last executing test programs: 4m43.355066267s ago: executing program 0 (id=4953): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x20006, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) clock_gettime(0x4, &(0x7f0000000040)) r2 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r3 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000080904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) clock_settime(0x0, &(0x7f0000000000)={0x77359400}) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = accept4$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000240)=0x1c, 0x0) setsockopt$inet6_int(r4, 0x29, 0x24, &(0x7f0000000280)=0x2, 0x4) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x14, 0x10, 0x3, 0x5, 0x10, 0xa53, 0x10, 0x9, 0x1, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x400, 0x6) pipe(&(0x7f00000002c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x10481, 0x0) close(r7) socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) madvise(&(0x7f0000ff7000/0x6000)=nil, 0x6000, 0x17) madvise(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x14) write$binfmt_misc(r6, &(0x7f00000002c0), 0x15) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) 4m42.867799865s ago: executing program 0 (id=4964): ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000340)={0xdc, 0x0, 0x4}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @ioapic={0x4000, 0x0, 0x100, 0x2, 0x0, [{0x5d, 0x8, 0x2, '\x00', 0xb2}, {0x8, 0xe, 0x9, '\x00', 0x6}, {0xf8, 0xff, 0x5, '\x00', 0x8}, {0x0, 0xc, 0x8, '\x00', 0x8}, {0x5, 0x3, 0xb, '\x00', 0x86}, {0x7, 0x3, 0x0, '\x00', 0x8c}, {0x10, 0x27, 0x4, '\x00', 0xf9}, {0x7, 0x1, 0x1, '\x00', 0x58}, {0x8, 0x3, 0x1, '\x00', 0xd}, {0xf7, 0x8a, 0x8, '\x00', 0x81}, {0x4, 0xc, 0x6, '\x00', 0xd}, {0xde, 0x9, 0x7, '\x00', 0x4}, {0x8, 0xf, 0x8, '\x00', 0x9}, {0x4, 0x4, 0x82, '\x00', 0xfd}, {0x44, 0x7c, 0x7, '\x00', 0x10}, {0x7, 0x4, 0xc, '\x00', 0x5}, {0x3, 0x9, 0x5, '\x00', 0x2}, {0x6, 0x43, 0x35, '\x00', 0xc}, {0x7, 0x7, 0x18, '\x00', 0x2}, {0x9, 0x40, 0xa, '\x00', 0x40}, {0x5, 0x5, 0x18, '\x00', 0xa}, {0x7, 0x0, 0x0, '\x00', 0x4}, {0xfd, 0x9, 0xc3, '\x00', 0x4}, {0x81, 0x5b, 0x2}]}}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000000)={[0x34, 0x6, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000000000000, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x10, 0x800008001], 0xeeee8000, 0x3c4210}) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0xc0042, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0xbe, 0x0, 0x1}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01181100000000000040000000000400"]) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000440)={0x4, 0x0, [{0x80000007, 0xa, 0x3, 0x8, 0x7fff}, {0xc0000001, 0x3, 0xffffffff, 0x7, 0x3}, {0x0, 0x4, 0xf, 0x40, 0x402}, {0xa, 0x3, 0xfffffffd, 0x6, 0x6}]}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x400000000000, 0x81, 0x100000, 0x0, 0x7, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x2], 0x8080000, 0x42240}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x87) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r5, 0x111, 0x3, 0x0, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@loopback, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in=@empty, 0x1, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x400000b4}]}) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 4m42.858135515s ago: executing program 0 (id=4965): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) (async) getsockopt$inet6_int(r0, 0x29, 0x24, 0x0, &(0x7f0000000000)) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) socket(0x80000000000000a, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) (rerun: 64) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) (async) creat(0x0, 0x0) (async) close_range(0xffffffffffffffff, r2, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) (async) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x521a83) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x6000000}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 4m42.802995696s ago: executing program 0 (id=4966): ioprio_set$uid(0x3, 0x0, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async, rerun: 32) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x8, 0x88}, 0x0) (rerun: 32) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000140)={0x0, 0x2}) r0 = memfd_secret(0x80000) (async) r1 = socket$packet(0x11, 0x2, 0x300) (async) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'wg2\x00'}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r4=>0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) (async) keyctl$read(0xb, r2, 0x0, 0x0) (async) r5 = openat$rnullb(0xffffffffffffff9c, 0x0, 0xa00, 0x0) ioctl$BLKGETZONESZ(r5, 0x80041284, 0x0) (async, rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) (rerun: 32) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) (async, rerun: 64) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x400454cb, &(0x7f0000000980)) (rerun: 64) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) (async) setsockopt$packet_buf(r1, 0x107, 0x16, 0x0, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000040)) (async, rerun: 64) prctl$PR_SET_PTRACER(0x59616d61, 0x0) (async, rerun: 64) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000001c0)='htcp\x00', 0x5) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r6, 0xfffff000) (async, rerun: 32) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0) (rerun: 32) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) 4m42.802158845s ago: executing program 0 (id=4967): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200410a00040000008003008000f4"], 0x20}}, 0x0) 4m42.800433706s ago: executing program 0 (id=4968): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)={{0x107, 0x4, 0x1, 0x0, 0x1b9, 0x4, 0x299, 0xd}, "", ['\x00', '\x00']}, 0x220) r3 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) write$FUSE_IOCTL(r3, &(0x7f0000000100)={0x20}, 0xfdef) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x2200080, &(0x7f0000002400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) read$FUSE(r3, &(0x7f0000002440)={0x2020}, 0x2020) fstat(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r4=>0x0, <r5=>0x0}) setuid(r4) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) r7 = syz_open_dev$loop(&(0x7f0000000100), 0x3de4, 0x201) ioctl$LOOP_SET_CAPACITY(r7, 0x4c07) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0) r9 = syz_open_dev$ptys(0xc, 0x3, 0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000001280)=<r11=>0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fstat(r12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r13=>0x0}) setreuid(0x0, r13) sendmsg$netlink(r6, &(0x7f00000013c0)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbff, 0x1000}, 0xc, &(0x7f0000000100)=[{&(0x7f0000000200)={0x18, 0x19, 0x10, 0x70bd28, 0x25dfdbfc, "", [@typed={0x8, 0xa9, 0x0, 0x0, @ipv4=@loopback}]}, 0x18}, {&(0x7f0000001400)={0x10a8, 0x1a, 0x0, 0x70bd28, 0x25dfdbfd, "", [@typed={0x8, 0x4a, 0x0, 0x0, @u32=0x80000000}, @nested={0x108d, 0xa7, 0x0, 0x1, [@typed={0x40, 0x62, 0x0, 0x0, @binary="1917af19932a707eeefddb17ed27fba7241e8797c9e5bfe3aec7d985c41a757cebec31b7bada3b97a0cff946ec2cb9b82d1679de681ede2fa09b5624"}, @generic="bb3c52d0f8154bcd13200d23376e64253f109b1802f09f33e02aedb7a43e82d9c09343c3db471c2de15a07a7a0b3cc6b018b5ec3a5cb8d25568e21494e", @typed={0x8, 0xe2, 0x0, 0x0, @u32=0x8}, @generic="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", @nested={0x4, 0x11f}]}]}, 0x10a8}, {&(0x7f00000000c0)={0x1c, 0x1d, 0x0, 0x70bd25, 0x3, "", [@nested={0xc, 0x41, 0x0, 0x1, [@typed={0x8, 0x127, 0x0, 0x0, @uid=r4}]}]}, 0x1c}, {0x0}], 0x4, &(0x7f00000012c0)=[@rights={{0x38, 0x1, 0x1, [r1, r0, r1, r0, r0, r1, r1, r0, r8, r1]}}, @rights={{0x34, 0x1, 0x1, [r0, r0, r9, r1, r0, r0, r0, r1, r0]}}, @rights={{0x20, 0x1, 0x1, [r1, r1, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r10, r4, r5}}}, @rights={{0x24, 0x1, 0x1, [r0, r1, r1, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r11, r13, r5}}}], 0xf8, 0x4000}, 0x40010) 4m36.131858688s ago: executing program 1 (id=5116): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) pselect6(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x3, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r5, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="4435c61bc9a1f1ed51c7b06188c682bd59fde0261c9bc2b1f66724ea0287fb6effd2c318abfa442135afa8ca2b68dacbb4a1aa65f9c177dc50967e99edcce6e8900d450fcd9980371cd431b9c1ad0766a9cb142c1ac79715905c856c9e549753967a92c7024ac039", 0xffffffffffffff1d, 0x850, 0x0, 0x0) 4m35.297612221s ago: executing program 1 (id=5143): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000140)='./control\x00', 0x191) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='./control\x00', 0x40000000) inotify_add_watch(r1, &(0x7f00000000c0)='./control\x00', 0x10000000) fstat(r0, &(0x7f0000000180)) ioprio_set$uid(0x3, 0x0, 0x0) 4m35.262442321s ago: executing program 1 (id=5146): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000400)={'batadv_slave_1\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000600)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) 4m35.261819721s ago: executing program 1 (id=5147): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0xa0243, 0x193) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000000)=@x86={0x6, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x3, 0x0, 0x4, 0x5, 0x4, 0x72, 0x7, 0xfa, '\x00', 0x3}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f00000001c0)=@arm64_sve_vls={0x606000000015ffff, &(0x7f0000000180)=0xf6fb}) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000007105"]) recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)=""/157, 0x9d}, {&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000200)=""/112, 0x70}, {&(0x7f0000002f40)=""/205, 0xcd}, {0x0}], 0x5}, 0xc}], 0x1, 0x40010080, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) 4m35.166511923s ago: executing program 1 (id=5152): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="cc020000160001000000000000000000ac1414bb0000000000000000000000007f0000010000000000000000000000004e200000000000000000002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000fe8000000000000000000000000000bb0000000000004000000000000000000000000000000000000800000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000004000000000000000000000000009d160080240017000200000029bd700025bd70002bbd700029bd700001000000030000000028000008001f0004"], 0x2cc}}, 0x0) sendto$inet6(r1, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) dup3(r2, r0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000140)="21baece6e5bbedcf908f742fc8a104ec7185f7ee19574ef0c52180b0ec49e2a96367fdecbfc52716aa3622d6b19bf78b754c7e248fa1ffa0a487978404a7a9c56e19deeceda174a7ba54b8e9fbbab4616095df1ea49e2aa3945f2af100fe06dc4fff54db6e019a4f9810881462527e9b5222dadd", 0x74}, {&(0x7f00000015c0)="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", 0x1000}], 0x2) sendto$inet6(r1, &(0x7f00000000c0)="4435c61bc9a1f1ed51c7b06188c682bd59fde0261c9bc2b1f66724ea0287fb6effd2c318abfa442135afa8ca2b68dacbb4a1aa65f9c177dc50967e99edcce6e8900d450fcd9980371cd431b9c1ad0766a9cb142c1ac79715905c856c9e549753967a92c7024ac039", 0xffffffffffffff1d, 0x850, 0x0, 0x0) 4m35.043946474s ago: executing program 1 (id=5160): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200410a0004000000ea00008000f4"], 0x20}}, 0x0) 4m34.976780435s ago: executing program 32 (id=5160): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200410a0004000000ea00008000f4"], 0x20}}, 0x0) 4m27.574507599s ago: executing program 33 (id=4968): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)={{0x107, 0x4, 0x1, 0x0, 0x1b9, 0x4, 0x299, 0xd}, "", ['\x00', '\x00']}, 0x220) r3 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) write$FUSE_IOCTL(r3, &(0x7f0000000100)={0x20}, 0xfdef) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x2200080, &(0x7f0000002400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) read$FUSE(r3, &(0x7f0000002440)={0x2020}, 0x2020) fstat(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r4=>0x0, <r5=>0x0}) setuid(r4) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) r7 = syz_open_dev$loop(&(0x7f0000000100), 0x3de4, 0x201) ioctl$LOOP_SET_CAPACITY(r7, 0x4c07) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0) r9 = syz_open_dev$ptys(0xc, 0x3, 0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000001280)=<r11=>0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fstat(r12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r13=>0x0}) setreuid(0x0, r13) sendmsg$netlink(r6, &(0x7f00000013c0)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbff, 0x1000}, 0xc, &(0x7f0000000100)=[{&(0x7f0000000200)={0x18, 0x19, 0x10, 0x70bd28, 0x25dfdbfc, "", [@typed={0x8, 0xa9, 0x0, 0x0, @ipv4=@loopback}]}, 0x18}, {&(0x7f0000001400)={0x10a8, 0x1a, 0x0, 0x70bd28, 0x25dfdbfd, "", [@typed={0x8, 0x4a, 0x0, 0x0, @u32=0x80000000}, @nested={0x108d, 0xa7, 0x0, 0x1, [@typed={0x40, 0x62, 0x0, 0x0, @binary="1917af19932a707eeefddb17ed27fba7241e8797c9e5bfe3aec7d985c41a757cebec31b7bada3b97a0cff946ec2cb9b82d1679de681ede2fa09b5624"}, @generic="bb3c52d0f8154bcd13200d23376e64253f109b1802f09f33e02aedb7a43e82d9c09343c3db471c2de15a07a7a0b3cc6b018b5ec3a5cb8d25568e21494e", @typed={0x8, 0xe2, 0x0, 0x0, @u32=0x8}, @generic="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", @nested={0x4, 0x11f}]}]}, 0x10a8}, {&(0x7f00000000c0)={0x1c, 0x1d, 0x0, 0x70bd25, 0x3, "", [@nested={0xc, 0x41, 0x0, 0x1, [@typed={0x8, 0x127, 0x0, 0x0, @uid=r4}]}]}, 0x1c}, {0x0}], 0x4, &(0x7f00000012c0)=[@rights={{0x38, 0x1, 0x1, [r1, r0, r1, r0, r0, r1, r1, r0, r8, r1]}}, @rights={{0x34, 0x1, 0x1, [r0, r0, r9, r1, r0, r0, r0, r1, r0]}}, @rights={{0x20, 0x1, 0x1, [r1, r1, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r10, r4, r5}}}, @rights={{0x24, 0x1, 0x1, [r0, r1, r1, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r11, r13, r5}}}], 0xf8, 0x4000}, 0x40010) 4m7.553057126s ago: executing program 5 (id=5778): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r0, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x3c, 0x3f9, 0x100, 0x70bd2b, 0x25dfdbfe, {0xc, 0x1, 0x2, 0x0, 0x6, 0xa, 0x3, 0x4, 0x0, 0x81, 0x5}}, 0x3c}, 0x1, 0x0, 0xa00, 0x20000000}, 0x24008040) 4m7.498937417s ago: executing program 5 (id=5779): memfd_create(&(0x7f0000000140)='.\xdf*\'\x00', 0x4) (async) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 32) r1 = syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) (rerun: 32) r2 = fsopen(&(0x7f0000000100)='bfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) (async) mount(0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_open_procfs(r1, 0x0) (async, rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="b901010040b8e0e7265eba000000000f30b93f0300000f32c4e1ffe669fe0f01c2360f225bc4e2112c17b9ef0b00000f320f015b46b9800000c00f3235004000000f30c4e219cf97f9000000", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 4m7.453601237s ago: executing program 5 (id=5780): timer_create(0x2, 0x0, &(0x7f0000000100)=<r0=>0x0) timer_settime(r0, 0x0, &(0x7f0000000140)={{}, {0x0, 0x989680}}, &(0x7f0000000180)) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf25120000"], 0x18}, 0x1, 0x0, 0x0, 0x810}, 0x4) 4m7.306818379s ago: executing program 5 (id=5783): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x480, &(0x7f00000002c0)='tmpfs\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x99) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) socket$packet(0x11, 0x3, 0x300) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000003c0)='\x00', 0x89001) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) clock_getres(0x2, &(0x7f00000009c0)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newsa={0x13c, 0x10, 0x413, 0x3, 0x25dfdbfb, {{@in=@multicast2, @in6=@private1, 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x10, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x4c, 0x12, {{'aegis128l\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x4000) sendfile(r0, r2, 0x0, 0xb2) umount2(&(0x7f0000000480)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) 4m7.178872171s ago: executing program 5 (id=5788): ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000340)={0xdc, 0x0, 0x4}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @ioapic={0x4000, 0x0, 0x100, 0x2, 0x0, [{0x5d, 0x8, 0x2, '\x00', 0xb2}, {0x8, 0xe, 0x9, '\x00', 0x6}, {0xf8, 0xff, 0x5, '\x00', 0x8}, {0x0, 0xc, 0x8, '\x00', 0x8}, {0x5, 0x3, 0xb, '\x00', 0x86}, {0x7, 0x3, 0x0, '\x00', 0x8c}, {0x10, 0x27, 0x4, '\x00', 0xf9}, {0x7, 0x1, 0x1, '\x00', 0x58}, {0x8, 0x3, 0x1, '\x00', 0xd}, {0xf7, 0x8a, 0x8, '\x00', 0x81}, {0x4, 0xc, 0x6, '\x00', 0xd}, {0xde, 0x9, 0x7, '\x00', 0x4}, {0x8, 0xf, 0x8, '\x00', 0x9}, {0x4, 0x4, 0x82, '\x00', 0xfd}, {0x44, 0x7c, 0x7, '\x00', 0x10}, {0x7, 0x4, 0xc, '\x00', 0x5}, {0x3, 0x9, 0x5, '\x00', 0x2}, {0x6, 0x43, 0x35, '\x00', 0xc}, {0x7, 0x7, 0x18, '\x00', 0x2}, {0x9, 0x40, 0xa, '\x00', 0x40}, {0x5, 0x5, 0x18, '\x00', 0xa}, {0x7, 0x0, 0x0, '\x00', 0x4}, {0xfd, 0x9, 0xc3, '\x00', 0x4}, {0x81, 0x5b, 0x2}]}}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000000)={[0x34, 0x6, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000000000000, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x10, 0x800008001], 0xeeee8000, 0x3c4210}) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0xc0042, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0xbe, 0x0, 0x1}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01181100000000000040000000000400"]) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000440)={0x3, 0x0, [{0x80000007, 0xa, 0x3, 0x8, 0x7fff}, {0xc0000001, 0x3, 0xffffffff, 0x7, 0x3}, {0xa, 0x3, 0xfffffffd, 0x6, 0x6}]}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x400000000000, 0x81, 0x100000, 0x0, 0x7, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x2], 0x8080000, 0x42240}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x87) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r5, 0x111, 0x3, 0x0, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@loopback, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in=@empty, 0x1, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x400000b4}]}) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0xf5, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 4m6.959203335s ago: executing program 5 (id=5789): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x20, 0x1, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000900)={0x0, 0xe, 0x4, "52b16000"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0xf, 0x2, "c7a1"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000340)={0x20, 0x3, 0x4, "a13b1f21"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000180)={0x20, 0x15, 0x4, "b03f99ea"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000240)={0x40, 0x15, 0x4, "6ce4d1f4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 4m6.916634455s ago: executing program 34 (id=5789): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x20, 0x1, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000900)={0x0, 0xe, 0x4, "52b16000"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0xf, 0x2, "c7a1"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000340)={0x20, 0x3, 0x4, "a13b1f21"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000180)={0x20, 0x15, 0x4, "b03f99ea"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000240)={0x40, 0x15, 0x4, "6ce4d1f4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 42.899867982s ago: executing program 4 (id=9629): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0258ff00000000a601000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050810000000000000040000", 0x58}], 0x1) 42.896557722s ago: executing program 4 (id=9630): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="99742dbd7000ffdbdf251500000024000180080003005dfdffff150001006574683a626f6e649fec21b65e66502d6a5f"], 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@rand_addr=0x64010101, 0xfffd, 0xfffe, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0x0, 0xffffffffffff235b, 0x0, 0x9, 0x1000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d5, 0x6c}, 0x2, @in6=@loopback, 0x0, 0x2, 0x0, 0x0, 0xffdffffc, 0x1000000}}, 0xe8) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000070000000000000000add500200000000000801aeaaec1", @ANYRES64=r3, @ANYRES32=0x0, @ANYBLOB="0000000000000000700004e6706362632874776f666973682900000000000000000000000480000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000000200800000000008000100010000000021903e6afc41ee68030000000000000000e4c0389ae784cf3c3eee13d031b0333ba52c4643d5546f5382012049cd9b0790d7288def5c3aa21c243c41e66010292f8180dd98868e263571c47f0d6e1023c6"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000010301040000000000d041f1e134af5411258d981653ad349c000000"], 0x20}, 0x1, 0x0, 0x0, 0x40000c1}, 0x4008000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x0, 0x0, 0x401}}, 0x30) r7 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff58"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_UNREGISTER(r8, 0x8010aa01, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r9, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c0, 0x0, 0x0, 0x0, 0x2d8, 0x2d8, 0x2d8, 0x7fffffe, 0x0, {[{{@arp={@private=0xa010100, @empty, 0x0, 0x0, 