last executing test programs: 3m15.058280263s ago: executing program 3 (id=116): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000180)={0x0, 0x4}, 0x2) (async) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000380), &(0x7f00000003c0)=0x4) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x1, 0x1}, @flat=@weak_binder={0x77622a85, 0x100a, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 3m15.012448743s ago: executing program 3 (id=117): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0xcc000) modify_ldt$write2(0x11, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) syz_clone3(&(0x7f0000000440)={0x40000000, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000009c0)) r4 = dup(r3) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc298, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0xaf, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x100, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0x3}}}}}]}}]}}, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x4e24, 0x101, @mcast1, 0x200a3c}, {0xa, 0xffde, 0xbffffffd, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0xffffffffffffffff, {[0x4, 0x4, 0xfffffffb, 0xfffffef9, 0x0, 0x0, 0xc2]}}, 0x5c) syz_usb_control_io(r5, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000900)={0x114, 0x0, &(0x7f0000000a00)=[@decrefs={0x40046307, 0x3}, @register_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f00000005c0)=""/230, 0xe6, 0x0, 0x31}, @flat=@binder={0x73622a85, 0xb, 0x2}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x440}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x1, &(0x7f00000006c0)=""/228, 0xe4, 0x1, 0x36}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/177, 0xb1, 0x0, 0x1a}, @fda={0x66646185, 0x0, 0x0, 0x3}}, &(0x7f00000007c0)={0x0, 0x28, 0x50}}}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000800)={@flat=@handle={0x73682a85, 0x800, 0x2}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x1, 0x2, 0x37}}, &(0x7f00000008c0)={0x0, 0x18, 0x30}}, 0x1000}, @increfs={0x40046304, 0x2}, @acquire_done={0x40106309, 0x3}, @clear_death={0x400c630f, 0x1}], 0x91, 0x0, &(0x7f0000000b40)="989f2a988e0e8f025d572d665575b3a8ce83f012f0fa560913978857ccdac0eb5d91dc2f0c57aa216cf5c1b2a9e8664e1996702a09ca78ca5985ed719335a1fdc3448a2fcec694fa8ab2fe109ec2b01797a7e9f5ebfda08e30a28c79079ac841d75d9f453fa2117a73a6f2f82d8dfdb6318e7453dbd907b31c4a3f65103b1a9c48881ab2e6e962d10ca638aa2b149e63d2"}) syz_usb_control_io(r5, &(0x7f0000000340)={0x2c, &(0x7f0000000140)={0x20, 0x7, 0x5, {0x5, 0x24, "00f4e5"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x181c800, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c756e616d0e2a1e5f08981a797176359102a8a9212c6b66d502b79c87cca243e49e8f431c14b12e36d11f0c0b014d22d64da059d0d06ff943a8489355bbbaa38ed0d9d263a4fff90579d192da6bcbd65e9d88abcfcbe8f835cbb011f8ce710c5267275e85a9c7cd1dc7851408fe1c0b8be5f883abbd7e6858aa7b891e86bcfa9ea48167d6f7e785e5ae299b684f538899f154f609c10bae4a0c9b69ab94bb4ef0a50af40f43b6d28aad0dbdb9c03670bf3bd88bd3b124"]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1f}, @fda={0x66646185, 0x4, 0x0, 0xffffffffffffffff}, @flat=@weak_handle={0x77682a85, 0x0, 0x3}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) 3m12.005345436s ago: executing program 3 (id=185): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x7b, 0x0, &(0x7f0000000400)="dea03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002cd18a2e05520dbc95f20d222f9220c8d9b1b0d196136752587ab17948adf2dcbba03d2f3e0e647c2e7000000000000000a9138f41d3723fc4ece519206446c3fc2d969cd67a9dbf04950b60ceff14e58418bf988b26ecc29ba32f4a"}) ioperm(0xd1df, 0x7, 0x9) (async) ioperm(0xd1df, 0x7, 0x9) remap_file_pages(&(0x7f00005f4000/0x3000)=nil, 0xa00, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "3908572161eb8a894902a761b36fa42bd80e88319513d6b1634f07c222da77eb0063a48a4c8c18744f6ddf23cec6028e6d224cb01d36f66f363b270b02ffb00a", 0x35}, 0x48, 0xfffffffffffffffc) (async) r1 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "3908572161eb8a894902a761b36fa42bd80e88319513d6b1634f07c222da77eb0063a48a4c8c18744f6ddf23cec6028e6d224cb01d36f66f363b270b02ffb00a", 0x35}, 0x48, 0xfffffffffffffffc) keyctl$instantiate(0xc, r1, 0x0, 0x3b, 0x0) pipe(&(0x7f0000000000)) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0xfffffffe}) setpriority(0x2, 0x0, 0xd2f4) (async) setpriority(0x2, 0x0, 0xd2f4) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) (async) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0xf, 0x800000000005, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$tipc(0x1e, 0x2, 0x0) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) (async) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x20004880) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r6, 0x0) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x89727a31546dcc40, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r7 = socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r7, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000040}, 0x8844) 3m11.933068956s ago: executing program 3 (id=187): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x511}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000000)="0f01cf0f1c40190f06baf80c66b8a9b6568d66efbafc0cecba4300b0d3ee3e0f320fec2d440f20c0663509000000440f22c0660f3a219ab3d2060f20e06635000004000f22e0", 0x46}], 0x1, 0x70, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r5) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r5) sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r6, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x2001c0c1}, 0xc0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r4) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r7, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd7000fcdbdf250800000014000600626174616476300000000000000000007c92d731fc5031da98dfe5cacbe0d1ff87c8c2fe6cc8e447ec7fd6bab4efcfd23d4adea540b626306a3af316dd17df0a91d24bea2db3a3286bfc01e97c3c7a22ce821cd27b641435b33da723ba3ff795d55fef18fb4b4f2de407f7171eb92d7f30558d930ba49181bb2a82ee2970da09df940fd75c27ceb75088607f6eee18d07ae3574d1f472da00d315d00d0fb5a09768967515a7db542f60b9cbc1e7c84ec9c441a0b7758d58497a7c7d40a13f9276ba47ad6016b61299a4666e6ded349479b4ecb16b7f57e"], 0x28}, 0x1, 0x0, 0x0, 0x22000004}, 0x8080) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000080)={0x1000, {0x205c2, 0x3, 0x3, 0xfec, 0xfffffffa}}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}, 0x1, 0x0, 0x0, 0x200008c0}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000240)=ANY=[], 0x310) r10 = fcntl$dupfd(r1, 0x0, r1) ioctl$UFFDIO_CONTINUE(r10, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) write(r0, &(0x7f0000000400)="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", 0x1f000) 3m11.932307726s ago: executing program 3 (id=189): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000100)=0xfffffffa, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000002580), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002180)={0x14, r4, 0x304, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40480c1}, 0x2000c080) syz_genetlink_get_family_id$nfc(&(0x7f0000002500), r2) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000002580), r2) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x14, r5, 0xb03, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4851}, 0x8000) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000841}, 0x24004084) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r6, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) 3m11.867208817s ago: executing program 3 (id=190): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async, rerun: 64) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (rerun: 64) close(r1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)="7ddb889a", 0xfffffcda}], 0x1}}], 0x1, 0x20000054) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) r5 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) setns(r5, 0x50000000) (async) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x228400}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="000128bd7000fcdbdf251f0000000700210062620000c086503fb7b1e57ada2fbbb6307ff8a7a3c77ee3fac618062cb2aa820119f67dc6ec371e9b20b494c1e61f0b5c371f529f96abe1629aac1e3a35e5fb105ef9dd8d6c8528ff66efee1dcdfa"], 0x1c}, 0x1, 0x0, 0x0, 0x400c010}, 0x200008c0) (async, rerun: 64) shutdown(r3, 0x1) (rerun: 64) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000012300)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c80080006"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 64) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) (async, rerun: 64) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x5}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async, rerun: 32) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/126, 0x7e, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x0, 0x25}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 3m5.566906823s ago: executing program 0 (id=365): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) ioprio_get$pid(0x2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x2, 0xa8, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x0, 0xd0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xbb5, 0x9}, [@extension_unit={0xd, 0x24, 0x8, 0x5, 0x9, 0x7, "fd5e21f96f79"}, @mixer_unit={0x5, 0x24, 0x4, 0x1, 0xa5}, @extension_unit={0xb, 0x24, 0x8, 0x5, 0x2, 0xa, "11d46c63"}, @processing_unit={0x8, 0x24, 0x7, 0x5, 0x7, 0x4, '\a'}, @selector_unit={0x9, 0x24, 0x5, 0x5, 0x0, "d98abbb2"}, @output_terminal={0xffffffffffffff04, 0x24, 0x3, 0x6, 0x307, 0x6, 0x5, 0x40}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x5, 0x8, 0x7f, {0x7, 0x25, 0x1, 0x3, 0x5, 0xc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xb, 0x35, 0x10, {0x7, 0x25, 0x1, 0x0, 0x4d, 0x2}}}}}}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x64, 0x0, &(0x7f00000004c0)=[@request_death={0x400c630e, 0x1}, @acquire={0x40046305, 0x1}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc40}], 0x6, 0x0, &(0x7f0000000380)="65240c31f4f2"}) 3m4.360865068s ago: executing program 0 (id=372): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000009cc0), r2) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000009d80)={0x0, 0x0, &(0x7f0000009d40)={&(0x7f0000009d00)={0x14, r3, 0x701, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x4ea5, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x2c4, 0x4) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r0, 0x98b2f000) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) 3m4.335098678s ago: executing program 0 (id=373): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'ip6gretap0\x00', &(0x7f0000000000)=@ethtool_cmd={0x49, 0x2, 0x2, 0x37f, 0x3f, 0x7, 0x1, 0x3, 0x6, 0x7, 0x101, 0x142f, 0x8, 0x1, 0x0, 0xa, [0x4000000, 0xff]}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xf9, 0x2, 0x4}, @fda={0x66646185, 0x7, 0x0, 0x12}, @fda={0x66646185, 0x4, 0x0, 0x23}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 3m4.250959019s ago: executing program 0 (id=374): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup2(r0, r0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, 0x0, 0x0) (async) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, 0x0, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x6982c2, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000040)={{0x4eb, 0x109003ff}, {0x4eb, 0x109003ff}, 0x9, 0x1}) (async) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000040)={{0x4eb, 0x109003ff}, {0x4eb, 0x109003ff}, 0x9, 0x1}) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000000)=0x14, 0x4) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x0, 0x3}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x80, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x80, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) (async) close(r5) open$dir(&(0x7f00000002c0)='./file0\x00', 0x80, 0x0) dup2(r4, r5) (async) dup2(r4, r5) recvmmsg(r3, &(0x7f0000001600)=[{{&(0x7f00000001c0)=@nfc_llcp, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/1, 0x1}, {&(0x7f00000002c0)=""/4094, 0xffe}], 0x2, &(0x7f00000012c0)=""/169, 0xa9}, 0x9}, {{&(0x7f0000001380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001400)=""/238, 0xee}], 0x1, &(0x7f00000016c0)=""/148, 0x94}, 0x5}], 0x2, 0x43, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001680)=ANY=[@ANYBLOB="24000000001300000008000000ffa4d953690e9e64544096cc799b008784c5af819cf024372e01473f5377411e33c37329a5f393e06399", @ANYRES32, @ANYBLOB="04001280"], 0x24}], 0x1}, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) fspick(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) 3m4.249015399s ago: executing program 0 (id=375): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000100)={0x10, 0x9, [{0x7, 0x0, 0xedd}, {0x7, 0x0, 0x3}, {0x0, 0x0, 0x7}, {0xfffffe00, 0x0, 0x6}, {0x1, 0x0, 0x6}, {0xa0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {0x9, 0x0, 0x9}, {0x401, 0x0, 0x2}, {0x1, 0x0, 0x101}, {0x4, 0x0, 0x9}, {0x9, 0x0, 0x4}, {0x7, 0x0, 0x8}, {0x1000, 0x0, 0x1}, {0x2, 0x0, 0x101}, {0x148d, 0x0, 0x2}]}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x7, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0) 3m4.184186819s ago: executing program 0 (id=376): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e22}, 0xc3) getgroups(0x2, &(0x7f0000000140)=[0xee00, 0xee00]) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r5 = fcntl$dupfd(r4, 0x406, r4) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='hybla', 0x5) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000740)="c5f3", 0x2}], 0x1}}], 0x1, 0x11) write$binfmt_elf32(r5, &(0x7f00000009c0)=ANY=[], 0x2f8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="24000000000000000100000001", @ANYRES32, @ANYRES64, @ANYBLOB="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"], 0xf0, 0x1}}], 0x1, 0x44015) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x310) setsockopt$inet6_group_source_req(r6, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) chown(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, r3) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) lsetxattr(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="73656375726974792e2e0f62696e64657266732f62696e6465723100"], &(0x7f0000000200)='./binderfs/binder1\x00', 0x13, 0x1) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r7, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) 3m4.126842549s ago: executing program 32 (id=376): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e22}, 0xc3) getgroups(0x2, &(0x7f0000000140)=[0xee00, 0xee00]) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r5 = fcntl$dupfd(r4, 0x406, r4) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='hybla', 0x5) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000740)="c5f3", 0x2}], 0x1}}], 0x1, 0x11) write$binfmt_elf32(r5, &(0x7f00000009c0)=ANY=[], 0x2f8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="24000000000000000100000001", @ANYRES32, @ANYRES64, @ANYBLOB="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"], 0xf0, 0x1}}], 0x1, 0x44015) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f36f0c7eb2700d609bcf41076d88144448ebe7994dd1b33d7c8787734cc315672f62261ceeede940774fd94d2767288cfb3a20882449d601ff878eedd3d57c9eb3a723b62102bd534c8a304a975d752e82cc8d5f969771c94a1d69cfd8694e29b9468fca5df65ece31ed7c209325604001fcd06adc3ac391f60a3523d6d0b4a8a"], 0x310) setsockopt$inet6_group_source_req(r6, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) chown(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, r3) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) lsetxattr(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="73656375726974792e2e0f62696e64657266732f62696e6465723100"], &(0x7f0000000200)='./binderfs/binder1\x00', 0x13, 0x1) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r7, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) 2m56.902608509s ago: executing program 33 (id=190): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async, rerun: 64) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (rerun: 64) close(r1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)="7ddb889a", 0xfffffcda}], 0x1}}], 0x1, 0x20000054) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) r5 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) setns(r5, 0x50000000) (async) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x228400}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="000128bd7000fcdbdf251f0000000700210062620000c086503fb7b1e57ada2fbbb6307ff8a7a3c77ee3fac618062cb2aa820119f67dc6ec371e9b20b494c1e61f0b5c371f529f96abe1629aac1e3a35e5fb105ef9dd8d6c8528ff66efee1dcdfa"], 0x1c}, 0x1, 0x0, 0x0, 0x400c010}, 0x200008c0) (async, rerun: 64) shutdown(r3, 0x1) (rerun: 64) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000012300)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c80080006"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 64) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) (async, rerun: 64) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x5}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async, rerun: 32) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/126, 0x7e, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x0, 0x25}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 2m47.624772598s ago: executing program 5 (id=682): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) clock_gettime(0x766293fdc5a3d1bd, 0x0) r2 = dup(r1) readv(r0, &(0x7f0000000800)=[{&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000400)=""/177, 0xb1}, {&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/114, 0x72}, {&(0x7f0000000640)=""/189, 0xbd}, {&(0x7f0000000700)=""/202, 0xca}], 0x6) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x8}}], [], 0x6b}}) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r4 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r4, r3, 0x0, 0xffffffff) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) pipe2$9p(&(0x7f0000000240), 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) (async) clock_gettime(0x766293fdc5a3d1bd, 0x0) (async) dup(r1) (async) readv(r0, &(0x7f0000000800)=[{&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000400)=""/177, 0xb1}, {&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/114, 0x72}, {&(0x7f0000000640)=""/189, 0xbd}, {&(0x7f0000000700)=""/202, 0xca}], 0x6) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x8}}], [], 0x6b}}) (async) syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') (async) open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) (async) sendfile(r4, r3, 0x0, 0xffffffff) (async) 2m47.613542028s ago: executing program 5 (id=683): creat(&(0x7f0000000100)='./file0\x00', 0x100) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ufs\x00', 0x1008800, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x101000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000580)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xd0d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\xcc\x02\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6X\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdf\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xc4\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1Ov7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x01\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x9b2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9\x00\x00\x00\xb6u\xbb\n{\x90\xfd>\xd0-\xfa\xa9\xfd{\x95E\r\x81j\x12\xb7\xd0k\xc2\xdc\xcdK\xc1\xe6\xf7\xb8@\xe0D\xf3\x1e,\xe6\xcfP)\x1a\x88\xd8\xb3\xc62a|\xe8\x15\x1d.\t+@[\xbd(-8w\xb7\xbe-\xc3L\x95\xc3\xd7\xcb\xc1s\n\xe3\xd6\xc7eEj\xbfP?\xe6\xc5\x8f\xfcN\xaa).- \xc5\xaf\x9enP6?\xd0\x99\x12\xe1\xcfd\xe3*\xe0J\xba!V|\xcc\xc2\xd2\xe2tl\x18Q\xdc\xdb\xf2\xcemAj\xc1\xac\x11s\xafj\xba\x1c\'\x8170\xb0b4\xb9V\v\xec5\x8aC0rU\xab\xd4n\x17s\x8b\xb1\r;f\xc3\aN2\xdb\xdb\xa95@\xfd\x9c_C\xb7I\xf5\x80X9\x10\x17\xeez\xfb1\x93d\xeb\xa7\xcbr\x04@\xf2w\xdahz\v\xe9\x15\xe8\\=\x8a\xb9\x90u\xbd\xae<\xb7\xd4WZ\xe0\x1bl\x0e\n\xdc|\a\x95\x83Wa\x0e4)\x99\x88\x87\xe1\v\xb3\x978:apC\xb79g1') ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000001d80)='\x00\x00`/\x00\x00\x00\x1f\x00x\x85\x1c \xf3\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\x00\x00\x00\x000Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\t\x00\x00\x00\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\x89]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8CoB\xdc\xc26\x06\x10\x92\xc7\xa55\x9f\x04\x00*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03\xae\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\xedo\x92\xae\r\x05\xfa\x99\x15\x87\x14\x13$\t\x01\x00\x00\x00\x00\x00\x00\x00\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\f\x03\xbb\x14\xa7\xda\x19M\xa3!\x95\xa0\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f\x8a\x9b\xe2\xa7k9\xd9`=}\t\x82\nw!y\x91\xbeM\xdck=\xcc\xef\x16vt\x1d\x1c\xa3\xee\x13\x16\xdbb0\b`/c\x9f\x8c\xee\xb1\x1a\xcf\x8ba\x11Oh\xc7\xb8\x8e#\xeeAh\xd9\x15\xc6\xe7>\x95\xe2\xdaQ\x0e\xc0E\xdd\xc3^7Y\xd2\xf0\xf7DZ\x12\xce\xba\vI$[v\x00\x830p\xd4\xbf\xa3\xf28\xab\xd4e\xc9z\xff\xfc\xeb\x04\xff\x98\xda\x01.gT\xcb7!W\x98\xc4\xa5\xb4\xc3\xd8\x94\xe6\xd7\x9e\xed\x1f\xafBF\xd6\xbfu5=.\x92\xc8-\xcc~6Y\xa7K\xd5=v\xdctJ\xba\x17\x18\xc8x\x95\xd8\xb2\xd6\x10)\xcfs\xaf\xf5E\x18\xa2*\x82\tU\xd3\xf7Y\x1d\x175\x04X2\xa3K\xab\x14\xec\xc9\x9c?