last executing test programs: 45.540659763s ago: executing program 1 (id=2173): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000240)="390000001300034700ab65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000080)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c504}, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000847000/0x1000)=nil, 0x1000}, 0x1}) close_range(r0, r2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80501, 0x0) ppoll(&(0x7f0000000300)=[{r5, 0x4100}], 0x1, &(0x7f0000000280)={0x0, 0x3938700}, &(0x7f00000002c0)={[0xeed]}, 0xfffffffffffffe6c) r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket(0x1, 0x5, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, 0x0) ioctl$PPPIOCGMRU(r7, 0x80047453, 0x0) syz_usb_connect$uac1(0x3, 0x94, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000086b1d01014000010203010902820003017f90070904000000010100000a2401040a240403ffa5e2de521c09040100000102000009040101010102000009050109400008f80207250182000000090402000001020000090402"], 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) write$FUSE_INIT(r5, 0x0, 0x0) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000000)={0x60, 0x1, &(0x7f0000847000/0x2000)=nil, &(0x7f0000848000/0x1000)=nil, 0x100000000, &(0x7f0000000100)=[{0x5, 0x7fff}, {0xbd, 0x12c, 0xf}, {0x0, 0x9, 0x68d5d142}, {0x9, 0x8}, {0xfb1, 0x934, 0x4}, {0x5, 0xe, 0x8}], 0x6, 0x8000, 0x4, 0x14, 0x28, 0x40}) 43.771994566s ago: executing program 1 (id=2187): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') prctl$PR_MCE_KILL(0x35, 0x0, 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000cc0), 0x0, 0x931766f6319eed40) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700", @ANYRESOCT=r3], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000140)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_TIOCOUTQ(r6, 0x5411, &(0x7f00000005c0)) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f000000e000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0xc, 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000fc0)=@newtaction={0x14, 0x31, 0x69b6754e5abcd1c9, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendfile(r1, r0, 0x0, 0x80000000) recvfrom(r1, &(0x7f0000000000)=""/41, 0x29, 0x60, &(0x7f0000000040)=@l2={0x1f, 0x6c, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7, 0x2}, 0x80) 42.885326354s ago: executing program 1 (id=2201): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x303}, "1289074bad06f49a", "2912f0b5557171d366f3d59e2f3fc3d4be0549392f6dd598440f82dcc8fc6e29", "a99c0525", "36810255e367ab84"}, 0x38) bind$packet(0xffffffffffffffff, &(0x7f0000000d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x85c) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x878e, 0x12a) r4 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x4c) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000240)="400f01cf35080000000fa2c0470fc75e82b9f60b0000b843d80000ba000000000f302e4263e6c4018859f70f675700660f38818c4b73745ade66baa100400f00d9ee6665660f50fbc4e35178ab00004b000050", 0x53}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket(0x1e, 0x4, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0), 0x0, 0x0) ioctl$HIDIOCGREPORT(r3, 0x400c4807, &(0x7f00000000c0)={0x3, 0xffffffff, 0xb7}) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDELRT(r10, 0x890c, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x4, 0xff, 0x200, 0x400, 0xe, 0x100000}) fcntl$lock(r4, 0x9, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x269010003, 0xffffffffffffffff}) r11 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) dup(r8) 42.755391106s ago: executing program 1 (id=2204): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000080)=@sg0, 0x0, 0x0, 0x200000, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) modify_ldt$write(0x1, &(0x7f0000000900)={0xea, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$cgroup2(0x0, 0x0, 0x0, 0x81, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800f3de1300e999000000000100000000000000000000000000000010000000ac1414bb00000000000000000000000000002400100000000200002084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000070d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000002000001000300000000"], 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100010002000000000000000a00000000000001016200000c0018"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 42.753930516s ago: executing program 1 (id=2205): read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002040), 0x100, 0x0) write$FUSE_ATTR(r3, &(0x7f0000002080)={0x78, 0x0, r0, {0x7, 0x2, 0x0, {0x1, 0x7f80000, 0x6f, 0x100000000, 0x9, 0x2, 0x7, 0xb27a, 0x0, 0x8000, 0x8, r1, r2, 0x81, 0xb}}}, 0x78) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x541c, &(0x7f0000002100)) (async) ioctl$TCGETA(r3, 0x5405, &(0x7f0000002140)) (async) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000002180)) (async) quotactl_fd$Q_SETINFO(r3, 0xffffffff80000601, r1, &(0x7f00000021c0)={0xa48, 0x40, 0x1, 0x6}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002240), r3) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000002300)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x14, r4, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x10008051) r5 = fcntl$dupfd(r3, 0x0, r3) (async, rerun: 32) r6 = socket$inet6(0xa, 0x80000, 0x3) (rerun: 32) r7 = pidfd_getfd(r5, r6, 0x0) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000002340)={0x1d, 0x14, 0x0, 0x2, 0x0, [@remote, @empty, @mcast1, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote]}, 0xa8) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000002480)={{{@in6=@private2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f0000002580)=0xe8) (async) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000025c0)={0x0, 0x0}, &(0x7f0000002600)=0xc) mount$fuse(0x0, &(0x7f0000002400)='./file0\x00', &(0x7f0000002440), 0x2003400, &(0x7f0000002640)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x1}}, {@max_read={'max_read', 0x3d, 0xfa}}], [{@uid_gt={'uid>', r8}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@uid_gt={'uid>', r9}}, {@obj_type}, {@uid_gt={'uid>', r1}}, {@fowner_lt={'fowner<', r1}}]}}) (async) r10 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000027c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x250, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x10, 0x2, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x447}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x620, 0x8, 0x7, 0x2}}]}}}]}}]}}, &(0x7f0000002cc0)={0xa, &(0x7f0000002800)={0xa, 0x6, 0x0, 0x5, 0x9, 0x80, 0xff, 0xd8}, 0x46, &(0x7f0000002840)={0x5, 0xf, 0x46, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0x2, 0xf00, 0x1, [0x3f0f, 0xc0c0, 0x7, 0xc0, 0xff0000, 0x47]}, @ssp_cap={0x10, 0x10, 0xa, 0xc, 0x1, 0xad, 0xf00, 0x9, [0x3ff0]}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x6, 0x0, 0x1}]}, 0x9, [{0x4, &(0x7f00000028c0)=@lang_id={0x4, 0x3, 0x400a}}, {0xaf, &(0x7f0000002900)=@string={0xaf, 0x3, "543f568ab8837d8b56adb179496df5b76eb0a1960de4e5649a588ef07a6d55a9b1d75bc33a920f1e1ce4b6ade5336635ac4c298c53ee312efac2d9605eb3e46082ebf077acd7bb0b51113d7db3f9533223a8d64ef14efefa2a92b02613e3eeb246866e82c47cdeb90ce524d66ecb1149903dd71bf66f91ad3890e736e786aa3d363748c98d45d37bb3e84c86fcfd7f7620292878e8e0b6e96e814879544d6c7e36daa0ff0f0e59943c0c88b3e0"}}, {0x4, &(0x7f00000029c0)=@lang_id={0x4, 0x3, 0x2c}}, {0x39, &(0x7f0000002a00)=@string={0x39, 0x3, "83a04a49b499955553018c1ab1f86bfed2d562b16efe83a93c4e94efeb273e45955aeb44fcfb989439d347f18296a4656032f2e5b24397"}}, {0x4, &(0x7f0000002a40)=@lang_id={0x4, 0x3, 0x100a}}, {0x68, &(0x7f0000002a80)=@string={0x68, 0x3, "9bbc09c576a5634ced97b9448aa4fb223ed9a880186adfd3cc107a84c34ae9e1bda50f71576cf69cbf91365e6e6a565b7cfcbe89caec58b500e1e5b2559164ee7993b1274fbf8544dd6fd4bcfd504172ee7f3913ab6c18248cd8b35c8e99df6ae96a98307c2a"}}, {0xce, &(0x7f0000002b00)=@string={0xce, 0x3, "9d26d9b0ad8c387cb8b02fc73d47ff7d70299eddba65c301ae1609e0b3a769d62f4a1ccfa361cfebdacd76e362eec78404fb747249210dfb685bf6c6337e77bb8c50275f63ecc134bd08e22d899ee73d6fc0c31c303c72b0c32df6f365253287ccd6950f868686766598d980fc6a32c6e8d4c625bc2e927192bf61d39b650131e9ee07ac6d2266d4ae4f1a2724ed0fd0ef0d34c2656beaa128db666dd8ef14ffc258d3c2a6e73b4fb56da0ed04f81d285a5a9fca0bfd22bf093dd180f5ac6027a573f9860aaa5bb560841668"}}, {0x59, &(0x7f0000002c00)=@string={0x59, 0x3, "6b191bf929143ab373613af10ae6ebf77e53d1ccabd90f4312c089c7aa99e62a1aad103da7cb2b72fdc46a581e926efacd6aca3f3b7577ce4ffccad5b92e80f49b46d8b10b71c6ca8bd7cd147eea2c33e4a6d6ea0746b9"}}, {0x4, &(0x7f0000002c80)=@lang_id={0x4, 0x3, 0x459}}]}) syz_usb_control_io$hid(r10, &(0x7f0000002f00)={0x24, &(0x7f0000002d80)={0x20, 0x22, 0x2a, {0x2a, 0x21, "a1c1d8371f1d4897125cfa638689765a915aaa3e97adcee6b03d137615c752600cb24eb85000f34c"}}, &(0x7f0000002dc0)={0x0, 0x3, 0xae, @string={0xae, 0x3, "87da9b0cb932090dcd584f14cc4ae04cc1cc836730465ef5ef4d351673277c2ee31b14ba4e9e6725e14d6d31752e438c27b0d7ce51846562c4195cfa355e6ab002485bc58ce6958038b8298785996907364357faaa430c530bc9ded28570773b552931faf517909a37cca00546f95d7faefd656104cbeeafc05f89462d9926a4d1bb336ef820cd07fc2e479519098866ec1497309f6fa5510c60e5a5d3f3152e492ceaa3e87e91b5b420f81b"}}, &(0x7f0000002e80)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0xb, "b02f"}]}}, &(0x7f0000002ec0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x42b, 0x4, 0x1, {0x22, 0x69b}}}}, &(0x7f0000003180)={0x2c, &(0x7f0000002f40)={0x20, 0x3, 0x53, "af9a46bb525237adaeb8541d66d1fe873201aa8c768dc48ffe9f2e8184ef443a076269ee423e520f52de7ddced960a66b74de1f84c51192e44723c044ed9b02e273bee9ac1c4aeb094086b2bbbd13f115b307f"}, &(0x7f0000002fc0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000003000)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000003040)={0x20, 0x1, 0xf5, "7e107116c597143d11488193008c0dbd63545d15277be392627ca506bf3fa0ed1e73e904a0751ee27f093110395c506544d24ad7bb2a63e4e41e3d07593275b4961485a39c0c355112ffb0152c492b6e08ff937cc1d0323050f490ade369974b86a9766ae531c08afa0e6f5d0a82a4ae11c59524f68d12485b7817bf5f7cae7c0b5510944f2f532ad06f02da43483ce1e68e48cf0bb5764a65b705e314e8c4ec2b634a4730f7c29d87eaf687daa621970a25ab70c91ba886bfe8a50c74ff0051a7574c47f210f33b755a36fbb501d2ee41bb56bc3d3b86c223b2d79e511f6981be09180b2d34612dccd1569acb3ccfe2d4b849e58f"}, &(0x7f0000003140)={0x20, 0x3, 0x1, 0x78}}) (async, rerun: 64) readahead(r7, 0x4, 0x8) (async, rerun: 64) r11 = openat$cgroup_ro(r7, &(0x7f00000031c0)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r6, 0x8030942b, &(0x7f0000003200)={0x80000001, {0x3, 0x7fffffffffffffff, 0x2, 0x9, 0x9}}) (async) read$FUSE(r5, &(0x7f0000003240)={0x2020}, 0x2020) (async) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f00000052c0)={0x2, &(0x7f0000005280)=[{0xc, 0x5, 0xb, 0xf}, {0x6, 0x6, 0x45, 0x7fff}]}, 0x10) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) r12 = openat$urandom(0xffffffffffffff9c, &(0x7f0000005300), 0x200000, 0x0) ppoll(&(0x7f0000005340)=[{r11, 0xdf62661083a573a7}, {r5, 0x4}, {r11, 0x4000}, {r6, 0x8004}, {r12, 0x9084}, {r11, 0x8040}, {r3, 0x4}, {r7, 0x100}, {r6, 0x101}, {r11, 0x600}], 0xa, &(0x7f00000053c0)={0x0, 0x3938700}, &(0x7f0000005400)={[0x9]}, 0x8) (async) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000005480), r5) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000005580)={&(0x7f0000005440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000005540)={&(0x7f00000054c0)={0x60, r13, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x14}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44}, 0x40) (async) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f00000055c0)={{0x91, 0x1}, {0x6, 0x6}, 0x4}) (async) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000005600)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x28, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x50, 0x1, [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x7, 0x1, 0x1, 0x7f, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x0, 0x6, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x6, 0xc}}]}}}]}}]}}, &(0x7f0000005a40)={0xa, &(0x7f0000005640)={0xa, 0x6, 0x250, 0x0, 0xc, 0xf, 0x8, 0xf0}, 0x27, &(0x7f0000005680)={0x5, 0xf, 0x27, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x5, 0x2, 0x101}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x5, 0x2, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "bd5379f2523594062fd86e9c2d710914"}]}, 0x8, [{0xa5, &(0x7f00000056c0)=@string={0xa5, 0x3, "d9b22e0fdc30c24c1836e9ea8b5a53387ea9bd4eed0df1de12b58c63597962fdd843230f7697eb2d5635b5caeb44d33421c282a0744204243e432a40fcda150d2b6a958ec4e9a2cfc6352a515a8ebf823b0fbb91bfa0a9fda466168410231b75039b4a93b6d0cb087d853302163d8a0ee42e7ab4f96438b2e7edf3c2a8ec86660df8070701d09bc1f1e5dca6a47a695c9a984aaad9d39dd6c7b04b3dae81ff212c10c5"}}, {0x14, &(0x7f0000005780)=@string={0x14, 0x3, "4edea65558286b7b5f18454a3a30ce1d6651"}}, {0x4, &(0x7f00000057c0)=@lang_id={0x4, 0x3, 0xc04}}, {0xbb, &(0x7f0000005800)=@string={0xbb, 0x3, "670e1181d6163970d42ca224297a432b3c211c47d744a71e0bb4687c5aed23841c5edb7703150ef5f33a5776222a2c1d9a8b9ba7a922bd2004b257a2499404c5444e82242d160dc8732d02118000d0e0fc9511e23d121ea403c551c52e8a53070049bf436ea10e1fb8c58c737531da1cbf4382c5206a24fa9ab3945d1910e2c398df1c98176b55ffcc70c4e09a1e229f02c6f30cd1ef3a3e108233199a05343af73f1914bf60430e3eb6bd28f8db2923c1b70149cdc2db0462"}}, {0x9a, &(0x7f00000058c0)=@string={0x9a, 0x3, "a764cd7c2b50ba3aa1aaa0b1557ab9b27587605d6c7621c645d4650ecc8313739fc462a7e3da97b693e153e60446ebaf9b0c17512a4cbe2649c9ede7e58cdb10dbf345a8b8d8203454b6c3800d21b74220dedc985d81508e072a7461204d3c811f0140a8c49f2531311afcebdcbc544ff0d7db03f46bce5227a356f9963c92bd40ca37bbbd91c08fcc2177054865995d26dd2cc799ef4406"}}, {0x4, &(0x7f0000005980)=@lang_id={0x4, 0x3, 0x1001}}, {0x10, &(0x7f00000059c0)=@string={0x10, 0x3, "b22ba3525a45c0def446fc8b4d42"}}, {0x4, &(0x7f0000005a00)=@lang_id={0x4, 0x3, 0x200a}}]}) 42.595993159s ago: executing program 1 (id=2206): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000280)=0x12, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) lseek(r1, 0x7fffffffffffffff, 0x0) (async) getsockopt$netlink(r0, 0x10e, 0xa, 0x0, &(0x7f0000000180)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = gettid() (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r4, 0xa, 0x12) (async) ppoll(&(0x7f0000000100)=[{r5}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0efffffff]}, 0x8) (async) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r6, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000002280), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "44e4f91ac97407b8", "56d19ee0e773bec16423039e78ee6ef4", "d11582ef", "da40b2158c05d833"}, 0x28) sendto$inet6(r6, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) (async) recvmmsg(r7, &(0x7f0000003ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x1b20cfe5}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/197, 0xc5}, {&(0x7f0000000080)=""/45, 0x2d}, {&(0x7f00000015c0)=""/77, 0x4d}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000001640)=""/94, 0x5e}], 0x5}, 0x2}], 0x4, 0x2, 0x0) (async) r8 = dup2(0xffffffffffffffff, r6) (async) fcntl$setown(r5, 0x8, r3) sendfile(r5, r1, &(0x7f00000002c0)=0x8001, 0x9) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$cgroup_ro(r8, &(0x7f0000000300)='cgroup.events\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x10a, 0x5}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0xa4, 0x0, &(0x7f0000001400)=[@increfs={0x40046304, 0x1}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @flat=@weak_binder={0x77622a85, 0x1, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x26}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x9286f9ce86a82d0b}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @exit_looper], 0x0, 0x0, 0x0}) 42.572455749s ago: executing program 32 (id=2206): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000280)=0x12, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) lseek(r1, 0x7fffffffffffffff, 0x0) (async) getsockopt$netlink(r0, 0x10e, 0xa, 0x0, &(0x7f0000000180)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = gettid() (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r4, 0xa, 0x12) (async) ppoll(&(0x7f0000000100)=[{r5}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0efffffff]}, 0x8) (async) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r6, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000002280), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "44e4f91ac97407b8", "56d19ee0e773bec16423039e78ee6ef4", "d11582ef", "da40b2158c05d833"}, 0x28) sendto$inet6(r6, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) (async) recvmmsg(r7, &(0x7f0000003ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x1b20cfe5}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/197, 0xc5}, {&(0x7f0000000080)=""/45, 0x2d}, {&(0x7f00000015c0)=""/77, 0x4d}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000001640)=""/94, 0x5e}], 0x5}, 0x2}], 0x4, 0x2, 0x0) (async) r8 = dup2(0xffffffffffffffff, r6) (async) fcntl$setown(r5, 0x8, r3) sendfile(r5, r1, &(0x7f00000002c0)=0x8001, 0x9) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$cgroup_ro(r8, &(0x7f0000000300)='cgroup.events\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x10a, 0x5}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0xa4, 0x0, &(0x7f0000001400)=[@increfs={0x40046304, 0x1}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @flat=@weak_binder={0x77622a85, 0x1, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x26}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x9286f9ce86a82d0b}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @exit_looper], 0x0, 0x0, 0x0}) 20.694766066s ago: executing program 0 (id=2520): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x0, 0x3}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}, @free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x0, 0x3}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}, @free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000900, r2, &(0x7f0000000200)) 20.694565996s ago: executing program 0 (id=2521): socketpair(0x1f, 0x4, 0x1, &(0x7f0000000080)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000ddc0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x41046100, 0xffff, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="1827dacb7cd53e01b4852de2d748e21fa033071acb841f449efc23d452101807ae5c485596338a6d31388444ae8ade7b60a85a37d3db29ef19ae4c4d4db9c2c82c7908debb2e2b5ebef336aad77bef942d064955079af4e914f372cec8ed0440f6ee0bded3c565283bdb75124011227712d5f01e8c1eb86cf69205a8b5b374edee58ebaf09d62191cf41190260c30a719bbc9bc29be0d60c678791de6b236c9b5a057247c281937c2b2ae747c858532113e0a1e7af49298ef54f15572301d3c907b02529bc470beab8f9208cf92b17a9df99ceff90a1e384d6bda3fe823d8eff0e2229a43c31781935de69466b1082c0f88d3716f234e1d6e17e1360f6621e686d661af20eaf08cc97c261590ac3291667a87bbf66f86d9005f034ea5517b2187b6dfecebc1cb8fc4dab511a2890a68ed185483c548168803f353520cc6f820d1349ac985e12a3ff6e8a78b29ed97213962fca3ba7d04d1ab4dbcfe93a88831f784ed278d079eb3e2e69d3161600fc7b0dae825b510a59c14315fc6ca0ce68dafd088f02a92ae0ab3f15ca1a863b640e8e4a89407a8b8d752892e1f8b0e793d430c3ec46cbe2b6a4bdad728c34e734864aeac2b6b2eb51c3a2f9e6773c5834166511086dc35847cfa17974889795ed305353d41c9399bb95936a3c1be1099f21795cfc04d9699929eca65a0edcae5d4e564404e5292dc15f40d78d94be9e8dca92983bc71729ab30a70455bbfd5a98d97cab9778d9b7b69fb20019e7e7c7bc17c84da1dab53a187a116ac229e00312c95b1074afff18a8771a4ab47be2205745836dc3cc1ce531fe697e9a734698fb2343b331ad9f13214d1d7d511dc646fb8b3b70fb4611e6d102a0e2bda6311ca824537f699efdefbd8a3a523e26272f07abd75504188edc788af9c75aabf77f4ac883573f63ded319fa5a8b6317d4490391879629446fa5ea4c695f3db9739f7bc1da7a19f3e1c0ccca98307b3a7a38272b7455c8957b17138c9e170c27895fcf47eb5530948b7cc43d61a621293b0c83dc893f02def2b42a8bd7ad6c9cdfeb7a3bde141e98e5af7500b07d85c6314949b754c88cc666bdaaec89271f56ec11bfa0aa337feb1140b8a07fbd5c79bdd0239f8aa1d454c0e5a16e99d38d1212ff709bb1964c317c98bfef37b56944666f0320ec85b5b1e07731de5584901f8c65e14fd2ba83b500fdbb137c7cdf91d66400688a5da6405ca7e0b8107ed65be0ef5c6234b62f613e7e76d6f3d5cc12bde4342391524e25bab6ec0a358c6c66b7cdbdd9301f91589af65cb7c02fe8271a798c5e122fef9e7581d28884d33d01f0475c9ac052d2d014bdc09e2738487742f7bff40facf2e96dcdfefa336c46923b77b334daf7b01a9fd5d957a29b83adf6f23acc507a58dabe6b2804532bc1a865a01b1126127f7c6a8029531db8a51d8472c0abffca5be97b9b5433ad220ab9ad65cf94a1167f3fb2b8804ce66f9f5cae212724b2b3a04343580f5919f446f40eaa0177f25ebe68ee7c7a35d9d5ef6e1cb220eaf8ad9b269b15c2ab9692c345f3c3bd5965f06adfdfa2d672b5e3184ebe192f73e70e829adfac2e6318d238dceb6e3d7d1422d57ff7124793b92966bd229c0725b0d591e59c57f98841b5ffad16d0ae903406014d3e632d0654e9084f870e124046f3ebae3ecbf5c5365aa32ebf169ccf1243dc8fb296cef006d5f00447ecd2980abb98e3b6e6bf6181e5df7994ea1c1273784af0d92a57394c71926dc143228a8ade103ff61860d21ffd467b2c41bbbd2490dd36add865828fb64396f16831a3a74f57ee2254cc93b25b7219bc00339a2518be3caa4765ed63295c84f1d59144e96aacfb57c6441f64f29729bb7d68127ae2472bbf089570003b1e820191878ab6f53db01c180751e34672cf5a96edfefe164580d6101672281b59f58f3c7b1222f2b6d19c8a8e5f9ad539045f7dbadaa767f993da974dae20744bf5ad0e0ec71ee97696659981e067463c78bd9337b8bcfc070e7e5b47303eaaf9651c19f19a15eab8e2c47041828be50994b5695ee5fbc9a9ecacf9de714215eb7992c07f262db8843937934fdf6fdd31d0f3a44f074f3a1dd6622dbdb3364df79d5ec90ead64c29e05a6c5358cc6b9d8493b7e1c53a91c37aa3653cf2002072461f4b99fcdec142e53b87f61ea55cdb834dd4e03f2f57a206cabe2f3f3cbfad3b4117bf4434718022b09a8419959a9bb97fba50a6b3b9a844cd1301de7bae89f8d1bf549b88dd2bd0697e70ce89cc2e383221ca2ae9d3671a730466c250a8963f6411a42ecc85a00c01b2b43c39432d5065a5fd11c29a23169891cd674cf3a31e82587a26c8d48aa3debeaf067a26669599fae850126dd516512e0cf5ab556b5582add7d2f665723a2244007ddc302f0ec29da73578a80c998849be2f766a334c7ade4dd46f37d648899da5cf7437af2d6e8d03d934903387c4c7e260909d59b546dfac9ffdce11fb92e5bb6ff6836fa0e6d0c5942b4660fdd68d3cc8a76ce0960584dbf634695ca75752b19067ba535e4779189b111c9a3e0ea877067c046d10021b0e60eae8d5dd7536b4474d8ab74679e2d8e68bc9208db5561e28d0bec177cda1e2f944a4cd97b6432033ce40063cbced6b36e486b096adffd699c9fdf58d5ec54bf4afdf52493fbfcd91e807da31ff675b567058697aa088118a6ecf1b7c7dceba3ba87d59d882fce3b3b676763ed658e991c4fd5746946815af0a2c1e96aeb27383cf6638d6d7e1932b3a028250fee18db7c46acd7fab33ab22ff91cf78029a4ed96494151652213fb7dcca0a8944568bf84aded113e20e6897d6b8f6f9fe5f6975c7cbf999d15ce5f8d50454d58e7a5b285fce4ef9d14758cf4a9619b17275fa66f2c6c48d44da95657708062bec9b633ba2df082766f549c5c1b661fc8a5f7b8b6699503da733a66df44f116c4a470b73648cb64bf04101e7bc1d048d230addbf22a5b98aea08beda847e33552faf771d9b181f610ce34530543096257856ea3a08276bec1ea40e7bf6957143623ef47b5c41e61d076eef0a5195431b49beab9fd7f07b1a153491a7250a889b26ce657df550b226fb94cb5f52306f47ee3af4627ef0cdc0c50536af7b386440b878ed5d672670abdb3ea3e3c3c031e67293104a4d6476cf325f6fe4762ce2351dffac116387baadb82f987cab7fe88ce1be7d44ccd572bfd29114d2ce4d5e90f4d6bf7be39ce25ab7de52815e4059d783564d518dd208714de1c524ff69a4ec5f29bb631eff605cc6f30a0bcfba44810a3a6fc263891791b51cb4be0d60d3d0798e38b01b9a21150589a436fb4df4584bf6e7094176884921bbb0f87b1bcdfb6df8aef8f58393800816c15647650448da0ba5bb76f7bf76c3be83aceab79eedae80e1fb46a2557a9485aa7a8053a5835e609fdf54222f5b43cba63c9508dbbd0e22953768f88e2070236d7255f682464d09c7ba12b2e8787a1bc889af686d2c355961d8f92f877bb09baef09d70b5b306047d8d3cb97fb06ba8d09bfbae02314dddf98092b6ef275743e9deb391995003d83b549ecd604daa9bd34ef311aeced5db504242241c0717f8302efedcd3fd43686a7ee21c73ba3c5af98c93d09158c9011e11bc4b51a3a4e904c4b6ced1a786adf310073405c27df6aae6d5da4398d78622ba9144ad09902da49b77046ad22fd303f07c1533f271eb82794b402382d2971f46c7907069907a7afb9e94dd4071685f91cfca10d86aad7c385e4d90f0d44d37588a8f1f267c1d8445634ca4194d1a0c5894a6d00cae3af3aec991cfefda59e3f46c0a6e2fac55b35259a9960ec7dbd1c7dd128368393f0de1e0994ba1f5b41762c22213f56bbf4c2cca458dd5731f9379f0651ba61fbf17a5861eb417e20a7fc9df12c6771f5ab322213ec95beff96dc1811dd0f45be8fb1ed93c2cc01e694620b550e45bd265fb357f52699cf9ca3ddf331fe4d11c5e97bb57631d9c7620b5c19562c85ef8e04ecd5cd5b713fbd94b6b76331a83f304cd8ae1a903ffa722cf5697b1e1bde206735656ce57254744daff8013f47f9aa4f062d8c5956fa8df5ee79d6e6ffbc0c47cd0c99517a6d92fe8ad18c001be4b55af7a6533712c6a2ccb7e813016e7cb74a94bf2a2ce9b3b440faae19210d43320cb81a6472d1da775ca27f2b5bbe5964271eefccdfa0bd6b163357af4539fdb5d5e2e7e1795040776d4d75b70928b8efa954556f4d225bd9b6f9e5a71a8e7a3ef5c36d459233c66650ada1c55dfa02bca3997f93b92028881d9c3ec0e7e1a42c587482b0cfbc77e8520c6ca0f3e5127c96b41056b7279d9e62358e39dc95e779affaaaddc8e9ee66ba336feca8b957ccb4f352c0d162390e3bde27b15132407c97c3a6b5f1704e1e559ee12655a71d7dce3711c8af907d7d2875e2407ff8c59c5457678058d3d00a7971d239c1b1c67dac3ff3fbcc2d8c8035e31040118ac46ba5110a16aedd0b7f731a4f86a63a697501a664946eaf7da6d3cc2a296f294ee765b8f26363ba6116e0ea0ef8eabb0f1e7cc429611194cf0bb66463d26a82dd118cbbd3f1040dca2f5f82ac5eb5df41a4658fcb34b68066c5708a4a16c48fd290b32e392e7f5b662f4e3fa2d79a814f52824cf737872604672bdaf80fc527deb1f690339c92b6c6c6c8635de5a2e1a7ff617d0f1c11bc3a3504d0de94d77678025ab5bea511d783df148e58b0793251db3b7b9e03bb201be89d5939c0a60ab548460d543d015082e00ad9d05418c327ebafbad7924aaf70e5fa6eb0be359b65ac2fbbcad495b17712e033cbf1853d1e2450ac4c8d19287074e76ca3d087d376b0f861b525d4949098dd4e3a3cc50118c8587adf6587ed9aa0352b7d812fe66bb64eb0c0f4d46822aa9c3d4848454d49b61cca24d7d6b82fafc5d8eb4e40e3665f24a95182b70b22c5f9303a49d1278f25de9855246c729fc8ba300fad799a949b9b0ce303477d22337d599d4c8441461d25725965183210a729fc59c4e5ddb45c0b9db06a09619e6009aa0653cd1e8b06d0e55c133d5022dcf91f12a21e9f977de2485f886c5133a8837987e7bc90662156b0250cc76cb03ad9fa36733ef371479ea9c1313682866b963f1f96bba8c658e2c6a10e5e29d8a07d4999b735bdef7f60326aa64fc198c3f2670fa4a44717fc613f1282fc324fd9476e6da7866cb6ce1efa8a1577088f2aa757584b8ade9f2ba34a2287870da2cc7704008b6e057eaf8bfe2fd0d6d60cf03e1751d2284c6439ee6079708451e64b1f7e7dc8400ae99e0d834a7daba6c3a8219812adff0760129e18a41eb0448c57a909714cd395933436e9ae040277f213e30ab7b6e7e3109642ffa051b3c423f6ffa7830c75d229acd617d6bc1f7948f09238f5437ff4fb302034fec1fed96c55c46c7d70d6ab3018c1a3d76120077f815fa67ec8815f44fd0cae7d1509d217a432ce904c778f201a508fdea4672e9cff797bd1d0f58d46f39396e148573ae9b2468e4ee5bd9a5abce8166333c524f0a104da2e3c99ddbc51fc6f4e7c628af79c93d0fbe61b1c4a72b11fe423597f126467a01ee6dad848f24abdfe453592f02c84e017fe553f27e639f88824d70aeeaca54758184f95f12d696291798046bb075fefd6876e8ef893f5b9340e21fc63c67feb6f03055f2f394a591164a61b1aab14c468998175b75974543e79b241dc69a6e346374dec5eebae154e36f29d17273e608ce69d539a5e4702f474bad66fbf3348f0c859bf884576faeeac754e290ec97e863526e55420da72b6b6cd209e6685ffb64e9865d00eb017c843d3c0cf3ab26f53f76316fbe009f0b2c4932b0694fecf1a148dbead458ca9f5f6d678d6c6fbd23fb6aea9e951914300eaaaf69bf35d4ce11c0349a02aa14529a083e701eac0177d4ddb305a9f9a5cf8bacd96327a161bb8b877813ea022d62bac8f0ab9eb5e9d145dda4b1fe79c0bee34c8bbfe866ba376d3a71b9809adda06e64eafaa6cf53fff8ed63e15525fd409e13b1809ae6e6e937acf858a59d2073b304171d5ab35ec92f66fbb2d4e34d46e886c3546c1026d0ff27821a15aa397dbc686540d546ea66fb43dcb9beaeadde6250cfe8e563f9033b432018c88bec07279c6a0228f3eb11031d3435d95c9c1789a5338f74aa6db2c853c87f8f2397f9067fa59774770f64b8ae42b9a07f85f1bcabbc6d3b3456a253bdb73ad3de0aa416589b722053c81db90e7b66a835d636615701e6869fef016bfaba9da0a869005ffc3174b605fdabdb8c7346262ce78a64aa7036960913edfffad202d664d1771018de43b6548a6672f48979b8e30017a93da2c093266306e09eb203fb37d7d54466fb26d4414ba88346d02d8811f100dcb0a3e50ae46247b986b928f12c1ad506c6b33b49d7e6955ae9619f73c79b72a95b053d53c4c54d36dceb8ae780b321aa41b5d61caa21a6c65329f08da522bbbb3d07501b39cc6bfbe4a2ef8054d7c57666bc805ed451517a1432b958141f3ce94752a67a17aadb41590037da8efdb251eb56de30b0e0e75adfbf4e06d4777f843a8d7c31e2ab62d98764217491d46960d67d3ee1213d150c28e75d1f440d41ffc3cf876554e2d4a354f70fce17e4c0fdc64992c32e785263ca4ffcab57d3d46d220627ed05f1628551e9843137996bc7a0b773e1ccfe5364216a8003757ffdc052d93793a3463baf4eef5dd283826f8510bb1f20505a6e61cb3d571d0f77e67ff3c0aa5ca91f6d68c7e0d2d79c649b091b30b2911c5c47157c9c531296eba681e039eaecab83722cc2fd5b91913a463ba9f693e34da60b1adb8ee9f4a83fa67e25f19e4cd6e19ed1381cba8b5b4591109637ae1f7f29b5495fc5f8057da565d937e7577735bd98fe626ce8568897d240f054ad69c8e0ca424d1be51b17d5e639253fb2fe6791e01edcf9c4f8404233d7f98b52c31c4996b6b63112d0126036ca20cf52a2da2478683c41bfd8fb5b34de59d5e87b5075e5e1d78ad06c6a2f6e662145be3d30d140b62c49df203350ea4412c97aaeec7aaa00d81b89f3b7295607840de2a8386f52012b5c4e6e0e1986565bc4f99b6bc10f3a2ab59783a8b9f3c696f741af0f51b6592c68ddff861fc7d2b16876b05a54eae9ec0e170fbf26d9358941c6cba50a5c41e77f72c7f41e0bbf6023f04f7701f676a64cb63ea1a8d373ee6a99ba56449699ccdf8a11dc7d840d695cd5ef987f74e5b16594cc8c6c2251c47b429281b6e34c0288c7242052ac3c9c63213f6ddb08726001e0afe1fb312d463db8722f1617972dc7f365de498027ef0b5c6d100e583348cd777a2afbfd60ef59969c8f88358b6995c177a7d7e69d86b11e36f42bae8c9af599d3f828447c31004000163bb74ef20f656f6a1c8159bd0f867f2e283c10656a40a397b2e514c19efb5d5a5f54316509801bd8208a2c84b2ef13e54d7b8af8787b826b50095a15e33a5e8e306454312a83af7869b7ba0039ca601751b580a9190435d35a8ce9d8e9558ca1bcea3cc3604f4e991aee79fd0d2393b9f87e8dac7782e837e1de5e88a7c79385a2b14556041f49c1113df43efd8aea14c4b651d713fc9989b2fd77ce13a98efef5e83cc6843d313117753d82870c5efec8cc6fd855ab6e0fc6d48c66874fdcb2d007db7fbb9371da3836eb23da1106283a20e32617bcaba574b7b6298d48334eaeef905ff348c2bfbc1c83a88d6915b644d1854161ab4f1d1db12e74de2853e48d1a10f9835c226bca6944d0de6a18e0e07df45ad72a7d354045a6997ffdee010e37091a3a5280e5db8aeea0245217a6f1160a6287d9a28c0eeabaebe755b9485da5b7ccb85166ed902e63200e5e8ac464124bef0196eddee6cfe90fce770b416817e1ca78494786bdaeafa3538841f74bbdb2585d63f667ef227287efa56c030c0999e9ead590f1ce383a138233235494ecec0aed97c803b4d7c4fb80ac9a3bcb1dd2bab51382a94195bee034c3f3d3d9efc44add83ec580a5cfe8f5942b1694b0ab3ef4b2d9f7c0b8634b056c6b6eeb946be1825fa452abdbc1545cd94774abed3fdc2b0399929298221030f6cd0a2b38490f5e4bfd53ee20de10eeb2ffacca980d40e0885cb91c94a4d81a61d863efd0f7a12da233e1dacf7af728950892ef887abcc5e4d08c6b57834a1e5dd1dfc69418fc681b47d8cd34c6a3846b0e1afdc7c7f9033ff817a72ac617c0a1e59e4e6ea40bd668c499f221c5f63700e74b68ba3045b4460f0fa60308cf8964d95237d888d5c1b1be0fa7bd2703eaeb0d2914b8d22cbd8693c16f21bb72566f38aa97e86f212557d40e10b285e1d4de0b153c8f91e168e9d0031bb7ee7fec5f0c3fbf15bc6fbceeae6dd363b7e9835b175b0be16a3348a2c2d07468449fbb2fcfca9e7d8b72b623355715a6a1edc87ea4c699ffeacb2277fbb5658a1eb12d0a7a93bf100ab11cf49b35c16a14044ac8e5bd69af05b252325f0eca41f90681b4a1ec399096939a96685926655a0c4d172d06646c87f35b65c0d7654882b79838f78c35febbdb378f9f28d7e6ba1c1fa191bbcdbf991731f546439a966e4f7a15c77367161bde14b731c9f2b91114fa46e02e70f07d3c40988e8140866ed3dcd98ef5524700deb75c1a6414016da0ce6845e936a8692b7beac01bc855a72a490c667c3b755ffaaa57af54af1bd07ae7b203be85f3653aa63cc5ae10f6e585c7bd8a5257604e82fad6c7be6f1a47eb665c1422c03d3263f351671a48bd5eed22077b8c16e706f009880941c29b90c29a11ef008a371b29200f32523b9847d911fab4ee1468bf98a49ff73703e2d9d7bbf6ae37459c3cb502541f304e1d5918518a06225b65f3b38b91f8e0b49a29ef9aacca369ce5cf8b45738e29118ab06078b885189acf4d0a5200b86cb2269dde90dfada27975dbe6ded12232c0faf7ea12ecacbdf416cff8632e48346478a75c0279c1920b7556fc6670704d5d97912c75d3a9cffe6891abdf747a6850ba7d9668e56c7e7ecc03c5c388e886bc984c8bfd9f470b7e4ea4d146c3c28e4f8ff82b9558266343036e6239a26f567f7633911ccc51522c29ff3ca36ad5b8cfd6ec1c86ae08f30d87a503c909e66dc278e9d14f3fae4bfa4813f315b1610ed76fc149d92f319044e813c3769d4978637e0ee732d3bb86e9fa584181f41d4304c07a1cb71d10f07da649288275a213eff161c536c7366d4c010cf9a4b1c2f2940607dc7468e51204c6983c554d616d48f93ae51e6a7769b3285785ae7bcba3cfb27879df1d7f1f18849a70814eb51df6d1d8cbe80b736cb38326f7db7a06e49cd4fe41b3f7a9156cfac9222ac23d13765e7f2910a365fb23a208f192cfca97b2b8a3de44a2d90d3c865bec109f4bdfb1d37216cf5f71a27c39a83b5562b0c06d76b46b2d8f5b15cb1765d6c78d065d24bedf72405dcb8e795fe183196a6b620f918a2dd7fdfac142aa653fd431ec153e3daac8f615a45b3a0d665d5fe36efb6e2f18b8399429e4f363748eddd5cd2a637e9a0a553fac6d05a3e2bd1b26f2f99433f8f59a3691417a4f35ff7d46a22e39e94641d942706850cb2843ff4a34122e37dcc8224ae9f6ab7f64ff4a0bcb0aaff2f429e4f0f5fcf90ab6a2c45e8f2408d9bbd4f60d6b01a0cf527895e1cd063b178b8973930b9488d81d3f0f7985b900d0a894c29642b809ef39294bfaaa5401f5ed50cbb91a047b60ad54b323a2f2ada04d19d6dbda02e0f22d4d6520f9db2263181c97c9bb74dd8a90adedc80bfd064eb103f67d02ea17571f870c779470bb6460c658da4c502b9a10c8050fc26ad5cc1ae1eb02f0d703d05b48f48ab8c9f9a1bd000181ccf929d45544b44e9a3cd0bcd412ad639323283ed229e5486a2a93babb165880a0a7329834bb51a0631cba5caa30637ca3f07074051c608b7c7170c8c415c2eb88bd6a798bd86953ff71052506ccf0e2357deff6cef24de5b7f68a17082c08d096e43fbe727ab0ab1aa27a703ccd58168039e50dce2d400ed7f2a217c1eea7b29455fbf910d36db324d1c6b53343a78484883ad100a0b5b28c74ab6296df5bf8048fb916e8ddda0ded3f5b08d262b9b1cb1ecb149c02a21490ebebe8856c844d448d2a3878dcc930c3c88d9addf73917e9d3f878fb12fba3e602cfde199a0e69eab56e3d4ffa01135b3145baa613be01f0b94af5bd3b8b432339c954f52b8551fd13790bc1ee18be226b819d8001a3da8e097f84c166e4002e4c1043d3a3721f05105cd17a278b9509d7a04826e8a5b4956bbf976ffb4857fd88da99cfea8d2e0a1c4f52f71f87cbee8c02fbf59b12bdaccb67d0b95f0a56693eafafeefce1953d708b56532ed5bbe12626a3d041c031b48a47b34c504f7dd57e21147b920c058385ddc8cbea5332086c269b0d5c2439f30fa431f88d1a10e25eba0df70d8617ecd5546314ffeae9c4baab872ab82a45eeaf0e1e1533e8a6189c324f31b652aeadc52981b66161313999c5a7bd7c79ef4ee55c7cb00ebd9637ffe01924508a44ab72ab16b70b8b815ce7d27772db315122f4a5a7679af5ac685c26320a71cdd8066b19f749705e2e35d1d9166ecb066053dd05a759270e119944cf99b918cb5e4e6c931031ae2eeffe349ac246c92174091c687c58879e1f05c43b010f7ec3f204c106cf60740b0bc2d355f57bbaec7d060dedab9aebaa4094e72ebffbf61cdfb7d69fbd146daea59339fa83c19c5f75b866af5e7f387740e675e1e2ba29c261d9e7237c6e9ef1b39a8fdacb44de0eaff5f4f9e3e42b75d0a37834eab0cf47acf65e882f0962e01982e783c0dae7efbc95dccb235562e5a2e04fd2b4b43388c0292e6e8198c6df0348920d6e1c8acdd2e892d3f7aef7703824dbb08695642f0e444ade6c4f1ec1e267feb5135cccd50fcde643acb66dbd18f507496957ced435e0db0a8e8441a8e2ebc365f995c32399f7d180b6faeb85ee1921b95f82f3194bed7d157e842257d2da26dfac90f32fb53147e48e232d5115f1cd12b45c55330b29775ab776599afa504b7fe114cd7fb3ab4eb6c30becb82f448b284b20010bea918019af99b2a9ccab1585aec19fd1abe8365a6023f96dddf1a37cce2734bb6585143729850bcd811787bd07cb5fdd57cc987f9278b7f5ef3c7529a9b6d20d18cc4446f1036cf7635da6732986c38df4785e2e428f14b84957319772bdbb7d2d2d20321e522b1ec6c807f3a3f575643d4b71e1bbd1e843b5816aa68900298f5058c65a9fe1022978a44a77bde2b99e221de97cd7fa6a2ea440220bac20e3e4c1e4224958aca15681d3a18f74218114c3e5eefa1fc16de8c07f1d1297b0e772d05f205337175c1dbe88dfc876dcfce367304afac68c41b98ed2ba3f04fd1b37db27dd5d9c9aafaeadfcc44585908ea655ffce1fc2516b060256777e8953e2a6861ec4460034691aed001ea2971627615fc7972773d6a8c343117bae3fc68cfd1f187c478c0f52e86b118c65c39848a8c582ed908fb1242ad3455288cc858e52e119d368e00783c2b8c2916ba564a3501326baefe1dcadac8b4b8b666f20a3a245ca171b43af", 0x2000, &(0x7f0000006d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x7, {0x0, 0x0, 0x20000000, 0x4, 0x1ff, 0x0, {0x5, 0x0, 0x7, 0x0, 0x9, 0x3, 0x2fbc, 0x0, 0x0, 0xc000, 0x0, r5, 0x0, 0x403}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mknod$loop(&(0x7f00000006c0)='./file0/file0\x00', 0xc000, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'bridge_slave_0\x00', &(0x7f0000000140)=@ethtool_wolinfo={0x6, 0x3, 0x760c, "115e7c2ba9cf"}}) r7 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x68, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x9, 0x0, 0x39}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}, @exit_looper, @increfs={0x40046304, 0x2}, @free_buffer={0x40086303, r7}, @enter_looper], 0x0, 0x0, 0x0}) 20.49155639s ago: executing program 0 (id=2524): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x401, 0x8001, 0x1, 0x4, 0x9, 0x5, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x80005, 0x3, 0x2, 0x2, 0xfff, 0x3, 0x3, 0x7, 0x1, 0xfffffffa, 0x2, 0x9, 0xe8b, 0x4, 0x7, 0x5, 0x100000, 0xea7, 0x7, 0x70cb, 0xe, 0x2b12, 0x100, 0x6, 0x1bfc, 0x1b, 0x7, 0x3ff, 0x6, 0x1, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xffffffff, 0x7, 0xfffffffb, 0x101, 0xd7, 0x1fa0860a, 0xbd, 0xb0, 0x81, 0x0, 0x180000, 0xfefffe00, 0x8b, 0x5, 0x2ac, 0xf4, 0x80000000, 0x2, 0x6, 0x9, 0x4, 0x1060, 0x4009, 0x0, 0x3, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x8, 0xfdfffffb, 0x2, 0x1, 0x84, 0x100, 0x5, 0x252, 0x69a2, 0xb, 0x5, 0x20006, 0x5, 0x2, 0x1e, 0x2, 0xd9d, 0xd, 0x40002a2, 0xfffffffd, 0x59f, 0x2, 0x8a, 0x5, 0x37fe, 0x4, 0x1, 0x40, 0x8, 0x80004, 0x10002, 0x411, 0x66cd, 0x8, 0x5, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="030f0000000000000000070000e10b0002"], 0x20}}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x34, {0x0, @local, @multicast2}}}], 0x20}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x24008844, 0x0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffd}) openat$rnullb(0xffffffffffffff9c, 0x0, 0x60a00, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000440), 0x10) listen(r7, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0) accept4$vsock_stream(r7, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x0) connect$vsock_stream(r8, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000001dc0)={0x7, 'vlan0\x00', {0x1}}) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r9, 0x4dd99000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) 19.493327839s ago: executing program 0 (id=2540): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020600) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x60a4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xe}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0x31, 0x7, {0x7, 0x31, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socket$igmp(0x2, 0x3, 0x2) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 17.939037919s ago: executing program 0 (id=2570): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) (async, rerun: 32) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 32) syz_io_uring_setup(0x3bad, &(0x7f0000000400)={0x0, 0x3fb0, 0x10, 0x0, 0x14f}, 0xfffffffffffffffc, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x36}, @fda={0x66646185, 0x4, 0x0, 0xfffffffffffffffd}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) (rerun: 32) 17.927053609s ago: executing program 0 (id=2571): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x32, &(0x7f0000000000)=0x32a7, 0x27) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)={[{0x2b, 'devices'}]}, 0x9) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000080)=0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000000)) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setstatus(r6, 0x4, 0xc2400) pidfd_getfd(r6, r2, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0xeeee0000, 0x8, 0x9, 0xfb, 0xd2, 0x40, 0xca, 0x0, 0xc0, 0x19, 0x8}, {0x5000, 0xeeee8000, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x5, 0xb5}, {0xeeef0000, 0xdddd0000, 0xe, 0x5, 0x1, 0x7, 0x0, 0x9, 0x1, 0xa7, 0x5, 0x80}, {0x6000, 0x100000, 0x0, 0x6, 0x4, 0x42, 0xb, 0xf8, 0xb, 0x7, 0xe, 0xf1}, {0xeeee0000, 0xe6e5d000, 0x3, 0x3, 0x15, 0x6, 0xab, 0x7f, 0x3, 0x82, 0xf7, 0x83}, {0x1000, 0xf000, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0x6, 0x1, 0x7}, {0x3000, 0x8000000, 0x4, 0x15, 0x6, 0x0, 0x7, 0x3, 0xd, 0x81, 0x1, 0x70}, {0x1, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0x0, 0x30}, {0x10000, 0x7}, 0x80000031, 0x0, 0x5000, 0x2024, 0x3, 0x0, 0x3000, [0xa, 0x4, 0x5e, 0xff]}) close_range(r0, 0xffffffffffffffff, 0x0) 17.896791439s ago: executing program 33 (id=2571): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x32, &(0x7f0000000000)=0x32a7, 