0xa, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0x2}}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) syz_open_dev$hidraw(&(0x7f0000000040), 0x40, 0xc0002) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x208000000000002}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100)={0x2}) 42.805895173s ago: executing program 4 (id=9633): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000002000010000ffffffffffffff81"], 0x20}, 0x1, 0x2000000}, 0x0) 42.720971605s ago: executing program 4 (id=9642): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000640), 0x20000, 0x0) fcntl$lock(r0, 0x24, &(0x7f00000006c0)={0x2, 0x2, 0x3, 0xb}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000280)=0x10) setresuid(0xee00, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x800000, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f00000001c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) prlimit64(0x0, 0xd, &(0x7f00000000c0)={0x200000000005, 0x8000000000200003}, 0x0) r3 = getpgrp(0x0) setpriority(0x1, r3, 0xffffffffffffffcd) r4 = openat(r2, &(0x7f0000000040)='./file1\x00', 0x101740, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r6, 0x0, 0x5a) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) getsockopt$sock_buf(r6, 0x1, 0x1a, &(0x7f00000002c0)=""/222, &(0x7f0000000140)=0xde) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000240)={'pimreg0\x00', 0x100}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000002214629c000040"]) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200}) setsockopt$inet_int(r4, 0x0, 0x6, &(0x7f0000000000)=0xa, 0x4) sendto$inet(r7, &(0x7f00000000c0)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) 42.667170796s ago: executing program 4 (id=9644): r0 = memfd_secret(0x80000) mmap(&(0x7f000063a000/0x3000)=nil, 0x3000, 0x300000f, 0x13, r0, 0xc836f000) 42.578321967s ago: executing program 4 (id=9650): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)={0x420, 0x3f4, 0x200, 0x70bd2b, 0x25dfdbfc, {0x3, 0x1, 0x17, [0x100, 0x500000, 0x80000000, 0x1, 0x0, 0x5, 0x0, 0x1, 0x6, 0x2, 0xce, 0x3, 0xc7, 0xd7d7, 0x400, 0xfffffffd, 0x1, 0x2, 0x9, 0xe, 0x1, 0x6, 0x9, 0x7, 0x1000, 0xfffffff9, 0x5, 0x8, 0x6, 0x1b1, 0x7, 0x7, 0x2, 0x40, 0xf3, 0x5, 0xff, 0x2, 0x5, 0x9, 0x10000, 0xa6de, 0xe000000, 0x10000, 0x4, 0xad, 0x200, 0xc, 0xe7af, 0x10, 0x3ff, 0x10000, 0x9, 0xc49, 0x4, 0x101, 0x5, 0x5, 0x6, 0x7, 0x5, 0x10, 0x0, 0x8000], [0x4, 0xfc000000, 0x3b24, 0x800, 0x4, 0xffffff87, 0xc9c, 0x6, 0x1000, 0x4, 0x3, 0x4, 0x80000001, 0x4, 0xef3, 0x7, 0xa, 0x80, 0x1, 0x7, 0x81, 0x0, 0x1, 0x1, 0x96dd, 0x0, 0xc82a, 0x8, 0x0, 0x6, 0x81, 0x5, 0x1, 0x8, 0x9, 0x1, 0x0, 0x1, 0x7fff, 0x1ff, 0x2, 0x1c, 0xb, 0x2, 0x6, 0x10, 0x3, 0x5, 0x1, 0x4, 0x7f, 0xb962, 0x8, 0x1000, 0xed, 0x6, 0x1, 0x6, 0x52, 0xffff, 0x7ffffffe, 0xa34f, 0x0, 0x4], [0x4, 0xfffff2e9, 0x5c, 0x2008, 0x29, 0x9, 0x1, 0x2, 0xe61, 0x6, 0x7ff, 0xa, 0x8001, 0xc03, 0x1, 0x1df0, 0x7, 0x24, 0x8, 0x7fffffff, 0x3, 0x5, 0x3, 0x66a, 0xb, 0x3, 0x37, 0x5, 0x5, 0x6, 0x5, 0x4, 0x4, 0xfffffc01, 0x9c, 0x8, 0x8, 0xffffffff, 0x1000, 0x1, 0x6, 0x80, 0x8, 0x8, 0x0, 0xfffff0f3, 0xf499, 0xc0, 0x10001, 0x75, 0x52953358, 0x30000, 0x8, 0xfffffffa, 0x3, 0xfffffffe, 0xa5, 0x1ef4, 0x7a, 0x3, 0x7, 0x9, 0x800, 0xc], [0xfff, 0x7ff, 0x8, 0xffff, 0x1, 0x0, 0x45846e1f, 0x2, 0x9, 0x5, 0x0, 0x3, 0x40, 0x6470, 0x2, 0xd, 0x800, 0xd4, 0xe054d74, 0x0, 0x3, 0x7, 0x31e, 0x1, 0x11, 0xfffffff9, 0x0, 0x52a, 0x9, 0x9, 0x4, 0x1000, 0x7, 0x5, 0x100, 0xfff, 0x8, 0xcc, 0x3, 0x5, 0x4, 0xd, 0xfffffff1, 0xfffff310, 0x2, 0xfffffff9, 0x80, 0x100, 0x1, 0x1, 0x7, 0x80, 0x67, 0x6, 0x80000001, 0x4, 0x6, 0xd31, 0xbb, 0x1, 0x1ca, 0x8, 0x4f, 0x3d71]}}, 0x420}, 0x1, 0x0, 0x0, 0x24040001}, 0x0) 42.514597718s ago: executing program 35 (id=9650): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)={0x420, 0x3f4, 0x200, 0x70bd2b, 0x25dfdbfc, {0x3, 0x1, 0x17, [0x100, 0x500000, 0x80000000, 0x1, 0x0, 0x5, 0x0, 0x1, 0x6, 0x2, 0xce, 0x3, 0xc7, 0xd7d7, 0x400, 0xfffffffd, 0x1, 0x2, 0x9, 0xe, 0x1, 0x6, 0x9, 0x7, 0x1000, 0xfffffff9, 0x5, 0x8, 0x6, 0x1b1, 0x7, 0x7, 0x2, 0x40, 0xf3, 0x5, 0xff, 0x2, 0x5, 0x9, 0x10000, 0xa6de, 0xe000000, 0x10000, 0x4, 0xad, 0x200, 0xc, 0xe7af, 0x10, 0x3ff, 0x10000, 0x9, 0xc49, 0x4, 0x101, 0x5, 0x5, 0x6, 0x7, 0x5, 0x10, 0x0, 0x8000], [0x4, 0xfc000000, 0x3b24, 0x800, 0x4, 0xffffff87, 0xc9c, 0x6, 0x1000, 0x4, 0x3, 0x4, 0x80000001, 0x4, 0xef3, 0x7, 0xa, 0x80, 0x1, 0x7, 0x81, 0x0, 0x1, 0x1, 0x96dd, 0x0, 0xc82a, 0x8, 0x0, 0x6, 0x81, 0x5, 0x1, 0x8, 0x9, 0x1, 0x0, 0x1, 0x7fff, 0x1ff, 0x2, 0x1c, 0xb, 0x2, 0x6, 0x10, 0x3, 0x5, 0x1, 0x4, 0x7f, 0xb962, 0x8, 0x1000, 0xed, 0x6, 0x1, 0x6, 0x52, 0xffff, 0x7ffffffe, 0xa34f, 0x0, 0x4], [0x4, 0xfffff2e9, 0x5c, 0x2008, 0x29, 0x9, 0x1, 0x2, 0xe61, 0x6, 0x7ff, 0xa, 0x8001, 0xc03, 0x1, 0x1df0, 0x7, 0x24, 0x8, 0x7fffffff, 0x3, 0x5, 0x3, 0x66a, 0xb, 0x3, 0x37, 0x5, 0x5, 0x6, 0x5, 0x4, 0x4, 0xfffffc01, 0x9c, 0x8, 0x8, 0xffffffff, 0x1000, 0x1, 0x6, 0x80, 0x8, 0x8, 0x0, 0xfffff0f3, 0xf499, 0xc0, 0x10001, 0x75, 0x52953358, 0x30000, 0x8, 0xfffffffa, 0x3, 0xfffffffe, 0xa5, 0x1ef4, 0x7a, 0x3, 0x7, 0x9, 0x800, 0xc], [0xfff, 0x7ff, 0x8, 0xffff, 0x1, 0x0, 0x45846e1f, 0x2, 0x9, 0x5, 0x0, 0x3, 0x40, 0x6470, 0x2, 0xd, 0x800, 0xd4, 0xe054d74, 0x0, 0x3, 0x7, 0x31e, 0x1, 0x11, 0xfffffff9, 0x0, 0x52a, 0x9, 0x9, 0x4, 0x1000, 0x7, 0x5, 0x100, 0xfff, 0x8, 0xcc, 0x3, 0x5, 0x4, 0xd, 0xfffffff1, 0xfffff310, 0x2, 0xfffffff9, 0x80, 0x100, 0x1, 0x1, 0x7, 0x80, 0x67, 0x6, 0x80000001, 0x4, 0x6, 0xd31, 0xbb, 0x1, 0x1ca, 0x8, 0x4f, 0x3d71]}}, 0x420}, 0x1, 0x0, 0x0, 0x24040001}, 0x0) 38.991422952s ago: executing program 3 (id=9714): futex_waitv(&(0x7f0000000ec0)=[{0x0, 0x0, 0x2}], 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x0) 38.984356982s ago: executing program 3 (id=9715): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x3) read(r0, &(0x7f0000000040)=""/92, 0x5b) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101101) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000000040)=ANY=[@ANYBLOB="62da00000b"]) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000001c0), 0xa8002, 0x0) preadv2(r2, &(0x7f0000000880)=[{0x0}, {&(0x7f00000000c0)=""/56, 0x38}], 0x2, 0xa67, 0x2, 0xf) 38.937767493s ago: executing program 3 (id=9716): ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000040)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/vmallocinfo\x00', 0x0, 0x0) accept4(r0, 0x0, 0x0, 0xc00) mremap(&(0x7f0000753000/0x3000)=nil, 0x3000, 0x2000, 0x4, &(0x7f0000531000/0x2000)=nil) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x400017e) symlink(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000440)=@req={0x3, 0x9, 0x4, 0x3}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x4) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) unshare(0x24060400) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, 0x0, 0x0) r4 = syz_clone(0x88040000, 0x0, 0xffffffffffffff3f, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000800)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8) r6 = getuid() syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001300)="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", 0x2000, &(0x7f0000003c40)={&(0x7f0000000380)={0x50, 0x0, 0xb, {0x7, 0x2b, 0x0, 0x1000010, 0x3, 0xffff, 0x40, 0x98d, 0x0, 0x0, 0x100, 0xff}}, &(0x7f0000000400)={0x18, 0xfffffffffffffffe, 0x0, {0x6}}, &(0x7f0000000500)={0x18, 0xfffffffffffffff5, 0x17, {0x3}}, &(0x7f0000000540)={0x18, 0x0, 0x7ff, {0xfffffffa}}, &(0x7f0000000580)={0x18, 0x0, 0x6, {0x3}}, &(0x7f00000005c0)={0x28, 0xfffffffffffffff5, 0xfffffffffffffffc, {{0x8, 0x0, 0x2, r4}}}, &(0x7f0000000600)={0x60, 0xb, 0x0, {{0x9f500000000, 0x81, 0xf6fc, 0x3, 0x64, 0x8, 0x97, 0x6}}}, &(0x7f0000000680)={0x18, 0x0, 0x9, {0x80000001}}, &(0x7f0000000900)={0x13, 0xfffffffffffffffe, 0x3, {'9p\x00'}}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x0, 0x12}}, &(0x7f0000000980)={0x78, 0x0, 0x2, {0x1, 0x8, 0x0, {0x2, 0x8001, 0x9, 0x400, 0x5, 0x8, 0x3, 0x6, 0x3, 0x2000, 0x6784, r6, 0x0, 0x1000, 0x93}}}, &(0x7f0000000a00)={0x90, 0x0, 0x37, {0x1, 0x2, 0x7, 0x3, 0x8, 0x8, {0x4, 0x2, 0x4, 0x1, 0x2f, 0x8, 0x28c, 0x5, 0xd, 0x2000, 0xa, r5, 0x0, 0x9}}}, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000003540)={0x3d8, 0x0, 0x100000000, [{{0x0, 0x0, 0x2, 0x6, 0x4, 0x6, {0x3, 0xb92, 0x9, 0x6, 0x4, 0x49, 0x3b88, 0x8, 0x9, 0xa000, 0xfffffc01, 0x0, 0x0, 0x7fffffff, 0x2}}, {0x2, 0x2, 0x6, 0xffff, 'sysfs\x00'}}, {{0x4, 0x2, 0xb4e, 0x5, 0x9, 0x5f5, {0x4, 0x54e, 0x1, 0x1, 0x80000000, 0x200, 0x1, 0xa53, 0x0, 0x1000, 0x1000, r6, 0x0, 0x3, 0x707}}, {0x4, 0xcd, 0x2, 0xffd, '+\''}}, {{0x1, 0x1, 0x4b, 0x101, 0x159d, 0x6873, {0x3, 0x9, 0x2, 0x2, 0x3, 0x9e9a, 0x7, 0x80000001, 0x1, 0x1000, 0x0, r5, 0x0, 0x9, 0xfffffffd}}, {0x1, 0x5, 0x3, 0xa5, '9p\x00'}}, {{0x6, 0x0, 0x1, 0xa478, 0x100, 0x0, {0x1, 0xff, 0x3, 0x1, 0x8, 0xad, 0x6, 0x6, 0x9, 0x2000, 0x8, r6, 0x0, 0x7}}, {0x0, 0x6, 0x2, 0x3, '/+'}}, {{0x1, 0x0, 0xb, 0x6, 0xbac, 0x3, {0x2, 0x10001, 0x8, 0x4c, 0xfffffffffffff24c, 0x7, 0x1, 0x8, 0x3, 0x1000, 0x7, 0x0, 0x0, 0x3ff, 0x91}}, {0x0, 0x9, 0xe, 0x1, 'memory.events\x00'}}, {{0x0, 0x3, 0xc15, 0x7f, 0x7, 0x0, {0x6, 0xfffffffffffffffc, 0xffffffffffffffff, 0x8, 0xe, 0x8, 0x7e2, 0xffff, 0x2, 0xa000, 0xc3, 0x0, 0x0, 0x8000, 0x7}}, {0x3, 0x10000, 0x5, 0x7, ')*@+!'}}]}, &(0x7f0000003940)={0xa0, 0xffffffffffffffda, 0x7, {{0x1, 0x0, 0xb3d9, 0x2, 0x7, 0x7f, {0x2, 0xfffffe0000000000, 0x3ff, 0x10001, 0x7fff, 0x2, 0x8, 0xe, 0x4, 0x8000, 0xf4e, r6, 0x0, 0x7fffffff, 0xef40}}, {0x0, 0x1}}}, &(0x7f0000003a00)={0x20, 0x0, 0x0, {0x5, 0x0, 0x2, 0x720135aa}}, &(0x7f0000003b00)={0x130, 0x0, 0x4, {0x7, 0x3, 0x0, '\x00', {0x10000, 0x7, 0x0, 0xbe7, r6, 0x0, 0xc000, '\x00', 0x7fff, 0x0, 0x80000001, 0x8, {0x8000}, {0x595c, 0x74}, {0xffffffff, 0xffffffc4}, {0x1, 0xd}, 0x100, 0x24, 0x6a, 0x76}}}}) setreuid(0x0, r6) mount$9p_unix(&(0x7f0000000080)='./file0/../file0/../file0\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000480), 0x37001, &(0x7f0000000300)=ANY=[@ANYRES16=r3, @ANYRES8=r0, @ANYBLOB="2c6d61736b3d4d41595f5752452c66756e633d504154485f434845434b2c667f776e6e723c", @ANYRESDEC=r6, @ANYRESHEX]) ptrace(0x8, r4) ptrace$setregset(0x4205, r4, 0x202, &(0x7f00000004c0)={0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x40010, 0xffffffffffffffff, 0x80000) syz_clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 38.937405043s ago: executing program 3 (id=9717): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', <r2=>0x0}) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x8, r2}, 0x10) r3 = memfd_secret(0x80000) mmap(&(0x7f000063a000/0x3000)=nil, 0x3000, 0x300000f, 0x13, r3, 0xc836f000) 38.937300943s ago: executing program 3 (id=9718): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=<r1=>0x0) r2 = syz_open_procfs(r1, &(0x7f00000001c0)='net/raw\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) readv(r2, 0x0, 0x0) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x5) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 38.937065333s ago: executing program 3 (id=9719): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, &(0x7f0000000500)}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=ANY=[@ANYBLOB="240000001e00050300000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\t\x00', @ANYRES32, @ANYBLOB="de2e2441a85267588e808ba29ca15ead9f341319cf35a85615c68a3338613a47f7010319faf61a4713a7119373e0e1f1819258e9d26f8d37fc9026a8dd9a3ebc6a7885f475e9321e8dd791aef8d502207f6518e9b561"], 0x24}, 0x1, 0x0, 0x0, 0x4a841}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23.840124744s ago: executing program 36 (id=9719): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, &(0x7f0000000500)}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=ANY=[@ANYBLOB="240000001e00050300000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\t\x00', @ANYRES32, @ANYBLOB="de2e2441a85267588e808ba29ca15ead9f341319cf35a85615c68a3338613a47f7010319faf61a4713a7119373e0e1f1819258e9d26f8d37fc9026a8dd9a3ebc6a7885f475e9321e8dd791aef8d502207f6518e9b561"], 0x24}, 0x1, 0x0, 0x0, 0x4a841}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.076702167s ago: executing program 7 (id=10438): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x40084) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328a01004ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff05000050"}, 0x38) sendmsg$inet(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='@'], 0x70}, 0x80) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d4, &(0x7f0000000040)) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder={0x77622a85, 0xa}, @ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 4.065102517s ago: executing program 7 (id=10439): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000002) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x10200, 0x2c0, 0x0, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x1, 0x100000000000004, 0x10000, 0x100, 0x20009004, 0x0, 0x3, 0x5, 0x5, 0x8, 0x3ff, 0x5, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x1, 0x6, 0x7, 0x5, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x4, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff7, 0x5, 0x2, 0xe, 0x7, 0x20000000000004, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0x4, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x4, 0xab6, 0x0, 0x4, 0xfff, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x400000000008061d, 0x3, 0x8, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x2, 0x2, 0x7, 0x10001, 0xfffd, 0x10, 0x8, 0x8, 0x10, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0x3ffc00000, 0x8, 0x3]}) ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc003, 0x3, 0x5, 0x0, 0x4, 0x7, 0xd, 0xb9, 0x0, 0xe, 0x5, 0x204}, {0x804, 0x1, 0x4, 0x45, 0x7, 0xff, 0x2, 0xff, 0x0, 0x4, 0x4, 0x7b, 0x20c}, {0x1, 0x6, 0x18, 0x5, 0x80, 0xfd, 0x3, 0x2, 0x0, 0x70, 0x4, 0x7}], 0xfbffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x5ffffffffff, 0x1000000000, 0xfffffffffffffffd, 0x8000000043, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0xffffffffffffffff, 0x800000000000], 0x1, 0x296}) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000480)={[{0x9570000, 0x3, 0x0, 0x0, 0x85, 0x1, 0xff, 0x2, 0x6, 0x4, 0x47, 0xf, 0x1}, {0x9f83, 0x7, 0xe, 0x5a, 0x1, 0x3, 0x9, 0x81, 0x7, 0x5, 0x6, 0x3, 0x6}, {0x6, 0x1005, 0x81, 0xa, 0x6, 0x46, 0xf8, 0x4f, 0xc, 0x98, 0x1a, 0x1, 0x8}], 0x3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.998209679s ago: executing program 7 (id=10440): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) futex(0x0, 0x85, 0x2, 0x0, 0x0, 0xc5fffffd) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) unshare(0x64000600) syz_clone(0x20820000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1d39, &(0x7f0000000180)={0x0, 0x2079d9, 0x0, 0x1, 0x29d}, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x172f, 0x34, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x20, 0xd, [{{0x9, 0x4, 0x0, 0x7, 0x5, 0x3, 0x1, 0x1, 0xb, {0x9, 0x21, 0x2, 0x10, 0x1, {0x22, 0xd1e}}, {{{0x9, 0x5, 0x81, 0x3, 0x408, 0x42, 0x5, 0x2}}}}}]}}]}}, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) socketpair(0x2f, 0x5, 0x2, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) select(0x40, &(0x7f0000000140)={0x0, 0x401, 0x100, 0x20000000, 0x295, 0x4, 0xfa9, 0x7fffffff}, &(0x7f0000000200)={0x3d8cfbb5, 0x4, 0xd, 0x1, 0x100000001, 0xf, 0x3ff, 0xc0}, &(0x7f0000000240)={0x8000000000000000, 0x6, 0x9, 0x401, 0x80000001, 0x8f4, 0x0, 0x2}, &(0x7f00000002c0)) 1.90696746s ago: executing program 8 (id=10487): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) r1 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x2000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x559}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000000)="0900bf65653f47f4020000008bd458d1e7cbdaf300000f34e7e4165f081ae36850f6d15c3e681411f7a496c0da04003c242f5bedaf6bec340dee49474362b24cb800edc500", 0x0, 0x48) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000300)="68b709ca6cfbe3b7ac8487d9aab38b9d194ea41fca57b35bbde5d901b02947737b6210d49a41ceeb1bfea659c175f7c6f3f4c846ae47b30949f61c35650bc428cca244edb0fe09ba", 0x0, 0x48) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r3, &(0x7f0000000080), 0x8) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x42}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x52, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a4"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 1.534006716s ago: executing program 6 (id=10497): ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x2010, r0, 0x45809000) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0xa8a689e1e2f910e0, {0x42, 0x3, 0x3}}, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), r2) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240), 0x68082, 0x0) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000006240)=ANY=[@ANYBLOB='3\x00\x00\x00'], 0x33) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000001c0)={0x30, 0x5, 0x0, {0x0, 0x4, 0x4, 0x40}}, 0x30) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0a00f4ff", @ANYRES16=r3, @ANYBLOB="00046cbd7400fbdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x80d4}, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) recvmmsg$unix(r2, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mmap(&(0x7f000032d000/0x4000)=nil, 0x4000, 0x1000008, 0x50, r0, 0x38691000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.404215568s ago: executing program 6 (id=10498): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000002) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x10200, 0x2c0, 0x0, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x1, 0x100000000000004, 0x10000, 0x100, 0x20009004, 0x0, 0x3, 0x5, 0x5, 0x8, 0x3ff, 0x5, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x1, 0x6, 0x7, 0x5, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x4, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff7, 0x5, 0x2, 0xe, 0x7, 0x20000000000004, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0x4, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x4, 0xab6, 0x0, 0x4, 0xfff, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x400000000008061d, 0x3, 0x8, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x2, 0x2, 0x7, 0x10001, 0xfffd, 0x10, 0x8, 0x8, 0x10, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0x3ffc00000, 0x8, 0x3]}) ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x5ffffffffff, 0x1000000000, 0xfffffffffffffffd, 0x8000000043, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0xffffffffffffffff, 0x800000000000], 0x1, 0x296}) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000480)={[{0x9570000, 0x3, 0x0, 0x0, 0x85, 0x1, 0xff, 0x2, 0x6, 0x4, 0x47, 0xf, 0x1}, {0x9f83, 0x7, 0xe, 0x5a, 0x1, 0x3, 0x9, 0x81, 0x7, 0x5, 0x6, 0x3, 0x6}, {0x6, 0x1005, 0x81, 0xa, 0x6, 0x46, 0xf8, 0x4f, 0xc, 0x98, 0x1a, 0x1, 0x8}], 0x3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.237310941s ago: executing program 6 (id=10499): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x8a000000, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 1.202382871s ago: executing program 6 (id=10500): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000002) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x10200, 0x2c0, 0x0, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x1, 0x100000000000004, 0x10000, 0x100, 0x20009004, 0x0, 0x3, 0x5, 0x5, 0x8, 0x3ff, 0x5, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x1, 0x6, 0x7, 0x5, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x4, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff7, 0x5, 0x2, 0xe, 0x7, 0x20000000000004, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0x4, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x4, 0xab6, 0x0, 0x4, 0xfff, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x400000000008061d, 0x3, 0x8, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x2, 0x2, 0x7, 0x10001, 0xfffd, 0x10, 0x8, 0x8, 0x10, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0x3ffc00000, 0x8, 0x3]}) ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc003, 0x3, 0x5, 0x0, 0x4, 0x7, 0xd, 0xb9, 0x0, 0xe, 0x5, 0x204}, {0x804, 0x1, 0x4, 0x45, 0x7, 0xff, 0x2, 0xff, 0x0, 0x4, 0x4, 0x7b, 0x20c}, {0x1, 0x6, 0x18, 0x5, 0x80, 0xfd, 0x3, 0x2, 0x0, 0x70, 0x4, 0x7}], 0xfbffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x5ffffffffff, 0x1000000000, 0xfffffffffffffffd, 0x8000000043, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0xffffffffffffffff, 0x800000000000], 0x1, 0x296}) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000480)={[{0x9570000, 0x3, 0x0, 0x0, 0x85, 0x1, 0xff, 0x2, 0x6, 0x4, 0x47, 0xf, 0x1}, {0x9f83, 0x7, 0xe, 0x5a, 0x1, 0x3, 0x9, 0x81, 0x7, 0x5, 0x6, 0x3, 0x6}, {0x6, 0x1005, 0x81, 0xa, 0x6, 0x46, 0xf8, 0x4f, 0xc, 0x98, 0x1a, 0x1, 0x8}], 0x3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$notify(r5, 0x402, 0x29) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) munmap(&(0x7f0000002000/0x800000)=nil, 0x800000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000200)={0x4000000, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) sendto$inet(r6, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 1.201435351s ago: executing program 6 (id=10501): ioprio_set$uid(0x3, 0x0, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x268300, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8100, 0xa0) openat$incfs(r2, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x110) (async) openat(r2, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x40) (async, rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) (async, rerun: 32) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000001c0)=[{0x1f, 0x0, 0x0, 0xfffff00c}, {0x6, 0xd}]}) (async) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffffa) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) (async, rerun: 32) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') (async, rerun: 32) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f00000034c0)='\x00\x00\x03\x86\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x94\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcbzA\x8e\xf6\x89\xc2\'\xdfn\x054Y\xd4\x91s\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xe0\\\x98\xe1%\x1c\xf4\xd0\xf5\xd5\x80\xc4\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\a\x00\x00\x00\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xa5a\xfb\xa6\xff\xfbj\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\x05\x00\xeb\xd8\t\x00\x00\x00CvNx461\x04Nl\xedV\xcet\xaa~\x01j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\f\x00\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg\xc52\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xdeZ%\xa7\x01\x00\x00\x00\x01\x00\x00\x00\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x1c\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\"Y\xad\xaf\x83\xaf\x93\xdaHg\xd4\x8c\xee\x0f\x00\x1c/\x9a\xf83\';:q\x92\x010g\\Ym\xd8,\x8d\b\xab\x9dq\xed\xcc\xba\x06\x1ej\xb7s33\xe5\xec\xe90M\xd1\xfd\xbb\xdf\xedc\xd1\xbbI\xa3\xbdqU\x02\x00\x00\x00\x00\x00\x00\x00\xee\xb0\v\x84\xc7\xac\xec\x92t\x00\x00\x00\x92\x1a\f\xbbM\x1cG\xb8\xa4\x05\x16\x06\xb6\x1a\tL\xe3C$K~\xf7\xa1mt\x87E\xc4\xb6h\xf3\x8cG=&\xbd\xa16\xaa\xa2N\xac\xad,Q\x97\xd6\x15\xc46v\x9a\x97\xa6\xb9`\x03\x8ff,V\xe8\xeb\x8bJn\x12o\x8b\xe7K)+\xe0\x06\x8a\\\xfc\nw\xf8\x01\xc4\xd8\x97\xd2\x9cF\xda6F\xfa6I\x03o\xa7\x15&*\xf6Wn\xb9\x00~Y\x17:\x03\xef\xf9\x03\xe7\x8d\x16\\/\xe3\xfcV\x9d\xf2g\xbcFy\xca\x8a\x10*\xbdU#\x7f\xbb\'6\x9e\x1d\n\x19\xff[\x92n\xe1\x81q\xfe\x10\xfd\xa6pL\xc6\x0fN\x06&W\xa2\x9dPWp\x94r\xe2\x92X\x12\x87\xe5\x94\xb3Aa\xb1/\\\xde\x9c\x93\xf5(,u|\f`\x8e\x86\xeb\xcb\x18J+\xdcv\x894\x01\xd0\xc6\x95\xea^j(x\xa5\x9b\xd6f1\x9d\x8fcr\x18\x1fs%\x91~\x19@\x84!u\xc8u\x8aL\x021k\xb4\b\xbb_#A{dw<\xb9\x9dR\xef\xaf]\xe0\xca\xd9x\xdab7@\xfd\x0e\x94\xf8\xab\x8c\xf4\xf1\xb0\xd6\xbe\x8e,\xa2Y\x000F\xe6q\xe3~\xc9\xaa!