet: Could not find request transport: xen [ 181.680216][ T6425] rust_binder: Write failure EINVAL in pid:226 [ 182.475497][ T6449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2050'. [ 182.704903][ T36] audit: type=1400 audit(1750806513.911:512): avc: denied { create } for pid=6465 comm="syz.1.2058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 182.907484][ T36] audit: type=1400 audit(1750806514.111:513): avc: denied { create } for pid=6465 comm="syz.1.2058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 183.461456][ T6503] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2066'. [ 183.470871][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2066'. [ 183.584069][ T36] audit: type=1400 audit(1750806514.791:514): avc: denied { map } for pid=6528 comm="syz.1.2081" path="socket:[34021]" dev="sockfs" ino=34021 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 184.390176][ T6584] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 184.391729][ T6584] netlink: 'syz.6.2103': attribute type 4 has an invalid length. [ 184.406213][ T6584] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.2103'. [ 184.415897][ T6584] rust_binder: Got transaction with invalid offset. [ 184.415939][ T6584] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 184.422698][ T6584] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:254 [ 184.737812][ T6647] tipc: Enabling of bearer rejected, failed to enable media [ 184.897505][ T49] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 184.899249][ T36] audit: type=1326 audit(1750806516.111:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.5.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0c78e929 code=0x7ffc0000 [ 184.929117][ T36] audit: type=1326 audit(1750806516.111:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.5.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0c78e929 code=0x7ffc0000 [ 184.952870][ T36] audit: type=1326 audit(1750806516.111:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.5.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0c78e929 code=0x7ffc0000 [ 184.976378][ T36] audit: type=1326 audit(1750806516.111:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.5.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0c78e929 code=0x7ffc0000 [ 185.000032][ T36] audit: type=1326 audit(1750806516.111:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.5.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f9e0c78e929 code=0x7ffc0000 [ 185.023641][ T36] audit: type=1326 audit(1750806516.111:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.5.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0c78e929 code=0x7ffc0000 [ 185.047963][ T36] audit: type=1326 audit(1750806516.111:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.5.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f9e0c78e929 code=0x7ffc0000 [ 185.071420][ T36] audit: type=1326 audit(1750806516.111:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.5.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0c78e929 code=0x7ffc0000 [ 185.094994][ T36] audit: type=1326 audit(1750806516.111:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.5.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9e0c78e929 code=0x7ffc0000 [ 185.096154][ T49] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.128528][ T49] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 185.142264][ T49] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 185.151470][ T49] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 185.159527][ T49] usb 7-1: SerialNumber: syz [ 185.165661][ T49] usb 7-1: bad CDC descriptors [ 185.373278][ T49] usb 7-1: USB disconnect, device number 25 [ 185.437291][ T6683] fuse: Bad value for 'group_id' [ 185.442366][ T6683] fuse: Bad value for 'group_id' [ 185.449239][ T6683] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2130'. [ 185.613531][ T6697] binder: Unknown parameter 'tatslobay' [ 185.620728][ T6697] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2135'. [ 185.865605][ T6726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2145'. [ 185.971984][ T6736] netlink: 'syz.6.2150': attribute type 4 has an invalid length. [ 185.992701][ T6736] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.2150'. [ 186.732186][ T6797] binder: Bad value for 'stats' [ 186.944647][ T6814] overlayfs: failed to clone lowerpath [ 187.127658][ T6851] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.229814][ T6851] SELinux: failed to load policy [ 187.294252][ T6856] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:300 [ 187.335043][ T6880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2199'. [ 187.383692][ T6882] tmpfs: Bad value for 'mode' [ 187.497891][ T6905] 9pnet: Could not find request transport: fN [ 187.583290][ T6912] overlayfs: failed to resolve './file1': -2 [ 187.670405][ T6924] fuse: Unknown parameter 'groupQid' [ 189.110141][ T6998] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2235'. [ 189.802522][ T7026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2246'. [ 190.563474][ T7046] Invalid ELF header len 16 [ 190.703426][ T7062] overlay: Unknown parameter 'func' [ 190.841142][ T7069] SELinux: failed to load policy [ 190.846493][ T7069] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 190.846849][ T7069] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:327 [ 190.953216][ T7074] rust_binder: Write failure EFAULT in pid:330 [ 191.482010][ T6942] syz.1.2218 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 191.499191][ T6942] CPU: 1 UID: 0 PID: 6942 Comm: syz.1.2218 Not tainted 6.12.30-syzkaller-g94ce385c22d5 #0 16e511e29439c8b2668c1520ec6e7e54ef5e5f6a [ 191.499231][ T6942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 191.499247][ T6942] Call Trace: [ 191.499256][ T6942] [ 191.499266][ T6942] __dump_stack+0x21/0x30 [ 191.499300][ T6942] dump_stack_lvl+0x10c/0x190 [ 191.499327][ T6942] ? __cfi_dump_stack_lvl+0x10/0x10 [ 191.499355][ T6942] ? ___ratelimit+0x3f7/0x5a0 [ 191.499381][ T6942] dump_stack+0x19/0x20 [ 191.499407][ T6942] dump_header+0xd7/0x490 [ 191.499442][ T6942] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 191.499495][ T6942] oom_kill_process+0x4c0/0x7e0 [ 191.499517][ T6942] ? sched_clock_cpu+0x75/0x400 [ 191.499546][ T6942] out_of_memory+0x7ee/0xbd0 [ 191.499568][ T6942] ? __cfi_out_of_memory+0x10/0x10 [ 191.499589][ T6942] ? mutex_lock_killable+0x92/0x1c0 [ 191.499625][ T6942] ? __cfi_mutex_lock_killable+0x10/0x10 [ 191.499656][ T6942] mem_cgroup_out_of_memory+0x279/0x350 [ 191.499688][ T6942] ? drain_obj_stock+0xed0/0xed0 [ 191.499721][ T6942] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 191.499752][ T6942] try_charge_memcg+0x8f7/0xde0 [ 191.499779][ T6942] ? __cfi_try_charge_memcg+0x10/0x10 [ 191.499805][ T6942] ? __alloc_pages_noprof+0x30d/0x6c0 [ 191.499831][ T6942] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 191.499855][ T6942] ? __folio_batch_add_and_move+0x2ab/0x370 [ 191.499879][ T6942] __mem_cgroup_charge+0xf6/0x410 [ 191.499908][ T6942] ? __kasan_check_write+0x18/0x20 [ 191.499936][ T6942] ? _raw_spin_lock+0x8c/0x120 [ 191.499970][ T6942] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 191.500001][ T6942] shmem_alloc_and_add_folio+0x86d/0x1050 [ 191.500041][ T6942] ? put_swap_device+0x130/0x130 [ 191.500081][ T6942] ? shmem_huge_global_enabled+0x2da/0x360 [ 191.500116][ T6942] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 191.500150][ T6942] ? __kasan_check_write+0x18/0x20 [ 191.500178][ T6942] ? _raw_spin_lock+0x8c/0x120 [ 191.500213][ T6942] shmem_get_folio_gfp+0x5f0/0x1380 [ 191.500250][ T6942] ? shmem_get_folio+0xc0/0xc0 [ 191.500281][ T6942] ? follow_page_pte+0xa5c/0xb90 [ 191.500306][ T6942] ? inode_to_bdi+0x6d/0x100 [ 191.500332][ T6942] shmem_write_begin+0xf4/0x270 [ 191.500369][ T6942] generic_perform_write+0x330/0x960 [ 191.500400][ T6942] ? __cfi_generic_perform_write+0x10/0x10 [ 191.500427][ T6942] ? down_write+0xe9/0x2a0 [ 191.500458][ T6942] ? file_update_time+0xa3/0x220 [ 191.500484][ T6942] shmem_file_write_iter+0x105/0x130 [ 191.500509][ T6942] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 191.500534][ T6942] __kernel_write_iter+0x392/0x830 [ 191.500564][ T6942] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 191.500590][ T6942] ? __cfi___kernel_write_iter+0x10/0x10 [ 191.500628][ T6942] ? get_dump_page+0x160/0x220 [ 191.500652][ T6942] ? __asan_memset+0x39/0x50 [ 191.500679][ T6942] ? iov_iter_bvec+0xc0/0x180 [ 191.500714][ T6942] dump_user_range+0xb06/0xdf0 [ 191.500745][ T6942] ? __cfi_dump_emit+0x10/0x10 [ 191.500774][ T6942] ? __cfi_dump_user_range+0x10/0x10 [ 191.500804][ T6942] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 191.500835][ T6942] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 191.500867][ T6942] elf_core_dump+0x2cd9/0x3810 [ 191.500905][ T6942] ? __cfi_elf_core_dump+0x10/0x10 [ 191.500948][ T6942] ? dump_interrupted+0xf0/0xf0 [ 191.500975][ T6942] ? filp_open+0x182/0x1d0 [ 191.500999][ T6942] ? 0xffffffffff600000 [ 191.501020][ T6942] do_coredump+0x1bf7/0x2bd0 [ 191.501052][ T6942] ? __cfi_do_coredump+0x10/0x10 [ 191.501079][ T6942] ? asm_exc_page_fault+0x2b/0x30 [ 191.501113][ T6942] ? __kasan_slab_free+0x6a/0x80 [ 191.501147][ T6942] ? kmem_cache_free+0x1c1/0x4c0 [ 191.501179][ T6942] get_signal+0x11fd/0x14f0 [ 191.501207][ T6942] arch_do_signal_or_restart+0x96/0x720 [ 191.501240][ T6942] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 191.501275][ T6942] irqentry_exit_to_user_mode+0x4e/0xb0 [ 191.501307][ T6942] irqentry_exit+0x16/0x60 [ 191.501336][ T6942] exc_page_fault+0x66/0xc0 [ 191.501364][ T6942] asm_exc_page_fault+0x2b/0x30 [ 191.501389][ T6942] RIP: 0033:0x7f2378b8e931 [ 191.501408][ T6942] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 191.501429][ T6942] RSP: 002b:00000000fffffd10 EFLAGS: 00010217 [ 191.501452][ T6942] RAX: 0000000000000000 RBX: 00007f2378db6080 RCX: 00007f2378b8e929 [ 191.501470][ T6942] RDX: 0000000000000000 RSI: 00000000fffffd10 RDI: 0000000001000000 [ 191.501485][ T6942] RBP: 00007f2378c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 191.501501][ T6942] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 191.501516][ T6942] R13: 0000000000000000 R14: 00007f2378db6080 R15: 00007ffcfcd42f18 [ 191.501535][ T6942] [ 191.501575][ T6942] memory: usage 307200kB, limit 307200kB, failcnt 21310 [ 191.974599][ T6942] memory+swap: usage 431820kB, limit 9007199254740988kB, failcnt 0 [ 191.982818][ T6942] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 191.989971][ T6942] Memory cgroup stats for /syz1: [ 191.990139][ T6942] cache 314404864 [ 191.998790][ T6942] rss 94208 [ 192.001938][ T6942] rss_huge 0 [ 192.005157][ T6942] shmem 247586816 [ 192.010390][ T6942] mapped_file 0 [ 192.013890][ T6942] dirty 0 [ 192.016863][ T6942] writeback 0 [ 192.020213][ T6942] workingset_refault_anon 560 [ 192.024904][ T6942] workingset_refault_file 1149 [ 192.029727][ T6942] swap 127610880 [ 192.033481][ T6942] swapcached 86016 [ 192.037526][ T6942] pgpgin 459185 [ 192.041177][ T6942] pgpgout 383918 [ 192.044911][ T6942] pgfault 197927 [ 192.048516][ T6942] pgmajfault 2142 [ 192.053872][ T6942] inactive_anon 128532480 [ 