0x27) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)={[{0x2b, 'devices'}]}, 0x9) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000080)=0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000000)) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setstatus(r6, 0x4, 0xc2400) pidfd_getfd(r6, r2, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0xeeee0000, 0x8, 0x9, 0xfb, 0xd2, 0x40, 0xca, 0x0, 0xc0, 0x19, 0x8}, {0x5000, 0xeeee8000, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x5, 0xb5}, {0xeeef0000, 0xdddd0000, 0xe, 0x5, 0x1, 0x7, 0x0, 0x9, 0x1, 0xa7, 0x5, 0x80}, {0x6000, 0x100000, 0x0, 0x6, 0x4, 0x42, 0xb, 0xf8, 0xb, 0x7, 0xe, 0xf1}, {0xeeee0000, 0xe6e5d000, 0x3, 0x3, 0x15, 0x6, 0xab, 0x7f, 0x3, 0x82, 0xf7, 0x83}, {0x1000, 0xf000, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0x6, 0x1, 0x7}, {0x3000, 0x8000000, 0x4, 0x15, 0x6, 0x0, 0x7, 0x3, 0xd, 0x81, 0x1, 0x70}, {0x1, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0x0, 0x30}, {0x10000, 0x7}, 0x80000031, 0x0, 0x5000, 0x2024, 0x3, 0x0, 0x3000, [0xa, 0x4, 0x5e, 0xff]}) close_range(r0, 0xffffffffffffffff, 0x0) 15.979966006s ago: executing program 5 (id=2599): r0 = syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) wait4(r0, 0x0, 0x2, &(0x7f0000000600)) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)="ee35efb32fe61fb20a7e8ed828b4b499ab91da5313775012c56af4127c6d31152d9bf22e33d2d380714070e6e95634476c97d034c8c7369dd3d71803ed18b66e3976afffe1bd0ca8452a91b6c6", 0x4d}], 0x1}}], 0x1, 0x9200000000000000) syz_usb_connect(0x0, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be6406d05000000390102030109025200010000000009044000000e0100390a2405", @ANYRESOCT], 0x0) r3 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f010000000000000000000905810340000000000905820260000000000905030208"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x80}, {0x6}]}) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="7472616e733d3d0dfa5c8a2702806480ee8447ba24c6c2f4b1c84b02f60784952cbad187723016caccbbe52b5371ce120a8161f05581b0fcc13b5e10da9e906d5d7a70c458ebe60723dc2ad7f1fdb010d19488b330d24f2135164ec62f63c704a5338ca5f5942b31a0614e7c02a0f887f2cec24d7cac4e3f162fd0ada29a981b5cbd19ca9734456ec5c72b8890bcacfa66c2262c842482dd1ca13382efc6dcbe1a4dbe72", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',\x00']) utime(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140)={0x7ff, 0x7}) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r3, 0x82, 0x0, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000500), 0xa, 0x1a1803) ioctl$EVIOCGBITKEY(r8, 0x80404521, &(0x7f0000000540)=""/108) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r9, 0x89f6, &(0x7f0000003140)={'sit0\x00', 0x0}) 14.499978684s ago: executing program 5 (id=2624): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) prctl$PR_SET_MM_EXE_FILE(0x39, 0xd, 0xffffffffffffffff) (async) prctl$PR_SET_MM_EXE_FILE(0x39, 0xd, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x9, 0x0, 0x500, 0x400000004, 0x40440024, r3}) (async) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x9, 0x0, 0x500, 0x400000004, 0x40440024, r3}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @private0, 0x1, 0x6, 0x0, 0x400, 0x6, 0x1e0103, r2}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0x81007702, 0x40000000000002) (async) ioctl$KVM_CREATE_VCPU(r4, 0x81007702, 0x40000000000002) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x20100) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000880)=@urb_type_iso={0x0, {0xa}, 0x9e, 0x7, &(0x7f0000000140)="e7af6a78c23b2992d139fa822fa75b483ec38f8283e8ea0e1536788af530d0fc53432cfaf4ab69594359336632366bb35d9b896f6578febedc681f82f06f7bb333f9fdd8e0aa9e3d8cf7fcacf6ec284e432a5c8854ac0cb1c1698866a029ac77d2b9c6a6494d75e087269ac3822f8b4bed448558270bb38221d9cdd56763720f2b1205b4c966a538e21484824918f08cb664a4a3226436bd361f98cbac38c7b28ff18f4e5574e10c6bd2fce43939d97364ad9a9b6a1ac4c1103247cf12e41e4307ea231b0498f7a8cffe840c26bee6d65043183b78dec5e5fba23412b42d186963abfecc", 0xe4, 0x800, 0x7ff, 0x5e, 0x5, 0x3, &(0x7f0000000240)="3e513e45c0be6067952c0f1730d4841b98a7abfdc3b475902945e1fc62a51476ddbfe4b551b765a0da2992372387bafb59f1f5c0be47962bfcb97045aaf74c9ce3b835fc1b30b66bf5d7435d0bda8a8cec1453ffd7c8e8942f438c2cb251c0383f107a43a84994819f85969a1ec94d4bae6d79b59f66aa1574", [{0x78000000, 0x3, 0xff}, {0x40004, 0x6, 0xdfff}, {0x80000000, 0x6, 0x6}, {0x8, 0xfffffff0, 0x9}, {0x5, 0x8, 0x4}, {0x2, 0x9, 0xa14c}, {0x9, 0x4, 0x2}, {0x8, 0x800, 0x7}, {0x2, 0x5, 0x10000}, {0x3ff, 0x6, 0x4f85}, {0x7, 0x3, 0x100}, {0x80000000, 0x7, 0x7ff}, {0x2, 0x5c3a, 0x8}, {0x3, 0x2, 0xb1}, {0x9, 0x6, 0x2}, {0x3, 0xe9b, 0x401}, {0x9, 0x3, 0xfffffffa}, {0x8, 0x12, 0x9}, {0x7fff, 0x2000000, 0x2ab}, {0x5, 0x40, 0x6}, {0x1000, 0x7, 0x1000}, {0x4, 0x9, 0x4}, {0x9, 0x2, 0x4}, {0xffff0c08, 0x3, 0x4}, {0x80000001, 0xd5, 0x7}, {0x4, 0x0, 0x81a}, {0xb7, 0x9, 0xffffffff}, {0x7, 0xc1, 0x2}, {0x3, 0x10000, 0x1}, {0x9, 0x6, 0x8}, {0x3, 0x8561, 0x2}, {0x1, 0x2, 0x98}, {0x80000000, 0x7f, 0x6d}, {0x7, 0xff, 0x4b}, {0x7, 0x100, 0xfffffe5b}, {0x3, 0x2, 0xfffff3bf}, {0xb, 0x5, 0x7}, {0x21, 0xfffffc00, 0x6f2}, {0x12000, 0x5, 0x5}, {0x3, 0x8000, 0x2}, {0x2, 0x4484, 0x2}, {0x5, 0x8b9, 0x5}, {0x5, 0xfff, 0x8000}, {0x3, 0x6, 0x7fff}, {0x200, 0x1, 0x9}, {0xc, 0x2, 0x6}, {0x200, 0x8, 0xa}, {0xfffffbff, 0x8000}, {0xfffffff8, 0x2, 0x3ff}, {0xa, 0x8, 0x1}, {0x7, 0x1, 0x7}, {0x1, 0xa, 0x100}, {0x7f, 0x30, 0x6}, {0x4, 0x96b8, 0x8}, {0x0, 0xffffff81}, {0x1, 0x0, 0x8}, {0xcb6, 0x1ff, 0xa46}, {0x80, 0x9, 0x6}, {0x5, 0xfffffc01, 0x40}, {0x1, 0x80000001, 0xfff}, {0x1000, 0xf, 0xf}, {0x400, 0x604, 0x2}, {0xf27, 0x3, 0x8}, {0xe, 0x24000000, 0x2}, {0x0, 0x1, 0xfffffff8}, {0x101, 0x6, 0x3}, {0x7, 0xfffffff9, 0x1}, {0x9, 0x8, 0x4dc1}, {0x9, 0x9, 0x38f}, {0x0, 0x5, 0x5}, {0x9, 0x36d2, 0x200}, {0x8ee1, 0x7, 0x10}, {0x5, 0x9, 0x6}, {0xc, 0x1, 0x1}, {0x1, 0x0, 0xfd4}, {0x401, 0x7fff, 0xfffffffb}, {0xffffffff, 0x0, 0x401}, {0x4, 0x2, 0xf}, {0xa22, 0xab, 0x9f}, {0xf, 0x3, 0xc}, {0x9, 0x2, 0x7fff}, {0x1, 0x0, 0x4447}, {0x7ff, 0xb933, 0x7ff}, {0x0, 0x3, 0xbd6b}, {0x80000001, 0xe, 0x7}, {0xf, 0x8, 0xffffffff}, {0xcfd6, 0x0, 0xc2f}, {0x6, 0x2, 0x4}, {0x4, 0x180, 0x21a}, {0x3, 0x4}, {0x79, 0xfffffe00, 0x8}, {0x4, 0x3, 0xffff}, {0xf, 0x3, 0x8001}, {0x2, 0xffffffff, 0x1}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r6, r1, 0x0) 14.499636414s ago: executing program 5 (id=2625): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) syz_open_dev$usbfs(0x0, 0x206, 0x3601) (async) socket$inet(0x2, 0xa, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x8, 0x0, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0xd, 0x101, 0x400, 0xe}, {0xffffff44, 0x24, 0x1a, 0x29e4, 0x12}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0xf4, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x2, 0x90, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xdc, 0x9, 0x3}}}}}}}]}}, 0x0) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001800090200ffe6000000000002"], 0x20}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r3, 0x45809000) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13.590914342s ago: executing program 5 (id=2643): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000020000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "ed27fbb5d5ba69000e6769b69dc51dc5c32930bc5b6886786c9c975fe54da42154c59a884c54b5ff1e0501c423c33cd3314f79fd035e590fec690ad23ecae1dc", 0x33}, 0x48, 0xfffffffffffffffe) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a80)={0x2c, r4, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x2c}}, 0x20000000) keyctl$read(0xb, r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f0000000040)=0xffffffffffffffff, 0x8) ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f00000003c0)={0x81, 0x0, 0x2}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x400c6314, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x4f, 0x0, 0x0}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 13.475181313s ago: executing program 5 (id=2645): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x49, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000}) ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, &(0x7f0000000000)={0x10001, 0x240, 0x80, 0x0}) ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, &(0x7f0000000000)) ioctl$TCSETS(r0, 0x5434, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$inet6_int(r1, 0x29, 0x49, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000}) (async) ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, &(0x7f0000000000)={0x10001, 0x240, 0x80, 0x0}) (async) ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, &(0x7f0000000000)) (async) ioctl$TCSETS(r0, 0x5434, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) 13.335959336s ago: executing program 5 (id=2646): syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async, rerun: 64) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) (async, rerun: 64) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getegid() statx(0xffffffffffffffff, &(0x7f00000030c0)='./file0\x00', 0x6000, 0x100, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x40) 4.648082352s ago: executing program 4 (id=2720): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x2, @none}, 0xe) close_range(r0, 0xffffffffffffffff, 0x0) 4.646449362s ago: executing program 4 (id=2722): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x68, 0x7ffffffffffffff, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x9, 0x0, 0x39}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}, @exit_looper, @increfs={0x40046304, 0x2}, @free_buffer={0x40086303, r1}, @enter_looper], 0x0, 0x0, 0x0}) 3.810513398s ago: executing program 4 (id=2736): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x6) (async, rerun: 64) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) (rerun: 64) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) chroot(&(0x7f0000000240)='./file0\x00') (async) syz_fuse_handle_req(r1, &(0x7f0000000900)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x7f94, {0x7, 0x28, 0x4, 0x42800, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r2, &(0x7f0000000240)='keyring\x00', 0x0, 0x0) (async) syz_fuse_handle_req(r1, &(0x7f0000006140)="e0332f8f5747b9f778142cc174a9b5f0244b78bb6346cb5fc9135b8220090ee698fddc241870359d32327f299718466d88c89e68097036bb35abfe03e3c02234dcdb2c7d1209c657485ca1aa3f2fb80e71397b80fca6f3cf2367fb19eb95e5b4a0170063374645d9e020099ffd7def3d94cd29412b3d7b7a47bc70121be848cfcecea78d41a93622b134bd06e84dec07a9e5abc29cb02d5b9091e748cffacf48352628822bab7b24a17bdf4b3f3bd9fb17793496aa6490da3f58039ce5b40745dd63f82d93bed80b50ca5742d67d39029a98db95c9392e2d5fd9a35bad30cfe98682b5a069738a12c3cfd25949106cfc839202fd21c2b28e44be73280d5037351ead2dd1c277d9cc9088c6b14365eb0937ea9685f6b26232293803260f2c8cfe176b55df304bc2865b8f52581afc4beed445ae8cc405cb7bcc51103aef812c41437c5b070a3591ad0964677f4f9017bb300727dfab009056bee3671a9694be2e2f2173fcc06ceba5aed0d93a3d7cd88365c5c354788efcc705e90d572e34e9e566fc206a8167970ecb9cbc43f4d9de4d43688582b6600dfcfc7379c831e756a45835647bd87879a3e3942c61b9ea2c2af35d49a4caa9a109b0beb972996ff8924ea371e15dc48efd12b1203a7f1fe354977fcf9e4ee2c8f210387e551ddb55e5f67ee6bb9bc8772649693b0adf24606e8ccc59f020834d8cbfcadfa1770549fe464dfc412308fbaee8d30bd20c002794bfb923bac6b490841248d12ad9a0e54d1d96e3aff5dc4930a6c8b7c75264a46af7a6339725fb84e0363463ebaaaf58d6b9309ae7c87a8df8c68d2487d684011de1fa7645f3f48cf3bb61bee8bcace2f8ef5f967f2765f8086aeaa5dcc34c84e379a7ddd6438cccb5b8098dfbffffffffffffeadbc4ad2b2ef98412a46f74a171ad056429dbb723cdb9ca9f9f03170dba2870e5988b7cb755599d1eb8f7eaf5c8ded4b56022cb479d0bdfae18f69f9ecc42f4c181ea10838229ba5db7f088ad8d5f77e49c1fd93ed6b983c43b23c7eeb1233f0c114885057a27cd3f67a309e3fecba241836bc92308b830b10b04af6c9595b44e859b9ca7ef079e151fdd500060787be3a7a5b3e23b06ec70f087134504f8b8e7b6799ebfe14f698ba7a813a380e6f92cace9230aa8094a2465f7224e2becad469d0aaf0e48b0098eacfb17abdb69bb2ebba97a09d2b739b532d70db91fcb0fcb38bccdc01d7c8113024ea8b619e385e58d31899721416e10b408504a9c4fcf870d21051227440a616cf62f6637b62eceaee09029f88009be02269cb5e5ed090c6f5e6c652c31214aef301bd23ec2504f90991cd27539c1b8b54db51825e951d076cd0e70f56de4b91894ce22049205483a0fe7d7886b36118bebd96d138980e26604b6e70a7275c6b81501143119a8c2c271558202eda196704ef9ae3c33301e1afbe56d069ce4926bf531d960f3df58192f3da558adc169d48d39e24e04e95c406b34b1f4ed2726ef0f6a67dd84c75636984191d019cebfa883fdf99affcdb4c874614a5312455403895891daf7469d6721583ccd1290ab05b14516f22965fc52c4a528f1a5c20cc133fea279d9efc991ec4d51d2654daceda234f6d3b0c635db697aba3eeaf8356319adba42428266ac09a6e6495ca8f60c1c4e052068511696296e88ef86a591948627ba97df634e0063eb5f208df00a069b1213c29e58cf76f591253d60de9d7c01d29992ccc728140299c429fec0df9d90f83fa2467ce00de83b16d1b07edb80ff8d4b1b19eea9bd1e2783a0d41215c9cf23bc3ca1ff414e3f29aadba00c5a8d5b44c28c10e99140e5428278e54bfd880a93fd1b54b560422ab2bfcf120a7902373b6442c6e9867b19aa0a6b77b1634ab6fd1c8a1d90d99ebb9ebcb89d593562b266fbc53c40501f9298690283c45059b3f6ee278e46cb3904c947446c28af8855b2a68e6e0c0da205a6e12fdd15b393d579039b31c1a54230ac2ea13cf1f5540046b4dcccdd731fff7323c4880e5d2d8668d8a7f08920715c17ef9652eb55f224c82a6fdb970dbf1032403f283bd868a23f4785a6ab9c0bcd2308dba1a1f258ae512cf64784e501008db366ab7093a6cc4b6ee86154d44a1a15c10834602dd5ccf730f6d1142ac19d113496dbcb80021cb5733924265d082a8453b5c21e0245e4a2627e8df090da6a129ee49c58c1a7437369acdee15f5e4e5638f05d9f6391572d9890219def702a013a2b05239664dba44feec2a9508a3200b47de03e6a784bca2f3633df534af33da0a95a34ca845b61a22ff55a5a4c04ff9e06e7162f458a8c56e106e75ffb76a921f4057dd73d5f3801aa78ca4c78d6b79bce560404c2fe3d57876287f73e84c27c486ffb997951f9e0b3aa81a5e7804ac7360add11e7851842d0ed8df041c999e50226fef006373bbb53d5d8e9d1653924e60234fd0b6645b821746f3d88591ff66e294e8e958ca425ddbc7d604f7cbbcb9d5fe0d4ad53878eb16bc801def1005e1eb12a6d4924d2179948e7aa542f2600ba3c6c600629d64c529c7326c1f38aa4e1a6cc259e58f86400d65d67856c8f4fffc33ad4c279dc05367307f562f8127f37b03c3cf38a97cfde0c02aad8ac40d347a9e0a496f227c068dc6c666fb2b6a18990f607399b0707f135752d93739e1840b5b4c125c81eeeb318869b408f87778451e49f3ad988a8aa97672989ad367833ff7e7f0e79c37ac794fe466623e122127fb94ebbc01bc775183b26b2dc407b1aa1a55d4ce04dbe1df4fba0377fea4c4bfa5a37c4dd733fd116b9c7f50b11dd512ad68646b9ddca295fe27bee78476901fbb5c8d2856ae0e9e21ab26e3587c1325f1fa28edb4081f2ba309d5fc39f7f54abbd0d5a152c2f7e3a8b3a5ef6e097b109061c91124f41f33055a7bb86706629f614d40346715cf2fe387ef4e4fc6646839824d3ef85eeac85bc5e681320f6fa7057e0a10de8c4678b48510f77b91bb397dd1209eaba8ea1f237c348e9e0d7af1229e2c04b6560e48e3a7491f3066b63a8923becdcfd8594c1c55098a51283b599765b049831cacd9478e5e996c778d524b476f6677218c94886d7548be7617e5796e35bb3c9b13d70e4897867d85f0350e9329985f051fb556b861aef7dead54e6b29b9ad837cb4774f47a5371ef034612aa0c151345546b876b53e9f2c06e3ce0113e67eba8842f4ac5b51a61315bf050078c710dcf14371d9593730b1d0302ef999f488bbf42b7360171da98ad68932bda4937358fd1d0c2bcd04f7dbe2beaffa0d53cccda316cb19270cf4aa56695ef3203b49fe92d1623cc1d714da6b8f94112db1781562ab2ae50bda23debd55da440434299c992f2f8c264310d6d8ccdd042737db0253d6889d8bf36fe99a131b73300c9798b8fd58b5fc681b97e71230cd3094e441fe5cf1294bbc28f41146f06e39d5e19e673dd489dbddfc16fe281160a8008e375025cbf25e84945f2f0a5ffb2cd58273328ea9d7533b2f0861eff95823cea18dc1877183fefab808bda0890f91f1d79b36953b138fd62caea3411900647a4afadfecade2ff6274175f06614d108daaf9821c413a137e33c826957953bb39e2d852097f978c3577abcb71d68b45794247d8e82614979708f6d6d0e469828206b22913d6d320d815d42c0d943640c63196f703f946089f535eac511e26c6a5a529e875eb15aaf65fd50dcbaf37a009f2f9081cdbc744cf7aa2336913e89f1961581ad4bb6aeb1d23a787e2d3f99639871df5842c30581263d5139128f0a3f37ef48bb636d7aae06581de6baa55a12019d3ed831950915fdc1eee819dd01047bda606f2852699529718c99606246a92bb1dd9435d8f3a48646c0e423441bc783be358c0c91e6846419b6c0a81354500cb2721834dc11ba40c3bbe5717e5142922a168ca0e20fc269ea584c7f68ff7cced62c4277385368b4ad596b79c45a9c4575c37f300cab37a5693cb777fabed412934d3a77505b17cb2628119ddff45f3fcbffb50386eb9cfb6f82b37fa852ad4b65bf8e2898b11bf051cb7fb0fa81cbf81b9ceebb05498aeb2691eb15297edd682976d5a4f444cdaa82f063bc4482c28c4e6257c7cf3e5ee5a502c6527b77b12725e7526ff896ee2f8066536dce04d63072a34c19d533d4dbdb93e7185482cbf7510c5eef2f8aebebad011727cd8061a367b7e1868252bb43d9a74c9c6a10539e357d5367fac69a9296fe5a79a2e5b45950ff462e0e882aa32ff7f29b5644e5311f3e0b076c58683de29ad9dd8b2c92a41ca8313ac997e44981e82aec550bbf6c88adf3d54e9fdf93d9dce95289e9086043d888f19d209cbea79f8f5b2c81b2c3889eae1cb5305e282b883c4cfa3798eceeabb442a74ff6a8470020a296ef01d8e32553663c844e67e5a3a44375f0074ce9547a6c489ee86d7652219491f35c6b904d51a26c3d2cc77d8ff97050dd0d0aed4a1ecf1db7ac48673a1dcc70ac16f709dcf4b90148aede5302111ceaa3a81c49b724cfa206283b62513f96c1da77efafe2d2d08a5f391ab690b5d974ceed2e95e85b1039def0e94c79cc0aa1de1f8133e985adfadf4a657710487b265bb6692fd2b91a06ac98d50b052b8a13168e2638b93209238fbe67f4590a81a2cdbcc479ca9178720a6ec05bc9457f27ad2e2fd2f4e9c643ef85b6287a01f7fd597799cce7d6464ed3c95110733d4ba92314ba3dd81e51f541a6e37f8bb14376e41560f9049b4ff349a467defc205f915a345b5f06d090645180ca642c719f03e9813bff7fd635660efe38b022130d42f2cedd792bcba2bfb14385c6d1cbe5ff2e38c22f1f8d5e4d93d296042507e43f24ff904827b16f2a3572d26078d7fdb0cfdbe2e6bee07b94ae441e510681c96f97ef0ddbd7efbd80ce0689f6e2022a189dd2937d3eadd82a154a5fac91b5ef48523706957b8d5f55077973e9a036009d745a6df39ba154dc59c4ef784d62b3f2d782dc508242a1b0e4cc294b6e62e98ef946f0d984c3174cf86b8a0beb615f046ec50dd0c8a9c0f36df60bd162f1130f894085e7c47b6c28ff336f5d75166c1840e7ad07204fc10ce976505f6aece0316d8c65b973f61cea2fe4c6db722717985c25249f041c07a86b878702a8c9ab7c33fe41039041aa38489b02a28f18d69ab34619e9e35514c54592c8059984ace64b5302b5f22d68c35c7ffb23c63ce877a1e1b160dd2c329eabcc0e1e3072021bd811de3c0c7a68af20dfb9e2912b7eecc2a8cf083a252d0fe31629b20559f7b976e4d8625644385c692b8cdc2886a42d750962d0dee10a1546ecb7ef961216cc456d2450a44aab07014fe0be076ca6bcb46b644af844b2ad8b3817f1895a5d579af3dc937541f4b7e9203e7a7af534b406d8f6e3bc555d767603122ab1c4e62de19d6af63be8e39fe45732859d6d92e11f1a847f7d62764b6364aa7f95f03cc7deba467da5be71657ae50ff6bf93c51efb7d19ac9887e92fe5f3c9d545209eff307c9e02073bd3404827e148aa63c135ed668589bdfec38cb47716201a9d02f1b03993f89e96b33b32e52ddffb0580dac45422ba7a3fef76e519a3dc8d12eac60c2d2f8c4303aafa3e80135c403360d51c9cdeba3ffb31e664302f587e0e983ede7f9b2bfe2bc64bd5029cfa88445e043e08f3e9affee25e980e75d2664738726e3d2eade7dce0ece78a514bbbe5a54c121374d079e3b05996052d66889742232b73e950e1a9892e7352c9e546a8cfb48332d2b2be6327208ca51dc2869a562581947f62b0d5bfb3e0911d4854f822d6738b4deb195840d2bbae0b074b8d1e1010c24ec00052dce7d259e3044aab1a99d261fb3b49cf09dfc85473f94db06d49e202ca12182283d48144f8389a5301679901600bf8130d36315b277a99204b85a1598f84bd2d4c4893108f6717bf44234181467d6eeee61e1823268b5c60bf04d0e13e429f411b51adfca20ff1a1b1eee203d59b03da1643c3e9fc474a91470116c6c5275542adb10f3adae2ae87e88b93f334e0ceb6216fc081e8d84d8b0a503196dc50599b22b89b807627b427a815aea0dbca69e5fb215ee996395d8a21a1c67ac295be33c6517504e1f00f579f8c484873cc670b5b9e787b1c30ca1f0b25f8bb8f4bde3b3f4fa730c292cbf97b25068ba9c65f78c555d5f75d52a57958d7111e824f3afa16484f625abf62afc80654c36fd9f8284466422fb18e08274e8febc719d45b784974d50d187ad2349429af3f7930252a4d45997762e9d5f5493d408ca144532aa89aa3d43c46951dafb8f81794e2e9679ce238cfe86e112f4f046d87feec3be04461032819d62f217faa71fa9dc6da8861015567d1f7309090e25b7015dcc6d72a5e7ba53296ab1bc72467ac50831628cf5238155aed3fb189a8b527ebd38771e16454fe51e3edde55cea454414690491207c23f6cf33aaeeda432de2d1ede04e039a16245e66cce6f4e4ea534f290f02a2a81a46d6ffea7967dfbe37461f83d472091156594852823392efc953f4ac099d74e2d0328d9f47bd952352981a34055acd0273309484ab56afa85ff0c22fb53ac5d7cc8e346b4c2f38a4e2451738146b7b90c14f826c7dbc1b2be79d83772a8d629f2dfaf15286a15be1ea22a05d4ee3de6a6bfb7e208dbbcc88e77baac940d6438aeeb77c3a32db08b46e79545b65f7f3c1bd433092bc9116668c338ab35c01cb5871167868c6b61bd4c0ca5f96e5ce2465da06c4a320839f3bb7c0dffd40d5bb9a32fcbc6f691787de7211da062616272c77c62ac83e4cb29fb954ab27d9009877b79be54acd336bfe2a6e087abaab004743f5ea4ec8ddfb8086920e8e458a413adb98077a3cf860513cc8a453eb129556c871be7e7232a6130c4332819ad17b289fdb31f8f8854dffb4cfeca6d792567b444c750820a2a8a2e0f93779e61a4966650909369fc8bd5bd2bad4ff95cc8a14f6cd83ae6411b4bfe1a9b5cdf1fcf32c54cef1731edc47d41fa581376b25006fc859b98805d70a157e501a2cb2ab425340965213adfecdb5addb2b4b2ec5cc6935e4e279bb98283fb20dfcd8a2c91aefda9dc5a57bba4d8803d1eb0f4ba9529de01e39c2aa60a91267c31d036a3f669b9377661837f58c6950fdf38986ea13ff5e9c4d966bf999002da1a854d54aa225b259d91eb88425328e7d13b06dea321a151a8dfc44755214da97168e8acf027d66b7fff45ded94fcde53ff80342d4595644549c4ed827225596e2b30480e94eb049b6cd718fe8424d044bb5098e0206047ddb81755e3cb92131dd47ec754b64c4b78f663e364cf8a74cdd9857c81316dc4ccd5f02a84b310abfbc9d6a23ee6d1eaf6b8fc1544cfeb06002c8a40fb0e49859d2073a7b1cb112713518ad5e007d0a256f901469bfa5cae98841f877faeb584d41bfe695da72ca5700ae085f39c99f769502ea9f43c0b84ca4611441d5adb3e5d0a426297e535258748169cad487f97d171c0630642943508206ce648aad2971297f3d4037d73e5fbc73460ca7401b7dbd7807273ae077a81fd0d4bc90b6068e3ec95afcfeab16619306fb23942a4308e8264b35f4912df392dfc5daf35dd842a5a1f78fc294cbdbd504056f0c7779121b5b3db7461e437347452476f3b0bb22e63aa23cb9d3e797c6c95513058d8fb2c27864ac0e1f5001c988e29c79bfa4236c7be41dee5561d825c1f0fbebc0c06cc4712e88ad5efd94f4eb4e93794af42a9752a2ebc57dc2f3881c75bbb23ad25b696194e0bbcdce114ba291d2b5b4c1c175e1aa3ee3eda55e6126b3ad1e613bf8e0bbac727b879e7796fa0ad100893677a18b53f5eb31db43a97370d3749afa92fd0291fa96b05daa6beb43b9c1c11d9515976976d1cc1e44f35d317299ceb68ea2545f2a2b92b4e1046f6f92c33aae6995593189bb2611576599fd765b8e6fe2e88674ffd57ee8252287b1904d622c36a502db45c72b0d5fc3d983cc44bc955eb43911404667a4ab147d72b69ff2514dfb820ad75758e85df88499cea94ed658b4c1c2f49fe2bbb8d2dd97f844a6df289296cfb9cd5bc8d17aa235e2c4501b1422b25acd6dbc3a91d03904c545320524f9034955ab02f5d058097c37d23984baf808d28b3e12821eb8919a77c1b6a8bdeceecfcc487c39db592817dd378a7c5127b427e7279b2a82f6b8eec6b3fabe0947e353e7a386475b15011de93e2f2891f772ef90f4aba1ee1c4d7321c81ce4dcaa378daeabb93182c319494436dbe67d252a01291cacb59686ebd53c6df21c083e98fa299cf5e9b59f1ccea95c62b1437c8ff8754a6372b5b879ebc3241f6430871eafe35337d75cb68c42862846df4342ab434f7f0a7b9f66824e1e696e3dbecde179592774b7511e5a7a1a06ba601eb5f2a935c7cef0f83ecd412a84afdd05120fceb1afb6445ebfcdff8fffffffb75dddccc45afb4f5bb1308d39309c92c0b61a322d5229881fa5d598113cce54107036ca9f63fe863d257c706fe89d5c7ae59a459c6f15ba48d80da4aff541797b26418acddb987df3544bc4918cdbbdd8dd1bc2163c89635044e7b4da878457727a667c0146a12b4c46639497243259bfe4aa5ea50eb79f39fa9209256c9a685e3e39d6d8b6a9ca7d3554fbff0908ad6c6ecf68e506c20b16cd4a98e3ada9eb0cb3eb0b75b13b6d80bf99eddf2282da52cec085d3a725b71c29395d605e1eb26143290946a3a0d24347fa46145735dbf4eabc12150b8d5f7eeca804d7ed1fecd0132d1b94ebec65cbc07dfd4d54a5140567e77c646bd92666922c43aca8e482c59b970fa43087eb76d6715e4e8e5ebe54ca391383ef685b133534fcc1e5c5eb56f9d76a888506c4ac8d289c37039e0c4f927b0e11e85c5c7ec1cf4b19bebee6014cb89ee57f2ade8d166005e956d46a0c01f60b58299479e8a59a2e88f1a7ffd08b27d92fc2772b338959bd0a1c9cb95075c3cc17043c818345b29b76c0b8ed41c8c7259cc780c657cb9509daec1558453cfe061f54e08523a55d3223897559d51096b680802140800000000000000322e007c2af0c08867291dd732bfe4b24d1d5ae517a7f5903c369ac6b157d42eb6ca8c0d7b50fd533a56c814e7cf04db3012eebd53ec1b123d65ab1e462dc191749b005e88085505cc6d7de8eeee08def67bc1d1519d44b7a62dc07e491f328f786956d9200f00d78829e6af7c1a5835366201374b9487330920d4c57e2f7073292e173acc2424bb0d5e0e9448b4c02f9cfc99bc408110b6a3e9bc3799e4b178c2871069bc7d9ceba564378f02b2932c36f159478b5facd452b595a86d119216af9d860bd3997305320159a69a70fc62284141d23d2dc1e5394b271d99e5570450f1c55807e96c7cbe1b7c2e3e96f69fecf0f375e36e0d2acf319e37199e98486a8d145ce2d996c1909402744cce63664a75e480b197c345360321e830e5912d1d7bfe5a129a67fa98e6eda5268fa588047859daa11d087d0dbf0ccc7e120e3a5820cb4f5dc06748317e3f866518eb66e39dc8a68a7411b3403fc8eeab8283dee4d767e8e5842ed922e03ae5b3c9c494d5ebc61527ccd1222740fedd9e469ba6b30761cf387d654081c7e63182860e4548748058914a9cea01caf074fe6a78fafa2b45c516f9f20af9ac6773a400fa9661a872f6b55f0ed52a9be9e9c35502604b924f0eb628d6545da322e0713f9a5587e87e4b04fa495423b7c72093b764adfd1430a2e608b7af3d2bf80fef00e5b69abe386618274921ff57621bb99739de2e066ff17e95eba027f6a35170af3a69e93359a9643e155832d45c1aa9a8f71ad35504b99d3d0a1c11ae108664ea36f4dcded083aee17ac9efe7ee3fdf7b63c7c09bcef62caa88708510d45cea79d323083ddbfe7e5d3d9138f206a7af82ef1d26c85015c3e55a285a35d0052546493536b9061db27291a9292033753b7bddac63dac6f6271689240e43523c434a65e1d35299e386c953d0c92f21057e0b7883e049d20961e75069587eb3df6206496f76bbfd96635bb19837ba2ab193d79072ffb8829306b63697ff104a65031b8a38c24cca9ba23d5cdf753169a00fe2b2c3849f234a7029b657b3324c10d553e601aa97d17024f7bf5a99f96392f4a079a83daa27f4e3b512ee8536e764ce4dc36fd0874dfa502a693e55bd9f116202c5e906703e2c43d84448598b7af78aa60a205c152841e75e23436738ccaa6bbcef87e6a237d86d1a5e38e56c162cd6d61a4fb8b410b1643ad557a22348edfa82c23db11c9abdd8141fce263a66537512e93a930a4801ad862a902c7c1e00eb7c7466b1351318b7196c2a9016c55a05e104e124bdb568132f9397e31b10d04e5284bd029ea2f6a3ed11854e09b5871d6a725c21a9ef5d7e729a90a8206d5f61e6e42e47dda3e31b9134d47872a0dd7a576b665ec6ceaa5fd7d85ed7feede9ac9fc23e40241c0318077edda75b62eb271e28fb3705f7b4950c14b721a3a74a7a4e4de02cef5de76a1602b906016c0892ef37db51b0a1dd53f28b3d896f20abbad1ad0e0220960423267fc6e1779d1150fd584dd184bb43278d2d68ff21ac0daeef5408348cb80f4a9e0e606f6048bbaa517289451f084fffb63c5d904788cfc310b5495528a58f4650dafc4e4675b99d35ebab710ac6fefcee6c51a2835510fb6d2dbd8f97c3e53fb7a23c3f3c0283eb2271504581b9c1fa31e35c117e56a5d668a9c57df3b4e1129ca019a8b877fa4a22768dfbdd9d2154e17f4a7755b065090d88982471bfb242d89af5c6782693a6ab1b1be74dfa5655ac3b5ef4ace8dc595803cf4025bdf5c0e9fbe7a12a3a313311809591da08a2cc6cd8480dc960e1f79fa208440a0e589be5756c36d5830a51c4bdc39c2a85c0431bae3a7331b2ffdf23623693d343a7938a8a8a4dd4d523c6450a705bccbb38427f06f4f84a18adf303c0ddecf4ce2b6cdde4e09a4c31816195f0fe9f05fcdc0609f8a75ad2f23d5c24faaf346c13ec0512a5c29477ac561c878085d1a323f6bab08e2fb9ee57d7bb621ef21caf3609d74036c6dc1d7be0b6058d89dcb8d9aa4462fa0a740be66e3fdaa957f27c5a26dc586ac8c927ab2d7cf1b761798ea4191be8f4423cf1a6727d0c5f27a9969a753573afa584dea82678f3471ba36d726c396d68c671e579120f1a11cd50fa66b26fc2d6cb74ba07edbd5d3a288cf58ed1255381df02b2fb8983b7cf833433d1ab8fdef12651c3507e4b69fbc4b234678cca36761e8da434e5f036f204a1400da15277ef27ac140e2d574b89c0fd617da27e6ce862883bbe81c288834b9477d0d440c15dad505b363fcc1cfef8e2e3a96438809505844196acd0af751dedfced67f209c2ffa9c6da842c93ff4b5fd54a67df904f2f31b4236728c99582a667a8461d397770a657ffa7d514b0f076d7f35e9704a836e7882a2acf0a0ec2158ac7234953c3696abdc791c0b163ee76fbcc5adc18b6fa0f51f76f3d313a0d891f1deb69f6e44289b1aa43a768b8d13270959763a2c45129daeea493a5b0d7b36753b223dca9a8037368653400", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x28, 0x0, 0x2, 0x81, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) execve(&(0x7f0000004700)='./file0\x00', &(0x7f0000004800)={[], 0x23}, 0x0) (async) shutdown(0xffffffffffffffff, 0x1) (async) listen(0xffffffffffffffff, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r3, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x8be6, @dev={0xfe, 0x80, '\x00', 0xc}}, 0x1c) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) sendto$inet6(r3, &(0x7f0000000400)="17", 0x1, 0x40000, 0x0, 0x0) (async) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r5) syz_genetlink_get_family_id$nl802154(0x0, r5) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, 0x0, 0x40240c4) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) close_range(r0, 0xffffffffffffffff, 0x0) 3.782714468s ago: executing program 4 (id=2737): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0xe882, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20008844, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr$security_ima(&(0x7f0000000000)='./file0/file3\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f0000004380)="b472658eb4def9dc4737a24314c2034499f98347d1fd41684c0a8bce249f6928c5f504c222e06980549e96927c63b95323810e996f1dc19ed694caf77c54bd6d89422da1f029129e12d5bcc90cafb1d4237fe9f7044a88170eda946ab462c3d7e7ce2f1c59524bb1d34d38f4aba5de6a37962f176cf576076d04c75638f940a8f85210eb5a2b8e275d7176302d8a3beef2db52855e130a7990e47ae0b65cef34a98af6221bf56de6057a8f5e6532e863a5fb45bbfdbdc817ffb52aac35cfe4fdcb30c7937cd766c6e810bf8c3918f297d410c8de7619fbec9e89c20063679a5864cba1803e2290267e87f9ebfdf02e6d3da9b53b33c46c6bed7a5d7d925ab0c44533a0ff041bfd2554827e21033aac94dcd83e91f6fbe90e91e1d4d0bd1ae287220438e585e1b91874a1d91e4c1ef469b2d9d493972f3acb29682fbecadd83891ab28c8011be50c5515ae1f904426f72ab36402bd23cdbbe167d2c8297dfdd2a555d4d3a0dfdba824c928a29bf69fc2c25faa674a5a1a35499d70e84a8fd82c15e68611873cecc0f7ac55a249c3d9aeb3ff4576227ec18d9cfa0593abf8943ed40c0221eace3da737d42702b41a33ec51cfb1cb4ea5286269fff34deeeeab6787b9716e626b2d493a04e0b9b80d848812dbd9c67bf51e6220f8c18dfa08bc20d435597ac1bad3b94d474bf1e388a14ee80ae736b60e720fe32711ad78308e41a7b88c9064dead9d4fdb3b2178e1cf2f6692a51c8598ddd19e7dd98e4adf9d358251925b21ba1956dda1c92be7fc22d9090d9944de5eb4b3589f8757fd25a1839a3ba76f751373f826d3b289ff4c996cfc89a94ccca67a1f0ff4b5138f8340123e510c4f409cc1823f5b8c041449a237624d9a51e374f66068dd861afc92891c12129bdc9540f22f8f3306a8ae86151a6426d01d036346da2a344bcd67859aa232d6d95478b398a2aae8b6a65e9715e666d29b8276935fae94d11ac248d047b26934c17760736045a74d7f4e083cc54ee0eabae82db9cb9429868a44495c08040d43ea8f7924d79449486bd456adc79b5e895dbf6c02627cb794e55767a27bebe7876d18e60cdce2578c2cf7f096b6c8915c043c6c31601d9892860e8e7721abd2630becd9fbf53c62aa66ad1fca091a768eef89bcb168d34f79d1df525191b915b325ad36f7612cabd83e4736f01c856e258f6aabcbda32dfccab8bbfaa48ddc02699a99e8c78df6737d6c5472a5c9ddfc23a2bbeff3dbaa04ca897e5b2622467b5dbe2b00f167dba867f7adcdbe92439bf5bd54f98fda4b6023ee34676beb6b58ceed128f86f9befc843ec119e7cc56596d98688367f7a0a7da0d0144c79bb3c4bb64c52523b7477bd83b6b8d8a30a1203ac0bd17aa8b9d32825c9cdd068eb2566fc32251a7ac3307f28c41812facc0342ba0cfe3aa2748e5eec07dcfaecab9760bb487da9b9aa40de97a961ab9eddbba942bbce1e7f46e25aca1be69c0e3e7212ca6697897a9a22795c4e1c030f4487bc2987e1f86e2625242860b5cbfadd4fc009b144906ab62a8b7bb557f3a079b3fcf9dbabb9075443bd75a677b541b43deac5e44949591a1e1afe246d7ec9bf6075332f326c5e174d40b621a4e46fdeef621d5bd5c8560b5c69688084088b6b21f10aaa4174c27f1d31ee6ca07e6f735fe12ed0e8c3811478689c2e3fefe3bb406ed9bb87a3177f90a4dbd36f51a0bb1661e62a2349c8bed59681b529b683ec08d6ada9b148b2a451fdd8704941e4c52cade0315cc39a27ece9c0d44fe2eacd1205840f957be4a4f78c3c9049a2b53da2dca732c096dd5d5d44f53aaee2d1438e32e321dbcd584e7b5b90d079b95df8128d20a32f2e5426945198c248bbeaff292d0ae820632d9410accd959a24170c88623b92bcb98ca77e91088f1e8d674966ad8f75b3b70d124b1fd2d367d3df88012105efe8889b5ed070a5764d3e8de30032272225a966e1bc94197c9b8f2aac127c521d1b37a8c0b1b3edc5ebadfed66ddefbda0d4eab95852e38bae225c1a12e479e31a1b2916e474b79155cbd03cda8ef5bca9cb2f650d123e44bd878bda3d1ea086847f0728ea7676a230dcbef808d509d952950f468fb8e2e67779bdaeb91d4b96da8d7c67d3ac168a54c22762e8488732fca4a78503a1bdd174b0e99a04a00d6acf7f517d46d4b684e2ec6681ad48c632f794010e7cafe15098718ae1d9f347f45841741c00bff1259a92cc3600bbe88f22dd7d8374eba2b56a2b1970066155f2ff29b266e033960d5a894e01a5f426f39cd6f3e1af65a98d589fb290eaa11e5fd1f7d514df0d2b9347f06a19b3153ecc3fe57cf7db9aa8c9c124b7d0ff5caa8bebb9043896b08d2257f9ad3a2584c043415795dcdf4ea24a391e68b4ea66780306a77f4c620f0e390be92af859e182349faa906e51bcce1f0daae6141b86ed39513e5dd047bdf4851caa2382e1915094ad4a617bfcf6d991f076d9adef29aac736d7f6c50d2641eb27ff2f70cecac8efad26b46d3af192e0923bba5c61fa3596bf35b5ee0c8c64a0d073eb9ea0f13bc6e400f74a879492ed79fdf818e8cbaa6966931fee67e5cb34ec00b04a6e44cde309e46cb93bdd47f5bab9de1e01dfbffd5c5b80fc5211f8e6b399d7ea915ea14f4abe7302dea4fc9ba886dc282f6f6752fc0aabc8b5feb8547b86b4ea7319d43b1ba67bbcca991b332fddd0eb41852070bf2527e53df427cd547fd3a962d00b2c921e924643628ae7c4986a75c0493deb0fda220cc6efd793321092fe1ec25dd43e7779a4fe603c44b649e2aa0b6a4080bc28607d755c1333f2f58817183df90f94e8ad789a8854be3e0e55e4aaa7b3214727d66d973bd2374bd0643f8adee74b9b20914e17f1b2ef0d8319425548aee20ad63c99e2f283e8ab627894ea56b7de61ee9bc3014bd122285b4d29bc4178c046ec29e2c1fe36c2c938f500edf1a4fdfe76daafa74acb42adaaaf6968badaa771854b3f6652679cb8e11bc7668912bca103e1849e0fe36d979d34dc8a9fc971cf9b3bbad79528df870e078970f6a25ee7fd192878974f50c505688edebb0e2c7d90c27b7cbbbeb5c5fb14d0a72a14424e3ca99cd1dfaa92f96df0da0ab8c20a5644847379d970e471139a1069e73cdac202bbd171707c2f33e4a07d9f3d222fcb138b58b229f48435216295bf4937806639203b171e25d557aac58774c2c9e4c89821442928abacb8eb487b686aeaf479dc04b5bb39850c55b3844fa602e1eef21b6df45d252abdd9387c7324d77c4d8c9a448e56b11290929276931ad78f091dbebfe280f6d0edcc4bde2fbb0cd5260aa76725d89a8f2639a2e5e42a97b9dbd5f53be7d5e836f342dd1a7d3430aa88ce26f28631f933f9d7733d7dc29b1fd1f257f2ed1103afb3e0823cd4cec665ad72c6e5c24e6982a2dc8026f0551b5f09f206ec810d43cb3b517550d6d2ab9f1711e94afe58c4b1796ea41a15b06727709ece39fbadcac65e2bd1588138ac080cc9ca4763177675186a4d3cca80d13a39e56dca71d02ac4f7b5e7cf149774783ed546d055f1cd5d2361050ca31adfbaf6a58e1f5e2f3fec79542b5328577fef5b035bde64a6b4107044236009c4a656facf9be9cba493cdb71ce8b2a31204d720656cbf6b549a6ae006bbe287dd64573976ed18baea6ae404861aa98ed014e724f2cb375a6bd4b50efc222f89d76e2e1c4ee015ff61abd1dbf69ee26fc311e354fc664353d887d844765c1f6fc5e213b55e0bbfd578b4e1df5b4f0728d3797a80c08d1af338e225d70f2eacf8164686ab9a9ba9a6c1842c4bdbd18014e2fa185e7fcdb593cbd98679e500dfb891ad53109c5c29b051c0606a5a8a6b809ec223c9747f52d70b90375efc5fade220011ed7a704841ef84055fd2772d7adc022302137fe9643081f7b89fd1e75adcfa5a1f5ce98c24c11b082231e75d6b4ce2f2208334f2af03edad1e5e744055ee11a8a45a087cf583e16988183df33caf0018018fd8b6d5b3b20c2009cbc6652e03433a233f1c47295481e9f016950a2d115e4be72962830d8103f3caf4ca21d519af9afbc130f618216806ef9459d98f3c263a7f95295d138e6b7278f7bed8972a500d670695ba0790345b17cf3cf43474230a04fa39915868a457471d2e322006383973f7f709aea09d0f223ed5d6704eb6d905302c1814050ab65eec0b6aaab9bd5ed53bbb58a7c02ccc856007d14e93b3521368fe25aa984b938dd98082d1cbe931521666d63dbba4318e138347ca985af919e8dc7d3877be3327d4e622cc8202b2327237fa487d45bcdff4df447596fbcb2df18961b11c329f1c8388b861bf6a0c0d76c4bd8bb0538fcb63fc53e0be927530fe7eae7cfb32f03cfbfa9b39b2a3b6586c8fc3d86ff1878e76cd1fec6587209e90447b63ff36b80a40e0d6b828b0c8a4c92f5576fc48a93670275fa9c40f5fc0b9b78b6159286c5915a4e623e4abc3343e31d3964059ed410411e008e49c566422fd5af3be4e34b6c5f7aada89e7ba68d685e84806a8fcc8f1a61b336e787756277dadb6f9f18cc15537735d53308bb706801222d122ca204d1307abc8fefd154960f8e1255464325767043f6fcf0942df6645b0f8a631587e5c1dba7963f53a33b59a546019253468d304ac22f31492c47348857b4c7be03fd624426e17eabf0ddb74a7e0d4d41cddf0586f4ac7f590e08c8e7db712d837c34b92a483ec0143f2a445668f363345c6322e53f29c0cf589406e32725b05676a66d6ad5cb4b72631c0b055d018915965c1aa0a3674e41a1ab515966c2168af67bc3db9aa4943fda7683333241aa71d76d61561527869583daf4b6cdae130aa5c5243e63bf62b9beb13e585a26053b907793fe34c1ebf95806a16bf75a83e5b5bd014cc38c5cee3db5983795bfa63e193238b24e2f97448972d85cf1f00e1111b2eb6bf739da020e06393a09e43abb1df25ba21fbd655f3baf3788915706c237f4b9b785269d4038c70ceae654ffd5e86a07c23e2b2e7ed313d644af16f3b541a4f4353630c0844beec974d9021ab67ebaa80edffccfd266a568344d4ad6a4414bf3efc12aceb6e8f062716c94a90a1c8462d5e8dc54e17aac8e1f11ac0b446c90dfcc6befba5f5c1f678e5f0a572da4d9d3358a01ee7396e3c192dab8ce89638ba4731060192d5937c7621c90b4dec38101ded13b646cac254f3e386a3d60b19dac6c403c7a967d6ec1c36afcb2e2ca4f78c0699f25e881bbefc458729feda761755957a7cbd5fd9fbde15e63da28f4c22884d7cf17a980320d08fc1f520e418e2cd5f3432ca2df0128eeef78b69f6c5f142ab5b36c1ee52c3f9d3fa8b84afd3cf2e9ece523a88f105f736d75a37322b1a2625600cd2aa8964b8c5575218ef0491e3eaac6a190f6aeee46e4c7e30909b8d9ca683feb30ec4c10f68705a51e87af34659dcfcd236975347a89938efb1ab28eeaecb1befcac4d4c71fcd0aa31f0dd60096c2730f71dd452d420a30052d29ddba2fb9c39e7a691a8bf4226c95b2b061efa1709acdf504d2d3f9f28f99c68691199208fb92735221fa2d3491430127cab4a1d914fa496f07bb7319b9f9ac4d483ec95010cd32a8352e9e81a52288937b94e8bb41189058cc14cc6e188364ac10219c1a6e86c814ef824a374eed0a4b79dc3286c0ef12003653f49a6902a7ca2e542fc79d9b07dd3b8f59d02825b64919e78ea186d2acf248599c445e349c2903b27abd8df7caf317b56cdf05b583023fd65eeb3ef0ae041cde14bfbb43ac128fc6c6e410a2a02cf0ae036f2d9f4bbf423d0044342f93625861adbc1c1c210e2525423032f09d3a1fec5d29056c5f0d469131189f2f6c3b83832c6fca5929bf89f9f359aa6040bf41902ea145941f7c6d312d2bb2084d56f0582c25cdc4815d414fef6e6dc1385b8827b8a76cc3be75c58d3c4ef45a21898948b377c5430b5745293267273ca5125108d643de00b2ba3a0efdb506069f39212b1f44048f6025d6d444f7a28a76cc71f9b05956aebc2ef351279dad442a448b015b45753b152a5966ffe8dd9ba166f429eaa870642c8280e257f770f561f3e9722f14fe54caadd5107171001eee6bee9dd0c64338aab37ea93cf76addc1b6c13d9baa8194f1a59a8d534065c6f3ced4aca009e09f6c8edfdf0b09ae4ea2c2bbdf958ed924554d01fd8847062272576c3c6c2940cbfff03cc3e3a47abbf1932146b3a760478779336bf14deb49b8d0f448da8e88a95dbba364965d62b9cb2f93afdc9cd1d62f9d1913b51beec0dd1e6668d88677a64f74a3ab2cdc40a4589b9330b0e1872e7ed7647448582ebf1f0650a905ce1ae440e167ebeba5669909fa4f93130648fb2a906469b8b143806fa9b5154d7bd9b74fd2057844dfc5979f59a06bfc3ff31d354d48955a233020a64c3ea845ec888662efdefb3004e326fab9227733a4922ca164c14a4268b4a3ada7128803d44786f83642bdcbc2999067ba70bafbe959a7d4cae50ac39b7e22e2b1490b64ea878bd07b81cd04243f77c73a22d947090c98598ae30fa69894b61bde5205afcdb48f6d7f2480af0f19b314caa10870ca6dece503a2b771619c35af19589e15c95cf359c75f9257203e994dc5bf090885d224bbed827a58b70012e6bbcda71efa2c2d9571ca2957f94b723335801414f492a8b46499e5db5fdcedde6877e069c65de63bb578a59ce7779aeaa2897d08d01744a3cadb5b459615a7484b8a6e4468aa587797c191957ac990d76001d13b0b405b149121e4e6b290fde3177159135903b192fada74d45e8d61ba2f84f2201b3f93edb8091152573198495bc1f8bb11a554d6eb63bf0f586f43dccec231cc0863a7accf0a87b57e5d006ce9a42104428805c6d81c1ca860ef98677dc2a450da15acb639d271b5e1bfe0eebb640d71b76d392aea7d3af7279e06aa0550812aae228f3d428fa601af1e081f035871deb3f3189063acefaedc4f6dfc6046f448976e5ea8e444b2e2bcf7325822725f02e9253eb39bcc8d7406f5a2e5929b6335e82e816a977f52606e1bcdd99f61fc4d65b08298f1387d9a560bce710fbf3b97ca0dd55f6f2179f37821206beeeb63fb91797500473f71b8b84fd0c6ebfb570b263ec9f580bb86bd744b96bf4dd8da67a2b18fcfb83c4ec13756f9897658324a9a778289077f22ccf30dac680ad89ab04aff80754593f4c6b8f04b8298eed50f041cdfe54b552c6042d8deed91d41fbd95bfa389b2475f678b05ec6a0d459061076fbd530f6d764fd89185e4a6260890e960788c953502869918ba9a0132a7b203e41e9dec34cf93abdb3bbdbc8d545562251ac570005b789b4f85b29fce446b286bd7d3857e708b1cff322f457babdec0234eca2ab158d71224be7c8b0bb9581f818ec996ab632608bd117137984b30ea678bf09f281e518a2130887aa7d2c6ab42a5864ba8a9ef268bbad7d99dd504e4bd57acbef178aa22117ef62ae7e3f9cdb6355282b18828b8cb269c84830a513743d44bbfaa137ff8f67ecc3f51edcf0a4b75f469ae17ae9e1535620166b1f89880a34801ad0c0a349df84ef177e16ad78f935b50a0e98adc6048970d07233da96c8467b6dceaa739e3b03eff731f2afde0c434ab972e020878e903eb6658f974b8f2b83d8431c4cd4a4bb569a84623c07d4e2085b68769c82152065c09fdb95758baf9f19b342802ffa80a8ffe595cb909d1d9d007b5c9c5abac6f66c0d296e33e22afff9216d16ab566afe1e9cc85f47ce9789cac673a96f30379d0987d70c548ac7946d1928ab41f5716d1b8b2e95379a4de804529cd7f823043d0fc7696c9b3d319332b57762e84782b1ecdd67c6333564be161d435916469a16879fadd1efc79d11f10359f2e5bb0b927f7b8e27fc8be6bbb121a719bb6c01e3e3b9f538f9ce4772ce7386dba6c9635114cfe8c067de012697b90843b5509d72a557372e44c8fea8ac26991cabd2724826402597c735205233d8a6ee2d092fe07c9dac1dc7db08c70ea686568f2026f5c2db0f37107420a37504134d269a2568df468911350f283c48a7d405a03a3faf53118f1c6374df64f1e0b86f0d1ed49ee9fabef1c5c8384212f6f40cfb205b9b50731d9f6a091320d75d1ff72f09a1cc5fa7ab5e67cf97eadaf22f053419d14ac884a7154d3e688ae06654e55ffcd13a4261e151e7e3f24dedbcdb51d0544d00225579ef291975887b3a6747560a3cd96caaca6afb20d80fd4a48f66a5fe0f4ad11c20a5eadc6107c82364e4c3fdce8517328a35a0bb95d83d9739492dc3f3ac600f24a962513201fc6c65ef965446fd2e641d3496e1a9f03e225c295aa4b24cf1e4f3139299f129c12fb125cf149bbb78cb539ad40bf11bf36bd735561acc25ff588d50d52621a2a8889067aae5413d61e164984144f43b7335a75c2cab8a3ce6f6f3010b6ac4334ae0559a092aab0f2287ec25e4aaef4d339c5356ab110dcbcfdba99dfd0913f2b4f3167b9b8b5f1201df0a682f968ceb64f4a9f49cea603c51c1e4b33349d8f253508eb21b557f92e9a3191da0fddd823d22e783e0dfa4d01fd72c72ee0580f2c94959360c974bb90d4bc4add254196faae851129ec0095a763409113893a9a2d5484dfe97dd9c18d1a8297530b170ce21f1cfa5d9356aea1145c8c2cfeda39a2bda6e326d31010373c97bbfe794e565b774cf4e36180533db962b516afaa0bf0e827c7370f5ba3aeb9eb6e3da2fabe22d1a2197e1daa71a3707f34f26bbc7a23d9a8493a158fdb0dff490861f1c98ef162f6336300d37560c49a2cc76436a8cf57c785dadca1e2f941d2438ca09127159e4fd006c7c72d24f471eb35b05fc2225d98a815fdbf189697bf9717906d021983b4aa69cc28021ed11161add4f3901f07741d08fc1534082dad319c25c86209a28562fed5a04d3a379c07d918062cf62f692f4a1b57d8ecbdec9f23b274793e8bd56545667329b2c2aeb2fb6e675f1cccae0801c3f8d6801229371e0d07d8494054d82186928649c79bd76b3993b503575d62ea1ab6fad4bf297afa5c23b9056072b3f87ba312458edb9a5d95c1d609f1ebc255972f272dea5002671420a74639de821717f3f8c560c44a0bf3c37730691fee495af60be4dc23c930bbb94053977e4b15695045ebf039df3d8521e955c7c1ef98a770b66bb2a7e38ad1f34a9af51a5d3025f160f148830b6d2bc33d4a00b0acc140838eb9da3e1f3bf4c21ef8efd0fe19b2c01f1e2f6cccf989ba878aa29a2f48bdeffe10252a9585fd18bad3697d36e7b19fe393676dcde83878fd101efc25f599869265a909fa42781cd956bb64c3e05af814c69757cc7fc4e1afc87ff39f1dfb57a347b36931bc542d1d9e576bf7c6a7d7bdf2ae6d5c6bab9c2d1d423b768d798fb1207b6975e74911b79731cf8b70e467b8f85786586b426b404dab03d37d6d2733e701c9a8bfaf2ccc849f1315ae662cd69a7e8b738b91be5dfbcb19c7ffe0d97113580817451300a5964d537d81a009a710415840c81af56bfdfa8a952e2589878283bc38487beb7d50a2cca541290abe6fce67ce8334ddf422b2bc516c9bd9901aecb6b0be67d9e60eec2a2eba7bc2270f391f307ae87ef5e8a1290b03999dde0e6737debec308bbfa70d5fd302c3340c2ba51e209bc95e8029aff58038994992575aafa7e796f8e9b5fff02fdccc6ab96d7844faaa23a3f36ff637ac19f738eac863e6f5cdcc70b337d1a5d6b460d668459251706bff43c25027474e3dbebdfebafeff972341d95df92b52a4c2db6b9f8bc73329dfd6617e6f06119a6c8bd4476e4e6ba1adfbb99dc23004939f086da0695b4b51716fe398922a714d9a73cbcf8b3a599808379f7ae50933b5e82771338bf3f7350d8d8040ce3b04d88389ade6639bc42acebd40acc60ae7300d147cf166e1e09ce1a51f57f3c65123c70502898cfc0ded2b3dc143e0134c36950849f00df26b2b471ef1a5f2eda7389b077a6f322f25ffc3428c29d66ec4e7463ef79ce38466563e0ac6e73bc507ea4b0d29ef36a9decc3fd0730dd2cf83f7e04fa95e1a881081631a6a99f4bfcc053715b8085d4f6b0447cc1331f07ed7d3d91ae91be194327e9176451adcd9c531b4b342d9baefeab042f6ac7a5a2496c2673bf7f47596dc821eb213db4dbc8bac3d2c02c52f2b6c5aaaac6ccc34bc441649eed83ebcea1567efc8f7419cfb22e4491a3de9d7fd7611934349c90f52a6dccb1652f6b560011451cb09749d9c710a4de43979e922516bc62906f45dc7f3121fff19335fc921785083c11a5c0442be028153ec0d016ddb8fad6d694824213786956ea9724435c709111d7ef47d934b432d1a7f708f67bd5b5277557a29c6c13935787e84b73ca6af19026cd27fc1a73fdeb61fd7a609ee14f5e0d113061a1a7af6f425d6b39211191f129e3897e54cb57a5057298693f7fe027b595b97ab73c15a85ab9a51571a8b372b9d44812e106db6fbcf8e5f801eaf1c35ed283cadc7f4e8c06d7fd90f867aa076d5294fa5cf5cb1ce4f4e243dc418179cc8da3dec6779a8e56f3e7426177e4ea0dbc36c695e0e82d8a1a1a2e0e234607b2e1241d1d6442082827b286de110d6059af156a0e49a88140cf4b4f724552b29039ff04034e6b884c5411d4b314227a776fa6e62609ef3468781ca6acf730a20844b6198e2c77021bc485952df4b72460093b972bcab5264f9e4cbdc3effa88b028728327b72b560a57267c4744adc9346907f02494ae61cdc1949e10a63efc6c977bab0cebbbccf1c01b842ea93344dd498652ae21f7d808122e3a1be4fdb63f3b285ce7a55ff6a5e4a95b1db15efa76d4702cf467b3ccab7dbbf511a5d1861010c0968754f6453de53f5b5be29760471b33026f8d51dd7f7175da54f56eeae49a4ad47851e050fe9d75fa5a1de83b19088a643247c31b042bfaa786de4918091599a404378f79eb936d4217159797a5808d773868a86fa3c7266d9b0d8bc515fbf8719071f917d89a3d03716d7690676bf2b9d7e60e87eb3f0ae77f5deaef4dc323f85ac4e7731027196325a976b4bbd806d45e1fc0459f8b9bf6be523943c565239953dd2fe48195ae6df2d0a091d299ff9327f60ac2e4ac7c3d38b9e51d0f00d8491214964197ba63bc1318e250a23cdba78b34f0fa8dd1d6e93d298019d95f8b99db0778e27f2c558abaacf6d5a587045d012a76f7edbeeb1520d2e8c4521960dc3087cf4ba4f6e176500335f853381cdb0a75405842b855de4cab409471877ce4aa1efc943aeaaaa6ebe6e698ce7e089f9fd006f5d386f6b56a4a35adc0c27331a047e02dd4a9416c403a50f2ec41288abadfa73c72c19b6f3d08d8e66a394b59f676e4af4791581ed54504f927aaf645675b9eee1cbade194502e7331e0b4ac9216264558bc2816c6f6437e8ab7499c9d932e2618d3a5527966ba139a5dff52438a027e87d52027a07bbc292f2dacf21d30c6e60b3cce520b3558330cbd19df2e1938e471706813f515b245c7cb5e6fe430158feb9b46100a353baea95584659c3f2470cbf0376f4ede44df01304f6b7549", 