\xf3\'UF\xf0\xc0\x11\x11\xc2\xc9\x93#K\xea\xc2c\xb9\xe7)\xa4\xd9X\xb9\xaay\xd1\xc7\xab\xe9F\xc6r5\xdf\xa0\'y\r\xbf\xbd\x97\x9d\x8aS\xdb\rF\x9e99\xb4\xf7\x8c\xf9\xca;\xef\xc7]\xa4\xdd<6wc5\xc6\xdeS\xe5*H\xed\xc8^a-\xe8\xb1\xc2\xca\xfa\t\xd0\\\xfc\xe9\x90\x83oj\xa9E\xfb\x8du\x94\x97\x1cF\x0f\xe9d\xf2\xe4\fc\xdf\xde\x1c\xd8u\x9b\xd7\x9c\x11\xbe\b\xb5\x1e\x04\xa0\xdc\xe1Oxu\xd7O#\n%\x89+\xcc\x9f\x8e\xb2:\xa0\xb0\xdc\xd1\xba\xbd@\xf4\x00\x00\xfd\aqn:\x83\x84N\x83K\xbf^\xd8&\xde\x14\x17\x9d\xcd\xed\x19\xd0\xc1$*K\b$\x12\xf3\x88#\xb1#\xb6RX\x11\x86X\x94\x84\x8e\xdd\x82b\x19b\x9fQ\x91\x98\x9e\xf7\xf6`\x03\xb3\x8a\x86\xf9\x00\x00\x00\x00\x00P\x00'/1066) (async) ioctl$ASHMEM_PURGE_ALL_CACHES(r3, 0x770a, 0x0) socket$netlink(0x10, 0x3, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) (async) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r9, 0x8040ae9f, &(0x7f0000000280)=@arm64) write$selinux_load(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757811"], 0x65) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4000008) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r10, r0, 0x0, 0x7ffff000) 1.111085622s ago: executing program 6 (id=10502): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x100000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 1.096939493s ago: executing program 8 (id=10505): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e08003950323030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}]}}) 1.078342283s ago: executing program 8 (id=10506): ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020, 0x0, <r1=>0x0}, 0x2020) getresuid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0)) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@mcast2, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86220080}) r4 = getegid() write$FUSE_CREATE_OPEN(r0, &(0x7f0000000240)={0xa0, 0xfffffffffffffff5, r1, {{0x5, 0x0, 0xfffffffffffffffa, 0x8000, 0xb, 0x5, {0x6, 0x8b, 0xdf3, 0x8e, 0x2, 0x8, 0x0, 0xfffffffb, 0x2, 0xc000, 0x2, r2, r4, 0x9, 0x6000000}}, {0x0, 0x4}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x214114, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0x6}}, {@nodevmap}, {@nodevmap}, {@nodevmap}, {@version_9p2000}, {@ignoreqv}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/selinux/avc/hash_stats\x00'}}]}}) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendfile(r5, r5, 0x0, 0x7ffff000) 934.612265ms ago: executing program 7 (id=10510): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x63761469321c3ff0, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xaa, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a43167614409ee4aa2a40d2feb04bb54137ca025e367e2eee1e8b"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) dup(r3) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/disk', 0xa0042, 0x182) write$tcp_mem(r4, &(0x7f0000000280)={0x7, 0x2d, 0xffffffffffffffff, 0x3a, 0x0, 0x2c}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) pselect6(0x40, &(0x7f0000000180)={0xfffffdfffffffffd, 0xffffffff, 0x0, 0x0, 0xffffffffffffff01}, 0x0, 0x0, 0x0, 0x0) 582.489621ms ago: executing program 2 (id=10529): r0 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r0, &(0x7f0000000340)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000004fbc590711ce06e20000ffffe1adfdcb919b"]) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1138000, 0x800, 0x3, 0x1}, 0x20) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) pipe(&(0x7f0000001300)={0xffffffffffffffff, <r5=>0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) sendfile(r5, r6, 0x0, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) r8 = syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r7, 0x517) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/76, 0x59, 0x1000000000002, 0x2}, @fd, @flat=@binder={0x73622a85, 0x1000, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x10}], 0xfffffffffffffdb8, 0x0, 0x0}) r9 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r9, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000080)=@attr_other={0x0, 0x2, 0x8, &(0x7f0000000000)=0x1}) 519.101042ms ago: executing program 2 (id=10530): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom0\x00', 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) recvfrom$inet6(r2, &(0x7f0000000300)=""/218, 0xda, 0x120, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2) shutdown(r2, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x7}, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 443.321383ms ago: executing program 2 (id=10531): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000007c0)=""/143, 0x8f}, {&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000200)=""/128, 0x80}, {&(0x7f0000000600)=""/217, 0xd9}, {&(0x7f0000001f00)=""/4078, 0xfee}], 0x5, 0x0, 0x0, 0x200000}, 0xc}], 0x1, 0x40010080, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) 377.949844ms ago: executing program 2 (id=10532): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003) mmap(&(0x7f0000fec000/0x2000)=nil, 0x2000, 0x3, 0x100010, r0, 0xaa1a9000) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0) 319.044515ms ago: executing program 2 (id=10533): r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000003e40), 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x122, 0x0, 0x390}]}) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f36f0c7eb2700d609bcf41076d88144448ebe7994dd1b33d7c8787734cc315672f62261ceeede940774fd94d2767288cfb3a20882449d601ff878eedd3d57c9eb3a723b62102bd534c8a304a975d752e82cc8d5f969771c94a1d69cfd8694e29b9468fca5df65ece31ed7c209325604001fcd06adc3ac391f60a3523d6d0b4a8a"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 317.192805ms ago: executing program 2 (id=10534): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0xc0000, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) read(r1, &(0x7f0000000240)=""/123, 0x7b) (async) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100003b6bc040950b2b774ca2180203010902120001000001000904b1086120d12ce1748e6f48acbe19097c36e9f771b84fff2ee16522618984db93d92324d5ec9062445eafa346f41ba8c5e1fb4e14362d819f1214368fa4034aa21e7967325f0db05120524dfab741b72ca34868f638d5ff15744b9f0d598687d959ebbc8d", @ANYRES32=r0], 0x0) fstat(0xffffffffffffffff, 0x0) (async) syz_usb_ep_read(r2, 0x8, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, r3) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x800, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x1}) (async) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f0000000080)) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000ff76b9130040"]) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r5, &(0x7f0000000980)={0x2020}, 0x2020) 81.716548ms ago: executing program 8 (id=10535): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0258ff000000000001000058000b4824ca945f64009400ff0325010ebc0000ffff0000008000f0fffeffe809005300fff5dd00000010000100050810000000000000040000", 0x58}], 0x1) 64.686229ms ago: executing program 7 (id=10536): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x94, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000000)={@flat=@handle={0x73682a85, 0x0, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0x33}, @fd}, 0x0}, 0x10}, @enter_looper, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/221, 0xdd, 0x1, 0x1c}, @fda={0x66646185, 0xa, 0x1, 0x8}, @fda={0x66646185, 0x7, 0x2, 0x39}}, 0x0}}], 0x0, 0x0, 0x0}) 50.089949ms ago: executing program 7 (id=10537): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x84200, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = getpgrp(0x0) capset(&(0x7f0000000240)={0x19980330, r3}, &(0x7f0000000280)={0x1, 0x40, 0x8, 0x2, 0x7, 0x4}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x23, 0x0, 0x101}}) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xffffffffffffffcf) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000080)={0x11, 0x8, 0xc, 0x1a, 0x6, 0x80000000, 0x0, 0x21, 0x1}) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) read(r1, &(0x7f0000000000)=""/175, 0xfffffe14) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000001880), 0x1000, 0x800) write$cgroup_subtree(r5, &(0x7f0000000180)={[{0x2d, 'cpu'}, {0x2d, 'rdma'}, {0x2b, 'devices'}, {0x2d, 'pids'}, {0x2b, 'rlimit'}, {0x2d, 'blkio'}, {0x2b, 'rdma'}, {0x2d, 'cpuacct'}, {0x2d, 'blkio'}, {0x2d, 'net_prio'}]}, 0x49) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CLR_FD(r6, 0x4c01) 256.989µs ago: executing program 8 (id=10538): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x1, 0x14) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='debugfs\x00', 0x4000, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2400, 0x2e) lseek(r1, 0x101, 0x1) getdents64(r1, 0x0, 0x6d0821ca1fc60d2f) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x2}]}, 0x60) r4 = epoll_create1(0x0) r5 = epoll_create1(0x80000) r6 = fcntl$dupfd(r4, 0x406, r5) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r2, &(0x7f0000000000)={0x16}) r8 = epoll_create(0x4) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000080)={0x1}) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 8 (id=10539): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) (async) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0xa181, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0xa181, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_GET_XCRS(r6, 0x8188aea6, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000e3ffff3d9a05e8d6a42642352876fc9a783660ee33665f7b1bad6af6ba25ff8556a9acac8b7a42bdc04d0303fa0a1580a4a9814ec07aa44893105298fc68040dd128fdac5cbcb92ef17bbf1d56ea481df4e5c5a1ab94cd2a7da994be1afa24462da98bcbd322fa0cb959ee64f30afea94b87066074d781"]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000580)=ANY=[@ANYRESDEC=r3, @ANYRES8, @ANYRES8=r3, @ANYRES64=r1, @ANYRES32, @ANYBLOB="b4082ae6586e1d8fa0085548398f3f4267178292f705658408dc73d674c3bbec14c5e210328606d7ee3334e98b20e55809a41be5dd1d0e2709346b929553ad1aa534df4e0ddcf3cc6b5faa3091daabb7ab041ec5f64ad600d4d20bda797abbddc4892cc2f39dfa42bb0b71d741900f7bd92bfd3791aec91c57fd0610dd280a557514918b4977dfd32b4ee2677dc0ae43c1d13ccbd5d54ae75709"]) (async) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000580)=ANY=[@ANYRESDEC=r3, @ANYRES8, @ANYRES8=r3, @ANYRES64=r1, @ANYRES32, @ANYBLOB="b4082ae6586e1d8fa0085548398f3f4267178292f705658408dc73d674c3bbec14c5e210328606d7ee3334e98b20e55809a41be5dd1d0e2709346b929553ad1aa534df4e0ddcf3cc6b5faa3091daabb7ab041ec5f64ad600d4d20bda797abbddc4892cc2f39dfa42bb0b71d741900f7bd92bfd3791aec91c57fd0610dd280a557514918b4977dfd32b4ee2677dc0ae43c1d13ccbd5d54ae75709"]) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000300)={0x1, r2}) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f00000002c0)={0x0, 0x100}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x4000, &(0x7f0000000240)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}}) accept(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): T2704] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 166, changing to 11 [ 490.865637][ T2704] usb 7-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 490.879151][ T2704] usb 7-1: config 1 interface 0 has no altsetting 0 [ 490.887435][ T2704] usb 7-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.40 [ 490.897101][ T2704] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.905384][ T2704] usb 7-1: Product: ఊ [ 490.909712][ T2704] usb 7-1: Manufacturer: ﳿ [ 490.914592][ T2704] usb 7-1: SerialNumber: Њ [ 490.989734][ T36] audit: type=1400 audit(2000000068.457:1449): avc: denied { create } for pid=22033 comm="syz.2.8730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 491.043812][T22045] netlink: 'syz.2.8733': attribute type 4 has an invalid length. [ 491.051689][T22045] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.8733'. [ 491.089146][ T305] usb 4-1: USB disconnect, device number 26 [ 491.129303][ T36] audit: type=1400 audit(2000000068.597:1450): avc: denied { setattr } for pid=21988 comm="syz.6.8711" name="tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 491.333079][T21989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.342288][T21989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.358584][T21989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.367619][T21989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.379685][ T2704] usbhid 7-1:1.0: can't add hid device: -71 [ 491.385748][ T2704] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 491.395901][ T2704] usb 7-1: USB disconnect, device number 19 [ 500.347996][T22087] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8747'. [ 500.357471][T22087] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 500.357489][T22087] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 500.366078][T22087] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:287 [ 500.391403][T22094] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 500.423673][T22095] rust_binder: Write failure EINVAL in pid:59 [ 500.439016][T22098] netlink: 140 bytes leftover after parsing attributes in process `syz.2.8751'. [ 500.545428][T22115] rust_binder: Failed copying remainder into alloc: EFAULT [ 500.545456][T22115] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 500.552831][T22115] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 500.561238][T22115] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:301 [ 500.573094][T22115] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 500.634303][T22118] rust_binder: Write failure EFAULT in pid:301 [ 501.218970][ T36] audit: type=1326 audit(2000000078.690:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22091 comm="syz.2.8751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd15f8e929 code=0x7fc00000 [ 501.351931][T22129] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 501.491522][T22151] netlink: 140 bytes leftover after parsing attributes in process `syz.3.8768'. [ 501.557002][ T36] audit: type=1400 audit(2000000079.028:1452): avc: denied { map } for pid=22143 comm="syz.6.8769" path="socket:[108064]" dev="sockfs" ino=108064 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 501.907991][T22201] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 501.915155][T22203] tmpfs: Bad value for 'nr_inodes' [ 501.926988][T22203] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:328 [ 501.928125][T22203] rust_binder: Read failure Err(EFAULT) in pid:328 [ 501.938564][T22203] rust_binder: Write failure EFAULT in pid:328 [ 502.014204][ T36] audit: type=1400 audit(2000000079.488:1453): avc: denied { read } for pid=22210 comm="syz.6.8793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 502.248344][T22211] rust_binder: Write failure EFAULT in pid:336 [ 502.258949][ T36] audit: type=1326 audit(2000000079.728:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22139 comm="syz.3.8768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2340b8e929 code=0x7fc00000 [ 502.327537][T22237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8804'. [ 502.415455][T22256] overlayfs: failed to clone upperpath [ 502.542989][T22270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8816'. [ 502.582536][T22276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8819'. [ 502.615902][T22284] /dev/rnullb0: Can't lookup blockdev [ 502.798513][T22306] /dev/rnullb0: Can't lookup blockdev [ 502.976673][T22330] 9pnet_fd: Insufficient options for proto=fd [ 503.049956][ T9] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 503.201031][ T9] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 503.212077][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.223146][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.238540][ T36] audit: type=1326 audit(2000000080.708:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22251 comm="syz.3.8810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2340b8e929 code=0x7fc00000 [ 503.262369][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 503.276291][ T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 503.285442][ T9] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 503.293644][ T9] usb 7-1: Manufacturer: syz [ 503.299084][ T9] usb 7-1: config 0 descriptor?? [ 503.300589][T22348] overlayfs: missing 'lowerdir' [ 503.355336][T22348] rust_binder: BC_FREEZE_NOTIFICATION_DONE eac0220f00000000 not found [ 503.363659][T22348] rust_binder: Write failure EINVAL in pid:80 [ 503.435424][ T36] audit: type=1326 audit(2000000080.908:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22352 comm="syz.4.8848" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd551f8e929 code=0x0 [ 503.625398][T22366] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 503.638918][T22369] binder: Unknown parameter '00000000000000000000000' [ 503.715188][T22309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.724870][T22309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.772838][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 503.778881][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 503.790060][ T9] usb 7-1: USB disconnect, device number 20 [ 503.890731][T22401] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 504.250021][ T45] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 504.333930][T22421] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 504.399975][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 504.409659][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 504.418905][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.426942][ T45] usb 4-1: Product: syz [ 504.431423][ T45] usb 4-1: Manufacturer: syz [ 504.436119][ T45] usb 4-1: SerialNumber: syz [ 504.466905][T22436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8880'. [ 504.609973][ T305] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 504.648572][ T45] cdc_ncm 4-1:1.0: bind() failure [ 504.655192][ T45] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 504.662149][ T45] cdc_ncm 4-1:1.1: bind() failure [ 504.670021][ T45] usb 4-1: USB disconnect, device number 27 [ 504.760007][ T305] usb 7-1: Using ep0 maxpacket: 32 [ 504.766266][ T305] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 504.777781][ T305] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 504.788950][ T305] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 504.800739][ T305] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 504.809805][ T305] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.818810][ T305] usb 7-1: config 0 descriptor?? [ 504.827971][T22428] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 504.837986][T22447] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 504.839798][ T305] hub 7-1:0.0: USB hub found [ 505.042566][ T305] hub 7-1:0.0: 2 ports detected [ 505.111456][T22472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8896'. [ 505.131929][T22474] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 505.533516][T22498] binder: Unknown parameter 'def�ntext01777777777777777777777' [ 505.550029][T22503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8908'. [ 505.848609][T22533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8919'. [ 505.995615][T22552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8928'. [ 