192.058282][ T6942] active_anon 119222272 [ 192.062457][ T6942] inactive_file 0 [ 192.066134][ T6942] active_file 0 [ 192.069677][ T6942] unevictable 66818048 [ 192.073775][ T6942] hierarchical_memory_limit 314572800 [ 192.079212][ T6942] hierarchical_memsw_limit 9223372036854771712 [ 192.085560][ T6942] total_cache 314404864 [ 192.090002][ T6942] total_rss 94208 [ 192.093663][ T6942] total_rss_huge 0 [ 192.097593][ T6942] total_shmem 247586816 [ 192.101784][ T6942] total_mapped_file 0 [ 192.105778][ T6942] total_dirty 0 [ 192.109307][ T6942] total_writeback 0 [ 192.113286][ T6942] total_workingset_refault_anon 560 [ 192.118543][ T6942] total_workingset_refault_file 1149 [ 192.123853][ T6942] total_swap 127610880 [ 192.128006][ T6942] total_swapcached 86016 [ 192.132265][ T6942] total_pgpgin 459185 [ 192.136269][ T6942] total_pgpgout 383918 [ 192.140403][ T6942] total_pgfault 197927 [ 192.144482][ T6942] total_pgmajfault 2142 [ 192.150278][ T6942] total_inactive_anon 128532480 [ 192.155164][ T6942] total_active_anon 119222272 [ 192.160099][ T6942] total_inactive_file 0 [ 192.164282][ T6942] total_active_file 0 [ 192.168351][ T6942] total_unevictable 66818048 [ 192.172963][ T6942] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2218,pid=6944,uid=0 [ 192.190557][ T6942] Memory cgroup out of memory: Killed process 6944 (syz.1.2218) total-vm:90092kB, anon-rss:948kB, file-rss:21944kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:0 [ 192.798975][ T7131] overlay: Unknown parameter 'fsmagic' [ 192.912948][ T7140] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.025352][ T7151] SELinux: Context /dev/kvm is not valid (left unmapped). [ 193.039526][ T36] kauditd_printk_skb: 48 callbacks suppressed [ 193.039549][ T36] audit: type=1400 audit(1750806530.229:572): avc: denied { relabelfrom } for pid=7148 comm="syz.5.2291" name="" dev="pipefs" ino=36897 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 193.097446][ T36] audit: type=1400 audit(1750806530.299:573): avc: denied { relabelto } for pid=7148 comm="syz.5.2291" name="" dev="pipefs" ino=36897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="/dev/kvm" [ 193.153349][ T6940] syz.1.2218 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 193.265837][ T6940] CPU: 1 UID: 0 PID: 6940 Comm: syz.1.2218 Not tainted 6.12.30-syzkaller-g94ce385c22d5 #0 16e511e29439c8b2668c1520ec6e7e54ef5e5f6a [ 193.265879][ T6940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 193.265895][ T6940] Call Trace: [ 193.265903][ T6940] [ 193.265913][ T6940] __dump_stack+0x21/0x30 [ 193.265946][ T6940] dump_stack_lvl+0x10c/0x190 [ 193.265973][ T6940] ? __cfi_dump_stack_lvl+0x10/0x10 [ 193.266000][ T6940] ? ___ratelimit+0x3f7/0x5a0 [ 193.266026][ T6940] dump_stack+0x19/0x20 [ 193.266051][ T6940] dump_header+0xd7/0x490 [ 193.266085][ T6940] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 193.266110][ T6940] oom_kill_process+0x4c0/0x7e0 [ 193.266132][ T6940] ? sched_clock_cpu+0x75/0x400 [ 193.266159][ T6940] out_of_memory+0x7ee/0xbd0 [ 193.266179][ T6940] ? __cfi_out_of_memory+0x10/0x10 [ 193.266199][ T6940] ? mutex_lock_killable+0x92/0x1c0 [ 193.266227][ T6940] ? __cfi_mutex_lock_killable+0x10/0x10 [ 193.266256][ T6940] mem_cgroup_out_of_memory+0x279/0x350 [ 193.266292][ T6940] ? drain_obj_stock+0xed0/0xed0 [ 193.266324][ T6940] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 193.266355][ T6940] try_charge_memcg+0x8f7/0xde0 [ 193.266381][ T6940] ? set_pte_range+0x441/0x660 [ 193.266413][ T6940] ? __cfi_try_charge_memcg+0x10/0x10 [ 193.266439][ T6940] ? __alloc_pages_noprof+0x30d/0x6c0 [ 193.266463][ T6940] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 193.266490][ T6940] __mem_cgroup_charge+0xf6/0x410 [ 193.266517][ T6940] ? __cfi_folio_unlock+0x10/0x10 [ 193.266538][ T6940] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 193.266568][ T6940] shmem_alloc_and_add_folio+0x86d/0x1050 [ 193.266606][ T6940] ? put_swap_device+0x130/0x130 [ 193.266640][ T6940] ? shmem_huge_global_enabled+0x2da/0x360 [ 193.266672][ T6940] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 193.266704][ T6940] ? __kasan_check_write+0x18/0x20 [ 193.266730][ T6940] ? _raw_spin_lock+0x8c/0x120 [ 193.266764][ T6940] shmem_get_folio_gfp+0x5f0/0x1380 [ 193.266809][ T6940] ? shmem_get_folio+0xc0/0xc0 [ 193.266839][ T6940] ? follow_page_pte+0xa5c/0xb90 [ 193.266862][ T6940] ? inode_to_bdi+0x6d/0x100 [ 193.266888][ T6940] shmem_write_begin+0xf4/0x270 [ 193.266924][ T6940] generic_perform_write+0x330/0x960 [ 193.266954][ T6940] ? __cfi_generic_perform_write+0x10/0x10 [ 193.266981][ T6940] ? down_write+0xe9/0x2a0 [ 193.267011][ T6940] ? file_update_time+0xa3/0x220 [ 193.267036][ T6940] shmem_file_write_iter+0x105/0x130 [ 193.267060][ T6940] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 193.267085][ T6940] __kernel_write_iter+0x392/0x830 [ 193.267115][ T6940] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 193.267139][ T6940] ? __cfi___kernel_write_iter+0x10/0x10 [ 193.267168][ T6940] ? get_dump_page+0x160/0x220 [ 193.267189][ T6940] ? __asan_memset+0x39/0x50 [ 193.267215][ T6940] ? iov_iter_bvec+0xc0/0x180 [ 193.267247][ T6940] dump_user_range+0xb06/0xdf0 [ 193.267276][ T6940] ? __cfi_dump_emit+0x10/0x10 [ 193.267304][ T6940] ? __cfi_dump_user_range+0x10/0x10 [ 193.267333][ T6940] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 193.267364][ T6940] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 193.267399][ T6940] elf_core_dump+0x2cd9/0x3810 [ 193.267438][ T6940] ? __cfi_elf_core_dump+0x10/0x10 [ 193.267481][ T6940] ? dump_interrupted+0xf0/0xf0 [ 193.267507][ T6940] ? filp_open+0x182/0x1d0 [ 193.267531][ T6940] ? 0xffffffffff600000 [ 193.267551][ T6940] do_coredump+0x1bf7/0x2bd0 [ 193.267582][ T6940] ? __cfi_do_coredump+0x10/0x10 [ 193.267609][ T6940] ? asm_exc_page_fault+0x2b/0x30 [ 193.267642][ T6940] ? __kasan_slab_free+0x6a/0x80 [ 193.267673][ T6940] ? kmem_cache_free+0x1c1/0x4c0 [ 193.267702][ T6940] get_signal+0x11fd/0x14f0 [ 193.267731][ T6940] arch_do_signal_or_restart+0x96/0x720 [ 193.267763][ T6940] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 193.267803][ T6940] irqentry_exit_to_user_mode+0x4e/0xb0 [ 193.267836][ T6940] irqentry_exit+0x16/0x60 [ 193.267865][ T6940] exc_page_fault+0x66/0xc0 [ 193.267894][ T6940] asm_exc_page_fault+0x2b/0x30 [ 193.267917][ T6940] RIP: 0033:0x7f2378b8e931 [ 193.267936][ T6940] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 193.267956][ T6940] RSP: 002b:00000000fffffd10 EFLAGS: 00010217 [ 193.267978][ T6940] RAX: 0000000000000000 RBX: 00007f2378db6080 RCX: 00007f2378b8e929 [ 193.267994][ T6940] RDX: 0000000000000000 RSI: 00000000fffffd10 RDI: 0000000001000000 [ 193.268010][ T6940] RBP: 00007f2378c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 193.268025][ T6940] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 193.268039][ T6940] R13: 0000000000000000 R14: 00007f2378db6080 R15: 00007ffcfcd42f18 [ 193.268059][ T6940] [ 193.556892][ T7172] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.575250][ T6940] memory: usage 307200kB, limit 307200kB, failcnt 24382 [ 193.587750][ T7172] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:351 [ 193.591227][ T6940] memory+swap: usage 431760kB, limit 9007199254740988kB, failcnt 0 [ 193.657035][ T7179] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2300'. [ 193.766660][ T6940] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 193.775536][ T6940] Memory cgroup stats for /syz1: [ 193.775693][ T6940] cache 314368000 [ 193.797517][ T6940] rss 147456 [ 193.800771][ T6940] rss_huge 0 [ 193.803985][ T6940] shmem 247541760 [ 193.817475][ T6940] mapped_file 0 [ 193.822167][ T6940] dirty 0 [ 193.825214][ T6940] writeback 0 [ 193.830575][ T6940] workingset_refault_anon 560 [ 193.836068][ T6940] workingset_refault_file 1396 [ 193.840932][ T6940] swap 127549440 [ 193.844534][ T6940] swapcached 57344 [ 193.848570][ T6940] pgpgin 470498 [ 193.852287][ T6940] pgpgout 395231 [ 193.855903][ T6940] pgfault 198257 [ 193.859620][ T6940] pgmajfault 2149 [ 193.863260][ T6940] inactive_anon 179335168 [ 193.867613][ T6940] active_anon 68411392 [ 193.871715][ T6940] inactive_file 8192 [ 193.875628][ T6940] active_file 0 [ 193.879142][ T6940] unevictable 66818048 [ 193.883227][ T6940] hierarchical_memory_limit 314572800 [ 193.888650][ T6940] hierarchical_memsw_limit 9223372036854771712 [ 193.894816][ T6940] total_cache 314368000 [ 193.899016][ T6940] total_rss 147456 [ 193.902841][ T6940] total_rss_huge 0 [ 193.906575][ T6940] total_shmem 247541760 [ 193.910794][ T6940] total_mapped_file 0 [ 193.914806][ T6940] total_dirty 0 [ 193.918653][ T6940] total_writeback 0 [ 193.922586][ T6940] total_workingset_refault_anon 560 [ 193.927857][ T6940] total_workingset_refault_file 1396 [ 193.933338][ T6940] total_swap 127549440 [ 193.937485][ T6940] total_swapcached 57344 [ 193.941753][ T6940] total_pgpgin 470498 [ 193.945758][ T6940] total_pgpgout 395231 [ 193.949888][ T6940] total_pgfault 198257 [ 193.954196][ T6940] total_pgmajfault 2149 [ 193.958433][ T6940] total_inactive_anon 179335168 [ 193.963299][ T6940] total_active_anon 68411392 [ 193.967938][ T6940] total_inactive_file 8192 [ 193.972368][ T6940] total_active_file 0 [ 193.976365][ T6940] total_unevictable 66818048 [ 193.981018][ T6940] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2218,pid=6942,uid=0 [ 193.995932][ T6940] Memory cgroup out of memory: Killed process 6942 (syz.1.2218) total-vm:90092kB, anon-rss:948kB, file-rss:22092kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:0 [ 194.293760][ T36] audit: type=1400 audit(1750806531.499:574): avc: denied { ioctl } for pid=7219 comm="syz.5.2310" path="socket:[36949]" dev="sockfs" ino=36949 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 194.497581][ T36] audit: type=1400 audit(1750806531.709:575): avc: denied { rmdir } for pid=7227 comm="syz.6.2313" name="file0" dev="incremental-fs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 195.259710][ T7285] netlink: 'syz.4.2330': attribute type 4 has an invalid length. [ 195.767553][ T335] usb 7-1: new low-speed USB device number 26 using dummy_hcd [ 195.870601][ T7313] overlayfs: failed to clone upperpath [ 195.917438][ T335] usb 7-1: Invalid ep0 maxpacket: 16 [ 195.941657][ T7328] fuse: Unknown parameter 'grouK~00000000000000000000' [ 195.949362][ T7328] overlayfs: failed to clone lowerpath [ 196.047526][ T335] usb 7-1: new low-speed USB device number 27 using dummy_hcd [ 196.197461][ T335] usb 7-1: Invalid ep0 maxpacket: 16 [ 196.202906][ T335] usb usb7-port1: attempt power cycle [ 196.547510][ T335] usb 7-1: new low-speed USB device number 28 using dummy_hcd [ 196.567853][ T335] usb 7-1: Invalid ep0 maxpacket: 16 [ 196.697501][ T335] usb 7-1: new low-speed USB device number 29 using dummy_hcd [ 196.718292][ T335] usb 7-1: Invalid ep0 maxpacket: 16 [ 196.723994][ T335] usb usb7-port1: unable to enumerate USB device [ 223.510836][ T36] audit: type=1400 audit(1750806560.719:576): avc: denied { read } for pid=7334 comm="syz.6.2350" name="usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 223.548251][ T36] audit: type=1400 audit(1750806560.749:577): avc: denied { open } for pid=7334 