\xa9\xc4\xc7\xe3{\xbfA\x16\xfcY\nR\x93\xb3\xcd\x0fg\xf6L3\xe87\x8aX\x82Y\x95\v\xbf%\xef\x83\x02\xc1\xd5c}\x18(\x13\x9e\xe7\xb2$\xee\xc4\x94\x00\xf6S9\xb7\xbcu\xb9\xad\xc6$=D\xb9\x82\x15yM\xa8\xf1N\xaeB\xf8.q\x90\x8a\xb57_\x98\x7f\xf2b\xbd\x97\xfc\xefN\xc6\xad\x99IJW\'\xd6m\xf0[WO\xf3\xd0\x9e\xda\xbd8\xd5FVA>\xa8p\vp*\xd1\xd9\v\xa3\xb2\x1b)E/\xbb\x90\xcct_K\x8d\xa3\xd2\xad,y\xa7\x8b\xa3\xb8\x86\xa9Q~\x1f\xbf\xa3(,\x91') mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)=ANY=[@ANYBLOB="00232b04000000200000"]) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$EVIOCSABS20(r1, 0x40044591, 0x0) ioctl$EVIOCGPROP(r1, 0x80404509, 0x0) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='cpuset\x00', 0x40000, &(0x7f00000001c0)='max') 2m47.554923618s ago: executing program 5 (id=684): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x8000000000001) openat$rnullb(0xffffffffffffff9c, 0x0, 0x161142, 0x0) r2 = memfd_secret(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r2, 0x0) ftruncate(r2, 0x3) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000100), 0x4) r4 = fcntl$dupfd(r3, 0x406, r3) write$binfmt_aout(r4, &(0x7f00000007c0)=ANY=[], 0x120) read$FUSE(r4, &(0x7f0000004580)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000000)={0xdf, 0x0, 0x1000000}) r7 = geteuid() fsetxattr$system_posix_acl(r4, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {0x1, 0x4}, [{0x2, 0x5, r5}, {0x2, 0xbcee81d8c2474608, r7}, {0x2, 0x6, r5}, {0x2, 0x5, r5}, {0x2, 0x4, r5}, {0x2, 0xd, r5}], {0x4, 0x4}, [{0x8, 0x4, r6}, {0x8, 0x2, r6}, {0x8, 0x4, r6}, {0x8, 0x7, r6}, {0x8, 0x3, r6}, {0x8, 0x2, r6}, {0x8, 0x0, r6}, {0x8, 0xa9ee088cd6b25c92, r6}], {0x10, 0x4}, {0x20, 0x1}}, 0x94, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, &(0x7f0000000080)=[{0x6, 0x20, 0xff, 0x6}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r9, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, &(0x7f0000000140)={0x0, 0x6, r8, 0xb42, 0x80000}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r10, 0x5452, &(0x7f0000000300)=0x208) setsockopt$sock_int(r10, 0x1, 0x7, &(0x7f0000000180), 0x4) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x198, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback}, {@in=@private, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0x60, 0x1, {{'xcbc(aes)\x00'}, 0xc0, "bd47604b63ab6f1ee0fab0861fd447149db52737b0cd641f"}}]}, 0x198}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008000a000d"], 0x1c}], 0x1}, 0x0) 2m47.554352749s ago: executing program 5 (id=685): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1000, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x24) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x2801, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000340)=0x20) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) ioctl$TCSBRKP(r0, 0x5425, 0x0) ioctl$TCSETSW2(r0, 0x5425, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$EVIOCSABS20(r2, 0x40044591, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_LK(r5, &(0x7f0000000000)={0x28, 0x0, r6, {{0xffffffffffff0f19, 0x0, 0x2, r7}}}, 0x28) ioctl$int_in(r4, 0x5421, &(0x7f0000000180)=0x4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, &(0x7f0000000300)}) r8 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r8) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$cdc_ecm(r9, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r9, 0x82, 0x44, &(0x7f00000001c0)=ANY=[]) r10 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r10, 0x402c542d, &(0x7f0000000100)={0xfffffffc, 0xe7, 0x2, 0xff, 0x7, "ea71061d0000000001000200", 0x0, 0x80}) 2m44.482465212s ago: executing program 5 (id=718): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write(r0, &(0x7f0000000200)="d0daad766c9dde9a8c58d4675a972697f6252592ccd0cb2ed8046d13dcfa69f51864b058d365bdfd9c4f9350efcb3602f99c974a2ba5a580e82b7a2c93912f78d3509bda93e2fbe51aca7de55fedb27895bfb7a009f6d32b4b6af19054c2f57692fbb86ed7604f3e3db9ee36130cd1f393bdfe71b505e4dfce3b9123591bb3a804b0d3cabd371d7864f6e4de97741b7769df23c5da01ab7df8c3772367689a7c1a6532d17683451527374168ecce7def5ed1cbf6", 0xb4) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x400000a, 0xfffffefc, 0x6}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a00"], 0x1c}}, 0x804) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(r4, 0x4068aea3, &(0x7f0000000500)={0xda, 0x0, 0x5}) unshare(0x6020400) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e21, @local}, {0x2, 0x4e23, @rand_addr=0x64010102}, {0x2, 0x4e24, @remote}, 0xd0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)='lo\x00', 0x8000000000000001, 0xc16b, 0xd0}) read$FUSE(r5, &(0x7f0000006b40)={0x2020}, 0x2020) 2m44.333560752s ago: executing program 5 (id=724): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48801, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48801, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/reserved_size', 0x202, 0x46) copy_file_range(r1, 0x0, r1, &(0x7f0000000100)=0x20008a, 0x400000000000002, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x86e, 0x0, 0xfffffffffffffffb}]}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x47f) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$packet(0x11, 0x2, 0x300) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, &(0x7f00000006c0)="fc0000001c000704ab5b2509b86803000aab087a0400000001481193210001c0f0030584050060100000000100039815fa2c53c2864800008d5e63efbe737f96705e670929f4af6002b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82", 0x77) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x28, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'xfrm0\x00'}}]}]}, 0x28}}, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 2m44.326376712s ago: executing program 34 (id=724): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48801, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48801, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/reserved_size', 0x202, 0x46) copy_file_range(r1, 0x0, r1, &(0x7f0000000100)=0x20008a, 0x400000000000002, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x86e, 0x0, 0xfffffffffffffffb}]}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x47f) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$packet(0x11, 0x2, 0x300) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, &(0x7f00000006c0)="fc0000001c000704ab5b2509b86803000aab087a0400000001481193210001c0f0030584050060100000000100039815fa2c53c2864800008d5e63efbe737f96705e670929f4af6002b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82", 0x77) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x28, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'xfrm0\x00'}}]}]}, 0x28}}, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 2m9.09921349s ago: executing program 6 (id=1522): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000000)=0x300) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10040800}, 0xc, &(0x7f00000004c0)={&(0x7f00000000c0)={0x3f0, r2, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x22c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_ID={0x88, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffc00}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}]}, @NL802154_DEVKEY_ATTR_ID={0x74, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}, @NL802154_DEVKEY_ATTR_ID={0x34, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8001}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_ID={0x70, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xe92}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x60, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0x6c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x24, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1000}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}]}, @NL802154_ATTR_SEC_DEVKEY={0xfc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_ID={0x60, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xa6}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x35b7ef33eba4a54a}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7f}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6d75}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x38, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xb}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xce34}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x3f0}, 0x1, 0x0, 0x0, 0x4000004}, 0x4002000) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000580), r1) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r3, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x10) (async) ioctl$KVM_CAP_MEMORY_FAULT_INFO(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000680)) r4 = fsmount(0xffffffffffffffff, 0x0, 0x1) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r4, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x40, r5, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xad26}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x61}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x37}]}, 0x40}}, 0x0) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f0000000880)={0x0, "92278c"}, 0x6) (async) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0xb0, r7, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x94, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x129}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a789c08}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x236cd74d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x85e6}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd805}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeabb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51c6a78d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x69d0c24f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x32806102}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18807403}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x395b8eff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x25730735}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xba61}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4a70}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6ea4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c925ed3}]}, {0x4}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000011) (async) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000b00)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000c40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x5c, r8, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4080}, 0x20008080) (async) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, r8, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000dc0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000f80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e00)={0x110, r2, 0x323, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "7f31ef0c39490ec3b4861f7ee16289f362c4598e9b9c97444209dbe3887c62d0"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_KEY={0x90, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "c2aa01cc6c9911a0ac0d4dd9f0f87118705abf8eb93887a6c0657f4e9274f714"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "7e1381057a91a8e4c8f67f2125252e763e6959bd57f83407fc45809a7ce6d2a9"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1c}, @NL802154_KEY_ATTR_ID={0x3c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xb9}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x8000}, 0x1) ioctl$RTC_IRQP_READ(r4, 0x8008700b, &(0x7f0000000fc0)) (async) sendmsg$NL80211_CMD_RADAR_DETECT(r4, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x58, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x1d}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x41}, 0x8000) (async) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) (async) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001280), r4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001380)={'ip_vti0\x00', &(0x7f00000012c0)={'gretap0\x00', 0x0, 0x7, 0x7, 0x0, 0xb, {{0x22, 0x4, 0x0, 0x9, 0x88, 0x68, 0x0, 0x2, 0x2f, 0x0, @empty, @multicast2, {[@rr={0x7, 0x7, 0x3c, [@broadcast]}, @lsrr={0x83, 0xf, 0x88, [@dev={0xac, 0x14, 0x14, 0x25}, @broadcast, @loopback]}, @timestamp_prespec={0x44, 0x14, 0xba, 0x3, 0x2, [{@remote, 0x8}, {@empty, 0x1}]}, @rr={0x7, 0xf, 0x1f, [@loopback, @loopback, @broadcast]}, @noop, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0x10, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x3d}}, {@multicast1, 0x1}, {@loopback, 0x1}]}, @timestamp={0x44, 0x18, 0xac, 0x0, 0x3, [0x8, 0x2, 0x8, 0x4, 0x4]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000013c0)={'team0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001480)={'syztnl2\x00', &(0x7f0000001400)={'syztnl1\x00', 0x0, 0x80, 0x80, 0x10, 0x55430437, {{0x13, 0x4, 0x1, 0x8, 0x4c, 0x65, 0x0, 0xff, 0x2f, 0x0, @empty, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x14, 0xfa, 0x1, 0xe, [{@private=0xa010102, 0x9}, {@broadcast}]}, @timestamp={0x44, 0x24, 0x6, 0x0, 0x8, [0xc, 0x2, 0x9, 0x9, 0x0, 0x1800, 0x6, 0x7]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000001c80)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001c40)={&(0x7f0000001a00)={0x214, r12, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 2m9.049935s ago: executing program 6 (id=1523): socket$netlink(0x10, 0x3, 0x4) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@flat=@weak_binder={0x77622a85, 0x1101}, @flat=@binder={0x73622a85, 0xb}, @fda={0x66646185, 0x6, 0x0, 0x27}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}, 0x400}, @exit_looper], 0x6c, 0x0, &(0x7f0000000240)="1f4e60867a6b6e3e2b0fbe3062a1b6df9085567640b5d10804b76398771d9abb2778c1ad087f18ebc1704cf974ce47fda4a7907a8ff2e54a6c7a79a067663690edbcb99e1cf255392a7c3f4fef324fcdf508c9de1d216981ee1cb824df926ca68f50b3945da58a9ec43c699d"}) 2m9.04743801s ago: executing program 6 (id=1526): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20b00, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x9, 0x74, 0x4, 0x8}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) (async) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x6, 0x1, 0x0, 0x0, 0x2) (async) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x73, 0x1, 0x7950, 0x7ff, 0x6, r2}) setpriority(0x0, r3, 0xf) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000040)=0x63, 0x2) preadv2(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/129, 0xb1}], 0x1, 0xffffffff, 0x8, 0xd) 2m8.208145653s ago: executing program 6 (id=1531): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) (async, rerun: 32) setuid(0xee00) (rerun: 32) syz_io_uring_setup(0x906, &(0x7f0000000f40)={0x0, 0x20f6, 0x0, 0x0, 0x1a8}, &(0x7f0000000240)=0x0, &(0x7f0000001000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x665dc6a9aab747d, &(0x7f0000001040)=0x970, 0x0, 0x4) (async, rerun: 32) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async, rerun: 64) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000001b80)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001"], 0x310) (async, rerun: 32) write$UHID_INPUT(r2, &(0x7f0000002c00)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125b2ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5daa5574b5547b5458f02ac307329e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb03bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c2e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2033aae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd127f114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2985b7b26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1111c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c669bb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b2967cbfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c57cd5b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d6748c2ce5bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb73f7b1b3b86df1b424900300000000000000871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4658098549646bd63175adf77b5cdcf102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4baea02fa76fb4830aebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de8ea292246a9937fa7d7e06e59cf59ce5b9f8426a9049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21abfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e0068607000000fb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530d3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9fb4000000f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002afea6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25644707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4cf5637483c0ccbeccfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d0c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae66444a8f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf5197c1af398867a2beff1141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc9e4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0x1000}}, 0x1006) (async, rerun: 32) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f00000001c0)={'batadv_slave_1\x00', {0x2, 0x4e22, @empty}}) (async) r5 = getuid() quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000000)=@filename='./file0\x00', r5, &(0x7f0000000040)={0x9, 0xbfa, 0x1, 0x4}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 64) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) (rerun: 64) shutdown(r6, 0x1) (async) r8 = openat(r7, &(0x7f0000004280)='./bus\x00', 0x119100, 0x20) getdents64(r8, 0x0, 0x0) r9 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000009880), 0x380, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r9, 0x7706, 0x0) 2m8.199140574s ago: executing program 6 (id=1532): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x1000, &(0x7f0000000000)) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000140)='tracefs\x00', 0x22008dc, 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x100000, 0x0, &(0x7f0000000000), 0x3000000) r1 = openat$binfmt_format(0xffffff9c, &(0x7f0000003040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write$binfmt_format(r1, &(0x7f0000000040)='-1\x00', 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r2, &(0x7f0000002780)={0x2020}, 0x5ecfb203) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x1000, &(0x7f0000000000)) (async) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) (async) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000140)='tracefs\x00', 0x22008dc, 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0x5, 0x100000, 0x0, &(0x7f0000000000), 0x3000000) (async) openat$binfmt_format(0xffffff9c, &(0x7f0000003040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) (async) write$binfmt_format(r1, &(0x7f0000000040)='-1\x00', 0x3) (async) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') (async) read$FUSE(r2, &(0x7f0000002780)={0x2020}, 0x5ecfb203) (async) 2m8.094859404s ago: executing program 6 (id=1533): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 64) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x3, 0x0, 0x0, 0x0, {0xa, 0x1, 0x3, @rand_addr=' \x01\x00'}}}, 0x32) (async) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1fffa2}], 0x1) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0xc6225a99193a0f6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 2m8.079714984s ago: executing program 35 (id=1533): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 64) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x3, 0x0, 0x0, 0x0, {0xa, 0x1, 0x3, @rand_addr=' \x01\x00'}}}, 0x32) (async) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1fffa2}], 0x1) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0xc6225a99193a0f6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 2.144330791s ago: executing program 7 (id=3896): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gadgetfs\x00', 0x2000000, &(0x7f00000000c0)='&\x00^\x00') r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) 2.144024121s ago: executing program 7 (id=3897): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f0000001800)=0xff, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) 2.109538851s ago: executing program 7 (id=3898): sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x34}}, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000400)={0xfffffffe, 0xffff7ffa, 0x6540, 0xffff2bc0, 0x9, "9290b891b87821b60002f700", 0x10001, 0x4}) ioctl$KDSETLED(r0, 0x4b32, 0x8) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xf9, 0x2, 0x4}, @fda={0x66646185, 0x7, 0x0, 0x3d}, @fda={0x66646185, 0x4, 0x0, 0x23}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 2.107554451s ago: executing program 7 (id=3899): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)={0x24, 0x10, 0x1, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x4, 0x4f}, @nested={0x4, 0x71}, @nested={0xc, 0xbc, 0x0, 0x1, [@nested={0x4, 0xc7}, @nested={0x4, 0x13}]}]}, 0x24}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000000000080000040"]) lseek(r4, 0x6, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x800, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r5, &(0x7f00000021c0)="000000000000000000000000000000000000000000000000000000d455b4da00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd1d8811cd8a942e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x2110029, 0x100, 0x0, 0x1, 0x57, 0x0, 0x0, 0x80, 0x4020}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getuid() syz_fuse_handle_req(r5, &(0x7f0000004300)="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", 0x2000, &(0x7f0000008c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0xfffffffc, {0xf, 0xcbff, 0x0, {0x2, 0x200005, 0xf, 0x2, 0x7, 0x5, 0x1, 0xa, 0x101, 0x6000, 0x6, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000180)={0x1, 0x3, 0x51}) read$FUSE(r6, &(0x7f0000004180)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0xfffffffffffffffd, {0x1, 0x0, 0x0, 0xa6, 0x4000, 0x0, {0x3, 0x100000000000, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3ff, 0x6000, 0x82, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r6, &(0x7f0000001240)={0x50, 0x0, r7, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0x8}}, 0x50) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r10 = socket$pptp(0x18, 0x1, 0x2) bind$xdp(r10, 0x0, 0x0) setreuid(0x0, r9) getgroups(0x2, &(0x7f0000000040)=[0xee01, 0xee01]) write$FUSE_ATTR(r5, &(0x7f0000000100)={0x78, 0x0, r7, {0x8, 0x5, 0x0, {0x2, 0x2, 0xff, 0x6, 0x8000000000000, 0x2, 0xa, 0xe, 0x9, 0x8000, 0x4e, r9, r11, 0x18c, 0xe}}}, 0x78) r12 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') pread64(r12, 0x0, 0x0, 0xc2a) close_range(r1, 0xffffffffffffffff, 0x0) 2.103183131s ago: executing program 7 (id=3900): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) lstat(0x0, 0x0) mmap(&(0x7f000001a000/0x2000)=nil, 0x2000, 0x8, 0x13, r0, 0x66053000) 2.100851302s ago: executing program 7 (id=3901): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8c080, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$session_to_parent(0x12) add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000240)='dns_resolver\x00', 0x0, 0x0, 0xfffffffffffffff9) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0xca40, 0x20) r2 = getuid() quotactl$Q_QUOTAON(0xffffffff80000202, 0x0, r2, &(0x7f0000000380)='./file0\x00') fcntl$getownex(r1, 0x10, &(0x7f0000000840)) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) socket$inet(0x2, 0x2, 