506.600778][T22579] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 506.857561][T22428] rust_binder: Write failure EINVAL in pid:348 [ 506.859149][T22428] 9pnet: p9_errstr2errno: server reported unknown error ��p��A�����;KZ�44�/@�q�� [ 506.937253][T22593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8944'. [ 506.975446][ T1809] usb 7-1: USB disconnect, device number 21 [ 507.216832][T22616] overlayfs: failed to clone upperpath [ 507.230407][T22616] overlayfs: failed to clone upperpath [ 507.250630][T22616] overlayfs: failed to clone upperpath [ 507.256655][T22616] overlayfs: failed to clone upperpath [ 507.267041][T22616] overlayfs: failed to clone upperpath [ 507.277205][T22616] overlayfs: failed to clone upperpath [ 507.293329][T22616] overlayfs: failed to clone upperpath [ 507.311839][T22616] overlayfs: failed to clone upperpath [ 507.317788][T22616] overlayfs: failed to clone upperpath [ 507.324110][T22616] overlayfs: failed to clone upperpath [ 507.334397][T22616] overlayfs: failed to clone upperpath [ 507.344486][T22616] overlayfs: failed to clone upperpath [ 507.354543][T22616] overlayfs: failed to clone upperpath [ 507.364669][T22616] overlayfs: failed to clone upperpath [ 507.370820][T22616] overlayfs: failed to clone upperpath [ 507.380533][T22616] overlayfs: failed to clone upperpath [ 507.390792][T22616] overlayfs: failed to clone upperpath [ 507.400619][T22616] overlayfs: failed to clone upperpath [ 507.410379][T22616] overlayfs: failed to clone upperpath [ 507.420434][T22616] overlayfs: failed to clone upperpath [ 507.427166][T22616] overlayfs: failed to clone upperpath [ 507.440591][T22616] overlayfs: failed to clone upperpath [ 507.451347][T22616] overlayfs: failed to clone upperpath [ 507.470611][T22616] overlayfs: failed to clone upperpath [ 507.481403][T22616] overlayfs: failed to clone upperpath [ 507.500519][T22616] overlayfs: failed to clone upperpath [ 507.520308][T22616] overlayfs: failed to clone upperpath [ 507.539612][T22616] overlayfs: failed to clone upperpath [ 507.549810][T22616] overlayfs: failed to clone upperpath [ 507.560328][T22616] overlayfs: failed to clone upperpath [ 507.566289][T22616] overlayfs: failed to clone upperpath [ 507.576344][T22616] overlayfs: failed to clone upperpath [ 507.586469][T22616] overlayfs: failed to clone upperpath [ 507.720020][ T305] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 507.787537][T22648] fuse: Bad value for 'fd' [ 507.882204][ T305] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 507.895275][ T305] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 43520, setting to 1024 [ 507.907529][ T305] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 507.919252][ T305] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.c0 [ 507.928440][ T305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.936470][ T305] usb 4-1: Product: syz [ 507.940653][ T305] usb 4-1: Manufacturer: syz [ 507.945238][ T305] usb 4-1: SerialNumber: syz [ 507.951434][ T305] cdc_ncm 4-1:1.0: skipping garbage [ 508.362150][T22664] /dev/nullb0: Can't lookup blockdev [ 508.482397][T22676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8978'. [ 508.521493][T22682] overlayfs: failed to clone lowerpath [ 508.600145][ T1809] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 508.751129][ T1809] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 508.761618][ T1809] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 508.771199][ T1809] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 508.773088][T22690] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8985'. [ 508.786077][ T1809] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 508.802278][ T1809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.810389][ T1809] usb 7-1: Product: syz [ 508.814655][ T1809] usb 7-1: Manufacturer: syz [ 508.819397][ T1809] usb 7-1: SerialNumber: syz [ 508.972738][T22626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.981351][T22626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.026731][T22664] 9pnet_fd: Insufficient options for proto=fd [ 509.033335][T22664] rust_binder: Write failure EFAULT in pid:358 [ 509.034646][ T1809] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 509.048067][ T1809] cdc_ncm 7-1:1.0: bind() failure [ 509.055542][ T1809] usb 7-1: USB disconnect, device number 22 [ 509.072688][ T305] cdc_ncm 4-1:1.0: bind() failure [ 509.083641][ T305] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 509.088857][T22697] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 509.092222][ T305] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 509.108537][ T305] usb 4-1: USB disconnect, device number 28 [ 509.179211][T22699] overlayfs: failed to clone upperpath [ 509.322678][T22704] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket pid=22704 comm=syz.2.8991 [ 509.423531][T22719] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 509.550718][T22722] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8998'. [ 509.562997][T22722] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8998'. [ 509.647615][T22733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8480 sclass=netlink_route_socket pid=22733 comm=syz.2.9001 [ 509.768306][T22740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9005'. [ 509.778328][T22742] tmpfs: Unknown parameter 'grpquota_block_hardlimit' [ 509.968071][T22753] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9010'. [ 510.016128][T22755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37408 sclass=netlink_route_socket pid=22755 comm=syz.2.9011 [ 510.089955][ T45] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 510.125387][T22777] lo: entered promiscuous mode [ 510.131730][T22776] lo: left promiscuous mode [ 510.219981][ T45] usb 4-1: device descriptor read/64, error -71 [ 510.415406][T22784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64544 sclass=netlink_route_socket pid=22784 comm=syz.4.9022 [ 510.460015][ T45] usb 4-1: device descriptor read/64, error -71 [ 510.490550][T22799] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 510.490586][T22799] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:370 [ 510.585459][T22828] rust_binder: Error in use_page_slow: ESRCH [ 510.585486][T22828] rust_binder: use_range failure ESRCH [ 510.591796][T22828] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 510.597322][T22828] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 510.605657][T22828] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:382 [ 510.627593][T22838] __nla_validate_parse: 6 callbacks suppressed [ 510.627616][T22838] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9045'. [ 510.669261][T22841] rust_binder: Write failure EFAULT in pid:387 [ 510.696470][T22846] SELinux: security_context_str_to_sid () failed with errno=-22 [ 510.709984][ T45] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 510.731930][T22852] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9050'. [ 510.740989][T22849] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9049'. [ 510.750215][T22849] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9049'. [ 510.759382][T22849] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9049'. [ 510.768589][T22849] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9049'. [ 510.777803][T22849] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9049'. [ 510.786863][T22849] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9049'. [ 510.795960][T22849] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9049'. [ 510.805182][T22849] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9049'. [ 510.825415][T22857] overlayfs: failed to clone upperpath [ 510.825457][T22856] overlayfs: failed to clone upperpath [ 510.860614][ T45] usb 4-1: device descriptor read/64, error -71 [ 510.879458][T22868] overlayfs: failed to clone upperpath [ 510.989965][ T305] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 511.021291][T22885] /dev/rnullb0: Can't lookup blockdev [ 511.061421][T22893] overlayfs: failed to clone upperpath [ 511.100016][ T45] usb 4-1: device descriptor read/64, error -71 [ 511.164101][ T305] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.175117][ T305] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.185425][ T305] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 511.194746][ T305] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.208413][ T305] usb 7-1: config 0 descriptor?? [ 511.213615][ T45] usb usb4-port1: attempt power cycle [ 511.559964][ T45] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 511.581067][ T45] usb 4-1: device descriptor read/8, error -71 [ 511.623702][ T305] playstation 0003:054C:0DF2.0038: item fetching failed at offset 3/5 [ 511.632317][ T305] playstation 0003:054C:0DF2.0038: Parse failed [ 511.638775][ T305] playstation 0003:054C:0DF2.0038: probe with driver playstation failed with error -22 [ 511.711029][ T45] usb 4-1: device descriptor read/8, error -71 [ 511.822542][ T64] usb 7-1: USB disconnect, device number 23 [ 511.950023][ T45] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 511.970960][ T45] usb 4-1: device descriptor read/8, error -71 [ 512.101034][ T45] usb 4-1: device descriptor read/8, error -71 [ 512.212992][ T45] usb usb4-port1: unable to enumerate USB device [ 512.368043][T22983] FAULT_INJECTION: forcing a failure. [ 512.368043][T22983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.381262][T22983] CPU: 1 UID: 0 PID: 22983 Comm: syz.6.9107 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 512.381296][T22983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 512.381310][T22983] Call Trace: [ 512.381317][T22983] <TASK> [ 512.381326][T22983] __dump_stack+0x21/0x30 [ 512.381355][T22983] dump_stack_lvl+0x10c/0x190 [ 512.381375][T22983] ? __cfi_dump_stack_lvl+0x10/0x10 [ 512.381397][T22983] dump_stack+0x19/0x20 [ 512.381417][T22983] should_fail_ex+0x3d9/0x530 [ 512.381440][T22983] should_fail+0xf/0x20 [ 512.381460][T22983] should_fail_usercopy+0x1e/0x30 [ 512.381482][T22983] _copy_to_user+0x24/0xa0 [ 512.381503][T22983] simple_read_from_buffer+0xed/0x160 [ 512.381524][T22983] proc_fail_nth_read+0x19e/0x210 [ 512.381544][T22983] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 512.381564][T22983] ? bpf_lsm_file_permission+0xd/0x20 [ 512.381584][T22983] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 512.381602][T22983] vfs_read+0x27b/0xb60 [ 512.381626][T22983] ? __cfi_vfs_read+0x10/0x10 [ 512.381647][T22983] ? __kasan_check_write+0x18/0x20 [ 512.381669][T22983] ? mutex_lock+0x92/0x1c0 [ 512.381688][T22983] ? __cfi_mutex_lock+0x10/0x10 [ 512.381707][T22983] ? __fget_files+0x2c5/0x340 [ 512.381732][T22983] ksys_read+0x141/0x250 [ 512.381760][T22983] ? __kasan_check_write+0x18/0x20 [ 512.381782][T22983] ? __cfi_ksys_read+0x10/0x10 [ 512.381803][T22983] ? __x64_sys_process_mrelease+0x80/0x80 [ 512.381823][T22983] ? __kasan_check_read+0x15/0x20 [ 512.381844][T22983] __x64_sys_read+0x7f/0x90 [ 512.381866][T22983] x64_sys_call+0x2638/0x2ee0 [ 512.381889][T22983] do_syscall_64+0x58/0xf0 [ 512.381914][T22983] ? clear_bhb_loop+0x50/0xa0 [ 512.381934][T22983] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 512.381959][T22983] RIP: 0033:0x7fb89ef8d33c [ 512.381977][T22983] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 512.381993][T22983] RSP: 002b:00007fb89fe44030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 512.382015][T22983] RAX: ffffffffffffffda RBX: 00007fb89f1b5fa0 RCX: 00007fb89ef8d33c [ 512.382031][T22983] RDX: 000000000000000f RSI: 00007fb89fe440a0 RDI: 0000000000000004 [ 512.382046][T22983] RBP: 00007fb89fe44090 R08: 0000000000000000 R09: 0000000000000000 [ 512.382060][T22983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.382074][T22983] R13: 0000000000000000 R14: 00007fb89f1b5fa0 R15: 00007fffb92bf418 [ 512.382092][T22983] </TASK> [ 512.916328][T22995] fuse: Unknown parameter 'go�p_i�@h��7���1�&��d' [ 513.300131][T23025] tmpfs: Unknown parameter 'si����%�x�PO�*�����3q����dǪC�p��M�-�҉�_Z���2J�D�b#U�K��h��E' [ 513.779966][ T9] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 513.929958][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 513.936106][ T9] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 513.944266][ T9] usb 7-1: config 0 has no interface number 0 [ 513.951734][ T9] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 513.960882][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.969068][ T9] usb 7-1: Product: syz [ 513.973401][ T9] usb 7-1: Manufacturer: syz [ 513.978002][ T9] usb 7-1: SerialNumber: syz [ 513.983265][ T9] usb 7-1: config 0 descriptor?? [ 513.988974][ T9] smsc95xx v2.0.0 [ 514.190810][ T9] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 514.201607][ T9] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 514.230318][ T9] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 514.248421][ T9] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -32 [ 514.258210][ T9] usb 7-1: USB disconnect, device number 24 [ 514.480064][T23115] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:444 [ 514.617238][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 514.634005][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 514.641986][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 514.649651][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 514.657329][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 514.664953][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 514.672590][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 514.680902][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 514.688355][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 514.695824][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 514.703395][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 514.710828][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 514.718229][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 514.725687][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 514.733120][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 514.740701][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 514.748104][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 514.755751][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 514.763656][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 514.766889][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 514.771308][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 514.778102][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 514.784862][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 514.791973][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 514.803245][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 514.810062][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 514.819722][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 514.820242][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 514.828719][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 514.840323][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 514.841137][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 514.848235][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 514.854547][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 514.861234][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 514.872216][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 514.874713][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 514.884909][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 514.888458][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 514.897494][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 514.909026][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 514.922028][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 514.929577][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 514.937460][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 514.943515][T23155] netlink: 'syz.4.9174': attribute type 10 has an invalid length. [ 514.945391][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 514.968838][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 514.976609][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 514.984373][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.000374][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.007993][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.013255][T23170] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 515.015776][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.029641][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.037218][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.044793][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.052394][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.059809][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.067452][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.075040][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.082620][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.090115][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.097527][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.104965][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.112844][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.120493][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.128083][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.135771][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.143572][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.151243][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.159043][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.170141][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.177618][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.185076][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.192717][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.200186][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.207587][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.215029][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x6 [ 515.222511][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x3 [ 515.230250][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.238143][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.245929][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.253529][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.263076][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.271396][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.278848][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.286411][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.293871][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.301348][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.308819][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.316304][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.331133][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.338780][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.346711][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.347655][ T9] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 515.361251][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.369199][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.376806][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.384223][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.391693][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.399069][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.406507][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.413936][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.421351][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.428790][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.436316][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.443831][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.451320][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.458765][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.466209][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.473660][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.481132][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.488573][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.496025][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.503745][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.511219][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.518633][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.526154][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.531782][ T9] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 166, changing to 11 [ 515.533615][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.544995][ T9] usb 7-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 515.552151][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.565923][ T9] usb 7-1: config 1 interface 0 has no altsetting 0 [ 515.573084][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.581225][ T9] usb 7-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.40 [ 515.586838][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.595938][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.604225][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.611496][ T9] usb 7-1: Product: ఊ [ 515.619852][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.623017][ T9] usb 7-1: Manufacturer: ﳿ [ 