comm="syz.6.2350" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 223.585387][ T36] audit: type=1400 audit(1750806560.749:578): avc: denied { ioctl } for pid=7334 comm="syz.6.2350" path="/dev/usbmon0" dev="devtmpfs" ino=90 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 223.612043][ T36] audit: type=1400 audit(1750806560.789:579): avc: denied { write } for pid=31 comm="kworker/1:0" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=37065 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 224.164014][ T7388] netlink: 'syz.1.2369': attribute type 4 has an invalid length. [ 224.171842][ T7388] netlink: 'syz.1.2369': attribute type 7 has an invalid length. [ 224.179631][ T7388] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.2369'. [ 224.204834][ T7394] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2371'. [ 224.383109][ T7438] can0: slcan on ttyS3. [ 224.480725][ T7438] can0 (unregistered): slcan off ttyS3. [ 224.615627][ T7487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 224.618367][ T7487] syz.6.2394: vmalloc error: size 17179873280, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 224.627557][ T7490] TCP: TCP_TX_DELAY enabled [ 224.633479][ T7494] tipc: Started in network mode [ 224.640467][ T7487] ,cpuset= [ 224.646192][ T7494] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 224.650823][ T7487] syz6 [ 224.661600][ T7494] tipc: Enabling of bearer rejected, failed to enable media [ 224.662198][ T7490] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 224.678235][ T7487] ,mems_allowed=0 [ 224.688236][ T7487] CPU: 1 UID: 0 PID: 7487 Comm: syz.6.2394 Not tainted 6.12.30-syzkaller-g94ce385c22d5 #0 16e511e29439c8b2668c1520ec6e7e54ef5e5f6a [ 224.688277][ T7487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 224.688294][ T7487] Call Trace: [ 224.688304][ T7487] [ 224.688313][ T7487] __dump_stack+0x21/0x30 [ 224.688348][ T7487] dump_stack_lvl+0x10c/0x190 [ 224.688377][ T7487] ? __cfi_dump_stack_lvl+0x10/0x10 [ 224.688408][ T7487] dump_stack+0x19/0x20 [ 224.688434][ T7487] warn_alloc+0x1bc/0x2a0 [ 224.688459][ T7487] ? stack_depot_save_flags+0x399/0x800 [ 224.688490][ T7487] ? __cfi_warn_alloc+0x10/0x10 [ 224.688515][ T7487] ? kasan_save_track+0x4f/0x80 [ 224.688548][ T7487] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 224.688579][ T7487] ? xskq_create+0x68/0x2a0 [ 224.688603][ T7487] ? xsk_init_queue+0xb6/0x120 [ 224.688627][ T7487] ? xsk_setsockopt+0x43f/0x6f0 [ 224.688651][ T7487] ? do_sock_setsockopt+0x26d/0x400 [ 224.688677][ T7487] ? __x64_sys_setsockopt+0x1b8/0x250 [ 224.688703][ T7487] ? x64_sys_call+0x2adc/0x2ee0 [ 224.688735][ T7487] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 224.688763][ T7487] __vmalloc_node_range_noprof+0x135/0x1420 [ 224.688796][ T7487] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 224.688824][ T7487] ? avc_has_perm+0x144/0x220 [ 224.688850][ T7487] ? kasan_save_alloc_info+0x40/0x50 [ 224.688876][ T7487] ? __kasan_kmalloc+0x96/0xb0 [ 224.688909][ T7487] vmalloc_user_noprof+0x77/0x90 [ 224.688934][ T7487] ? xskq_create+0xdb/0x2a0 [ 224.688958][ T7487] xskq_create+0xdb/0x2a0 [ 224.688982][ T7487] xsk_init_queue+0xb6/0x120 [ 224.689017][ T7487] xsk_setsockopt+0x43f/0x6f0 [ 224.689041][ T7487] ? __cfi_xsk_setsockopt+0x10/0x10 [ 224.689066][ T7487] ? do_futex+0x309/0x500 [ 224.689100][ T7487] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 224.689125][ T7487] ? security_socket_setsockopt+0x33/0xd0 [ 224.689159][ T7487] ? __cfi_xsk_setsockopt+0x10/0x10 [ 224.689183][ T7487] do_sock_setsockopt+0x26d/0x400 [ 224.689209][ T7487] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 224.689237][ T7487] __x64_sys_setsockopt+0x1b8/0x250 [ 224.689264][ T7487] x64_sys_call+0x2adc/0x2ee0 [ 224.689295][ T7487] do_syscall_64+0x58/0xf0 [ 224.689315][ T7487] ? clear_bhb_loop+0x50/0xa0 [ 224.689341][ T7487] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 224.689366][ T7487] RIP: 0033:0x7fef18d8e929 [ 224.689386][ T7487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.689407][ T7487] RSP: 002b:00007fef19c6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 224.689434][ T7487] RAX: ffffffffffffffda RBX: 00007fef18fb5fa0 RCX: 00007fef18d8e929 [ 224.689454][ T7487] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 224.689471][ T7487] RBP: 00007fef18e10b39 R08: 0000000000000004 R09: 0000000000000000 [ 224.689487][ T7487] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 224.689502][ T7487] R13: 0000000000000000 R14: 00007fef18fb5fa0 R15: 00007ffc14ea6b78 [ 224.689522][ T7487] [ 224.692800][ T7487] Mem-Info: [ 224.809867][ T7516] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 224.826496][ T7487] active_anon:5672 inactive_anon:102 isolated_anon:0 [ 224.826496][ T7487] active_file:20785 inactive_file:2628 isolated_file:0 [ 224.826496][ T7487] unevictable:16314 dirty:82 writeback:0 [ 224.826496][ T7487] slab_reclaimable:8146 slab_unreclaimable:73110 [ 224.826496][ T7487] mapped:30025 shmem:428 pagetables:1160 [ 224.826496][ T7487] sec_pagetables:0 bounce:0 [ 224.826496][ T7487] kernel_misc_reclaimable:0 [ 224.826496][ T7487] free:1491130 free_pcp:2543 free_cma:0 [ 224.972306][ T36] audit: type=1400 audit(1750806562.139:580): avc: denied { bpf } for pid=7529 comm="syz.1.2403" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 225.068812][ T7487] Node 0 active_anon:37888kB inactive_anon:408kB active_file:83140kB inactive_file:10512kB unevictable:65256kB isolated(anon):0kB isolated(file):0kB mapped:134300kB dirty:328kB writeback:0kB shmem:17112kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5248kB pagetables:4940kB sec_pagetables:0kB all_unreclaimable? no [ 225.133619][ T7487] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2966020kB mlocked:0kB bounce:0kB free_pcp:5808kB local_pcp:5808kB free_cma:0kB [ 225.215410][ T7487] lowmem_reserve[]: 0 3921 3921 [ 225.220456][ T7487] Normal free:2944044kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:64088kB inactive_anon:408kB active_file:83340kB inactive_file:10512kB unevictable:65256kB writepending:328kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:8568kB local_pcp:5300kB free_cma:0kB [ 225.253508][ T7487] lowmem_reserve[]: 0 0 0 [ 225.258259][ T7487] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 6*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 225.275311][ T7548] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2408'. [ 225.287480][ T7548] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2408'. [ 225.307710][ T7487] Normal: 1131*4kB (UME) 1119*8kB (UME) 1099*16kB (UME) 319*32kB (ME) 1083*64kB (UME) 292*128kB (UME) 166*256kB (ME) 107*512kB (UME) 68*1024kB (UME) 32*2048kB (UME) 622*4096kB (UM) = 2928116kB [ 225.327507][ T7487] 55242 total pagecache pages [ 225.332358][ T7487] 91 pages in swap cache [ 225.336769][ T7487] Free swap = 123740kB [ 225.341404][ T7487] Total swap = 124996kB [ 225.345680][ T7487] 2097051 pages RAM [ 225.349923][ T7487] 0 pages HighMem/MovableOnly [ 225.354831][ T7487] 351516 pages reserved [ 225.359409][ T7487] 0 pages cma reserved [ 225.366623][ T7487] Memory allocations: [ 225.370947][ T7487] 0 B 0 init/main.c:1370 func:do_initcalls [ 225.378572][ T7487] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 225.386769][ T7487] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 225.394927][ T7487] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 225.403652][ T7487] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 225.411923][ T7487] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 225.420789][ T7487] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 225.429175][ T7487] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 225.437261][ T7487] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 225.452329][ T7487] 0 B 0 init/initramfs.c:101 func:find_link [ 225.481812][ T7550] kvm: user requested TSC rate below hardware speed [ 225.488862][ T7550] binder: Bad value for 'defcontext' [ 225.569804][ T7555] vcan0: entered allmulticast mode [ 225.817444][ T10] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 225.957967][ T36] audit: type=1400 audit(1750806563.169:581): avc: denied { create } for pid=7592 comm="syz.5.2423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 225.987657][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 225.998204][ T10] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 226.015270][ T10] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 226.029992][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 226.041382][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 226.052488][ T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 226.062434][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 226.077258][ T10] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 226.086474][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.096295][ T10] usb 7-1: config 0 descriptor?? [ 226.303053][ T10] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 226.517930][ T10] usb 7-1: USB disconnect, device number 30 [ 226.538491][ T10] usblp0: removed [ 226.631581][ T36] audit: type=1400 audit(1750806563.839:582): avc: denied { map } for pid=7632 comm="syz.4.2436" path="pipe:[37321]" dev="pipefs" ino=37321 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 226.663188][ T36] audit: type=1400 audit(1750806563.869:583): avc: denied { execute } for pid=7634 comm="syz.4.2437" name="file0" dev="ramfs" ino=37324 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 227.130379][ T7659] fuseblk: Bad value for 'source' [ 227.596675][ T7703] bpf: Bad value for 'uid' [ 227.700466][ T7707] overlayfs: failed to clone upperpath [ 228.481579][ T7783] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 228.481944][ T7783] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 228.496585][ T7783] rust_binder: Write failure EINVAL in pid:435 [ 228.534915][ T36] audit: type=1400 audit(1750806565.739:584): avc: denied { execute } for pid=7791 comm="syz.6.2491" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 228.592433][ T7801] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 228.593169][ T7801] 9pnet_fd: Insufficient options for proto=fd [ 228.632391][ T7805] tmpfs: Unknown parameter '0xffffffffffffffff' [ 228.644315][ T36] audit: type=1400 audit(1750806565.849:585): avc: denied { accept } for pid=7804 comm="syz.1.2496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 228.671445][ T36] audit: type=1400 audit(1750806565.879:586): avc: denied { mounton } for pid=7807 comm="syz.1.2497" path="/238/file0" dev="tmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 228.770635][ T7823] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2502'. [ 229.229923][ T7849] tipc: New replicast peer: 255.255.255.255 [ 229.236210][ T7849] tipc: Enabled bearer , priority 10 [ 229.397472][ T10] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 229.509066][ T7875] tipc: Cannot configure node identity twice [ 229.557450][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 229.568244][ T10] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 229.593487][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.610459][ T10] usb 7-1: config 0 descriptor?? [ 230.262139][ T7905] IPv6: NLM_F_CREATE should be specified when creating new route [ 230.358479][ T63] tipc: Node number set to 1 [ 230.737310][ T10] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 230.755446][ T10] asix 7-1:0.0: probe with driver asix failed with error -71 [ 230.766266][ T10] usb 7-1: USB disconnect, device number 31 [ 231.220077][ T7974] fuse: Bad value for 'fd' [ 231.236002][ T7977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=146 sclass=netlink_route_socket pid=7977 comm=syz.5.2555 [ 231.641327][ T36] audit: type=1400 audit(1750806568.849:587): avc: denied { mounton } for pid=7980 comm="syz.6.2557" path="mnt:[4026532303]" dev="nsfs" ino=4026532303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 231.641594][ T7981] rust_binder: Read failure Err(EAGAIN) in pid:456 [ 231.665415][ T36] audit: type=1326 audit(1750806568.879:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7962 comm="syz.4.