0x2000, &(0x7f0000007580)={&(0x7f0000004200)={0x50, 0x0, 0x3, {0x7, 0x2b, 0x9, 0x100, 0xe, 0x6, 0x7, 0xffffffff, 0x0, 0x0, 0x80, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x90, 0x0, 0x6, {0x3, 0x0, 0x20, 0xfffffffffffffff9, 0x400, 0xc, {0x6, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, 0x0, 0x0, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) read$FUSE(r2, &(0x7f0000007640)={0x2020, 0x0, 0x0}, 0x2020) sendmsg$key(0xffffffffffffffff, 0x0, 0x84) write$FUSE_STATFS(r2, &(0x7f0000000140)={0x60, 0x0, r3, {{0xffffffff, 0x2c, 0xe, 0x81, 0x8, 0x3, 0x800, 0xb}}}, 0x60) close(0xffffffffffffffff) openat$rnullb(0xffffffffffffff9c, 0x0, 0x60a00, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) syz_usb_connect(0x6, 0x7ed, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="fc01000013000100000000000000000000000000000000000000000000000001fc0200000000000000000000000000014e24000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x11}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780300", @ANYBLOB="37040000000000000000010000005c03088030000080060005000000000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39223400008004000980060005000080000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922f4020080cc02098034000080060001000200000008000200ac1414aa0500030003000000060001000200000008000200640101010500030000000000a0000080060001"], 0x378}}, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) syz_usb_ep_write(r5, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f000001a000/0x1000)=nil, 0x1000, 0xa8ca3411d1c26009, 0x13, r0, 0xce33a000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) 2.232075058s ago: executing program 3 (id=2743): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES64=r0, @ANYRESOCT=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600030000000800090003000000050002"], 0x44}}, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async) io_setup(0x490, &(0x7f0000000080)=0x0) io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x11, r2, &(0x7f00000000c0)='\f\v', 0x2, 0x0, 0x0, 0x4}]) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.149579699s ago: executing program 3 (id=2744): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x68, 0x800000000000000, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x9, 0x0, 0x39}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}, @exit_looper, @increfs={0x40046304, 0x2}, @free_buffer={0x40086303, r1}, @enter_looper], 0x0, 0x0, 0x0}) 2.09207817s ago: executing program 3 (id=2745): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x7cab6ced6415609}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x8) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000040)={r1, 0x1, 0xc000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x118a, 0x3}, @flat=@weak_binder={0x77622a85, 0x10a, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1.56856969s ago: executing program 3 (id=2746): r0 = inotify_init1(0x40800) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="f9df0fd3210b61fb8404cc8f1e167444fea0957d531ea4b0bc5b3e891007257f", 0x20}, {&(0x7f0000000040)="6e10edf0941f7748fe6958ef3b10678c1d199025cee4e3ea037543d62a4f2d7e02215c5e2508e57fb499ec1b5b48f9884f943d7d1601ae236293b9d776bb3b46009a9d550cdb11cfec9c3b20ad364534508b6e27ec08d162ab22299e124001b8788e9bbaad", 0x65}, {&(0x7f00000000c0)="642bd459653859c08847aa69659cd95e0d148a5e5147c5baa218b4ba3acd91cca2fd3ee8becf06748496ae3724787c0c55a80304cd0a", 0x36}, {&(0x7f0000000100)="e972c20b5b1191f6286b18fcf6c94e7e7e9b3183636c3fe801f94fecfe4c40c7f48078d572db6cae602a3604ae1f13431717925a9db984da66850a6f958d0be4b37388b104385f50d8eedce858cc8d22ebedf8d856c432499be54502ae775d6063e53f38a0f5dcc93e04bc", 0x6b}], 0x4, 0xfffffffb, 0x9) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, 0x0) read(r0, &(0x7f0000000200)=""/137, 0x89) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) gettid() fcntl$setlease(r1, 0x400, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000300)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000340)={"e9396c96c95419d31b4e45153493d719", 0x0, 0x0, {0x1000, 0xed9}, {0x1, 0x80}, 0xb, [0x3, 0x1, 0x7fffffff, 0x2, 0x8000000000000001, 0x3, 0x5f5c, 0x6, 0x4334, 0x7, 0xffffffffffffffff, 0x9, 0x7, 0x5, 0x100, 0x3]}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000440)={0x0, 0x10, 0x4, 0x1}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000840)={{r0}, r3, 0x4, @unused=[0x7, 0xa52e, 0x7, 0xb], @devid=r4}) listen(r2, 0x1000) r5 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000001840)={0x0, 'veth1_virt_wifi\x00', {}, 0x21}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x30, r5, 0xb152a000) r6 = socket(0x18, 0x80000, 0x800) ioctl$F2FS_IOC_COMPRESS_FILE(r6, 0xf518, 0x0) r7 = memfd_create(&(0x7f0000001880)='\x00', 0x2) sendmsg$nl_generic(r6, &(0x7f0000001b00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x4288104}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001900)={0x1ac, 0x41, 0x100, 0x70bd2c, 0x25dfdbfc, {0x1e}, [@nested={0x112, 0x4e, 0x0, 0x1, [@typed={0x8, 0x14a, 0x0, 0x0, @u32=0x8000}, @typed={0x12, 0x10a, 0x0, 0x0, @str='/selinux/load\x00'}, @nested={0x4, 0x10a}, @generic="2b78bbd412846d0c9ff109ba05fdff5e83a20b9963c9fe6324e03a75403f3fd8ae4127426b325f3afca19d976c4b791c8fc65c23e4afebb3fd8bad7389a3b718b7f2378252b0642c0f56f59026a01a93b786f494292dcddea9a22cdb7ace31566539ea1d437f636176ea5c3b89ba55b1a51adbe2affaaa22c2d595b7910ab689b23eb67033eb657649568bf5c6f043a51def69df029094c50e8c5c1d7562f4862f06ae197ca856f96271fd2a9a92d560927e6543dc3ef434659ed97607973186e00cda6d553d99635a327bd83fd60de81c36b685ef769d99fdec122d6dd262d95c1b", @typed={0x8, 0xd7, 0x0, 0x0, @ipv4=@private=0xa010102}, @nested={0x4, 0xd1}]}, @nested={0x77, 0x4d, 0x0, 0x1, [@nested={0x4, 0xfe}, @typed={0x8, 0xf5, 0x0, 0x0, @u32=0xe}, @nested={0x4, 0x112}, @generic="06aafcc9e25145ef5a21dea2a9f74456be338196ad691be232874c3cc770e67be35a5dae92654e1f0d803ca6a57cfaf70f5f99070596480dddf09cc06909f6ca00c6ae06cfc5ca61c2423adc9fe16a1fdf0b03159c8964bffa49d72f02ef20c21b77fd"]}, @typed={0x4, 0xd3}, @nested={0x8, 0x97, 0x0, 0x1, [@nested={0x4, 0x72}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x1880}, 0x20000000) socket$key(0xf, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000001b40)={'veth0_to_bond\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) readahead(r0, 0x7, 0x5) r8 = socket$inet_icmp(0x2, 0x2, 0x1) close_range(r7, r8, 0x0) write$cgroup_int(r2, &(0x7f0000001b80)=0x2, 0x12) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000001bc0), 0x1011a2, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x32) ioctl(r1, 0xb, &(0x7f0000001c00)="b48f65ada2b08cd50a6f7b5e1cef990f4745d620bb1f18") ioctl(r10, 0x400, &(0x7f0000001c40)="c04fcc1d1c6bb8769e40417d77ec805982b3534cd1726c8edb8e2431662cb8a22722cb631988b58833fadf866152bb216d14ea88172a88c6fcef88672659277b2f955dbe872be72005aee55a77512396a57f32007628a23ff1c47cada8") 1.239757527s ago: executing program 3 (id=2750): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x105000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(r2, 0x24, &(0x7f0000000000)={0x0, 0x0, 0x5, 0x800003fffffffffe, 0xffffffffffffffff}) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r2, 0xffffe000) r5 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$chown(0x4, r5, 0xee01, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0x4c}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x65, 0x6f, 0x0, 0x0) prlimit64(0x0, 0x11, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4810}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) preadv(r7, &(0x7f0000000080)=[{&(0x7f0000000880)=""/217, 0xd9}], 0x1, 0x5, 0x5) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000240)=[@dead_binder_done], 0x0, 0x0, 0x0}) dup3(r8, r0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSBRKP(r10, 0x5425, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0}) 1.07788593s ago: executing program 3 (id=2752): syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) r0 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x80) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x0, 0x7, 0x5, {0x5, 0x22, "00f400"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_misc(r4, &(0x7f0000000000)='\t', 0x1) close(r4) r5 = syz_usb_connect$rtl8150(0x7, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r5, &(0x7f0000000200)={0x14, &(0x7f0000000380)={0x0, 0x8, 0xd5, {0xd5, 0x23, "a7ed32ace1d03629149d011227a1699caf3f7f7825ff13e99d99eac3f7166cf883c4d5eeaaf59e1c5cada6edffa6ded00f0b04659b8d949e7d3e96af4bb04a6ceb56248d68f7a4a00fbf767fe71b68ff46b8f437e145b5976df68b466aa52d0fe1ed6646479d3f1873e4fb7141f773dac36e5529d1170b4f26a3a7059bccb5e774e54d79930bfd36ebced0118fb1d290af4cef7003b6bde939b9bb455f56e054cda867b190d8681c10d8a19ad099a791cfc4b21831382a5d891fe8805c9ac7215cd7f92972ff2cb8c2d3f007c67744c5747561"}}, &(0x7f0000000480)={0x0, 0x3, 0xe8, @string={0xe8, 0x3, "99201c89b8b66073cdfd127265291d4a8871f289616057fcc2064ab59d49441d4738f3ac507bf7c0fc1ac98039689cd60ab83516d1a929f0accc92441a3a373f6dc84d0117b575a7710a0d8c0a7923af1c4d1b8e013bb9ddeeeee38d821d71471b7c58ed13d47432d71b9bf0b5d61e0f124503d51ac789491ed2d67d40cb79cc695247d0a6de6fc97fabe3a244fe853ed2ee018d960bdb747564abb3d178f239b9979ddb4dcf979d89787c841e723608e6da81f564d97a7825b75678b6160b059ab09f783da65472e1aeb15e2fbc3e62020b916877a703afcf657497bb0a39ff681da64a3281"}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000280)={0x0, 0x12}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000005c0), &(0x7f0000000600)={0x40, 0x5, 0x2, "e671"}}) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$SIOCGIFHWADDR(r7, 0x8927, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r6}}) 944.109852ms ago: executing program 4 (id=2753): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x68, 0xe00000000000000, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x9, 0x0, 0x39}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}, @exit_looper, @increfs={0x40046304, 0x2}, @free_buffer={0x40086303, r1}, @enter_looper], 0x0, 0x0, 0x0}) 155.933767ms ago: executing program 2 (id=2756): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r1) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}}, 0x40080) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000880)={0x0, 0x0}) r6 = socket(0x10, 0x2, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000080)={0xa0179e08}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r9) sendmsg$unix(r8, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x2c, 0x1, 0x1, [r9, r8, r8, r8, r8, r9, r8]}}], 0x30}, 0x400c0) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) recvmmsg(r9, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000001b00)='./file0\x00', 0x84000, 0x80) read$FUSE(0xffffffffffffffff, &(0x7f0000001b40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) fstat(r0, &(0x7f0000003b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r1, &(0x7f0000003cc0)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001a80)=[{&(0x7f0000000100)={0xac, 0x2d, 0x728, 0x70bd26, 0x25dfdbfd, "", [@nested={0x80, 0x75, 0x0, 0x1, [@nested={0x4, 0x13f}, @generic="08349fabe4a9130cbba6fd3ab2ecacd571c3ea6e5b4a866d0bc6", @generic="025bb969b1330c58e9d0b35407a91cc7f3e9928daa3cbc0eae0e568aa15e89ee232299217d4b6e1006d4152c0dad05da098e72110baaf4bed89d2a1fd6e0d75f0c95f584c1f700391f5648f6739995e2e1d0b9afd432", @nested={0x4, 0x15}, @nested={0x4, 0x3e}]}, @nested={0x10, 0xa6, 0x0, 0x1, [@typed={0x7, 0x131, 0x0, 0x0, @str='([\x00'}, @nested={0x4, 0xe3}]}, @typed={0xc, 0x127, 0x0, 0x0, @u64=0x689}]}, 0xac}, {&(0x7f00000001c0)={0x19c, 0x34, 0x200, 0x70bd28, 0x25dfdbfc, "", [@generic="f6eb600f719934346d583e3a41e86d124f60c1bc25ab0103bf9276aced456f82381c1a5f17b5e0fe9909024571ae38f5bd4a74860c34c462b8c38415c39e2467f778e2d83b2614289fddb7be3d94d7b590826611f509c98563f54a8a2a80e3a69e4f04f0e55091f0381a4180da3e84c785182fec53885017918918ce9154848c7680a83d2311da0826d5be2f27eff3f7d12b07adb3bd92c1a557afd971d43be91540fe51cedb1dc87f3cdbbf27f538704a7ea156eee41f7a70", @typed={0xc, 0x4, 0x0, 0x0, @u64=0x7}, @nested={0xc3, 0x76, 0x0, 0x1, [@nested={0x4, 0x101}, @typed={0x1a, 0x63, 0x0, 0x0, @binary="e13bba121c860fd8a6a0a5c2da6bc02266dfe312aea7"}, @generic="d1135252bc8e80c20a9b1ecd7a45cfba6a2a9009884b1dba451865a7b57b23df066f25083e45c6a2f91853a48d50edf4311cfe2793d5c5abd1aeb66c32b244036e748c6a5eb297dffe421bec9a98807abd696c6cab74504e8115cb200218fa27755af472660425a54cdd6029c1a683a49cc9faa4fdf4c13fba8c2a", @nested={0x4, 0x115}, @typed={0x6, 0xb5, 0x0, 0x0, @str='\xbc\x00'}, @typed={0x12, 0x142, 0x0, 0x0, @str='(,-(}-\'$^/+]&\x00'}, @nested={0x4, 0x87}]}]}, 0x19c}, {&(0x7f0000000400)={0x208, 0x11, 0x200, 0x70bd29, 0x25dfdbfd, "", [@generic="d21a4bb483fbb63ba6cb5881a62c01ba7dc8ae822e068f06eb80dabaf75c7d56680a2e8aea5860aed02fe9264caf28eb79339f93c116dcbaa7ff54aca5f7b07d36d192bea8a5f74650489cac", @nested={0x17b, 0x4b, 0x0, 0x1, [@typed={0xa7, 0x11, 0x0, 0x0, @binary="fc12d8faa7f113f29ed9c4eaaf9237ee281b81c3d51fd2765db405dcb112ebbb5f9946db059b597cc794ad003932edf382e87b117ce84e1f118b9b09b1143f934f4f5827b86d035ea4998874391afc24a5735ff070cb4d3347cf9662ba248e460796ad8727a39a51d01a0c1e2c24c749c985df1249ded49bc44d46bd5e6af5aeb3016d8cf14e97c42c17078176ae8abd19fd5689ba536ea87ec7fc70d7d9179cc35c3e"}, @generic="b264ef07bfbcab4319ca73713998a375263e651e1f00fd1b2f240db298530a7fe01aedb419055125da22e78ed0986e9852f359a534b919d7f2944584f194562dbef662127032b5cf561ddb936c2a68c75e25345a4b54e8831760a9147e85642fe61e3d6b69483f717757a8b5111ca4fb2725e2a4f5aa9d96de96a4a3db8ef87e9cf9cb7fab2a3e60ede933d037b857a45b6972ac0be1a35fb49ac014eb5cdb896f3d32e9b0575b7fe9e7d8a176d76fca4f0ed9c2ba2fc844a78c5917e52541", @typed={0x8, 0x128, 0x0, 0x0, @pid=r3}, @typed={0x4, 0x130}, @nested={0x4, 0x56}]}, @nested={0x10, 0x107, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @pid=r4}, @nested={0x4, 0x5b}]}, @typed={0x14, 0xf3, 0x0, 0x0, @ipv6=@local}, @typed={0x4, 0x3b}, @nested={0x8, 0x8f, 0x0, 0x1, [@nested={0x4, 0x89}]}]}, 0x208}, {&(0x7f0000000640)={0x14, 0x21, 0x200, 0x70bd2d, 0x25dfdbfb, "", [@nested={0x4, 0x58}]}, 0x14}, {&(0x7f0000000680)={0x1ec, 0x25, 0x300, 0x70bd2c, 0x25dfdbfe, "", [@typed={0x4, 0x6c}, @generic="47189ce00a53536e57e48fcab56876498f39be6cfaa958e3c66b6178ea5c83f6ac8a85cef3c36188b6a443cc84403429a3ce48004bda33daf576f9a37bc39e320e539cab9e5fa19ce61f990d6c9a6d2bf85cccfee7e743e0f993cdf81a585ca9e0f9b11a0d8040a5a7cd", @typed={0x8, 0x88, 0x0, 0x0, @ipv4=@remote}, @nested={0xc, 0xd8, 0x0, 0x1, [@nested={0x4, 0xb4}, @nested={0x4, 0x69}]}, @typed={0x41, 0x19, 0x0, 0x0, @binary="a87be12f0e4ee531861acc16e2a328bbdd06e3d3479db6fe9385c70f91a77f4e04f685081c12fdb5eaa0b9c11157cb0f03d04625fc43c10a7cc61d5596"}, @nested={0x9e, 0x61, 0x0, 0x1, [@generic="e81ce2a40ec329fd50737b84f0948963c6b78cf86d89848406294ac4cbc5ff99a1e75a649d6e71ddb316983f367a6b0f3c07e2da20f0780930f932234e72ea747b85dce58f92167b54e1ee3ae875b58be400", @generic="70403d4c02fadf8b84bec10fe4db", @generic="d21f862eaf2ceb6d52aab31d5cfe097d9c02b91bfcf009e3d8f87e0b1d919ffbb6197384328fefbc0c6563c03acbf58e3e37e0d44984f26ef7f4"]}, @nested={0x6a, 0x7c, 0x0, 0x1, [@typed={0x14, 0xb1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}, @generic="0dfe0a1a1a45da8fa8da0fa0a4ac8f20d59f8a7e1bf8bcfbda90e442e8926916a32e63c38b471f26919b4e2e3292887c59b5e585225c21a1c20252c322f8f104aee81095385f3138b23402abdb15a343016a"]}, @typed={0x8, 0xfb, 0x0, 0x0, @u32=0x2}]}, 0x1ec}, {&(0x7f0000000900)={0x1180, 0x26, 0x200, 0x70bd2d, 0x25dfdbff, "", [@typed={0x1004, 0xd7, 0x0, 0x0, @binary="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"}, @generic="c98ad674b440861ce438f11086270941ebc72e11986d2c4f7fbd0c0989d54f03bab572b9c06ea078cac69ef6e60cc39ec3edaaad639587517fb5e7f09b3329cfccc314ebd7c1f7646a280b9d8d1c1629f8", @typed={0x4, 0x149}, @generic="db77645e0f0c51681df1a4e0cd31d084ba6396d970be3a8ee295", @typed={0x8, 0x11a, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x73, 0x0, 0x0, @u32=0xfffffff5}, @generic="bc8a9e45432428cf91c94a2d31fafff9b06b9be178d5671c8646c7d05445fa0f028526a7ddbec40f2c077b8428160354535500c34f24bf806a1dc50e9bcfc3e53027c3a66eab93511d27914071d1cf4781de0e315d9274517648ca588380ef9eb408c3d68a7c7abe3a1e587cf300664378412a3a9a96c19f74eed14df11777051765d0cae5ccbbb2087e95f511102184afaece74f66d8bdd167611efc0ce037d7bb7927851c24c7e87f47712a0b17b971a0da53b38", @nested={0x30, 0xa5, 0x0, 0x1, [@typed={0x14, 0xff, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x4, 0x13c}, @typed={0x14, 0xd7, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @typed={0x8, 0x1b, 0x0, 0x0, @pid=r5}]}, 0x1180}], 0x6, &(0x7f0000003c00)=[@rights={{0x38, 0x1, 0x1, [r0, r0, r6, r9, 0xffffffffffffffff, r0, r0, r10, r0, r11]}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r12, r13}}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x90, 0xc000}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) 155.657207ms ago: executing program 2 (id=2757): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xfffffffa) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) (async) ioctl$TCFLSH(r1, 0x540b, 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4c011) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20b00, 0x0) preadv2(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/129, 0x81}, {0x0}], 0x2, 0xffffffff, 0x8, 0xd) syz_open_dev$usbmon(&(0x7f0000000000), 0xffffffffffffff80, 0x2) (async) r4 = syz_open_dev$usbmon(&(0x7f0000000000), 0xffffffffffffff80, 0x2) ioctl$MON_IOCT_RING_SIZE(r4, 0x9204, 0x6d0e6) 153.333877ms ago: executing program 2 (id=2758): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x202, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x25) close_range(r0, 0xffffffffffffffff, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x39) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 134.203888ms ago: executing program 2 (id=2759): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000080)={"0148535161c2f6470972d158f49a80ef", r1, r2, {0x40, 0x4}, {0x9, 0x3b80000}, 0x3, [0x1ca7aee9, 0xb520, 0xfffffffffffffffe, 0x4, 0xc000000000000000, 0x5, 0xa00, 0x8000, 0x2, 0x8, 0x84a1, 0x9, 0x3, 0x0, 0x1, 0x8d7]}) ioctl$TIOCSCTTY(r0, 0x540e, 0x100) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000180)={0x4, 0x7a}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000001c0)={@private0, 0x6, 0x0, 0x3, 0x6, 0x401, 0x7}, &(0x7f0000000200)=0x20) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000280), &(0x7f00000002c0)={0x0, 0xfb, 0x23, 0x6, 0x8, "7217478fa2636325685ed1073100d322", "46d848b69538bd7d7b8eb923c0a1"}, 0x23, 0x3) sendmsg$sock(r3, &(0x7f0000000440)={&(0x7f0000000300)=@in6={0xa, 0x4e21, 0x2, @rand_addr=' \x01\x00', 0x72}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)="0be3fa2ce9ca236708e98f1f8c0232355614b0682bf85fc7bff474957c52bb619061f9e78bd6d5b027", 0x29}], 0x1, &(0x7f0000000400)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x18}, 0x20000000) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000480), 0x42040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f00000004c0)={0x0, @aes256, 0x0, @desc2}) ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, &(0x7f0000000500)={0x0, "22964f5329874e193af5ca919b5ace19"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000001500)={r6, 0x5, 0x0, [0x4, 0x4, 0x5, 0x9, 0x5], [0x7ff, 0xba9, 0xfffffffffffffff9, 0x7f, 0x7fffffffffffffff, 0x2, 0x7, 0x1, 0x1ff, 0x7f, 0xfff, 0xfff, 0x100000000, 0x5fdd12bd, 0x4, 0x8000, 0x8, 0x3, 0x7fffffffffffffff, 0x6, 0xfffffffffffffff8, 0x4, 0xfffffffffffffff8, 0x81, 0x800, 0x1, 0xfff, 0x5, 0xffffffffffff3cdf, 0x1, 0xf883, 0x1, 0x100000000, 0x80, 0x10000, 0x4, 0x1, 0x3, 0x5, 0x4eb7, 0x3, 0x2, 0xf, 0x2, 0x2, 0x3, 0x7, 0x3, 0x7, 0x6, 0xba98, 0x7, 0x10001, 0x3, 0x4, 0x0, 0x48, 0x9a, 0x1, 0x3, 0x5, 0x9, 0x6, 0x4, 0x7, 0xb, 0x4, 0x4, 0xda, 0x4, 0x6, 0x2, 0x3, 0x5, 0x5, 0xc757, 0x0, 0x1, 0xc1d, 0x4, 0x0, 0x1c000, 0x7, 0x4, 0x6, 0x1, 0x100000001, 0xffffffffffffffc0, 0x7e0, 0xfffffffffffffffd, 0xe7f, 0x7, 0x2c8, 0xfffffffffffffffa, 0x3, 0x10, 0x2, 0x40, 0xffffffffffffffff, 0x6c95, 0xdbd, 0x7f, 0x1, 0xb, 0x559f, 0x6, 0x0, 0x1, 0x4, 0x7, 0xff, 0x0, 0xb3d3, 0x0, 0x92a, 0x8, 0x81, 0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffff00]}) bind$inet6(r3, &(0x7f0000001940)={0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000001980)) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000019c0)=0x4) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) close_range(r0, r4, 0x0) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001a00), 0x0, 0x0) sendto$inet_nvme_icreq_pdu(r7, &(0x7f0000001a40)={{0x0, 0x2, 0x80, 0x2}, 0x0, 0x0, 0x0, 0x7}, 0x80, 0x0, 0x0, 0x0) mmap(&(0x7f0000fe9000/0x14000)=nil, 0x14000, 0x2000008, 0x4010, r0, 0x11b12000) r8 = ioctl$UDMABUF_CREATE_LIST(r7, 0x40087543, &(0x7f0000001ac0)={0x0, 0x1, [{r7, 0x0, 0x10000, 0x1000000}]}) writev(r8, &(0x7f0000003040)=[{&(0x7f0000001b00)="51eb9691e1015eec7a3fb6b49838dd0643b7fb68e6389c90027ce9a5bd75f622ba0605592df155ba407d2ebd3d2beee8086e34be8a8540ae653c12a213056cf4d4ccff4b21782df47ea7e55c033002c879c1ab2dff9beda4912f309e2ff817bca47f5613968057e16c98b9", 0x6b}, {&(0x7f0000001b80)="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", 0x1000}, {&(0x7f0000002b80)="98841119c9eddc1e104f95b8565b410ec9d059e1052105ea90cf06bc7eaf9488ecc77e6aec731096d62ee34b6e4e6ee61f53a6db3350524ea11fc6c1cb69802dea4fe5e712f6e1ade064", 0x4a}, {&(0x7f0000002c00)="98f8c099115dd8a981632931aa4abe9a41a297f1565d306151f10041fa393649a2856b16238656031fa5a89aefebf072b6fd73192e6717229be7d9c86c8d2bb488d03ca8f3ab0472756dec147eefdbd1c709d51b8374b8896e886908074d5122c5c423ed1ff4eeff489d28d8cbef3a2114f64300fd3e2786df1b348afc9a46a5a80bbfb7add6ab61f47fa1746226b83d2f51e75baaf92ea2d5d44c3df0c214daed8f8139a9d90c9f211a2effdd5caa7a8d25439b6a17d343d0efe13a908c7a37e17eba60777661", 0xc7}, {&(0x7f0000002d00)="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", 0xfa}, {&(0x7f0000002e00)="d44dafdd814259ee7dc01a6c2f28076400c875bb46df5fadd547819707b881dac940420ef735318cfc6c1d62990ec8509dfe60c8fa404cbc171d6bf2282448ca866ad6b7413dc7abb65f15fe0bf523a4cd9b75b9ca36c9acf25e1c9816ce00b541dab7c5b95328e9f47b4587530874f99d6dd764ba260b4a52fd5b609770be0571d2b066f70d8c34f8503730cf7ff827d554f7891da9fbc4ca7d1bf9b50397f07fcdbd587d7b0347797b8c9090dd5938176ed4362722e0241e0148742c2b5b6b8a9c592cced9980b021431ef358a85bdd78515ae41861be8fa32137f998202a0da4db8d8aeff7752ef1b7ef87c83d2f78553566945bcd0", 0xf7}, {&(0x7f0000002f00)="ce330fa0d05226d04adda40f52d6f74b12f55a2ef2", 0x15}, {&(0x7f0000002f40)="8239d91b89fe968880d21905d468597f69ea1e6d979cdc272fdc4201e723af9d8c7ffeba490c798bed570b731b6771b72c60a656eac6493d60075c40f78c9a754c1147ceb7ff8c35197676815676d1c8071e0d5c5882f48745c69f7c3d2bc194d0961659452540875f9f2be9e45f177b3d7f0e0eeee93f2e60d7db2c622fe0886dc0e282c181ff5ed71c3aaa5eb77f7dcf989a724119d299c3911864236cbdb3b60bc4e9c1eb041406169b9d07b679a5f917f603266f9a60451257fe4ddbcd4f74a0f7376869154995ca004b69f807803e21523eb7a0445ad6ba3ee1806b340120ea1e5b3650478d55fe2253494fcb", 0xef}], 0x8) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x4) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = add_key$fscrypt_v1(&(0x7f00000030c0), &(0x7f0000003100)={'fscrypt:', @desc2}, &(0x7f0000003140)={0x0, "10dbfbff62b19ab7be7b99395e504d8976914c775b393e953e9a50d2be38ccd94952cd54a1bc35c0a7a1489f7de5573e46834efe6c092dca751f4c7e2056076b", 0x15}, 0x48, 0xfffffffffffffffa) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r7, 0xc0506617, &(0x7f00000031c0)={@id={0x2, 0x0, @c}, 0x40, r9, '\x00', @a}) 133.267598ms ago: executing program 4 (id=2760): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) capset(&(0x7f0000000040)={0x20080522}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x4000811) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0xa) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) syz_io_uring_setup(0x3cde, &(0x7f00000003c0)={0x0, 0x48a1, 0x40, 0x2, 0x3a6}, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x200000035, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) syz_usb_connect(0x0, 0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000020dafb2099041010f5050102030109022c00010000000009040000018a2bae000824020100020000092402020000000000090585dadb"], 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000800)=ANY=[], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xcc, &(0x7f0000000000)=ANY=[@ANYBLOB="cc03b6139515b2a3daa1a2a829a1df9ce11443f24d3e1adbf09a83b822271a56b4bf3b83ff41d3734df70ba299cf194dc4cceb598d0c6c0078a676cf0912c283a3def3dc1f07a7307ec9db1418cbc28ca10b1289ecd7ca39598c23e6b7681e8099a0b095757e8e4916871adf27ff17f4b3318dcec60535fce7e5d0308cedc2409ddc3cd540c8b1744cf230186e4c5058ac5e51a704a37996dc99d81cf7e2be9a4db96a6bbc5fdd58f33cb95898959470b13a810e8dd6f384e625254d00ceb624e41ee0ee9a2fd88cefee5c"]}]}) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYRES64], 0x14}}, 0x0) 106.582928ms ago: executing program 2 (id=2761): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x7cab6ced6415609}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x7cab6ced6415609}) r1 = syz_open_dev$loop(&(0x7f0000001540), 0x1, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) (async) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x80086601, &(0x7f0000000280)={'lo\x00', @link_local={0x2, 0x80, 0xc2, 0xc}}) (async) ioctl$SIOCSIFHWADDR(r2, 0x80086601, &(0x7f0000000280)={'lo\x00', @link_local={0x2, 0x80, 0xc2, 0xc}}) mount(0x0, 0x0, &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000140)={0x7f, 0x2d41}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0) io_setup(0xdee, &(0x7f0000002140)=0x0) io_submit(r4, 0x1, &(0x7f0000002280)=[&(0x7f0000002240)={0x0, 0x0, 0x0, 0x1, 0x5, r1, &(0x7f0000002180)="a96b0d025d93376aa272fefbe988a7aa2bddde22486eebeff623f702dfb72e4bb8c31d40113dbdd9f73ab52b7bb33c0717099806678b087c8aa7e2facd5ecc2bbd21360262b3cc3a657de8ee9ce31a2e268bc9200648942f87e301c968407f2c674a35d40d66a23b91270d6187c89bc681b76572dde8980919d947c1e1f706c21254765113", 0x85, 0x9, 0x0, 0x2, r2}]) (async) io_submit(r4, 0x1, &(0x7f0000002280)=[&(0x7f0000002240)={0x0, 0x0, 0x0, 0x1, 0x5, r1, &(0x7f0000002180)="a96b0d025d93376aa272fefbe988a7aa2bddde22486eebeff623f702dfb72e4bb8c31d40113dbdd9f73ab52b7bb33c0717099806678b087c8aa7e2facd5ecc2bbd21360262b3cc3a657de8ee9ce31a2e268bc9200648942f87e301c968407f2c674a35d40d66a23b91270d6187c89bc681b76572dde8980919d947c1e1f706c21254765113", 0x85, 0x9, 0x0, 0x2, r2}]) pread64(r3, &(0x7f0000000080)=""/178, 0xb2, 0x4) close(0xffffffffffffffff) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000240)={'bridge_slave_0\x00', &(0x7f0000000280)=@ethtool_drvinfo={0x3, "b60446e08dfd6440564e442894dd3cb85187ace1fa460a4df50e2bd90b8aaeda", "2a2a5caaa781f3581cdb5a7812e7a2a2cff2e5eb71bc82ac79130a9539cef472", "5dd8673b060b7c9d5a805fb64cab409d30350ab38b3c9dc46e80a7d9a3250e43", "084b70fc7128d4cf30b2e9f5e4a561afaecfa50f84d641f628ab0f45f6a49157", "69bb72cf144975ab760eac8766ee28b2c81fae241d2ba763363930362bb18abe", "76860201000100f210be4e50", 0x9, 0x2, 0x3, 0x7fffffff, 0x5d}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r6, 0xc004ae02, &(0x7f0000000080)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2000084, &(0x7f0000000040)={[{@redirect_dir_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') (async) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 0s ago: executing program 2 (id=2762): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) syz_usb_connect$printer(0x2, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x21, &(0x7f0000000200)={0x5, 0xf, 0x21, 0x1, [@generic={0x1c, 0x10, 0x3, "195b2d913337b16cb2924794c53318fe4c4d486ab5df70e9e9"}]}}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000000)={0x0, 0x37, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000200)={0x40, 0x1, 0x4, "60d5837c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0x7704, 0x2) kernel console output (not intermixed with test programs): tch expected magic number 0xf97cff8c [ 107.469049][ T3839] SELinux: failed to load policy [ 107.775394][ T36] audit: type=1400 audit(7027749135.968:438): avc: denied { setattr } for pid=3860 comm="syz.3.1140" name="NETLINK" dev="sockfs" ino=19260 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 107.878220][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 108.446434][ T3892] input: syz1 as /devices/virtual/input/input16 [ 108.498360][ T3896] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 108.506581][ T3896] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 108.515784][ T3896] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 108.524042][ T3896] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 108.535174][ T3917] overlayfs: conflicting options: userxattr,redirect_dir=on [ 108.549661][ T36] audit: type=1326 audit(7027749136.748:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3918 comm="syz.2.1156" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb3bb8ebe9 code=0x0 [ 108.887614][ T31] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 109.038890][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.049361][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 109.060458][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 109.070288][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.083183][ T31] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 109.092309][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.101329][ T31] usb 3-1: config 0 descriptor?? [ 109.112910][ T31] usb 3-1: MIDIStreaming interface descriptor not found [ 109.195204][ T3937] 9pnet_fd: Insufficient options for proto=fd [ 109.238242][ T3946] netlink: 'syz.1.1164': attribute type 33 has an invalid length. [ 109.246324][ T3946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1164'. [ 109.399218][ T10] usb 3-1: USB disconnect, device number 33 [ 109.747569][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 109.887546][ T878] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 109.907653][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 109.918340][ T10] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 109.929172][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.947700][ T3974] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 109.961156][ T10] usb 3-1: config 0 has no interface number 0 [ 109.991136][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 110.000774][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.025021][ T10] usb 3-1: Product: syz [ 110.032226][ T10] usb 3-1: Manufacturer: syz [ 110.047721][ T10] usb 3-1: SerialNumber: syz [ 110.053417][ T10] usb 3-1: config 0 descriptor?? [ 110.062477][ T10] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 110.075569][ T10] usb 3-1: No valid video chain found. [ 110.078411][ T3995] rust_binder: 708: no such ref 3 [ 110.139873][ T36] audit: type=1326 audit(7027749138.338:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4004 comm="syz.1.1185" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f125858ebe9 code=0x0 [ 110.303678][ T3955] rust_binder: Error in use_page_slow: ESRCH [ 110.303705][ T3955] rust_binder: use_range failure ESRCH [ 110.309956][ T3955] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 110.315673][ T3955] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 110.324150][ T3955] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:471 [ 110.334946][ T10] usb 3-1: USB disconnect, device number 34 [ 110.413553][ T4019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1188'. [ 110.443418][ T4021] pim6reg1: entered promiscuous mode [ 110.449066][ T4021] pim6reg1: entered allmulticast mode [ 110.490316][ T36] audit: type=1326 audit(7027749138.688:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4022 comm="syz.0.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983af8ebe9 code=0x50000 [ 110.518490][ T36] audit: type=1326 audit(7027749138.708:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4022 comm="syz.0.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983af8ebe9 code=0x50000 [ 110.542211][ T36] audit: type=1326 audit(7027749138.708:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4022 comm="syz.0.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983af8ebe9 code=0x50000 [ 110.566869][ T36] audit: type=1326 audit(7027749138.708:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4022 comm="syz.0.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983af8ebe9 code=0x50000 [ 110.591125][ T36] audit: type=1326 audit(7027749138.708:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4022 comm="syz.0.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983af8ebe9 code=0x50000 [ 110.614565][ T36] audit: type=1326 audit(7027749138.708:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4022 comm="syz.0.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983af8ebe9 code=0x50000 [ 110.638220][ T36] audit: type=1326 audit(7027749138.708:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4022 comm="syz.0.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983af8ebe9 code=0x50000 [ 110.662193][ T36] audit: type=1326 audit(7027749138.708:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4022 comm="syz.0.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983af8ebe9 code=0x50000 [ 110.686384][ T36] audit: type=1326 audit(7027749138.708:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4022 comm="syz.0.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983af8ebe9 code=0x50000 [ 110.710485][ T36] audit: type=1326 audit(7027749138.708:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4022 comm="syz.0.