515.630372][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.634984][ T9] usb 7-1: SerialNumber: Њ [ 515.642317][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x7 [ 515.654135][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.661665][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.669110][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.676588][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.684079][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.691544][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.698969][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.706429][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.713898][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.722095][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.729540][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.736980][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.744429][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.751882][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.759308][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.766765][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.774255][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.781713][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.789146][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.796584][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.804046][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.811497][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.818929][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.826383][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.833833][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.841290][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.848727][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.856188][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.863660][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.871108][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.878535][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.885978][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.893427][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.900980][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.908409][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.915857][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.937985][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.945444][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.953032][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.960579][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.968116][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.975632][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.983115][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 515.986666][ T36] audit: type=1400 audit(2000000093.458:1457): avc: denied { getattr } for pid=23202 comm="syz.4.9196" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 515.990582][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 516.020480][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 516.027936][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 516.035420][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 516.042231][T23207] __nla_validate_parse: 71 callbacks suppressed [ 516.042266][T23207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9198'. [ 516.043165][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 516.051361][T23170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.058169][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 516.067027][T23170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.074317][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 516.097329][T23170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.098548][T23209] /dev/rnullb0: Can't lookup blockdev [ 516.106763][T23170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.114235][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 516.131649][ T9] usbhid 7-1:1.0: can't add hid device: -71 [ 516.137702][ T9] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 516.155784][ T9] usb 7-1: USB disconnect, device number 25 [ 516.161476][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 516.169689][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 516.177176][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 516.184607][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 516.192046][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 516.196280][T23217] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=23217 comm=syz.4.9203 [ 516.199434][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 516.221035][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 516.228006][T23219] overlayfs: failed to clone upperpath [ 516.228439][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 516.245872][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 516.253383][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 516.259318][T23221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9205'. [ 516.260846][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 516.277116][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 516.284576][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 516.292021][ T45] hid-generic 01FF:0004:0400.0039: unknown main item tag 0x0 [ 516.302716][ T45] hid-generic 01FF:0004:0400.0039: hidraw0: <UNKNOWN> HID v0.05 Device [syz0] on syz1 [ 516.327678][T23227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9207'. [ 516.335681][T23224] fido_id[23224]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 516.429515][T23232] FAT-fs (rnullb0): bogus number of reserved sectors [ 516.436347][T23232] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 516.444184][T23232] rust_binder: Write failure EINVAL in pid:223 [ 516.461609][T23236] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 516.467801][T23236] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:227 [ 516.659324][T23240] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 516.669192][T23240] rust_binder: Error while translating object. [ 516.675672][T23240] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 516.681939][T23240] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:479 [ 516.700737][T23242] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9215'. [ 516.730224][ T45] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 516.882279][ T45] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 516.891176][ T45] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 516.901484][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 516.912260][T23249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9218'. [ 516.912407][ T45] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 516.930323][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.938325][ T45] usb 4-1: Product: syz [ 516.942779][ T45] usb 4-1: Manufacturer: syz [ 516.947388][ T45] usb 4-1: SerialNumber: syz [ 516.962862][T23258] 9pnet_fd: Insufficient options for proto=fd [ 517.360504][ T45] usb 4-1: 0:2 : does not exist [ 517.367747][ T45] usb 4-1: USB disconnect, device number 33 [ 517.407485][T23270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9226'. [ 517.614201][ T36] audit: type=1326 audit(2000000095.091:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23293 comm="syz.2.9235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd15f8e929 code=0x7ffc0000 [ 517.637795][ T36] audit: type=1326 audit(2000000095.091:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23293 comm="syz.2.9235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd15f8e929 code=0x7ffc0000 [ 517.661385][ T36] audit: type=1326 audit(2000000095.091:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23293 comm="syz.2.9235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbd15f8e929 code=0x7ffc0000 [ 517.684900][ T36] audit: type=1326 audit(2000000095.091:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23293 comm="syz.2.9235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd15f8e929 code=0x7ffc0000 [ 517.685308][T23297] netlink: 188 bytes leftover after parsing attributes in process `syz.2.9235'. [ 517.708651][ T36] audit: type=1326 audit(2000000095.091:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23293 comm="syz.2.9235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbd15f8e929 code=0x7ffc0000 [ 517.740913][ T36] audit: type=1326 audit(2000000095.091:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23293 comm="syz.2.9235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd15f8e929 code=0x7ffc0000 [ 517.764578][ T36] audit: type=1326 audit(2000000095.091:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23293 comm="syz.2.9235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbd15f8e929 code=0x7ffc0000 [ 517.788003][ T36] audit: type=1326 audit(2000000095.091:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23293 comm="syz.2.9235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd15f8e929 code=0x7ffc0000 [ 517.811479][ T36] audit: type=1326 audit(2000000095.091:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23293 comm="syz.2.9235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fbd15f8e929 code=0x7ffc0000 [ 518.007437][T23316] __vm_enough_memory: pid: 23316, comm: syz.4.9240, bytes: 21199844118528 not enough memory for the allocation [ 518.149986][ T408] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 518.170120][T23320] netlink: 'syz.6.9243': attribute type 16 has an invalid length. [ 518.299957][ T408] usb 4-1: Using ep0 maxpacket: 32 [ 518.306157][ T408] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 518.314432][ T408] usb 4-1: config 0 has no interface number 0 [ 518.320603][ T408] usb 4-1: config 0 interface 67 altsetting 0 has an endpoint descriptor with address 0xFA, changing to 0x8A [ 518.332191][ T408] usb 4-1: config 0 interface 67 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 511 [ 518.343659][ T408] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 518.352780][ T408] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.360825][ T408] usb 4-1: Product: syz [ 518.364999][ T408] usb 4-1: Manufacturer: syz [ 518.369598][ T408] usb 4-1: SerialNumber: syz [ 518.374786][ T408] usb 4-1: config 0 descriptor?? [ 518.380069][T23312] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 518.387686][ T408] smsc95xx v2.0.0 [ 518.391394][ T408] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 518.401494][ T408] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 518.777546][T23340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket pid=23340 comm=syz.4.9250 [ 518.802972][T23342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9251'. [ 519.059662][T23360] netlink: 'syz.6.9259': attribute type 4 has an invalid length. [ 519.072476][T23360] netlink: 'syz.6.9259': attribute type 4 has an invalid length. [ 519.245343][T23365] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8480 sclass=netlink_route_socket pid=23365 comm=syz.2.9261 [ 519.294523][ T408] usb 4-1: USB disconnect, device number 34 [ 519.594602][T23406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9277'. [ 519.611119][T23408] overlay: Unknown parameter 'fsmagic' [ 519.629983][ T408] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 519.650676][T23416] /dev/rnullb0: Can't lookup blockdev [ 519.768150][T23438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9291'. [ 519.780982][ T408] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.802362][ T408] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.812434][ T408] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 519.825599][ T408] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 519.834822][ T408] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.843713][ T408] usb 4-1: config 0 descriptor?? [ 519.925467][T23455] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 519.925764][T23455] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 519.932423][T23455] rust_binder: Error while translating object. [ 519.943215][T23455] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 519.949406][T23455] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:510 [ 519.960759][T23455] netlink: 'syz.6.9297': attribute type 4 has an invalid length. [ 519.980597][T23455] netlink: 'syz.6.9297': attribute type 4 has an invalid length. [ 520.256951][T23486] tipc: Started in network mode [ 520.268424][T23486] tipc: Node identity ac1414aa, cluster identity 4711 [ 520.275887][T23486] tipc: Enabled bearer <udp:s>, priority 10 [ 520.483492][T23383] fuse: Bad value for 'group_id' [ 520.488621][T23383] fuse: Bad value for 'group_id' [ 520.519986][ T45] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 520.551207][ T408] usbhid 4-1:0.0: can't add hid device: -71 [ 520.557220][ T408] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 520.566191][ T408] usb 4-1: USB disconnect, device number 35 [ 520.671326][ T45] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 520.681662][ T45] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 2752, setting to 64 [ 520.692919][ T45] usb 7-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 520.707795][ T45] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 520.717027][ T45] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.726791][ T45] usb 7-1: Product: syz [ 520.731372][ T45] usb 7-1: Manufacturer: syz [ 520.739952][ T45] usb 7-1: SerialNumber: syz [ 521.114566][T23564] __nla_validate_parse: 5 callbacks suppressed [ 521.114587][T23564] netlink: 88 bytes leftover after parsing attributes in process `syz.3.9333'. [ 521.167436][T23571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9336'. [ 521.389958][ T408] tipc: Node number set to 2886997162 [ 521.560403][ T45] cdc_ncm 7-1:1.0: bind() failure [ 521.566373][ T45] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 521.574220][ T45] cdc_ncm 7-1:1.1: bind() failure [ 521.582445][ T45] usb 7-1: USB disconnect, device number 27 [ 521.989996][ T408] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 522.141771][ T408] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 166, changing to 11 [ 522.153010][ T408] usb 4-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 522.166075][ T408] usb 4-1: config 1 interface 0 has no altsetting 0 [ 522.174280][ T408] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.40 [ 522.181323][T23606] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9351'. [ 522.183462][ T408] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.201076][ T408] usb 4-1: Product: ఊ [ 522.205262][ T408] usb 4-1: Manufacturer: ﳿ [ 522.209882][ T408] usb 4-1: SerialNumber: Њ [ 522.304569][T23616] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 522.388226][T23622] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9359'. [ 522.413700][T23624] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9360'. [ 522.542274][T23630] 9pnet_fd: Insufficient options for proto=fd [ 522.558335][T23632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9364'. [ 522.627258][T23597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.635981][T23597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.646144][ T408] usbhid 4-1:1.0: can't add hid device: -71 [ 522.652252][ T408] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 522.653327][T23636] netlink: 3 bytes leftover after parsing attributes in process `syz.2.9366'. [ 522.661925][ T408] usb 4-1: USB disconnect, device number 36 [ 522.674923][ T2704] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 522.829964][ T2704] usb 7-1: Using ep0 maxpacket: 16 [ 522.836093][ T2704] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.847045][ T2704] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.857348][ T2704] usb 7-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 522.866410][ T2704] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.874878][ T2704] usb 7-1: config 0 descriptor?? [ 523.179771][ T36] kauditd_printk_skb: 69 callbacks suppressed [ 523.179792][ T36] audit: type=1400 audit(2000000100.651:1536): avc: denied { setattr } for pid=23644 comm="syz.3.9369" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 523.281836][ T2704] appleir 0003:05AC:8241.003A: unknown main item tag 0x0 [ 523.288928][ T2704] appleir 0003:05AC:8241.003A: unknown main item tag 0x0 [ 523.296022][ T2704] appleir 0003:05AC:8241.003A: unknown main item tag 0x0 [ 523.303096][ T2704] appleir 0003:05AC:8241.003A: unknown main item tag 0x0 [ 523.310153][ T2704] appleir 0003:05AC:8241.003A: unknown main item tag 0x0 [ 523.317415][ T2704] appleir 0003:05AC:8241.003A: No inputs registered, leaving [ 523.325882][ T2704] appleir 0003:05AC:8241.003A: hiddev96,hidraw0: USB HID v0.05 Device [HID 05ac:8241] on usb-dummy_hcd.6-1/input0 [ 523.541277][ T2704] usb 7-1: USB disconnect, device number 28 [ 523.616941][T23676] overlayfs: failed to clone upperpath [ 523.959969][ T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 524.121103][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 524.131269][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 524.140387][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 524.155524][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 524.164727][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.172758][ T9] usb 4-1: Product: syz [ 524.176933][ T9] usb 4-1: Manufacturer: syz [ 524.181598][ T9] usb 4-1: SerialNumber: syz [ 524.193466][ T9] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 524.201008][ T9] cdc_ncm 4-1:1.0: bind() failure [ 524.280583][ T36] audit: type=1326 audit(2000000101.761:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23703 comm="syz.6.9393" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb89ef8e929 code=0x0 [ 524.408233][T23708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9394'. [ 524.445803][T23715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9397'. [ 524.552628][ T408] usb 4-1: USB disconnect, device number 37 [ 524.913711][T23745] fuseblk: Unknown parameter 'r��ootmo�de' [ 524.999319][T23757] net_ratelimit: 22 callbacks suppressed [ 524.999331][T23757] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 525.164132][T23766] syz.6.9417: vmalloc error: size 16105472, failed to allocated page array size 31456, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz6,mems_allowed=0 [ 525.183544][T23766] CPU: 0 UID: 0 PID: 23766 Comm: syz.6.9417 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 525.183574][T23766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 525.183587][T23766] Call Trace: [ 525.183593][T23766] <TASK> [ 525.183600][T23766] __dump_stack+0x21/0x30 [ 525.183628][T23766] dump_stack_lvl+0x10c/0x190 [ 525.183647][T23766] ? __cfi_dump_stack_lvl+0x10/0x10 [ 525.183668][T23766] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 525.183694][T23766] dump_stack+0x19/0x20 [ 525.183713][T23766] warn_alloc+0x1bc/0x2a0 [ 525.183732][T23766] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 525.183752][T23766] ? __cfi_warn_alloc+0x10/0x10 [ 525.183770][T23766] ? __get_vm_area_node+0x1dc/0x3a0 [ 525.183790][T23766] ? __vcalloc_noprof+0x3a/0x50 [ 525.183813][T23766] __vmalloc_node_range_noprof+0x68e/0x1420 [ 525.183832][T23766] ? __se_sys_ioctl+0x135/0x1b0 [ 525.183855][T23766] ? __x64_sys_ioctl+0x7f/0xa0 [ 525.183877][T23766] ? x64_sys_call+0x1878/0x2ee0 [ 525.183900][T23766] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 525.183920][T23766] ? __vcalloc_noprof+0x3a/0x50 [ 525.183940][T23766] __vmalloc_noprof+0xfe/0x1d0 [ 525.183958][T23766] ? __vcalloc_noprof+0x3a/0x50 [ 525.183979][T23766] ? __cfi___vmalloc_noprof+0x10/0x10 [ 525.183998][T23766] ? mutex_lock+0x92/0x1c0 [ 525.184017][T23766] ? __cfi_mutex_lock+0x10/0x10 [ 525.184036][T23766] __vcalloc_noprof+0x3a/0x50 [ 525.184057][T23766] kvm_set_memslot+0x4c6/0x13f0 [ 525.184080][T23766] ? __kasan_kmalloc+0x96/0xb0 [ 525.184106][T23766] __kvm_set_memory_region+0x87c/0xb80 [ 525.184129][T23766] kvm_set_memory_region+0x2f/0x50 [ 525.184151][T23766] kvm_vm_ioctl+0x9ad/0xb80 [ 525.184173][T23766] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 525.184202][T23766] ? ioctl_has_perm+0x1aa/0x4d0 [ 525.184227][T23766] ? __asan_memcpy+0x5a/0x80 [ 525.184247][T23766] ? ioctl_has_perm+0x3e0/0x4d0 [ 525.184274][T23766] ? __cfi_futex_wait+0x10/0x10 [ 525.184293][T23766] ? selinux_file_ioctl+0x6e0/0x1360 [ 525.184318][T23766] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 525.184343][T23766] ? kfree+0x156/0x400 [ 525.184363][T23766] ? do_futex+0x309/0x500 [ 525.184387][T23766] ? __cfi_do_futex+0x10/0x10 [ 525.184410][T23766] ? anon_inode_getfile+0xfb/0x190 [ 525.184429][T23766] ? __fget_files+0x2c5/0x340 [ 525.184453][T23766] ? bpf_lsm_file_ioctl+0xd/0x20 [ 525.184471][T23766] ? security_file_ioctl+0x34/0xd0 [ 525.184495][T23766] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 525.184513][T23766] __se_sys_ioctl+0x135/0x1b0 [ 525.184536][T23766] __x64_sys_ioctl+0x7f/0xa0 [ 525.184558][T23766] x64_sys_call+0x1878/0x2ee0 [ 525.184579][T23766] do_syscall_64+0x58/0xf0 [ 525.184601][T23766] ? clear_bhb_loop+0x50/0xa0 [ 525.184620][T23766] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 525.184637][T23766] RIP: 0033:0x7fb89ef8e929 [ 525.184653][T23766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.184670][T23766] RSP: 