0x1) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYRES16=r4], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_clone(0x8181080, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f000065d000/0x1000)=nil, 0x1000, 0x0, 0x100010, r0, 0x76455000) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000100)={0x2, 0xffffffff, 0x0, 0x2, 0x0, 0x42}) keyctl$restrict_keyring(0xa, r3, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='ix:\x88\xfe\xf7\x01') keyctl$session_to_parent(0x12) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0xb, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e24, 0xfff, @loopback, 0x8}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, 0x0, 0x8) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @empty, 0x23}, 0x1c) syz_extract_tcp_res$synack(&(0x7f00000000c0)={0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000100)={0x41424344}, 0x1, 0x0) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="000306004c2601080064000040069078ac1e00017f0000018307baac1e0101440c9f41e00000deffffff0344342281ffffffff777bcef3ac1414aa000083316401010000000008ac1414bb00000009ffffffff00008f897f000001000000088307c5ac1414aa880a931f71ac2364a4f6000000004e214e21", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="61c2000190780009040200005f25f6f845857c8cefe739692ff4d6c59f8ac287de1e882cb87879f2d04a3322ce350ce6140bec27fe826235a85b72f45ec8499626f53b3b2d47f1a780136dd5de3048ed7fdaff11fddcd248960b956a70d07bddc66ec9d2b27e3a5c5f7efad0b394853bd6bab5026d0c49af83f214504561b23f077675c072b57e29e63ca628"], 0x10c) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000340)=ANY=[@ANYBLOB="6d61783d30303030303030303030303030303030303076c693f1fcab83b964c8d7c075d130303030302c00"]) 1.446232154s ago: executing program 4 (id=3911): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x13) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x6, 0x6, 0x7, 0x80000000, 0x1a, "b0564b4fb2b101a7c3767d7459eadfe5f7d9d1"}) write$UHID_CREATE2(r0, &(0x7f0000000080)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0xcb, 0xa0, 0x800, 0x1, 0x7f9, 0x3, "53df179022058545ec171c6ec21565cb3f086a9e6085bdf9214ddb4390a4895fbe5057df3531f27d37f503c8de20c06ab755650453c707f38e45db33c7886f94c2324334192294c8e9188770db4f843bf47cb3547c890931ed1c6ddc5667030dbc2cd46bd7c6023df63da1a24d7af474fb5210f42e4ef8be9690d486d0c09d70b269cc0de3a011ac0b32c998a998288bf9bef38a5918e39040ac31063e94e164738a85b9b33907c4853d9bb5394803208370650a357aeb60abe635ac2d6f217f59b1d83539c29be166f064"}}, 0x1e3) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0xd) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) lseek(r2, 0xfffffffffffffffa, 0x2) write(r0, &(0x7f0000000340)="923ea1370a2dd01bd04133aa355f1af39d2b8ac305d0704a71179d51297291217d2c2fd2037818ef59d6d30247a09299c761b67ea6ac3535e6194772f6b47cb3b329631c1ce87a7607fe7cfffafd587b3e41c2c2436d7f5b60d7d0314a73f85eab737bf05bff46375d5288e3f4bcd9c0be45d56775aa68a0bbcc50b0b9be762143f61a7e4a4c7e47e572b7892cc9d0e9b5879e06229f64", 0x97) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x101080, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000440)=0xa) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x80000, 0x0) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000500)={0x3, &(0x7f00000004c0)=[{0xe, 0x1}, {0x5, 0x8}, {0x8, 0x9}]}) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000540)={0x8f, 0x0, 0xc}) r4 = accept$unix(r0, 0x0, &(0x7f00000005c0)) ioctl$LOOP_SET_FD(r0, 0x4c00, r4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000600)=0x1) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000640)={0x1, 'ip6_vti0\x00', {}, 0x3}) setsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000680)={@multicast1, @rand_addr=0x64010101, @remote}, 0xc) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x40) ioctl$KVM_CAP_DISABLE_QUIRKS2(r5, 0x4068aea3, &(0x7f00000006c0)={0xd5, 0x0, 0x12}) ioctl$RTC_PIE_OFF(r0, 0x7006) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000740)="937bb42bfab7e285d4724ffd7c9dd8b349ed7fab1eda4a6ce1113d8b6240ac02cbea5e51dc62f5259178f607690861636a10e4a612a83d985e8be4ac7c1e8be03971f2673dab1077f931d31cc58d0d8f8e9cd6ed86771ab3d04ef4a2369230aa78e1d496ca7cd2ffc74cceca9476b381e9e1565df71db8ee8d7fde6d8b514fa9268f3aeed33b9152287228f3b54c", 0x8e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000800)) ioctl$KVM_SET_USER_MEMORY_REGION2(r0, 0x40a0ae49, &(0x7f0000000840)={0x1, 0x1, 0x1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x9f4, r0}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000900)) recvfrom(r4, &(0x7f0000000940)=""/142, 0x8e, 0x0, &(0x7f0000000a00)=@tipc=@name={0x1e, 0x2, 0x1, {{0x41}, 0x1}}, 0x80) r6 = syz_usb_connect$uac1(0x3, 0xc6, &(0x7f0000000a80)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb4, 0x3, 0x1, 0x8, 0x50, 0xff, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8a8}, [@extension_unit={0xc, 0x24, 0x8, 0x1, 0x0, 0x82, "ed7c83d70a"}, @extension_unit={0x9, 0x24, 0x8, 0x5, 0x6, 0xff, ';9'}, @extension_unit={0xb, 0x24, 0x8, 0x1, 0x8, 0xf9, "4ff2c6a2"}, @selector_unit={0x6, 0x24, 0x5, 0x5, 0xb, 'a'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x25, 0x4, 0x2, 0x3, 'L'}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xf7, 0x7, 0x27, {0x7, 0x25, 0x1, 0x0, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xb, 0x4, 0x5, 0x81, "7031383201"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x3, 0x3, 0x4, "c6", "4fc258"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x7fff, 0x5, 0xfb, "ccccaf47"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x27, 0x6, 0x3, {0x7, 0x25, 0x1, 0x82, 0x1, 0x6}}}}}}}]}}, &(0x7f0000000d80)={0xa, &(0x7f0000000b80)={0xa, 0x6, 0x300, 0x0, 0x3, 0x0, 0x8, 0xd}, 0x120, &(0x7f0000000bc0)={0x5, 0xf, 0x120, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x72, 0x2, 0xa577}, @ext_cap={0x7, 0x10, 0x2, 0x1f, 0x5, 0x1, 0x8}, @ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x9, 0x2, 0x1, 0xf000, 0x3, [0xff0000, 0x3f00]}, @ssp_cap={0x10, 0x10, 0xa, 0x4, 0x1, 0x0, 0x0, 0x8000, [0xf]}, @generic={0xe3, 0x10, 0xa, "6dde4cc039c30d69ee93c36e64f44f0e85e421f3f579a69b39f0851d2752a4d6c93e850b11b2babec622a3d5684f9674642aa1354b8c41684712ca16c5dfed9ee9bc2d8e120d8e04ff91271ec381840a556e051133965064651b88b7c5def915cc9c5dcf7135eb45a1361405f15d17c9b3bae3a25c508afe4a9bab6878fbe0f632ca76c4132b821f4f517bc80db9a99a8cc4570c9116655576fc074a973e2ba880e8c4f3d47613805ccf40d00cedf9b414357043871fa3b2e35e594c4a4ffa0023d8a8c90e23805a2c99748bfbb26325e29aaa41e01489da852a98e3ad7e31de"}]}, 0x1, [{0x50, &(0x7f0000000d00)=@string={0x50, 0x3, "6da23030808b919b637e172e6fd213aeabd7eb86c0cd054cd65ef23a17fab3aa8bf4bae28e00527706c0e710c3d83852f6ce18cb487df02f54ca8a87c9a9cb92063f57e89d2abb92b7a8d912bdc8"}}]}) syz_usb_control_io$uac1(r6, &(0x7f0000000e80)={0x14, &(0x7f0000000dc0)={0x40, 0xa, 0x5e, {0x5e, 0x24, "b563fea3c9fc8cfc3ecf442f79773312f0b4ef1e1ff87bc1738928df1c592e0c8358a8a89eb4f19a08e8de210940561fc641ea71d62af4fabd29c6105694aa7c3844fc808c6b6e50e36c6c3d9b006120d8ea5f21612621c11be3164a"}}, &(0x7f0000000e40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x457}}}, &(0x7f0000001140)={0x44, &(0x7f0000000ec0)={0x20, 0x3, 0x85, "5bb84d923ef655f8bd331497e31adf05e16481ecb06a245dd5e3e6f06f7fa593dfe3f091abafc5fd80c831fb76b13e45235e808b3d278c2a1b4ae02c4eb2900753b131b7a472b72f4f16989b6bca21fa77c56ada502d1899b31b35c93bd0fece413e149c176b2472c95c92b1294341454cd86825bb4d46209cb62934dc263f88eb809f0122"}, &(0x7f0000000f80)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000fc0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000001000)={0x20, 0x81, 0x2, "ab45"}, &(0x7f0000001040)={0x20, 0x82, 0x2, "ced6"}, &(0x7f0000001080)={0x20, 0x83, 0x1, "e5"}, &(0x7f00000010c0)={0x20, 0x84, 0x3, "4a4a97"}, &(0x7f0000001100)={0x20, 0x85, 0x3, "7c39b1"}}) 914.066766ms ago: executing program 4 (id=3916): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x10000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x4}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x4, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 879.349487ms ago: executing program 4 (id=3918): openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x48e80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x7, 0x1, 0x4, 0x4, 0x0, 0x0, 0x4, 0x5, 0xff, 0x1f, 0x0, 0x2}, {0x3, 0x0, 0x0, 0x1, 0x0, 0x11, 0x0, 0x0, 0xf8, 0x9, 0x0, 0xff, 0x800000000000000}, {0x8, 0x0, 0x8, 0x0, 0x2, 0x0, 0x1, 0xff, 0x0, 0x0, 0x0, 0x0, 0x1000000}], 0xffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x80000000, 0x4df4, 0x80, 0x5, 0x20000006, 0x85, 0x4233, 0x0, 0x7d, 0x9c1, 0x8001, 0x1005, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0x100000, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x4, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0xfc, '\x00', 0xfd}) ioctl$KVM_RUN(r3, 0xae80, 0x0) setpgid(r0, r0) setpgid(0x0, r0) rt_sigaction(0xd, &(0x7f0000000300)={&(0x7f00000002c0)="ca00d1c441ef196ec866400fe2de0fae4e0af2abf2466ff00fc01ec422e10399c5c1202063df", 0x7c000005, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f00000000c0)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r5, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x2c, 0xa7f084dd5657bbbf, 0x14}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x200) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0), 0x0, 0x2000c8c0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 807.237197ms ago: executing program 4 (id=3923): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x206, 0x3601) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r2, 0x10000) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x9) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(r4, 0x800448d2, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001100)={0x5b279f6196f49b8d, 0x17, 0x5, 0x8, 0x0, 0xfffffffe, 0x0}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/custom0\x00', 0x800, 0x0) r6 = fsopen(&(0x7f0000000380)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x8) fchdir(r7) r8 = inotify_init() inotify_add_watch(r8, &(0x7f0000000000)='.\x00', 0x400017e) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x100, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r5, 0x80189439, 0x0) 803.079227ms ago: executing program 4 (id=3924): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r1, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100)={0x0, 0x0, 0xa}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010009081000418e00000004fcff", 0x58}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f00000000c0)=0x3e2, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r3) recvmmsg(r1, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) setuid(0xee00) getpgrp(0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r4, 0x22e7c000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x80000000003}) 715.062047ms ago: executing program 4 (id=3926): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) readv(r1, &(0x7f0000000740)=[{&(0x7f0000001280)=""/215, 0xd7}], 0x1) close(r1) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000000)={@multicast2, @multicast1}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000021c0)={0x4c, 0x0, &(0x7f0000001fc0)=[@transaction_sg={0x400c6313, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 714.510987ms ago: executing program 1 (id=3927): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) timer_create(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, 0xffffffffffffffff, 0x0) cachestat(0xffffffffffffffff, &(0x7f0000000040)={0x7f, 0x20000000000006}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x104) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@x86={0x81, 0x7, 0x63, 0x0, 0x7, 0xa, 0x0, 0x3, 0x7, 0x92, 0x3, 0x6, 0x0, 0x7f, 0x5ab, 0x2, 0xc9, 0x9, 0x1, '\x00', 0x8, 0x800}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000180)=@x86={0x5, 0xa6, 0x7, 0x0, 0x24, 0x6, 0x40, 0xf, 0x16, 0x2, 0x9, 0x13, 0x0, 0x401, 0xa8000000, 0xd, 0xa, 0x9, 0x8, '\x00', 0xfc, 0x7}) mount$binderfs(0x0, 0x0, &(0x7f0000000300), 0x1040000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x34, 0x2, 0x16}, @fda={0x66646185, 0x8, 0x0, 0x5}, @ptr={0x70742a85, 0x1, 0x0, 0xfffffffffffffeb4, 0x2, 0x27}}, &(0x7f0000000180)={0x0, 0x28, 0xa9}}, 0x400}], 0x0, 0x0, 0x0}) 606.748368ms ago: executing program 1 (id=3930): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1000, 0x3}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x2, 0x0, 0x9}}, 0x30) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x40, 0x7800, 0x800, 0x94, {{0x19, 0x4, 0x0, 0x7, 0x64, 0x67, 0x0, 0xc, 0x29, 0x0, @empty, @rand_addr=0x64010100, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x51, 0x1, 0x0, [{@multicast2, 0x8}]}, @timestamp={0x44, 0x8, 0xa3, 0x0, 0x4, [0x1]}, @timestamp_addr={0x44, 0xc, 0x33, 0x1, 0x8, [{@empty, 0x200}]}, @end, @generic={0x7, 0xd, "db6525ec09decab7b51bda"}, @generic={0x88, 0x11, "4ec6492f7347a138703a2188d63362"}, @generic={0x83, 0x9, "6af1e0a2396aac"}, @noop, @end]}}}}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'veth0\x00', 0x0}) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) sendmsg$can_raw(r6, &(0x7f0000000180)={&(0x7f00000005c0)={0x1d, r5}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@can={{}, 0xfb, 0x0, 0x4, 0x0, "500000b74b958e56"}, 0x10}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000440)={'sit0\x00', 0x0, 0x7a8, 0x1, 0x77e7c487, 0xfffff001, {{0x1a, 0x4, 0x0, 0x22, 0x68, 0x68, 0x0, 0x33, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x34}, {[@cipso={0x86, 0x2e, 0x3, [{0x5, 0x2}, {0x5, 0x11, "9ad399fc9a600fe891b79b2df51107"}, {0x6, 0x7, "793b1938b6"}, {0x7, 0xb, "c24405743efe626def"}, {0x5, 0x3, "a2"}]}, @ra={0x94, 0x4, 0x1}, @noop, @cipso={0x86, 0x20, 0x1, [{0x2, 0xb, "1b11739f20c5946e75"}, {0x2, 0xf, "69f65269910822b1403a56edd3"}]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x4, 0xc, 0x5, 0x97, 0x34, @local, @mcast2, 0x8000, 0x7800, 0x628, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'gre0\x00', 0x0, 0x7, 0x80, 0xc50c, 0x17, {{0x15, 0x4, 0x0, 0x6, 0x54, 0x65, 0x0, 0x5, 0x4, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x3d, 0x0, [{0x1, 0xa, "183e44c2799582ee"}, {0x2, 0xe, "6d613681831fd180cae16c32"}, {0x2, 0x12, "0d631963af14311840ae9d10f5f924da"}, {0x0, 0xd, "5a4bf7a2e93cba6155ae09"}]}, @end, @noop]}}}}}) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000640)=0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000f80)={&(0x7f0000000040), 0xc, &(0x7f0000000f40)={&(0x7f0000002a00)=ANY=[@ANYBLOB="2c1a0000", @ANYRES16=r2, @ANYBLOB="000825bd7000ffdbdf250e0000001c0001800800030003000000080003000100000008000100", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f6d616376746170000000140002006e6963766630000000000000000000001400020069703665727370616e3000000000000008000100", @ANYRES32=r10, @ANYBLOB="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"], 0x1a2c}}, 0x10) 606.300477ms ago: executing program 1 (id=3931): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x211000, 0x1000}, 0x20) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006a0015"], 0x1c}], 0x1}, 0x4000080) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r2, &(0x7f0000001c40)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="14000000000000000000000007"], 0x18}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001600)="f7802ca57de18b3f8d8dfb335c9a8948180ddeeb3b709ed566c77c0871306ad9b964d17b4b729d7fd29d4989c6bf7005cc730a9ef13f8281122dabd238dc0f2654c744cc8f70bf832f4fa9cbb727f1c2a04874fc9b72213aeb5411693ef94f5fae7c016e8e769257af477bb3427607839c92828e9925abb9f508320b72c4f2b044e4dfbc432941a927e0c9f652f8bb317e9533831e14d39d1a0632400bc843ba6e79885ed854ed9e084a89fb9e67d35d5f50d1f1304706805b209ea8ce5765643cfc58bb3cfce5a480e3b4bd799c", 0xce}, {&(0x7f0000002700)="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", 0x123}], 0x2}}], 0x2, 0x44008004) mkdir(&(0x7f0000000000)='./file0\x00', 0x19e) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='erofs\x00', 0x8800, 0x0) write$binfmt_misc(r2, &(0x7f0000000300), 0xfdef) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05dd000000000000010902240001000010b109040000410301010009210101000122050009058103ff030c00006e0d36c198c8a1a79dccd5"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='@\b\"'], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000280)="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") syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x1, 0x0, 0x6}, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000052000101000010000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x40) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r4) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 96.5612ms ago: executing program 2 (id=3933): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, &(0x7f0000000080)) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1e7302, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0, 0xfffffe28}], 0x2) 63.16894ms ago: executing program 2 (id=3934): r0 = socket$inet6(0xa, 0x3, 0xff) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x6, 0x2}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x18, r3, 0x200000}, 0x10) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000040)={0xa, 0xf5, 0x40000, @dev, 0x400000}, 0x1c, &(0x7f00000012c0)}, 0xb00) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendto(r1, &(0x7f0000000240)="15ac302bcfa7aa7f8bdf23097acaf09dc4b24f6168509dd29d4aa68a414b100a8770471c405d6488cdd7b737d99158ce4ea7ad96321fb2553d65b4db58fa5bbad4cec95f798952fcdd17b0da22911588542b6d25ccf44f06b95b859efb1bcbc98c697ea80353365dc38f5f6a556489824609e4b26760e4c8aa45ffd3e94a93d01da0f65c9e9a5cf90d5c3be6ff70878dc1034d6f9fe5d44577c7759a63cca6da940151604c9928c36cb888afee2e7ebca94c6c4640be7c9dfb55637aeaad9da1eae4179e9b", 0xc5, 0x40004, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x1}, 0x10) sendfile(r4, r4, 0x0, 0x7ffff000) 62.22645ms ago: executing program 1 (id=3935): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x891d, &(0x7f0000001b00)={'ip_vti0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x7}, 0x1c) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)=0x0) ptrace(0x10, r4) sendto$inet6(r3, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) recvfrom$inet6(r3, &(0x7f0000000040)=""/174, 0xae, 0x2, 0x0, 0x0) shutdown(r3, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1100, 0x1}, @fd, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 60.80453ms ago: executing program 1 (id=3936): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x4ac1, 0x0) preadv2(r2, &(0x7f0000001000)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1, 0x30, 0x9, 0xf) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x82c1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c45, 0x0) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000800)="b5", 0x1}, {0x0}], 0x2, 0x7fffffffffffffff, 0x0) open(&(0x7f00000002c0)='./file0/file0\x00', 0x141840, 0x88) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c0002, 0x0) close(r5) utime(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)={0x400, 0x3}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x10a, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@weak_handle={0x77682a85, 0x1101, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 60.60115ms ago: executing program 2 (id=3937): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1037e1, 0xd4) ioctl$KVM_CREATE_VCPU(r0, 0x8008770b, 0x2) 10.99546ms ago: executing program 2 (id=3938): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='msdos\x00', 0x808081, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$binderfs(0xffffff9c, &(0x7f00000000c0)='./binderfs2/custom1\x00', 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0xeeee8000, 0x2000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) listxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=""/60, 0x3c) 10.72582ms ago: executing program 2 (id=3939): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) connect$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x2710, @local}, 0x10) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x56, 0x0, &(0x7f0000000040)="c77f63941720024fcb205ad3f3502124f14eba8419d2d70aade14d22ca5137369a7e2f7c68839e02d428fe526929aaaeb71b01b4a33854d4ca7681b53a970b1a4175371ccff2ad1d15ed65d48b4135592cc9f51ca34f"}) write(r0, &(0x7f0000000200)="b0b699732b28deb4132b3a152824101e808317d083f16fc170d611ff3b51016f764f77c01a907170f722e6a1d8bb93eb55b77b2260c0636e4ef6cf243f27e0b38916ec0f25bc62ffe36bda6e4a186a4e85aa6f00528eaabd8fad9724b05dbded1766032696d61466e1ddd6360879dc0f914ea4715d91f0e0a8396123277cf8897475622e", 0x84) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x78, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000380)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x1000}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000480)={0x0, 0x18, 0x30}}, 0x400}, @increfs_done={0x40106308, 0x3}, @increfs_done, @register_looper], 0x0, 0x0, 0x0}) 10.27897ms ago: executing program 2 (id=3940): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x141342, 0x0) unshare(0x62040200) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000002a80)=[{&(0x7f0000000600)=""/220, 0xdc}], 0x1, 0x8, 0x3) sendmsg$unix(r1, &(0x7f0000000300)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000140)="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", 0xfa}, {&(0x7f0000000240)="de2d0821f1f5a987c9f040ea7e5daea6b90358a2f6ecd6d6300eddf45d699faef126036dd2f6408c790e612d3856d2f6abf35dc2b1d53a7177566d", 0x3b}, {&(0x7f0000000280)="f746843549a91d6754f8f94d9746353500c35e8ed0f02e", 0x17}, {&(0x7f0000000400)="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", 0x1000}], 0x4, 0x0, 0x0, 0x4015}, 0x8800) waitid(0x2, 0x0, 0x0, 0x4, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}, {0x0}], 0x2) 0s ago: executing program 1 (id=3941): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@flat=@weak_handle={0x77682a85, 0x1001, 0x1}, @fda={0x66646185, 0x1, 0x0, 0x16}, @ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/132, 0x84, 0x1, 0x21}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}, @free_buffer], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@flat=@weak_handle={0x77682a85, 0x1001, 0x1}, @fda={0x66646185, 0x1, 0x0, 0x16}, @ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/132, 0x84, 0x1, 0x21}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}, @free_buffer], 0x0, 0x0, 0x0}) (async) kernel console output (not intermixed with test programs): 8 comm="syz.4.2121" name="file0" dev="tmpfs" ino=2912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 