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b4b8e929 code=0x7fc00000 [ 231.697222][ T7981] rust_binder: Failed to allocate buffer. len:18446744073709551528, is_oneway:true [ 231.697258][ T7981] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 231.706747][ T7981] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:456 [ 231.925550][ T36] audit: type=1326 audit(1750806569.129:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8021 comm="syz.4.2573" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f50b4b8e929 code=0x0 [ 232.106510][ T8029] overlayfs: failed to resolve './file0': -2 [ 232.152704][ T8037] overlay: Unknown parameter 'mounts' [ 232.157858][ T8036] overlayfs: failed to clone upperpath [ 232.329831][ T8072] overlayfs: failed to clone upperpath [ 232.422451][ T8083] fuse: Bad value for 'rootmode' [ 232.851831][ T8110] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 232.852150][ T8110] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 232.907479][ T8110] rust_binder: Write failure EINVAL in pid:468 [ 232.937429][ T36] audit: type=1400 audit(1750806570.119:590): avc: denied { accept } for pid=8109 comm="syz.6.2605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 233.237451][ T49] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 233.427412][ T49] usb 7-1: Using ep0 maxpacket: 32 [ 233.433736][ T49] usb 7-1: config 0 has an invalid interface number: 236 but max is 2 [ 233.442438][ T49] usb 7-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 233.461882][ T49] usb 7-1: config 0 has an invalid interface number: 135 but max is 2 [ 233.477567][ T49] usb 7-1: config 0 has an invalid interface number: 244 but max is 2 [ 233.495889][ T49] usb 7-1: config 0 has an invalid interface number: 111 but max is 2 [ 233.507340][ T49] usb 7-1: config 0 has an invalid interface number: 96 but max is 2 [ 233.516340][ T49] usb 7-1: config 0 has 5 interfaces, different from the descriptor's value: 3 [ 233.525711][ T49] usb 7-1: config 0 has no interface number 0 [ 233.532192][ T49] usb 7-1: config 0 has no interface number 1 [ 233.546286][ T49] usb 7-1: config 0 has no interface number 2 [ 233.556209][ T49] usb 7-1: config 0 has no interface number 3 [ 233.562548][ T49] usb 7-1: config 0 has no interface number 4 [ 233.577425][ T49] usb 7-1: config 0 interface 236 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 233.588604][ T49] usb 7-1: config 0 interface 236 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 233.607413][ T49] usb 7-1: config 0 interface 236 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 233.618602][ T49] usb 7-1: config 0 interface 236 altsetting 5 bulk endpoint 0xA has invalid maxpacket 8 [ 233.637439][ T49] usb 7-1: config 0 interface 236 altsetting 5 endpoint 0x6 has invalid maxpacket 1527, setting to 1024 [ 233.655853][ T49] usb 7-1: config 0 interface 236 altsetting 5 has 5 endpoint descriptors, different from the interface descriptor's value: 14 [ 233.669544][ T49] usb 7-1: too many endpoints for config 0 interface 135 altsetting 167: 40, using maximum allowed: 30 [ 233.682730][ T49] usb 7-1: config 0 interface 135 altsetting 167 has a duplicate endpoint with address 0x9, skipping [ 233.695219][ T49] usb 7-1: config 0 interface 135 altsetting 167 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 233.706741][ T49] usb 7-1: config 0 interface 135 altsetting 167 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 233.718266][ T49] usb 7-1: config 0 interface 135 altsetting 167 has an invalid descriptor for endpoint zero, skipping [ 233.729639][ T49] usb 7-1: config 0 interface 135 altsetting 167 has an invalid descriptor for endpoint zero, skipping [ 233.741011][ T49] usb 7-1: config 0 interface 135 altsetting 167 endpoint 0xF has an invalid bInterval 249, changing to 7 [ 233.752492][ T49] usb 7-1: config 0 interface 135 altsetting 167 has a duplicate endpoint with address 0xC, skipping [ 233.763694][ T49] usb 7-1: config 0 interface 135 altsetting 167 has 9 endpoint descriptors, different from the interface descriptor's value: 40 [ 233.777404][ T49] usb 7-1: config 0 interface 244 altsetting 203 endpoint 0x4 has invalid maxpacket 1015, setting to 64 [ 233.788806][ T49] usb 7-1: config 0 interface 244 altsetting 203 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 233.800254][ T49] usb 7-1: config 0 interface 244 altsetting 203 has an invalid descriptor for endpoint zero, skipping [ 233.811623][ T49] usb 7-1: config 0 interface 244 altsetting 203 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 233.822851][ T49] usb 7-1: config 0 interface 244 altsetting 203 has a duplicate endpoint with address 0xA, skipping [ 233.833807][ T49] usb 7-1: config 0 interface 244 altsetting 203 has 7 endpoint descriptors, different from the interface descriptor's value: 15 [ 233.848037][ T49] usb 7-1: config 0 interface 111 altsetting 212 has a duplicate endpoint with address 0xF, skipping [ 233.859020][ T49] usb 7-1: config 0 interface 111 altsetting 212 has a duplicate endpoint with address 0x5, skipping [ 233.869976][ T49] usb 7-1: config 0 interface 111 altsetting 212 has a duplicate endpoint with address 0x9, skipping [ 233.880987][ T49] usb 7-1: config 0 interface 111 altsetting 212 has an invalid descriptor for endpoint zero, skipping [ 233.892364][ T49] usb 7-1: config 0 interface 111 altsetting 212 has a duplicate endpoint with address 0xB, skipping [ 233.903570][ T49] usb 7-1: config 0 interface 111 altsetting 212 has 8 endpoint descriptors, different from the interface descriptor's value: 28 [ 233.917134][ T49] usb 7-1: config 0 interface 96 altsetting 177 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 233.929109][ T49] usb 7-1: config 0 interface 96 altsetting 177 has a duplicate endpoint with address 0x8A, skipping [ 233.940229][ T49] usb 7-1: config 0 interface 96 altsetting 177 has a duplicate endpoint with address 0x4, skipping [ 233.951282][ T49] usb 7-1: config 0 interface 96 altsetting 177 has a duplicate endpoint with address 0xC, skipping [ 233.962382][ T49] usb 7-1: config 0 interface 96 altsetting 177 has a duplicate endpoint with address 0xE, skipping [ 233.981176][ T49] usb 7-1: config 0 interface 96 altsetting 177 has a duplicate endpoint with address 0x6, skipping [ 233.993697][ T49] usb 7-1: config 0 interface 96 altsetting 177 has a duplicate endpoint with address 0xF, skipping [ 234.004962][ T49] usb 7-1: config 0 interface 96 altsetting 177 has a duplicate endpoint with address 0x9, skipping [ 234.016169][ T49] usb 7-1: config 0 interface 96 altsetting 177 has a duplicate endpoint with address 0x7, skipping [ 234.027463][ T49] usb 7-1: config 0 interface 96 altsetting 177 has a duplicate endpoint with address 0x6, skipping [ 234.038507][ T49] usb 7-1: config 0 interface 96 altsetting 177 has an invalid descriptor for endpoint zero, skipping [ 234.049524][ T49] usb 7-1: config 0 interface 96 altsetting 177 has a duplicate endpoint with address 0xC, skipping [ 234.060636][ T49] usb 7-1: config 0 interface 96 altsetting 177 has a duplicate endpoint with address 0x6, skipping [ 234.071575][ T49] usb 7-1: config 0 interface 236 has no altsetting 0 [ 234.078562][ T49] usb 7-1: config 0 interface 135 has no altsetting 0 [ 234.085396][ T49] usb 7-1: config 0 interface 244 has no altsetting 0 [ 234.092248][ T49] usb 7-1: config 0 interface 111 has no altsetting 0 [ 234.099066][ T49] usb 7-1: config 0 interface 96 has no altsetting 0 [ 234.107123][ T49] usb 7-1: New USB device found, idVendor=07aa, idProduct=002a, bcdDevice=45.4d [ 234.116211][ T49] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.124269][ T49] usb 7-1: Product: syz [ 234.128655][ T49] usb 7-1: Manufacturer: syz [ 234.133278][ T49] usb 7-1: SerialNumber: syz [ 234.142472][ T49] usb 7-1: config 0 descriptor?? [ 234.147883][ T8112] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 234.361108][ T49] pl2303 7-1:0.236: required endpoints missing [ 234.363701][ T8151] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2619'. [ 234.370553][ T8112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.378171][ T8151] fuse: Bad value for 'fd' [ 234.386026][ T8112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.404056][ T49] pl2303 7-1:0.135: required endpoints missing [ 234.415560][ T49] hub 7-1:0.244: Invalid hub with more than one config or interface [ 234.423680][ T49] hub 7-1:0.244: probe with driver hub failed with error -22 [ 234.431883][ T49] pl2303 7-1:0.244: required endpoints missing [ 234.441147][ T49] pl2303 7-1:0.111: required endpoints missing [ 234.449254][ T49] pl2303 7-1:0.96: required endpoints missing [ 234.457214][ T49] usb 7-1: USB disconnect, device number 32 [ 234.472048][ T36] audit: type=1326 audit(1750806571.679:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8160 comm="syz.5.2622" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e0c78e929 code=0x0 [ 235.063892][ T8197] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 235.072070][ T8197] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 235.078737][ T8197] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:474 [ 235.097509][ T305] bridge_slave_1: left allmulticast mode [ 235.112460][ T305] bridge_slave_1: left promiscuous mode [ 235.118560][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.126669][ T305] bridge_slave_0: left allmulticast mode [ 235.132758][ T305] bridge_slave_0: left promiscuous mode [ 235.138658][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.142694][ T8204] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 235.146608][ T8204] rust_binder: Write failure EINVAL in pid:479 [ 235.248726][ T8195] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.262042][ T8195] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.270628][ T8195] bridge_slave_0: entered allmulticast mode [ 235.277483][ T8195] bridge_slave_0: entered promiscuous mode [ 235.284098][ T8195] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.291267][ T8195] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.298407][ T8195] bridge_slave_1: entered allmulticast mode [ 235.311469][ T8195] bridge_slave_1: entered promiscuous mode [ 235.329579][ T8211] netlink: 'syz.5.2639': attribute type 4 has an invalid length. [ 235.338691][ T8211] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.2639'. [ 235.356549][ T305] tipc: Disabling bearer [ 235.365096][ T305] tipc: Left network mode [ 235.379961][ T305] veth1_macvtap: left promiscuous mode [ 235.385549][ T305] veth0_vlan: left promiscuous mode [ 235.483769][ T8195] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.490941][ T8195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.498270][ T8195] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.505319][ T8195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.528346][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.535739][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.545715][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.552929][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.562274][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.569391][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.595558][ T8195] veth0_vlan: entered promiscuous mode [ 235.607097][ T8195] veth1_macvtap: entered promiscuous mode [ 235.674366][ T8231] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8231 comm=syz.5.2643 [ 235.699088][ T8233] /dev/rnullb0: Can't lookup blockdev [ 235.740245][ T8239] /dev/rnullb0: Can't lookup blockdev [ 235.887516][ T63] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 236.017485][ T63] usb 7-1: device descriptor read/64, error -71 [ 236.257487][ T63] usb 7-1: device descriptor read/64, error -71 [ 236.403686][ T8253] 9pnet: p9_errstr2errno: server reported unknown error pA;KZ44/@qkp [ 236.403686][ T8253] C<+ [ 236.497713][ T63] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 236.647874][ T63] usb 7-1: device descriptor read/64, error -71 [ 236.887462][ T63] usb 7-1: device descriptor read/64, error -71 [ 236.997670][ T63] usb usb7-port1: attempt power cycle [ 237.337478][ T63] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 237.358622][ T63] usb 7-1: device descriptor read/8, error -71 [ 237.488570][ T63] usb 7-1: device descriptor read/8, error -71 [ 237.727469][ T63] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 237.748596][ T63] usb 7-1: device descriptor read/8, error -71 [ 237.878630][ T63] usb 7-1: device descriptor read/8, error -71 [ 237.881562][ T8279] tipc: Enabling of bearer rejected, failed to enable media [ 237.987548][ T63] usb usb7-port1: unable to enumerate USB device [ 238.795174][ T8307] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 238.866138][ T8309] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 238.872764][ T8310] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 239.057478][ T10] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 239.217448][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 239.223772][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 239.236928][ T10] usb 7-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 239.246220][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.257523][ T10] usb 7-1: config 0 descriptor?? [ 239.410067][ T36] audit: type=1400 audit(1750806576.619:592): avc: denied { setattr } for pid=8333 comm="syz.5.2684" name="XDP" dev="sockfs" ino=39850 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 239.667320][ T10] kye 0003:0458:4018.0009: hidraw0: USB HID v0.07 Device [HID 0458:4018] on usb-dummy_hcd.6-1/input0 [ 239.803908][ T8352] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 239.803945][ T8352] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:19 [ 239.897283][ T8362] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 239.911321][ T8362] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:21 [ 239.937950][ T8364] fuse: Unknown parameter '0xffffffffffffffff0x0000000000000006' [ 239.969317][ T49] usb 7-1: USB disconnect, device number 37 [ 239.978172][ T36] audit: type=1400 audit(1750806577.169:593): avc: denied { associate } for pid=8317 comm="syz.6.2679" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 240.079519][ T8374] overlayfs: failed to clone upperpath [ 240.482130][ T8379] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 240.500659][ T8379] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 240.559431][ T8381] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:496 [ 241.329434][ T8404] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:500 [ 241.352750][ T8409] bpf: Bad value for 'gid' [ 241.359360][ T8411] SELinux: security_context_str_to_sid () failed with errno=-22 [ 241.381199][ T8414] overlayfs: failed to resolve './file0': -2 [ 241.510462][ T8424] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 241.510627][ T8424] rust_binder: inc_ref_done called when no active inc_refs [ 242.354529][ T8427] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 242.361970][ T8427] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:514 [ 242.371818][ T8427] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 242.381057][ T8427] rust_binder: Read failure Err(EFAULT) in pid:514 [ 242.413178][ T8432] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 242.419935][ T8432] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:518 [ 242.757441][ T31] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 242.917449][ T31] usb 7-1: Using ep0 maxpacket: 32 [ 242.923903][ T31] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 242.932213][ T31] usb 7-1: config 0 has no interface number 0 [ 242.940258][ T31] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 242.949391][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.957453][ T31] usb 7-1: Product: syz [ 242.961638][ T31] usb 7-1: Manufacturer: syz [ 242.966237][ T31] usb 7-1: SerialNumber: syz [ 242.971585][ T31] usb 7-1: config 0 descriptor?? [ 242.977699][ T31] smsc95xx v2.0.0 [ 243.378099][ T31] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 243.389018][ T31] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 243.598938][ T31] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 243.609802][ T31] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -32 [ 243.793818][ T36] audit: type=1326 audit(1750806580.999:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.1.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2378b8e929 code=0x7fc00000 [ 244.305910][ T10] usb 7-1: USB disconnect, device number 38 [ 269.570619][ T36] audit: type=1400 audit(1750806606.779:595): avc: denied { append } for pid=8469 comm="syz.4.2728" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 269.787936][ T8507] overlayfs: failed to clone upperpath [ 269.902934][ T8525] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2748'. [ 269.995515][ T8532] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.191260][ T8546] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4176780528 (4176780528 ns) > initial count (1845496875 ns). Using initial count to start timer. [ 270.463950][ T36] audit: type=1326 audit(1750806607.669:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8572 comm="syz.1.2765" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2378b8e929 code=0x0 [ 270.862717][ T8588] 9pnet_fd: Insufficient options for proto=fd [ 270.921620][ T36] audit: type=1400 audit(1750806608.129:597): avc: denied { mount } for pid=8595 comm="syz.5.2774" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 270.943944][ T8596] overlayfs: failed to clone upperpath [ 270.972571][ T8603] /dev/rnullb0: Can't lookup blockdev [ 271.219234][ T8621] /dev/rnullb0: Can't lookup blockdev [ 271.788075][ T8632] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2786'. [ 271.797164][ T8632] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2786'. [ 271.806385][ T8632] netlink: 'syz.4.2786': attribute type 6 has an invalid length. [ 271.814352][ T8632] netlink: 'syz.4.2786': attribute type 5 has an invalid length. [ 271.822417][ T8633] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2785'. [ 271.822698][ T8632] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2786'. [ 271.887433][ T8648] overlayfs: failed to resolve './bus': -2 [ 272.633539][ T8668] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2798'. [ 272.647428][ T36] audit: type=1326 audit(1750806609.849:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8663 comm="syz.4.2796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fefb8e929 code=0x7ffc0000 [ 272.679351][ T36] audit: type=1326 audit(1750806609.849:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8663 comm="syz.4.2796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fefb8e929 code=0x7ffc0000 [ 272.703059][ T36] audit: type=1326 audit(1750806609.849:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8663 comm="syz.4.2796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f7fefb8e929 code=0x7ffc0000 [ 272.726777][ T36] audit: type=1326 audit(1750806609.849:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8663 comm="syz.4.2796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fefb8e929 code=0x7ffc0000 [ 272.750569][ T36] audit: type=1326 audit(1750806609.849:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8663 comm="syz.4.2796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fefb8e929 code=0x7ffc0000 [ 272.774213][ T36] audit: type=1326 audit(1750806609.849:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8663 comm="syz.4.2796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7fefb8e929 code=0x7ffc0000 [ 272.798001][ T36] audit: type=1326 audit(1750806609.849:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8663 comm="syz.4.2796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fefb8e929 code=0x7ffc0000 [ 273.558479][ T8719] overlayfs: conflicting options: userxattr,metacopy=on [ 273.884163][ T8759] bpf: Bad value for 'uid' [ 274.355730][ T292] tipc: Subscription rejected, illegal request [ 274.442096][ T8828] overlayfs: failed to clone upperpath [ 275.618638][ T8852] netlink: 'syz.6.2866': attribute type 11 has an invalid length. [ 275.646681][ T8855] binder: Unknown parameter '@ދO<6'$sl' [ 276.388853][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 276.388874][ T36] audit: type=1400 audit(276.361:620): avc: denied { create } for pid=8886 comm="syz.4.2882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 276.470295][ T8914] netlink: 'syz.6.2889': attribute type 11 has an invalid length. [ 276.526269][ T8926] 9pnet_fd: Insufficient options for proto=fd [ 276.532623][ T8927] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2895'. [ 276.544820][ T8929] overlayfs: failed to resolve './file0': -2 [ 276.557653][ T8933] overlayfs: failed to clone upperpath [ 277.190221][ T8958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2906'. [ 277.446236][ T8983] /dev/nbd1: Can't lookup blockdev [ 277.768538][ T9018] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2929'. [ 277.790100][ T9021] bpf: Bad value for 'mode' [ 278.783041][ T9069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2948'. [ 278.802791][ T9078] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2951'. [ 278.898422][ T9105] /dev/rnullb0: Can't lookup blockdev [ 279.571682][ T36] audit: type=1326 audit(279.541:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9147 comm="syz.5.