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983af8ebe9 code=0x50000 [ 110.775054][ T4030] rust_binder: 734: no such ref 2 [ 110.950470][ T4040] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:473 [ 111.009517][ T4050] 9p filesystem being mounted at /357/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 112.156045][ T4099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1216'. [ 112.570602][ T4108] rust_binder: Failed copying remainder into alloc: EFAULT [ 112.570631][ T4108] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 112.587687][ T4108] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 112.606159][ T4108] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:775 [ 112.708798][ T4120] rust_binder: Error while translating object. [ 112.727573][ T4120] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 112.734144][ T4120] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:779 [ 113.844333][ T4177] fuse: Bad value for 'fd' [ 113.965955][ T4182] 9pnet_fd: Insufficient options for proto=fd [ 113.984628][ T4184] devpts: called with bogus options [ 114.042351][ T4192] netlink: 'syz.1.1251': attribute type 27 has an invalid length. [ 114.121912][ T4199] tmpfs: Unknown parameter 'no' [ 114.553543][ T4201] netlink: 'syz.3.1254': attribute type 46 has an invalid length. [ 115.403096][ T4214] netlink: 'syz.3.1258': attribute type 1 has an invalid length. [ 115.411252][ T4214] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1258'. [ 115.603272][ T4227] 9pnet_fd: Insufficient options for proto=fd [ 115.622911][ T4229] netlink: 'syz.0.1264': attribute type 63 has an invalid length. [ 115.631016][ T4229] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1264'. [ 115.867632][ T31] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 116.027548][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 116.034309][ T31] usb 4-1: config 0 has no interfaces? [ 116.041917][ T31] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 116.051640][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.060430][ T31] usb 4-1: Product: syz [ 116.064899][ T31] usb 4-1: Manufacturer: syz [ 116.069885][ T31] usb 4-1: SerialNumber: syz [ 116.075829][ T31] usb 4-1: config 0 descriptor?? [ 116.296220][ T4245] netlink: 'syz.3.1258': attribute type 1 has an invalid length. [ 116.320217][ T4245] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1258'. [ 116.418599][ T10] usb 4-1: USB disconnect, device number 37 [ 116.628184][ T4263] 9p filesystem being mounted at /172/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 117.604483][ T4282] fuse: Unknown parameter '' [ 117.639855][ T36] kauditd_printk_skb: 19972 callbacks suppressed [ 117.639874][ T36] audit: type=1400 audit(7027749145.839:20423): avc: denied { accept } for pid=4283 comm="syz.3.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 117.697579][ T4290] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:817 [ 117.907753][ T4301] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1284'. [ 117.938351][ T4305] netlink: 'syz.2.1286': attribute type 11 has an invalid length. [ 118.357601][ T31] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 118.456011][ T4323] 9pnet_fd: Insufficient options for proto=fd [ 118.503624][ T4335] 9pnet: p9_errstr2errno: server reported unknown error OX۵רѳlu9v [ 118.508804][ T31] usb 4-1: config index 0 descriptor too short (expected 23076, got 36) [ 118.522120][ T31] usb 4-1: config 0 has too many interfaces: 210, using maximum allowed: 32 [ 118.531172][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.542881][ T31] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 210 [ 118.552357][ T31] usb 4-1: New USB device found, idVendor=056a, idProduct=0017, bcdDevice= 0.00 [ 118.561900][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.571155][ T31] usb 4-1: config 0 descriptor?? [ 118.744877][ T4343] rust_binder: 522: no such ref 2 [ 118.750230][ T4343] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 118.757738][ T4343] rust_binder: 522: no such ref 3 [ 118.763026][ T4343] rust_binder: Write failure EFAULT in pid:522 [ 118.794371][ T4350] netlink: 'syz.2.1299': attribute type 64 has an invalid length. [ 118.808982][ T4350] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1299'. [ 119.481517][ T4369] input: syz1 as /devices/virtual/input/input17 [ 119.604235][ T4372] overlayfs: cannot append lower layer [ 119.667246][ T4377] overlayfs: failed to clone lowerpath [ 120.556912][ T4409] netlink: 'syz.0.1318': attribute type 29 has an invalid length. [ 120.622667][ T4411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1318'. [ 121.008004][ T36] audit: type=1400 audit(7027749149.209:20424): avc: denied { bpf } for pid=4430 comm="syz.1.1326" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 121.120527][ T583] usb 4-1: USB disconnect, device number 38 [ 121.242748][ T4470] rust_binder: 853: no such ref 2 [ 121.292462][ T4482] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1344'. [ 121.318094][ T4475] rust_binder: 855: no such ref 5 [ 121.325468][ T4475] rust_binder: Write failure EINVAL in pid:855 [ 121.346335][ T4490] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=4490 comm=syz.1.1346 [ 121.349527][ T4494] netlink: 'syz.0.1347': attribute type 13 has an invalid length. [ 121.388084][ T4498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1348'. [ 121.407032][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.414194][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.427409][ T4506] tipc: MTU too low for tipc bearer [ 121.453343][ T4510] /dev/rnullb0: Can't open blockdev [ 121.498015][ T4523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.510521][ T4523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.528537][ T4523] /dev/rnullb0: Can't open blockdev [ 121.727592][ T583] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 121.857611][ T583] usb 4-1: device descriptor read/64, error -71 [ 122.074515][ T4541] 9pnet_fd: Insufficient options for proto=fd [ 122.117535][ T583] usb 4-1: device descriptor read/64, error -71 [ 122.292786][ T4566] fuse: Unknown parameter 'rq00Z7vk>000{er' [ 122.357590][ T583] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 122.487576][ T583] usb 4-1: device descriptor read/64, error -71 [ 122.495520][ T36] audit: type=1326 audit(7027749150.689:20425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4578 comm="syz.2.1375" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7fdb3bb8ebe9 code=0x0 [ 122.724921][ T4603] rust_binder: 584: no such ref 2 [ 122.730138][ T583] usb 4-1: device descriptor read/64, error -71 [ 122.803049][ T4613] incfs_lookup_dentry err:-13 [ 122.807986][ T4613] incfs: Can't find or create .index dir in ./bus [ 122.814691][ T4613] incfs: mount failed -13 [ 122.847596][ T583] usb usb4-port1: attempt power cycle [ 123.197526][ T583] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 123.228667][ T583] usb 4-1: device descriptor read/8, error -71 [ 123.290543][ T4636] 9pnet_fd: Insufficient options for proto=fd [ 123.358502][ T583] usb 4-1: device descriptor read/8, error -71 [ 123.384745][ T4643] netlink: 'syz.2.1395': attribute type 27 has an invalid length. [ 123.418690][ T4643] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.426192][ T4643] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.515136][ T4659] fuse: blksize only supported for fuseblk [ 123.521755][ T4659] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 123.536649][ T4659] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 123.585008][ T36] audit: type=1400 audit(7027749151.779:20426): avc: denied { bind } for pid=4661 comm="syz.1.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 123.607534][ T583] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 123.628527][ T583] usb 4-1: device descriptor read/8, error -71 [ 123.736712][ T4681] kvm: kvm [4680]: vcpu2, guest rIP: 0x9132 Unhandled WRMSR(0x11e) = 0x0 [ 123.758773][ T583] usb 4-1: device descriptor read/8, error -71 [ 123.867660][ T583] usb usb4-port1: unable to enumerate USB device [ 123.933827][ T4688] 9pnet_fd: Insufficient options for proto=fd [ 123.978355][ T4692] netlink: 'syz.0.1411': attribute type 16 has an invalid length. [ 123.986963][ T4692] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=4692 comm=syz.0.1411 [ 124.001390][ T4692] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1540 sclass=netlink_route_socket pid=4692 comm=syz.0.1411 [ 124.077568][ T10] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 124.227543][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 124.234183][ T10] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 124.242827][ T10] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 124.251685][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 124.260789][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 124.270528][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 124.280400][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 124.294558][ T10] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 124.304015][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.313370][ T10] usb 3-1: config 0 descriptor?? [ 124.523881][ T10] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 35 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 124.563387][ T10] usb 3-1: USB disconnect, device number 35 [ 124.574067][ T10] usblp0: removed [ 124.867568][ T10] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 125.007585][ T10] usb 3-1: device descriptor read/64, error -71 [ 125.247585][ T10] usb 3-1: device descriptor read/64, error -71 [ 125.280702][ T4721] 9pnet_fd: Insufficient options for proto=fd [ 125.487595][ T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 125.617578][ T10] usb 3-1: device descriptor read/64, error -71 [ 125.826629][ T4729] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1424'. [ 125.852279][ T4734] fuse: Bad value for 'fd' [ 125.857576][ T10] usb 3-1: device descriptor read/64, error -71 [ 125.919299][ T36] audit: type=1400 audit(7027749154.119:20427): avc: denied { execute } for pid=4741 comm="syz.1.1429" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=23997 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 125.977726][ T10] usb usb3-port1: attempt power cycle [ 126.317568][ T10] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 126.339007][ T10] usb 3-1: device descriptor read/8, error -71 [ 126.468738][ T10] usb 3-1: device descriptor read/8, error -71 [ 126.707622][ T10] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 126.728822][ T10] usb 3-1: device descriptor read/8, error -71 [ 126.767562][ T878] Bluetooth: hci0: command 0x1003 tx timeout [ 126.771268][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 126.785834][ T4750] veth1: entered allmulticast mode [ 126.791349][ T4749] veth1: left allmulticast mode [ 126.858206][ T10] usb 3-1: device descriptor read/8, error -71 [ 126.859172][ T4768] netlink: 'syz.2.1437': attribute type 16 has an invalid length. [ 126.872516][ T4768] netlink: 'syz.2.1437': attribute type 2 has an invalid length. [ 126.880352][ T4768] netlink: 'syz.2.1437': attribute type 2 has an invalid length. [ 126.888185][ T4768] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.1437'. [ 126.926069][ T4775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1439'. [ 126.964755][ T4785] netlink: 'syz.2.1441': attribute type 4 has an invalid length. [ 126.973101][ T4785] netlink: 3581 bytes leftover after parsing attributes in process `syz.2.1441'. [ 126.982519][ T10] usb usb3-port1: unable to enumerate USB device [ 126.991312][ T4785] rust_binder: Write failure EFAULT in pid:649 [ 127.319332][ T4792] fuse: blksize only supported for fuseblk [ 127.385847][ T4792] overlayfs: statfs failed on './file0' [ 127.468657][ T36] audit: type=1400 audit(7027749155.669:20428): avc: denied { ioctl } for pid=4795 comm="syz.3.1445" path="pid:[4026532306]" dev="nsfs" ino=4026532306 ioctlcmd=0xb709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 127.695249][ T4811] 8021q: VLANs not supported on ip_vti0 [ 127.784311][ T4831] tipc: Enabling of bearer rejected, failed to enable media [ 127.807648][ T4833] /dev/rnullb0: Can't lookup blockdev [ 127.830134][ T4837] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=4837 comm=syz.1.1456 [ 127.858676][ T4839] bridge0: port 3(ip6gretap0) entered blocking state [ 127.871009][ T4839] bridge0: port 3(ip6gretap0) entered disabled state [ 127.879204][ T4839] ip6gretap0: entered allmulticast mode [ 127.885527][ T4839] ip6gretap0: entered promiscuous mode [ 127.891755][ T4839] bridge0: port 3(ip6gretap0) entered blocking state [ 127.898530][ T4839] bridge0: port 3(ip6gretap0) entered forwarding state [ 127.916627][ T4839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1457'. [ 127.925675][ T36] audit: type=1400 audit(7027749156.109:20429): avc: denied { bind } for pid=4838 comm="syz.1.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 127.952553][ T4839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1457'. [ 128.052207][ T4855] /dev/rnullb0: Can't lookup blockdev [ 128.263627][ T4861] overlayfs: failed to clone lowerpath [ 128.420281][ T4870] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39724 sclass=netlink_route_socket pid=4870 comm=syz.3.1470 [ 128.467872][ T4872] rust_binder: Write failure EFAULT in pid:892 [ 128.489379][ T4875] rust_binder: 895: no such ref 2 [ 128.524969][ T4877] binder: Unknown parameter 'max&00000000 0000177'7777?<$cN sH/^*{- ZQ&m' [ 128.538268][ T4877] binder: Unknown parameter 'max&00000000 0000177'7777?<$cN sH/^*{- ZQ&m' [ 128.613762][ T4886] overlayfs: failed to clone upperpath [ 128.801043][ T4902] rust_binder: 675: no such ref 2 [ 129.085722][ T4913] veth1: entered allmulticast mode [ 129.094151][ T4912] veth1: left allmulticast mode [ 129.212237][ T4917] fuse: Unknown parameter 'dd' [ 129.231053][ T4921] 9pnet_fd: Insufficient options for proto=fd [ 129.231088][ T4922] 9pnet_fd: Insufficient options for proto=fd [ 129.563063][ T4954] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 129.563113][ T4954] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:914 [ 129.641744][ T4958] netlink: 'syz.0.1500': attribute type 2 has an invalid length. [ 129.701615][ T4965] rust_binder: Error while translating object. [ 129.701668][ T4965] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 129.709267][ T4965] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:680 [ 129.854409][ T4994] overlay: ./file0 is not a directory [ 129.887314][ T5000] netlink: 'syz.0.1513': attribute type 13 has an invalid length. [ 129.895997][ T5000] erspan0: refused to change device tx_queue_len [ 129.904746][ T5000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=5000 comm=syz.0.1513 [ 130.515959][ T5017] overlay: Unknown parameter '/L|yDtiP|D_N!G$^ W}0/5Oeڏ(i!YVLXOiX!ghot̉ Wf%l &}˵## œN.u(Q7?LN'!tU)>$3h]Π)IJ{{LɆ+_j!vGNc*J' [ 130.515959][ T5018] overlay: Unknown parameter '/L|yDtiP|D_N!G$^ W}0/5Oeڏ(i!YVLXOiX!ghot̉ Wf%l &}˵## œN.u(Q7?LN'!tU)>$3h]Π)IJ{{LɆ+_j!vGNc*J' [ 130.789451][ T5040] cgroup: noprefix used incorrectly [ 130.908953][ T5049] fuse: Bad value for 'group_id' [ 130.914325][ T5050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1532'. [ 130.931731][ T5049] fuse: Bad value for 'group_id' [ 130.942925][ T5050] erspan0: default FDB implementation only supports local addresses [ 131.000553][ T36] audit: type=1400 audit(7027749159.199:20430): avc: denied { append } for pid=5065 comm="syz.3.1535" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 131.026016][ T5067] loop2: detected capacity change from 0 to 7 [ 131.033228][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 131.042967][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 131.051140][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 131.060472][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 131.068636][ T3953] loop2: unable to read partition table [ 131.075275][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 131.084630][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 131.088022][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 131.093240][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 131.111258][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 131.119185][ T5067] loop2: unable to read partition table [ 131.125108][ T5067] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 131.134200][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 131.148230][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 131.156484][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 131.165946][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 131.174450][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 131.184239][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 131.192676][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 131.202008][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 131.210415][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 131.219726][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 131.295870][ T5073] fuseblk: Unknown parameter 'rootmode000000000000000010000' [ 131.478618][ T36] audit: type=1326 audit(7027749159.679:20431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5090 comm="syz.1.1545" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f125858ebe9 code=0x0 [ 131.537604][ T403] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 131.557848][ T5095] netlink: 'syz.0.1546': attribute type 4 has an invalid length. [ 131.566100][ T5095] netlink: 'syz.0.1546': attribute type 4 has an invalid length. [ 131.672112][ T5101] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1548'. [ 131.688955][ T403] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 131.701082][ T403] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 131.713961][ T403] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 131.725764][ T403] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 131.734989][ T403] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.744443][ T5073] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 131.958899][ T403] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 131.972483][ T403] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input19 [ 131.984829][ T403] usb 4-1: USB disconnect, device number 43 [ 131.990882][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 132.408888][ T5135] netlink: 'syz.0.1559': attribute type 6 has an invalid length. [ 132.688203][ T5158] overlayfs: failed to resolve './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 132.967525][ T403] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 133.218668][ T403] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 133.230463][ T403] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 133.241710][ T403] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 133.251999][ T403] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 133.265280][ T403] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 133.274536][ T403] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.284240][ T403] usb 4-1: config 0 descriptor?? [ 133.613012][ T5219] netlink: 'syz.2.1587': attribute type 10 has an invalid length. [ 133.621091][ T5219] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1587'. [ 133.646306][ T36] audit: type=1326 audit(7027749161.839:20432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5220 comm="syz.2.1588" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdb3bb8ebe9 code=0x0 [ 133.702212][ T403] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 133.711078][ T403] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 133.719252][ T403] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 133.726958][ T403] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 133.735159][ T403] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 133.743012][ T403] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 133.750874][ T403] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 133.753710][ T36] audit: type=1326 audit(7027749161.949:20433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.1.1592" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f125858ebe9 code=0x0 [ 133.758814][ T403] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 133.789404][ T403] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 133.796926][ T403] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 133.804765][ T403] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 133.812346][ T403] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 133.820050][ T403] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 133.827567][ T403] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 133.835252][ T403] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 133.843009][ T403] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 133.857178][ T403] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 133.963624][ T5163] binder: Binderfs stats mode cannot be changed during a remount [ 133.972274][ T403] usb 4-1: USB disconnect, device number 44 [ 134.495975][ T5238] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 134.503877][ T5238] rust_binder: Write failure EINVAL in pid:965 [ 135.077583][ T5260] cgroup: subsys name conflicts with all [ 135.126209][ T5270] tipc: Enabling of bearer rejected, failed to enable media [ 135.194884][ T36] audit: type=1326 audit(7027749163.389:20434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5284 comm="syz.2.1610" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb3bb8ebe9 code=0x0 [ 135.443359][ T36] audit: type=1400 audit(7027749163.639:20435): avc: denied { connect } for pid=5293 comm="syz.3.1612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 135.529974][ T10] kernel write not supported for file [eventfd] (pid: 10 comm: kworker/0:1) [ 136.118931][ T5318] fuse: Bad value for 'fd' [ 136.784628][ T5355] veth1: entered allmulticast mode [ 136.790129][ T5355] netlink: 316 bytes leftover after parsing attributes in process `syz.3.1632'. [ 136.800043][ T5356] netlink: 316 bytes leftover after parsing attributes in process `syz.3.1632'. [ 136.822019][ T5354] veth1: left allmulticast mode [ 137.365653][ T5367] fuse: Bad value for 'fd' [ 137.371203][ T5367] netlink: 'syz.3.1636': attribute type 3 has an invalid length. [ 137.379221][ T5367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1636'. [ 137.388704][ T5367] 9pnet_fd: Insufficient options for proto=fd [ 137.388704][ T5368] 9pnet_fd: Insufficient options for proto=fd [ 137.412358][ T5371] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1637'. [ 137.423205][ T5371] 9pnet_fd: Insufficient options for proto=fd [ 137.545941][ T36] audit: type=1400 audit(7027749165.739:20436): avc: denied { create } for pid=5380 comm="syz.1.1640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 137.581597][ T5383] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1641'. [ 137.624222][ T5390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1644'. [ 137.633340][ T5390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1644'. [ 138.238861][ T5414] netlink: 'syz.2.1650': attribute type 6 has an invalid length. [ 138.317624][ T5423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1654'. [ 138.390243][ T5426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1655'. [ 138.486805][ T5432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1657'. [ 138.767283][ T5442] tipc: Enabled bearer , priority 10 [ 139.153747][ T5446] tmpfs: Unknown parameter ':;2SHDOkQ:ۘMck?3\7o+Y;W` zCU\v"I]:sUBr?ISY,8' [ 139.214786][ T5456] /dev/rnullb0: Can't lookup blockdev [ 139.312276][ T36] audit: type=1400 audit(7027749167.509:20437): avc: denied { listen } for pid=5471 comm="syz.1.1671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 139.496661][ T36] audit: type=1400 audit(7027749167.689:20438): avc: denied { read } for pid=5485 comm="syz.0.1676" name="file2" dev="tmpfs" ino=2908 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 139.887588][ T10] tipc: Node number set to 2172800109 [ 140.195715][ T5499] 9pnet: p9_errstr2errno: server reported unknown error 18446744073 [ 140.217342][ T5505] netlink: 'syz.2.1683': attribute type 4 has an invalid length. [ 140.227391][ T5505] netlink: 'syz.2.1683': attribute type 4 has an invalid length. [ 140.257628][ T36] audit: type=1400 audit(7027749168.464:20439): avc: denied { setattr } for pid=5502 comm="syz.1.1682" name="AF_VSOCK" dev="sockfs" ino=26409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 140.455630][ T36] audit: type=1326 audit(7027749168.654:20440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5372 comm="syz.3.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f1b8ebe9 code=0x7fc00000 [ 140.597878][ T5539] 9pnet_fd: Insufficient options for proto=fd [ 140.646272][ T5549] netlink: 'syz.3.1698': attribute type 4 has an invalid length. [ 140.803908][ T5559] netlink: 'syz.1.1702': attribute type 11 has an invalid length. [ 140.882160][ T5580] netlink: 'syz.3.1709': attribute type 3 has an invalid length. [ 140.886662][ T5582] 9p filesystem being mounted at /524/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 142.409991][ T5645] __nla_validate_parse: 2 callbacks suppressed [ 142.410011][ T5645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1730'. [ 142.669328][ T5668] overlayfs: failed to clone upperpath [ 142.703364][ T5673] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=53025 sclass=netlink_xfrm_socket pid=5673 comm=syz.3.1741 [ 142.733017][ T5675] bridge0: port 3(veth0_to_bridge) entered blocking state [ 142.740420][ T5675] bridge0: port 3(veth0_to_bridge) entered disabled state [ 142.747982][ T5675] veth0_to_bridge: entered allmulticast mode [ 142.754549][ T5675] veth0_to_bridge: entered promiscuous mode [ 142.760928][ T5675] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 142.773520][ T5675] bridge0: port 3(veth0_to_bridge) entered blocking state [ 142.780797][ T5675] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 142.843546][ T36] audit: type=1400 audit(7027749171.044:20441): avc: denied { link } for pid=5688 comm="syz.3.1746" name="file1" dev="tmpfs" ino=2028 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 142.981221][ T5690] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 143.438909][ T5706] bridge0: port 4(erspan0) entered blocking state [ 143.445454][ T5706] bridge0: port 4(erspan0) entered disabled state [ 143.452513][ T5706] erspan0: entered allmulticast mode [ 143.458610][ T5706] erspan0: entered promiscuous mode [ 143.463991][ T5706] bridge0: port 4(erspan0) entered blocking state [ 143.470477][ T5706] bridge0: port 4(erspan0) entered forwarding state [ 143.577482][ T36] audit: type=1326 audit(7027749171.774:20442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5530 comm="syz.0.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983af8ebe9 code=0x7fc00000 [ 143.757521][ T5758] 9pnet_fd: Insufficient options for proto=fd [ 143.764611][ T36] audit: type=1400 audit(7027749171.964:20443): avc: denied { accept } for pid=5755 comm="syz.0.1771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 143.812801][ T5766] 9pnet_fd: Insufficient options for proto=fd [ 144.139362][ T5770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1777'. [ 144.200063][ T5782] netlink: 'syz.1.1782': attribute type 4 has an invalid length. [ 144.229165][ T5786] /dev/rnullb0: Can't lookup blockdev [ 144.367616][ T5801] 9p filesystem being mounted at /380/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 144.386487][ T5803] netlink: 'syz.1.1786': attribute type 15 has an invalid length. [ 144.490888][ T36] audit: type=1326 audit(7027749172.694:20444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5826 comm="syz.3.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f1b8ebe9 code=0x50000 [ 144.519258][ T36] audit: type=1326 audit(7027749172.714:20445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5826 comm="syz.3.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa6f1b8ebe9 code=0x50000 [ 144.543057][ T36] audit: type=1326 audit(7027749172.714:20446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5826 comm="syz.3.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f1b8ebe9 code=0x50000 [ 144.566927][ T36] audit: type=1326 audit(7027749172.714:20447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5826 comm="syz.3.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f1b8ebe9 code=0x50000 [ 144.591004][ T36] audit: type=1326 audit(7027749172.714:20448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5826 comm="syz.3.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f1b8ebe9 code=0x50000 [ 144.597662][ T5845] overlayfs: failed to clone upperpath [ 144.614883][ T36] audit: type=1326 audit(7027749172.714:20449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5826 comm="syz.3.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f1b8ebe9 code=0x50000 [ 144.644011][ T36] audit: type=1326 audit(7027749172.714:20450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5826 comm="syz.3.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f1b8ebe9 code=0x50000 [ 144.766542][ T5852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1807'. [ 144.844759][ T5862] tipc: Enabling of bearer rejected, failed to enable media [ 144.904031][ T5869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1813'. [ 145.300615][ T5889] fuse: Bad value for 'group_id' [ 145.313472][ T5889] fuse: Bad value for 'group_id' [ 145.440298][ T5892] 9pnet_fd: Insufficient options for proto=fd [ 145.446711][ T5893] 9pnet_fd: Insufficient options for proto=fd [ 145.627710][ T5909] netlink: 'syz.0.1827': attribute type 4 has an invalid length. [ 146.032635][ T5959] fuse: Bad value for 'fd' [ 146.059570][ T328] tipc: Subscription rejected, illegal request [ 146.084289][ T5966] overlayfs: cannot append lower layer [ 146.259862][ T6004] veth1: entered allmulticast mode [ 146.276200][ T6003] veth1: left allmulticast mode [ 146.567858][ T6037] overlayfs: failed to clone lowerpath [ 146.839408][ T6067] tipc: Enabling of bearer rejected, failed to enable media [ 146.949540][ T6081] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1891'. [ 146.959710][ T6081] 9pnet_fd: Insufficient options for proto=fd [ 147.110694][ T6101] tipc: Enabling of bearer rejected, failed to enable media [ 147.282030][ T6119] tipc: Enabling of bearer rejected, failed to enable media [ 147.945664][ T6194] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1929'. [ 148.034901][ T6195] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.042067][ T6195] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.049440][ T6195] bridge_slave_0: entered allmulticast mode [ 148.055963][ T6195] bridge_slave_0: entered promiscuous mode [ 148.066444][ T6195] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.068773][ T6209] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1933'. [ 148.074160][ T6195] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.083253][ T6209] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1933'. [ 148.091461][ T6195] bridge_slave_1: entered allmulticast mode [ 148.100945][ T6209] netlink: 'syz.0.1933': attribute type 5 has an invalid length. [ 148.113431][ T6209] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1933'. [ 148.114498][ T6195] bridge_slave_1: entered promiscuous mode [ 148.196103][ T6195] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.203839][ T6195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.211308][ T6195] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.218500][ T6195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.244148][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.254563][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.268007][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.275138][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.284969][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.292544][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.324235][ T6195] veth0_vlan: entered promiscuous mode [ 148.337276][ T6195] veth1_macvtap: entered promiscuous mode [ 148.370535][ T36] kauditd_printk_skb: 8442 callbacks suppressed [ 148.370560][ T36] audit: type=1400 audit(7027749176.574:28893): avc: denied { mounton } for pid=6195 comm="syz-executor" path="/root/syzkaller.4i0fbG/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 148.477220][ T6257] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 148.477250][ T6257] rust_binder: Error while translating object. [ 148.498050][ T6257] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 148.505253][ T6257] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 148.519365][ T36] audit: type=1326 audit(7027749176.714:28894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6263 comm="syz.2.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3bb8ebe9 code=0x7ffc0000 [ 148.559904][ T36] audit: type=1326 audit(7027749176.714:28895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6263 comm="syz.2.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3bb8ebe9 code=0x7ffc0000 [ 148.584717][ T36] audit: type=1326 audit(7027749176.714:28896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6263 comm="syz.2.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdb3bb8d550 code=0x7ffc0000 [ 148.616459][ T36] audit: type=1326 audit(7027749176.714:28897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6263 comm="syz.2.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdb3bb8d550 code=0x7ffc0000 [ 148.640817][ T36] audit: type=1326 audit(7027749176.724:28898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6263 comm="syz.2.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3bb8ebe9 code=0x7ffc0000 [ 148.668585][ T36] audit: type=1326 audit(7027749176.724:28899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6263 comm="syz.2.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7fdb3bb8ebe9 code=0x7ffc0000 [ 148.700156][ T36] audit: type=1326 audit(7027749176.724:28900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6263 comm="syz.2.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3bb8ebe9 code=0x7ffc0000 [ 148.724512][ T36] audit: type=1326 audit(7027749176.724:28901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6263 comm="syz.2.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fdb3bb8ebe9 code=0x7ffc0000 [ 148.752216][ T36] audit: type=1326 audit(7027749176.724:28902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6263 comm="syz.2.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3bb8ebe9 code=0x7ffc0000 [ 149.316471][ T6308] binder: Binderfs stats mode cannot be changed during a remount [ 149.405391][ T6306] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.424624][ T6306] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.436480][ T6306] bridge_slave_0: entered allmulticast mode [ 149.444263][ T6306] bridge_slave_0: entered promiscuous mode [ 149.451348][ T6306] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.458805][ T6306] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.466092][ T6306] bridge_slave_1: entered allmulticast mode [ 149.473380][ T6306] bridge_slave_1: entered promiscuous mode [ 149.492076][ T6323] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 149.527258][ T6323] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 149.527887][ T6323] rust_binder: Write failure EINVAL in pid:8 [ 149.541162][ T6323] rust_binder: Error while translating object. [ 149.554334][ T6323] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 149.561326][ T6323] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:8 [ 149.575975][ T6329] 9pnet_fd: Insufficient options for proto=fd [ 149.619502][ T6306] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.626758][ T6306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.634443][ T6306] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.641539][ T6306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.675975][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.683712][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.695495][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.702741][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.727742][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.734893][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.779321][ T6306] veth0_vlan: entered promiscuous mode [ 149.799031][ T6306] veth1_macvtap: entered promiscuous mode [ 150.087654][ T10] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 150.238941][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 150.250297][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 150.270481][ T10] usb 1-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 150.281414][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.290993][ T10] usb 1-1: config 0 descriptor?? [ 150.307734][ T6345] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 150.319560][ T6351] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65282 sclass=netlink_tcpdiag_socket pid=6351 comm=syz.3.1978 [ 150.332008][ T6348] binder: Bad value for 'stats' [ 150.404693][ T6365] 9pnet_fd: Insufficient options for proto=fd [ 150.418004][ T6365] 9pnet_fd: Insufficient options for proto=fd [ 150.440889][ T6365] 9pnet_fd: Insufficient options for proto=fd [ 150.463403][ T6365] 9pnet_fd: Insufficient options for proto=fd [ 150.487431][ T6374] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 150.487491][ T6374] rust_binder: Error while translating object. [ 150.496440][ T6374] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 150.504842][ T6365] 9pnet_fd: Insufficient options for proto=fd [ 150.507306][ T6374] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:13 [ 150.582100][ T6365] 9pnet_fd: Insufficient options for proto=fd [ 150.730741][ T10] lenovo 0003:17EF:60B5.000A: item fetching failed at offset 0/2 [ 150.739668][ T10] lenovo 0003:17EF:60B5.000A: hid_parse failed [ 150.752276][ T10] lenovo 0003:17EF:60B5.000A: probe with driver lenovo failed with error -22 [ 150.780199][ T6365] 9pnet_fd: Insufficient options for proto=fd [ 150.841331][ T6365] 9pnet_fd: Insufficient options for proto=fd [ 150.892344][ T6364] cgroup: fork rejected by pids controller in /syz3 [ 150.934186][ T1447] usb 1-1: USB disconnect, device number 3 [ 151.046710][ T6365] 9pnet_fd: Insufficient options for proto=fd [ 151.114554][ T6365] 9pnet_fd: Insufficient options for proto=fd [ 151.183525][ T6365] 9pnet_fd: Insufficient options for proto=fd [ 151.201389][ T6424] 9pnet_fd: Insufficient options for proto=fd [ 151.349793][ T6432] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch [ 151.477205][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 151.489279][ T6445] 9pnet: p9_errstr2errno: server reported unknown error [ 151.959266][ T6558] overlayfs: failed to clone lowerpath [ 152.444089][ T6784] rust_binder: 6781 RLIMIT_NICE not set [ 152.444143][ T6784] rust_binder: 29: no such ref 2 [ 152.682148][ T6800] overlayfs: conflicting lowerdir path [ 152.695506][ T6800] 9pnet_fd: Insufficient options for proto=fd [ 152.883356][ T6807] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 152.883861][ T6807] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 152.891046][ T6807] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:46 [ 152.908447][ T6807] rust_binder: 46: no such ref 2 [ 152.927533][ T6807] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:46 [ 153.071302][ T6816] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:50 [ 153.400297][ T6373] syz.3.1982 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 153.429966][ T6373] CPU: 1 UID: 0 PID: 6373 Comm: syz.3.1982 Not tainted syzkaller #0 6e508aa732f414f9d300b832ff15c50b3cf7cfdc [ 153.430004][ T6373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 153.430022][ T6373] Call Trace: [ 153.430030][ T6373] [ 153.430040][ T6373] __dump_stack+0x21/0x30 [ 153.430074][ T6373] dump_stack_lvl+0x10c/0x190 [ 153.430118][ T6373] ? __cfi_dump_stack_lvl+0x10/0x10 [ 153.430149][ T6373] ? ___ratelimit+0x3f7/0x5a0 [ 153.430171][ T6373] dump_stack+0x19/0x20 [ 153.430197][ T6373] dump_header+0xd7/0x490 [ 153.430219][ T6373] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 153.430248][ T6373] oom_kill_process+0x4c0/0x7e0 [ 153.430278][ T6373] ? sched_clock_cpu+0x75/0x400 [ 153.430309][ T6373] out_of_memory+0x7ee/0xbd0 [ 153.430334][ T6373] ? __cfi_out_of_memory+0x10/0x10 [ 153.430357][ T6373] ? mutex_lock_killable+0x92/0x1c0 [ 153.430382][ T6373] ? __cfi_mutex_lock_killable+0x10/0x10 [ 153.430408][ T6373] mem_cgroup_out_of_memory+0x279/0x350 [ 153.430430][ T6373] ? drain_obj_stock+0xed0/0xed0 [ 153.430453][ T6373] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 153.430475][ T6373] try_charge_memcg+0x8f7/0xde0 [ 153.430506][ T6373] ? __cfi_try_charge_memcg+0x10/0x10 [ 153.430535][ T6373] ? __alloc_pages_noprof+0x31f/0x7b0 [ 153.430563][ T6373] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 153.430590][ T6373] ? __folio_batch_add_and_move+0x2ab/0x370 [ 153.430617][ T6373] __mem_cgroup_charge+0xf6/0x410 [ 153.430648][ T6373] ? _raw_spin_lock+0x8c/0x120 [ 153.430678][ T6373] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 153.430713][ T6373] shmem_alloc_and_add_folio+0x86d/0x1050 [ 153.430741][ T6373] ? put_swap_device+0x130/0x130 [ 153.430764][ T6373] ? shmem_huge_global_enabled+0x2da/0x360 [ 153.430788][ T6373] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 153.430810][ T6373] ? __kasan_check_write+0x18/0x20 [ 153.430842][ T6373] ? _raw_spin_lock+0x8c/0x120 [ 153.430873][ T6373] shmem_get_folio_gfp+0x5f0/0x1380 [ 153.430898][ T6373] ? shmem_get_folio+0xc0/0xc0 [ 153.430917][ T6373] ? follow_page_pte+0xa5c/0xb90 [ 153.430946][ T6373] ? inode_to_bdi+0x6d/0x100 [ 153.430975][ T6373] shmem_write_begin+0xf4/0x270 [ 153.431001][ T6373] generic_perform_write+0x32d/0x960 [ 153.431034][ T6373] ? __cfi_generic_perform_write+0x10/0x10 [ 153.431066][ T6373] ? down_write+0xe9/0x2a0 [ 153.431092][ T6373] ? file_update_time+0xa3/0x220 [ 153.431137][ T6373] shmem_file_write_iter+0x105/0x130 [ 153.431166][ T6373] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 153.431194][ T6373] __kernel_write_iter+0x392/0x830 [ 153.431215][ T6373] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 153.431242][ T6373] ? __cfi___kernel_write_iter+0x10/0x10 [ 153.431263][ T6373] ? get_dump_page+0x160/0x220 [ 153.431290][ T6373] ? __asan_memset+0x39/0x50 [ 153.431320][ T6373] ? iov_iter_bvec+0xc0/0x180 [ 153.431345][ T6373] dump_user_range+0xb06/0xdf0 [ 153.431367][ T6373] ? __cfi_dump_emit+0x10/0x10 [ 153.431401][ T6373] ? __cfi_dump_user_range+0x10/0x10 [ 153.431422][ T6373] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 153.431455][ T6373] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 153.431488][ T6373] elf_core_dump+0x2cd9/0x3810 [ 153.431517][ T6373] ? __cfi_elf_core_dump+0x10/0x10 [ 153.431551][ T6373] ? dump_interrupted+0xf0/0xf0 [ 153.431584][ T6373] ? filp_open+0x182/0x1d0 [ 153.431611][ T6373] ? 