140.392955][ T36] audit: type=1400 audit(2016777499.908:761): avc: denied { associate } for pid=6998 comm="syz.4.2121" name="file0" dev="tmpfs" ino=2912 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_lib_t:s0" [ 140.512713][ T36] audit: type=1400 audit(2016777500.068:762): avc: denied { unlink } for pid=1465 comm="syz-executor" name="file0" dev="tmpfs" ino=2912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 140.539725][ T7007] netlink: 'syz.4.2124': attribute type 1 has an invalid length. [ 140.547490][ T7007] netlink: 'syz.4.2124': attribute type 3 has an invalid length. [ 140.555227][ T7007] netlink: 296 bytes leftover after parsing attributes in process `syz.4.2124'. [ 140.775288][ T7009] binder: Unknown parameter 'defcontext01777777777777777777777' [ 140.792323][ T7011] rust_binder: Write failure EFAULT in pid:13 [ 140.864116][ T7014] rust_binder: Write failure EFAULT in pid:15 [ 140.872085][ T9] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 141.032069][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 141.038304][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.048486][ T9] usb 8-1: config 0 has no interfaces? [ 141.054755][ T9] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 141.063863][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 141.071949][ T9] usb 8-1: SerialNumber: syz [ 141.077309][ T9] usb 8-1: config 0 descriptor?? [ 141.341020][ T7023] rust_binder: got new transaction with bad transaction stack [ 141.341038][ T7023] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:290 [ 141.517947][ T7025] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2130'. [ 141.536189][ T7025] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2130'. [ 141.545139][ T7025] netlink: 'syz.2.2130': attribute type 5 has an invalid length. [ 141.552878][ T7025] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2130'. [ 141.644508][ T7029] netlink: 'syz.1.2132': attribute type 40 has an invalid length. [ 141.738859][ T36] audit: type=1400 audit(2016777501.288:763): avc: denied { map } for pid=7033 comm="syz.1.2134" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 141.867113][ T7042] overlayfs: failed to clone lowerpath [ 142.001305][ T36] audit: type=1400 audit(2016777501.548:764): avc: denied { getattr } for pid=7048 comm="syz.1.2138" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=26667 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 142.093909][ T7053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2139'. [ 142.336035][ T7079] 9pnet_fd: Insufficient options for proto=fd [ 142.493647][ T36] audit: type=1326 audit(2016777502.048:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7101 comm="syz.2.2155" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe42ef8f6c9 code=0x0 [ 142.920007][ T36] audit: type=1326 audit(2016777502.468:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7123 comm="syz.4.2161" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f688d98f6c9 code=0x0 [ 142.950063][ T7129] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 142.967235][ T7131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2163'. [ 143.058077][ T7147] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 143.066294][ T7147] rust_binder: Write failure EINVAL in pid:50 [ 143.094407][ T7152] binder: Unknown parameter '' [ 143.412069][ T2159] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 143.474322][ T9] usb 8-1: USB disconnect, device number 15 [ 143.557279][ T7179] overlayfs: overlapping lowerdir path [ 143.573143][ T2159] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 143.585268][ T2159] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.594131][ T2159] usb 2-1: config 0 descriptor?? [ 143.800056][ T7161] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7161 comm=syz.1.2171 [ 143.818038][ T2159] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 143.828026][ T2159] asix 2-1:0.0: probe with driver asix failed with error -32 [ 143.906252][ T7190] devpts: called with bogus options [ 144.676379][ T7232] netlink: 'syz.2.2197': attribute type 1 has an invalid length. [ 145.309786][ T7246] overlay: ./file0 is not a directory [ 145.826891][ T36] audit: type=1326 audit(2016777505.378:767): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7247 comm="syz.2.2201" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe42ef8f6c9 code=0x0 [ 146.008605][ T7261] traps: syz.2.2204[7261] attempts to use CLI/STI, pretending it's a NOP, ip:200000000002 [ 146.157428][ T7275] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2209'. [ 146.174045][ T10] usb 2-1: USB disconnect, device number 4 [ 146.186438][ T7278] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16401 sclass=netlink_route_socket pid=7278 comm=syz.4.2210 [ 146.268672][ T7297] overlayfs: conflicting options: nfs_export=on,index=off [ 146.363355][ T7313] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 146.375897][ T7313] rust_binder: Write failure EINVAL in pid:71 [ 146.622104][ T45] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 146.772435][ T45] usb 2-1: device descriptor read/64, error -71 [ 147.012090][ T45] usb 2-1: device descriptor read/64, error -71 [ 147.252084][ T45] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 147.382072][ T45] usb 2-1: device descriptor read/64, error -71 [ 147.391670][ T7354] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2234'. [ 147.487146][ T7356] __vm_enough_memory: pid: 7356, comm: syz.7.2235, bytes: 18014402804453376 not enough memory for the allocation [ 147.593056][ T36] audit: type=1326 audit(2016777507.148:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7357 comm="syz.7.2236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddeb8f6c9 code=0x7ffc0000 [ 147.598116][ T7358] input: syz1 as /devices/virtual/input/input14 [ 147.616498][ T36] audit: type=1326 audit(2016777507.148:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7357 comm="syz.7.2236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddeb8f6c9 code=0x7ffc0000 [ 147.643127][ T7358] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2236'. [ 147.646139][ T36] audit: type=1326 audit(2016777507.148:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7357 comm="syz.7.2236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbddeb8f6c9 code=0x7ffc0000 [ 147.678250][ T45] usb 2-1: device descriptor read/64, error -71 [ 147.679725][ T36] audit: type=1326 audit(2016777507.148:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7357 comm="syz.7.2236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddeb8f6c9 code=0x7ffc0000 [ 147.707921][ T36] audit: type=1326 audit(2016777507.148:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7357 comm="syz.7.2236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbddeb8f6c9 code=0x7ffc0000 [ 147.731166][ T36] audit: type=1326 audit(2016777507.148:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7357 comm="syz.7.2236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddeb8f6c9 code=0x7ffc0000 [ 147.734299][ T7360] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 147.754659][ T36] audit: type=1326 audit(2016777507.148:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7357 comm="syz.7.2236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbddeb8f6c9 code=0x7ffc0000 [ 147.787615][ T36] audit: type=1326 audit(2016777507.178:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7357 comm="syz.7.2236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddeb8f6c9 code=0x7ffc0000 [ 147.787718][ T7360] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:318 [ 147.811423][ T45] usb usb2-port1: attempt power cycle [ 147.839252][ T7369] rust_binder: Error while translating object. [ 147.839295][ T7369] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 147.845630][ T7369] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:320 [ 147.855655][ T7369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 147.871356][ T7376] rust_binder: Error while translating object. [ 147.871393][ T7376] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 147.877820][ T7376] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:320 [ 147.955067][ T7387] xt_check_table_hooks: 23 callbacks suppressed [ 147.955091][ T7387] x_tables: duplicate underflow at hook 1 [ 147.965839][ T7380] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 147.987130][ T7380] input: syz0 as /devices/virtual/input/input15 [ 148.011346][ T7380] rust_binder: 324: no such ref 0 [ 148.022042][ T7380] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 148.029144][ T7380] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 148.036319][ T7380] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 148.043626][ T7380] rust_binder: 324: no such ref 0 [ 148.176247][ T45] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 148.225489][ T45] usb 2-1: device descriptor read/8, error -71 [ 148.318823][ T7434] overlayfs: failed to clone upperpath [ 148.363195][ T45] usb 2-1: device descriptor read/8, error -71 [ 148.612077][ T45] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 148.653012][ T45] usb 2-1: device descriptor read/8, error -71 [ 148.720144][ T7454] fuse: Bad value for 'fd' [ 148.737171][ T7456] overlayfs: failed to clone upperpath [ 148.743251][ T7456] overlayfs: failed to clone lowerpath [ 148.783067][ T45] usb 2-1: device descriptor read/8, error -71 [ 148.877447][ T7477] fuse: Bad value for 'fd' [ 148.892296][ T45] usb usb2-port1: unable to enumerate USB device [ 148.894357][ T7479] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2279'. [ 148.989170][ T7496] devpts: called with bogus options [ 149.612049][ T7532] netlink: 'syz.2.2299': attribute type 3 has an invalid length. [ 149.752057][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 149.763560][ T7537] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2300'. [ 149.772772][ T7537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2300'. [ 149.784010][ T7537] 9pnet_fd: p9_fd_create_unix (7537): problem connecting socket: ./file0: -111 [ 149.793722][ T7537] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7537 comm=syz.4.2300 [ 149.902068][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 149.908533][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.919609][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.929730][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 149.943100][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=00da, bcdDevice= 0.90 [ 149.952254][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.962653][ T10] usb 2-1: config 0 descriptor?? [ 150.004863][ T7558] netlink: 'syz.7.2307': attribute type 28 has an invalid length. [ 150.252061][ T9] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 150.372112][ T10] hid-generic 0003:045E:00DA.0004: ignoring exceeding usage max [ 150.380803][ T10] hid-generic 0003:045E:00DA.0004: unbalanced collection at end of report description [ 150.390658][ T10] hid-generic 0003:045E:00DA.0004: probe with driver hid-generic failed with error -22 [ 150.403324][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 150.414328][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 150.425165][ T9] usb 8-1: New USB device found, idVendor=0404, idProduct=0755, bcdDevice= 0.00 [ 150.434253][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.443058][ T9] usb 8-1: config 0 descriptor?? [ 150.448321][ T7558] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 150.574256][ T7530] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 150.584962][ T7530] rust_binder: Write failure EFAULT in pid:74 [ 150.585341][ T427] usb 2-1: USB disconnect, device number 9 [ 150.656104][ T7558] rust_binder: 350: no such ref 1 [ 150.661194][ T7558] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:350 [ 151.098853][ T36] kauditd_printk_skb: 57 callbacks suppressed [ 151.098884][ T36] audit: type=1400 audit(2016777510.648:833): avc: denied { unmount } for pid=6874 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 151.166410][ T9] usbhid 8-1:0.0: can't add hid device: -71 [ 151.173152][ T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 151.183114][ T9] usb 8-1: USB disconnect, device number 16 [ 151.207600][ T36] audit: type=1400 audit(2016777510.758:834): avc: denied { create } for pid=7595 comm="syz.2.2321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 151.218654][ T7596] 9pnet: Could not find request transport: fd rfdP [ 151.303272][ T7603] 9pnet: Could not find request transport: rdma [ 151.311658][ T7608] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 151.312476][ T36] audit: type=1400 audit(2016777510.868:835): avc: denied { setattr } for pid=7605 comm="syz.7.2320" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 151.343254][ T7608] rust_binder: Error in use_page_slow: ESRCH [ 151.343275][ T7608] rust_binder: use_range failure ESRCH [ 151.349274][ T7608] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 151.354856][ T7607] rust_binder: Error in use_page_slow: ESRCH [ 151.367456][ T7607] rust_binder: use_range failure ESRCH [ 151.373586][ T7608] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 151.379091][ T7607] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 151.388477][ T7608] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:354 [ 151.396531][ T7607] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 151.405907][ T7607] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:354 [ 151.422092][ T65] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 151.467781][ T7613] 9pnet_fd: Insufficient options for proto=fd [ 151.502995][ T1586] can0 (unregistered): slcan off ptm1. [ 151.552102][ T7619] rust_binder: Error in use_page_slow: ESRCH [ 151.552126][ T7619] rust_binder: use_range failure ESRCH [ 151.579793][ T7619] rust_binder: Failed to allocate buffer. len:104, is_oneway:true [ 151.591622][ T7628] overlayfs: failed to clone upperpath [ 151.608630][ T7619] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 151.608658][ T7619] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:357 [ 151.652045][ T65] usb 2-1: Using ep0 maxpacket: 32 [ 151.666979][ T128] bridge_slave_1: left allmulticast mode [ 151.680381][ T128] bridge_slave_1: left promiscuous mode [ 151.692398][ T128] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.707725][ T65] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 151.716027][ T65] usb 2-1: config 0 has no interface number 0 [ 151.722305][ T128] bridge_slave_0: left allmulticast mode [ 151.729155][ T65] usb 2-1: config 0 interface 184 has no altsetting 0 [ 151.736676][ T128] bridge_slave_0: left promiscuous mode [ 151.742464][ T128] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.750866][ T65] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 151.770184][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.782048][ T65] usb 2-1: Product: syz [ 151.786251][ T65] usb 2-1: Manufacturer: syz [ 151.809034][ T65] usb 2-1: SerialNumber: syz [ 151.821842][ T7645] exFAT-fs (rnullb0): invalid boot record signature [ 151.829176][ T65] usb 2-1: config 0 descriptor?? [ 151.837585][ T7645] exFAT-fs (rnullb0): failed to read boot sector [ 151.844134][ T7645] exFAT-fs (rnullb0): failed to recognize exfat type [ 151.851429][ T65] smsc75xx v1.0.0 [ 151.917281][ T128] veth1_macvtap: left promiscuous mode [ 151.923016][ T128] veth0_vlan: left promiscuous mode [ 151.929841][ T36] audit: type=1400 audit(2016777511.478:836): avc: denied { read } for pid=95 comm="acpid" name="mouse7" dev="devtmpfs" ino=534 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 151.976295][ T36] audit: type=1400 audit(2016777511.478:837): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/mouse7" dev="devtmpfs" ino=534 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 152.015865][ T7656] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:369 [ 152.028495][ T36] audit: type=1400 audit(2016777511.478:838): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/mouse7" dev="devtmpfs" ino=534 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 152.090246][ T7638] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.098528][ T7638] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.105777][ T7638] bridge_slave_0: entered allmulticast mode [ 152.113210][ T7638] bridge_slave_0: entered promiscuous mode [ 152.124046][ T7638] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.131180][ T7638] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.138453][ T7638] bridge_slave_1: entered allmulticast mode [ 152.144890][ T7638] bridge_slave_1: entered promiscuous mode [ 152.238588][ T7638] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.245671][ T7638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.252981][ T7638] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.260013][ T7638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.286093][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.293846][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.310013][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.317117][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.326982][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.334074][ T334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.366001][ T7638] veth0_vlan: entered promiscuous mode [ 152.379574][ T7638] veth1_macvtap: entered promiscuous mode [ 152.440960][ T7709] rust_binder: Write failure EINVAL in pid:4 [ 152.970390][ T7726] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.983601][ T7726] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.990763][ T7726] bridge_slave_0: entered allmulticast mode [ 152.997221][ T7726] bridge_slave_0: entered promiscuous mode [ 153.003848][ T7726] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.010898][ T7726] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.018155][ T7726] bridge_slave_1: entered allmulticast mode [ 153.024548][ T7726] bridge_slave_1: entered promiscuous mode [ 153.044713][ T36] audit: type=1400 audit(2016777512.598:839): avc: denied { getopt } for pid=7730 comm="syz.2.2345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 153.074406][ T65] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 153.085455][ T65] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 153.115130][ T7744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2349'. [ 153.161803][ T7726] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.168945][ T7726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.176267][ T7726] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.183315][ T7726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.183336][ T7762] fuse: Unknown parameter '' [ 153.195406][ T7763] fuse: Unknown parameter '' [ 153.212904][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.225328][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.232425][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.260455][ T7726] veth0_vlan: entered promiscuous mode [ 153.271741][ T7726] veth1_macvtap: entered promiscuous mode [ 153.440117][ T7778] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 153.448772][ T7778] 9pnet_fd: Insufficient options for proto=fd [ 153.475235][ T7781] rust_binder: Write failure EINVAL in pid:42 [ 153.488978][ T7783] rust_binder: Write failure EFAULT in pid:44 [ 153.509517][ T7785] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 153.527959][ T7786] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.535171][ T7785] rust_binder: Error in use_page_slow: ESRCH [ 153.535192][ T7785] rust_binder: use_range failure ESRCH [ 153.541207][ T7785] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 153.546784][ T10] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 153.547016][ T7785] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 153.562513][ T7785] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:46 [ 153.668972][ T7793] TCP: TCP_TX_DELAY enabled [ 153.707735][ T10] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 153.717024][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.725100][ T10] usb 8-1: Product: syz [ 153.729445][ T10] usb 8-1: Manufacturer: syz [ 153.734287][ T10] usb 8-1: SerialNumber: syz [ 153.819834][ T7806] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:54 [ 153.939053][ T7830] rust_binder: 76: no such ref 3 [ 153.953479][ T7830] rust_binder: 76: no such ref 1 [ 153.958469][ T7830] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:76 [ 154.154069][ T7769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.171679][ T7769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.324355][ T7832] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7832 comm=syz.2.2373 [ 154.381849][ T7769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.397409][ T65] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 154.409009][ T7769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.435727][ T10] rtl8150 8-1:1.0: eth1: rtl8150 is detected [ 154.441866][ T65] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 154.458451][ T65] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 154.480446][ T7859] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2383'. [ 154.505925][ T65] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 154.534744][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2383'. [ 154.537825][ T65] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 154.560099][ T36] audit: type=1400 audit(2016777514.108:840): avc: denied { append } for pid=7866 comm="syz.4.2385" name="binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 154.573863][ T65] usb 2-1: USB disconnect, device number 10 [ 154.600755][ T7872] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 154.610083][ T7872] rust_binder: Write failure EINVAL in pid:80 [ 154.654514][ T2159] usb 8-1: USB disconnect, device number 17 [ 154.675197][ T7884] 9pnet_fd: Insufficient options for proto=fd [ 154.724181][ T7888] SELinux: policydb string length 1952804360 does not match expected length 8 [ 154.733713][ T36] audit: type=1400 audit(2016777514.278:841): avc: denied { load_policy } for pid=7887 comm="syz.1.2391" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 154.764348][ T7888] SELinux: failed to load policy [ 154.866912][ T36] audit: type=1400 audit(2016777514.418:842): avc: denied { read } for pid=7900 comm="syz.4.2392" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 