002b:00007fb89fe44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 525.184690][T23766] RAX: ffffffffffffffda RBX: 00007fb89f1b5fa0 RCX: 00007fb89ef8e929 [ 525.184704][T23766] RDX: 0000200000000080 RSI: 000000004020ae46 RDI: 0000000000000005 [ 525.184717][T23766] RBP: 00007fb89f010b39 R08: 0000000000000000 R09: 0000000000000000 [ 525.184730][T23766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.184742][T23766] R13: 0000000000000000 R14: 00007fb89f1b5fa0 R15: 00007fffb92bf418 [ 525.184758][T23766] </TASK> [ 525.184976][T23766] Mem-Info: [ 525.225558][T23773] binfmt_misc: register: failed to install interpreter file ./file0 [ 525.231688][T23766] active_anon:6698 inactive_anon:60 isolated_anon:0 [ 525.231688][T23766] active_file:10118 inactive_file:18805 isolated_file:0 [ 525.231688][T23766] unevictable:16313 dirty:183 writeback:0 [ 525.231688][T23766] slab_reclaimable:7160 slab_unreclaimable:72435 [ 525.231688][T23766] mapped:30104 shmem:179 pagetables:1168 [ 525.231688][T23766] sec_pagetables:0 bounce:0 [ 525.231688][T23766] kernel_misc_reclaimable:0 [ 525.231688][T23766] free:1480555 free_pcp:2314 free_cma:0 [ 525.584992][T23766] Node 0 active_anon:26692kB inactive_anon:240kB active_file:40472kB inactive_file:75296kB unevictable:65252kB isolated(anon):0kB isolated(file):0kB mapped:120476kB dirty:736kB writeback:0kB shmem:716kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5024kB pagetables:4576kB sec_pagetables:0kB all_unreclaimable? no [ 525.618454][T23766] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2966016kB mlocked:0kB bounce:0kB free_pcp:5804kB local_pcp:5804kB free_cma:0kB [ 525.648725][T23766] lowmem_reserve[]: 0 3921 3921 [ 525.654207][T23766] Normal free:2962916kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26668kB inactive_anon:240kB active_file:40472kB inactive_file:75296kB unevictable:65252kB writepending:736kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:2720kB local_pcp:1112kB free_cma:0kB [ 525.686036][T23766] lowmem_reserve[]: 0 0 0 [ 525.690484][T23766] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 525.705981][T23766] Normal: 1081*4kB (UME) 4475*8kB (UME) 2589*16kB (UME) 1188*32kB (UME) 789*64kB (UME) 244*128kB (UME) 140*256kB (UME) 117*512kB (UME) 53*1024kB (UME) 30*2048kB (UM) 623*4096kB (UME) = 2964556kB [ 525.708375][T23789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9426'. [ 525.725596][T23766] 45517 total pagecache pages [ 525.739374][T23766] 87 pages in swap cache [ 525.748644][T23766] Free swap = 123936kB [ 525.758232][T23766] Total swap = 124996kB [ 525.774760][T23766] 2097051 pages RAM [ 525.778596][T23766] 0 pages HighMem/MovableOnly [ 525.785333][T23766] 351517 pages reserved [ 525.789604][T23766] 0 pages cma reserved [ 525.789867][ T36] audit: type=1400 audit(2000000103.261:1538): avc: denied { unmount } for pid=23796 comm="syz.2.9430" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 525.795845][T23766] Memory allocations: [ 525.817646][T23766] 0 B 0 init/main.c:1370 func:do_initcalls [ 525.827438][ T36] audit: type=1400 audit(2000000103.291:1539): avc: denied { create } for pid=23798 comm="syz.4.9436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 525.845370][T23766] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 525.855981][ T36] audit: type=1400 audit(2000000103.291:1540): avc: denied { write } for pid=23798 comm="syz.4.9436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 525.858742][T23766] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 525.884342][T23804] 9pnet_fd: Insufficient options for proto=fd [ 525.886136][T23766] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 525.898582][T23766] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 525.906526][T23766] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 525.915206][T23766] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 525.923145][T23766] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 525.931113][T23766] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 525.939026][T23766] 0 B 0 init/initramfs.c:101 func:find_link [ 526.004870][T23821] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:568 [ 526.009982][ T64] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 526.156368][T23826] __nla_validate_parse: 2 callbacks suppressed [ 526.156382][T23826] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9439'. [ 526.173611][ T64] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 166, changing to 11 [ 526.184895][ T64] usb 4-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 526.197818][ T64] usb 4-1: config 1 interface 0 has no altsetting 0 [ 526.205679][ T64] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.40 [ 526.214745][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.222894][ T64] usb 4-1: Product: ఊ [ 526.227142][ T64] usb 4-1: Manufacturer: ﳿ [ 526.231847][ T64] usb 4-1: SerialNumber: Њ [ 526.420683][T23842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9446'. [ 526.439955][ T2704] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 526.466533][T23848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9449'. [ 526.590408][T23865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9457'. [ 526.590957][ T2704] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.611093][ T2704] usb 7-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 526.620179][ T2704] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.632894][ T2704] usb 7-1: Product: syz [ 526.637098][ T2704] usb 7-1: Manufacturer: syz [ 526.643738][T23794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.653207][ T2704] usb 7-1: SerialNumber: syz [ 526.659416][T23876] overlay: Unknown parameter 'mounts' [ 526.659493][T23794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.672844][ T2704] usb 7-1: config 0 descriptor?? [ 526.679878][ T2704] cdc_acm 7-1:0.0: skipping garbage [ 526.690723][ T64] usbhid 4-1:1.0: can't add hid device: -71 [ 526.698752][ T64] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 526.709748][ T64] usb 4-1: USB disconnect, device number 38 [ 526.718041][T23885] fuse: Bad value for 'group_id' [ 526.723579][T23885] fuse: Bad value for 'group_id' [ 526.745966][T23891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9468'. [ 526.771645][T23898] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9470'. [ 526.781510][ T36] audit: type=1326 audit(2000000104.261:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23897 comm="syz.2.9470" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd15f8e929 code=0x0 [ 526.827298][T23904] overlayfs: failed to clone upperpath [ 526.884695][T23912] overlayfs: failed to clone upperpath [ 526.902377][T23834] kvm: vcpu 512: requested lapic timer restore with starting count register 0x390=1531215282 (3062430564 ns) > initial count (1473793136 ns). Using initial count to start timer. [ 526.946450][ T2704] usb 7-1: USB disconnect, device number 29 [ 527.262274][T23914] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 527.262742][T23914] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 527.300792][T23918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9478'. [ 527.327534][T23920] rust_binder: Error in use_page_slow: ESRCH [ 527.327555][T23920] rust_binder: use_range failure ESRCH [ 527.333599][T23920] rust_binder: Failed to allocate buffer. len:144, is_oneway:true [ 527.339061][T23920] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 527.346907][T23920] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:285 [ 527.384126][T23928] kvm_intel: kvm [23927]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3 [ 527.463435][T23946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9490'. [ 527.484294][T23950] rust_binder: Write failure EINVAL in pid:294 [ 527.558579][T23967] overlayfs: failed to clone upperpath [ 527.579544][T23971] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9502'. [ 527.639350][T23985] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:594 [ 527.705617][T23998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9514'. [ 527.909968][ T1809] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 528.071003][ T1809] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 528.082896][ T1809] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 528.119821][ T1809] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 528.137540][ T1809] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 528.146840][ T1809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.157158][T23991] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 528.370513][T23991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.392078][T23991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.419341][ T1809] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 528.447739][ T1809] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input49 [ 528.482382][ T1809] usb 4-1: USB disconnect, device number 39 [ 528.482474][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 528.810079][T24070] 8021q: VLANs not supported on ip_vti0 [ 529.335819][T24113] fuse: Unknown parameter '\�S0x0000000000000004' [ 529.344710][T24113] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 529.345226][T24113] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 529.351853][T24113] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:631 [ 529.360980][T24117] binder: Bad value for 'stats' [ 529.373532][T24119] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 529.491258][T24119] rust_binder: Error in use_page_slow: ESRCH [ 529.509206][T24119] rust_binder: use_range failure ESRCH [ 529.517257][T24119] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 529.529119][T24119] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 529.537415][T24119] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:633 [ 529.629058][T24129] rust_binder: Got transaction with invalid offset. [ 529.648354][T24129] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 529.658328][T24129] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:320 [ 529.781313][T24142] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:324 [ 529.870949][T24152] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 530.037623][T24179] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:336 [ 530.090461][T24182] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 530.099654][T24182] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 530.107952][T24182] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:338 [ 530.139983][ T408] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 530.157072][T24192] input: syz1 as /devices/virtual/input/input51 [ 530.301982][ T408] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 166, changing to 11 [ 530.313402][ T408] usb 7-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 530.326347][ T408] usb 7-1: config 1 interface 0 has no altsetting 0 [ 530.334719][ T408] usb 7-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.40 [ 530.343842][ T408] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.351844][ T408] usb 7-1: Product: ఊ [ 530.355987][ T408] usb 7-1: Manufacturer: ﳿ [ 530.360625][ T408] usb 7-1: SerialNumber: Њ [ 530.608705][ T36] audit: type=1326 audit(2000000108.081:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24206 comm="syz.2.9592" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbd15f8e929 code=0x0 [ 530.771205][ T408] usbhid 7-1:1.0: can't add hid device: -71 [ 530.777219][ T408] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 530.786067][ T408] usb 7-1: USB disconnect, device number 30 [ 530.988798][T24238] lo: entered promiscuous mode [ 530.994004][T24237] lo: left promiscuous mode [ 531.081548][T24252] rust_binder: Write failure EFAULT in pid:362 [ 531.206045][T24258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32850 sclass=netlink_route_socket pid=24258 comm=syz.4.9612 [ 531.745101][ T305] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 531.899953][ T305] usb 7-1: Using ep0 maxpacket: 8 [ 531.906561][ T305] usb 7-1: unable to get BOS descriptor or descriptor too short [ 531.916045][ T305] usb 7-1: config 241 has an invalid interface number: 149 but max is 0 [ 531.933241][ T305] usb 7-1: config 241 has no interface number 0 [ 531.946396][ T305] usb 7-1: config 241 interface 149 has no altsetting 0 [ 531.963011][ T305] usb 7-1: string descriptor 0 read error: -22 [ 531.971478][ T305] usb 7-1: New USB device found, idVendor=08dd, idProduct=0114, bcdDevice=79.dc [ 531.990160][ T305] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.273646][T24302] __nla_validate_parse: 11 callbacks suppressed [ 532.273668][T24302] netlink: 580 bytes leftover after parsing attributes in process `syz.4.9630'. [ 532.311757][T24302] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9630'. [ 532.346053][ T305] asix 7-1:241.149 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 532.367638][T24312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9633'. [ 532.379991][ T305] asix 7-1:241.149: probe with driver asix failed with error -71 [ 532.398570][ T305] usb 7-1: USB disconnect, device number 31 [ 532.576364][T24343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9651'. [ 532.590780][T24341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9649'. [ 532.762725][ T36] audit: type=1326 audit(2000000110.241:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24353 comm="syz.3.9656" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2340b8e929 code=0x0 [ 532.799784][T24352] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.806942][T24352] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.817307][T24352] bridge_slave_0: entered allmulticast mode [ 532.823860][T24352] bridge_slave_0: entered promiscuous mode [ 532.830636][T24352] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.837672][T24352] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.845614][T24352] bridge_slave_1: entered allmulticast mode [ 532.852105][T24352] bridge_slave_1: entered promiscuous mode [ 532.946581][T24352] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.953676][T24352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.960344][T24366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 532.960972][T24352] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.961624][T24366] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 532.967408][T24352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.988922][T24366] rust_binder: Write failure EINVAL in pid:658 [ 533.013091][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.026730][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.035923][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.042988][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.051979][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.059035][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.086939][T24371] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9661'. [ 533.097260][T24352] veth0_vlan: entered promiscuous mode [ 533.108900][T24373] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9662'. [ 533.121627][T24352] veth1_macvtap: entered promiscuous mode [ 533.146837][ T36] audit: type=1400 audit(2000000110.621:1544): avc: denied { mounton } for pid=24352 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 533.469972][ T305] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 533.631541][ T305] usb 7-1: unable to get BOS descriptor or descriptor too short [ 533.639813][ T305] usb 7-1: not running at top speed; connect to a high speed hub [ 533.649583][ T305] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 533.660476][ T305] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 533.669474][ T305] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 533.681562][ T305] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 533.694406][ T305] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 533.703805][ T305] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.713907][ T305] usb 7-1: Product: syz [ 533.721409][ T305] usb 7-1: Manufacturer: syz [ 533.728546][ T305] usb 7-1: SerialNumber: syz [ 533.735863][T24386] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 533.946789][T24386] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 533.946826][T24386] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:673 [ 534.190629][T24394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9671'. [ 534.287062][T24402] tmpfs: Bad value for 'nr_blocks' [ 534.472813][T24414] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.480425][T24414] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.487618][T24414] bridge_slave_0: entered allmulticast mode [ 534.495383][T24414] bridge_slave_0: entered promiscuous mode [ 534.502537][T24414] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.511202][T24414] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.518317][T24414] bridge_slave_1: entered allmulticast mode [ 534.524785][T24414] bridge_slave_1: entered promiscuous mode [ 534.543290][ T305] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 534.554545][ T305] cdc_ncm 7-1:1.0: bind() failure [ 534.562853][T19307] bridge_slave_1: left allmulticast mode [ 534.571678][ T305] usb 7-1: USB disconnect, device number 32 [ 534.580044][T19307] bridge_slave_1: left promiscuous mode [ 534.585929][T19307] @: port 2(bridge_slave_1) entered disabled state [ 534.595998][T19307] bridge_slave_0: left allmulticast mode [ 534.602218][T19307] bridge_slave_0: left promiscuous mode [ 534.616870][T19307] @: port 1(bridge_slave_0) entered disabled state [ 534.689408][T24431] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 534.699229][ T36] audit: type=1400 audit(2000000112.171:1545): avc: denied { relabelto } for pid=24430 comm="syz.6.9686" name="262" dev="tmpfs" ino=1408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 534.727905][ T36] audit: type=1400 audit(2000000112.171:1546): avc: denied { associate } for pid=24430 comm="syz.6.9686" name="262" dev="tmpfs" ino=1408 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 534.784553][T19307] veth1_macvtap: left promiscuous mode [ 534.790177][T19307] veth0_vlan: left promiscuous mode [ 534.803046][ T36] audit: type=1400 audit(2000000112.281:1547): avc: denied { write } for pid=20491 comm="syz-executor" name="262" dev="tmpfs" ino=1408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 534.853120][ T36] audit: type=1400 audit(2000000112.281:1548): avc: denied { remove_name } for pid=20491 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 534.881223][ T36] audit: type=1400 audit(2000000112.281:1549): avc: denied { rmdir } for pid=20491 comm="syz-executor" name="262" dev="tmpfs" ino=1408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 534.946865][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.953935][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.964005][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.971143][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.995666][T24414] veth0_vlan: entered promiscuous mode [ 535.006397][T24414] veth1_macvtap: entered promiscuous mode [ 535.793915][T24465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9696'. [ 535.956702][T24489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9705'. [ 536.131498][T24508] input: syz0 as /devices/virtual/input/input52 [ 536.209439][ T36] audit: type=1400 audit(2000000113.681:1550): avc: denied { setattr } for pid=21762 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 537.150996][ T36] audit: type=1400 audit(2000000114.631:1551): avc: denied { unmount } for pid=24414 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 537.235302][T24546] overlayfs: conflicting options: nfs_export=on,index=off [ 537.267039][T24546] fuseblk: Bad value for 'source' [ 537.570024][ T1809] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 537.751359][ T1809] usb 3-1: unable to get BOS descriptor or descriptor too short [ 537.759413][ T1809] usb 3-1: not running at top speed; connect to a high speed hub [ 537.768237][ T1809] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 537.779446][ T1809] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 537.792629][ T1809] usb 3-1: config 1 interface 0 has no altsetting 0 [ 537.800665][ T1809] usb 3-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.40 [ 537.809856][ T1809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.818136][ T1809] usb 3-1: Product: syz [ 537.822495][ T1809] usb 3-1: Manufacturer: syz [ 537.827100][ T1809] usb 3-1: SerialNumber: syz [ 537.832919][T24552] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 538.046140][ T1809] usbhid 3-1:1.0: can't add hid device: -71 [ 538.052200][ T1809] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 538.071389][ T1809] usb 3-1: USB disconnect, device number 71 [ 538.116408][T24557] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 538.589506][T24573] __nla_validate_parse: 2 callbacks suppressed [ 538.589529][T24573] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9742'. [ 538.744859][T24587] overlayfs: failed to clone upperpath [ 538.901539][T24596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9754'. [ 539.044375][T24611] KVM: debugfs: duplicate directory 24611-7 [ 539.289981][ T45] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 539.449974][ T45] usb 7-1: Using ep0 maxpacket: 32 [ 539.456533][ T45] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 539.465324][ T45] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 539.474207][ T45] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 539.483501][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 539.493401][ T45] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 539.503367][ T45] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 539.516655][ T45] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 539.525935][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.535011][ T45] usb 7-1: config 0 descriptor?? [ 539.751305][T24611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.761135][T24611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.978715][ T45] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 33 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 539.990997][ T45] usb 7-1: USB disconnect, device number 33 [ 539.997698][ T45] usblp0: removed [ 540.969956][ T1809] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 541.121063][ T1809] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.132145][ T1809] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.142292][ T1809] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 541.155404][ T1809] usb 7-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 541.164913][ T1809] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.180226][ T1809] usb 7-1: config 0 descriptor?? [ 541.595059][ T1809] itetech 0003:048D:8595.003B: item fetching failed at offset 5/7 [ 541.603220][ T1809] itetech 0003:048D:8595.003B: probe with driver itetech failed with error -22 [ 541.732470][ T36] audit: type=1400 audit(2000000119.211:1552): avc: denied { mounton } for pid=24674 comm="syz.7.9785" path="/proc/29/cgroup" dev="proc" ino=118628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 541.794005][ T2704] usb 7-1: USB disconnect, device number 34 [ 542.013921][T24685] 9pnet_fd: Insufficient options for proto=fd [ 542.442909][T24704] binder: Bad value for 'stats' [ 542.558808][T24710] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9797'. [ 542.691094][T24722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 543.069578][T24760] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 543.076334][T24760] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:753 [ 543.102003][T24763] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaaaaa [ 543.133799][T24767] exFAT-fs (rnullb0): invalid boot record signature [ 543.140564][T24767] exFAT-fs (rnullb0): failed to read boot sector [ 543.147004][T24767] exFAT-fs (rnullb0): failed to recognize exfat type [ 543.596622][T24781] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9824'. [ 543.995020][T24784] binder: Binderfs stats mode cannot be changed during a remount [ 544.454615][T24796] binder: Bad value for 'max' [ 544.599222][T24818] overlayfs: failed to clone upperpath [ 544.634175][ T36] audit: type=1326 audit(2000000122.111:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24821 comm="syz.2.9839" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ce178e929 code=0x0 [ 544.993313][T24830] cgroup: release_agent respecified [ 545.093004][T24832] rust_binder: Error in use_page_slow: ESRCH [ 545.093032][T24832] rust_binder: use_range failure ESRCH [ 545.099131][T24832] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 545.104828][T24832] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 545.112947][T24832] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:780 [ 545.174078][T24840] erofs: (device rnullb0): erofs_read_superblock: cannot find valid erofs superblock [ 545.648790][ T36] audit: type=1400 audit(2000000123.121:1554): avc: denied { listen } for pid=24857 comm="syz.2.9855" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 546.174270][T24892] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 546.174376][T24892] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 546.181199][T24892] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:798 [ 546.337561][ T36] audit: type=1400 audit(2000000123.811:1555): avc: denied { create } for pid=24894 comm="syz.2.9870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 547.258657][T24929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 547.260021][T24929] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 547.273105][T24929] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:815 [ 547.561097][ T2704] usb 7-1: new low-speed USB device number 35 using dummy_hcd [ 547.739948][ T2704] usb 7-1: Invalid ep0 maxpacket: 16 [ 547.750933][T24954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9892'. [ 547.879982][ T2704] usb 7-1: new low-speed USB device number 36 using dummy_hcd [ 548.029953][ T2704] usb 7-1: Invalid ep0 maxpacket: 16 [ 548.035609][ T2704] usb usb7-port1: attempt power cycle [ 548.389965][ T2704] usb 7-1: new low-speed USB device number 37 using dummy_hcd [ 548.410344][ T2704] usb 7-1: Invalid ep0 maxpacket: 16 [ 548.539998][ T2704] usb 7-1: new low-speed USB device number 38 using dummy_hcd [ 548.560335][ T2704] usb 7-1: Invalid ep0 maxpacket: 16 [ 548.565856][ T2704] usb usb7-port1: unable to enumerate USB device [ 551.394810][ T36] audit: type=1400 audit(2000000128.871:1556): avc: denied { read write } for pid=24994 comm="syz.6.9906" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 551.416175][ T36] audit: type=1400 audit(2000000128.871:1557): avc: denied { open } for pid=24994 comm="syz.6.9906" path="/318/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 551.453495][T24997] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.460688][T24997] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.467740][T24997] bridge_slave_0: entered allmulticast mode [ 551.474231][T24997] bridge_slave_0: entered promiscuous mode [ 551.480574][T24997] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.487625][T24997] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.494709][T24997] bridge_slave_1: entered allmulticast mode [ 551.501091][T24997] bridge_slave_1: entered promiscuous mode [ 551.511913][ T12] bridge_slave_1: left allmulticast mode [ 551.517671][ T12] bridge_slave_1: left promiscuous mode [ 551.523357][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.530819][ T12] bridge_slave_0: left allmulticast mode [ 551.536442][ T12] bridge_slave_0: left promiscuous mode [ 551.542140][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.649790][T24997] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.656861][T24997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.664161][T24997] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.671205][T24997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.680975][ T12] veth1_macvtap: left promiscuous mode [ 551.686459][ T12] veth0_vlan: left promiscuous mode [ 551.730090][T19307] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.737411][T19307] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.746674][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.753762][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.762892][T19307] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.769972][T19307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.797900][T24997] veth0_vlan: entered promiscuous mode [ 551.808681][T24997] veth1_macvtap: entered promiscuous mode [ 552.008385][T25016] tmpfs: Unknown parameter 'giv' [ 552.042793][T25018] rust_binder: Error while translating object. [ 552.042841][T25018] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 552.055949][T25018] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:60 [ 552.259151][T25036] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9921'. [ 552.580018][ T408] usb 7-1: new full-speed USB device number 39 using dummy_hcd [ 552.716214][ T36] audit: type=1326 audit(2000000130.191:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25075 comm="syz.7.9936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51f38e929 code=0x7fc00000 [ 552.731417][ T408] usb 7-1: unable to get BOS descriptor or descriptor too short [ 552.747954][ T36] audit: type=1326 audit(2000000130.191:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25075 comm="syz.7.9936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51f38e929 code=0x7fc00000 [ 552.759564][ T408] usb 7-1: not running at top speed; connect to a high speed hub [ 552.777718][ T36] audit: type=1326 audit(2000000130.191:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25075 comm="syz.7.9936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51f38e929 code=0x7fc00000 [ 552.785819][ T408] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 552.828982][ T36] audit: type=1326 audit(2000000130.191:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25075 comm="syz.7.9936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51f38e929 code=0x7fc00000 [ 552.853870][ T36] audit: type=1326 audit(2000000130.191:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25075 comm="syz.7.9936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51f38e929 code=0x7fc00000 [ 552.878147][ T36] audit: type=1326 audit(2000000130.191:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25075 comm="syz.7.9936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51f38e929 code=0x7fc00000 [ 552.878784][ T408] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 552.902070][ T36] audit: type=1326 audit(2000000130.191:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25075 comm="syz.7.9936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51f38e929 code=0x7fc00000 [ 552.936747][ T36] audit: type=1326 audit(2000000130.191:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25075 comm="syz.7.9936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51f38e929 code=0x7fc00000 [ 552.944139][ T408] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.000228][ T408] usb 7-1: Product: syz [ 553.006693][ T408] usb 7-1: Manufacturer: syz [ 553.028608][ T408] usb 7-1: SerialNumber: syz [ 553.079300][T25122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9956'. [ 553.134773][T25125] can: request_module (can-proto-3) failed. [ 553.248024][ T408] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 553.261711][T22312] udevd[22312]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 553.264858][ T408] usb 7-1: USB disconnect, device number 39 [ 553.320777][T25137] FAULT_INJECTION: forcing a failure. [ 553.320777][T25137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 553.335831][T25137] CPU: 0 UID: 0 PID: 25137 Comm: syz.7.9963 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 553.335863][T25137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 553.335874][T25137] Call Trace: [ 553.335880][T25137] <TASK> [ 553.335888][T25137] __dump_stack+0x21/0x30 [ 553.335912][T25137] dump_stack_lvl+0x10c/0x190 [ 553.335930][T25137] ? __cfi_dump_stack_lvl+0x10/0x10 [ 553.335948][T25137] dump_stack+0x19/0x20 [ 553.335965][T25137] should_fail_ex+0x3d9/0x530 [ 553.335985][T25137] should_fail+0xf/0x20 [ 553.336002][T25137] should_fail_usercopy+0x1e/0x30 [ 553.336020][T25137] _copy_from_user+0x22/0xb0 [ 553.336042][T25137] get_user_ifreq+0x71/0x180 [ 553.336063][T25137] sock_ioctl+0x6fb/0x7b0 [ 553.336083][T25137] ? __cfi_sock_ioctl+0x10/0x10 [ 553.336105][T25137] ? bpf_lsm_file_ioctl+0xd/0x20 [ 553.336125][T25137] ? security_file_ioctl+0x34/0xd0 [ 553.336160][T25137] ? __cfi_sock_ioctl+0x10/0x10 [ 553.336180][T25137] __se_sys_ioctl+0x135/0x1b0 [ 553.336204][T25137] __x64_sys_ioctl+0x7f/0xa0 [ 553.336226][T25137] x64_sys_call+0x1878/0x2ee0 [ 553.336247][T25137] do_syscall_64+0x58/0xf0 [ 553.336271][T25137] ? clear_bhb_loop+0x50/0xa0 [ 553.336289][T25137] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 553.336308][T25137] RIP: 0033:0x7fd51f38e929 [ 553.336324][T25137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 553.336339][T25137] RSP: 002b:00007fd52022b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 553.336360][T25137] RAX: ffffffffffffffda RBX: 00007fd51f5b5fa0 RCX: 00007fd51f38e929 [ 553.336374][T25137] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000005 [ 553.336385][T25137] RBP: 00007fd52022b090 R08: 0000000000000000 R09: 0000000000000000 [ 553.336398][T25137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.336410][T25137] R13: 0000000000000000 R14: 00007fd51f5b5fa0 R15: 00007ffd43a5fd38 [ 553.336425][T25137] </TASK> [ 553.616653][T25167] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9974'. [ 553.638793][T25169] overlay: Unknown parameter 'func' [ 553.840174][T25181] overlayfs: failed to clone upperpath [ 553.889492][T25192] can: request_module (can-proto-3) failed. [ 553.906245][T25198] tmpfs: Unknown parameter 'giv' [ 553.969697][T25204] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:861 [ 554.087299][ T12] tipc: Subscription rejected, illegal request [ 554.114951][T25221] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10000'. [ 554.143020][T25227] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 554.144039][T25227] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:876 [ 554.239531][T25238] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=25238 comm=syz.8.10005 [ 554.389960][ T64] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 554.415655][T25249] binder: Bad value for 'stats' [ 554.417846][T25248] binder: Bad value for 'stats' [ 554.431742][T25252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10010'. [ 554.528395][T25260] overlayfs: failed to clone lowerpath [ 554.541042][ T64] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.562322][ T64] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.573637][ T64] usb 7-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 554.587318][ T64] usb 7-1: config 0 interface 0 has no altsetting 0 [ 554.593987][ T64] usb 7-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 554.603854][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.616393][ T64] usb 7-1: config 0 descriptor?? [ 554.674413][T25273] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10020'. [ 554.829840][T25304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10031'. [ 555.210265][T25327] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10040'. [ 555.230745][T25329] rust_binder: Error in use_page_slow: ESRCH [ 555.230767][T25329] rust_binder: use_range failure ESRCH [ 555.233214][ T64] usbhid 7-1:0.0: can't add hid device: -71 [ 555.238967][T25329] rust_binder: Failed to allocate buffer. len:176, is_oneway:false [ 555.243211][ T64] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 555.248413][T25329] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 555.258429][ T64] usb 7-1: USB disconnect, device number 40 [ 555.266823][T25329] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:128 [ 555.615730][T25352] 9pnet_fd: p9_fd_create_tcp (25352): problem connecting socket to 127.0.0.1 [ 555.643438][T25354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10050'. [ 555.730753][T25357] overlayfs: failed to resolve '/����P�': -2 [ 555.791267][T25359] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:140 [ 555.910706][T25372] Unsupported ieee802154 address type: 0 [ 555.939174][T25375] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10059'. [ 555.961047][T25377] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:886 [ 556.060130][T25382] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:888 [ 556.281591][T25408] lo: entered promiscuous mode [ 556.295774][T25409] lo: left promiscuous mode [ 557.109438][T25489] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:103 [ 557.200930][T25497] rust_binder: Error while translating object. [ 557.210222][T25497] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 557.216412][T25497] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:109 [ 557.230003][ T64] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 557.313410][T25507] /dev/rnullb0: Can't lookup blockdev [ 557.335047][T25511] rust_binder: Error in use_page_slow: ESRCH [ 557.335075][T25511] rust_binder: use_range failure ESRCH [ 557.341294][T25511] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 557.346774][T25511] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 557.363391][T25511] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:113 [ 557.383580][T25521] __nla_validate_parse: 7 callbacks suppressed [ 557.383600][T25521] netlink: 116 bytes leftover after parsing attributes in process `syz.2.10119'. [ 557.408123][ T64] usb 7-1: Using ep0 maxpacket: 16 [ 557.415584][ T64] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.426521][ T64] usb 7-1: New USB device found, idVendor=056a, idProduct=010e, bcdDevice= 0.00 [ 557.435788][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.444394][ T64] usb 7-1: config 0 descriptor?? [ 557.489174][T25526] rust_binder: Write failure EINVAL in pid:160 [ 557.489174][T25527] rust_binder: Write failure EINVAL in pid:160 [ 557.495574][T25527] rust_binder: Read failure Err(EAGAIN) in pid:160 [ 557.495866][T25526] rust_binder: Read failure Err(EAGAIN) in pid:160 [ 557.562393][T25533] overlayfs: failed to clone upperpath [ 557.566125][T25535] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 557.574970][T25535] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:163 [ 557.653922][ T64] wacom 0003:056A:010E.003C: unknown main item tag 0x0 [ 557.681815][ T64] wacom 0003:056A:010E.003C: unknown main item tag 0x0 [ 557.688736][ T64] wacom 0003:056A:010E.003C: unknown main item tag 0x0 [ 557.696726][T25546] TCP: out of memory -- consider tuning tcp_mem [ 557.703359][ T64] wacom 0003:056A:010E.003C: unknown main item tag 0x0 [ 557.710634][ T64] wacom 0003:056A:010E.003C: unknown main item tag 0x0 [ 557.719184][ T64] wacom 0003:056A:010E.003C: hidraw0: USB HID v4.05 Device [HID 056a:010e] on usb-dummy_hcd.6-1/input0 [ 557.870698][ T408] usb 7-1: USB disconnect, device number 41 [ 558.099987][ T64] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 558.230005][ T64] usb 9-1: device descriptor read/64, error -71 [ 558.387216][T25570] netlink: 'syz.6.10138': attribute type 4 has an invalid length. [ 558.395104][T25570] netlink: 17 bytes leftover after parsing attributes in process `syz.6.10138'. [ 558.404665][T25570] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:901 [ 558.469971][ T64] usb 9-1: device descriptor read/64, error -71 [ 558.526618][T25585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10143'. [ 558.530465][T25580] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 558.535996][T25580] rust_binder: Error in use_page_slow: ESRCH [ 558.542516][T25580] rust_binder: use_range failure ESRCH [ 558.548567][T25580] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 558.554133][T25580] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 558.562198][T25580] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:906 [ 558.565836][T25589] overlayfs: failed to clone upperpath [ 558.593422][T25593] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:912 [ 558.669358][T25601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 558.739991][ T64] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 558.879978][ T64] usb 9-1: device descriptor read/64, error -71 [ 558.919979][ T408] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 559.073400][ T408] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 166, changing to 11 [ 559.085032][ T408] usb 7-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 559.098100][ T408] usb 7-1: config 1 interface 0 has no altsetting 0 [ 559.099570][T25645] overlayfs: failed to clone lowerpath [ 559.106421][ T408] usb 7-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.40 [ 559.119455][ T408] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.127504][ T408] usb 7-1: Product: ఊ [ 559.129986][ T64] usb 9-1: device descriptor read/64, error -71 [ 559.131821][ T408] usb 7-1: Manufacturer: ﳿ [ 559.142609][ T408] usb 7-1: SerialNumber: Њ [ 559.250253][ T64] usb usb9-port1: attempt power cycle [ 559.261386][T25653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10171'. [ 559.551911][ T408] usbhid 7-1:1.0: can't add hid device: -71 [ 559.558448][ T408] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 559.568833][ T408] usb 7-1: USB disconnect, device number 42 [ 559.590002][ T64] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 559.618552][ T64] usb 9-1: device descriptor read/8, error -71 [ 559.750919][ T64] usb 9-1: device descriptor read/8, error -71 [ 559.990039][ T64] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 560.010917][ T64] usb 9-1: device descriptor read/8, error -71 [ 560.150854][ T64] usb 9-1: device descriptor read/8, error -71 [ 560.270037][ T64] usb usb9-port1: unable to enumerate USB device [ 560.400005][ T10] usb 7-1: new full-speed USB device number 43 using dummy_hcd [ 560.550987][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 560.561167][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 560.570061][ T10] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 560.584285][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=85a1, bcdDevice= 0.40 [ 560.593346][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.601405][ T10] usb 7-1: Product: syz [ 560.605561][ T10] usb 7-1: Manufacturer: syz [ 560.610225][ T10] usb 7-1: SerialNumber: syz [ 560.774738][T25708] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10192'. [ 560.797745][T25710] rust_binder: Error while translating object. [ 560.797793][T25710] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 