0xffffffffff600000 [ 153.431638][ T6373] do_coredump+0x1bf7/0x2bd0 [ 153.431672][ T6373] ? __cfi_do_coredump+0x10/0x10 [ 153.431703][ T6373] ? asm_exc_general_protection+0x2b/0x30 [ 153.431738][ T6373] ? __kasan_slab_free+0x6a/0x80 [ 153.431760][ T6373] ? kmem_cache_free+0x1c1/0x510 [ 153.431793][ T6373] ? get_signal+0xa75/0x14f0 [ 153.431821][ T6373] get_signal+0x11fd/0x14f0 [ 153.431852][ T6373] arch_do_signal_or_restart+0x96/0x720 [ 153.431886][ T6373] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 153.431921][ T6373] ? fixup_iopl_exception+0xdd/0x2e0 [ 153.431955][ T6373] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 153.431984][ T6373] irqentry_exit_to_user_mode+0x4e/0xb0 [ 153.432011][ T6373] irqentry_exit+0x16/0x60 [ 153.432036][ T6373] exc_general_protection+0x15a/0x1f0 [ 153.432057][ T6373] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 153.432086][ T6373] asm_exc_general_protection+0x2b/0x30 [ 153.432131][ T6373] RIP: 0033:0x7fa6f1b8ebf1 [ 153.432149][ T6373] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 153.432168][ T6373] RSP: 002b:0000200000000120 EFLAGS: 00010217 [ 153.432189][ T6373] RAX: 0000000000000000 RBX: 00007fa6f1dc5fa0 RCX: 00007fa6f1b8ebe9 [ 153.432204][ T6373] RDX: 0000200000000140 RSI: 0000200000000120 RDI: 0000000000000080 [ 153.432220][ T6373] RBP: 00007fa6f1c11e19 R08: 00002000000001c0 R09: 00002000000001c0 [ 153.432235][ T6373] R10: 0000200000000180 R11: 0000000000000202 R12: 0000000000000000 [ 153.432249][ T6373] R13: 00007fa6f1dc6038 R14: 00007fa6f1dc5fa0 R15: 00007fff81cdbb28 [ 153.432268][ T6373] [ 153.432354][ T6373] memory: usage 307200kB, limit 307200kB, failcnt 17484 [ 153.487934][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 153.489206][ T878] Bluetooth: hci0: command 0x1003 tx timeout [ 153.495310][ T6373] memory+swap: usage 429456kB, limit 9007199254740988kB, failcnt 0 [ 153.961202][ T6373] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 153.974260][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 153.974278][ T36] audit: type=1400 audit(7027749182.174:28921): avc: denied { append } for pid=6937 comm="syz.1.2036" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 153.977206][ T6373] Memory cgroup stats for /syz3: [ 154.004891][ T6373] cache 314454016 [ 154.009173][ T330] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 154.010626][ T6373] rss 118784 [ 154.021744][ T330] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 154.034762][ T6373] rss_huge 0 [ 154.041569][ T6373] shmem 314449920 [ 154.045635][ T6373] mapped_file 0 [ 154.053085][ T6946] fido_id[6946]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 154.071569][ T6373] dirty 0 [ 154.074587][ T36] audit: type=1400 audit(7027749182.274:28922): avc: denied { execute } for pid=6947 comm="syz.2.2039" path="/dev/rnullb0" dev="tmpfs" ino=1285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 154.098232][ T6373] writeback 0 [ 154.101566][ T6373] workingset_refault_anon 0 [ 154.106128][ T6373] workingset_refault_file 243 [ 154.113554][ T6373] swap 125190144 [ 154.119212][ T6373] swapcached 20480 [ 154.123480][ T6373] pgpgin 183352 [ 154.126997][ T6373] pgpgout 107063 [ 154.132678][ T6958] rust_binder: 6950 RLIMIT_NICE not set [ 154.132718][ T6958] rust_binder: 61: no such ref 2 [ 154.143643][ T6373] pgfault 106462 [ 154.147262][ T6373] pgmajfault 15 [ 154.151577][ T6373] inactive_anon 196698112 [ 154.155975][ T6373] active_anon 117870592 [ 154.160278][ T6373] inactive_file 0 [ 154.163949][ T6373] active_file 4096 [ 154.178490][ T6373] unevictable 0 [ 154.183961][ T6373] hierarchical_memory_limit 314572800 [ 154.190609][ T6373] hierarchical_memsw_limit 9223372036854771712 [ 154.196928][ T6373] total_cache 314454016 [ 154.201462][ T6373] total_rss 118784 [ 154.205206][ T6373] total_rss_huge 0 [ 154.209717][ T6373] total_shmem 314449920 [ 154.213165][ T6966] pim6reg1: entered promiscuous mode [ 154.213966][ T6373] total_mapped_file 0 [ 154.220475][ T6966] pim6reg1: entered allmulticast mode [ 154.225599][ T6373] total_dirty 0 [ 154.232344][ T6373] total_writeback 0 [ 154.236373][ T6373] total_workingset_refault_anon 0 [ 154.241849][ T6373] total_workingset_refault_file 243 [ 154.247285][ T6373] total_swap 125190144 [ 154.252798][ T6373] total_swapcached 20480 [ 154.257164][ T6373] total_pgpgin 183352 [ 154.261466][ T6373] total_pgpgout 107063 [ 154.265556][ T6373] total_pgfault 106462 [ 154.269919][ T6373] total_pgmajfault 15 [ 154.274053][ T6373] total_inactive_anon 196698112 [ 154.279215][ T6373] total_active_anon 117870592 [ 154.284199][ T6373] total_inactive_file 0 [ 154.289307][ T36] audit: type=1400 audit(7027749182.484:28923): avc: denied { read } for pid=6975 comm="syz.2.2049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 154.292586][ T6373] total_active_file 4096 [ 154.313528][ T6373] total_unevictable 0 [ 154.317693][ T6373] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.648,pid=2404,uid=0 [ 154.335381][ T6373] Memory cgroup out of memory: Killed process 2404 (syz.3.648) total-vm:93744kB, anon-rss:1164kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 154.361624][ T6384] syz.3.1982 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 154.407561][ T36] audit: type=1326 audit(7027749182.594:28924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.0.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb1b8ebe9 code=0x7fc00000 [ 154.423393][ T6384] CPU: 0 UID: 0 PID: 6384 Comm: syz.3.1982 Not tainted syzkaller #0 6e508aa732f414f9d300b832ff15c50b3cf7cfdc [ 154.423438][ T6384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 154.423453][ T6384] Call Trace: [ 154.423461][ T6384] [ 154.423475][ T6384] __dump_stack+0x21/0x30 [ 154.423515][ T6384] dump_stack_lvl+0x10c/0x190 [ 154.423548][ T6384] ? __cfi_dump_stack_lvl+0x10/0x10 [ 154.423579][ T6384] ? ___ratelimit+0x3f7/0x5a0 [ 154.423604][ T6384] dump_stack+0x19/0x20 [ 154.423633][ T6384] dump_header+0xd7/0x490 [ 154.423656][ T6384] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 154.423687][ T6384] oom_kill_process+0x4c0/0x7e0 [ 154.423715][ T6384] ? sched_clock_cpu+0x75/0x400 [ 154.423749][ T6384] out_of_memory+0x7ee/0xbd0 [ 154.423776][ T6384] ? __cfi_out_of_memory+0x10/0x10 [ 154.423803][ T6384] ? mutex_lock_killable+0x104/0x1c0 [ 154.423830][ T6384] ? __cfi_mutex_lock_killable+0x10/0x10 [ 154.423856][ T6384] mem_cgroup_out_of_memory+0x279/0x350 [ 154.423881][ T6384] ? drain_obj_stock+0xed0/0xed0 [ 154.423905][ T6384] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 154.423929][ T6384] try_charge_memcg+0x8f7/0xde0 [ 154.423961][ T6384] ? __cfi_try_charge_memcg+0x10/0x10 [ 154.423993][ T6384] ? __alloc_pages_noprof+0x31f/0x7b0 [ 154.424024][ T6384] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 154.424054][ T6384] ? __folio_batch_add_and_move+0x2ab/0x370 [ 154.424083][ T6384] __mem_cgroup_charge+0xf6/0x410 [ 154.424118][ T6384] ? _raw_spin_lock+0x8c/0x120 [ 154.424149][ T6384] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 154.424186][ T6384] shmem_alloc_and_add_folio+0x86d/0x1050 [ 154.424226][ T6384] ? put_swap_device+0x130/0x130 [ 154.424252][ T6384] ? shmem_huge_global_enabled+0x2da/0x360 [ 154.424277][ T6384] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 154.424303][ T6384] ? __kasan_check_write+0x18/0x20 [ 154.424337][ T6384] ? _raw_spin_lock+0x8c/0x120 [ 154.424370][ T6384] shmem_get_folio_gfp+0x5f0/0x1380 [ 154.424398][ T6384] ? shmem_get_folio+0xc0/0xc0 [ 154.424420][ T6384] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 154.424454][ T6384] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 154.424487][ T6384] ? inode_to_bdi+0x6d/0x100 [ 154.424521][ T6384] shmem_write_begin+0xf4/0x270 [ 154.424547][ T6384] generic_perform_write+0x32d/0x960 [ 154.424583][ T6384] ? __cfi_generic_perform_write+0x10/0x10 [ 154.424616][ T6384] ? down_write+0xe9/0x2a0 [ 154.424642][ T6384] ? mnt_get_write_access_file+0x1af/0x3b0 [ 154.424674][ T6384] ? mnt_put_write_access_file+0xc2/0x100 [ 154.424706][ T6384] ? file_update_time+0x1ef/0x220 [ 154.424740][ T6384] shmem_file_write_iter+0x105/0x130 [ 154.424772][ T6384] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 154.424802][ T6384] __kernel_write_iter+0x392/0x830 [ 154.424824][ T6384] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 154.424855][ T6384] ? __cfi___kernel_write_iter+0x10/0x10 [ 154.424877][ T6384] ? get_dump_page+0x160/0x220 [ 154.424905][ T6384] ? __asan_memset+0x39/0x50 [ 154.424938][ T6384] ? iov_iter_bvec+0xc0/0x180 [ 154.424964][ T6384] dump_user_range+0xb06/0xdf0 [ 154.424989][ T6384] ? __cfi_dump_emit+0x10/0x10 [ 154.425024][ T6384] ? __cfi_dump_user_range+0x10/0x10 [ 154.425045][ T6384] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 154.425081][ T6384] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 154.425116][ T6384] elf_core_dump+0x2cd9/0x3810 [ 154.425149][ T6384] ? __cfi_elf_core_dump+0x10/0x10 [ 154.425185][ T6384] ? dump_interrupted+0xf0/0xf0 [ 154.425226][ T6384] ? filp_open+0x182/0x1d0 [ 154.425257][ T6384] ? 0xffffffffff600000 [ 154.425277][ T6384] do_coredump+0x1bf7/0x2bd0 [ 154.425315][ T6384] ? __cfi_do_coredump+0x10/0x10 [ 154.425348][ T6384] ? asm_exc_general_protection+0x2b/0x30 [ 154.425387][ T6384] ? __kasan_slab_free+0x6a/0x80 [ 154.425411][ T6384] ? kmem_cache_free+0x1c1/0x510 [ 154.425447][ T6384] ? get_signal+0xa75/0x14f0 [ 154.425478][ T6384] get_signal+0x11fd/0x14f0 [ 154.425510][ T6384] arch_do_signal_or_restart+0x96/0x720 [ 154.425546][ T6384] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 154.425583][ T6384] ? fixup_iopl_exception+0xdd/0x2e0 [ 154.425621][ T6384] irqentry_exit_to_user_mode+0x4e/0xb0 [ 154.425650][ T6384] irqentry_exit+0x16/0x60 [ 154.425676][ T6384] exc_general_protection+0x15a/0x1f0 [ 154.425698][ T6384] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 154.425728][ T6384] asm_exc_general_protection+0x2b/0x30 [ 154.425755][ T6384] RIP: 0033:0x7fa6f1b8ebf1 [ 154.425774][ T6384] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 154.425795][ T6384] RSP: 002b:0000200000000120 EFLAGS: 00010217 [ 154.425818][ T6384] RAX: 0000000000000000 RBX: 00007fa6f1dc5fa0 RCX: 00007fa6f1b8ebe9 [ 154.425836][ T6384] RDX: 0000200000000140 RSI: 0000200000000120 RDI: 0000000000000080 [ 154.425854][ T6384] RBP: 00007fa6f1c11e19 R08: 00002000000001c0 R09: 00002000000001c0 [ 154.425872][ T6384] R10: 0000200000000180 R11: 0000000000000202 R12: 0000000000000000 [ 154.425889][ T6384] R13: 00007fa6f1dc6038 R14: 00007fa6f1dc5fa0 R15: 00007fff81cdbb28 [ 154.425909][ T6384] [ 154.425919][ T6384] memory: usage 307200kB, limit 307200kB, failcnt 18173 [ 154.448650][ T6991] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:68 [ 154.466108][ T6384] memory+swap: usage 432072kB, limit 9007199254740988kB, failcnt 0 [ 154.470779][ T36] audit: type=1326 audit(7027749182.594:28925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.0.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5eb1b8ebe9 code=0x7fc00000 [ 154.477869][ T6384] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 154.480230][ T36] audit: type=1326 audit(7027749182.594:28926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.0.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb1b8ebe9 code=0x7fc00000 [ 154.484218][ T6384] Memory cgroup stats for [ 154.504784][ T36] audit: type=1326 audit(7027749182.594:28927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.0.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb1b8ebe9 code=0x7fc00000 [ 154.515232][ T6384] /syz3 [ 154.522660][ T36] audit: type=1326 audit(7027749182.594:28928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.0.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb1b8ebe9 code=0x7fc00000 [ 154.525728][ T6384] : [ 154.532594][ T6996] rust_binder: 6992 RLIMIT_NICE not set [ 154.538777][ T6384] cache 314454016 [ 154.541528][ T6996] rust_binder: 19: no such ref 2 [ 154.546752][ T6384] rss 118784 [ 154.551922][ T36] audit: type=1326 audit(7027749182.594:28929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.0.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb1b8ebe9 code=0x7fc00000 [ 154.557900][ T6384] rss_huge 0 [ 154.566166][ T36] audit: type=1400 audit(7027749182.654:28930): avc: denied { execute } for pid=6989 comm="syz.1.2054" path="/selinux/mls" dev="selinuxfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 154.602491][ T6384] shmem 314449920 [ 155.143804][ T6384] mapped_file 0 [ 155.147397][ T6384] dirty 0 [ 155.150529][ T6384] writeback 0 [ 155.154073][ T6384] workingset_refault_anon 0 [ 155.160602][ T6384] workingset_refault_file 243 [ 155.165500][ T6384] swap 127868928 [ 155.169755][ T6384] swapcached 20480 [ 155.173509][ T6384] pgpgin 184051 [ 155.176997][ T6384] pgpgout 107762 [ 155.180613][ T6384] pgfault 106506 [ 155.184222][ T6384] pgmajfault 15 [ 155.187749][ T6384] inactive_anon 119005184 [ 155.192098][ T6384] active_anon 195563520 [ 155.196274][ T6384] inactive_file 0 [ 155.199974][ T6384] active_file 4096 [ 155.203709][ T6384] unevictable 0 [ 155.207188][ T6384] hierarchical_memory_limit 314572800 [ 155.212615][ T6384] hierarchical_memsw_limit 9223372036854771712 [ 155.218918][ T6384] total_cache 314454016 [ 155.223160][ T6384] total_rss 118784 [ 155.227002][ T6384] total_rss_huge 0 [ 155.230797][ T6384] total_shmem 314449920 [ 155.235119][ T6384] total_mapped_file 0 [ 155.239220][ T6384] total_dirty 0 [ 155.244183][ T6384] total_writeback 0 [ 155.260016][ T6384] total_workingset_refault_anon 0 [ 155.266949][ T6384] total_workingset_refault_file 243 [ 155.279620][ T6384] total_swap 127868928 [ 155.285079][ T6384] total_swapcached 20480 [ 155.294651][ T6384] total_pgpgin 184051 [ 155.309825][ T6384] total_pgpgout 107762 [ 155.316423][ T6384] total_pgfault 106506 [ 155.320946][ T7011] binder: Bad value for 'max' [ 155.327418][ T6384] total_pgmajfault 15 [ 155.332350][ T6384] total_inactive_anon 119005184 [ 155.337331][ T6384] total_active_anon 195563520 [ 155.359886][ T6384] total_inactive_file 0 [ 155.364191][ T6384] total_active_file 4096 [ 155.377801][ T6384] total_unevictable 0 [ 155.381861][ T6384] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.576,pid=2190,uid=0 [ 155.417526][ T6384] Memory cgroup out of memory: Killed process 2190 (syz.3.576) total-vm:93744kB, anon-rss:1060kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 155.460987][ T6375] syz.3.1982 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 155.487659][ T6375] CPU: 0 UID: 0 PID: 6375 Comm: syz.3.1982 Not tainted syzkaller #0 6e508aa732f414f9d300b832ff15c50b3cf7cfdc [ 155.487699][ T6375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 155.487714][ T6375] Call Trace: [ 155.487721][ T6375] [ 155.487730][ T6375] __dump_stack+0x21/0x30 [ 155.487767][ T6375] dump_stack_lvl+0x10c/0x190 [ 155.487796][ T6375] ? __cfi_dump_stack_lvl+0x10/0x10 [ 155.487827][ T6375] ? ___ratelimit+0x3f7/0x5a0 [ 155.487850][ T6375] dump_stack+0x19/0x20 [ 155.487877][ T6375] dump_header+0xd7/0x490 [ 155.487899][ T6375] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 155.487930][ T6375] oom_kill_process+0x4c0/0x7e0 [ 155.487956][ T6375] ? sched_clock_cpu+0x75/0x400 [ 155.487987][ T6375] out_of_memory+0x7ee/0xbd0 [ 155.488013][ T6375] ? __cfi_out_of_memory+0x10/0x10 [ 155.488038][ T6375] ? mutex_lock_killable+0x104/0x1c0 [ 155.488063][ T6375] ? __cfi_mutex_lock_killable+0x10/0x10 [ 155.488090][ T6375] mem_cgroup_out_of_memory+0x279/0x350 [ 155.488133][ T6375] ? drain_obj_stock+0xed0/0xed0 [ 155.488157][ T6375] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 155.488180][ T6375] try_charge_memcg+0x8f7/0xde0 [ 155.488212][ T6375] ? __cfi_try_charge_memcg+0x10/0x10 [ 155.488242][ T6375] ? __alloc_pages_noprof+0x31f/0x7b0 [ 155.488273][ T6375] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 155.488301][ T6375] ? __folio_batch_add_and_move+0x2ab/0x370 [ 155.488330][ T6375] __mem_cgroup_charge+0xf6/0x410 [ 155.488363][ T6375] ? _raw_spin_lock+0x8c/0x120 [ 155.488394][ T6375] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 155.488429][ T6375] shmem_alloc_and_add_folio+0x86d/0x1050 [ 155.488458][ T6375] ? put_swap_device+0x130/0x130 [ 155.488483][ T6375] ? shmem_huge_global_enabled+0x2da/0x360 [ 155.488508][ T6375] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 155.488532][ T6375] ? __kasan_check_write+0x18/0x20 [ 155.488565][ T6375] ? _raw_spin_lock+0x8c/0x120 [ 155.488596][ T6375] shmem_get_folio_gfp+0x5f0/0x1380 [ 155.488623][ T6375] ? shmem_get_folio+0xc0/0xc0 [ 155.488643][ T6375] ? follow_page_pte+0xa5c/0xb90 [ 155.488672][ T6375] ? inode_to_bdi+0x6d/0x100 [ 155.488703][ T6375] shmem_write_begin+0xf4/0x270 [ 155.488730][ T6375] generic_perform_write+0x32d/0x960 [ 155.488765][ T6375] ? __cfi_generic_perform_write+0x10/0x10 [ 155.488796][ T6375] ? down_write+0xe9/0x2a0 [ 155.488822][ T6375] ? file_update_time+0xa3/0x220 [ 155.488852][ T6375] shmem_file_write_iter+0x105/0x130 [ 155.488881][ T6375] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 155.488910][ T6375] __kernel_write_iter+0x392/0x830 [ 155.488931][ T6375] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 155.488961][ T6375] ? __cfi___kernel_write_iter+0x10/0x10 [ 155.488982][ T6375] ? get_dump_page+0x160/0x220 [ 155.489007][ T6375] ? __asan_memset+0x39/0x50 [ 155.489034][ T6375] ? iov_iter_bvec+0xc0/0x180 [ 155.489057][ T6375] dump_user_range+0xb06/0xdf0 [ 155.489077][ T6375] ? __cfi_dump_emit+0x10/0x10 [ 155.489106][ T6375] ? __cfi_dump_user_range+0x10/0x10 [ 155.489133][ T6375] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 155.489165][ T6375] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 155.489197][ T6375] elf_core_dump+0x2cd9/0x3810 [ 155.489227][ T6375] ? __cfi_elf_core_dump+0x10/0x10 [ 155.489260][ T6375] ? dump_interrupted+0xf0/0xf0 [ 155.489291][ T6375] ? filp_open+0x182/0x1d0 [ 155.489318][ T6375] ? 0xffffffffff600000 [ 155.489334][ T6375] do_coredump+0x1bf7/0x2bd0 [ 155.489366][ T6375] ? __cfi_do_coredump+0x10/0x10 [ 155.489394][ T6375] ? asm_exc_general_protection+0x2b/0x30 [ 155.489426][ T6375] ? __kasan_slab_free+0x6a/0x80 [ 155.489447][ T6375] ? kmem_cache_free+0x1c1/0x510 [ 155.489478][ T6375] ? get_signal+0xa75/0x14f0 [ 155.489505][ T6375] get_signal+0x11fd/0x14f0 [ 155.489535][ T6375] arch_do_signal_or_restart+0x96/0x720 [ 155.489566][ T6375] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 155.489599][ T6375] ? fixup_iopl_exception+0xdd/0x2e0 [ 155.489632][ T6375] irqentry_exit_to_user_mode+0x4e/0xb0 [ 155.489658][ T6375] irqentry_exit+0x16/0x60 [ 155.489682][ T6375] exc_general_protection+0x15a/0x1f0 [ 155.489702][ T6375] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 155.489731][ T6375] asm_exc_general_protection+0x2b/0x30 [ 155.489754][ T6375] RIP: 0033:0x7fa6f1b8ebf1 [ 155.489771][ T6375] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 155.489790][ T6375] RSP: 002b:0000200000000120 EFLAGS: 00010217 [ 155.489809][ T6375] RAX: 0000000000000000 RBX: 00007fa6f1dc5fa0 RCX: 00007fa6f1b8ebe9 [ 155.489825][ T6375] RDX: 0000200000000140 RSI: 0000200000000120 RDI: 0000000000000080 [ 155.489840][ T6375] RBP: 00007fa6f1c11e19 R08: 00002000000001c0 R09: 00002000000001c0 [ 155.489856][ T6375] R10: 0000200000000180 R11: 0000000000000202 R12: 0000000000000000 [ 155.489871][ T6375] R13: 00007fa6f1dc6038 R14: 00007fa6f1dc5fa0 R15: 00007fff81cdbb28 [ 155.489890][ T6375] [ 156.073338][ T6375] memory: usage 307200kB, limit 307200kB, failcnt 18256 [ 156.081088][ T6375] memory+swap: usage 432128kB, limit 9007199254740988kB, failcnt 0 [ 156.089841][ T6375] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 156.096852][ T6375] Memory cgroup stats for /syz3: [ 156.096999][ T6375] cache 314454016 [ 156.105832][ T6375] rss 118784 [ 156.109128][ T6375] rss_huge 0 [ 156.112414][ T6375] shmem 314449920 [ 156.116071][ T6375] mapped_file 0 [ 156.119601][ T6375] dirty 0 [ 156.122888][ T6375] writeback 0 [ 156.126444][ T6375] workingset_refault_anon 0 [ 156.133050][ T6375] workingset_refault_file 243 [ 156.137827][ T6375] swap 127926272 [ 156.141497][ T6375] swapcached 20480 [ 156.145329][ T6375] pgpgin 184115 [ 156.148993][ T6375] pgpgout 107826 [ 156.152753][ T6375] pgfault 106510 [ 156.156326][ T6375] pgmajfault 15 [ 156.159861][ T6375] inactive_anon 118743040 [ 156.164321][ T6375] active_anon 195825664 [ 156.168844][ T6375] inactive_file 0 [ 156.172573][ T6375] active_file 4096 [ 156.176399][ T6375] unevictable 0 [ 156.179916][ T6375] hierarchical_memory_limit 314572800 [ 156.185486][ T6375] hierarchical_memsw_limit 9223372036854771712 [ 156.191725][ T6375] total_cache 314454016 [ 156.196024][ T6375] total_rss 118784 [ 156.199802][ T6375] total_rss_huge 0 [ 156.203611][ T6375] total_shmem 314449920 [ 156.208780][ T6375] total_mapped_file 0 [ 156.212788][ T6375] total_dirty 0 [ 156.216384][ T6375] total_writeback 0 [ 156.220265][ T6375] total_workingset_refault_anon 0 [ 156.225841][ T6375] total_workingset_refault_file 243 [ 156.231479][ T6375] total_swap 127926272 [ 156.235955][ T6375] total_swapcached 20480 [ 156.240457][ T6375] total_pgpgin 184115 [ 156.244721][ T6375] total_pgpgout 107826 [ 156.248875][ T6375] total_pgfault 106510 [ 156.253275][ T6375] total_pgmajfault 15 [ 156.257383][ T6375] total_inactive_anon 118743040 [ 156.262413][ T6375] total_active_anon 195825664 [ 156.269365][ T6375] total_inactive_file 0 [ 156.273670][ T6375] total_active_file 4096 [ 156.278352][ T6375] total_unevictable 0 [ 156.282450][ T6375] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.530,pid=2054,uid=0 [ 156.298597][ T6375] Memory cgroup out of memory: Killed process 2054 (syz.3.530) total-vm:93744kB, anon-rss:1048kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 156.360806][ T6406] syz.3.1982 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 156.371320][ T6406] CPU: 1 UID: 0 PID: 6406 Comm: syz.3.1982 Not tainted syzkaller #0 6e508aa732f414f9d300b832ff15c50b3cf7cfdc [ 156.371358][ T6406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 156.371372][ T6406] Call Trace: [ 156.371380][ T6406] [ 156.371389][ T6406] __dump_stack+0x21/0x30 [ 156.371424][ T6406] dump_stack_lvl+0x10c/0x190 [ 156.371455][ T6406] ? __cfi_dump_stack_lvl+0x10/0x10 [ 156.371485][ T6406] ? ___ratelimit+0x3f7/0x5a0 [ 156.371509][ T6406] dump_stack+0x19/0x20 [ 156.371537][ T6406] dump_header+0xd7/0x490 [ 156.371560][ T6406] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 156.371591][ T6406] oom_kill_process+0x4c0/0x7e0 [ 156.371618][ T6406] ? sched_clock_cpu+0x75/0x400 [ 156.371658][ T6406] out_of_memory+0x7ee/0xbd0 [ 156.371685][ T6406] ? __cfi_out_of_memory+0x10/0x10 [ 156.371711][ T6406] ? mutex_lock_killable+0x104/0x1c0 [ 156.371737][ T6406] ? __cfi_mutex_lock_killable+0x10/0x10 [ 156.371765][ T6406] mem_cgroup_out_of_memory+0x279/0x350 [ 156.371789][ T6406] ? drain_obj_stock+0xed0/0xed0 [ 156.371812][ T6406] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 156.371833][ T6406] try_charge_memcg+0x8f7/0xde0 [ 156.371865][ T6406] ? __cfi_try_charge_memcg+0x10/0x10 [ 156.371896][ T6406] ? __alloc_pages_noprof+0x31f/0x7b0 [ 156.371926][ T6406] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 156.371955][ T6406] ? update_curr+0x821/0xaa0 [ 156.371976][ T6406] __mem_cgroup_charge+0xf6/0x410 [ 156.372008][ T6406] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 156.372044][ T6406] shmem_alloc_and_add_folio+0x86d/0x1050 [ 156.372072][ T6406] ? put_swap_device+0x130/0x130 [ 156.372104][ T6406] ? shmem_huge_global_enabled+0x2da/0x360 [ 156.372128][ T6406] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 156.372153][ T6406] ? _raw_spin_lock+0x8c/0x120 [ 156.372184][ T6406] shmem_get_folio_gfp+0x5f0/0x1380 [ 156.372210][ T6406] ? shmem_get_folio+0xc0/0xc0 [ 156.372231][ T6406] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 156.372265][ T6406] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 156.372297][ T6406] ? inode_to_bdi+0x6d/0x100 [ 156.372327][ T6406] shmem_write_begin+0xf4/0x270 [ 156.372354][ T6406] generic_perform_write+0x32d/0x960 [ 156.372389][ T6406] ? __cfi_generic_perform_write+0x10/0x10 [ 156.372420][ T6406] ? down_write+0xe9/0x2a0 [ 156.372445][ T6406] ? mnt_get_write_access_file+0x1af/0x3b0 [ 156.372475][ T6406] ? mnt_put_write_access_file+0xc2/0x100 [ 156.372504][ T6406] ? file_update_time+0x1ef/0x220 [ 156.372535][ T6406] shmem_file_write_iter+0x105/0x130 [ 156.372564][ T6406] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 156.372593][ T6406] __kernel_write_iter+0x392/0x830 [ 156.372615][ T6406] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 156.372645][ T6406] ? __cfi___kernel_write_iter+0x10/0x10 [ 156.372666][ T6406] ? get_dump_page+0x160/0x220 [ 156.372694][ T6406] ? __asan_memset+0x39/0x50 [ 156.372726][ T6406] ? iov_iter_bvec+0xc0/0x180 [ 156.372752][ T6406] dump_user_range+0xb06/0xdf0 [ 156.372775][ T6406] ? __cfi_dump_emit+0x10/0x10 [ 156.372808][ T6406] ? __cfi_dump_user_range+0x10/0x10 [ 156.372830][ T6406] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 156.372863][ T6406] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 156.372898][ T6406] elf_core_dump+0x2cd9/0x3810 [ 156.372928][ T6406] ? __cfi_elf_core_dump+0x10/0x10 [ 156.372962][ T6406] ? dump_interrupted+0xf0/0xf0 [ 156.372995][ T6406] ? filp_open+0x182/0x1d0 [ 156.373025][ T6406] ? 0xffffffffff600000 [ 156.373044][ T6406] do_coredump+0x1bf7/0x2bd0 [ 156.373080][ T6406] ? __cfi_do_coredump+0x10/0x10 [ 156.373124][ T6406] ? asm_exc_general_protection+0x2b/0x30 [ 156.373159][ T6406] ? __kasan_slab_free+0x6a/0x80 [ 156.373183][ T6406] ? kmem_cache_free+0x1c1/0x510 [ 156.373217][ T6406] ? get_signal+0xa75/0x14f0 [ 156.373246][ T6406] get_signal+0x11fd/0x14f0 [ 156.373276][ T6406] arch_do_signal_or_restart+0x96/0x720 [ 156.373312][ T6406] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 156.373347][ T6406] ? fixup_iopl_exception+0xdd/0x2e0 [ 156.373383][ T6406] irqentry_exit_to_user_mode+0x4e/0xb0 [ 156.373411][ T6406] irqentry_exit+0x16/0x60 [ 156.373436][ T6406] exc_general_protection+0x15a/0x1f0 [ 156.373461][ T6406] asm_exc_general_protection+0x2b/0x30 [ 156.373486][ T6406] RIP: 0033:0x7fa6f1b8ebf1 [ 156.373505][ T6406] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 156.373523][ T6406] RSP: 002b:0000200000000120 EFLAGS: 00010217 [ 156.373544][ T6406] RAX: 0000000000000000 RBX: 00007fa6f1dc5fa0 RCX: 00007fa6f1b8ebe9 [ 156.373561][ T6406] RDX: 0000200000000140 RSI: 0000200000000120 RDI: 0000000000000080 [ 156.373577][ T6406] RBP: 00007fa6f1c11e19 R08: 00002000000001c0 R09: 00002000000001c0 [ 156.373593][ T6406] R10: 0000200000000180 R11: 0000000000000202 R12: 0000000000000000 [ 156.373608][ T6406] R13: 00007fa6f1dc6038 R14: 00007fa6f1dc5fa0 R15: 00007fff81cdbb28 [ 156.373627][ T6406] [ 156.373758][ T6406] memory: usage 307200kB, limit 307200kB, failcnt 18426 [ 156.865282][ T7029] rust_binder: 7025 RLIMIT_NICE not set [ 156.865325][ T7029] rust_binder: 34: no such ref 2 [ 156.877899][ T6406] memory+swap: usage 431952kB, limit 9007199254740988kB, failcnt 0 [ 156.893610][ T2575] rust_binder: 7024: removing orphan mapping 0:4248 [ 156.907776][ T6406] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 156.915661][ T6406] Memory cgroup stats for /syz3: [ 156.915826][ T6406] cache 314454016 [ 156.925315][ T6406] rss 118784 [ 156.928698][ T6406] rss_huge 0 [ 156.941193][ T6406] shmem 314449920 [ 156.944913][ T6406] mapped_file 0 [ 156.948773][ T6406] dirty 0 [ 156.952275][ T6406] writeback 0 [ 156.955759][ T6406] workingset_refault_anon 0 [ 156.961199][ T6406] workingset_refault_file 243 [ 156.974124][ T6406] swap 127746048 [ 156.978058][ T6406] swapcached 20480 [ 156.982301][ T6406] pgpgin 184115 [ 156.986270][ T6406] pgpgout 107826 [ 157.007485][ T6406] pgfault 106510 [ 157.011366][ T6406] pgmajfault 15 [ 157.015322][ T6406] inactive_anon 194097152 [ 157.020281][ T6406] active_anon 120471552 [ 157.022553][ T7032] kvm: pic: level sensitive irq not supported [ 157.026876][ T6406] inactive_file 4096 [ 157.037690][ T7032] kvm: pic: non byte read [ 157.042529][ T7032] kvm: pic: level sensitive irq not supported [ 157.042593][ T7032] kvm: pic: non byte read [ 157.053522][ T6406] active_file 0 [ 157.057589][ T7032] kvm: pic: level sensitive irq not supported [ 157.057649][ T7032] kvm: pic: non byte read [ 157.068673][ T6406] unevictable 0 [ 157.074805][ T6406] hierarchical_memory_limit 314572800 [ 157.080351][ T6406] hierarchical_memsw_limit 9223372036854771712 [ 157.086836][ T6406] total_cache 314454016 [ 157.091337][ T6406] total_rss 118784 [ 157.096889][ T6406] total_rss_huge 0 [ 157.100912][ T6406] total_shmem 314449920 [ 157.111910][ T6406] total_mapped_file 0 [ 157.116013][ T6406] total_dirty 0 [ 157.119857][ T6406] total_writeback 0 [ 157.123698][ T6406] total_workingset_refault_anon 0 [ 157.129628][ T6406] total_workingset_refault_file 243 [ 157.160734][ T6406] total_swap 127746048 [ 157.164994][ T6406] total_swapcached 20480 [ 157.169811][ T6406] total_pgpgin 184115 [ 157.177501][ T6406] total_pgpgout 107826 [ 157.182047][ T6406] total_pgfault 106510 [ 157.186548][ T6406] total_pgmajfault 15 [ 157.190893][ T6406] total_inactive_anon 194097152 [ 157.195894][ T6406] total_active_anon 120471552 [ 157.203144][ T6406] total_inactive_file 4096 [ 157.211328][ T7049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2073'. [ 157.225287][ T6406] total_active_file 0 [ 157.227654][ T7049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2073'. [ 157.230798][ T6406] total_unevictable 0 [ 157.245685][ T6406] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.36,pid=453,uid=0 [ 157.261781][ T6406] Memory cgroup out of memory: Killed process 453 (syz.3.36) total-vm:93880kB, anon-rss:1048kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 157.302512][ T6406] syz.3.1982 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 157.322703][ T6406] CPU: 0 UID: 0 PID: 6406 Comm: syz.3.1982 Not tainted syzkaller #0 6e508aa732f414f9d300b832ff15c50b3cf7cfdc [ 157.322751][ T6406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 157.322764][ T6406] Call Trace: [ 157.322772][ T6406] [ 157.322780][ T6406] __dump_stack+0x21/0x30 [ 157.322819][ T6406] dump_stack_lvl+0x10c/0x190 [ 157.322854][ T6406] ? __cfi_dump_stack_lvl+0x10/0x10 [ 157.322884][ T6406] ? ___ratelimit+0x3f7/0x5a0 [ 157.322906][ T6406] dump_stack+0x19/0x20 [ 157.322934][ T6406] dump_header+0xd7/0x490 [ 157.322956][ T6406] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 157.322984][ T6406] oom_kill_process+0x4c0/0x7e0 [ 157.323009][ T6406] ? sched_clock_cpu+0x75/0x400 [ 157.323040][ T6406] out_of_memory+0x7ee/0xbd0 [ 157.323064][ T6406] ? __cfi_out_of_memory+0x10/0x10 [ 157.323088][ T6406] ? mutex_lock_killable+0x104/0x1c0 [ 157.323112][ T6406] ? __cfi_mutex_lock_killable+0x10/0x10 [ 157.323138][ T6406] mem_cgroup_out_of_memory+0x279/0x350 [ 157.323160][ T6406] ? drain_obj_stock+0xed0/0xed0 [ 157.323181][ T6406] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 157.323203][ T6406] try_charge_memcg+0x8f7/0xde0 [ 157.323234][ T6406] ? __cfi_try_charge_memcg+0x10/0x10 [ 157.323262][ T6406] ? __alloc_pages_noprof+0x31f/0x7b0 [ 157.323291][ T6406] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 157.323317][ T6406] ? __folio_batch_add_and_move+0x2ab/0x370 [ 157.323346][ T6406] __mem_cgroup_charge+0xf6/0x410 [ 157.323377][ T6406] ? _raw_spin_lock+0x8c/0x120 [ 157.323406][ T6406] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 157.323439][ T6406] shmem_alloc_and_add_folio+0x86d/0x1050 [ 157.323465][ T6406] ? put_swap_device+0x130/0x130 [ 157.323489][ T6406] ? shmem_huge_global_enabled+0x2da/0x360 [ 157.323512][ T6406] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 157.323536][ T6406] ? __kasan_check_write+0x18/0x20 [ 157.323568][ T6406] ? _raw_spin_lock+0x8c/0x120 [ 157.323599][ T6406] shmem_get_folio_gfp+0x5f0/0x1380 [ 157.323627][ T6406] ? shmem_get_folio+0xc0/0xc0 [ 157.323647][ T6406] ? follow_page_pte+0xa5c/0xb90 [ 157.323676][ T6406] ? inode_to_bdi+0x6d/0x100 [ 157.323705][ T6406] shmem_write_begin+0xf4/0x270 [ 157.323738][ T6406] generic_perform_write+0x32d/0x960 [ 157.323771][ T6406] ? __cfi_generic_perform_write+0x10/0x10 [ 157.323802][ T6406] ? down_write+0xe9/0x2a0 [ 157.323828][ T6406] ? file_update_time+0xa3/0x220 [ 157.323858][ T6406] shmem_file_write_iter+0x105/0x130 [ 157.323885][ T6406] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 157.323911][ T6406] __kernel_write_iter+0x392/0x830 [ 157.323932][ T6406] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 157.323959][ T6406] ? __cfi___kernel_write_iter+0x10/0x10 [ 157.323979][ T6406] ? get_dump_page+0x160/0x220 [ 157.324007][ T6406] ? __asan_memset+0x39/0x50 [ 157.324036][ T6406] ? iov_iter_bvec+0xc0/0x180 [ 157.324072][ T6406] dump_user_range+0xb06/0xdf0 [ 157.324094][ T6406] ? __cfi_dump_emit+0x10/0x10 [ 157.324126][ T6406] ? __cfi_dump_user_range+0x10/0x10 [ 157.324148][ T6406] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 157.324180][ T6406] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 157.324214][ T6406] elf_core_dump+0x2cd9/0x3810 [ 157.324244][ T6406] ? __cfi_elf_core_dump+0x10/0x10 [ 157.324278][ T6406] ? dump_interrupted+0xf0/0xf0 [ 157.324310][ T6406] ? filp_open+0x182/0x1d0 [ 157.324339][ T6406] ? 