155.018718][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2396'. [ 155.074039][ T7927] loop7: detected capacity change from 0 to 7 [ 155.091005][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.100290][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 155.122040][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.131229][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 155.139149][ T7927] loop7: unable to read partition table [ 155.145105][ T7927] loop_reread_partitions: partition scan of loop7 (ىCj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 155.162077][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.171241][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 155.180821][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.189984][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 155.198251][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.207466][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 155.224675][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.233878][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 155.262028][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.271210][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 155.313701][ T7940] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 155.318542][ T7940] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 155.358381][ T7942] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 155.368433][ T7942] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 155.401346][ T7945] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 155.500076][ T7957] netlink: 'syz.1.2408': attribute type 4 has an invalid length. [ 155.559975][ T7965] rust_binder: Error while translating object. [ 155.560003][ T7965] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 155.566292][ T7965] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:19 [ 155.755979][ T7975] rust_binder: Write failure EFAULT in pid:94 [ 155.962088][ T503] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 156.042217][ T427] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 156.091607][ T7997] netlink: 'syz.1.2422': attribute type 27 has an invalid length. [ 156.107316][ T7997] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.114456][ T7997] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.122468][ T503] usb 8-1: too many configurations: 212, using maximum allowed: 8 [ 156.131174][ T503] usb 8-1: config 0 has no interfaces? [ 156.137664][ T503] usb 8-1: config 0 has no interfaces? [ 156.144016][ T503] usb 8-1: config 0 has no interfaces? [ 156.153152][ T503] usb 8-1: config 0 has no interfaces? [ 156.159463][ T503] usb 8-1: config 0 has no interfaces? [ 156.165718][ T503] usb 8-1: config 0 has no interfaces? [ 156.171920][ T503] usb 8-1: config 0 has no interfaces? [ 156.178303][ T503] usb 8-1: config 0 has no interfaces? [ 156.185317][ T503] usb 8-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=92.db [ 156.194486][ T503] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.202111][ T427] usb 5-1: Using ep0 maxpacket: 32 [ 156.202533][ T503] usb 8-1: Product: syz [ 156.209090][ T427] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.211776][ T503] usb 8-1: Manufacturer: syz [ 156.224599][ T427] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.227385][ T503] usb 8-1: SerialNumber: syz [ 156.237762][ T427] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 156.245496][ T503] usb 8-1: config 0 descriptor?? [ 156.252068][ T427] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.272337][ T427] usb 5-1: config 0 descriptor?? [ 156.278273][ T427] hub 5-1:0.0: USB hub found [ 156.402371][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 156.402386][ T36] audit: type=1400 audit(2016777515.958:846): avc: denied { ioctl } for pid=8010 comm="syz.1.2428" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 156.423488][ T8011] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.2428'. [ 156.463795][ T36] audit: type=1400 audit(2016777516.018:847): avc: denied { write } for pid=8012 comm="syz.1.2429" name="file1" dev="tmpfs" ino=301 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 156.465075][ T8013] overlay: ./file1 is not a directory [ 156.489380][ T7973] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 156.492405][ T427] hub 5-1:0.0: 1 port detected [ 156.503510][ T7973] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 156.518273][ T7973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.526939][ T7973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.535725][ T503] usb 8-1: USB disconnect, device number 18 [ 156.568977][ T36] audit: type=1326 audit(2016777516.118:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8012 comm="syz.1.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e21d8f6c9 code=0x7fc00000 [ 156.709003][ T427] hub 5-1:0.0: hub_ext_port_status failed (err = 0) [ 156.915554][ T8026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2433'. [ 156.942119][ T65] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 157.092060][ T65] usb 2-1: Using ep0 maxpacket: 16 [ 157.098341][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.112374][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.122290][ T65] usb 2-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 157.131929][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.142539][ T65] usb 2-1: config 0 descriptor?? [ 157.302158][ T503] usb 5-1: USB disconnect, device number 6 [ 157.482331][ T10] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 157.553292][ T65] holtek_mouse 0003:04D9:A081.0005: hidraw0: USB HID v0.00 Device [HID 04d9:a081] on usb-dummy_hcd.1-1/input0 [ 157.612040][ T10] usb 8-1: device descriptor read/64, error -71 [ 157.852068][ T10] usb 8-1: device descriptor read/64, error -71 [ 158.092058][ T10] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 158.222086][ T10] usb 8-1: device descriptor read/64, error -71 [ 158.415014][ T8058] netlink: 'syz.2.2442': attribute type 4 has an invalid length. [ 158.443831][ T8062] 9pnet_fd: p9_fd_create_tcp (8062): problem connecting socket to 127.0.0.1 [ 158.453254][ T8062] fuse: Unknown parameter 'smackfsroot' [ 158.472046][ T10] usb 8-1: device descriptor read/64, error -71 [ 158.582118][ T10] usb usb8-port1: attempt power cycle [ 158.922184][ T10] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 158.943174][ T10] usb 8-1: device descriptor read/8, error -71 [ 159.073038][ T10] usb 8-1: device descriptor read/8, error -71 [ 159.312049][ T10] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 159.333048][ T10] usb 8-1: device descriptor read/8, error -71 [ 159.463090][ T10] usb 8-1: device descriptor read/8, error -71 [ 159.573095][ T10] usb usb8-port1: unable to enumerate USB device [ 159.602907][ T36] audit: type=1326 audit(2016777519.158:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8017 comm="syz.1.2430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e21d8f6c9 code=0x7fc00000 [ 159.627682][ T45] usb 2-1: USB disconnect, device number 11 [ 159.962257][ T45] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 160.092277][ T45] usb 2-1: device descriptor read/64, error -71 [ 160.332128][ T45] usb 2-1: device descriptor read/64, error -71 [ 160.572596][ T45] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 160.578087][ T36] audit: type=1326 audit(2016777520.128:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8098 comm="syz.4.2457" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbcaff8f6c9 code=0x0 [ 160.628743][ T8100] binder: Bad value for 'max' [ 160.702064][ T45] usb 2-1: device descriptor read/64, error -71 [ 160.942070][ T45] usb 2-1: device descriptor read/64, error -71 [ 161.052122][ T45] usb usb2-port1: attempt power cycle [ 161.392056][ T45] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 161.413044][ T45] usb 2-1: device descriptor read/8, error -71 [ 161.420225][ T36] audit: type=1400 audit(2016777520.968:851): avc: denied { map } for pid=8101 comm="syz.4.2458" path="socket:[29936]" dev="sockfs" ino=29936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 161.543055][ T45] usb 2-1: device descriptor read/8, error -71 [ 161.692109][ T427] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 161.782066][ T45] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 161.803615][ T45] usb 2-1: device descriptor read/8, error -71 [ 161.843153][ T427] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 161.852933][ T427] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 161.864254][ T427] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 161.873375][ T427] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.881354][ T427] usb 5-1: Product: syz [ 161.885576][ T427] usb 5-1: Manufacturer: syz [ 161.890257][ T427] usb 5-1: SerialNumber: syz [ 161.895501][ T427] usb 5-1: config 0 descriptor?? [ 161.900769][ T8104] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 161.908015][ T8104] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 161.933053][ T45] usb 2-1: device descriptor read/8, error -71 [ 162.043499][ T45] usb usb2-port1: unable to enumerate USB device [ 162.115962][ T8104] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 162.123401][ T8104] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 162.531449][ T427] Error reading MAC address [ 162.823612][ T36] audit: type=1400 audit(2016777522.378:852): avc: denied { execute } for pid=8117 comm="syz.1.2462" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=30885 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 162.912452][ T8126] /dev/rnullb0: Can't open blockdev [ 163.125179][ T36] audit: type=1400 audit(2016777522.678:853): avc: denied { setattr } for pid=8131 comm="syz.2.2466" name="XDP" dev="sockfs" ino=30897 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 163.421501][ T8139] netlink: 'syz.7.2468': attribute type 5 has an invalid length. [ 163.726588][ T8141] 9pnet: p9_errstr2errno: server reported unknown error @cF S+Jx@PQ[v5o [ 164.252059][ T36] audit: type=1400 audit(2016777523.798:854): avc: denied { create } for pid=8206 comm="syz.2.2489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 164.463847][ T45] usb 5-1: USB disconnect, device number 7 [ 164.492423][ T8233] netlink: 'syz.4.2496': attribute type 11 has an invalid length. [ 164.561399][ T8242] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 164.615137][ T8242] kvm: kvm [8241]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 164.623736][ T8242] kvm: kvm [8241]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 164.634583][ T8242] kvm: kvm [8241]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 164.646508][ T8242] kvm: kvm [8241]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 164.655230][ T8242] kvm: kvm [8241]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 164.667144][ T8242] kvm_intel: kvm [8241]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 164.676464][ T36] audit: type=1400 audit(2016777524.238:855): avc: denied { mounton } for pid=8241 comm="syz.4.2500" path="/40/file0" dev="ramfs" ino=31007 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 164.711909][ T8244] rust_binder: Write failure EFAULT in pid:126 [ 164.723564][ T36] audit: type=1400 audit(2016777524.258:856): avc: denied { read } for pid=8241 comm="syz.4.2500" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 164.759374][ T36] audit: type=1400 audit(2016777524.258:857): avc: denied { open } for pid=8241 comm="syz.4.2500" path="/40/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 164.786647][ T36] audit: type=1400 audit(2016777524.258:858): avc: denied { ioctl } for pid=8241 comm="syz.4.2500" path="/40/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 164.853847][ T8246] input: syz0 as /devices/virtual/input/input17 [ 165.001043][ T8260] sit0: entered promiscuous mode [ 165.007013][ T8260] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2506'. [ 165.053234][ T8268] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1547 sclass=netlink_tcpdiag_socket pid=8268 comm=syz.7.2510 [ 165.112048][ T65] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 165.262049][ T65] usb 2-1: Using ep0 maxpacket: 8 [ 165.276373][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.286286][ T65] usb 2-1: New USB device found, idVendor=056a, idProduct=00b8, bcdDevice= 0.00 [ 165.295641][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.307751][ T65] usb 2-1: config 0 descriptor?? [ 165.521585][ T65] usbhid 2-1:0.0: can't add hid device: -71 [ 165.527680][ T65] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 165.528633][ T8297] netlink: 'syz.1.2518': attribute type 1 has an invalid length. [ 165.537799][ T65] usb 2-1: USB disconnect, device number 16 [ 165.543439][ T8297] netlink: 520 bytes leftover after parsing attributes in process `syz.1.2518'. [ 165.563521][ T8297] rust_binder: Error while translating object. [ 165.563547][ T8297] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 165.569757][ T8297] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:192 [ 165.722563][ T8310] fuse: Bad value for 'fd' [ 166.819716][ T8371] rust_binder: 203: no such ref 0 [ 166.824879][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.824902][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.831330][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.838292][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.850430][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.857290][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.865539][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.872827][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.879397][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.886054][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.892825][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.899483][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.906155][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.912788][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.919268][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.926034][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.932761][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.939230][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.945860][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.953337][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.959815][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.966521][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.973172][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.979650][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.986276][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.992895][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.999377][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.005932][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.012388][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.018965][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.025817][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.032465][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.038958][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.045614][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.052162][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.058582][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.065034][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.071458][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.078131][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.084818][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.091331][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.097849][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.104348][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.110779][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.117256][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.123696][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.130135][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.136688][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.143139][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.149546][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.156089][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.162553][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.168974][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.175411][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.181823][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.188257][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.194703][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.201116][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.207541][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.213974][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.220380][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.226814][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.233257][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.239684][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.268813][ T36] audit: type=1400 audit(2016777526.818:859): avc: denied { ioctl } for pid=8382 comm="syz.1.2550" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 167.310751][ T8383] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 167.319473][ T8383] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 167.499222][ T8398] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2555'. [ 167.508417][ T8398] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2555'. [ 168.280524][ T8477] rust_binder: Write failure EINVAL in pid:220 [ 168.304429][ T8486] 9pnet_fd: Insufficient options for proto=fd [ 169.011309][ T8525] netlink: 176 bytes leftover after parsing attributes in process `syz.7.2595'. [ 169.084011][ T8529] 9pnet_fd: Insufficient options for proto=fd [ 169.151434][ T8537] tipc: Started in network mode [ 169.156359][ T8537] tipc: Node identity ac14140f, cluster identity 4711 [ 169.163344][ T8537] tipc: New replicast peer: 255.255.255.255 [ 169.169398][ T8537] tipc: Enabled bearer , priority 10 [ 169.422072][ T427] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 169.509399][ T8551] fuse: Unknown parameter 'PX rejected, failed to enable media [ 169.584916][ T427] usb 2-1: config 1 has no interface number 0 [ 169.599864][ T427] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.611006][ T427] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 169.620627][ T427] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 14129, setting to 64 [ 169.631313][ T8560] overlayfs: failed to clone lowerpath [ 169.633375][ T427] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 169.646186][ T427] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.654211][ T427] usb 2-1: Product: syz [ 169.658481][ T427] usb 2-1: Manufacturer: syz [ 169.663112][ T427] usb 2-1: SerialNumber: syz [ 170.096697][ T8578] netlink: 'syz.7.2616': attribute type 64 has an invalid length. [ 170.104664][ T8578] netlink: 5 bytes leftover after parsing attributes in process `syz.7.2616'. [ 170.113692][ T8579] netlink: 'syz.7.2616': attribute type 64 has an invalid length. [ 170.121579][ T8579] netlink: 5 bytes leftover after parsing attributes in process `syz.7.2616'. [ 170.170036][ T8588] netlink: 'syz.7.2620': attribute type 17 has an invalid length. [ 170.178993][ T8588] devpts: called with bogus options [ 170.282069][ T2159] tipc: Node number set to 2886997007 [ 170.470608][ T427] cdc_ncm 2-1:1.1: bind() failure [ 170.630113][ T8619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2632'. [ 170.650268][ T8621] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2633'. [ 170.672276][ T8545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.681557][ T8545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.694629][ T7838] usb 2-1: USB disconnect, device number 17 [ 170.732499][ T8641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.741329][ T8641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.772917][ T36] audit: type=1400 audit(2016777530.328:860): avc: denied { listen } for pid=8649 comm="syz.4.2641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 170.902036][ T36] audit: type=1400 audit(2016777530.448:861): avc: denied { ioctl } for pid=8659 comm="syz.1.2644" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 170.977268][ T8682] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:274 [ 170.977268][ T8681] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:274 [ 171.439280][ T8716] fuse: Bad value for 'fd' [ 171.461072][ T8718] fuse: Bad value for 'fd' [ 171.545210][ T8723] fuse: Bad value for 'user_id' [ 171.550163][ T8723] fuse: Bad value for 'user_id' [ 171.657463][ T8746] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2674'. [ 171.666598][ T8746] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2674'. [ 171.676823][ T36] audit: type=1326 audit(2016777531.228:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8745 comm="syz.2.2674" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe42ef8f6c9 code=0x0 [ 171.962097][ T7838] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 172.113107][ T7838] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 172.124144][ T7838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.135093][ T7838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.144844][ T7838] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 172.158554][ T7838] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 172.167689][ T7838] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 172.175959][ T7838] usb 2-1: Manufacturer: syz [ 172.181054][ T7838] usb 2-1: config 0 descriptor?? [ 172.588117][ T7838] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 172.595628][ T7838] appleir 0003:05AC:8243.0006: No inputs registered, leaving [ 172.605203][ T7838] appleir 0003:05AC:8243.0006: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 173.094649][ T8807] SELinux: security_context_str_to_sid () failed with errno=-22 [ 173.260235][ T8821] netlink: 'syz.7.2696': attribute type 1 has an invalid length. [ 173.369046][ T8843] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 173.377381][ T8843] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 173.494417][ T36] audit: type=1326 