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0c78e929 code=0x7ffc0000 [ 279.612907][ T36] audit: type=1326 audit(279.561:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9147 comm="syz.5.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0c78e929 code=0x7ffc0000 [ 279.637152][ T36] audit: type=1326 audit(279.561:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9147 comm="syz.5.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f9e0c78e929 code=0x7ffc0000 [ 279.669469][ T36] audit: type=1326 audit(279.561:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9147 comm="syz.5.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0c78e929 code=0x7ffc0000 [ 279.698601][ T36] audit: type=1326 audit(279.561:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9147 comm="syz.5.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0c78e929 code=0x7ffc0000 [ 279.721749][ T36] audit: type=1326 audit(279.561:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9147 comm="syz.5.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f9e0c78e929 code=0x7ffc0000 [ 279.756602][ T36] audit: type=1326 audit(279.561:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9147 comm="syz.5.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0c78e929 code=0x7ffc0000 [ 279.780260][ T36] audit: type=1326 audit(279.561:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9147 comm="syz.5.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f9e0c78e929 code=0x7ffc0000 [ 279.803662][ T36] audit: type=1326 audit(279.561:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9147 comm="syz.5.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e0c78e929 code=0x7ffc0000 [ 280.039481][ T9174] fuse: Bad value for 'fd' [ 280.044131][ T9175] fuse: Bad value for 'fd' [ 280.369504][ T9186] overlayfs: failed to clone upperpath [ 280.587993][ T9188] fuse: Bad value for 'fd' [ 280.869420][ T9192] netlink: 'syz.1.2989': attribute type 4 has an invalid length. [ 280.896915][ T9192] netlink: 296 bytes leftover after parsing attributes in process `syz.1.2989'. [ 281.029113][ T9201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2993'. [ 281.097641][ T9211] fuse: Unknown parameter '00000000000000000000006' [ 281.766788][ T9246] tipc: Started in network mode [ 281.772020][ T9246] tipc: Node identity 4, cluster identity 4711 [ 281.778915][ T9246] tipc: Node number set to 4 [ 282.200328][ T9260] fuse: Unknown parameter 'Fd' [ 282.327957][ T9265] fuse: Unknown parameter '!k' [ 282.345862][ T9265] overlay: Unknown parameter 'measure' [ 282.490407][ T9274] overlayfs: failed to clone upperpath [ 282.567525][ T9278] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3019'. [ 282.733045][ T9298] overlayfs: failed to clone upperpath [ 283.562603][ T9397] overlay: Unknown parameter 'dont_measure' [ 284.555866][ T9491] /dev/rnullb0: Can't lookup blockdev [ 284.761592][ T9513] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=9513 comm=syz.1.3101 [ 284.790573][ T9517] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3102'. [ 286.215556][ T36] kauditd_printk_skb: 30 callbacks suppressed [ 286.215578][ T36] audit: type=1400 audit(67109406.187:660): avc: denied { accept } for pid=9579 comm="syz.6.3123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 287.473132][ T9638] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=9638 comm=syz.5.3143 [ 287.487374][ T9638] /dev/rnullb0: Can't lookup blockdev [ 287.963689][ T9688] 9pnet_fd: Insufficient options for proto=fd [ 287.972382][ T9689] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3159'. [ 288.687799][ T36] audit: type=1400 audit(67109408.667:661): avc: denied { create } for pid=9718 comm="syz.4.3171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 288.918422][ T9742] overlayfs: failed to clone upperpath [ 289.587484][ T9789] tmpfs: Unknown parameter 'nr_bloc' [ 289.702349][ T9805] fuse: Bad value for 'fd' [ 289.839941][ T9807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3200'. [ 290.080906][ T9829] cgroup: Unknown subsys name 'measure' [ 290.248060][ T9840] overlayfs: failed to clone upperpath [ 290.308122][ T9843] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3213'. [ 290.451281][ T9858] incfs: Options parsing error. -22 [ 290.457574][ T9858] incfs: mount failed -22 [ 290.986076][ T9915] syz.1.3235: vmalloc error: size 17179873280, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 291.001185][ T9915] CPU: 0 UID: 0 PID: 9915 Comm: syz.1.3235 Not tainted 6.12.30-syzkaller-g94ce385c22d5 #0 16e511e29439c8b2668c1520ec6e7e54ef5e5f6a [ 291.001222][ T9915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 291.001240][ T9915] Call Trace: [ 291.001249][ T9915] [ 291.001260][ T9915] __dump_stack+0x21/0x30 [ 291.001295][ T9915] dump_stack_lvl+0x10c/0x190 [ 291.001325][ T9915] ? __cfi_dump_stack_lvl+0x10/0x10 [ 291.001355][ T9915] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 291.001397][ T9915] dump_stack+0x19/0x20 [ 291.001426][ T9915] warn_alloc+0x1bc/0x2a0 [ 291.001451][ T9915] ? stack_depot_save_flags+0x38/0x800 [ 291.001484][ T9915] ? __cfi_warn_alloc+0x10/0x10 [ 291.001509][ T9915] ? kasan_save_track+0x4f/0x80 [ 291.001541][ T9915] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 291.001583][ T9915] ? xskq_create+0x68/0x2a0 [ 291.001610][ T9915] ? xsk_init_queue+0xb6/0x120 [ 291.001634][ T9915] ? xsk_setsockopt+0x43f/0x6f0 [ 291.001658][ T9915] ? do_sock_setsockopt+0x26d/0x400 [ 291.001685][ T9915] ? __x64_sys_setsockopt+0x1b8/0x250 [ 291.001710][ T9915] ? x64_sys_call+0x2adc/0x2ee0 [ 291.001743][ T9915] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 291.001771][ T9915] __vmalloc_node_range_noprof+0x135/0x1420 [ 291.001806][ T9915] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 291.001830][ T9915] ? avc_has_perm+0x144/0x220 [ 291.001857][ T9915] ? kasan_save_alloc_info+0x40/0x50 [ 291.001885][ T9915] ? __kasan_kmalloc+0x96/0xb0 [ 291.001935][ T9915] vmalloc_user_noprof+0x77/0x90 [ 291.001962][ T9915] ? xskq_create+0xdb/0x2a0 [ 291.001987][ T9915] xskq_create+0xdb/0x2a0 [ 291.002014][ T9915] xsk_init_queue+0xb6/0x120 [ 291.002039][ T9915] xsk_setsockopt+0x43f/0x6f0 [ 291.002064][ T9915] ? __cfi_xsk_setsockopt+0x10/0x10 [ 291.002089][ T9915] ? do_futex+0x309/0x500 [ 291.002125][ T9915] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 291.002155][ T9915] ? security_socket_setsockopt+0x33/0xd0 [ 291.002185][ T9915] ? __cfi_xsk_setsockopt+0x10/0x10 [ 291.002210][ T9915] do_sock_setsockopt+0x26d/0x400 [ 291.002236][ T9915] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 291.002265][ T9915] __x64_sys_setsockopt+0x1b8/0x250 [ 291.002292][ T9915] x64_sys_call+0x2adc/0x2ee0 [ 291.002324][ T9915] do_syscall_64+0x58/0xf0 [ 291.002346][ T9915] ? clear_bhb_loop+0x50/0xa0 [ 291.002374][ T9915] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 291.002401][ T9915] RIP: 0033:0x7f2378b8e929 [ 291.002421][ T9915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.002444][ T9915] RSP: 002b:00007f2379a2d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 291.002471][ T9915] RAX: ffffffffffffffda RBX: 00007f2378db5fa0 RCX: 00007f2378b8e929 [ 291.002491][ T9915] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 291.002508][ T9915] RBP: 00007f2378c10b39 R08: 0000000000000004 R09: 0000000000000000 [ 291.002525][ T9915] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 291.002543][ T9915] R13: 0000000000000000 R14: 00007f2378db5fa0 R15: 00007ffcfcd42f18 [ 291.002574][ T9915] [ 291.002652][ T9915] Mem-Info: [ 291.308990][ T9915] active_anon:8382 inactive_anon:730 isolated_anon:0 [ 291.308990][ T9915] active_file:12818 inactive_file:12554 isolated_file:0 [ 291.308990][ T9915] unevictable:16314 dirty:50 writeback:0 [ 291.308990][ T9915] slab_reclaimable:6983 slab_unreclaimable:75076 [ 291.308990][ T9915] mapped:31808 shmem:3128 pagetables:1225 [ 291.308990][ T9915] sec_pagetables:0 bounce:0 [ 291.308990][ T9915] kernel_misc_reclaimable:0 [ 291.308990][ T9915] free:1484241 free_pcp:3913 free_cma:0 [ 291.354636][ T9915] Node 0 active_anon:33528kB inactive_anon:2920kB active_file:51272kB inactive_file:50216kB unevictable:65256kB isolated(anon):0kB isolated(file):0kB mapped:127232kB dirty:200kB writeback:0kB shmem:12512kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5088kB pagetables:4900kB sec_pagetables:0kB all_unreclaimable? no [ 291.390169][ T9915] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2966020kB mlocked:0kB bounce:0kB free_pcp:5808kB local_pcp:5808kB free_cma:0kB [ 291.421098][ T9915] lowmem_reserve[]: 0 3921 3921 [ 291.426267][ T9915] Normal free:2988960kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33068kB inactive_anon:2920kB active_file:51272kB inactive_file:50216kB unevictable:65256kB writepending:200kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:64kB local_pcp:0kB free_cma:0kB [ 291.457969][ T9915] lowmem_reserve[]: 0 0 0 [ 291.462394][ T9915] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 6*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 291.478004][ T9915] Normal: 2455*4kB (UME) 2535*8kB (UME) 1345*16kB (UME) 1006*32kB (UME) 1296*64kB (UME) 317*128kB (UME) 164*256kB (ME) 105*512kB (UME) 65*1024kB (UME) 31*2048kB (UME) 624*4096kB (UM) = 2989028kB [ 291.497380][ T9915] 45528 total pagecache pages [ 291.502140][ T9915] 719 pages in swap cache [ 291.506571][ T9915] Free swap = 120940kB [ 291.510783][ T9915] Total swap = 124996kB [ 291.515007][ T9915] 2097051 pages RAM [ 291.518998][ T9915] 0 pages HighMem/MovableOnly [ 291.524116][ T9915] 351516 pages reserved [ 291.528520][ T9915] 0 pages cma reserved [ 291.535507][ T9915] Memory allocations: [ 291.540040][ T9915] 0 B 0 init/main.c:1370 func:do_initcalls [ 291.547474][ T9915] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 291.555617][ T9915] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 291.563666][ T9915] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 291.571805][ T9915] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 291.581368][ T9915] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 291.590313][ T9915] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 291.600564][ T9915] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 291.608847][ T9915] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 291.616973][ T9915] 0 B 0 init/initramfs.c:101 func:find_link [ 291.730388][ T9922] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.737599][ T9922] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.744661][ T9922] bridge_slave_0: entered allmulticast mode [ 291.751029][ T9922] bridge_slave_0: entered promiscuous mode [ 291.757725][ T9922] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.764910][ T9922] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.772040][ T9922] bridge_slave_1: entered allmulticast mode [ 291.778360][ T9922] bridge_slave_1: entered promiscuous mode [ 291.827456][ T9922] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.834530][ T9922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.841879][ T9922] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.848966][ T9922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.870446][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.877964][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.887509][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.894570][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.904337][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.911556][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.937902][ T9922] veth0_vlan: entered promiscuous mode [ 291.950119][ T9922] veth1_macvtap: entered promiscuous mode [ 292.846091][ T9979] rust_binder: Error while translating object. [ 292.846126][ T9979] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 292.852390][ T9979] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:19 [ 292.880559][ T9983] 9pnet_fd: Insufficient options for proto=fd [ 293.119448][ T13] bridge_slave_1: left allmulticast mode [ 293.125290][ T13] bridge_slave_1: left promiscuous mode [ 293.131261][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.267577][ T13] bridge_slave_0: left allmulticast mode [ 293.273519][ T13] bridge_slave_0: left promiscuous mode [ 293.279462][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.429371][ T13] veth1_macvtap: left promiscuous mode [ 293.435079][ T13] veth0_vlan: left promiscuous mode [ 293.442292][T10007] 9pnet: Could not find request transport: unixs1`{nGSO& PՍwhSw@"[`ޤ/!