0xffffffffff600000 [ 157.324358][ T6406] do_coredump+0x1bf7/0x2bd0 [ 157.324396][ T6406] ? __cfi_do_coredump+0x10/0x10 [ 157.324426][ T6406] ? asm_exc_general_protection+0x2b/0x30 [ 157.324458][ T6406] ? __kasan_slab_free+0x6a/0x80 [ 157.324479][ T6406] ? kmem_cache_free+0x1c1/0x510 [ 157.324512][ T6406] ? get_signal+0xa75/0x14f0 [ 157.324539][ T6406] get_signal+0x11fd/0x14f0 [ 157.324569][ T6406] arch_do_signal_or_restart+0x96/0x720 [ 157.324601][ T6406] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 157.324634][ T6406] ? fixup_iopl_exception+0xdd/0x2e0 [ 157.324670][ T6406] irqentry_exit_to_user_mode+0x4e/0xb0 [ 157.324695][ T6406] irqentry_exit+0x16/0x60 [ 157.324827][ T6406] exc_general_protection+0x15a/0x1f0 [ 157.324867][ T6406] asm_exc_general_protection+0x2b/0x30 [ 157.324892][ T6406] RIP: 0033:0x7fa6f1b8ebf1 [ 157.324911][ T6406] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 157.324933][ T6406] RSP: 002b:0000200000000120 EFLAGS: 00010217 [ 157.324953][ T6406] RAX: 0000000000000000 RBX: 00007fa6f1dc5fa0 RCX: 00007fa6f1b8ebe9 [ 157.324969][ T6406] RDX: 0000200000000140 RSI: 0000200000000120 RDI: 0000000000000080 [ 157.324984][ T6406] RBP: 00007fa6f1c11e19 R08: 00002000000001c0 R09: 00002000000001c0 [ 157.325000][ T6406] R10: 0000200000000180 R11: 0000000000000202 R12: 0000000000000000 [ 157.325014][ T6406] R13: 00007fa6f1dc6038 R14: 00007fa6f1dc5fa0 R15: 00007fff81cdbb28 [ 157.325032][ T6406] [ 157.325105][ T6406] memory: usage 307200kB, limit 307200kB, failcnt 18578 [ 157.809620][ T6406] memory+swap: usage 432032kB, limit 9007199254740988kB, failcnt 0 [ 157.818322][ T6406] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 157.825520][ T6406] Memory cgroup stats for /syz3: [ 157.825659][ T6406] cache 314466304 [ 157.834685][ T6406] rss 106496 [ 157.838210][ T6406] rss_huge 0 [ 157.841588][ T6406] shmem 314462208 [ 157.845226][ T6406] mapped_file 0 [ 157.849035][ T6406] dirty 0 [ 157.851994][ T6406] writeback 0 [ 157.855472][ T6406] workingset_refault_anon 0 [ 157.860185][ T6406] workingset_refault_file 243 [ 157.865229][ T6406] swap 127827968 [ 157.868830][ T6406] swapcached 8192 [ 157.872483][ T6406] pgpgin 184182 [ 157.882151][ T6406] pgpgout 107893 [ 157.885838][ T6406] pgfault 106514 [ 157.889444][ T6406] pgmajfault 15 [ 157.890981][ T7066] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 157.893072][ T6406] inactive_anon 120745984 [ 157.893080][ T7066] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:44 [ 157.907301][ T6406] active_anon 193822720 [ 157.920824][ T6406] inactive_file 0 [ 157.927293][ T6406] active_file 4096 [ 157.934239][ T6406] unevictable 0 [ 157.937545][ T583] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 157.938045][ T6406] hierarchical_memory_limit 314572800 [ 157.950895][ T6406] hierarchical_memsw_limit 9223372036854771712 [ 157.957917][ T6406] total_cache 314466304 [ 157.962304][ T6406] total_rss 106496 [ 157.966161][ T6406] total_rss_huge 0 [ 157.970212][ T6406] total_shmem 314462208 [ 157.974656][ T6406] total_mapped_file 0 [ 157.979092][ T6406] total_dirty 0 [ 157.982680][ T6406] total_writeback 0 [ 157.986699][ T6406] total_workingset_refault_anon 0 [ 157.992262][ T6406] total_workingset_refault_file 243 [ 157.997804][ T6406] total_swap 127827968 [ 158.002079][ T6406] total_swapcached 8192 [ 158.006681][ T6406] total_pgpgin 184182 [ 158.011409][ T6406] total_pgpgout 107893 [ 158.015799][ T6406] total_pgfault 106514 [ 158.020291][ T6406] total_pgmajfault 15 [ 158.024481][ T6406] total_inactive_anon 120745984 [ 158.029807][ T6406] total_active_anon 193822720 [ 158.034590][ T6406] total_inactive_file 0 [ 158.038909][ T6406] total_active_file 4096 [ 158.043181][ T6406] total_unevictable 0 [ 158.047293][ T6406] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1612,pid=5296,uid=0 [ 158.062424][ T6406] Memory cgroup out of memory: Killed process 5296 (syz.3.1612) total-vm:90036kB, anon-rss:1024kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 158.087351][ T6366] syz.3.1982 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 158.102524][ T6366] CPU: 0 UID: 0 PID: 6366 Comm: syz.3.1982 Not tainted syzkaller #0 6e508aa732f414f9d300b832ff15c50b3cf7cfdc [ 158.102560][ T6366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 158.102574][ T6366] Call Trace: [ 158.102582][ T6366] [ 158.102590][ T6366] __dump_stack+0x21/0x30 [ 158.102625][ T6366] dump_stack_lvl+0x10c/0x190 [ 158.102653][ T6366] ? __cfi_dump_stack_lvl+0x10/0x10 [ 158.102684][ T6366] ? ___ratelimit+0x3f7/0x5a0 [ 158.102707][ T6366] dump_stack+0x19/0x20 [ 158.102736][ T6366] dump_header+0xd7/0x490 [ 158.102756][ T6366] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 158.102785][ T6366] oom_kill_process+0x4c0/0x7e0 [ 158.102810][ T6366] ? sched_clock_cpu+0x75/0x400 [ 158.102841][ T6366] out_of_memory+0x7ee/0xbd0 [ 158.102865][ T6366] ? __cfi_out_of_memory+0x10/0x10 [ 158.102891][ T6366] ? mutex_lock_killable+0x104/0x1c0 [ 158.102914][ T6366] ? __cfi_mutex_lock_killable+0x10/0x10 [ 158.102941][ T6366] mem_cgroup_out_of_memory+0x279/0x350 [ 158.102962][ T6366] ? drain_obj_stock+0xed0/0xed0 [ 158.102988][ T6366] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 158.103007][ T6366] try_charge_memcg+0x8f7/0xde0 [ 158.103031][ T6366] ? gfp_to_alloc_flags_cma+0x90/0x1c0 [ 158.103061][ T6366] ? __cfi_try_charge_memcg+0x10/0x10 [ 158.103087][ T6366] ? __alloc_pages_noprof+0x31f/0x7b0 [ 158.103112][ T6366] __mem_cgroup_charge+0xf6/0x410 [ 158.103145][ T6366] ? filemap_get_entry+0x3fb/0x460 [ 158.103168][ T6366] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 158.103196][ T6366] filemap_add_folio+0x57/0x2d0 [ 158.103217][ T6366] __filemap_get_folio+0x597/0x9d0 [ 158.103242][ T6366] ? __cfi___filemap_get_folio+0x10/0x10 [ 158.103265][ T6366] ? mm_trace_rss_stat+0x20/0x130 [ 158.103291][ T6366] ? filemap_fault_recheck_pte_none+0x78/0x250 [ 158.103317][ T6366] filemap_fault+0xb41/0x16b0 [ 158.103342][ T6366] ? __cfi_filemap_fault+0x10/0x10 [ 158.103366][ T6366] ? __cfi_filemap_map_pages+0x10/0x10 [ 158.103403][ T6366] ? __cfi_lru_add+0x10/0x10 [ 158.103424][ T6366] ? folio_rotate_reclaimable+0x130/0x130 [ 158.103447][ T6366] do_pte_missing+0x298f/0x4240 [ 158.103470][ T6366] ? shmem_alloc_and_add_folio+0xcf6/0x1050 [ 158.103493][ T6366] ? pte_marker_clear+0x1b0/0x1b0 [ 158.103515][ T6366] ? put_swap_device+0x130/0x130 [ 158.103535][ T6366] ? __pte_offset_map+0x1b0/0x230 [ 158.103561][ T6366] ? pte_offset_map_rw_nolock+0xba/0x110 [ 158.103588][ T6366] handle_mm_fault+0x1166/0x1b90 [ 158.103606][ T6366] ? __kasan_check_write+0x18/0x20 [ 158.103637][ T6366] ? __cfi_handle_mm_fault+0x10/0x10 [ 158.103656][ T6366] ? follow_page_pte+0x2bd/0xb90 [ 158.103680][ T6366] ? gup_must_unshare+0x1e0/0x1e0 [ 158.103703][ T6366] ? vma_is_secretmem+0x11/0x50 [ 158.103731][ T6366] __get_user_pages+0x1169/0x22d0 [ 158.103754][ T6366] ? __kasan_check_write+0x18/0x20 [ 158.103784][ T6366] ? populate_vma_page_range+0x230/0x230 [ 158.103808][ T6366] ? __kernel_write_iter+0x65e/0x830 [ 158.103826][ T6366] get_dump_page+0x107/0x220 [ 158.103848][ T6366] ? __cfi_get_dump_page+0x10/0x10 [ 158.103870][ T6366] ? __asan_memset+0x39/0x50 [ 158.103897][ T6366] dump_user_range+0x181/0xdf0 [ 158.103916][ T6366] ? __cfi_dump_emit+0x10/0x10 [ 158.103945][ T6366] ? __cfi_dump_user_range+0x10/0x10 [ 158.103963][ T6366] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 158.103997][ T6366] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 158.104053][ T6366] elf_core_dump+0x2cd9/0x3810 [ 158.104079][ T6366] ? __cfi_elf_core_dump+0x10/0x10 [ 158.104107][ T6366] ? dump_interrupted+0xf0/0xf0 [ 158.104134][ T6366] ? filp_open+0x182/0x1d0 [ 158.104158][ T6366] ? 0xffffffffff600000 [ 158.104173][ T6366] do_coredump+0x1bf7/0x2bd0 [ 158.104204][ T6366] ? __cfi_do_coredump+0x10/0x10 [ 158.104231][ T6366] ? asm_exc_general_protection+0x2b/0x30 [ 158.104260][ T6366] ? __kasan_slab_free+0x6a/0x80 [ 158.104279][ T6366] ? kmem_cache_free+0x1c1/0x510 [ 158.104307][ T6366] ? get_signal+0xa75/0x14f0 [ 158.104331][ T6366] get_signal+0x11fd/0x14f0 [ 158.104356][ T6366] arch_do_signal_or_restart+0x96/0x720 [ 158.104386][ T6366] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 158.104415][ T6366] ? fixup_iopl_exception+0xdd/0x2e0 [ 158.104444][ T6366] irqentry_exit_to_user_mode+0x4e/0xb0 [ 158.104467][ T6366] irqentry_exit+0x16/0x60 [ 158.104488][ T6366] exc_general_protection+0x15a/0x1f0 [ 158.104505][ T6366] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 158.104530][ T6366] asm_exc_general_protection+0x2b/0x30 [ 158.104549][ T6366] RIP: 0033:0x7fa6f1b8ebf1 [ 158.104564][ T6366] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 158.104581][ T6366] RSP: 002b:0000200000000120 EFLAGS: 00010217 [ 158.104599][ T6366] RAX: 0000000000000000 RBX: 00007fa6f1dc5fa0 RCX: 00007fa6f1b8ebe9 [ 158.104613][ T6366] RDX: 0000200000000140 RSI: 0000200000000120 RDI: 0000000000000080 [ 158.104626][ T6366] RBP: 00007fa6f1c11e19 R08: 00002000000001c0 R09: 00002000000001c0 [ 158.104639][ T6366] R10: 0000200000000180 R11: 0000000000000202 R12: 0000000000000000 [ 158.104652][ T6366] R13: 00007fa6f1dc6038 R14: 00007fa6f1dc5fa0 R15: 00007fff81cdbb28 [ 158.104668][ T6366] [ 158.104675][ T6366] memory: usage 307200kB, limit 307200kB, failcnt 18646 [ 158.177568][ T330] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 158.181869][ T583] usb 2-1: Using ep0 maxpacket: 32 [ 158.187244][ T6366] memory+swap: usage 431948kB, limit 9007199254740988kB, failcnt 0 [ 158.193723][ T583] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 158.198474][ T6366] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 158.203954][ T583] usb 2-1: config 0 has no interface number 0 [ 158.210567][ T6366] Memory cgroup stats for [ 158.220412][ T583] usb 2-1: config 0 interface 184 has no altsetting 0 [ 158.225883][ T6366] /syz3: [ 158.678313][ T6366] cache 314466304 [ 158.679137][ T583] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 158.681254][ T6366] rss 106496 [ 158.681265][ T6366] rss_huge 0 [ 158.684923][ T583] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.694745][ T6366] shmem 314462208 [ 158.697676][ T583] usb 2-1: Product: syz [ 158.701390][ T6366] mapped_file 0 [ 158.709178][ T583] usb 2-1: Manufacturer: syz [ 158.713221][ T6366] dirty 0 [ 158.717177][ T583] usb 2-1: SerialNumber: syz [ 158.720973][ T6366] writeback 0 [ 158.733584][ T583] usb 2-1: config 0 descriptor?? [ 158.736910][ T6366] workingset_refault_anon 0 [ 158.743320][ T583] smsc75xx v1.0.0 [ 158.746496][ T6366] workingset_refault_file 243 [ 158.755089][ T6366] swap 127741952 [ 158.758861][ T6366] swapcached 8192 [ 158.762560][ T6366] pgpgin 184182 [ 158.766045][ T6366] pgpgout 107893 [ 158.769726][ T6366] pgfault 106514 [ 158.773424][ T6366] pgmajfault 15 [ 158.777079][ T6366] inactive_anon 193822720 [ 158.778244][ T330] usb 1-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 158.781541][ T6366] active_anon 120745984 [ 158.794937][ T6366] inactive_file 0 [ 158.799022][ T6366] active_file 4096 [ 158.803090][ T6366] unevictable 0 [ 158.804497][ T330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.810001][ T6366] hierarchical_memory_limit 314572800 [ 158.820482][ T6366] hierarchical_memsw_limit 9223372036854771712 [ 158.820954][ T330] usb 1-1: config 0 descriptor?? [ 158.830728][ T6366] total_cache 314466304 [ 158.836343][ T6366] total_rss 106496 [ 158.842778][ T6366] total_rss_huge 0 [ 158.847215][ T6366] total_shmem 314462208 [ 158.852457][ T6366] total_mapped_file 0 [ 158.857657][ T6366] total_dirty 0 [ 158.861496][ T6366] total_writeback 0 [ 158.865562][ T6366] total_workingset_refault_anon 0 [ 158.870805][ T6366] total_workingset_refault_file 243 [ 158.876574][ T6366] total_swap 127741952 [ 158.880923][ T6366] total_swapcached 8192 [ 158.885150][ T6366] total_pgpgin 184182 [ 158.889334][ T6366] total_pgpgout 107893 [ 158.893501][ T6366] total_pgfault 106514 [ 158.897671][ T6366] total_pgmajfault 15 [ 158.901797][ T6366] total_inactive_anon 193822720 [ 158.906950][ T6366] total_active_anon 120745984 [ 158.912108][ T6366] total_inactive_file 0 [ 158.916354][ T6366] total_active_file 4096 [ 158.920910][ T6366] total_unevictable 0 [ 158.925063][ T6366] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1184,pid=4005,uid=0 [ 158.940822][ T6366] Memory cgroup out of memory: Killed process 4005 (syz.3.1184) total-vm:89916kB, anon-rss:1020kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 158.969090][ T6392] syz.3.1982 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 158.982398][ T6392] CPU: 0 UID: 0 PID: 6392 Comm: syz.3.1982 Not tainted syzkaller #0 6e508aa732f414f9d300b832ff15c50b3cf7cfdc [ 158.982444][ T6392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 158.982460][ T6392] Call Trace: [ 158.982468][ T6392] [ 158.982477][ T6392] __dump_stack+0x21/0x30 [ 158.982515][ T6392] dump_stack_lvl+0x10c/0x190 [ 158.982545][ T6392] ? __cfi_dump_stack_lvl+0x10/0x10 [ 158.982575][ T6392] ? ___ratelimit+0x3f7/0x5a0 [ 158.982598][ T6392] dump_stack+0x19/0x20 [ 158.982625][ T6392] dump_header+0xd7/0x490 [ 158.982647][ T6392] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 158.982676][ T6392] oom_kill_process+0x4c0/0x7e0 [ 158.982703][ T6392] ? sched_clock_cpu+0x75/0x400 [ 158.982735][ T6392] out_of_memory+0x7ee/0xbd0 [ 158.982762][ T6392] ? __cfi_out_of_memory+0x10/0x10 [ 158.982786][ T6392] ? mutex_lock_killable+0x104/0x1c0 [ 158.982811][ T6392] ? __cfi_mutex_lock_killable+0x10/0x10 [ 158.982838][ T6392] mem_cgroup_out_of_memory+0x279/0x350 [ 158.982860][ T6392] ? drain_obj_stock+0xed0/0xed0 [ 158.982883][ T6392] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 158.982905][ T6392] try_charge_memcg+0x8f7/0xde0 [ 158.982935][ T6392] ? __cfi_try_charge_memcg+0x10/0x10 [ 158.982966][ T6392] ? __alloc_pages_noprof+0x31f/0x7b0 [ 158.983019][ T6392] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 158.983047][ T6392] ? __folio_batch_add_and_move+0x2ab/0x370 [ 158.983074][ T6392] __mem_cgroup_charge+0xf6/0x410 [ 158.983106][ T6392] ? _raw_spin_lock+0x8c/0x120 [ 158.983135][ T6392] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 158.983169][ T6392] shmem_alloc_and_add_folio+0x86d/0x1050 [ 158.983197][ T6392] ? put_swap_device+0x130/0x130 [ 158.983222][ T6392] ? shmem_huge_global_enabled+0x2da/0x360 [ 158.983245][ T6392] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 158.983267][ T6392] ? __kasan_check_write+0x18/0x20 [ 158.983299][ T6392] ? _raw_spin_lock+0x8c/0x120 [ 158.983329][ T6392] shmem_get_folio_gfp+0x5f0/0x1380 [ 158.983355][ T6392] ? shmem_get_folio+0xc0/0xc0 [ 158.983376][ T6392] ? follow_page_pte+0xa5c/0xb90 [ 158.983405][ T6392] ? inode_to_bdi+0x6d/0x100 [ 158.983435][ T6392] shmem_write_begin+0xf4/0x270 [ 158.983460][ T6392] generic_perform_write+0x32d/0x960 [ 158.983495][ T6392] ? __cfi_generic_perform_write+0x10/0x10 [ 158.983525][ T6392] ? down_write+0xe9/0x2a0 [ 158.983551][ T6392] ? file_update_time+0xa3/0x220 [ 158.983580][ T6392] shmem_file_write_iter+0x105/0x130 [ 158.983609][ T6392] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 158.983637][ T6392] __kernel_write_iter+0x392/0x830 [ 158.983659][ T6392] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 158.983688][ T6392] ? __cfi___kernel_write_iter+0x10/0x10 [ 158.983708][ T6392] ? get_dump_page+0x160/0x220 [ 158.983734][ T6392] ? __asan_memset+0x39/0x50 [ 158.983762][ T6392] ? iov_iter_bvec+0xc0/0x180 [ 158.983788][ T6392] dump_user_range+0xb06/0xdf0 [ 158.983810][ T6392] ? __cfi_dump_emit+0x10/0x10 [ 158.983842][ T6392] ? __cfi_dump_user_range+0x10/0x10 [ 158.983863][ T6392] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 158.983897][ T6392] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 158.983930][ T6392] elf_core_dump+0x2cd9/0x3810 [ 158.983959][ T6392] ? __cfi_elf_core_dump+0x10/0x10 [ 158.983998][ T6392] ? dump_interrupted+0xf0/0xf0 [ 158.984030][ T6392] ? filp_open+0x182/0x1d0 [ 158.984058][ T6392] ? 0xffffffffff600000 [ 158.984077][ T6392] do_coredump+0x1bf7/0x2bd0 [ 158.984112][ T6392] ? __cfi_do_coredump+0x10/0x10 [ 158.984143][ T6392] ? asm_exc_general_protection+0x2b/0x30 [ 158.984177][ T6392] ? __kasan_slab_free+0x6a/0x80 [ 158.984201][ T6392] ? kmem_cache_free+0x1c1/0x510 [ 158.984234][ T6392] ? get_signal+0xa75/0x14f0 [ 158.984262][ T6392] get_signal+0x11fd/0x14f0 [ 158.984293][ T6392] arch_do_signal_or_restart+0x96/0x720 [ 158.984327][ T6392] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 158.984361][ T6392] ? fixup_iopl_exception+0xdd/0x2e0 [ 158.984395][ T6392] irqentry_exit_to_user_mode+0x4e/0xb0 [ 158.984421][ T6392] irqentry_exit+0x16/0x60 [ 158.984448][ T6392] exc_general_protection+0x15a/0x1f0 [ 158.984468][ T6392] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 158.984496][ T6392] asm_exc_general_protection+0x2b/0x30 [ 158.984521][ T6392] RIP: 0033:0x7fa6f1b8ebf1 [ 158.984539][ T6392] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 158.984558][ T6392] RSP: 002b:0000200000000120 EFLAGS: 00010217 [ 158.984580][ T6392] RAX: 0000000000000000 RBX: 00007fa6f1dc5fa0 RCX: 00007fa6f1b8ebe9 [ 158.984597][ T6392] RDX: 0000200000000140 RSI: 0000200000000120 RDI: 0000000000000080 [ 158.984612][ T6392] RBP: 00007fa6f1c11e19 R08: 00002000000001c0 R09: 00002000000001c0 [ 158.984628][ T6392] R10: 0000200000000180 R11: 0000000000000202 R12: 0000000000000000 [ 158.984642][ T6392] R13: 00007fa6f1dc6038 R14: 00007fa6f1dc5fa0 R15: 00007fff81cdbb28 [ 158.984662][ T6392] [ 158.984688][ T6392] memory: usage 307200kB, limit 307200kB, failcnt 18861 [ 159.098812][ T7080] rust_binder: Failed to allocate buffer. len:1136, is_oneway:true [ 159.105569][ T6392] memory+swap: usage 432096kB, limit 9007199254740988kB, failcnt 0 [ 159.490050][ T6392] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 159.490737][ T583] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 159.500996][ T330] usb 1-1: string descriptor 0 read error: -71 [ 159.513533][ T583] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 159.517226][ T6392] Memory cgroup stats for /syz3: [ 159.526094][ T6392] cache 314466304 [ 159.536204][ T330] usbhid 1-1:0.0: can't add hid device: -71 [ 159.537717][ T6392] rss 106496 [ 159.545663][ T6392] rss_huge 0 [ 159.548192][ T330] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 159.549050][ T6392] shmem 314458112 [ 159.560654][ T6392] mapped_file 0 [ 159.564172][ T6392] dirty 0 [ 159.567424][ T6392] writeback 0 [ 159.573373][ T6392] workingset_refault_anon 0 [ 159.575676][ T330] usb 1-1: USB disconnect, device number 4 [ 159.579294][ T6392] workingset_refault_file 322 [ 159.589147][ T6392] swap 127893504 [ 159.589540][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 159.589561][ T36] audit: type=1400 audit(7027749187.794:28933): avc: denied { mounton } for pid=7092 comm="syz.2.2089" path="/398/file0" dev="tmpfs" ino=2175 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 159.592863][ T6392] swapcached 8192 [ 159.608459][ T7093] netlink: 'syz.2.2089': attribute type 4 has an invalid length. [ 159.622062][ T6392] pgpgin 184324 [ 159.622084][ T6392] pgpgout 108035 [ 159.622092][ T6392] pgfault 106522 [ 159.626949][ T7093] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.2089'. [ 159.633692][ T6392] pgmajfault 17 [ 159.657938][ T6392] inactive_anon 120918016 [ 159.662517][ T6392] active_anon 193646592 [ 159.666795][ T6392] inactive_file 8192 [ 159.670890][ T6392] active_file 0 [ 159.674475][ T6392] unevictable 0 [ 159.678266][ T6392] hierarchical_memory_limit 314572800 [ 159.683708][ T6392] hierarchical_memsw_limit 9223372036854771712 [ 159.690362][ T6392] total_cache 314466304 [ 159.694850][ T6392] total_rss 106496 [ 159.699455][ T6392] total_rss_huge 0 [ 159.703643][ T6392] total_shmem 314458112 [ 159.708953][ T6392] total_mapped_file 0 [ 159.713113][ T6392] total_dirty 0 [ 159.716708][ T6392] total_writeback 0 [ 159.721435][ T6392] total_workingset_refault_anon 0 [ 159.727145][ T6392] total_workingset_refault_file 322 [ 159.733956][ T6392] total_swap 127893504 [ 159.738529][ T6392] total_swapcached 8192 [ 159.742793][ T6392] total_pgpgin 184324 [ 159.746953][ T6392] total_pgpgout 108035 [ 159.748699][ T7103] overlayfs: failed to clone upperpath [ 159.751347][ T6392] total_pgfault 106522 [ 159.760786][ T6392] total_pgmajfault 17 [ 159.765023][ T6392] total_inactive_anon 120918016 [ 159.770840][ T6392] total_active_anon 193646592 [ 159.775705][ T6392] total_inactive_file 8192 [ 159.780496][ T6392] total_active_file 0 [ 159.785038][ T6392] total_unevictable 0 [ 159.789507][ T6392] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.497,pid=1963,uid=0 [ 159.804785][ T6392] Memory cgroup out of memory: Killed process 1963 (syz.3.497) total-vm:93744kB, anon-rss:1164kB, file-rss:20480kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 159.857713][ T6384] syz.3.1982 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 159.875113][ T6384] CPU: 1 UID: 0 PID: 6384 Comm: syz.3.1982 Not tainted syzkaller #0 6e508aa732f414f9d300b832ff15c50b3cf7cfdc [ 159.875155][ T6384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 159.875169][ T6384] Call Trace: [ 159.875176][ T6384] [ 159.875185][ T6384] __dump_stack+0x21/0x30 [ 159.875223][ T6384] dump_stack_lvl+0x10c/0x190 [ 159.875252][ T6384] ? __cfi_dump_stack_lvl+0x10/0x10 [ 159.875279][ T6384] ? ___ratelimit+0x3f7/0x5a0 [ 159.875302][ T6384] dump_stack+0x19/0x20 [ 159.875328][ T6384] dump_header+0xd7/0x490 [ 159.875349][ T6384] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 159.875381][ T6384] oom_kill_process+0x4c0/0x7e0 [ 159.875405][ T6384] ? sched_clock_cpu+0x75/0x400 [ 159.875436][ T6384] out_of_memory+0x7ee/0xbd0 [ 159.875460][ T6384] ? __cfi_out_of_memory+0x10/0x10 [ 159.875483][ T6384] ? mutex_lock_killable+0x104/0x1c0 [ 159.875508][ T6384] ? __cfi_mutex_lock_killable+0x10/0x10 [ 159.875533][ T6384] mem_cgroup_out_of_memory+0x279/0x350 [ 159.875554][ T6384] ? drain_obj_stock+0xed0/0xed0 [ 159.875576][ T6384] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 159.875597][ T6384] try_charge_memcg+0x8f7/0xde0 [ 159.875635][ T6384] ? __cfi_try_charge_memcg+0x10/0x10 [ 159.875665][ T6384] ? __alloc_pages_noprof+0x31f/0x7b0 [ 159.875694][ T6384] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 159.875722][ T6384] ? __folio_batch_add_and_move+0x2ab/0x370 [ 159.875750][ T6384] __mem_cgroup_charge+0xf6/0x410 [ 159.875782][ T6384] ? _raw_spin_lock+0x8c/0x120 [ 159.875809][ T6384] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 159.875844][ T6384] shmem_alloc_and_add_folio+0x86d/0x1050 [ 159.875872][ T6384] ? put_swap_device+0x130/0x130 [ 159.875896][ T6384] ? shmem_huge_global_enabled+0x2da/0x360 [ 159.875920][ T6384] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 159.875942][ T6384] ? __kasan_check_write+0x18/0x20 [ 159.875973][ T6384] ? _raw_spin_lock+0x8c/0x120 [ 159.876001][ T6384] shmem_get_folio_gfp+0x5f0/0x1380 [ 159.876025][ T6384] ? shmem_get_folio+0xc0/0xc0 [ 159.876046][ T6384] ? follow_page_pte+0xa5c/0xb90 [ 159.876071][ T6384] ? inode_to_bdi+0x6d/0x100 [ 159.876097][ T6384] shmem_write_begin+0xf4/0x270 [ 159.876120][ T6384] generic_perform_write+0x32d/0x960 [ 159.876152][ T6384] ? __cfi_generic_perform_write+0x10/0x10 [ 159.876181][ T6384] ? down_write+0xe9/0x2a0 [ 159.876207][ T6384] ? file_update_time+0xa3/0x220 [ 159.876235][ T6384] shmem_file_write_iter+0x105/0x130 [ 159.876263][ T6384] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 159.876289][ T6384] __kernel_write_iter+0x392/0x830 [ 159.876309][ T6384] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 159.876337][ T6384] ? __cfi___kernel_write_iter+0x10/0x10 [ 159.876357][ T6384] ? get_dump_page+0x160/0x220 [ 159.876383][ T6384] ? __asan_memset+0x39/0x50 [ 159.876412][ T6384] ? iov_iter_bvec+0xc0/0x180 [ 159.876436][ T6384] dump_user_range+0xb06/0xdf0 [ 159.876457][ T6384] ? __cfi_dump_emit+0x10/0x10 [ 159.876491][ T6384] ? __cfi_dump_user_range+0x10/0x10 [ 159.876512][ T6384] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 159.876546][ T6384] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 159.876579][ T6384] elf_core_dump+0x2cd9/0x3810 [ 159.876608][ T6384] ? __cfi_elf_core_dump+0x10/0x10 [ 159.876647][ T6384] ? dump_interrupted+0xf0/0xf0 [ 159.876679][ T6384] ? filp_open+0x182/0x1d0 [ 159.876706][ T6384] ? 0xffffffffff600000 [ 159.876732][ T6384] do_coredump+0x1bf7/0x2bd0 [ 159.876767][ T6384] ? __cfi_do_coredump+0x10/0x10 [ 159.876797][ T6384] ? asm_exc_general_protection+0x2b/0x30 [ 159.876831][ T6384] ? __kasan_slab_free+0x6a/0x80 [ 159.876854][ T6384] ? kmem_cache_free+0x1c1/0x510 [ 159.876887][ T6384] ? get_signal+0xa75/0x14f0 [ 159.876916][ T6384] get_signal+0x11fd/0x14f0 [ 159.876954][ T6384] arch_do_signal_or_restart+0x96/0x720 [ 159.876989][ T6384] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 159.877023][ T6384] ? fixup_iopl_exception+0xdd/0x2e0 [ 159.877056][ T6384] irqentry_exit_to_user_mode+0x4e/0xb0 [ 159.877084][ T6384] irqentry_exit+0x16/0x60 [ 159.877105][ T6384] exc_general_protection+0x15a/0x1f0 [ 159.877123][ T6384] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 159.877153][ T6384] asm_exc_general_protection+0x2b/0x30 [ 159.877174][ T6384] RIP: 0033:0x7fa6f1b8ebf1 [ 159.877194][ T6384] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 159.877212][ T6384] RSP: 002b:0000200000000120 EFLAGS: 00010217 [ 159.877232][ T6384] RAX: 0000000000000000 RBX: 00007fa6f1dc5fa0 RCX: 00007fa6f1b8ebe9 [ 159.877245][ T6384] RDX: 0000200000000140 RSI: 0000200000000120 RDI: 0000000000000080 [ 159.877259][ T6384] RBP: 00007fa6f1c11e19 R08: 00002000000001c0 R09: 00002000000001c0 [ 159.877273][ T6384] R10: 0000200000000180 R11: 0000000000000202 R12: 0000000000000000 [ 159.877287][ T6384] R13: 00007fa6f1dc6038 R14: 00007fa6f1dc5fa0 R15: 00007fff81cdbb28 [ 159.877304][ T6384] [ 159.878951][ T6384] memory: usage 307200kB, limit 307200kB, failcnt 19117 [ 159.893476][ T7116] netlink: 'syz.2.2097': attribute type 4 has an invalid length. [ 159.904867][ T6384] memory+swap: usage 432188kB, limit 9007199254740988kB, failcnt 0 [ 160.073384][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 160.075126][ T583] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 160.080639][ T6384] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 160.084848][ T583] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 160.104310][ T6384] Memory cgroup stats for [ 160.105687][ T583] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 160.117528][ T6384] /syz3 [ 160.122011][ T583] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 160.200807][ T6384] : [ 160.200978][ T6384] cache 314466304 [ 160.213808][ T583] usb 2-1: USB disconnect, device number 9 [ 160.228914][ T6384] rss 106496 [ 160.457087][ T6384] rss_huge 0 [ 160.460468][ T6384] shmem 314458112 [ 160.464135][ T6384] mapped_file 0 [ 160.467746][ T6384] dirty 0 [ 160.470771][ T6384] writeback 0 [ 160.474129][ T6384] workingset_refault_anon 0 [ 160.478711][ T6384] workingset_refault_file 322 [ 160.483415][ T6384] swap 127987712 [ 160.487497][ T6384] swapcached 8192 [ 160.491161][ T6384] pgpgin 184392 [ 160.494734][ T6384] pgpgout 108103 [ 160.504022][ T6384] pgfault 106526 [ 160.507750][ T6384] pgmajfault 17 [ 160.511255][ T6384] inactive_anon 120520704 [ 160.515610][ T6384] active_anon 194043904 [ 160.519959][ T6384] inactive_file 8192 [ 160.523874][ T6384] active_file 0 [ 160.527644][ T6384] unevictable 0 [ 160.531438][ T6384] hierarchical_memory_limit 314572800 [ 160.536898][ T6384] hierarchical_memsw_limit 9223372036854771712 [ 160.543148][ T6384] total_cache 314466304 [ 160.547319][ T6384] total_rss 106496 [ 160.551207][ T6384] total_rss_huge 0 [ 160.554956][ T6384] total_shmem 314458112 [ 160.559358][ T6384] total_mapped_file 0 [ 160.563449][ T6384] total_dirty 0 [ 160.566999][ T6384] total_writeback 0 [ 160.570897][ T6384] total_workingset_refault_anon 0 [ 160.576111][ T6384] total_workingset_refault_file 322 [ 160.581475][ T6384] total_swap 127987712 [ 160.585764][ T6384] total_swapcached 8192 [ 160.590078][ T6384] total_pgpgin 184392 [ 160.594218][ T6384] total_pgpgout 108103 [ 160.598506][ T6384] total_pgfault 106526 [ 160.602725][ T6384] total_pgmajfault 17 [ 160.606836][ T6384] total_inactive_anon 120520704 [ 160.612223][ T6384] total_active_anon 194043904 [ 160.616960][ T6384] total_inactive_file 8192 [ 160.621639][ T6384] total_active_file 0 [ 160.625709][ T6384] total_unevictable 0 [ 160.629931][ T6384] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1982,pid=6366,uid=0 [ 160.644993][ T6384] Memory cgroup out of memory: Killed process 6366 (syz.3.1982) total-vm:90036kB, anon-rss:1020kB, file-rss:53632kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:0 [ 160.747526][ T6381] syz.3.1982 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 160.800141][ T6381] CPU: 1 UID: 0 PID: 6381 Comm: syz.3.1982 Not tainted syzkaller #0 6e508aa732f414f9d300b832ff15c50b3cf7cfdc [ 160.800178][ T6381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 160.800192][ T6381] Call Trace: [ 160.800199][ T6381] [ 160.800208][ T6381] __dump_stack+0x21/0x30 [ 160.800246][ T6381] dump_stack_lvl+0x10c/0x190 [ 160.800274][ T6381] ? __cfi_dump_stack_lvl+0x10/0x10 [ 160.800303][ T6381] ? ___ratelimit+0x3f7/0x5a0 [ 160.800326][ T6381] dump_stack+0x19/0x20 [ 160.800354][ T6381] dump_header+0xd7/0x490 [ 160.800376][ T6381] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 160.800406][ T6381] oom_kill_process+0x4c0/0x7e0 [ 160.800442][ T6381] ? sched_clock_cpu+0x75/0x400 [ 160.800474][ T6381] out_of_memory+0x7ee/0xbd0 [ 160.800498][ T6381] ? __cfi_out_of_memory+0x10/0x10 [ 160.800523][ T6381] ? mutex_lock_killable+0x104/0x1c0 [ 160.800548][ T6381] ? __cfi_mutex_lock_killable+0x10/0x10 [ 160.800574][ T6381] mem_cgroup_out_of_memory+0x279/0x350 [ 160.800596][ T6381] ? drain_obj_stock+0xed0/0xed0 [ 160.800619][ T6381] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 160.800641][ T6381] try_charge_memcg+0x8f7/0xde0 [ 160.800677][ T6381] ? __cfi_try_charge_memcg+0x10/0x10 [ 160.800707][ T6381] ? __alloc_pages_noprof+0x31f/0x7b0 [ 160.800736][ T6381] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 160.800765][ T6381] ? __folio_batch_add_and_move+0x2ab/0x370 [ 160.800793][ T6381] __mem_cgroup_charge+0xf6/0x410 [ 160.800825][ T6381] ? _raw_spin_lock+0x8c/0x120 [ 160.800854][ T6381] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 160.800888][ T6381] shmem_alloc_and_add_folio+0x86d/0x1050 [ 160.800918][ T6381] ? put_swap_device+0x130/0x130 [ 160.800942][ T6381] ? shmem_huge_global_enabled+0x2da/0x360 [ 160.800966][ T6381] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 160.800989][ T6381] ? __kasan_check_write+0x18/0x20 [ 160.801024][ T6381] ? _raw_spin_lock+0x8c/0x120 [ 160.801052][ T6381] shmem_get_folio_gfp+0x5f0/0x1380 [ 160.801077][ T6381] ? shmem_get_folio+0xc0/0xc0 [ 160.801097][ T6381] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 160.801128][ T6381] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 160.801159][ T6381] ? inode_to_bdi+0x6d/0x100 [ 160.801189][ T6381] shmem_write_begin+0xf4/0x270 [ 160.801214][ T6381] generic_perform_write+0x32d/0x960 [ 160.801248][ T6381] ? __cfi_generic_perform_write+0x10/0x10 [ 160.801277][ T6381] ? down_write+0xe9/0x2a0 [ 160.801301][ T6381] ? mnt_get_write_access_file+0x1af/0x3b0 [ 160.801330][ T6381] ? mnt_put_write_access_file+0xc2/0x100 [ 160.801358][ T6381] ? file_update_time+0x1ef/0x220 [ 160.801387][ T6381] shmem_file_write_iter+0x105/0x130 [ 160.801415][ T6381] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 160.801552][ T6381] __kernel_write_iter+0x392/0x830 [ 160.801575][ T6381] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 160.801603][ T6381] ? __cfi___kernel_write_iter+0x10/0x10 [ 160.801623][ T6381] ? get_dump_page+0x160/0x220 [ 160.801651][ T6381] ? __asan_memset+0x39/0x50 [ 160.801682][ T6381] ? iov_iter_bvec+0xc0/0x180 [ 160.801709][ T6381] dump_user_range+0xb06/0xdf0 [ 160.801731][ T6381] ? __cfi_dump_emit+0x10/0x10 [ 160.801762][ T6381] ? __cfi_dump_user_range+0x10/0x10 [ 160.801782][ T6381] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 160.801817][ T6381] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 160.801849][ T6381] elf_core_dump+0x2cd9/0x3810 [ 160.801879][ T6381] ? __cfi_elf_core_dump+0x10/0x10 [ 160.801912][ T6381] ? dump_interrupted+0xf0/0xf0 [ 160.801941][ T6381] ? filp_open+0x182/0x1d0 [ 160.801970][ T6381] ? 0xffffffffff600000 [ 160.801988][ T6381] do_coredump+0x1bf7/0x2bd0 [ 160.802023][ T6381] ? __cfi_do_coredump+0x10/0x10 [ 160.802053][ T6381] ? asm_exc_general_protection+0x2b/0x30 [ 160.802089][ T6381] ? __kasan_slab_free+0x6a/0x80 [ 160.802112][ T6381] ? kmem_cache_free+0x1c1/0x510 [ 160.802144][ T6381] ? get_signal+0xa75/0x14f0 [ 160.802173][ T6381] get_signal+0x11fd/0x14f0 [ 160.802203][ T6381] arch_do_signal_or_restart+0x96/0x720 [ 160.802243][ T6381] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 160.802277][ T6381] ? fixup_iopl_exception+0xdd/0x2e0 [ 160.802312][ T6381] irqentry_exit_to_user_mode+0x4e/0xb0 [ 160.802340][ T6381] irqentry_exit+0x16/0x60 [ 160.802365][ T6381] exc_general_protection+0x15a/0x1f0 [ 160.802385][ T6381] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 160.802426][ T6381] asm_exc_general_protection+0x2b/0x30 [ 160.802450][ T6381] RIP: 0033:0x7fa6f1b8ebf1 [ 160.802468][ T6381] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 160.802487][ T6381] RSP: 002b:0000200000000120 EFLAGS: 00010217 [ 160.802508][ T6381] RAX: 0000000000000000 RBX: 00007fa6f1dc5fa0 RCX: 00007fa6f1b8ebe9 [ 160.802524][ T6381] RDX: 0000200000000140 RSI: 0000200000000120 RDI: 0000000000000080 [ 160.802539][ T6381] RBP: 00007fa6f1c11e19 R08: 00002000000001c0 R09: 00002000000001c0 [ 160.802554][ T6381] R10: 0000200000000180 R11: 0000000000000202 R12: 0000000000000000 [ 160.802568][ T6381] R13: 00007fa6f1dc6038 R14: 00007fa6f1dc5fa0 R15: 00007fff81cdbb28 [ 160.802586][ T6381] [ 161.308060][ T6381] memory: usage 306980kB, limit 307200kB, failcnt 20376 [ 161.315296][ T6381] memory+swap: usage 423480kB, limit 9007199254740988kB, failcnt 0 [ 161.323277][ T6381] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 161.330553][ T6381] Memory cgroup stats for /syz3: [ 161.330699][ T6381] cache 314241024 [ 161.340192][ T6381] rss 94208 [ 161.343490][ T6381] rss_huge 0 [ 161.346733][ T6381] shmem 314236928 [ 161.350698][ T6381] mapped_file 0 [ 161.354736][ T6381] dirty 0 [ 161.357717][ T6381] writeback 0 [ 161.361302][ T6381] workingset_refault_anon 0 [ 161.366184][ T6381] workingset_refault_file 322 [ 161.370920][ T6381] swap 119296000 [ 161.374500][ T6381] swapcached 24576 [ 161.378297][ T6381] pgpgin 184582 [ 161.381813][ T6381] pgpgout 108348 [ 161.385476][ T6381] pgfault 106538 [ 161.389256][ T6381] pgmajfault 17 [ 161.393311][ T6381] inactive_anon 195088384 [ 161.397782][ T6381] active_anon 119218176 [ 161.401976][ T6381] inactive_file 0 [ 161.405836][ T6381] active_file 4096 [ 161.410206][ T6381] unevictable 0 [ 161.413789][ T6381] hierarchical_memory_limit 314572800 [ 161.419482][ T6381] hierarchical_memsw_limit 9223372036854771712 [ 161.425673][ T6381] total_cache 314241024 [ 161.429975][ T6381] total_rss 94208 [ 161.433669][ T6381] total_rss_huge 0 [ 161.437549][ T6381] total_shmem 314236928 [ 161.441733][ T6381] total_mapped_file 0 [ 161.446001][ T6381] total_dirty 0 [ 161.449548][ T6381] total_writeback 0 [ 161.453484][ T6381] total_workingset_refault_anon 0 [ 161.458668][ T6381] total_workingset_refault_file 322 [ 161.463901][ T6381] total_swap 119296000 [ 161.468120][ T6381] total_swapcached 24576 [ 161.472536][ T6381] total_pgpgin 184582 [ 161.476738][ T6381] total_pgpgout 108348 [ 161.480949][ T6381] total_pgfault 106538 [ 161.485143][ T6381] total_pgmajfault 17 [ 161.489199][ T6381] total_inactive_anon 195088384 [ 161.491474][ T36] audit: type=1400 audit(7044526634.646:28934): avc: denied { lock } for pid=7127 comm="syz.1.2101" path="socket:[31107]" dev="sockfs" ino=31107 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 161.494335][ T6381] total_active_anon 119218176 [ 161.523885][ T6381] total_inactive_file 0 [ 161.528124][ T6381] total_active_file 4096 [ 161.532393][ T6381] total_unevictable 0 [ 161.536402][ T6381] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1982,pid=6370,uid=0 [ 161.551533][ T6381] Memory cgroup out of memory: Killed process 6370 (syz.3.1982) total-vm:90036kB, anon-rss:1020kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:0 [ 161.911632][ T6383] syz.3.1982 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 161.961155][ T6383] CPU: 1 UID: 0 PID: 6383 Comm: syz.3.1982 Not tainted syzkaller #0 6e508aa732f414f9d300b832ff15c50b3cf7cfdc [ 161.961194][ T6383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 161.961208][ T6383] Call Trace: [ 161.961214][ T6383] [ 161.961223][ T6383] __dump_stack+0x21/0x30 [ 161.961257][ T6383] dump_stack_lvl+0x10c/0x190 [ 161.961286][ T6383] ? __cfi_dump_stack_lvl+0x10/0x10 [ 161.961312][ T6383] ? ___ratelimit+0x3f7/0x5a0 [ 161.961333][ T6383] dump_stack+0x19/0x20 [ 161.961359][ T6383] dump_header+0xd7/0x490 [ 161.961378][ T6383] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 161.961408][ T6383] oom_kill_process+0x4c0/0x7e0 [ 161.961433][ T6383] ? sched_clock_cpu+0x75/0x400 [ 161.961463][ T6383] out_of_memory+0x7ee/0xbd0 [ 161.961487][ T6383] ? __cfi_out_of_memory+0x10/0x10 [ 161.961511][ T6383] ? mutex_lock_killable+0x104/0x1c0 [ 161.961534][ T6383] ? __cfi_mutex_lock_killable+0x10/0x10 [ 161.961568][ T6383] mem_cgroup_out_of_memory+0x279/0x350 [ 161.961589][ T6383] ? drain_obj_stock+0xed0/0xed0 [ 161.961610][ T6383] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 161.961630][ T6383] try_charge_memcg+0x8f7/0xde0 [ 161.961661][ T6383] ? __cfi_try_charge_memcg+0x10/0x10 [ 161.961690][ T6383] ? __alloc_pages_noprof+0x31f/0x7b0 [ 161.961720][ T6383] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 161.961746][ T6383] ? __folio_batch_add_and_move+0x2ab/0x370 [ 161.961771][ T6383] __mem_cgroup_charge+0xf6/0x410 [ 161.961802][ T6383] ? _raw_spin_lock+0x8c/0x120 [ 161.961830][ T6383] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 161.961861][ T6383] shmem_alloc_and_add_folio+0x86d/0x1050 [ 161.961886][ T6383] ? put_swap_device+0x130/0x130 [ 161.961910][ T6383] ? shmem_huge_global_enabled+0x2da/0x360 [ 161.961932][ T6383] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 161.961954][ T6383] ? __kasan_check_write+0x18/0x20 [ 161.961984][ T6383] ? _raw_spin_lock+0x8c/0x120 [ 161.962012][ T6383] shmem_get_folio_gfp+0x5f0/0x1380 [ 161.962037][ T6383] ? shmem_get_folio+0xc0/0xc0 [ 161.962056][ T6383] ? follow_page_pte+0xa5c/0xb90 [ 161.962084][ T6383] ? inode_to_bdi+0x6d/0x100 [ 161.962111][ T6383] shmem_write_begin+0xf4/0x270 [ 161.962136][ T6383] generic_perform_write+0x32d/0x960 [ 161.962169][ T6383] ? __cfi_generic_perform_write+0x10/0x10 [ 161.962198][ T6383] ? down_write+0xe9/0x2a0 [ 161.962223][ T6383] ? file_update_time+0xa3/0x220 [ 161.962251][ T6383] shmem_file_write_iter+0x105/0x130 [ 161.962280][ T6383] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 161.962307][ T6383] __kernel_write_iter+0x392/0x830 [ 161.962328][ T6383] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 161.962356][ T6383] ? __cfi___kernel_write_iter+0x10/0x10 [ 161.962375][ T6383] ? get_dump_page+0x160/0x220 [ 161.962401][ T6383] ? __asan_memset+0x39/0x50 [ 161.962431][ T6383] ? iov_iter_bvec+0xc0/0x180 [ 161.962456][ T6383] dump_user_range+0xb06/0xdf0 [ 161.962478][ T6383] ? __cfi_dump_emit+0x10/0x10 [ 161.962510][ T6383] ? __cfi_dump_user_range+0x10/0x10 [ 161.962530][ T6383] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 161.962569][ T6383] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 161.962601][ T6383] elf_core_dump+0x2cd9/0x3810 [ 161.962631][ T6383] ? __cfi_elf_core_dump+0x10/0x10 [ 161.962665][ T6383] ? dump_interrupted+0xf0/0xf0 [ 161.962696][ T6383] ? filp_open+0x182/0x1d0 [ 161.962724][ T6383] ? 