audit(2016777533.048:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8862 comm="syz.4.2709" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbcaff8f6c9 code=0x0 [ 174.679740][ T65] usb 2-1: USB disconnect, device number 18 [ 174.768045][ T8917] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2723'. [ 174.819170][ T8917] rust_binder: 297: no such ref 1 [ 174.834145][ T8917] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 174.882013][ T8917] rust_binder: 297: no such ref 3 [ 174.902445][ T8917] rust_binder: Read failure Err(EAGAIN) in pid:297 [ 175.174609][ T8927] syz.7.2728 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 175.195252][ T8927] CPU: 1 UID: 0 PID: 8927 Comm: syz.7.2728 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 175.195281][ T8927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 175.195300][ T8927] Call Trace: [ 175.195305][ T8927] [ 175.195313][ T8927] __dump_stack+0x21/0x30 [ 175.195356][ T8927] dump_stack_lvl+0x10c/0x190 [ 175.195379][ T8927] ? __cfi_dump_stack_lvl+0x10/0x10 [ 175.195401][ T8927] ? ___ratelimit+0x3f7/0x5a0 [ 175.195426][ T8927] dump_stack+0x19/0x20 [ 175.195448][ T8927] dump_header+0xd7/0x490 [ 175.195465][ T8927] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 175.195488][ T8927] oom_kill_process+0x35d/0x640 [ 175.195508][ T8927] ? sched_clock_cpu+0x75/0x400 [ 175.195531][ T8927] out_of_memory+0x659/0xa80 [ 175.195550][ T8927] ? __cfi_out_of_memory+0x10/0x10 [ 175.195566][ T8927] ? mutex_lock_killable+0x92/0x1c0 [ 175.195582][ T8927] ? __cfi_mutex_lock_killable+0x10/0x10 [ 175.195598][ T8927] mem_cgroup_out_of_memory+0x279/0x350 [ 175.195613][ T8927] ? drain_obj_stock+0xed0/0xed0 [ 175.195628][ T8927] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 175.195642][ T8927] try_charge_memcg+0x8f7/0xde0 [ 175.195661][ T8927] ? __cfi_try_charge_memcg+0x10/0x10 [ 175.195680][ T8927] ? __alloc_pages_noprof+0x31f/0x7b0 [ 175.195703][ T8927] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 175.195728][ T8927] __mem_cgroup_charge+0xf6/0x410 [ 175.195754][ T8927] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 175.195777][ T8927] ? enqueue_task+0x1133/0x11f0 [ 175.195795][ T8927] folio_prealloc+0x67/0x240 [ 175.195816][ T8927] do_wp_page+0x1885/0x2ed0 [ 175.195837][ T8927] ? folio_put+0x90/0x90 [ 175.195855][ T8927] ? __cfi__raw_spin_lock+0x10/0x10 [ 175.195877][ T8927] ? __pte_offset_map+0x1b0/0x230 [ 175.195901][ T8927] ? pte_offset_map_rw_nolock+0xba/0x110 [ 175.195930][ T8927] handle_mm_fault+0xff7/0x1b90 [ 175.195952][ T8927] ? __cfi_handle_mm_fault+0x10/0x10 [ 175.195971][ T8927] ? lock_vma_under_rcu+0x49d/0x540 [ 175.195993][ T8927] ? __sched_text_start+0x10/0x10 [ 175.196016][ T8927] ? sched_clock_cpu+0x75/0x400 [ 175.196040][ T8927] do_user_addr_fault+0x96c/0x1200 [ 175.196065][ T8927] ? __kasan_check_write+0x18/0x20 [ 175.196091][ T8927] ? switch_fpu_return+0x12/0x20 [ 175.196112][ T8927] exc_page_fault+0x59/0xc0 [ 175.196130][ T8927] asm_exc_page_fault+0x2b/0x30 [ 175.196148][ T8927] RIP: 0033:0x7f5545c560a6 [ 175.196170][ T8927] Code: 00 00 00 00 53 48 89 fb 48 85 ff 74 47 80 3d 54 f6 eb 00 00 75 1e 80 3d 1f c0 38 00 00 75 55 48 8b 43 18 48 c7 00 00 00 00 00 43 48 00 5b c3 0f 1f 40 00 8b 3b 31 d2 31 c0 be 68 63 00 00 e8 [ 175.196186][ T8927] RSP: 002b:00007fffc7862450 EFLAGS: 00010246 [ 175.196204][ T8927] RAX: 00007f55457ff000 RBX: 00007f5545fe6038 RCX: 00007f5545d46b97 [ 175.196219][ T8927] RDX: 00007f5545fe5fa0 RSI: 00007f5545fe5fa0 RDI: 00007f5545fe6038 [ 175.196233][ T8927] RBP: 0000000000000000 R08: 00007f5545fe5fa0 R09: 00007fffc78622f7 [ 175.196247][ T8927] R10: 0000000000000008 R11: 0000000000000246 R12: 00007f5545fe5fac [ 175.196260][ T8927] R13: 00007f5545fe5fa0 R14: 0000000000001067 R15: 0000000000000006 [ 175.196276][ T8927] [ 175.196317][ T8927] memory: usage 307200kB, limit 307200kB, failcnt 1516 [ 175.224484][ T8930] veth0_virt_wifi: entered allmulticast mode [ 175.228528][ T2159] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 175.234669][ T8930] veth0_virt_wifi: left allmulticast mode [ 175.238458][ T8927] memory+swap: usage 308572kB, limit 9007199254740988kB, failcnt 0 [ 175.498111][ T8939] overlayfs: failed to clone upperpath [ 175.502118][ T8927] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 175.538570][ T8927] Memory cgroup stats for /syz7: [ 175.538696][ T8927] cache 314572800 [ 175.547374][ T8927] rss 0 [ 175.550167][ T8927] rss_huge 0 [ 175.553857][ T8927] shmem 0 [ 175.561813][ T8927] mapped_file 0 [ 175.565696][ T8927] dirty 0 [ 175.568635][ T8927] writeback 0 [ 175.572024][ T8927] workingset_refault_anon 6 [ 175.576525][ T8927] workingset_refault_file 0 [ 175.581019][ T8927] swap 1404928 [ 175.586153][ T8927] swapcached 0 [ 175.589532][ T8927] pgpgin 191786 [ 175.593073][ T8927] pgpgout 115497 [ 175.597089][ T8927] pgfault 81265 [ 175.600599][ T8927] pgmajfault 9 [ 175.604851][ T8927] inactive_anon 0 [ 175.608651][ T8927] active_anon 0 [ 175.612141][ T8927] inactive_file 0 [ 175.615761][ T8927] active_file 0 [ 175.619220][ T8927] unevictable 314572800 [ 175.623554][ T8927] hierarchical_memory_limit 314572800 [ 175.628999][ T8927] hierarchical_memsw_limit 9223372036854771712 [ 175.635181][ T8927] total_cache 314572800 [ 175.639329][ T8927] total_rss 0 [ 175.642669][ T8927] total_rss_huge 0 [ 175.646405][ T8927] total_shmem 0 [ 175.649917][ T8927] total_mapped_file 0 [ 175.650636][ T2159] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.654012][ T8927] total_dirty 0 [ 175.667649][ T8927] total_writeback 0 [ 175.671480][ T8927] total_workingset_refault_anon 6 [ 175.674837][ T2159] usb 2-1: config 1 interface 0 has no altsetting 0 [ 175.676621][ T8927] total_workingset_refault_file 0 [ 175.683786][ T2159] usb 2-1: language id specifier not provided by device, defaulting to English [ 175.688226][ T8927] total_swap 1404928 [ 175.698628][ T2159] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40 [ 175.701032][ T8927] total_swapcached 0 [ 175.710349][ T2159] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.713988][ T8927] total_pgpgin 191786 [ 175.713998][ T8927] total_pgpgout 115497 [ 175.722342][ T2159] usb 2-1: Product: syz [ 175.726057][ T8927] total_pgfault 81265 [ 175.730117][ T2159] usb 2-1: Manufacturer: ޿ṕ즒꡴婵皰磈㠁缥鉓堫췟芄嶦ꓡ᧼啠㌂座∺티먌ꭖ쓻╝㈺﵁債隥굄糶䵎孜 [ 175.743962][ T8927] total_pgmajfault 9 [ 175.751673][ T2159] usb 2-1: SerialNumber: syz [ 175.755226][ T8927] total_inactive_anon 0 [ 175.764211][ T8927] total_active_anon 0 [ 175.769681][ T8927] total_inactive_file 0 [ 175.773202][ T8958] netlink: 'syz.2.2741': attribute type 28 has an invalid length. [ 175.774149][ T8927] total_active_file 0 [ 175.785662][ T8927] total_unevictable 314572800 [ 175.790318][ T8927] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.2410,pid=7963,uid=0 [ 175.805150][ T8927] Memory cgroup out of memory: Killed process 7963 (syz.7.2410) total-vm:90092kB, anon-rss:1136kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 175.826914][ T8883] syz.7.2714 invoked oom-killer: gfp_mask=0x100cc2(GFP_HIGHUSER), order=0, oom_score_adj=0 [ 175.837024][ T8883] CPU: 0 UID: 0 PID: 8883 Comm: syz.7.2714 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 175.837049][ T8883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 175.837061][ T8883] Call Trace: [ 175.837065][ T8883] [ 175.837072][ T8883] __dump_stack+0x21/0x30 [ 175.837097][ T8883] dump_stack_lvl+0x10c/0x190 [ 175.837117][ T8883] ? __cfi_dump_stack_lvl+0x10/0x10 [ 175.837136][ T8883] ? ___ratelimit+0x3f7/0x5a0 [ 175.837159][ T8883] dump_stack+0x19/0x20 [ 175.837178][ T8883] dump_header+0xd7/0x490 [ 175.837195][ T8883] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 175.837214][ T8883] oom_kill_process+0x35d/0x640 [ 175.837239][ T8883] ? sched_clock_cpu+0x75/0x400 [ 175.837260][ T8883] out_of_memory+0x659/0xa80 [ 175.837277][ T8883] ? __cfi_out_of_memory+0x10/0x10 [ 175.837295][ T8883] ? mutex_lock_killable+0x104/0x1c0 [ 175.837310][ T8883] ? __cfi_mutex_lock_killable+0x10/0x10 [ 175.837328][ T8883] mem_cgroup_out_of_memory+0x279/0x350 [ 175.837343][ T8883] ? drain_obj_stock+0xed0/0xed0 [ 175.837358][ T8883] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 175.837373][ T8883] try_charge_memcg+0x8f7/0xde0 [ 175.837392][ T8883] ? gfp_to_alloc_flags_cma+0x90/0x1c0 [ 175.837408][ T8883] ? __cfi_try_charge_memcg+0x10/0x10 [ 175.837428][ T8883] ? __alloc_pages_noprof+0x31f/0x7b0 [ 175.837448][ T8883] __mem_cgroup_charge+0xf6/0x410 [ 175.837471][ T8883] ? filemap_get_entry+0x3fb/0x460 [ 175.837490][ T8883] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 175.837511][ T8883] filemap_add_folio+0x57/0x2d0 [ 175.837529][ T8883] __filemap_get_folio+0x5cb/0xaa0 [ 175.837548][ T8883] ? __vfs_getxattr+0xaf/0x450 [ 175.837569][ T8883] ? __cfi___filemap_get_folio+0x10/0x10 [ 175.837589][ T8883] ? __kasan_check_write+0x18/0x20 [ 175.837610][ T8883] ? noop_dirty_folio+0x81/0xa0 [ 175.837624][ T8883] ? inode_to_bdi+0x6d/0x100 [ 175.837645][ T8883] simple_write_begin+0x60/0x390 [ 175.837663][ T8883] generic_perform_write+0x330/0x960 [ 175.837685][ T8883] ? __cfi_generic_perform_write+0x10/0x10 [ 175.837706][ T8883] ? generic_write_checks_count+0x429/0x540 [ 175.837727][ T8883] ? file_update_time+0xa3/0x220 [ 175.837746][ T8883] __generic_file_write_iter+0xcf/0x180 [ 175.837767][ T8883] generic_file_write_iter+0x110/0x430 [ 175.837788][ T8883] ? __cfi_generic_file_write_iter+0x10/0x10 [ 175.837809][ T8883] ? gup_must_unshare+0x1e0/0x1e0 [ 175.837828][ T8883] ? vma_is_secretmem+0x11/0x50 [ 175.837848][ T8883] ? __get_user_pages+0x2034/0x22d0 [ 175.837868][ T8883] ? __kasan_check_write+0x18/0x20 [ 175.837892][ T8883] ? __cfi_generic_file_write_iter+0x10/0x10 [ 175.837912][ T8883] __kernel_write_iter+0x41a/0x8e0 [ 175.837926][ T8883] ? __cfi_generic_file_write_iter+0x10/0x10 [ 175.837947][ T8883] ? __cfi___kernel_write_iter+0x10/0x10 [ 175.837961][ T8883] ? get_dump_page+0x160/0x220 [ 175.837980][ T8883] ? __asan_memset+0x39/0x50 [ 175.837994][ T8883] ? iov_iter_bvec+0xc0/0x180 [ 175.838013][ T8883] dump_user_range+0xb06/0xdf0 [ 175.838028][ T8883] ? __cfi_dump_emit+0x10/0x10 [ 175.838041][ T8883] ? __cfi_dump_user_range+0x10/0x10 [ 175.838055][ T8883] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 175.838076][ T8883] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 175.838097][ T8883] ? elf_core_dump+0x2368/0x3800 [ 175.838117][ T8883] elf_core_dump+0x2ccc/0x3800 [ 175.838136][ T8883] ? __cfi_elf_core_dump+0x10/0x10 [ 175.838158][ T8883] ? dump_interrupted+0xf0/0xf0 [ 175.838178][ T8883] ? filp_open+0x182/0x1d0 [ 175.838197][ T8883] ? 0xffffffffff600000 [ 175.838209][ T8883] do_coredump+0x1bfa/0x2bd0 [ 175.838245][ T8883] ? __cfi_do_coredump+0x10/0x10 [ 175.838266][ T8883] ? asm_exc_page_fault+0x2b/0x30 [ 175.838288][ T8883] ? __kasan_slab_free+0x6a/0x80 [ 175.838304][ T8883] ? kmem_cache_free+0x1c1/0x510 [ 175.838318][ T8883] ? get_signal+0xa75/0x14f0 [ 175.838338][ T8883] get_signal+0x11fd/0x14f0 [ 175.838358][ T8883] arch_do_signal_or_restart+0x96/0x720 [ 175.838383][ T8883] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 175.838406][ T8883] irqentry_exit_to_user_mode+0x4e/0xb0 [ 175.838423][ T8883] irqentry_exit+0x16/0x60 [ 175.838438][ T8883] exc_page_fault+0x66/0xc0 [ 175.838452][ T8883] asm_exc_page_fault+0x2b/0x30 [ 175.838467][ T8883] RIP: 0033:0x7f5545c4f6b7 [ 175.838481][ T8883] Code: 88 15 42 60 ec 00 88 05 3f 60 ec 00 c3 50 48 8d 35 e9 28 1c 00 48 8d 3d ef 28 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 175.838494][ T8883] RSP: 002b:00007f5546bf3120 EFLAGS: 00010202 [ 175.838520][ T8883] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f5545d8f6c9 [ 175.838532][ T8883] RDX: 00007f5546bf3140 RSI: 00007f5546bf3270 RDI: 000000000000000b [ 175.838542][ T8883] RBP: 00007f5545e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 175.838552][ T8883] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 175.838562][ T8883] R13: 00007f5545fe6128 R14: 00007f5545fe6090 R15: 00007fffc78622f8 [ 175.838575][ T8883] [ 175.838582][ T8883] memory: usage 307200kB, limit 307200kB, failcnt 1601 [ 176.064169][ T8959] syz.1.2726(8959): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 176.066110][ T8883] memory+swap: usage 308464kB, limit 9007199254740988kB, failcnt 0 [ 176.341170][ T8883] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 176.349640][ T8883] Memory cgroup stats for /syz7: [ 176.349754][ T8883] cache 314572800 [ 176.361166][ T8972] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2743'. [ 176.369663][ T8883] rss 0 [ 176.380948][ T8975] 9pnet: p9_errstr2errno: server reported unknown error [ 176.386159][ T8883] rss_huge 0 [ 176.391747][ T8883] shmem 0 [ 176.396190][ T8883] mapped_file 0 [ 176.399675][ T8883] dirty 0 [ 176.403046][ T8883] writeback 0 [ 176.406516][ T8883] workingset_refault_anon 6 [ 176.411049][ T8883] workingset_refault_file 0 [ 176.415742][ T8883] swap 1404928 [ 176.419272][ T8883] swapcached 0 [ 176.424869][ T8883] pgpgin 191786 [ 176.428368][ T8883] pgpgout 115497 [ 176.431941][ T8883] pgfault 81265 [ 176.435449][ T8883] pgmajfault 9 [ 176.438876][ T8883] inactive_anon 0 [ 176.442576][ T8883] active_anon 0 [ 176.446263][ T8883] inactive_file 0 [ 176.450162][ T8883] active_file 0 [ 176.453698][ T8883] unevictable 314572800 [ 176.457841][ T8883] hierarchical_memory_limit 314572800 [ 176.463340][ T8883] hierarchical_memsw_limit 9223372036854771712 [ 176.470366][ T8883] total_cache 314572800 [ 176.474684][ T8883] total_rss 0 [ 176.477986][ T8883] total_rss_huge 0 [ 176.481875][ T8883] total_shmem 0 [ 176.485413][ T8883] total_mapped_file 0 [ 176.489473][ T8883] total_dirty 0 [ 176.493137][ T8883] total_writeback 0 [ 176.496999][ T8883] total_workingset_refault_anon 6 [ 176.502049][ T8883] total_workingset_refault_file 0 [ 176.507080][ T8883] total_swap 1404928 [ 176.510965][ T8883] total_swapcached 0 [ 176.514901][ T8883] total_pgpgin 191786 [ 176.518901][ T8883] total_pgpgout 115497 [ 176.524703][ T8883] total_pgfault 81265 [ 176.528949][ T8883] total_pgmajfault 9 [ 176.529025][ T2159] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 176.533137][ T8883] total_inactive_anon 0 [ 176.544551][ T8883] total_active_anon 0 [ 176.544633][ T2159] usb 2-1: USB disconnect, device number 19 [ 176.548535][ T8883] total_inactive_file 0 [ 176.558791][ T8883] total_active_file 0 [ 176.562843][ T8883] total_unevictable 314572800 [ 176.567507][ T8883] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.2714,pid=8886,uid=0 [ 176.582432][ T8883] Memory cgroup out of memory: Killed process 8886 (syz.7.2714) total-vm:90296kB, anon-rss:1144kB, file-rss:57676kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:0 [ 176.702338][ T8927] syz.7.2728 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 176.729513][ T8927] CPU: 1 UID: 0 PID: 8927 Comm: syz.7.2728 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 176.729546][ T8927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 176.729557][ T8927] Call Trace: [ 176.729563][ T8927] [ 176.729571][ T8927] __dump_stack+0x21/0x30 [ 176.729599][ T8927] dump_stack_lvl+0x10c/0x190 [ 176.729621][ T8927] ? __cfi_dump_stack_lvl+0x10/0x10 [ 176.729644][ T8927] ? ___ratelimit+0x3f7/0x5a0 [ 176.729670][ T8927] dump_stack+0x19/0x20 [ 176.729691][ T8927] dump_header+0xd7/0x490 [ 176.729709][ T8927] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 176.729731][ T8927] oom_kill_process+0x35d/0x640 [ 176.729752][ T8927] ? sched_clock_cpu+0x75/0x400 [ 176.729777][ T8927] out_of_memory+0x659/0xa80 [ 176.729797][ T8927] ? __cfi_out_of_memory+0x10/0x10 [ 176.729817][ T8927] ? mutex_lock_killable+0x92/0x1c0 [ 176.729835][ T8927] ? __cfi_mutex_lock_killable+0x10/0x10 [ 176.729854][ T8927] mem_cgroup_out_of_memory+0x279/0x350 [ 176.729872][ T8927] ? drain_obj_stock+0xed0/0xed0 [ 176.729890][ T8927] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 176.729907][ T8927] try_charge_memcg+0x8f7/0xde0 [ 176.729930][ T8927] ? __cfi_try_charge_memcg+0x10/0x10 [ 176.729953][ T8927] ? __alloc_pages_noprof+0x31f/0x7b0 [ 176.729976][ T8927] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 176.730000][ T8927] __mem_cgroup_charge+0xf6/0x410 [ 176.730025][ T8927] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 176.730048][ T8927] ? enqueue_task+0x1133/0x11f0 [ 176.730066][ T8927] folio_prealloc+0x67/0x240 [ 176.730087][ T8927] do_wp_page+0x1885/0x2ed0 [ 176.730108][ T8927] ? folio_put+0x90/0x90 [ 176.730126][ T8927] ? __cfi__raw_spin_lock+0x10/0x10 [ 176.730147][ T8927] ? __pte_offset_map+0x1b0/0x230 [ 176.730178][ T8927] ? pte_offset_map_rw_nolock+0xba/0x110 [ 176.730203][ T8927] handle_mm_fault+0xff7/0x1b90 [ 176.730224][ T8927] ? __cfi_handle_mm_fault+0x10/0x10 [ 176.730243][ T8927] ? lock_vma_under_rcu+0x49d/0x540 [ 176.730265][ T8927] ? __sched_text_start+0x10/0x10 [ 176.730289][ T8927] ? sched_clock_cpu+0x75/0x400 [ 176.730312][ T8927] do_user_addr_fault+0x96c/0x1200 [ 176.730337][ T8927] ? __kasan_check_write+0x18/0x20 [ 176.730363][ T8927] ? switch_fpu_return+0x12/0x20 [ 176.730384][ T8927] exc_page_fault+0x59/0xc0 [ 176.730402][ T8927] asm_exc_page_fault+0x2b/0x30 [ 176.730420][ T8927] RIP: 0033:0x7f5545c560a6 [ 176.730436][ T8927] Code: 00 00 00 00 53 48 89 fb 48 85 ff 74 47 80 3d 54 f6 eb 00 00 75 1e 80 3d 1f c0 38 00 00 75 55 48 8b 43 18 48 c7 00 00 00 00 00 43 48 00 5b c3 0f 1f 40 00 8b 3b 31 d2 31 c0 be 68 63 00 00 e8 [ 176.730451][ T8927] RSP: 002b:00007fffc7862450 EFLAGS: 00010246 [ 176.730469][ T8927] RAX: 00007f55457ff000 RBX: 00007f5545fe6038 RCX: 00007f5545d46b97 [ 176.730482][ T8927] RDX: 00007f5545fe5fa0 RSI: 00007f5545fe5fa0 RDI: 00007f5545fe6038 [ 176.730496][ T8927] RBP: 0000000000000000 R08: 00007f5545fe5fa0 R09: 00007fffc78622f7 [ 176.730509][ T8927] R10: 0000000000000008 R11: 0000000000000246 R12: 00007f5545fe5fac [ 176.730521][ T8927] R13: 00007f5545fe5fa0 R14: 0000000000001067 R15: 0000000000000006 [ 176.730537][ T8927] [ 176.730693][ T8927] memory: usage 306096kB, limit 307200kB, failcnt 4149 [ 177.013416][ T36] audit: type=1326 audit(2016777536.568:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8989 comm="syz.2.2752" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe42ef8f6c9 code=0x0 [ 177.017803][ T8927] memory+swap: usage 272976kB, limit 9007199254740988kB, failcnt 0 [ 177.066048][ T8927] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 177.073001][ T8927] Memory cgroup stats for /syz7: [ 177.073116][ T8927] cache 278052864 [ 177.081809][ T8927] rss 204800 [ 177.085144][ T8927] rss_huge 0 [ 177.088339][ T8927] shmem 0 [ 177.091271][ T8927] mapped_file 0 [ 177.100513][ T8927] dirty 0 [ 177.103537][ T8927] writeback 0 [ 177.108968][ T8927] workingset_refault_anon 81 [ 177.116205][ T8927] workingset_refault_file 0 [ 177.120709][ T8927] swap 987136 [ 177.124449][ T8927] swapcached 303104 [ 177.128573][ T8927] pgpgin 194916 [ 177.132103][ T8927] pgpgout 127468 [ 177.135696][ T8927] pgfault 81356 [ 177.139145][ T8927] pgmajfault 38 [ 177.142698][ T8927] inactive_anon 0 [ 177.151779][ T8927] active_anon 307200 [ 177.155754][ T8927] inactive_file 0 [ 177.164051][ T8927] active_file 0 [ 177.167533][ T8927] unevictable 278052864 [ 177.171676][ T8927] hierarchical_memory_limit 314572800 [ 177.180231][ T8927] hierarchical_memsw_limit 9223372036854771712 [ 177.186528][ T8927] total_cache 278052864 [ 177.190800][ T8927] total_rss 204800 [ 177.194717][ T8927] total_rss_huge 0 [ 177.198488][ T8927] total_shmem 0 [ 177.202068][ T8927] total_mapped_file 0 [ 177.206043][ T8927] total_dirty 0 [ 177.209494][ T8927] total_writeback 0 [ 177.213357][ T8927] total_workingset_refault_anon 81 [ 177.218460][ T8927] total_workingset_refault_file 0 [ 177.223509][ T8927] total_swap 987136 [ 177.227323][ T8927] total_swapcached 303104 [ 177.231626][ T8927] total_pgpgin 194916 [ 177.235609][ T8927] total_pgpgout 127468 [ 177.239662][ T8927] total_pgfault 81356 [ 177.243664][ T8927] total_pgmajfault 38 [ 177.247631][ T8927] total_inactive_anon 0 [ 177.251758][ T8927] total_active_anon 307200 [ 177.256362][ T8927] total_inactive_file 0 [ 177.260562][ T8927] total_active_file 0 [ 177.264654][ T8927] total_unevictable 278052864 [ 177.269352][ T8927] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.2714,pid=8885,uid=0 [ 177.284282][ T8927] Memory cgroup out of memory: Killed process 8885 (syz.7.2714) total-vm:90296kB, anon-rss:1144kB, file-rss:57676kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:0 [ 177.314840][ T9000] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 177.314864][ T9000] rust_binder: Error while translating object. [ 177.332169][ T9000] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 177.338518][ T9000] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:307 [ 177.845825][ T9023] traps: syz.4.2763[9023] attempts to use CLI/STI, pretending it's a NOP, ip:200000000002 [ 178.022879][ T9030] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2766'. [ 178.272056][ T65] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 178.304397][ T9032] netlink: 288 bytes leftover after parsing attributes in process `syz.7.2767'. [ 178.422041][ T65] usb 2-1: Using ep0 maxpacket: 16 [ 178.422636][ T9050] netlink: 'syz.2.2773': attribute type 30 has an invalid length. [ 178.437754][ T9052] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2774'. [ 178.446923][ T9030] netlink: 'syz.1.2766': attribute type 12 has an invalid length. [ 178.518257][ T65] usb 2-1: unable to get BOS descriptor or descriptor too short [ 178.529362][ T36] audit: type=1400 audit(2016777538.088:865): avc: denied { read } for pid=9051 comm="syz.7.2774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 178.558217][ T65] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 178.572660][ T65] usb 2-1: can't read configurations, error -71 [ 179.124163][ T36] audit: type=1400 audit(2016777538.678:866): avc: denied { create } for pid=9065 comm="syz.1.2778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 179.124673][ T9066] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 179.144522][ T9066] rust_binder: Error while translating object. [ 179.153209][ T9066] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 179.159402][ T9066] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:316 [ 179.210850][ T36] audit: type=1400 audit(2016777538.758:867): avc: denied { setcheckreqprot } for pid=9069 comm="syz.1.2780" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 