`vPnN"H7!<mL寮<H(ѯج{AƦI]?St [ 294.047200][T10030] 9pnet_fd: Insufficient options for proto=fd [ 294.495807][T10083] netlink: 'syz.1.3291': attribute type 4 has an invalid length. [ 294.811222][T10097] overlayfs: failed to clone lowerpath [ 295.156196][T10105] 9pnet_fd: Insufficient options for proto=fd [ 295.397483][T10139] netlink: 'syz.1.3315': attribute type 7 has an invalid length. [ 295.403369][T10140] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3315'. [ 295.414394][T10139] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3315'. [ 295.423804][T10140] gretap0: entered promiscuous mode [ 295.430481][T10141] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3315'. [ 295.441314][T10141] 0{X: renamed from gretap0 [ 295.447833][T10141] 0{X: left promiscuous mode [ 295.453126][T10141] 0{X: entered allmulticast mode [ 295.459179][T10139] /dev/rnullb0: Can't lookup blockdev [ 295.459448][T10141] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 296.114122][T10199] fuse: Unknown parameter 'rootmoUe' [ 296.121274][T10200] fuse: Unknown parameter 'rootmoUe' [ 296.181092][T10208] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=10208 comm=syz.7.3339 [ 296.208811][T10210] bpf: Bad value for 'gid' [ 296.372093][T10242] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3349'. [ 296.448600][ T36] audit: type=1326 audit(67109416.428:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10255 comm="syz.1.3355" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2378b8e929 code=0x0 [ 296.523359][T10260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3355'. [ 297.376388][T10290] rust_binder: Write failure EINVAL in pid:48 [ 297.383387][T10290] rust_binder: got new transaction with bad transaction stack [ 297.383410][T10290] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:48 [ 297.385702][T10291] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 297.827116][T10298] overlayfs: failed to clone upperpath [ 298.443316][T10327] tipc: Enabling of bearer rejected, failed to enable media [ 298.462562][ T36] audit: type=1400 audit(67109418.438:663): avc: denied { bind } for pid=10328 comm="syz.7.3381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 298.503758][ T36] audit: type=1400 audit(67109418.478:664): avc: denied { append } for pid=10330 comm="syz.7.3382" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 298.570536][T10347] SELinux: Context system_u:object_r:mnt_t:s0 is not valid (left unmapped). [ 298.579710][ T36] audit: type=1400 audit(67109418.558:665): avc: denied { relabelto } for pid=10346 comm="syz.1.3387" name="rnullb0" dev="tmpfs" ino=597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:mnt_t:s0" [ 298.605759][ T36] audit: type=1400 audit(67109418.558:666): avc: denied { associate } for pid=10346 comm="syz.1.3387" name="rnullb0" dev="tmpfs" ino=597 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:mnt_t:s0" [ 298.738313][T10364] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3393'. [ 298.901662][ T36] audit: type=1400 audit(67109418.878:667): avc: denied { read } for pid=10369 comm="syz.1.3396" name="rnullb0" dev="tmpfs" ino=597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:mnt_t:s0" [ 298.927585][ T36] audit: type=1400 audit(67109418.878:668): avc: denied { open } for pid=10369 comm="syz.1.3396" path="/dev/rnullb0" dev="tmpfs" ino=597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:mnt_t:s0" [ 298.960073][T10375] batadv_slave_1: entered promiscuous mode [ 298.966599][T10374] batadv_slave_1: left promiscuous mode [ 299.533400][T10387] rust_binder: Write failure EFAULT in pid:69 [ 300.403604][ T36] audit: type=1400 audit(67109420.378:669): avc: denied { map } for pid=10432 comm="syz.7.3418" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 300.619683][T10441] binder: Binderfs stats mode cannot be changed during a remount [ 300.943679][T10451] rust_binder: Error while translating object. [ 300.943730][T10451] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 300.950014][T10451] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:103 [ 300.975390][T10458] rust_binder: validate_parent_fixup: fixup_min_offset=50, parent_offset=26 [ 300.984719][T10458] rust_binder: Error while translating object. [ 300.993586][T10458] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 300.999864][T10458] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:106 [ 301.037863][T10462] binder: Unknown parameter '0000000000000000000000000000000000000000000' [ 301.125896][ T36] audit: type=1400 audit(67109421.108:670): avc: denied { write } for pid=10470 comm="syz.1.3433" name="rnullb0" dev="tmpfs" ino=597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:mnt_t:s0" [ 301.404780][T10489] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3440'. [ 301.587774][T10494] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:112 [ 301.588791][T10494] rust_binder: Error while translating object. [ 301.603996][T10494] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 301.605066][T10496] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3443'. [ 301.620670][T10494] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:112 [ 301.803414][T10512] 9pnet_fd: Insufficient options for proto=fd [ 301.874883][T10525] rust_binder: Error while translating object. [ 301.874926][T10525] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 301.876716][T10524] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 301.891632][T10525] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:127 [ 301.925185][T10524] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 301.940038][T10527] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10527 comm=syz.7.3454 [ 301.948484][ T36] audit: type=1400 audit(67109609.916:671): avc: denied { setattr } for pid=10526 comm="syz.7.3454" name="#1b" dev="tmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 301.992247][T10524] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 302.004651][T10530] binder: Unknown parameter 'appraise_type' [ 302.015018][ T36] audit: type=1400 audit(67109609.916:672): avc: denied { mounton } for pid=10526 comm="syz.7.3454" path="/47/bus/file0" dev="overlay" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 302.081535][T10532] can: request_module (can-proto-0) failed. [ 302.407182][ T36] audit: type=1400 audit(67109610.386:673): avc: denied { map } for pid=10535 comm="syz.1.3458" path="/dev/rnullb0" dev="tmpfs" ino=597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:mnt_t:s0" [ 302.655985][T10539] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3459'. [ 302.837834][T10545] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 302.837859][T10545] rust_binder: Read failure Err(EFAULT) in pid:136 [ 303.213876][ T36] audit: type=1400 audit(67109611.186:674): avc: denied { listen } for pid=10568 comm="syz.5.3469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 303.218700][T10562] binder: Unknown parameter '' [ 304.130180][T10601] rust_binder: Write failure EFAULT in pid:150 [ 304.285607][ T36] audit: type=1326 audit(67109612.266:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10588 comm="syz.6.3477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef18d8e929 code=0x7fc00000 [ 304.322927][T10609] overlayfs: failed to clone lowerpath [ 304.330657][T10609] overlay: Unknown parameter 'mounts' [ 304.335631][ T36] audit: type=1326 audit(67109612.266:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10588 comm="syz.6.3477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fef18d8e929 code=0x7fc00000 [ 304.359464][T10609] overlay: Unknown parameter 'mounts' [ 304.359583][ T36] audit: type=1326 audit(67109612.266:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10588 comm="syz.6.3477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef18d8e929 code=0x7fc00000 [ 304.388341][T10609] overlay: Unknown parameter 'mounts' [ 304.388338][ T36] audit: type=1326 audit(67109612.266:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10588 comm="syz.6.3477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef18d8e929 code=0x7fc00000 [ 304.388377][ T36] audit: type=1326 audit(67109612.266:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10588 comm="syz.6.3477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef18d8e929 code=0x7fc00000 [ 304.440448][T10609] overlay: Unknown parameter 'mounts' [ 304.448659][ T36] audit: type=1326 audit(67109612.266:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10588 comm="syz.6.3477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef18d8e929 code=0x7fc00000 [ 304.460925][T10609] overlay: Unknown parameter 'mounts' [ 304.478012][T10609] overlay: Unknown parameter 'mounts' [ 304.483632][T10609] overlay: Unknown parameter 'mounts' [ 304.489382][T10609] overlay: Unknown parameter 'mounts' [ 304.495045][T10609] overlay: Unknown parameter 'mounts' [ 304.500597][T10609] overlay: Unknown parameter 'mounts' [ 304.506304][T10609] overlay: Unknown parameter 'mounts' [ 304.511922][T10609] overlay: Unknown parameter 'mounts' [ 304.517482][T10609] overlay: Unknown parameter 'mounts' [ 304.523006][T10609] overlay: Unknown parameter 'mounts' [ 304.528619][T10609] overlay: Unknown parameter 'mounts' [ 304.534236][T10609] overlay: Unknown parameter 'mounts' [ 304.539981][T10609] overlay: Unknown parameter 'mounts' [ 304.549382][T10609] overlay: Unknown parameter 'mounts' [ 304.550003][T10634] netlink: 'syz.6.3492': attribute type 4 has an invalid length. [ 304.562728][T10609] overlay: Unknown parameter 'mounts' [ 304.568590][T10609] overlay: Unknown parameter 'mounts' [ 304.574217][T10609] overlay: Unknown parameter 'mounts' [ 304.580060][T10609] overlay: Unknown parameter 'mounts' [ 304.585862][T10609] overlay: Unknown parameter 'mounts' [ 304.591440][T10609] overlay: Unknown parameter 'mounts' [ 304.597461][T10609] overlay: Unknown parameter 'mounts' [ 304.603191][T10609] overlay: Unknown parameter 'mounts' [ 304.609055][T10609] overlay: Unknown parameter 'mounts' [ 304.614669][T10609] overlay: Unknown