0xffffffffff600000 [ 161.962741][ T6383] do_coredump+0x1bf7/0x2bd0 [ 161.962776][ T6383] ? __cfi_do_coredump+0x10/0x10 [ 161.962807][ T6383] ? asm_exc_general_protection+0x2b/0x30 [ 161.962841][ T6383] ? __kasan_slab_free+0x6a/0x80 [ 161.962863][ T6383] ? kmem_cache_free+0x1c1/0x510 [ 161.962893][ T6383] ? get_signal+0xa75/0x14f0 [ 161.962920][ T6383] get_signal+0x11fd/0x14f0 [ 161.962949][ T6383] arch_do_signal_or_restart+0x96/0x720 [ 161.962981][ T6383] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 161.963014][ T6383] ? fixup_iopl_exception+0xdd/0x2e0 [ 161.963047][ T6383] irqentry_exit_to_user_mode+0x4e/0xb0 [ 161.963073][ T6383] irqentry_exit+0x16/0x60 [ 161.963098][ T6383] exc_general_protection+0x15a/0x1f0 [ 161.963118][ T6383] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 161.963146][ T6383] asm_exc_general_protection+0x2b/0x30 [ 161.963169][ T6383] RIP: 0033:0x7fa6f1b8ebf1 [ 161.963188][ T6383] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 161.963206][ T6383] RSP: 002b:0000200000000120 EFLAGS: 00010217 [ 161.963228][ T6383] RAX: 0000000000000000 RBX: 00007fa6f1dc5fa0 RCX: 00007fa6f1b8ebe9 [ 161.963243][ T6383] RDX: 0000200000000140 RSI: 0000200000000120 RDI: 0000000000000080 [ 161.963258][ T6383] RBP: 00007fa6f1c11e19 R08: 00002000000001c0 R09: 00002000000001c0 [ 161.963274][ T6383] R10: 0000200000000180 R11: 0000000000000202 R12: 0000000000000000 [ 161.963289][ T6383] R13: 00007fa6f1dc6038 R14: 00007fa6f1dc5fa0 R15: 00007fff81cdbb28 [ 161.963308][ T6383] [ 161.963317][ T6383] memory: usage 300884kB, limit 307200kB, failcnt 25457 [ 162.181689][ T878] Bluetooth: hci0: command 0x1003 tx timeout [ 162.317579][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 162.585986][ T6383] memory+swap: usage 432140kB, limit 9007199254740988kB, failcnt 0 [ 162.594188][ T6383] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 162.601242][ T6383] Memory cgroup stats for /syz3: [ 162.601389][ T6383] cache 314486784 [ 162.610593][ T6383] rss 49152 [ 162.613826][ T6383] rss_huge 0 [ 162.617137][ T6383] shmem 314413056 [ 162.621103][ T7166] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:107 [ 162.628129][ T6383] mapped_file 0 [ 162.657741][ T7172] rust_binder: 7164 RLIMIT_NICE not set [ 162.657783][ T7172] rust_binder: 56: no such ref 2 [ 162.673752][ T6383] dirty 0 [ 162.676741][ T6383] writeback 0 [ 162.680176][ T6383] workingset_refault_anon 16 [ 162.688846][ T6383] workingset_refault_file 1900 [ 162.697527][ T6383] swap 127938560 [ 162.701128][ T6383] swapcached 57344 [ 162.704880][ T6383] pgpgin 202606 [ 162.708493][ T7166] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 162.726957][ T6383] pgpgout 126317 [ 162.728729][ T7178] /dev/rnullb0: Can't open blockdev [ 162.735547][ T6383] pgfault 107680 [ 162.757406][ T6383] pgmajfault 56 [ 162.766451][ T6383] inactive_anon 124567552 [ 162.767631][ T36] audit: type=1400 audit(7044526635.966:28935): avc: denied { read } for pid=7182 comm="syz.2.2119" name="/" dev="configfs" ino=2581 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 162.771248][ T6383] active_anon 189669376 [ 162.795439][ T36] audit: type=1400 audit(7044526635.966:28936): avc: denied { open } for pid=7182 comm="syz.2.2119" path="/" dev="configfs" ino=2581 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 162.797880][ T6383] inactive_file 4096 [ 162.825277][ T6383] active_file 0 [ 162.828811][ T6383] unevictable 0 [ 162.832448][ T6383] hierarchical_memory_limit 314572800 [ 162.838335][ T6383] hierarchical_memsw_limit 9223372036854771712 [ 162.844684][ T6383] total_cache 314486784 [ 162.849134][ T6383] total_rss 49152 [ 162.852947][ T6383] total_rss_huge 0 [ 162.856776][ T6383] total_shmem 314413056 [ 162.861158][ T6383] total_mapped_file 0 [ 162.865183][ T6383] total_dirty 0 [ 162.868688][ T6383] total_writeback 0 [ 162.872649][ T6383] total_workingset_refault_anon 16 [ 162.877988][ T6383] total_workingset_refault_file 1900 [ 162.883436][ T6383] total_swap 127938560 [ 162.887638][ T6383] total_swapcached 57344 [ 162.891993][ T6383] total_pgpgin 202606 [ 162.896162][ T6383] total_pgpgout 126317 [ 162.900476][ T6383] total_pgfault 107680 [ 162.904568][ T6383] total_pgmajfault 56 [ 162.908609][ T6383] total_inactive_anon 124567552 [ 162.913572][ T6383] total_active_anon 189669376 [ 162.918333][ T6383] total_inactive_file 4096 [ 162.922760][ T6383] total_active_file 0 [ 162.926924][ T6383] total_unevictable 0 [ 162.930969][ T6383] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1982,pid=6381,uid=0 [ 162.946161][ T6383] Memory cgroup out of memory: Killed process 6381 (syz.3.1982) total-vm:90036kB, anon-rss:1020kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:0 [ 163.037497][ T403] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 163.060506][ T6376] syz.3.1982 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 163.071721][ T6376] CPU: 0 UID: 0 PID: 6376 Comm: syz.3.1982 Not tainted syzkaller #0 6e508aa732f414f9d300b832ff15c50b3cf7cfdc [ 163.071758][ T6376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 163.071773][ T6376] Call Trace: [ 163.071781][ T6376] [ 163.071791][ T6376] __dump_stack+0x21/0x30 [ 163.071826][ T6376] dump_stack_lvl+0x10c/0x190 [ 163.071855][ T6376] ? __cfi_dump_stack_lvl+0x10/0x10 [ 163.071884][ T6376] ? ___ratelimit+0x3f7/0x5a0 [ 163.071908][ T6376] dump_stack+0x19/0x20 [ 163.071936][ T6376] dump_header+0xd7/0x490 [ 163.071966][ T6376] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 163.071996][ T6376] oom_kill_process+0x4c0/0x7e0 [ 163.072023][ T6376] ? sched_clock_cpu+0x75/0x400 [ 163.072053][ T6376] out_of_memory+0x7ee/0xbd0 [ 163.072079][ T6376] ? __cfi_out_of_memory+0x10/0x10 [ 163.072104][ T6376] ? mutex_lock_killable+0x104/0x1c0 [ 163.072137][ T6376] ? __cfi_mutex_lock_killable+0x10/0x10 [ 163.072164][ T6376] mem_cgroup_out_of_memory+0x279/0x350 [ 163.072187][ T6376] ? drain_obj_stock+0xed0/0xed0 [ 163.072211][ T6376] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 163.072240][ T6376] try_charge_memcg+0x8f7/0xde0 [ 163.072271][ T6376] ? __cfi_try_charge_memcg+0x10/0x10 [ 163.072301][ T6376] ? __alloc_pages_noprof+0x31f/0x7b0 [ 163.072331][ T6376] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 163.072358][ T6376] ? __folio_batch_add_and_move+0x2ab/0x370 [ 163.072385][ T6376] __mem_cgroup_charge+0xf6/0x410 [ 163.072417][ T6376] ? _raw_spin_lock+0x8c/0x120 [ 163.072447][ T6376] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 163.072483][ T6376] shmem_alloc_and_add_folio+0x86d/0x1050 [ 163.072510][ T6376] ? put_swap_device+0x130/0x130 [ 163.072536][ T6376] ? shmem_huge_global_enabled+0x2da/0x360 [ 163.072561][ T6376] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 163.072584][ T6376] ? __kasan_check_write+0x18/0x20 [ 163.072615][ T6376] ? _raw_spin_lock+0x8c/0x120 [ 163.072647][ T6376] shmem_get_folio_gfp+0x5f0/0x1380 [ 163.072673][ T6376] ? shmem_get_folio+0xc0/0xc0 [ 163.072693][ T6376] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 163.072724][ T6376] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 163.072755][ T6376] ? inode_to_bdi+0x6d/0x100 [ 163.072784][ T6376] shmem_write_begin+0xf4/0x270 [ 163.072810][ T6376] generic_perform_write+0x32d/0x960 [ 163.072845][ T6376] ? __cfi_generic_perform_write+0x10/0x10 [ 163.072877][ T6376] ? down_write+0xe9/0x2a0 [ 163.072901][ T6376] ? mnt_get_write_access_file+0x1af/0x3b0 [ 163.072929][ T6376] ? mnt_put_write_access_file+0xc2/0x100 [ 163.072957][ T6376] ? file_update_time+0x1ef/0x220 [ 163.072987][ T6376] shmem_file_write_iter+0x105/0x130 [ 163.073015][ T6376] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 163.073042][ T6376] __kernel_write_iter+0x392/0x830 [ 163.073063][ T6376] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 163.073093][ T6376] ? __cfi___kernel_write_iter+0x10/0x10 [ 163.073113][ T6376] ? get_dump_page+0x160/0x220 [ 163.073140][ T6376] ? __asan_memset+0x39/0x50 [ 163.073171][ T6376] ? iov_iter_bvec+0xc0/0x180 [ 163.073196][ T6376] dump_user_range+0xb06/0xdf0 [ 163.073218][ T6376] ? __cfi_dump_emit+0x10/0x10 [ 163.073380][ T6376] ? __cfi_dump_user_range+0x10/0x10 [ 163.073401][ T6376] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 163.073434][ T6376] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 163.073467][ T6376] elf_core_dump+0x2cd9/0x3810 [ 163.073497][ T6376] ? __cfi_elf_core_dump+0x10/0x10 [ 163.073531][ T6376] ? dump_interrupted+0xf0/0xf0 [ 163.073563][ T6376] ? filp_open+0x182/0x1d0 [ 163.073591][ T6376] ? 0xffffffffff600000 [ 163.073610][ T6376] do_coredump+0x1bf7/0x2bd0 [ 163.073646][ T6376] ? __cfi_do_coredump+0x10/0x10 [ 163.073676][ T6376] ? asm_exc_general_protection+0x2b/0x30 [ 163.073711][ T6376] ? __kasan_slab_free+0x6a/0x80 [ 163.073735][ T6376] ? kmem_cache_free+0x1c1/0x510 [ 163.073767][ T6376] ? get_signal+0xa75/0x14f0 [ 163.073796][ T6376] get_signal+0x11fd/0x14f0 [ 163.073827][ T6376] arch_do_signal_or_restart+0x96/0x720 [ 163.073860][ T6376] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 163.073895][ T6376] ? fixup_iopl_exception+0xdd/0x2e0 [ 163.073938][ T6376] irqentry_exit_to_user_mode+0x4e/0xb0 [ 163.073965][ T6376] irqentry_exit+0x16/0x60 [ 163.073990][ T6376] exc_general_protection+0x15a/0x1f0 [ 163.074011][ T6376] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 163.074041][ T6376] asm_exc_general_protection+0x2b/0x30 [ 163.074064][ T6376] RIP: 0033:0x7fa6f1b8ebf1 [ 163.074083][ T6376] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 163.074108][ T6376] RSP: 002b:0000200000000120 EFLAGS: 00010217 [ 163.074129][ T6376] RAX: 0000000000000000 RBX: 00007fa6f1dc5fa0 RCX: 00007fa6f1b8ebe9 [ 163.074144][ T6376] RDX: 0000200000000140 RSI: 0000200000000120 RDI: 0000000000000080 [ 163.074160][ T6376] RBP: 00007fa6f1c11e19 R08: 00002000000001c0 R09: 00002000000001c0 [ 163.074176][ T6376] R10: 0000200000000180 R11: 0000000000000202 R12: 0000000000000000 [ 163.074190][ T6376] R13: 00007fa6f1dc6038 R14: 00007fa6f1dc5fa0 R15: 00007fff81cdbb28 [ 163.074210][ T6376] [ 163.672291][ T6376] memory: usage 300180kB, limit 307200kB, failcnt 28412 [ 163.679337][ T6376] memory+swap: usage 418220kB, limit 9007199254740988kB, failcnt 0 [ 163.687261][ T6376] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 163.694206][ T6376] Memory cgroup stats for /syz3: [ 163.694347][ T6376] cache 307302400 [ 163.703141][ T6376] rss 40960 [ 163.706358][ T6376] rss_huge 0 [ 163.709843][ T6376] shmem 306974720 [ 163.713616][ T6376] mapped_file 172032 [ 163.717736][ T6376] dirty 0 [ 163.720707][ T6376] writeback 0 [ 163.724186][ T6376] workingset_refault_anon 16 [ 163.729049][ T6376] workingset_refault_file 2102 [ 163.733888][ T6376] swap 120872960 [ 163.737576][ T6376] swapcached 61440 [ 163.741502][ T6376] pgpgin 207484 [ 163.744996][ T6376] pgpgout 132950 [ 163.748640][ T6376] pgfault 107990 [ 163.752225][ T6376] pgmajfault 72 [ 163.755724][ T6376] inactive_anon 75902976 [ 163.756148][ T403] usb 1-1: unable to get BOS descriptor or descriptor too short [ 163.760102][ T6376] active_anon 230322176 [ 163.760117][ T6376] inactive_file 0 [ 163.760126][ T6376] active_file 327680 [ 163.779702][ T6376] unevictable 0 [ 163.783238][ T6376] hierarchical_memory_limit 314572800 [ 163.788711][ T6376] hierarchical_memsw_limit 9223372036854771712 [ 163.794210][ T403] usb 1-1: config 204 has an invalid interface number: 223 but max is 0 [ 163.795573][ T6376] total_cache 307302400 [ 163.804436][ T403] usb 1-1: config 204 has no interface number 0 [ 163.808122][ T6376] total_rss 40960 [ 163.818108][ T6376] total_rss_huge 0 [ 163.821865][ T6376] total_shmem 306974720 [ 163.826060][ T6376] total_mapped_file 172032 [ 163.830692][ T6376] total_dirty 0 [ 163.832277][ T403] usb 1-1: config 204 interface 223 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 163.834196][ T6376] total_writeback 0 [ 163.851634][ T6376] total_workingset_refault_anon 16 [ 163.856860][ T6376] total_workingset_refault_file 2102 [ 163.862240][ T6376] total_swap 120872960 [ 163.866345][ T6376] total_swapcached 61440 [ 163.870900][ T6376] total_pgpgin 207484 [ 163.875120][ T6376] total_pgpgout 132950 [ 163.879421][ T6376] total_pgfault 107990 [ 163.883531][ T6376] total_pgmajfault 72 [ 163.887747][ T6376] total_inactive_anon 75902976 [ 163.892529][ T6376] total_active_anon 230322176 [ 163.897227][ T6376] total_inactive_file 0 [ 163.901491][ T403] usb 1-1: config 204 interface 223 has no altsetting 0 [ 163.901541][ T6376] total_active_file 327680 [ 163.912955][ T6376] total_unevictable 0 [ 163.916958][ T6376] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1982,pid=6392,uid=0 [ 163.932140][ T6376] Memory cgroup out of memory: Killed process 6392 (syz.3.1982) total-vm:90036kB, anon-rss:1020kB, file-rss:53556kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:0 [ 163.939059][ T403] usb 1-1: New USB device found, idVendor=0b57, idProduct=5942, bcdDevice=38.7a [ 164.009749][ T403] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.124372][ T403] usb 1-1: Product: syz [ 164.162201][ T7196] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2123'. [ 164.181536][ T36] audit: type=1400 audit(7044526637.356:28937): avc: denied { map } for pid=7195 comm="syz.2.2123" path="pipe:[2920]" dev="pipefs" ino=2920 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 164.189553][ T403] usb 1-1: Manufacturer: syz [ 164.307488][ T403] usb 1-1: SerialNumber: syz [ 164.578701][ T403] usbhid 1-1:204.223: couldn't find an input interrupt endpoint [ 164.587320][ T7209] netlink: 'syz.1.2127': attribute type 3 has an invalid length. [ 164.665374][ T7212] rust_binder: Error while translating object. [ 164.665414][ T7212] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 164.670812][ T403] usb 1-1: USB disconnect, device number 5 [ 164.717937][ T7212] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:119 [ 164.737248][ T6384] syz.3.1982 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 164.831772][ T6384] CPU: 1 UID: 0 PID: 6384 Comm: syz.3.1982 Not tainted syzkaller #0 6e508aa732f414f9d300b832ff15c50b3cf7cfdc [ 164.831812][ T6384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 164.831827][ T6384] Call Trace: [ 164.831835][ T6384] [ 164.831845][ T6384] __dump_stack+0x21/0x30 [ 164.831887][ T6384] dump_stack_lvl+0x10c/0x190 [ 164.831926][ T6384] ? __cfi_dump_stack_lvl+0x10/0x10 [ 164.831955][ T6384] ? ___ratelimit+0x3f7/0x5a0 [ 164.831978][ T6384] dump_stack+0x19/0x20 [ 164.832006][ T6384] dump_header+0xd7/0x490 [ 164.832029][ T6384] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 164.832059][ T6384] oom_kill_process+0x4c0/0x7e0 [ 164.832093][ T6384] ? sched_clock_cpu+0x75/0x400 [ 164.832124][ T6384] out_of_memory+0x7ee/0xbd0 [ 164.832148][ T6384] ? __cfi_out_of_memory+0x10/0x10 [ 164.832174][ T6384] ? mutex_lock_killable+0x92/0x1c0 [ 164.832198][ T6384] ? __cfi_mutex_lock_killable+0x10/0x10 [ 164.832224][ T6384] mem_cgroup_out_of_memory+0x279/0x350 [ 164.832246][ T6384] ? drain_obj_stock+0xed0/0xed0 [ 164.832269][ T6384] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 164.832297][ T6384] try_charge_memcg+0x8f7/0xde0 [ 164.832328][ T6384] ? __cfi_try_charge_memcg+0x10/0x10 [ 164.832359][ T6384] ? __alloc_pages_noprof+0x31f/0x7b0 [ 164.832389][ T6384] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 164.832419][ T6384] ? __folio_batch_add_and_move+0x2ab/0x370 [ 164.832448][ T6384] __mem_cgroup_charge+0xf6/0x410 [ 164.832481][ T6384] ? _raw_spin_lock+0x8c/0x120 [ 164.832513][ T6384] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 164.832550][ T6384] shmem_alloc_and_add_folio+0x86d/0x1050 [ 164.832579][ T6384] ? put_swap_device+0x130/0x130 [ 164.832604][ T6384] ? shmem_huge_global_enabled+0x2da/0x360 [ 164.832635][ T6384] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 164.832659][ T6384] ? __kasan_check_write+0x18/0x20 [ 164.832690][ T6384] ? _raw_spin_lock+0x8c/0x120 [ 164.832719][ T6384] shmem_get_folio_gfp+0x5f0/0x1380 [ 164.832745][ T6384] ? shmem_get_folio+0xc0/0xc0 [ 164.832767][ T6384] ? follow_page_pte+0xa5c/0xb90 [ 164.832795][ T6384] ? inode_to_bdi+0x6d/0x100 [ 164.832825][ T6384] shmem_write_begin+0xf4/0x270 [ 164.832850][ T6384] generic_perform_write+0x32d/0x960 [ 164.832885][ T6384] ? __cfi_generic_perform_write+0x10/0x10 [ 164.832916][ T6384] ? down_write+0xe9/0x2a0 [ 164.832943][ T6384] ? file_update_time+0xa3/0x220 [ 164.832974][ T6384] shmem_file_write_iter+0x105/0x130 [ 164.833004][ T6384] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 164.833032][ T6384] __kernel_write_iter+0x392/0x830 [ 164.833053][ T6384] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 164.833089][ T6384] ? __cfi___kernel_write_iter+0x10/0x10 [ 164.833110][ T6384] ? get_dump_page+0x160/0x220 [ 164.833136][ T6384] ? __asan_memset+0x39/0x50 [ 164.833167][ T6384] ? iov_iter_bvec+0xc0/0x180 [ 164.833194][ T6384] dump_user_range+0xb06/0xdf0 [ 164.833218][ T6384] ? __cfi_dump_emit+0x10/0x10 [ 164.833251][ T6384] ? __cfi_dump_user_range+0x10/0x10 [ 164.833272][ T6384] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 164.833305][ T6384] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 164.833341][ T6384] elf_core_dump+0x2cd9/0x3810 [ 164.833379][ T6384] ? __cfi_elf_core_dump+0x10/0x10 [ 164.833414][ T6384] ? dump_interrupted+0xf0/0xf0 [ 164.833447][ T6384] ? filp_open+0x182/0x1d0 [ 164.833476][ T6384] ? 0xffffffffff600000 [ 164.833495][ T6384] do_coredump+0x1bf7/0x2bd0 [ 164.833530][ T6384] ? __cfi_do_coredump+0x10/0x10 [ 164.833564][ T6384] ? asm_exc_general_protection+0x2b/0x30 [ 164.833600][ T6384] ? __kasan_slab_free+0x6a/0x80 [ 164.833624][ T6384] ? kmem_cache_free+0x1c1/0x510 [ 164.833658][ T6384] ? get_signal+0xa75/0x14f0 [ 164.833686][ T6384] get_signal+0x11fd/0x14f0 [ 164.833717][ T6384] arch_do_signal_or_restart+0x96/0x720 [ 164.833751][ T6384] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 164.833785][ T6384] ? fixup_iopl_exception+0xdd/0x2e0 [ 164.833821][ T6384] irqentry_exit_to_user_mode+0x4e/0xb0 [ 164.833850][ T6384] irqentry_exit+0x16/0x60 [ 164.833877][ T6384] exc_general_protection+0x15a/0x1f0 [ 164.833898][ T6384] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 164.833928][ T6384] asm_exc_general_protection+0x2b/0x30 [ 164.833953][ T6384] RIP: 0033:0x7fa6f1b8ebf1 [ 164.833971][ T6384] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 164.833990][ T6384] RSP: 002b:0000200000000120 EFLAGS: 00010217 [ 164.834012][ T6384] RAX: 0000000000000000 RBX: 00007fa6f1dc5fa0 RCX: 00007fa6f1b8ebe9 [ 164.834029][ T6384] RDX: 0000200000000140 RSI: 0000200000000120 RDI: 0000000000000080 [ 164.834044][ T6384] RBP: 00007fa6f1c11e19 R08: 00002000000001c0 R09: 00002000000001c0 [ 164.834061][ T6384] R10: 0000200000000180 R11: 0000000000000202 R12: 0000000000000000 [ 164.834083][ T6384] R13: 00007fa6f1dc6038 R14: 00007fa6f1dc5fa0 R15: 00007fff81cdbb28 [ 164.834103][ T6384] [ 164.915266][ T6384] memory: usage 307200kB, limit 307200kB, failcnt 33449 [ 165.324875][ T6384] memory+swap: usage 432044kB, limit 9007199254740988kB, failcnt 0 [ 165.333059][ T6384] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 165.340095][ T6384] Memory cgroup stats for /syz3: [ 165.341102][ T6384] cache 314298368 [ 165.349846][ T6384] rss 143360 [ 165.353296][ T6384] rss_huge 0 [ 165.356558][ T6384] shmem 314290176 [ 165.360365][ T6384] mapped_file 0 [ 165.363928][ T6384] dirty 0 [ 165.367032][ T6384] writeback 0 [ 165.370400][ T6384] workingset_refault_anon 35 [ 165.377536][ T6384] workingset_refault_file 4804 [ 165.382367][ T6384] swap 127840256 [ 165.385934][ T6384] swapcached 155648 [ 165.393818][ T6384] pgpgin 223014 [ 165.397337][ T6384] pgpgout 146725 [ 165.401034][ T6384] pgfault 109124 [ 165.404650][ T6384] pgmajfault 131 [ 165.408335][ T6384] inactive_anon 265596928 [ 165.413783][ T6384] active_anon 48967680 [ 165.423907][ T6384] inactive_file 8192 [ 165.433650][ T6384] active_file 0 [ 165.437473][ T6384] unevictable 0 [ 165.441066][ T6384] hierarchical_memory_limit 314572800 [ 165.446560][ T6384] hierarchical_memsw_limit 9223372036854771712 [ 165.452851][ T6384] total_cache 314298368 [ 165.457209][ T6384] total_rss 143360 [ 165.461054][ T6384] total_rss_huge 0 [ 165.464810][ T6384] total_shmem 314290176 [ 165.469173][ T6384] total_mapped_file 0 [ 165.479855][ T6384] total_dirty 0 [ 165.483434][ T6384] total_writeback 0 [ 165.487367][ T6384] total_workingset_refault_anon 35 [ 165.493544][ T6384] total_workingset_refault_file 4804 [ 165.499160][ T6384] total_swap 127840256 [ 165.507869][ T6384] total_swapcached 155648 [ 165.508106][ T7234] rust_binder: 7229 RLIMIT_NICE not set [ 165.512543][ T7234] rust_binder: 67: no such ref 2 [ 165.526650][ T6384] total_pgpgin 223014 [ 165.529006][ T7234] rust_binder: Write failure EINVAL in pid:67 [ 165.532561][ T6384] total_pgpgout 146725 [ 165.543540][ T6384] total_pgfault 109124 [ 165.548352][ T6384] total_pgmajfault 131 [ 165.552865][ T6384] total_inactive_anon 265596928 [ 165.561045][ T6384] total_active_anon 48967680 [ 165.565761][ T6384] total_inactive_file 8192 [ 165.568704][ T7241] rust_binder: Write failure EINVAL in pid:70 [ 165.585043][ T6384] total_active_file 0 [ 165.595346][ T36] audit: type=1400 audit(7044526638.786:28938): avc: denied { unmount } for pid=6195 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 165.607502][ T6384] total_unevictable 0 [ 165.620070][ T6384] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1982,pid=6380,uid=0 [ 165.634779][ T7247] 9pnet_fd: Insufficient options for proto=fd [ 165.635723][ T6384] Memory cgroup out of memory: Killed process 6380 (syz.3.1982) total-vm:90036kB, anon-rss:1056kB, file-rss:53520kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:0 [ 165.660963][ T7247] veth0: entered promiscuous mode [ 165.680508][ T7246] veth0: left promiscuous mode [ 165.756015][ T7250] rust_binder: Failed copying remainder into alloc: EFAULT [ 165.756061][ T7250] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 165.764937][ T6375] syz.3.1982 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 165.773674][ T7250] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 165.813144][ T7250] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:137 [ 165.822699][ T6375] CPU: 1 UID: 0 PID: 6375 Comm: syz.3.1982 Not tainted syzkaller #0 6e508aa732f414f9d300b832ff15c50b3cf7cfdc [ 165.822739][ T6375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 165.822755][ T6375] Call Trace: [ 165.822763][ T6375] [ 165.822772][ T6375] __dump_stack+0x21/0x30 [ 165.822807][ T6375] dump_stack_lvl+0x10c/0x190 [ 165.822834][ T6375] ? __cfi_dump_stack_lvl+0x10/0x10 [ 165.822864][ T6375] ? ___ratelimit+0x3f7/0x5a0 [ 165.822886][ T6375] dump_stack+0x19/0x20 [ 165.822914][ T6375] dump_header+0xd7/0x490 [ 165.822936][ T6375] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 165.822966][ T6375] oom_kill_process+0x4c0/0x7e0 [ 165.822991][ T6375] ? sched_clock_cpu+0x75/0x400 [ 165.823021][ T6375] out_of_memory+0x7ee/0xbd0 [ 165.823047][ T6375] ? __cfi_out_of_memory+0x10/0x10 [ 165.823072][ T6375] ? mutex_lock_killable+0x104/0x1c0 [ 165.823098][ T6375] ? __cfi_mutex_lock_killable+0x10/0x10 [ 165.823124][ T6375] mem_cgroup_out_of_memory+0x279/0x350 [ 165.823147][ T6375] ? drain_obj_stock+0xed0/0xed0 [ 165.823170][ T6375] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 165.823191][ T6375] try_charge_memcg+0x8f7/0xde0 [ 165.823229][ T6375] ? __cfi_try_charge_memcg+0x10/0x10 [ 165.823258][ T6375] ? __alloc_pages_noprof+0x31f/0x7b0 [ 165.823288][ T6375] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 165.823317][ T6375] ? __folio_batch_add_and_move+0x2ab/0x370 [ 165.823345][ T6375] __mem_cgroup_charge+0xf6/0x410 [ 165.823378][ T6375] ? _raw_spin_lock+0x8c/0x120 [ 165.823407][ T6375] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 165.823440][ T6375] shmem_alloc_and_add_folio+0x86d/0x1050 [ 165.823468][ T6375] ? put_swap_device+0x130/0x130 [ 165.823492][ T6375] ? shmem_huge_global_enabled+0x2da/0x360 [ 165.823515][ T6375] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 165.823538][ T6375] ? __kasan_check_write+0x18/0x20 [ 165.823569][ T6375] ? _raw_spin_lock+0x8c/0x120 [ 165.823599][ T6375] shmem_get_folio_gfp+0x5f0/0x1380 [ 165.823625][ T6375] ? shmem_get_folio+0xc0/0xc0 [ 165.823645][ T6375] ? follow_page_pte+0xa5c/0xb90 [ 165.823673][ T6375] ? inode_to_bdi+0x6d/0x100 [ 165.823702][ T6375] shmem_write_begin+0xf4/0x270 [ 165.823728][ T6375] generic_perform_write+0x32d/0x960 [ 165.823761][ T6375] ? __cfi_generic_perform_write+0x10/0x10 [ 165.823793][ T6375] ? down_write+0xe9/0x2a0 [ 165.823818][ T6375] ? file_update_time+0xa3/0x220 [ 165.823849][ T6375] shmem_file_write_iter+0x105/0x130 [ 165.823879][ T6375] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 165.823907][ T6375] __kernel_write_iter+0x392/0x830 [ 165.823928][ T6375] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 165.823957][ T6375] ? __cfi___kernel_write_iter+0x10/0x10 [ 165.823978][ T6375] ? get_dump_page+0x160/0x220 [ 165.824004][ T6375] ? __asan_memset+0x39/0x50 [ 165.824033][ T6375] ? iov_iter_bvec+0xc0/0x180 [ 165.824059][ T6375] dump_user_range+0xb06/0xdf0 [ 165.824081][ T6375] ? __cfi_dump_emit+0x10/0x10 [ 165.824114][ T6375] ? __cfi_dump_user_range+0x10/0x10 [ 165.824134][ T6375] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 165.824167][ T6375] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 165.824201][ T6375] elf_core_dump+0x2cd9/0x3810 [ 165.824241][ T6375] ? __cfi_elf_core_dump+0x10/0x10 [ 165.824275][ T6375] ? dump_interrupted+0xf0/0xf0 [ 165.824305][ T6375] ? filp_open+0x182/0x1d0 [ 165.824333][ T6375] ? 0xffffffffff600000 [ 165.824352][ T6375] do_coredump+0x1bf7/0x2bd0 [ 165.824388][ T6375] ? __cfi_do_coredump+0x10/0x10 [ 165.824421][ T6375] ? asm_exc_general_protection+0x2b/0x30 [ 165.824456][ T6375] ? __kasan_slab_free+0x6a/0x80 [ 165.824479][ T6375] ? kmem_cache_free+0x1c1/0x510 [ 165.824512][ T6375] ? get_signal+0xa75/0x14f0 [ 165.824541][ T6375] get_signal+0x11fd/0x14f0 [ 165.824571][ T6375] arch_do_signal_or_restart+0x96/0x720 [ 165.824604][ T6375] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 165.824639][ T6375] ? fixup_iopl_exception+0xdd/0x2e0 [ 165.824674][ T6375] irqentry_exit_to_user_mode+0x4e/0xb0 [ 165.824702][ T6375] irqentry_exit+0x16/0x60 [ 165.824726][ T6375] exc_general_protection+0x15a/0x1f0 [ 165.824747][ T6375] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 165.824776][ T6375] asm_exc_general_protection+0x2b/0x30 [ 165.824801][ T6375] RIP: 0033:0x7fa6f1b8ebf1 [ 165.824820][ T6375] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 165.824839][ T6375] RSP: 002b:0000200000000120 EFLAGS: 00010217 [ 165.824860][ T6375] RAX: 0000000000000000 RBX: 00007fa6f1dc5fa0 RCX: 00007fa6f1b8ebe9 [ 165.824877][ T6375] RDX: 0000200000000140 RSI: 0000200000000120 RDI: 0000000000000080 [ 165.824893][ T6375] RBP: 00007fa6f1c11e19 R08: 00002000000001c0 R09: 00002000000001c0 [ 165.824910][ T6375] R10: 0000200000000180 R11: 0000000000000202 R12: 0000000000000000 [ 165.824925][ T6375] R13: 00007fa6f1dc6038 R14: 00007fa6f1dc5fa0 R15: 00007fff81cdbb28 [ 165.824945][ T6375] [ 165.825202][ T6375] memory: usage 305540kB, limit 307200kB, failcnt 34566 [ 166.322418][ T330] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 166.346313][ T6375] memory+swap: usage 432136kB, limit 9007199254740988kB, failcnt 0 [ 166.354341][ T6375] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 166.361971][ T6375] Memory cgroup stats for /syz3: [ 166.362130][ T6375] cache 314306560 [ 166.371427][ T6375] rss 155648 [ 166.374793][ T6375] rss_huge 0 [ 166.380390][ T6375] shmem 314302464 [ 166.384069][ T6375] mapped_file 0 [ 166.387639][ T6375] dirty 0 [ 166.390591][ T6375] writeback 0 [ 166.393892][ T6375] workingset_refault_anon 39 [ 166.400102][ T6375] workingset_refault_file 5991 [ 166.405748][ T6375] swap 127934464 [ 166.409658][ T6375] swapcached 36864 [ 166.413436][ T6375] pgpgin 233106 [ 166.416932][ T6375] pgpgout 156841 [ 166.420837][ T6375] pgfault 109458 [ 166.424402][ T6375] pgmajfault 143 [ 166.428188][ T6375] inactive_anon 293019648 [ 166.432547][ T6375] active_anon 21401600 [ 166.436795][ T6375] inactive_file 0 [ 166.440770][ T6375] active_file 4096 [ 166.444510][ T6375] unevictable 0 [ 166.457193][ T6375] hierarchical_memory_limit 314572800 [ 166.462815][ T6375] hierarchical_memsw_limit 9223372036854771712 [ 166.469664][ T6375] total_cache 314306560 [ 166.474244][ T7264] rust_binder: 7260 RLIMIT_NICE not set [ 166.474292][ T7264] rust_binder: 139: no such ref 2 [ 166.475486][ T6375] total_rss 155648 [ 166.481180][ T7264] rust_binder: Write failure EINVAL in pid:139 [ 166.486081][ T6375] total_rss_huge 0 [ 166.489209][ T330] usb 1-1: Using ep0 maxpacket: 32 [ 166.491266][ T330] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1024 [ 166.504918][ T6375] total_shmem 314302464 [ 166.505262][ T330] usb 1-1: config 1 interface 0 altsetting 8 endpoint 0x82 has invalid wMaxPacketSize 0 [ 166.534262][ T6375] total_mapped_file 0 [ 166.540625][ T6375] total_dirty 0 [ 166.544248][ T6375] total_writeback 0 [ 166.544407][ T330] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 0 [ 166.558801][ T6375] total_workingset_refault_anon 39 [ 166.559399][ T330] usb 1-1: config 1 interface 0 has no altsetting 0 [ 166.564116][ T7268] rust_binder: Write failure EFAULT in pid:142 [ 166.574014][ T6375] total_workingset_refault_file 5991 [ 166.578722][ T7268] cannot load conntrack support for proto=3 [ 166.581139][ T6375] total_swap 127934464 [ 166.596920][ T330] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 166.606874][ T330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.615282][ T330] usb 1-1: Product: О [ 166.619762][ T330] usb 1-1: Manufacturer: ␉ [ 166.624562][ T330] usb 1-1: SerialNumber: ద [ 166.629366][ T6375] total_swapcached 36864 [ 166.633689][ T6375] total_pgpgin 233106 [ 166.638920][ T7245] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 166.647179][ T6375] total_pgpgout 156841 [ 166.653359][ T6375] total_pgfault 109458 [ 166.658465][ T6375] total_pgmajfault 143 [ 166.662716][ T6375] total_inactive_anon 293019648 [ 166.667786][ T6375] total_active_anon 21401600 [ 166.672550][ T6375] total_inactive_file 0 [ 166.676860][ T6375] total_active_file 4096 [ 166.681481][ T6375] total_unevictable 0 [ 166.685785][ T6375] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1982,pid=6384,uid=0 [ 166.701113][ T6375] Memory cgroup out of memory: Killed process 6384 (syz.3.1982) total-vm:90036kB, anon-rss:1020kB, file-rss:53628kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:0 [ 166.826535][ T6383] syz.3.1982 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 166.874699][ T7279] 9pnet_fd: Insufficient options for proto=fd [ 166.898700][ T6383] CPU: 1 UID: 0 PID: 6383 Comm: syz.3.1982 Not tainted syzkaller #0 6e508aa732f414f9d300b832ff15c50b3cf7cfdc [ 166.898740][ T6383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 166.898755][ T6383] Call Trace: [ 166.898764][ T6383] [ 166.898773][ T6383] __dump_stack+0x21/0x30 [ 166.898812][ T6383] dump_stack_lvl+0x10c/0x190 [ 166.898841][ T6383] ? __cfi_dump_stack_lvl+0x10/0x10 [ 166.898870][ T6383] ? ___ratelimit+0x3f7/0x5a0 [ 166.898892][ T6383] dump_stack+0x19/0x20 [ 166.898921][ T6383] dump_header+0xd7/0x490 [ 166.898943][ T6383] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 166.898973][ T6383] oom_kill_process+0x4c0/0x7e0 [ 166.899004][ T6383] ? sched_clock_cpu+0x75/0x400 [ 166.899033][ T6383] out_of_memory+0x7ee/0xbd0 [ 166.899060][ T6383] ? __cfi_out_of_memory+0x10/0x10 [ 166.899095][ T6383] ? mutex_lock_killable+0x92/0x1c0 [ 166.899120][ T6383] ? __cfi_mutex_lock_killable+0x10/0x10 [ 166.899154][ T6383] mem_cgroup_out_of_memory+0x279/0x350 [ 166.899177][ T6383] ? drain_obj_stock+0xed0/0xed0 [ 166.899200][ T6383] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 166.899222][ T6383] try_charge_memcg+0x8f7/0xde0 [ 166.899252][ T6383] ? gfp_to_alloc_flags_cma+0x90/0x1c0 [ 166.899292][ T6383] ? __cfi_try_charge_memcg+0x10/0x10 [ 166.899324][ T6383] ? __alloc_pages_noprof+0x31f/0x7b0 [ 166.899353][ T6383] __mem_cgroup_charge+0xf6/0x410 [ 166.899385][ T6383] ? filemap_get_entry+0x3fb/0x460 [ 166.899414][ T6383] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 166.899448][ T6383] filemap_add_folio+0x57/0x2d0 [ 166.899473][ T6383] __filemap_get_folio+0x597/0x9d0 [ 166.899502][ T6383] ? __cfi___filemap_get_folio+0x10/0x10 [ 166.899531][ T6383] ? filemap_fault_recheck_pte_none+0x78/0x250 [ 166.899562][ T6383] filemap_fault+0xb41/0x16b0 [ 166.899595][ T6383] ? __cfi__raw_spin_lock+0x10/0x10 [ 166.899626][ T6383] ? __cfi_filemap_fault+0x10/0x10 [ 166.899653][ T6383] ? inode_add_bytes+0x110/0x160 [ 166.899680][ T6383] ? __cfi_filemap_map_pages+0x10/0x10 [ 166.899712][ T6383] ? __cfi_lru_add+0x10/0x10 [ 166.899737][ T6383] ? folio_rotate_reclaimable+0x130/0x130 [ 166.899763][ T6383] do_pte_missing+0x298f/0x4240 [ 166.899792][ T6383] ? shmem_alloc_and_add_folio+0xcf6/0x1050 [ 166.899818][ T6383] ? pte_marker_clear+0x1b0/0x1b0 [ 166.899844][ T6383] ? put_swap_device+0x130/0x130 [ 166.899868][ T6383] ? __pte_offset_map+0x1b0/0x230 [ 166.899899][ T6383] ? pte_offset_map_rw_nolock+0xba/0x110 [ 166.899930][ T6383] handle_mm_fault+0x1166/0x1b90 [ 166.899953][ T6383] ? __kasan_check_write+0x18/0x20 [ 166.899993][ T6383] ? __cfi_handle_mm_fault+0x10/0x10 [ 166.900017][ T6383] ? follow_page_pte+0x2bd/0xb90 [ 166.900045][ T6383] ? gup_must_unshare+0x1e0/0x1e0 [ 166.900073][ T6383] ? vma_is_secretmem+0x11/0x50 [ 166.900103][ T6383] __get_user_pages+0x1169/0x22d0 [ 166.900129][ T6383] ? __kasan_check_write+0x18/0x20 [ 166.900169][ T6383] ? populate_vma_page_range+0x230/0x230 [ 166.900196][ T6383] ? __kernel_write_iter+0x65e/0x830 [ 166.900218][ T6383] get_dump_page+0x107/0x220 [ 166.900245][ T6383] ? __cfi_get_dump_page+0x10/0x10 [ 166.900271][ T6383] ? __asan_memset+0x39/0x50 [ 166.900303][ T6383] dump_user_range+0x181/0xdf0 [ 166.900331][ T6383] ? __cfi_dump_emit+0x10/0x10 [ 166.900364][ T6383] ? __cfi_dump_user_range+0x10/0x10 [ 166.900385][ T6383] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 166.900418][ T6383] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 166.900451][ T6383] elf_core_dump+0x2cd9/0x3810 [ 166.900481][ T6383] ? __cfi_elf_core_dump+0x10/0x10 [ 166.900515][ T6383] ? dump_interrupted+0xf0/0xf0 [ 166.900547][ T6383] ? filp_open+0x182/0x1d0 [ 166.900575][ T6383] ? 0xffffffffff600000 [ 166.900595][ T6383] do_coredump+0x1bf7/0x2bd0 [ 166.900630][ T6383] ? __cfi_do_coredump+0x10/0x10 [ 166.900660][ T6383] ? asm_exc_general_protection+0x2b/0x30 [ 166.900694][ T6383] ? __kasan_slab_free+0x6a/0x80 [ 166.900718][ T6383] ? kmem_cache_free+0x1c1/0x510 [ 166.900750][ T6383] ? get_signal+0xa75/0x14f0 [ 166.900776][ T6383] get_signal+0x11fd/0x14f0 [ 166.900807][ T6383] arch_do_signal_or_restart+0x96/0x720 [ 166.900841][ T6383] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 166.900876][ T6383] ? fixup_iopl_exception+0xdd/0x2e0 [ 166.900911][ T6383] irqentry_exit_to_user_mode+0x4e/0xb0 [ 166.900938][ T6383] irqentry_exit+0x16/0x60 [ 166.900961][ T6383] exc_general_protection+0x15a/0x1f0 [ 166.900982][ T6383] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 166.901013][ T6383] asm_exc_general_protection+0x2b/0x30 [ 166.901037][ T6383] RIP: 0033:0x7fa6f1b8ebf1 [ 166.901056][ T6383] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 166.901077][ T6383] RSP: 002b:0000200000000120 EFLAGS: 00010217 [ 166.901099][ T6383] RAX: 0000000000000000 RBX: 00007fa6f1dc5fa0 RCX: 00007fa6f1b8ebe9 [ 166.901122][ T6383] RDX: 0000200000000140 RSI: 0000200000000120 RDI: 0000000000000080 [ 166.901143][ T6383] RBP: 00007fa6f1c11e19 R08: 00002000000001c0 R09: 00002000000001c0 [ 166.901160][ T6383] R10: 0000200000000180 R11: 0000000000000202 R12: 0000000000000000 [ 166.901174][ T6383] R13: 00007fa6f1dc6038 R14: 00007fa6f1dc5fa0 R15: 00007fff81cdbb28 [ 166.901194][ T6383] [ 166.901222][ T6383] memory: usage 300012kB, limit 307200kB, failcnt 36520 [ 167.238691][ T7245] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.241560][ T6383] memory+swap: usage 400788kB, limit 9007199254740988kB, failcnt 0 [ 167.293228][ T7281] tipc: Started in network mode [ 167.293265][ T7281] tipc: Node identity a69ed8c0a689, cluster identity 4711 [ 167.293373][ T7281] tipc: Enabled bearer , priority 0 [ 167.305349][ T36] audit: type=1400 audit(7044526640.486:28939): avc: denied { read append } for pid=7280 comm="syz.1.2153" name="usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 167.310281][ T6383] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 167.346508][ T36] audit: type=1400 audit(7044526640.486:28940): avc: denied { open } for pid=7280 comm="syz.1.2153" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 167.347543][ T6383] Memory cgroup stats for [ 167.356371][ T36] audit: type=1400 audit(7044526640.506:28941): avc: denied { ioctl } for pid=7280 comm="syz.1.2153" path="/dev/usbmon0" dev="devtmpfs" ino=90 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 167.371970][ T6383] /syz3: [ 167.603704][ T6383] cache 302669824 [ 167.637521][ T6383] rss 61440 [ 167.640728][ T6383] rss_huge 0 [ 167.643988][ T6383] shmem 298385408 [ 167.687490][ T6383] mapped_file 4255744 [ 167.691566][ T6383] dirty 0 [ 167.694550][ T6383] writeback 0 [ 167.709346][ T7245] fuse: Bad value for 'fd' [ 167.737561][ T6383] workingset_refault_anon 41 [ 167.742441][ T6383] workingset_refault_file 7252 [ 167.770584][ T6383] swap 127741952 [ 167.774228][ T6383] swapcached 249856 [ 167.788168][ T7297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2157'. [ 167.788893][ T6383] pgpgin 240497 [ 167.805441][ T7280] tipc: Disabling bearer [ 167.814586][ T330] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 8 proto 2 vid 0x0525 pid 0xA4A8 [ 167.818122][ T6383] pgpgout 167045 [ 167.829472][ T6383] pgfault 109769 [ 167.833154][ T6383] pgmajfault 159 [ 167.847641][ T330] usb 1-1: USB disconnect, device number 6 [ 167.853250][ T6383] inactive_anon 84922368 [ 167.862049][ T6383] active_anon 213684224 [ 167.866471][ T6383] inactive_file 0 [ 167.867778][ T330] usblp0: removed [ 167.872156][ T6383] active_file 4284416 [ 167.878132][ T6383] unevictable 0 [ 167.881977][ T6383] hierarchical_memory_limit 314572800 [ 167.888588][ T6383] hierarchical_memsw_limit 9223372036854771712 [ 167.895432][ T6383] total_cache 302669824 [ 167.906597][ T6383] total_rss 61440 [ 167.910552][ T6383] total_rss_huge 0 [ 167.914306][ T6383] total_shmem 298385408 [ 167.920330][ T6383] total_mapped_file 4255744 [ 167.925258][ T6383] total_dirty 0 [ 167.925549][ T7300] rust_binder: 7299 RLIMIT_NICE not set [ 167.929229][ T7300] rust_binder: 149: no such ref 2 [ 167.929539][ T6383] total_writeback 0 [ 167.934986][ T7300] rust_binder: Write failure EINVAL in pid:149 [ 167.940323][ T6383] total_workingset_refault_anon 41 [ 167.955817][ T6383] total_workingset_refault_file 7252 [ 167.961633][ T6383] total_swap 127741952 [ 167.965902][ T6383] total_swapcached 249856 [ 167.976042][ T6383] total_pgpgin 240497 [ 167.983916][ T6383] total_pgpgout 167045 [ 167.993931][ T6383] total_pgfault 109769 [ 168.002724][ T6383] total_pgmajfault 159 [ 168.007833][ T6383] total_inactive_anon 84922368 [ 168.013203][ T6383] total_active_anon 213684224 [ 168.022939][ T6383] total_inactive_file 0 [ 168.027283][ T6383] total_active_file 4284416 [ 168.031925][ T6383] total_unevictable 0 [ 168.035979][ T6383] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1982,pid=6377,uid=0 [ 168.051434][ T6383] Memory cgroup out of memory: Killed process 6377 (syz.3.1982) total-vm:90036kB, anon-rss:1148kB, file-rss:53616kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:0 [ 168.122379][ T291] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 168.167527][ T291] CPU: 1 UID: 0 PID: 291 Comm: syz-executor Not tainted syzkaller #0 6e508aa732f414f9d300b832ff15c50b3cf7cfdc [ 168.167571][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 168.167585][ T291] Call Trace: [ 168.167593][ T291] [ 168.167604][ T291] __dump_stack+0x21/0x30 [ 168.167643][ T291] dump_stack_lvl+0x10c/0x190 [ 168.167671][ T291] ? __cfi_dump_stack_lvl+0x10/0x10 [ 168.167700][ T291] ? ___ratelimit+0x3f7/0x5a0 [ 168.167724][ T291] dump_stack+0x19/0x20 [ 168.167752][ T291] dump_header+0xd7/0x490 [ 168.167775][ T291] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 168.167804][ T291] oom_kill_process+0x4c0/0x7e0 [ 168.167830][ T291] ? sched_clock_cpu+0x75/0x400 [ 168.167862][ T291] out_of_memory+0x7ee/0xbd0 [ 168.167887][ T291] ? __cfi_out_of_memory+0x10/0x10 [ 168.167912][ T291] ? mutex_lock_killable+0x104/0x1c0 [ 168.167946][ T291] ? __cfi_mutex_lock_killable+0x10/0x10 [ 168.167974][ T291] mem_cgroup_out_of_memory+0x279/0x350 [ 168.167996][ T291] ? drain_obj_stock+0xed0/0xed0 [ 168.168020][ T291] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 168.168042][ T291] try_charge_memcg+0x8f7/0xde0 [ 168.168071][ T291] ? gfp_to_alloc_flags_cma+0x90/0x1c0 [ 168.168106][ T291] ? __cfi_try_charge_memcg+0x10/0x10 [ 168.168137][ T291] ? __alloc_pages_noprof+0x31f/0x7b0 [ 168.168167][ T291] __mem_cgroup_charge+0xf6/0x410 [ 168.168201][ T291] ? filemap_get_entry+0x3fb/0x460 [ 168.168228][ T291] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 168.168264][ T291] filemap_add_folio+0x57/0x2d0 [ 168.168290][ T291] __filemap_get_folio+0x597/0x9d0 [ 168.168319][ T291] ? __cfi___filemap_get_folio+0x10/0x10 [ 168.168347][ T291] ? filemap_fault_recheck_pte_none+0x78/0x250 [ 168.168377][ T291] filemap_fault+0xb41/0x16b0 [ 168.168407][ T291] ? call_rcu_hurry+0x30/0x30 [ 168.168428][ T291] ? __cfi_filemap_fault+0x10/0x10 [ 168.168455][ T291] ? __cfi_filemap_map_pages+0x10/0x10 [ 168.168487][ T291] do_pte_missing+0x298f/0x4240 [ 168.168517][ T291] ? pte_marker_clear+0x1b0/0x1b0 [ 168.168542][ T291] ? __kasan_check_write+0x18/0x20 [ 168.168573][ T291] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 168.168604][ T291] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 168.168637][ T291] ? __pte_offset_map+0x1b0/0x230 [ 168.168667][ T291] ? pte_offset_map_rw_nolock+0xba/0x110 [ 168.168699][ T291] handle_mm_fault+0x1166/0x1b90 [ 168.168725][ T291] ? __cfi_handle_mm_fault+0x10/0x10 [ 168.168747][ T291] ? lock_vma_under_rcu+0x49d/0x530 [ 168.168775][ T291] ? __cfi___x64_sys_wait4+0x10/0x10 [ 168.168806][ T291] do_user_addr_fault+0x96c/0x1200 [ 168.168845][ T291] exc_page_fault+0x59/0xc0 [ 