180.060955][ T9075] netlink: 'syz.1.2782': attribute type 2 has an invalid length. [ 180.068801][ T9075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2782'. [ 180.083649][ T9075] rust_binder: Error while translating object. [ 180.083698][ T9075] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 180.089885][ T9075] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:323 [ 180.142382][ T36] audit: type=1400 audit(2016777539.698:868): avc: denied { ioctl } for pid=9081 comm="syz.1.2784" path="socket:[33478]" dev="sockfs" ino=33478 ioctlcmd=0xaa06 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 180.172961][ T9091] rust_binder: validate_parent_fixup: new_min_offset=41, sg_entry.length=0 [ 180.177388][ T9091] rust_binder: Error while translating object. [ 180.186078][ T9091] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 180.192261][ T9091] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:327 [ 180.336052][ T36] audit: type=1400 audit(2016777539.888:869): avc: denied { listen } for pid=9086 comm="syz.7.2786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 180.613417][ T9105] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2791'. [ 180.684375][ T9114] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2794'. [ 180.693848][ T9116] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.693963][ T9114] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false [ 180.942097][ T503] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 181.023783][ T9127] netlink: 4432 bytes leftover after parsing attributes in process `syz.7.2797'. [ 181.102035][ T503] usb 2-1: Using ep0 maxpacket: 32 [ 181.108250][ T503] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 181.116631][ T503] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 181.125263][ T503] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 181.134246][ T503] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 181.143918][ T503] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 181.153819][ T503] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 181.167054][ T503] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 181.176249][ T503] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.185076][ T503] usb 2-1: config 0 descriptor?? [ 181.391355][ T503] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 181.403662][ T503] usb 2-1: USB disconnect, device number 22 [ 181.410270][ T503] usblp0: removed [ 181.492681][ T9153] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2804'. [ 181.568503][ T9160] 9pnet_fd: p9_fd_create_unix (9160): problem connecting socket: ./file0: -111 [ 181.822155][ T503] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 181.972052][ T503] usb 2-1: Using ep0 maxpacket: 32 [ 181.978265][ T503] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 181.986659][ T503] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 181.995313][ T503] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 182.004751][ T503] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 182.014413][ T503] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 182.024110][ T503] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 182.037091][ T503] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 182.046154][ T503] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.054692][ T503] usb 2-1: config 0 descriptor?? [ 182.098126][ T9178] netlink: 'syz.7.2813': attribute type 6 has an invalid length. [ 182.105967][ T9178] netlink: 'syz.7.2813': attribute type 4 has an invalid length. [ 182.113774][ T9178] netlink: 'syz.7.2813': attribute type 6 has an invalid length. [ 182.121505][ T9178] netlink: 5944 bytes leftover after parsing attributes in process `syz.7.2813'. [ 182.261845][ T9114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.262986][ T9188] SELinux: Context system_u:object_r:var_lock_t:s0 is not valid (left unmapped). [ 182.278100][ T9114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.279622][ T503] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 182.299401][ T36] audit: type=1400 audit(2016777541.858:870): avc: denied { relabelto } for pid=9186 comm="syz.7.2816" name="NETLINK" dev="sockfs" ino=32691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:var_lock_t:s0" [ 182.318928][ T503] usb 2-1: USB disconnect, device number 23 [ 182.355401][ T9197] fuse: Bad value for 'group_id' [ 182.357044][ T503] usblp0: removed [ 182.377274][ T9197] fuse: Bad value for 'group_id' [ 182.390952][ T9197] rust_binder: Write failure EFAULT in pid:354 [ 182.410731][ T36] audit: type=1400 audit(2016777541.958:871): avc: denied { read write } for pid=9214 comm="syz.1.2826" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 182.445942][ T36] audit: type=1400 audit(2016777541.958:872): avc: denied { open } for pid=9214 comm="syz.1.2826" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 182.474706][ T36] audit: type=1400 audit(2016777541.988:873): avc: denied { map } for pid=9214 comm="syz.1.2826" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 182.493914][ T9226] overlayfs: failed to clone upperpath [ 182.577312][ T9232] netlink: 1155 bytes leftover after parsing attributes in process `syz.2.2832'. [ 182.578147][ T9243] netlink: 'syz.4.2836': attribute type 11 has an invalid length. [ 182.682941][ T9269] overlayfs: cannot append lower layer [ 182.693112][ T9269] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 183.087252][ T9294] netlink: 'syz.7.2855': attribute type 4 has an invalid length. [ 183.106032][ T36] audit: type=1400 audit(2016777542.658:874): avc: denied { sys_module } for pid=9293 comm="syz.7.2855" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 183.142050][ T2159] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 183.293054][ T2159] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 183.301338][ T2159] usb 2-1: config 179 has no interface number 0 [ 183.307721][ T2159] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 183.318874][ T2159] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 183.328928][ T2159] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 183.340206][ T2159] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 183.351370][ T2159] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 183.364632][ T2159] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 183.373707][ T2159] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.382532][ T9282] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 183.392613][ T2159] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 183.402946][ T2159] xpad 2-1:179.65: probe with driver xpad failed with error -5 [ 183.592168][ T2159] usb 2-1: USB disconnect, device number 24 [ 183.653680][ T9322] overlayfs: failed to clone lowerpath [ 183.653713][ T9323] overlayfs: failed to clone upperpath [ 183.690197][ T9329] overlayfs: unescaped trailing colons in lowerdir mount option. [ 184.124086][ T9423] binder: Bad value for 'stats' [ 184.179984][ T9430] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 184.199690][ T9430] rust_binder: Write failure EINVAL in pid:376 [ 184.213170][ T9437] netlink: 'syz.1.2877': attribute type 12 has an invalid length. [ 184.243289][ T9437] netlink: 'syz.1.2877': attribute type 12 has an invalid length. [ 184.723256][ T9472] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=9472 comm=syz.4.2884 [ 184.736433][ T9472] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=9472 comm=syz.4.2884 [ 184.817794][ T9483] overlayfs: failed to clone lowerpath [ 184.836465][ T9485] overlayfs: failed to clone upperpath [ 184.842559][ T9485] overlayfs: missing 'workdir' [ 184.930947][ T9489] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2892'. [ 184.940145][ T9489] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2892'. [ 184.949292][ T9489] netlink: 'syz.4.2892': attribute type 6 has an invalid length. [ 184.957156][ T9489] netlink: 'syz.4.2892': attribute type 5 has an invalid length. [ 184.965150][ T9489] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2892'. [ 185.055726][ T36] audit: type=1326 audit(2016777544.608:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9495 comm="syz.7.2895" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5545d8f6c9 code=0x0 [ 185.558069][ T9524] overlay: Bad value for 'verity' [ 185.713450][ T9543] netlink: 'syz.2.2912': attribute type 17 has an invalid length. [ 185.855084][ T9562] /dev/loop0: Can't lookup blockdev [ 185.936411][ T9572] netlink: 'syz.7.2922': attribute type 4 has an invalid length. [ 186.030328][ T36] audit: type=1400 audit(2016777545.578:876): avc: denied { create } for pid=9599 comm="syz.7.2932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 186.030348][ T9600] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2932'. [ 186.307621][ T9624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2938'. [ 186.591784][ T9634] netlink: 393 bytes leftover after parsing attributes in process `syz.4.2942'. [ 186.873827][ T9642] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.881021][ T9642] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.109594][ T36] audit: type=1400 audit(2016777546.658:877): avc: denied { create } for pid=9673 comm="syz.4.2957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 187.209505][ T9680] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2960'. [ 187.490479][ T9708] fuse: Unknown parameter 'zECm8vvX3Ȩjˡ43*Zkf22[<0pʖ5]$O3lOu0xffffffffffffffff' [ 187.504794][ T9708] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 187.514588][ T36] audit: type=1400 audit(2016777547.078:878): avc: denied { relabelto } for pid=9707 comm="syz.1.2970" name="cgroup" dev="tmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 187.541813][ T36] audit: type=1400 audit(2016777547.078:879): avc: denied { associate } for pid=9707 comm="syz.1.2970" name="cgroup" dev="tmpfs" ino=714 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_log_t:s0" [ 187.569419][ T36] audit: type=1400 audit(2016777547.078:880): avc: denied { unlink } for pid=6874 comm="syz-executor" name="cgroup" dev="tmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 187.640941][ T9739] overlayfs: failed to clone upperpath [ 187.699323][ T9753] validate_nla: 2 callbacks suppressed [ 187.699347][ T9753] netlink: 'syz.7.2986': attribute type 1 has an invalid length. [ 187.765577][ T9765] /dev/rnullb0: Can't lookup blockdev [ 187.844390][ T9792] 9pnet_fd: p9_fd_create_unix (9792): problem connecting socket: ./file0: -111 [ 187.854950][ T9794] 9pnet_fd: Insufficient options for proto=fd [ 188.100463][ T9827] netlink: 288 bytes leftover after parsing attributes in process `syz.4.3010'. [ 189.304300][ T9864] netlink: 140 bytes leftover after parsing attributes in process `syz.7.3023'. [ 189.725840][ T9880] 9pnet_fd: Insufficient options for proto=fd [ 189.877921][ T9905] /dev/rnullb0: Can't lookup blockdev [ 189.899257][ T9912] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9912 comm=syz.7.3041 [ 189.972218][ T9915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56315 sclass=netlink_route_socket pid=9915 comm=syz.7.3042 [ 190.277030][ T9922] fuseblk: Unknown parameter 'obj_user' [ 190.510696][ T9964] fuse: Unknown parameter 'goup_id' [ 190.545210][ T36] audit: type=1400 audit(2016777550.098:881): avc: denied { mounton } for pid=9968 comm="syz.1.3062" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 191.035002][ T9999] netlink: 'syz.4.3070': attribute type 16 has an invalid length. [ 191.042927][ T9999] netlink: 64122 bytes leftover after parsing attributes in process `syz.4.3070'. [ 191.095984][T10014] 9pnet_fd: Insufficient options for proto=fd [ 191.110448][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.116734][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.122973][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.129136][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.135355][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.141483][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.147647][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.153809][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.159924][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.166391][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.172619][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.178746][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.184968][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.191104][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.197397][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.203567][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.209689][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.215883][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.222067][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.228179][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.234343][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.240466][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.246651][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.252811][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.258924][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.265099][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.271224][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.277451][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.283621][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.289776][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.295963][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.302219][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.308491][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.314670][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.320917][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.327133][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.333328][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.339458][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.345626][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.351776][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.358018][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.364179][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.370293][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.376462][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.382599][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.388749][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.394970][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.401143][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.407420][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.413701][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.419832][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.426030][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.432178][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.438322][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.444506][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.450873][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.457069][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.463325][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.469432][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.475607][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.481747][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.487947][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.494094][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.500201][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.506366][T10016] 9pnet_fd: Insufficient options for proto=fd [ 191.538026][T10028] overlayfs: failed to resolve 'upperdir=./file0': -2 [ 191.545534][T10028] overlayfs: failed to clone lowerpath [ 191.610094][T10034] tc_dump_action: action bad kind [ 191.638141][T10043] rust_binder: Error while translating object. [ 191.638170][T10043] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 191.644457][T10043] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:403 [ 191.703231][T10059] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=10059 comm=syz.2.3089 [ 191.728512][T10059] overlayfs: failed to clone upperpath [ 191.734848][T10059] fuse: Unknown parameter '0xffffffffffffffff' [ 191.758374][T10068] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3091'. [ 191.921889][T10081] netlink: 'syz.2.3097': attribute type 27 has an invalid length. [ 191.942592][T10081] veth0_vlan: left promiscuous mode [ 191.947973][T10081] veth0_vlan: entered promiscuous mode [ 191.954314][T10081] veth1_macvtap: left promiscuous mode [ 191.960313][T10081] veth1_macvtap: entered promiscuous mode [ 191.967173][ T9412] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.974252][ T9412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.982423][ T9412] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.989496][ T9412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.000646][T10081] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3097'. [ 192.031836][T10081] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3097'. [ 192.041572][T10081] tipc: Started in network mode [ 192.046587][T10081] tipc: Node identity ac14140f, cluster identity 4711 [ 192.053677][T10081] tipc: New replicast peer: 255.255.255.255 [ 192.059769][T10081] tipc: Enabled bearer , priority 10 [ 192.576915][T10123] netlink: 'syz.7.3112': attribute type 5 has an invalid length. [ 192.585509][T10123] tipc: Enabling of bearer rejected, failed to enable media [ 192.627701][ T36] audit: type=1326 audit(2016777552.178:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10135 comm="syz.2.3117" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe42ef8f6c9 code=0x0 [ 192.843910][T10159] overlayfs: empty lowerdir [ 193.007531][T10190] netlink: 'syz.1.3135': attribute type 1 has an invalid length. [ 193.015436][T10190] netlink: 'syz.1.3135': attribute type 3 has an invalid length. [ 193.027693][T10190] netlink: 296 bytes leftover after parsing attributes in process `syz.1.3135'. [ 193.172033][ T45] tipc: Node number set to 2886997007 [ 193.468624][ T9410] tipc: Subscription rejected, illegal request [ 193.571071][ T36] audit: type=1400 audit(2016777553.118:883): avc: denied { create } for pid=10242 comm="syz.2.3155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 193.619996][T10253] netlink: 'syz.2.3159': attribute type 1 has an invalid length. [ 193.627830][T10253] netlink: 'syz.2.3159': attribute type 3 has an invalid length. [ 193.635687][T10253] netlink: 296 bytes leftover after parsing attributes in process `syz.2.3159'. [ 193.905225][T10275] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3166'. [ 194.234893][T10281] futex_wake_op: syz.2.3169 tries to shift op by -1; fix this program [ 194.424558][ T36] audit: type=1400 audit(2016777553.978:884): avc: denied { write } for pid=10286 comm="syz.1.3172" name="/" dev="incremental-fs" ino=830 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 194.452881][T10289] /dev/rnullb0: Can't lookup blockdev [ 194.592124][T10297] /dev/rnullb0: Can't lookup blockdev [ 194.901271][ T36] audit: type=1400 audit(2016777554.448:885): avc: denied { setattr } for pid=10311 comm="syz.4.3182" name="CAN_RAW" dev="sockfs" ino=36146 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 194.928785][ T36] audit: type=1400 audit(2016777554.478:886): avc: denied { map } for pid=10313 comm="syz.4.3183" path="socket:[37157]" dev="sockfs" ino=37157 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 194.984416][T10330] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:454 [ 195.016603][T10344] overlayfs: failed to clone upperpath [ 195.081122][T10363] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=10363 comm=syz.4.3199 [ 195.081140][T10365] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3199'. [ 195.081157][T10365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3199'. [ 195.112267][T10365] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3199'. [ 195.121275][T10365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3199'. [ 195.242349][T10377] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 195.242354][T10378] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 195.560021][ T36] audit: type=1326 audit(2016777555.108:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10406 comm="syz.1.3211" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e21d8f6c9 code=0x0 [ 195.670171][T10412] netlink: 'syz.1.3212': attribute type 6 has an invalid length. [ 195.687335][T10414] /dev/rnullb0: Can't lookup blockdev [ 195.699723][T10418] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 4294967295 [ 195.707890][T10418] rust_binder: Write failure EINVAL in pid:478 [ 195.730972][T10425] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 195.763054][T10432] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 195.956539][T10465] 9pnet_fd: Insufficient options for proto=fd [ 196.045271][T10459] rust_binder: 512: no such ref 2 [ 196.101919][ T36] audit: type=1326 audit(2016777555.648:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="syz.2.3204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42ef8f6c9 code=0x7fc00000 [ 196.472108][T10487] overlay: Bad value for 'uuid' [ 196.484542][T10491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61464 sclass=netlink_route_socket pid=10491 comm=syz.7.3241 [ 196.563915][ T36] audit: type=1400 audit(2016777556.118:889): avc: denied { mounton } for pid=10494 comm="syz.1.3242" path="/" dev="configfs" ino=2423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 196.563923][T10495] fuse: Bad value for 'fd' [ 196.737422][T10512] rust_binder: 526: no such ref 3 [ 196.742942][T10512] rust_binder: inc_ref_done called when no active inc_refs [ 196.742969][T10512] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 196.757470][T10512] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:526 [ 196.760441][T10514] netlink: 'syz.2.3249': attribute type 4 has an invalid length. [ 196.777480][T10514] __nla_validate_parse: 66 callbacks suppressed [ 196.777504][T10514] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3249'. [ 196.793275][T10514] netlink: 'syz.2.3249': attribute type 1 has an invalid length. [ 196.800988][T10514] netlink: 'syz.2.3249': attribute type 2 has an invalid length. [ 197.686635][T10560] netlink: 