parameter 'mounts' [ 304.620525][T10609] overlay: Unknown parameter 'mounts' [ 304.626288][T10609] overlay: Unknown parameter 'mounts' [ 304.631562][T10645] /dev/rnullb0: Can't lookup blockdev [ 304.637249][T10609] overlay: Unknown parameter 'mounts' [ 304.642900][T10609] overlay: Unknown parameter 'mounts' [ 304.712840][T10664] batadv_slave_1: entered promiscuous mode [ 304.720751][T10663] batadv_slave_1: left promiscuous mode [ 305.337218][T10693] binder: Unknown parameter 'sta' [ 306.605682][T10752] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3534'. [ 306.614982][T10752] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3534'. [ 307.298957][T10794] batadv_slave_0: entered promiscuous mode [ 307.357354][T10794] binder: Unknown parameter 'batadv_slave_0' [ 307.568183][ T36] kauditd_printk_skb: 63 callbacks suppressed [ 307.568304][ T36] audit: type=1400 audit(67109615.536:744): avc: denied { create } for pid=10801 comm="syz.1.3549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 307.617316][T10807] rust_kernel: panicked at drivers/android/binder/node.rs:877:13: [ 307.617316][T10807] attempt to subtract with overflow [ 307.635205][T10807] ------------[ cut here ]------------ [ 307.640743][T10807] kernel BUG at rust/helpers/bug.c:7! SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 307.656110][ T36] audit: type=1400 audit(67109615.636:745): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 307.689543][T10799] batadv_slave_0: left promiscuous mode [ 307.701837][ T36] audit: type=1400 audit(67109615.636:746): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 307.760653][T10807] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 307.768025][T10807] CPU: 1 UID: 0 PID: 10807 Comm: syz.7.3550 Not tainted 6.12.30-syzkaller-g94ce385c22d5 #0 16e511e29439c8b2668c1520ec6e7e54ef5e5f6a [ 307.781624][T10807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 307.791715][T10807] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 307.797024][T10807] Code: 3e ca e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 3d f0 3a f0 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 77 34 73 7c 90 90 90 90 90 90 90 90 90 [ 307.816729][T10807] RSP: 0018:ffffc9000100da90 EFLAGS: 00010246 [ 307.822813][T10807] RAX: 0000000000000061 RBX: 1ffff92000201b54 RCX: 552b11f71ab60b00 [ 307.830793][T10807] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 307.838778][T10807] RBP: ffffc9000100da90 R08: ffff8881f6f294d3 R09: 1ffff1103ede529a [ 307.846755][T10807] R10: dffffc0000000000 R11: ffffed103ede529b R12: 0000000000000000 [ 307.854748][T10807] R13: dffffc0000000000 R14: ffffc9000100dac0 R15: ffffc9000100daf0 [ 307.862746][T10807] FS: 00007febcadf76c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 307.871693][T10807] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 307.878292][T10807] CR2: 0000200000ffd000 CR3: 00000001148de000 CR4: 00000000003526b0 [ 307.886372][T10807] Call Trace: [ 307.889661][T10807] [ 307.892600][T10807] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 307.900087][T10807] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 307.908089][T10807] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 307.921653][T10807] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 307.928902][T10807] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 307.936918][T10807] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0xb2/0xc0 [ 307.946833][T10807] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0x10/0x10 [ 307.957445][T10807] _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x17e5/0x1860 [ 307.967191][T10807] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x10/0x10 [ 307.977276][T10807] ? __kasan_check_write+0x18/0x20 [ 307.982400][T10807] ? _raw_spin_lock+0x8c/0x120 [ 307.987227][T10807] ? __cfi__raw_spin_lock+0x10/0x10 [ 307.992455][T10807] ? __kasan_check_write+0x18/0x20 [ 307.997581][T10807] _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x278d/0x9d20 [ 308.007157][T10807] ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10 [ 308.017109][T10807] ? is_bpf_text_address+0x17b/0x1a0 [ 308.022447][T10807] ? kernel_text_address+0xa9/0xe0 [ 308.027660][T10807] ? __kernel_text_address+0x11/0x40 [ 308.032954][T10807] ? unwind_get_return_address+0x51/0x90 [ 308.038594][T10807] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 308.044762][T10807] ? arch_stack_walk+0x10b/0x170 [ 308.049713][T10807] ? stack_depot_save_flags+0x38/0x800 [ 308.055206][T10807] ? kasan_save_alloc_info+0x40/0x50 [ 308.060502][T10807] ? kasan_save_track+0x4f/0x80 [ 308.065368][T10807] ? kasan_save_track+0x3e/0x80 [ 308.070258][T10807] ? kasan_save_alloc_info+0x40/0x50 [ 308.075550][T10807] ? __kasan_kmalloc+0x96/0xb0 [ 308.080328][T10807] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 308.086927][T10807] ? krealloc_noprof+0x8d/0x130 [ 308.091790][T10807] ? rust_helper_krealloc+0x33/0xd0 [ 308.096997][T10807] ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0xaf/0x100 [ 308.106558][T10807] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x715/0x1440 [ 308.117077][T10807] ? _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x1a9/0x2c20 [ 308.126462][T10807] ? _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 308.135381][T10807] ? __se_sys_ioctl+0x135/0x1b0 [ 308.140256][T10807] ? __x64_sys_ioctl+0x7f/0xa0 [ 308.145038][T10807] ? do_syscall_64+0x58/0xf0 [ 308.149635][T10807] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 308.155719][T10807] ? __kasan_kmalloc+0x96/0xb0 [ 308.160503][T10807] ? kasan_save_alloc_info+0x40/0x50 [ 308.165819][T10807] ? __kasan_kmalloc+0x96/0xb0 [ 308.170603][T10807] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 308.177210][T10807] ? __kasan_check_write+0x18/0x20 [ 308.182336][T10807] ? _raw_spin_lock+0x8c/0x120 [ 308.187121][T10807] ? __cfi__raw_spin_lock+0x10/0x10 [ 308.192337][T10807] ? _raw_spin_unlock+0x45/0x60 [ 308.197208][T10807] ? rust_helper_spin_unlock+0x19/0x30 [ 308.202675][T10807] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0xdfc/0x1440 [ 308.213193][T10807] ? 0xffffffff81000000 [ 308.217353][T10807] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 308.228134][T10807] ? prep_new_page+0x1c/0x120 [ 308.232822][T10807] ? get_page_from_freelist+0x46bb/0x4750 [ 308.238555][T10807] ? __kasan_check_read+0x15/0x20 [ 308.243588][T10807] ? __kasan_check_write+0x18/0x20 [ 308.248710][T10807] ? page_counter_uncharge+0x14d/0x170 [ 308.254186][T10807] ? 0xffffffff81000000 [ 308.258349][T10807] _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x411/0x2c20 [ 308.267478][T10807] ? __kasan_check_read+0x15/0x20 [ 308.272515][T10807] ? try_charge_memcg+0xa1a/0xde0 [ 308.277548][T10807] ? move_to_free_list+0x2d0/0x320 [ 308.282848][T10807] ? __count_memcg_events+0xdf/0x3b0 [ 308.288142][T10807] ? avc_has_extended_perms+0x7c7/0xdd0 [ 308.293707][T10807] ? __asan_memcpy+0x5a/0x80 [ 308.298350][T10807] ? avc_has_extended_perms+0x921/0xdd0 [ 308.303916][T10807] ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10 [ 308.313485][T10807] ? do_vfs_ioctl+0xeda/0x1e30 [ 308.318292][T10807] ? __cfi_lru_add+0x10/0x10 [ 308.322898][T10807] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 308.328562][T10807] ? folio_add_lru_vma+0x109/0x1c0 [ 308.333711][T10807] ? ioctl_has_perm+0x384/0x4d0 [ 308.338601][T10807] ? has_cap_mac_admin+0xd0/0xd0 [ 308.343599][T10807] ? pte_offset_map_rw_nolock+0xba/0x110 [ 308.349270][T10807] ? handle_mm_fault+0x169b/0x1b90 [ 308.354414][T10807] ? selinux_file_ioctl+0x6e0/0x1360 [ 308.359736][T10807] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 308.365308][T10807] ? __cfi_handle_mm_fault+0x10/0x10 [ 308.370613][T10807] ? lock_vma_under_rcu+0x49d/0x530 [ 308.375837][T10807] ? __fget_files+0x2c5/0x340 [ 308.380553][T10807] _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 308.389093][T10807] ? __se_sys_ioctl+0x114/0x1b0 [ 308.393965][T10807] ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10 [ 308.403094][T10807] __se_sys_ioctl+0x135/0x1b0 [ 308.407796][T10807] __x64_sys_ioctl+0x7f/0xa0 [ 308.412483][T10807] x64_sys_call+0x1878/0x2ee0 [ 308.417201][T10807] do_syscall_64+0x58/0xf0 [ 308.421641][T10807] ? clear_bhb_loop+0x50/0xa0 [ 308.426337][T10807] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 308.432245][T10807] RIP: 0033:0x7febcc78e929 [ 308.436685][T10807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.456312][T10807] RSP: 002b:00007febcadf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 308.464749][T10807] RAX: ffffffffffffffda RBX: 00007febcc9b6160 RCX: 00007febcc78e929 [ 308.472734][T10807] RDX: 0000200000000100 RSI: 00000000c0306201 RDI: 0000000000000003 [ 308.480720][T10807] RBP: 00007febcc810b39 R08: 0000000000000000 R09: 0000000000000000 [ 308.488906][T10807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.496883][T10807] R13: 0000000000000001 R14: 00007febcc9b6160 R15: 00007ffe74163588 [ 308.504875][T10807] [ 308.507914][T10807] Modules linked in: [ 308.512118][T10807] ---[ end trace 0000000000000000 ]--- [ 308.555019][ T36] audit: type=1400 audit(67109615.636:747): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.583568][ T36] audit: type=1400 audit(67109615.636:748): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.604039][ T36] audit: type=1400 audit(67109615.636:749): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 308.624414][ T36] audit: type=1400 audit(67109615.636:750): avc: denied { append open } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 308.647187][ T36] audit: type=1400 audit(67109615.636:751): avc: denied { getattr } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 308.669698][ T36] audit: type=1400 audit(67109615.656:752): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[2439]" dev="pipefs" ino=2439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 308.688442][T10807] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 308.726034][T10807] Code: 3e ca e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 3d f0 3a f0 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 77 34 73 7c 90 90 90 90 90 90 90 90 90 [ 308.763858][T10807] RSP: 0018:ffffc9000100da90 EFLAGS: 00010246 [ 308.770184][T10807] RAX: 0000000000000061 RBX: 1ffff92000201b54 RCX: 552b11f71ab60b00 [ 308.778903][T10807] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 308.787827][T10807] RBP: ffffc9000100da90 R08: ffff8881f6f294d3 R09: 1ffff1103ede529a [ 308.796785][T10807] R10: dffffc0000000000 R11: ffffed103ede529b R12: 0000000000000000 [ 308.804803][T10807] R13: dffffc0000000000 R14: ffffc9000100dac0 R15: ffffc9000100daf0 [ 308.813197][T10807] FS: 00007febcadf76c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 308.824716][ T43] bridge_slave_1: left allmulticast mode [ 308.830611][ T43] bridge_slave_1: left promiscuous mode [ 308.837232][T10807] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 308.843857][T10807] CR2: 0000200000ffd000 CR3: 00000001148de000 CR4: 00000000003526b0 [ 308.851996][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.860549][T10807] Kernel panic - not syncing: Fatal exception [ 308.866918][T10807] Kernel Offset: disabled [ 308.871248][T10807] Rebooting in 86400 seconds..