560.804029][T25710] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:172 [ 560.819023][ T10] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 560.835160][ T10] cdc_ncm 7-1:1.0: bind() failure [ 560.843447][ T10] usb 7-1: USB disconnect, device number 43 [ 561.390923][T25735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10201'. [ 562.024920][T25760] rust_binder: Error while translating object. [ 562.024950][T25760] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 562.031396][T25760] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:186 [ 562.327176][T25766] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10213'. [ 562.617487][T25781] netlink: 5 bytes leftover after parsing attributes in process `syz.6.10220'. [ 562.627580][T25783] netlink: 5 bytes leftover after parsing attributes in process `syz.6.10220'. [ 562.686745][T25787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10222'. [ 562.802039][T25811] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10230'. [ 562.825431][T25813] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:975 [ 562.872867][T25815] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 563.045214][T25820] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 563.170047][T25836] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10239'. [ 563.304928][T25852] overlayfs: failed to clone upperpath [ 563.336614][T25859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10248'. [ 563.345726][T25863] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10249'. [ 563.395163][T25869] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 563.396520][T25867] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 563.403020][T25867] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1014 [ 563.746834][T25877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 563.765216][T25879] FAULT_INJECTION: forcing a failure. [ 563.765216][T25879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 563.784823][T25879] CPU: 0 UID: 0 PID: 25879 Comm: syz.6.10255 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 563.784846][T25879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 563.784853][T25879] Call Trace: [ 563.784858][T25879] <TASK> [ 563.784864][T25879] __dump_stack+0x21/0x30 [ 563.784881][T25879] dump_stack_lvl+0x10c/0x190 [ 563.784893][T25879] ? __cfi_dump_stack_lvl+0x10/0x10 [ 563.784905][T25879] ? is_bpf_text_address+0x17b/0x1a0 [ 563.784920][T25879] dump_stack+0x19/0x20 [ 563.784931][T25879] should_fail_ex+0x3d9/0x530 [ 563.784944][T25879] should_fail+0xf/0x20 [ 563.784954][T25879] should_fail_usercopy+0x1e/0x30 [ 563.784966][T25879] _copy_from_user+0x22/0xb0 [ 563.784980][T25879] do_ipv6_setsockopt+0x321/0x2ec0 [ 563.784995][T25879] ? __cfi_do_ipv6_setsockopt+0x10/0x10 [ 563.785008][T25879] ? kstrtoull+0x13b/0x1e0 [ 563.785019][T25879] ? avc_has_perm_noaudit+0x268/0x360 [ 563.785031][T25879] ? __asan_memcpy+0x5a/0x80 [ 563.785044][T25879] ? avc_has_perm_noaudit+0x286/0x360 [ 563.785061][T25879] ? avc_has_perm+0x144/0x220 [ 563.785072][T25879] ? __cfi_avc_has_perm+0x10/0x10 [ 563.785083][T25879] ? selinux_socket_setsockopt+0x2ea/0x390 [ 563.785096][T25879] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 563.785109][T25879] ipv6_setsockopt+0x5d/0x170 [ 563.785122][T25879] tcp_setsockopt+0xf2/0x110 [ 563.785133][T25879] sock_common_setsockopt+0xb8/0xd0 [ 563.785146][T25879] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 563.785159][T25879] do_sock_setsockopt+0x26a/0x400 [ 563.785169][T25879] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 563.785180][T25879] __x64_sys_setsockopt+0x1b8/0x250 [ 563.785191][T25879] x64_sys_call+0x2adc/0x2ee0 [ 563.785203][T25879] do_syscall_64+0x58/0xf0 [ 563.785217][T25879] ? clear_bhb_loop+0x50/0xa0 [ 563.785229][T25879] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 563.785239][T25879] RIP: 0033:0x7fb89ef8e929 [ 563.785249][T25879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 563.785259][T25879] RSP: 002b:00007fb89fe44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 563.785271][T25879] RAX: ffffffffffffffda RBX: 00007fb89f1b5fa0 RCX: 00007fb89ef8e929 [ 563.785279][T25879] RDX: 000000000000002c RSI: 0000000000000029 RDI: 0000000000000003 [ 563.785286][T25879] RBP: 00007fb89fe44090 R08: 0000000000000108 R09: 0000000000000000 [ 563.785293][T25879] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 563.785302][T25879] R13: 0000000000000000 R14: 00007fb89f1b5fa0 R15: 00007fffb92bf418 [ 563.785310][T25879] </TASK> [ 564.014553][T25890] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10260'. [ 564.066040][T25894] rust_binder: Write failure EFAULT in pid:1039 [ 564.088524][T25900] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 564.162214][T25906] overlayfs: conflicting options: metacopy=off,verity=on [ 564.203539][T25908] rust_binder: Error while translating object. [ 564.203583][T25908] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 564.209823][T25908] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1043 [ 564.243445][T25914] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:139 [ 564.253695][T25914] rust_binder: Read failure Err(EFAULT) in pid:139 [ 564.342640][T25918] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10272'. [ 564.627199][T25933] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10278'. [ 564.636788][T25933] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 564.645096][T25933] rust_binder: Write failure EINVAL in pid:158 [ 564.663080][T25935] fuse: Bad value for 'user_id' [ 564.674170][T25935] fuse: Bad value for 'user_id' [ 565.719994][ T45] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 565.872172][ T45] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 565.881301][ T45] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.889275][ T45] usb 7-1: Product: syz [ 565.893497][ T45] usb 7-1: Manufacturer: syz [ 565.898117][ T45] usb 7-1: SerialNumber: syz [ 565.929983][ T64] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 566.079975][ T64] usb 9-1: Using ep0 maxpacket: 16 [ 566.086141][ T64] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.097210][ T64] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.106984][ T64] usb 9-1: config 0 interface 0 has no altsetting 0 [ 566.113623][ T64] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 566.123501][ T64] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.132216][ T64] usb 9-1: config 0 descriptor?? [ 566.538767][T25995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.547405][T25995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.564216][T25995] overlayfs: missing 'lowerdir' [ 566.683130][ T64] usbhid 9-1:0.0: can't add hid device: -71 [ 566.691451][ T64] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 566.702909][ T64] usb 9-1: USB disconnect, device number 6 [ 566.740515][T26014] SELinux: security_context_str_to_sid (E�) failed with errno=-22 [ 567.333526][T26047] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:174 [ 567.499497][ T36] kauditd_printk_skb: 1102 callbacks suppressed [ 567.499516][ T36] audit: type=1400 audit(2000000144.971:2668): avc: denied { append } for pid=26067 comm="syz.8.10327" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 567.549661][T26068] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=26068 comm=syz.8.10327 [ 567.562529][T26068] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=26068 comm=syz.8.10327 [ 567.575593][T26068] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=26068 comm=syz.8.10327 [ 567.588681][T26068] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=26068 comm=syz.8.10327 [ 568.010036][T26113] __nla_validate_parse: 2 callbacks suppressed [ 568.010051][T26113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10344'. [ 568.299759][T26148] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10356'. [ 568.476515][ T10] usb 7-1: USB disconnect, device number 44 [ 568.495148][T26155] rust_binder: Write failure EFAULT in pid:1066 [ 568.614843][ T36] audit: type=1400 audit(2000000146.091:2669): avc: denied { unmount } for pid=24997 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 568.774716][T26173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10366'. [ 568.931762][T26203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10379'. [ 569.556870][T19307] Bluetooth: hci0: Frame reassembly failed (-84) [ 569.558137][T26263] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 569.566485][T26263] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:230 [ 569.625634][T26269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10405'. [ 569.669984][ T408] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 569.819998][ T408] usb 7-1: Using ep0 maxpacket: 8 [ 569.826422][ T408] usb 7-1: unable to get BOS descriptor or descriptor too short [ 569.834940][ T408] usb 7-1: config 10 has an invalid interface number: 81 but max is 0 [ 569.843164][ T408] usb 7-1: config 10 has no interface number 0 [ 569.849318][ T408] usb 7-1: config 10 interface 81 has no altsetting 0 [ 569.857881][ T408] usb 7-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 569.867070][ T408] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.875112][ T408] usb 7-1: Product: syz [ 569.879272][ T408] usb 7-1: Manufacturer: syz [ 569.883887][ T408] usb 7-1: SerialNumber: syz [ 569.991358][T26296] netlink: 'syz.7.10417': attribute type 4 has an invalid length. [ 569.999194][T26296] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.10417'. [ 570.089792][T26249] overlay: ./bus is not a directory [ 570.099297][T26249] exFAT-fs (rnullb0): invalid boot record signature [ 570.105951][T26249] exFAT-fs (rnullb0): failed to read boot sector [ 570.112327][T26249] exFAT-fs (rnullb0): failed to recognize exfat type [ 570.126748][ T408] ums-jumpshot 7-1:10.81: USB Mass Storage device detected [ 570.132690][T26302] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10418'. [ 570.135413][ T408] ums-jumpshot 7-1:10.81: Quirks match for vid 05dc pid 0001: 2 [ 570.181084][ T408] usb 7-1: USB disconnect, device number 45 [ 570.346092][T26324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 570.397689][T26330] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1116 [ 571.149729][T26367] futex_wake_op: syz.7.10440 tries to shift op by -1; fix this program [ 571.278671][T26378] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 571.519981][ T2704] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 571.560011][ T9238] Bluetooth: hci0: command 0x1003 tx timeout [ 571.560037][T14361] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 571.681227][ T2704] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 571.691419][ T2704] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 571.701008][ T2704] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 571.710135][ T2704] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 571.718141][ T2704] usb 7-1: SerialNumber: syz [ 571.927001][ T2704] usb 7-1: 0:2 : does not exist [ 571.933728][ T2704] usb 7-1: USB disconnect, device number 46 [ 572.434943][T26408] tipc: Invalid UDP bearer configuration [ 572.434959][T26408] tipc: Enabling of bearer <udp:s> rejected, failed to enable media [ 572.548062][T26427] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 572.548393][T26427] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1137 [ 572.577409][ T36] audit: type=1400 audit(2000000150.051:2670): avc: denied { connect } for pid=26429 comm="syz.6.10463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 572.661214][T26436] tipc: Invalid UDP bearer configuration [ 572.661239][T26436] tipc: Enabling of bearer <udp:s> rejected, failed to enable media [ 572.675900][T26436] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 572.676582][T26436] rust_binder: Failed to allocate buffer. len:18446744073709551608, is_oneway:false [ 572.683096][T26436] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 572.694373][T26436] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1141 [ 572.704305][ T408] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 572.814175][T26458] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 572.820750][T26458] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 572.860187][T26463] overlay: Unknown parameter 'smackfstransmute' [ 572.870012][ T408] usb 9-1: Using ep0 maxpacket: 32 [ 572.876182][ T408] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 572.884465][ T408] usb 9-1: config 0 has no interface number 0 [ 572.890704][ T408] usb 9-1: config 0 interface 184 has no altsetting 0 [ 572.899119][ T408] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 572.908362][ T408] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.916402][ T408] usb 9-1: Product: syz [ 572.920665][ T408] usb 9-1: Manufacturer: syz [ 572.925269][ T408] usb 9-1: SerialNumber: syz [ 572.932414][ T408] usb 9-1: config 0 descriptor?? [ 572.940365][ T408] smsc75xx v1.0.0 [ 572.998980][T26474] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 572.999349][T26474] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1154 [ 573.145170][ T408] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 573.165482][ T408] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 573.177314][ T408] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 573.187748][ T408] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -71 [ 573.197142][ T408] usb 9-1: USB disconnect, device number 7 [ 573.361705][T26492] rust_binder: 26491 RLIMIT_NICE not set [ 573.614567][ T36] audit: type=1404 audit(2000000151.091:2671): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 573.636153][ T36] audit: type=1404 audit(2000000151.111:2672): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 573.651419][ T36] audit: type=1400 audit(2000000151.111:2673): avc: denied { map } for pid=26517 comm="syz.6.10497" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 573.674765][ T36] audit: type=1400 audit(2000000151.111:2674): avc: denied { read } for pid=26517 comm="syz.6.10497" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 573.698186][ T36] audit: type=1400 audit(2000000151.111:2675): avc: denied { execmem } for pid=26517 comm="syz.6.10497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 573.739676][ T36] audit: type=1400 audit(2000000151.211:2676): avc: denied { read write } for pid=20491 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 573.764068][ T36] audit: type=1400 audit(2000000151.211:2677): avc: denied { open } for pid=20491 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 573.788268][ T36] audit: type=1400 audit(2000000151.211:2678): avc: denied { ioctl } for pid=20491 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 573.813976][ T36] audit: type=1400 audit(2000000151.221:2679): avc: denied { read } for pid=26520 comm="syz.6.10498" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 573.999207][T19307] Bluetooth: hci0: Frame reassembly failed (-84) [ 574.282171][T26567] new mount options do not match the existing superblock, will be ignored [ 575.086685][T26619] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:249 [ 575.116656][T26622] rust_kernel: panicked at /syzkaller/managers/ci2-android-6-12-rust/kernel/rust/kernel/page_size_compat.rs:60:5: [ 575.116656][T26622] attempt to add with overflow [ 575.143410][T26622] ------------[ cut here ]------------ [ 575.149038][T26622] kernel BUG at rust/helpers/bug.c:7! [ 575.154962][T26622] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 575.161926][T26622] CPU: 0 UID: 0 PID: 26622 Comm: syz.7.10537 Not tainted 6.12.30-syzkaller-g1d4f4d446dbd #0 c93aecf919cd453af8c9b0d1ce6d9747cbb4dbdf [ 575.175654][T26622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 575.185710][T26622] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 575.190993][T26622] Code: ce 82 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 78 a0 de ce 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 32 64 97 42 90 90 90 90 90 90 90 90 90 [ 575.210589][T26622] RSP: 0018:ffffc900018b73f0 EFLAGS: 00010246 [ 575.216649][T26622] RAX: 000000000000008c RBX: 1ffff92000316e80 RCX: 535bc0daa389cf00 [ 575.224624][T26622] RDX: ffffc9000a249000 RSI: 0000000000007ff6 RDI: 0000000000007ff7 [ 575.232594][T26622] RBP: ffffc900018b73f0 R08: ffffc900018b70e7 R09: 1ffff92000316e1c [ 575.240557][T26622] R10: dffffc0000000000 R11: fffff52000316e1d R12: 0000000000000000 [ 575.248519][T26622] R13: dffffc0000000000 R14: ffffc900018b7420 R15: ffffc900018b7450 [ 575.256494][T26622] FS: 00007fd52022b6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 575.265426][T26622] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 575.271997][T26622] CR2: 000000110c302a46 CR3: 000000014fdf2000 CR4: 00000000003526b0 [ 575.279957][T26622] DR0: 00000000000006d8 DR1: 0000000000000000 DR2: 0000000000000000 [ 575.287927][T26622] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 575.295893][T26622] Call Trace: [ 575.299159][T26622] <TASK> [ 575.302081][T26622] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 575.309540][T26622] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 575.317511][T26622] ? kernel_text_address+0xa9/0xe0 [ 575.322623][T26622] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 575.336170][T26622] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 575.342324][T26622] ? arch_stack_walk+0x10b/0x170 [ 575.347254][T26622] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 575.354443][T26622] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 575.362331][T26622] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0xb2/0xc0 [ 575.372218][T26622] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0x10/0x10 [ 575.382804][T26622] _RNvXs1_CscPPBqWtAqum_11ashmem_rustNtB5_6AshmemNtNtCs43vyB533jt3_6kernel10miscdevice10MiscDevice4mmap+0xe44/0xfb0 [ 575.395042][T26622] ? mas_wr_store_type+0x8eb/0x1ad0 [ 575.400235][T26622] ? __cfi__RNvXs1_CscPPBqWtAqum_11ashmem_rustNtB5_6AshmemNtNtCs43vyB533jt3_6kernel10miscdevice10MiscDevice4mmap+0x10/0x10 [ 575.413075][T26622] ? mas_preallocate+0x56e/0xc60 [ 575.418098][T26622] ? __cfi_mas_preallocate+0x10/0x10 [ 575.423373][T26622] ? kasan_save_alloc_info+0x40/0x50 [ 575.428648][T26622] ? __asan_memset+0x39/0x50 [ 575.433224][T26622] mmap_region+0x136b/0x1bc0 [ 575.437804][T26622] ? __cfi_common_lsm_audit+0x10/0x10 [ 575.443174][T26622] ? __cfi_mmap_region+0x10/0x10 [ 575.448117][T26622] ? preempt_schedule_common+0x2d/0x60 [ 575.453591][T26622] ? __kasan_check_read+0x15/0x20 [ 575.458626][T26622] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 575.464872][T26622] ? file_mmap_ok+0x147/0x1a0 [ 575.469578][T26622] do_mmap+0xb6d/0x13c0 [ 575.473737][T26622] ? __cfi_do_mmap+0x10/0x10 [ 575.478317][T26622] ? down_write_killable+0xe9/0x2d0 [ 575.483506][T26622] ? __cfi_down_write_killable+0x10/0x10 [ 575.489303][T26622] vm_mmap_pgoff+0x38f/0x4e0 [ 575.493882][T26622] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 575.498979][T26622] ? __fget_files+0x2c5/0x340 [ 575.503650][T26622] ksys_mmap_pgoff+0x166/0x1e0 [ 575.508421][T26622] __x64_sys_mmap+0x121/0x140 [ 575.513110][T26622] x64_sys_call+0x13bf/0x2ee0 [ 575.517792][T26622] do_syscall_64+0x58/0xf0 [ 575.522205][T26622] ? clear_bhb_loop+0x50/0xa0 [ 575.526876][T26622] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 575.532752][T26622] RIP: 0033:0x7fd51f38e929 [ 575.537158][T26622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.556768][T26622] RSP: 002b:00007fd52022b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 575.565177][T26622] RAX: ffffffffffffffda RBX: 00007fd51f5b5fa0 RCX: 00007fd51f38e929 [ 575.573142][T26622] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000701000 [ 575.581113][T26622] RBP: 00007fd51f410b39 R08: 0000000000000004 R09: 0000000000000000 [ 575.589073][T26622] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 575.597027][T26622] R13: 0000000000000000 R14: 00007fd51f5b5fa0 R15: 00007ffd43a5fd38 [ 575.604991][T26622] </TASK> [ 575.607996][T26622] Modules linked in: [ 575.612323][T26622] ---[ end trace 0000000000000000 ]--- [ 575.619115][T26622] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 575.624524][T26622] Code: ce 82 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 78 a0 de ce 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 32 64 97 42 90 90 90 90 90 90 90 90 90 [ 575.647863][T26622] RSP: 0018:ffffc900018b73f0 EFLAGS: 00010246 [ 575.655262][T26622] RAX: 000000000000008c RBX: 1ffff92000316e80 RCX: 535bc0daa389cf00 [ 575.663365][T26622] RDX: ffffc9000a249000 RSI: 0000000000007ff6 RDI: 0000000000007ff7 [ 575.671472][T26622] RBP: ffffc900018b73f0 R08: ffffc900018b70e7 R09: 1ffff92000316e1c [ 575.679509][T26622] R10: dffffc0000000000 R11: fffff52000316e1d R12: 0000000000000000 [ 575.687627][T26622] R13: dffffc0000000000 R14: ffffc900018b7420 R15: ffffc900018b7450 [ 575.695720][T26622] FS: 00007fd52022b6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 575.704775][T26622] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 575.711501][T26622] CR2: 00007f669361ff98 CR3: 000000014fdf2000 CR4: 00000000003526b0 [ 575.721747][T26622] DR0: 00000000000006d8 DR1: 0000000000000000 DR2: 0000000000000000 [ 575.733736][T26622] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 575.741880][T26622] Kernel panic - not syncing: Fatal exception [ 575.748300][T26622] Kernel Offset: disabled [ 575.752616][T26622] Rebooting in 86400 seconds..