'syz.4.3267': attribute type 1 has an invalid length. [ 197.902814][T10569] fuse: blksize only supported for fuseblk [ 198.431625][T10586] tipc: New replicast peer: 100.1.1.2 [ 198.437271][T10586] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=10586 comm=syz.2.3277 [ 198.458858][T10588] netlink: 'syz.2.3278': attribute type 1 has an invalid length. [ 198.466670][T10588] netlink: 'syz.2.3278': attribute type 3 has an invalid length. [ 198.474471][T10588] netlink: 296 bytes leftover after parsing attributes in process `syz.2.3278'. [ 198.932806][T10621] overlayfs: failed to clone lowerpath [ 198.936354][T10624] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 198.945512][T10624] rust_binder: Write failure EINVAL in pid:535 [ 198.961799][T10626] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 198.976696][T10626] rust_binder: Write failure EINVAL in pid:537 [ 198.981111][T10629] fuse: Bad value for 'group_id' [ 198.992307][T10629] fuse: Bad value for 'group_id' [ 199.536964][ T36] audit: type=1400 audit(2016777559.088:890): avc: denied { nlmsg_read } for pid=10651 comm="syz.4.3299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 200.026148][T10667] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 200.026174][T10667] rust_binder: Error in use_page_slow: EBUSY [ 200.036623][T10667] rust_binder: use_range failure EBUSY [ 200.042786][T10667] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 200.048311][T10667] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 200.056207][T10667] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:552 [ 200.074283][T10669] fuse: Bad value for 'fd' [ 200.090774][T10669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3305'. [ 200.670450][T10685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3312'. [ 200.818073][T10710] tc_dump_action: action bad kind [ 201.343761][ T36] audit: type=1400 audit(2016777816.899:891): avc: denied { lock } for pid=10718 comm="syz.1.3322" path="/dev/binderfs/binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 201.372449][T10721] 9pnet_fd: Insufficient options for proto=fd [ 201.890862][T10768] binder: Bad value for 'stats' [ 201.926255][T10768] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3341'. [ 201.994245][T10774] incfs: Options parsing error. -22 [ 201.999527][T10774] incfs: mount failed -22 [ 202.586092][T10787] incfs: Options parsing error. -22 [ 202.591362][T10787] incfs: mount failed -22 [ 202.663441][T10793] tipc: Enabling of bearer rejected, failed to enable media [ 202.746141][T10797] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3353'. [ 203.180726][T10814] cgroup: Name too long [ 203.194274][T10817] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3360'. [ 203.217816][T10821] rust_binder: Write failure EFAULT in pid:610 [ 203.244291][T10828] overlay: ./bus is not a directory [ 203.256395][T10828] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 203.263617][T10828] IPv6: NLM_F_CREATE should be set when creating new route [ 203.270810][T10828] IPv6: NLM_F_CREATE should be set when creating new route [ 203.448079][T10861] netlink: 'syz.2.3377': attribute type 5 has an invalid length. [ 203.458995][T10861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3377'. [ 203.501484][T10875] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3384'. [ 203.742299][T10904] tipc: Can't bind to reserved service type 2 [ 203.812512][T10924] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3400'. [ 203.819956][T10928] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 203.865494][T10944] netlink: 'syz.4.3407': attribute type 27 has an invalid length. [ 204.300325][ T36] audit: type=1326 audit(2016777819.849:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10968 comm="syz.2.3416" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe42ef8f6c9 code=0x0 [ 204.586162][T10977] rust_binder: Read failure Err(EAGAIN) in pid:631 [ 204.678641][T10992] netlink: 'syz.4.3424': attribute type 25 has an invalid length. [ 204.778215][T11008] netlink: 'syz.4.3428': attribute type 16 has an invalid length. [ 204.786076][T11008] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.3428'. [ 205.192110][T11053] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=11053 comm=syz.1.3441 [ 205.222997][T11058] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:646 [ 205.289014][T11068] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3445'. [ 205.307623][T11068] netlink: 'syz.2.3445': attribute type 6 has an invalid length. [ 205.315498][T11068] netlink: 'syz.2.3445': attribute type 5 has an invalid length. [ 205.323457][T11068] netlink: 'syz.2.3445': attribute type 4 has an invalid length. [ 205.326869][T11071] overlayfs: failed to clone lowerpath [ 205.484676][T11107] overlayfs: failed to clone upperpath [ 205.499081][T11112] overlayfs: failed to resolve '//>! [ 205.499081][T11112] %VflC˴TSRh'`pTYǼG1!5&4, priority 10 [ 213.418745][ T36] audit: type=1326 audit(2016777828.384:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11697 comm="syz.1.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e21d8f6c9 code=0x7ffc0000 [ 213.472164][ T36] audit: type=1326 audit(2016777828.384:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11697 comm="syz.1.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6e21d8f6c9 code=0x7ffc0000 [ 213.495697][ T36] audit: type=1326 audit(2016777828.384:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11697 comm="syz.1.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e21d8f6c9 code=0x7ffc0000 [ 213.520412][ T36] audit: type=1326 audit(2016777828.384:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11697 comm="syz.1.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6e21d8f6c9 code=0x7ffc0000 [ 213.544244][ T36] audit: type=1326 audit(2016777828.384:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11697 comm="syz.1.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e21d8f6c9 code=0x7ffc0000 [ 213.674458][T11701] 9pnet_fd: Insufficient options for proto=fd [ 213.685399][T11713] netlink: 'syz.7.3666': attribute type 15 has an invalid length. [ 213.693258][T11713] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3666'. [ 213.703322][T11714] netlink: 'syz.7.3666': attribute type 15 has an invalid length. [ 213.711168][T11714] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3666'. [ 213.720489][T11712] netlink: 'syz.7.3666': attribute type 1 has an invalid length. [ 213.728279][T11712] netlink: 'syz.7.3666': attribute type 2 has an invalid length. [ 213.736260][T11713] netlink: 'syz.7.3666': attribute type 1 has an invalid length. [ 213.744038][T11713] netlink: 'syz.7.3666': attribute type 2 has an invalid length. [ 213.800402][T11730] netlink: 'syz.7.3673': attribute type 1 has an invalid length. [ 213.808207][T11730] netlink: 'syz.7.3673': attribute type 3 has an invalid length. [ 213.816124][T11730] netlink: 296 bytes leftover after parsing attributes in process `syz.7.3673'. [ 214.319887][T11807] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 214.374767][T11808] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 214.604553][ T7838] tipc: Node number set to 2886997007 [ 215.104892][T11842] 9p: Unknown Cache mode or invalid value lkose [ 216.210386][T11912] dev/rnullb0: Can't lookup blockdev [ 216.450954][T11924] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3737'. [ 216.553490][T11944] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 216.560533][T11944] overlayfs: failed to set xattr on upper [ 216.567701][T11944] overlayfs: ...falling back to uuid=null. [ 217.511595][T11987] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3758'. [ 217.542605][T11997] /dev/rnullb0: Can't lookup blockdev [ 217.559697][T12007] rust_binder: Write failure EFAULT in pid:786 [ 217.561557][T12005] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3763'. [ 217.763958][T12033] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 217.771402][T12033] rust_binder: Write failure EINVAL in pid:790 [ 218.490951][T12069] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.3785'. [ 218.507865][T12069] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 218.519567][T12069] overlayfs: missing 'lowerdir' [ 218.536823][T12074] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=30 sclass=netlink_tcpdiag_socket pid=12074 comm=syz.1.3786 [ 218.538488][T12078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3787'. [ 218.553910][T12074] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 218.558530][T12074] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:799 [ 218.582678][T12090] overlayfs: failed to clone lowerpath [ 218.626776][T12101] No source specified [ 218.672808][T12113] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3800'. [ 218.699930][T12093] rust_binder: Write failure EFAULT in pid:806 [ 218.801573][ T36] kauditd_printk_skb: 259 callbacks suppressed [ 218.801592][ T36] audit: type=1107 audit(2016777833.488:1201): pid=12138 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 219.227426][ T36] audit: type=1326 audit(2016777833.892:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12149 comm="syz.2.3813" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe42ef8f6c9 code=0x0 [ 219.342229][ T36] audit: type=1400 audit(2016777833.920:1203): avc: denied { create } for pid=12151 comm="syz.1.3814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 219.822890][T12172] netlink: 684 bytes leftover after parsing attributes in process `syz.4.3820'. [ 220.343495][T12203] fuse: Bad value for 'fd' [ 220.385616][ T36] audit: type=1400 audit(2016777834.980:1204): avc: denied { listen } for pid=12211 comm="syz.4.3837" path=2F3338372FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 220.403236][T12218] validate_nla: 1 callbacks suppressed [ 220.403255][T12218] netlink: 'syz.4.3838': attribute type 58 has an invalid length. [ 220.415389][ T36] audit: type=1400 audit(2016777834.980:1205): avc: denied { accept } for pid=12211 comm="syz.4.3837" path=2F3338372FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 220.476721][T12233] lo: MTU too low for tipc bearer [ 220.481877][T12233] tipc: Enabling of bearer rejected, failed to enable media [ 220.510561][T12243] netlink: 'syz.4.3847': attribute type 46 has an invalid length. [ 220.826991][T12288] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370 [ 220.913654][T12299] mmap: syz.4.3865 (12299): VmData 29081600 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 220.957591][T12306] netlink: 'syz.4.3867': attribute type 1 has an invalid length. [ 221.252011][T12325] rust_binder: Failed copying remainder into alloc: EFAULT [ 221.252027][T12325] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 221.259328][T12325] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 221.267645][T12325] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:819 [ 221.435803][T12334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3879'. [ 221.453875][T12334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3879'. [ 221.654875][T12369] overlay: filesystem on ./bus not supported as upperdir [ 221.742350][T12387] netlink: 'syz.7.3899': attribute type 19 has an invalid length. [ 222.482060][T12408] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3905'. [ 222.492643][T12408] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3905'. [ 222.528168][ T36] audit: type=1400 audit(2016777836.988:1206): avc: denied { shutdown } for pid=12413 comm="syz.4.3908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 222.544737][T12419] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3909'. [ 223.066384][T12426] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 223.066671][T12426] rust_binder: Failed to allocate buffer. len:1136, is_oneway:false [ 223.159253][T12447] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 223.167657][T12447] rust_binder: Failed to allocate buffer. len:1184, is_oneway:true [ 223.186612][T12449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 223.245507][T12455] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12455 comm=syz.4.3924 [ 223.253671][T12456] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 223.326833][T12462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 223.335235][T12462] rust_binder: Failed to allocate buffer. len:1184, is_oneway:true [ 223.389413][T12472] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 223.917343][T12477] fuse: Bad value for 'user_id' [ 223.928724][T12477] fuse: Bad value for 'user_id' [ 223.955403][T12486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 223.956424][T12486] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 223.978445][ T36] audit: type=1400 audit(2016777838.349:1207): avc: denied { link } for pid=12487 comm="syz.1.3936" name="#1f" dev="tmpfs" ino=1643 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 224.011230][T12489] rust_binder: Error while translating object. [ 224.011280][T12489] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 224.017547][T12489] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:881 [ 224.062324][ T36] audit: type=1400 audit(2016777838.349:1208): avc: denied { rename } for pid=12487 comm="syz.1.3936" name="#20" dev="tmpfs" ino=1643 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 224.080016][T12075] ------------[ cut here ]------------ [ 224.094201][ T36] audit: type=1400 audit(2016777838.387:1209): avc: denied { setattr } for pid=12487 comm="syz.1.3936" name="file0" dev="incremental-fs" ino=1644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 224.099504][T12075] WARNING: CPU: 0 PID: 12075 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 224.132686][T12075] Modules linked in: [ 224.136600][T12075] CPU: 0 UID: 0 PID: 12075 Comm: syz.1.3786 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 224.148261][T12075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 224.158405][T12075] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 224.164174][T12075] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ae 48 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 97 4c 03 cc e8 16 db 42 ff <0f> 0b e9 3e ff ff ff e8 0a db 42 ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 224.183910][T12075] RSP: 0018:ffffc9000dd2f768 EFLAGS: 00010293 [ 224.190026][T12075] RAX: ffffffff8243239a RBX: 0000000000000000 RCX: ffff888124771300 [ 224.198109][T12075] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 224.206113][T12075] RBP: ffffc9000dd2f790 R08: ffff88814a3d4f3f R09: 1ffff1102947a9e7 [ 224.214129][T12075] R10: dffffc0000000000 R11: ffffed102947a9e8 R12: 0000000000000000 [ 224.222262][T12075] R13: dffffc0000000000 R14: ffff88814a3d4ea0 R15: ffff888144077000 [ 224.230306][T12075] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 224.239260][T12075] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 224.245853][T12075] CR2: 00002000000013c0 CR3: 0000000121204000 CR4: 00000000003526b0 [ 224.253882][T12075] DR0: 0000000000000074 DR1: 0000000000200004 DR2: 0800000100000000 [ 224.262670][T12075] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 224.270771][T12075] Call Trace: [ 224.274058][T12075] [ 224.276990][T12075] ovl_do_remove+0x7b8/0xcf0 [ 224.281653][T12075] ? ovl_set_redirect+0x780/0x780 [ 224.286692][T12075] ? down_write+0xe9/0x2a0 [ 224.291115][T12075] ? __cfi_down_write+0x10/0x10 [ 224.296003][T12075] ovl_rmdir+0x1e/0x30 [ 224.300076][T12075] vfs_rmdir+0x3dd/0x560 [ 224.304355][T12075] incfs_kill_sb+0x109/0x230 [ 224.308954][T12075] deactivate_locked_super+0xd5/0x2a0 [ 224.314369][T12075] deactivate_super+0xb8/0xe0 [ 224.319052][T12075] cleanup_mnt+0x3f1/0x480 [ 224.323482][T12075] __cleanup_mnt+0x1d/0x40 [ 224.327931][T12075] task_work_run+0x1e0/0x250 [ 224.332526][T12075] ? __cfi_task_work_run+0x10/0x10 [ 224.337672][T12075] ? free_nsproxy+0x223/0x290 [ 224.342354][T12075] do_exit+0x9bc/0x2630 [ 224.346546][T12075] ? __sched_text_start+0x10/0x10 [ 224.351590][T12075] ? __cfi_do_exit+0x10/0x10 [ 224.356236][T12075] ? __kasan_check_write+0x18/0x20 [ 224.361367][T12075] ? _raw_spin_lock_irq+0x8d/0x120 [ 224.366491][T12075] ? __kasan_check_read+0x15/0x20 [ 224.371552][T12075] ? cgroup_update_frozen+0x160/0x990 [ 224.377025][T12075] do_group_exit+0x22a/0x300 [ 224.381664][T12075] ? cgroup_leave_frozen+0x16c/0x2b0 [ 224.386953][T12075] get_signal+0x139d/0x14f0 [ 224.391497][T12075] arch_do_signal_or_restart+0x96/0x720 [ 224.397049][T12075] ? common_nsleep+0x93/0xb0 [ 224.401673][T12075] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 224.407834][T12075] ? __se_sys_clock_nanosleep+0x2fd/0x390 [ 224.413602][T12075] ? __kasan_check_read+0x15/0x20 [ 224.418648][T12075] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 224.424761][T12075] syscall_exit_to_user_mode+0x58/0xb0 [ 224.430235][T12075] do_syscall_64+0x64/0xf0 [ 224.434694][T12075] ? clear_bhb_loop+0x50/0xa0 [ 224.439372][T12075] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 224.445299][T12075] RIP: f0df:0x9ade3b5fcbc7f515 [ 224.450067][T12075] Code: Unable to access opcode bytes at 0x9ade3b5fcbc7f4eb. [ 224.457667][T12075] RSP: 000b:ef1a4a14bea5489e EFLAGS: 00050f47 ORIG_RAX: 28f5d0669e63ef2d [ 224.466228][T12075] RAX: b4479265aea11ea0 RBX: c4d7cfc1cfb8fa39 RCX: d58af6dd852ac5bf [ 224.474222][T12075] RDX: 8d6f5a4031d65101 RSI: ff4dd0ac2272ad10 RDI: 826f04d17a53db6c [ 224.482189][T12075] RBP: 7a62a17fc0673791 R08: a9b7dd6a329c7eb9 R09: 3611b8ee2ae2943c [ 224.490177][T12075] R10: 2e5d0286e8a92051 R11: 42c1d6567a18f68c R12: 3e91493a4aeb0fdd [ 224.498257][T12075] R13: 21068466b382b223 R14: 0395461d403a0691 R15: f6eee41c95dd6d7b [ 224.506271][T12075] [ 224.509285][T12075] ---[ end trace 0000000000000000 ]--- [ 224.515194][T12075] ------------[ cut here ]------------ [ 224.520712][T12075] WARNING: CPU: 0 PID: 12075 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 224.530211][T12075] Modules linked in: [ 224.534326][T12075] CPU: 0 UID: 0 PID: 12075 Comm: syz.1.3786 Tainted: G W syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 224.547447][T12075] Tainted: [W]=WARN [ 224.551256][T12075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 224.561343][T12075] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 224.567071][T12075] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ae 48 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 97 4c 03 cc e8 16 db 42 ff <0f> 0b e9 3e ff ff ff e8 0a db 42 ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 224.586716][T12075] RSP: 0018:ffffc9000dd2f768 EFLAGS: 00010293 [ 224.592810][T12075] RAX: ffffffff8243239a RBX: 0000000000000000 RCX: ffff888124771300 [ 224.600791][T12075] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 224.608792][T12075] RBP: ffffc9000dd2f790 R08: ffff88814a3d4f3f R09: 1ffff1102947a9e7 [ 224.616798][T12075] R10: dffffc0000000000 R11: ffffed102947a9e8 R12: 0000000000000000 [ 224.624887][T12075] R13: dffffc0000000000 R14: ffff88814a3d4ea0 R15: ffff888144077000 [ 224.632871][T12075] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 224.641846][T12075] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 224.648476][T12075] CR2: 00002000000013c0 CR3: 0000000121204000 CR4: 00000000003526b0 [ 224.656492][T12075] DR0: 0000000000000074 DR1: 0000000000200004 DR2: 0800000100000000 [ 224.664554][T12075] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 224.672541][T12075] Call Trace: [ 224.675843][T12075] [ 224.678792][T12075] ovl_do_remove+0x7b8/0xcf0 [ 224.683380][T12075] ? ovl_set_redirect+0x780/0x780 [ 224.688476][T12075] ? down_write+0xe9/0x2a0 [ 224.692893][T12075] ? __cfi_down_write+0x10/0x10 [ 224.697763][T12075] ovl_rmdir+0x1e/0x30 [ 224.701860][T12075] vfs_rmdir+0x3dd/0x560 [ 224.706119][T12075] incfs_kill_sb+0x1a0/0x230 [ 224.710739][T12075] deactivate_locked_super+0xd5/0x2a0 [ 224.716200][T12075] deactivate_super+0xb8/0xe0 [ 224.720906][T12075] cleanup_mnt+0x3f1/0x480 [ 224.725319][T12075] __cleanup_mnt+0x1d/0x40 [ 224.729746][T12075] task_work_run+0x1e0/0x250 [ 224.734335][T12075] ? __cfi_task_work_run+0x10/0x10 [ 224.739434][T12075] ? free_nsproxy+0x223/0x290 [ 224.744135][T12075] do_exit+0x9bc/0x2630 [ 224.748292][T12075] ? __sched_text_start+0x10/0x10 [ 224.753352][T12075] ? __cfi_do_exit+0x10/0x10 [ 224.757951][T12075] ? __kasan_check_write+0x18/0x20 [ 224.763175][T12075] ? _raw_spin_lock_irq+0x8d/0x120 [ 224.768294][T12075] ? __kasan_check_read+0x15/0x20 [ 224.773359][T12075] ? cgroup_update_frozen+0x160/0x990 [ 224.778736][T12075] do_group_exit+0x22a/0x300 [ 224.783346][T12075] ? cgroup_leave_frozen+0x16c/0x2b0 [ 224.788635][T12075] get_signal+0x139d/0x14f0 [ 224.793231][T12075] arch_do_signal_or_restart+0x96/0x720 [ 224.798822][T12075] ? common_nsleep+0x93/0xb0 [ 224.803405][T12075] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 224.809580][T12075] ? __se_sys_clock_nanosleep+0x2fd/0x390 [ 224.815352][T12075] ? __kasan_check_read+0x15/0x20 [ 224.820481][T12075] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 224.826604][T12075] syscall_exit_to_user_mode+0x58/0xb0 [ 224.832105][T12075] do_syscall_64+0x64/0xf0 [ 224.836552][T12075] ? clear_bhb_loop+0x50/0xa0 [ 224.841240][T12075] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 224.847147][T12075] RIP: f0df:0x9ade3b5fcbc7f515 [ 224.851909][T12075] Code: Unable to access opcode bytes at 0x9ade3b5fcbc7f4eb. [ 224.859293][T12075] RSP: 000b:ef1a4a14bea5489e EFLAGS: 00050f47 ORIG_RAX: 28f5d0669e63ef2d [ 224.867748][T12075] RAX: b4479265aea11ea0 RBX: c4d7cfc1cfb8fa39 RCX: d58af6dd852ac5bf [ 224.875716][T12075] RDX: 8d6f5a4031d65101 RSI: ff4dd0ac2272ad10 RDI: 826f04d17a53db6c [ 224.883703][T12075] RBP: 7a62a17fc0673791 R08: a9b7dd6a329c7eb9 R09: 3611b8ee2ae2943c [ 224.891703][T12075] R10: 2e5d0286e8a92051 R11: 42c1d6567a18f68c R12: 3e91493a4aeb0fdd [ 224.899715][T12075] R13: 21068466b382b223 R14: 0395461d403a0691 R15: f6eee41c95dd6d7b [ 224.907690][T12075] [ 224.910846][T12075] ---[ end trace 0000000000000000 ]--- [ 225.156773][ T9410] bridge_slave_1: left allmulticast mode [ 225.162541][ T9410] bridge_slave_1: left promiscuous mode [ 225.168181][ T9410] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.175693][ T9410] bridge_slave_0: left allmulticast mode [ 225.181624][ T9410] bridge_slave_0: left promiscuous mode [ 225.187391][ T9410] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.307722][ T9410] tipc: Disabling bearer [ 225.313090][ T9410] tipc: Left network mode