168.168871][ T291] asm_exc_page_fault+0x2b/0x30 [ 168.168895][ T291] RIP: 0033:0x7fa6f1a65bf4 [ 168.168916][ T291] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 a8 fb e8 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d b9 fa e8 00 48 01 d1 [ 168.168941][ T291] RSP: 002b:00007fff81cdbeb0 EFLAGS: 00010202 [ 168.168963][ T291] RAX: 0000001b2eb24000 RBX: 00000000000006c9 RCX: 0000000000028870 [ 168.168979][ T291] RDX: 000000000ca7de50 RSI: 00007fff81cdbf40 RDI: 0000000000000001 [ 168.168994][ T291] RBP: 00007fff81cdbeec R08: 0000000030471e01 R09: 7fffffffffffffff [ 168.169010][ T291] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 168.169024][ T291] R13: 00000000000927c0 R14: 00000000000283b6 R15: 00007fff81cdbf40 [ 168.169042][ T291] [ 168.169051][ T291] memory: usage 304024kB, limit 307200kB, failcnt 37690 [ 168.277534][ T1447] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 168.376509][ T291] memory+swap: usage 395244kB, limit 9007199254740988kB, failcnt 0 [ 168.701737][ T7308] netlink: 'syz.2.2162': attribute type 4 has an invalid length. [ 168.705170][ T291] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 168.716915][ T291] Memory cgroup stats for /syz3: [ 168.717070][ T291] cache 311975936 [ 168.727080][ T291] rss 122880 [ 168.730577][ T291] rss_huge 0 [ 168.733816][ T291] shmem 311816192 [ 168.737942][ T291] mapped_file 102400 [ 168.741957][ T291] dirty 0 [ 168.744933][ T291] writeback 0 [ 168.748552][ T291] workingset_refault_anon 57 [ 168.753536][ T291] workingset_refault_file 8753 [ 168.761232][ T291] swap 125452288 [ 168.764901][ T291] swapcached 2543616 [ 168.768966][ T7316] overlayfs: failed to clone upperpath [ 168.774782][ T291] pgpgin 255562 [ 168.787478][ T291] pgpgout 179273 [ 168.791086][ T291] pgfault 110103 [ 168.794837][ T291] pgmajfault 186 [ 168.798491][ T291] inactive_anon 68268032 [ 168.802842][ T291] active_anon 246136832 [ 168.807323][ T291] inactive_file 0 [ 168.811546][ T291] active_file 4096 [ 168.815643][ T291] unevictable 0 [ 168.819354][ T291] hierarchical_memory_limit 314572800 [ 168.825033][ T291] hierarchical_memsw_limit 9223372036854771712 [ 168.831596][ T291] total_cache 311975936 [ 168.835837][ T291] total_rss 122880 [ 168.839962][ T291] total_rss_huge 0 [ 168.844014][ T291] total_shmem 311816192 [ 168.848272][ T291] total_mapped_file 102400 [ 168.852864][ T291] total_dirty 0 [ 168.856564][ T291] total_writeback 0 [ 168.860749][ T291] total_workingset_refault_anon 57 [ 168.866368][ T291] total_workingset_refault_file 8753 [ 168.872042][ T291] total_swap 125452288 [ 168.876251][ T291] total_swapcached 2543616 [ 168.881388][ T291] total_pgpgin 255562 [ 168.885663][ T291] total_pgpgout 179273 [ 168.889909][ T1447] usb 2-1: unable to get BOS descriptor or descriptor too short [ 168.897689][ T291] total_pgfault 110103 [ 168.901912][ T291] total_pgmajfault 186 [ 168.906203][ T291] total_inactive_anon 68268032 [ 168.911141][ T291] total_active_anon 246136832 [ 168.916020][ T1447] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 168.926182][ T1447] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 168.936409][ T1447] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.949455][ T291] total_inactive_file 0 [ 168.953632][ T291] total_active_file 4096 [ 168.964112][ T291] total_unevictable 0 [ 168.968344][ T291] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1982,pid=6372,uid=0 [ 168.983956][ T291] Memory cgroup out of memory: Killed process 6372 (syz.3.1982) total-vm:90036kB, anon-rss:1148kB, file-rss:53612kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:0 [ 169.007834][ T1447] usb 2-1: string descriptor 0 read error: -22 [ 169.014349][ T1447] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 169.044526][ T1447] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.115037][ T291] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 169.127353][ T7302] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 169.130084][ T291] CPU: 0 UID: 0 PID: 291 Comm: syz-executor Not tainted syzkaller #0 6e508aa732f414f9d300b832ff15c50b3cf7cfdc [ 169.130125][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 169.130144][ T291] Call Trace: [ 169.130152][ T291] [ 169.130163][ T291] __dump_stack+0x21/0x30 [ 169.130212][ T291] dump_stack_lvl+0x10c/0x190 [ 169.130244][ T291] ? __cfi_dump_stack_lvl+0x10/0x10 [ 169.130278][ T291] ? ___ratelimit+0x3f7/0x5a0 [ 169.130305][ T291] dump_stack+0x19/0x20 [ 169.130338][ T291] dump_header+0xd7/0x490 [ 169.130363][ T291] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 169.130399][ T291] oom_kill_process+0x4c0/0x7e0 [ 169.130429][ T291] ? sched_clock_cpu+0x75/0x400 [ 169.130465][ T291] out_of_memory+0x7ee/0xbd0 [ 169.130493][ T291] ? __cfi_out_of_memory+0x10/0x10 [ 169.130521][ T291] ? mutex_lock_killable+0x92/0x1c0 [ 169.130549][ T291] ? __cfi_mutex_lock_killable+0x10/0x10 [ 169.130578][ T291] mem_cgroup_out_of_memory+0x279/0x350 [ 169.130603][ T291] ? drain_obj_stock+0xed0/0xed0 [ 169.130629][ T291] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 169.130652][ T291] try_charge_memcg+0x8f7/0xde0 [ 169.130683][ T291] ? gfp_to_alloc_flags_cma+0x90/0x1c0 [ 169.130722][ T291] ? __cfi_try_charge_memcg+0x10/0x10 [ 169.130755][ T291] ? __alloc_pages_noprof+0x31f/0x7b0 [ 169.130789][ T291] __mem_cgroup_charge+0xf6/0x410 [ 169.130823][ T291] ? filemap_get_entry+0x3fb/0x460 [ 169.130854][ T291] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 169.130892][ T291] filemap_add_folio+0x57/0x2d0 [ 169.130929][ T291] __filemap_get_folio+0x597/0x9d0 [ 169.130960][ T291] ? __cfi___filemap_get_folio+0x10/0x10 [ 169.130991][ T291] ? filemap_fault_recheck_pte_none+0x78/0x250 [ 169.131025][ T291] filemap_fault+0xb41/0x16b0 [ 169.131057][ T291] ? call_rcu_hurry+0x30/0x30 [ 169.131082][ T291] ? __cfi_filemap_fault+0x10/0x10 [ 169.131113][ T291] ? __cfi_filemap_map_pages+0x10/0x10 [ 169.131150][ T291] do_pte_missing+0x298f/0x4240 [ 169.131182][ T291] ? pte_marker_clear+0x1b0/0x1b0 [ 169.131210][ T291] ? __kasan_check_write+0x18/0x20 [ 169.131246][ T291] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 169.131280][ T291] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 169.131315][ T291] ? __pte_offset_map+0x1b0/0x230 [ 169.131350][ T291] ? pte_offset_map_rw_nolock+0xba/0x110 [ 169.131384][ T291] handle_mm_fault+0x1166/0x1b90 [ 169.131413][ T291] ? __cfi_handle_mm_fault+0x10/0x10 [ 169.131436][ T291] ? lock_vma_under_rcu+0x49d/0x530 [ 169.131466][ T291] ? __cfi___x64_sys_wait4+0x10/0x10 [ 169.131502][ T291] do_user_addr_fault+0x96c/0x1200 [ 169.131543][ T291] exc_page_fault+0x59/0xc0 [ 169.131571][ T291] asm_exc_page_fault+0x2b/0x30 [ 169.131600][ T291] RIP: 0033:0x7fa6f1a65bf4 [ 169.131621][ T291] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 a8 fb e8 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d b9 fa e8 00 48 01 d1 [ 169.131644][ T291] RSP: 002b:00007fff81cdbeb0 EFLAGS: 00010202 [ 169.131667][ T291] RAX: 0000001b2eb24000 RBX: 00000000000006c9 RCX: 0000000000028870 [ 169.131683][ T291] RDX: 000000000ca7de50 RSI: 00007fff81cdbf40 RDI: 0000000000000001 [ 169.131703][ T291] RBP: 00007fff81cdbeec R08: 0000000030471e01 R09: 7fffffffffffffff [ 169.131722][ T291] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 169.131738][ T291] R13: 00000000000927c0 R14: 00000000000283b6 R15: 00007fff81cdbf40 [ 169.131759][ T291] [ 169.131788][ T291] memory: usage 305912kB, limit 307200kB, failcnt 39728 [ 169.327620][ T7302] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 169.341491][ T291] memory+swap: usage 401636kB, limit 9007199254740988kB, failcnt 0 [ 169.498072][ T1447] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 169.605311][ T330] usb 2-1: USB disconnect, device number 10 [ 169.831058][ T291] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 169.857641][ T291] Memory cgroup stats for /syz3: [ 169.857801][ T291] cache 301916160 [ 169.866819][ T291] rss 77824 [ 169.887767][ T291] rss_huge 0 [ 169.891280][ T291] shmem 301912064 [ 169.894931][ T291] mapped_file 0 [ 169.957486][ T291] dirty 0 [ 169.960491][ T291] writeback 135168 [ 169.964247][ T291] workingset_refault_anon 77 [ 170.007530][ T291] workingset_refault_file 8753 [ 170.027657][ T291] swap 125382656 [ 170.031263][ T291] swapcached 233472 [ 170.035274][ T291] pgpgin 266745 [ 170.107521][ T291] pgpgout 193482 [ 170.117639][ T291] pgfault 110216 [ 170.122364][ T291] pgmajfault 204 [ 170.177573][ T291] inactive_anon 84185088 [ 170.181877][ T291] active_anon 217460736 [ 170.186072][ T291] inactive_file 0 [ 170.200064][ T7338] netlink: 'syz.1.2173': attribute type 4 has an invalid length. [ 170.267874][ T291] active_file 4096 [ 170.267998][ T7339] netlink: 'syz.1.2173': attribute type 4 has an invalid length. [ 170.271886][ T291] unevictable 0 [ 170.271898][ T291] hierarchical_memory_limit 314572800 [ 170.271908][ T291] hierarchical_memsw_limit 9223372036854771712 [ 170.271917][ T291] total_cache 301916160 [ 170.369601][ T291] total_rss 77824 [ 170.407509][ T291] total_rss_huge 0 [ 170.411434][ T291] total_shmem 301912064 [ 170.415618][ T291] total_mapped_file 0 [ 170.477502][ T291] total_dirty 0 [ 170.481817][ T291] total_writeback 135168 [ 170.486545][ T291] total_workingset_refault_anon 77 [ 170.557479][ T291] total_workingset_refault_file 8753 [ 170.562818][ T291] total_swap 125382656 [ 170.567003][ T291] total_swapcached 233472 [ 170.627481][ T291] total_pgpgin 266745 [ 170.631697][ T291] total_pgpgout 193482 [ 170.635880][ T291] total_pgfault 110216 [ 170.687496][ T31] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 170.695350][ T291] total_pgmajfault 204 [ 170.717478][ T291] total_inactive_anon 84185088 [ 170.722303][ T291] total_active_anon 217460736 [ 170.727027][ T291] total_inactive_file 0 [ 170.777540][ T291] total_active_file 4096 [ 170.781844][ T291] total_unevictable 0 [ 170.785868][ T291] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1982,pid=6373,uid=0 [ 170.867480][ T291] Memory cgroup out of memory: OOM victim 6373 (syz.3.1982) is already exiting. Skip killing the task [ 170.877503][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 170.927613][ T31] usb 2-1: config 1 has an invalid descriptor of length 226, skipping remainder of the config [ 170.971179][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 171.027505][ T31] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 171.038502][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.046727][ T31] usb 2-1: Product: syz [ 171.097134][ T31] usb 2-1: Manufacturer: syz [ 171.117146][ T31] usb 2-1: SerialNumber: syz [ 171.287713][ T7357] 9pnet_fd: Insufficient options for proto=fd [ 171.377640][ T31] usb 2-1: invalid UAC_HEADER (v1) [ 171.384696][ T31] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 171.428324][ T31] usb 2-1: USB disconnect, device number 11 [ 171.438314][ T5586] udevd[5586]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 171.827543][ T7381] rust_binder: 7380 RLIMIT_NICE not set [ 171.827591][ T7381] rust_binder: 89: no such ref 2 [ 171.839020][ T7381] rust_binder: Write failure EINVAL in pid:89 [ 171.954641][ T7390] rust_binder: Write failure EFAULT in pid:97 [ 172.301297][ T7408] netlink: 'syz.0.2193': attribute type 16 has an invalid length. [ 172.318539][ T7408] netlink: 'syz.0.2193': attribute type 2 has an invalid length. [ 172.326629][ T7408] netlink: 64086 bytes leftover after parsing attributes in process `syz.0.2193'. [ 172.353396][ T7408] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2193'. [ 172.684450][ T7432] syz.0.2200 (7432) used obsolete PPPIOCDETACH ioctl [ 172.841008][ T7437] syz.1.2201 (7437): attempted to duplicate a private mapping with mremap. This is not supported. [ 172.860724][ T7440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2202'. [ 172.877395][ T7440] rust_binder: Write failure EFAULT in pid:121 [ 172.974112][ T7446] rust_binder: Write failure EINVAL in pid:124 [ 173.059952][ T13] bridge_slave_1: left allmulticast mode [ 173.072203][ T13] bridge_slave_1: left promiscuous mode [ 173.078027][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.093103][ T13] bridge_slave_0: left allmulticast mode [ 173.107488][ T13] bridge_slave_0: left promiscuous mode [ 173.113184][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.160888][ T36] audit: type=1326 audit(7044526646.356:28942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7453 comm="syz.2.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3bb8ebe9 code=0x50000 [ 173.184629][ T36] audit: type=1326 audit(7044526646.356:28943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7453 comm="syz.2.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3bb8ebe9 code=0x50000 [ 173.215911][ T36] audit: type=1326 audit(7044526646.356:28944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7453 comm="syz.2.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3bb8ebe9 code=0x50000 [ 173.241124][ T36] audit: type=1326 audit(7044526646.356:28945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7453 comm="syz.2.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3bb8ebe9 code=0x50000 [ 173.267647][ T36] audit: type=1326 audit(7044526646.356:28946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7453 comm="syz.2.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3bb8ebe9 code=0x50000 [ 173.293889][ T36] audit: type=1326 audit(7044526646.356:28947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7453 comm="syz.2.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3bb8ebe9 code=0x50000 [ 173.317901][ T36] audit: type=1326 audit(7044526646.356:28948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7453 comm="syz.2.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3bb8ebe9 code=0x50000 [ 173.341911][ T36] audit: type=1326 audit(7044526646.356:28950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7453 comm="syz.2.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdb3bb8ebe9 code=0x50000 [ 173.347001][ T13] tipc: Left network mode [ 173.366228][ T36] audit: type=1326 audit(7044526646.356:28951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7453 comm="syz.2.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3bb8ebe9 code=0x50000 [ 173.393567][ T36] audit: type=1326 audit(7044526646.356:28952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7453 comm="syz.2.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3bb8ebe9 code=0x50000 [ 173.424510][ T13] veth1_macvtap: left promiscuous mode [ 173.430838][ T13] veth0_vlan: left promiscuous mode [ 173.533604][ T7457] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.552846][ T7457] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.563514][ T7457] bridge_slave_0: entered allmulticast mode [ 173.587816][ T7457] bridge_slave_0: entered promiscuous mode [ 173.594155][ T7470] 2N: renamed from vcan0 (while UP) [ 173.608387][ T7457] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.618876][ T7457] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.626018][ T7457] bridge_slave_1: entered allmulticast mode [ 173.637768][ T7457] bridge_slave_1: entered promiscuous mode [ 173.699956][ T7475] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2215'. [ 173.739725][ T7475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2215'. [ 173.902153][ T7457] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.909411][ T7457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.916846][ T7457] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.924061][ T7457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.047864][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.062503][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.090700][ T7476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2215'. [ 174.160332][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.167583][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.211305][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.218439][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.293545][ T7457] veth0_vlan: entered promiscuous mode [ 174.322623][ T7457] veth1_macvtap: entered promiscuous mode [ 181.128084][ T7499] usb usb6: usbfs: process 7499 (syz.4.2220) did not claim interface 0 before use [ 181.156211][ T7499] /dev/rnullb0: Can't open blockdev [ 181.192696][ T7511] rust_binder: Write failure EFAULT in pid:8 [ 181.299965][ T7531] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2233'. [ 181.414874][ T7557] cgroup: subsys name conflicts with all [ 181.423554][ T7558] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 181.430812][ T7558] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:130 [ 181.539553][ T7575] netlink: 'syz.3.2250': attribute type 7 has an invalid length. [ 181.556687][ T7575] netlink: 'syz.3.2250': attribute type 5 has an invalid length. [ 181.564637][ T7575] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2250'. [ 181.865717][ T36] kauditd_printk_skb: 49691 callbacks suppressed [ 181.865738][ T36] audit: type=1400 audit(7044526655.056:78643): avc: denied { watch watch_reads } for pid=7579 comm="syz.4.2252" path="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 181.923123][ T44] Bluetooth: hci0: Frame reassembly failed (-84) [ 182.046897][ T7592] netlink: 'syz.2.2257': attribute type 3 has an invalid length. [ 182.081035][ T36] audit: type=1326 audit(7044526655.276:78644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7598 comm="syz.2.2259" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdb3bb8ebe9 code=0x0 [ 183.064420][ T7620] rust_binder: Error while translating object. [ 183.064462][ T7620] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 183.070722][ T7620] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:136 [ 183.080615][ T7620] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 183.089891][ T7620] rust_binder: Error in use_page_slow: EBUSY [ 183.100287][ T7620] rust_binder: use_range failure EBUSY [ 183.106317][ T7620] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 183.111860][ T7620] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 183.119865][ T7620] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:136 [ 183.246410][ T7626] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551607) [ 183.255561][ T7626] rust_binder: Error while translating object. [ 183.267904][ T7626] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 183.274284][ T7626] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:141 [ 183.348881][ T7633] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 183.349723][ T7631] 9p filesystem being mounted at /472/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 183.359598][ T36] audit: type=1400 audit(7044526656.566:78645): avc: denied { write } for pid=7628 comm="syz.0.2269" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 183.499381][ T7657] netlink: 'syz.3.2280': attribute type 4 has an invalid length. [ 183.507337][ T7657] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.2280'. [ 183.558606][ T7662] 9pnet_fd: Insufficient options for proto=fd [ 183.597218][ T7669] /dev/loop0: Can't lookup blockdev [ 183.767224][ T7702] netlink: 'syz.2.2300': attribute type 29 has an invalid length. [ 183.810483][ T7708] netlink: 'syz.2.2303': attribute type 4 has an invalid length. [ 183.967528][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 183.988994][ T7727] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 183.989536][ T7727] rust_binder: 27: no such ref 0 [ 184.028319][ T36] audit: type=1400 audit(7044526657.226:78646): avc: denied { setopt } for pid=7728 comm="syz.4.2312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 184.198455][ T7740] tipc: Enabling of bearer rejected, failed to enable media [ 185.281845][ T7767] 9pnet_fd: Insufficient options for proto=fd [ 185.497282][ T7756] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 185.497389][ T7756] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 185.609893][ T7780] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 185.669288][ T7785] rust_binder: Error in use_page_slow: ESRCH [ 185.678758][ T7785] rust_binder: use_range failure ESRCH [ 185.684992][ T7785] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 185.707696][ T7785] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 185.726097][ T7785] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:45 [ 185.752060][ T7794] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 185.767227][ T7794] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 185.774076][ T7794] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:151 [ 185.808733][ T7805] netlink: 'syz.3.2339': attribute type 16 has an invalid length. [ 185.828006][ T7805] netlink: 'syz.3.2339': attribute type 3 has an invalid length. [ 185.835950][ T7805] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.2339'. [ 185.900607][ T36] audit: type=1400 audit(7044526659.096:78647): avc: denied { create } for pid=7820 comm="syz.2.2345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 185.901706][ T7823] rust_binder: Error while translating object. [ 185.923798][ T7823] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 185.930676][ T7823] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:159 [ 185.984502][ T36] audit: type=1326 audit(7044526659.176:78648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7830 comm="syz.2.2348" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb3bb8ebe9 code=0x0 [ 186.011798][ T7839] rust_binder: Write failure EINVAL in pid:165 [ 186.237263][ T36] audit: type=1400 audit(7044526659.428:78649): avc: denied { getopt } for pid=7846 comm="syz.0.2352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 187.571976][ T7906] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.577407][ T7906] rust_binder: Error while translating object. [ 187.584451][ T7906] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 187.590883][ T7906] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:57 [ 187.666420][ T7925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2375'. [ 187.773644][ T7942] overlayfs: conflicting options: userxattr,verity=require [ 187.773644][ T7941] overlayfs: conflicting options: userxattr,verity=require [ 187.882737][ T36] audit: type=1400 audit(7044526661.078:78650): avc: denied { lock } for pid=7948 comm="syz.0.2382" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 187.952256][ T7960] 9pnet_fd: Insufficient options for proto=fd [ 188.157493][ T1447] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 188.307507][ T1447] usb 1-1: Using ep0 maxpacket: 8 [ 188.313991][ T1447] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 188.322798][ T1447] usb 1-1: config 179 has no interface number 0 [ 188.329137][ T1447] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 188.340610][ T1447] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 188.352944][ T1447] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 188.371780][ T1447] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 188.385856][ T1447] usb 1-1: config 179 interface 65 has no altsetting 0 [ 188.392797][ T1447] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 188.402001][ T1447] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.432417][ T1447] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input21 [ 188.487638][ T94] input input21: unable to receive magic message: -110 [ 188.505678][ T94] input input21: unable to receive magic message: -32 [ 188.527987][ T94] input input21: unable to receive magic message: -32 [ 188.562323][ T7975] /dev/rnullb0: Can't open blockdev [ 188.632668][ T1447] usb 1-1: USB disconnect, device number 7 [ 188.638615][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 188.647857][ T1447] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 188.673905][ T7990] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 188.884551][ T8019] tmpfs: Unknown parameter 'nr_' [ 189.288490][ T8035] rust_binder: 8034 RLIMIT_NICE not set [ 189.288808][ T8036] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 189.299264][ T31] rust_binder: 8033: removing orphan mapping 0:4248 [ 189.312611][ T8039] binder: Bad value for 'stats' [ 189.413415][ T8053] 9pnet_fd: Insufficient options for proto=fd [ 189.473609][ T8061] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 189.487096][ T8063] netlink: 'syz.0.2418': attribute type 11 has an invalid length. [ 189.504278][ T8063] /dev/nbd0: Can't lookup blockdev [ 189.523340][ T36] audit: type=1326 audit(7044526662.718:78651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8066 comm="syz.4.2419" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbeff38ebe9 code=0x0 [ 190.323055][ T36] audit: type=1400 audit(7044526663.518:78652): avc: denied { getopt } for pid=8083 comm="syz.3.2424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 190.345720][ T8087] syz.2.2425 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 190.364066][ T8087] /dev/loop0: Can't lookup blockdev [ 190.388580][ T8090] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 190.396449][ T8091] tipc: Can't bind to reserved service type 1 [ 190.478252][ T8102] 9pnet_fd: Insufficient options for proto=fd [ 190.589424][ T8120] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 190.589460][ T8120] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 190.596397][ T8120] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 190.603182][ T8120] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 190.609890][ T8120] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 190.616738][ T8120] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 190.625634][ T8120] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 190.648593][ T36] audit: type=1400 audit(7044526663.848:78653): avc: denied { setattr } for pid=8126 comm="syz.0.2438" name="ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 190.687260][ T36] audit: type=1400 audit(7044526663.878:78654): avc: denied { execute_no_trans } for pid=8128 comm="syz.0.2439" path="/75/file1" dev="tmpfs" ino=415 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 190.734364][ T8134] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 190.770372][ T8139] $: renamed from bridge_slave_0 (while UP) [ 191.577518][ T63] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 191.637482][ T8172] binder: Unknown parameter 'D`< a1' [ 191.660698][ T8174] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 191.660736][ T8174] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:276 [ 191.744980][ T63] usb 5-1: no configurations [ 191.759853][ T63] usb 5-1: can't read configurations, error -22 [ 191.887502][ T63] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 191.909796][ T8213] 9pnet_fd: Insufficient options for proto=fd [ 192.008841][ T36] audit: type=1400 audit(7044526665.208:78655): avc: denied { audit_read } for pid=8221 comm="syz.3.2469" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 192.047844][ T63] usb 5-1: no configurations [ 192.052596][ T63] usb 5-1: can't read configurations, error -22 [ 192.059037][ T63] usb usb5-port1: attempt power cycle [ 192.397542][ T63] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 192.418604][ T63] usb 5-1: no configurations [ 192.423325][ T63] usb 5-1: can't read configurations, error -22 [ 192.557503][ T63] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 192.578263][ T63] usb 5-1: no configurations [ 192.582914][ T63] usb 5-1: can't read configurations, error -22 [ 192.589513][ T63] usb usb5-port1: unable to enumerate USB device [ 192.711057][ T8235] 9pnet_fd: Insufficient options for proto=fd [ 192.722385][ T8235] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 192.729704][ T8235] rust_binder: Write failure EINVAL in pid:291 [ 192.938731][ T8264] /dev/loop0: Can't lookup blockdev [ 193.927492][ T31] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 194.078942][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 194.085451][ T8295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2496'. [ 194.095439][ T8295] sit0: entered promiscuous mode [ 194.101061][ T8295] netlink: 'syz.2.2496': attribute type 1 has an invalid length. [ 194.109516][ T8295] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2496'. [ 194.118766][ T31] usb 1-1: config 1 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.129654][ T8295] 9pnet_fd: p9_fd_create_tcp (8295): problem connecting socket to 127.0.0.1 [ 194.138424][ T31] usb 1-1: config 1 interface 0 altsetting 32 endpoint 0x82 has invalid wMaxPacketSize 0 [ 194.149360][ T8301] 9pnet_fd: Insufficient options for proto=fd [ 194.161633][ T31] usb 1-1: config 1 interface 0 altsetting 32 bulk endpoint 0x82 has invalid maxpacket 0 [ 194.171818][ T31] usb 1-1: config 1 interface 0 altsetting 32 endpoint 0x3 has invalid wMaxPacketSize 0 [ 194.184485][ T31] usb 1-1: config 1 interface 0 altsetting 32 bulk endpoint 0x3 has invalid maxpacket 0 [ 194.201495][ T31] usb 1-1: config 1 interface 0 has no altsetting 0 [ 194.209200][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 194.228869][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 194.237053][ T31] usb 1-1: SerialNumber: syz [ 194.451499][ T8291] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 194.452269][ T31] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 194.468251][ T31] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 194.477623][ T31] usb 1-1: USB disconnect, device number 8 [ 194.657502][ T330] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 194.807524][ T330] usb 5-1: Using ep0 maxpacket: 16 [ 194.813969][ T330] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 194.822063][ T330] usb 5-1: config 0 has no interface number 0 [ 194.828207][ T330] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.839380][ T330] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.849266][ T330] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 194.858338][ T330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.867168][ T330] usb 5-1: config 0 descriptor?? [ 194.876575][ T8338] veth1: entered allmulticast mode [ 194.973039][ T8347] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 194.973078][ T8347] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:306 [ 195.081608][ T8360] fuse: blksize only supported for fuseblk [ 195.189902][ T8359] rust_binder: 8354 RLIMIT_NICE not set [ 195.189940][ T8359] rust_binder: 309: no such ref 2 [ 195.216177][ T8363] netlink: 'syz.0.2524': attribute type 2 has an invalid length. [ 195.482301][ T330] input: HID 28bd:0071 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.000C/input/input22 [ 195.505875][ T330] input: HID 28bd:0071 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.000C/input/input23 [ 195.519868][ T330] uclogic 0003:28BD:0071.000C: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.4-1/input1 [ 195.678209][ T8325] rust_binder: Error while translating object. [ 195.678254][ T8325] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 195.684527][ T8325] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:104 [ 195.694836][ T330] usb 5-1: USB disconnect, device number 7 [ 195.708669][ T8337] veth1: left allmulticast mode [ 195.715043][ T36] audit: type=1326 audit(7044526668.908:78656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8337 comm="syz.2.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3bb8ebe9 code=0x7fc00000 [ 195.738916][ T36] audit: type=1326 audit(7044526668.908:78657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8337 comm="syz.2.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdb3bb8ebe9 code=0x7fc00000 [ 195.763863][ T36] audit: type=1326 audit(7044526668.908:78658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8337 comm="syz.2.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3bb8ebe9 code=0x7fc00000 [ 195.787821][ T36] audit: type=1326 audit(7044526668.908:78659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8337 comm="syz.2.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3bb8ebe9 code=0x7fc00000 [ 195.811679][ T36] audit: type=1326 audit(7044526668.908:78660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8337 comm="syz.2.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3bb8ebe9 code=0x7fc00000 [ 195.835518][ T36] audit: type=1326 audit(7044526668.908:78661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8337 comm="syz.2.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3bb8ebe9 code=0x7fc00000 [ 195.859324][ T36] audit: type=1326 audit(7044526668.908:78662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8337 comm="syz.2.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3bb8ebe9 code=0x7fc00000 [ 195.883076][ T36] audit: type=1326 audit(7044526668.908:78663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8337 comm="syz.2.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3bb8ebe9 code=0x7fc00000 [ 195.906764][ T36] audit: type=1326 audit(7044526668.908:78664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8337 comm="syz.2.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3bb8ebe9 code=0x7fc00000 [ 195.930689][ T36] audit: type=1326 audit(7044526668.908:78665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8337 comm="syz.2.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3bb8ebe9 code=0x7fc00000 [ 196.431508][ T1447] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 196.588607][ T1447] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 196.599716][ T1447] usb 1-1: config 0 interface 0 has no altsetting 0 [ 196.606380][ T1447] usb 1-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 196.615676][ T1447] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.624606][ T1447] usb 1-1: config 0 descriptor?? [ 196.629950][ T8411] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 196.981258][ T8430] netlink: 'syz.3.2548': attribute type 16 has an invalid length. [ 197.042104][ T1447] lenovo 0003:17EF:60A4.000D: hidraw0: USB HID v1.01 Device [HID 17ef:60a4] on usb-dummy_hcd.0-1/input0 [ 197.127112][ T8456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.144852][ T8456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.357494][ T330] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 197.487524][ T330] usb 5-1: device descriptor read/64, error -71 [ 197.737520][ T330] usb 5-1: device descriptor read/64, error -71 [ 197.748039][ T1447] usb 1-1: USB disconnect, device number 9 [ 197.904742][ T8488] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.911855][ T8488] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.927546][ T8488] bridge_slave_0: entered allmulticast mode [ 197.934100][ T8488] bridge_slave_0: entered promiscuous mode [ 197.941149][ T8488] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.948427][ T8488] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.955539][ T8488] bridge_slave_1: entered allmulticast mode [ 197.962451][ T8488] bridge_slave_1: entered promiscuous mode [ 197.968728][ T13] bridge_slave_1: left allmulticast mode [ 197.974483][ T13] bridge_slave_1: left promiscuous mode [ 197.980592][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.988254][ T13] $: left allmulticast mode [ 197.993410][ T13] $: left promiscuous mode [ 197.997531][ T330] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 197.998623][ T13] bridge0: port 1($) entered disabled state [ 198.137509][ T330] usb 5-1: device descriptor read/64, error -71 [ 198.162364][ T13] veth1_macvtap: left promiscuous mode [ 198.168065][ T13] veth0_vlan: left promiscuous mode [ 198.264658][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.271894][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.282064][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.289293][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.317320][ T8488] veth0_vlan: entered promiscuous mode [ 198.329257][ T8488] veth1_macvtap: entered promiscuous mode [ 198.378299][ T330] usb 5-1: device descriptor read/64, error -71 [ 198.487666][ T330] usb usb5-port1: attempt power cycle [ 198.617582][ T63] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 198.767512][ T63] usb 6-1: Using ep0 maxpacket: 8 [ 198.774167][ T63] usb 6-1: unable to get BOS descriptor or descriptor too short [ 198.787152][ T63] usb 6-1: config 0 has an invalid interface number: 88 but max is 0 [ 198.795592][ T63] usb 6-1: config 0 has no interface number 0 [ 198.802222][ T63] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 198.813956][ T63] usb 6-1: config 0 interface 88 has no altsetting 0 [ 198.822362][ T8539] overlayfs: failed to clone upperpath [ 198.823210][ T63] usb 6-1: string descriptor 0 read error: -22 [ 198.828450][ T330] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 198.835535][ T63] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 198.854262][ T63] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 198.863671][ T63] usb 6-1: config 0 descriptor?? [ 198.868834][ T330] usb 5-1: device descriptor read/8, error -71 [ 198.877695][ T63] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.88/input/input24 [ 198.998666][ T330] usb 5-1: device descriptor read/8, error -71 [ 199.074711][ T63] usb 6-1: USB disconnect, device number 2 [ 199.247886][ T330] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 199.288948][ T330] usb 5-1: device descriptor read/8, error -71 [ 199.366486][ T8553] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.384184][ T8553] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.393701][ T8553] bridge_slave_0: entered allmulticast mode [ 199.400410][ T8553] bridge_slave_0: entered promiscuous mode [ 199.407198][ T8553] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.414748][ T8553] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.422129][ T8553] bridge_slave_1: entered allmulticast mode [ 199.431610][ T8553] bridge_slave_1: entered promiscuous mode [ 199.438846][ T330] usb 5-1: device descriptor read/8, error -71 [ 199.481316][ T8565] netlink: 'syz.3.2596': attribute type 4 has an invalid length. [ 199.548920][ T8553] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.556034][ T8553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.563426][ T8553] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.567629][ T330] usb usb5-port1: unable to enumerate USB device [ 199.570493][ T8553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.622660][ T8573] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.622845][ T8573] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:7 [ 199.638367][ T8553] veth0_vlan: entered promiscuous mode [ 199.676007][ T8553] veth1_macvtap: entered promiscuous mode [ 199.977555][ T330] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 200.009628][ T8584] /dev/loop0: Can't lookup blockdev [ 200.138842][ T330] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 200.152580][ T8597] rust_binder: Write failure EFAULT in pid:115 [ 200.153005][ T330] usb 6-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 200.175280][ T330] usb 6-1: config 0 has no interface number 0 [ 200.184438][ T330] usb 6-1: New USB device found, idVendor=056d, idProduct=0000, bcdDevice=39.00 [ 200.193806][ T330] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.204797][ T330] usb 6-1: Product: syz [ 200.212601][ T330] usb 6-1: Manufacturer: syz [ 200.219358][ T8602] 9pnet_fd: Insufficient options for proto=fd [ 200.227285][ T330] usb 6-1: SerialNumber: syz [ 200.242026][ T8609] fuse: Bad value for 'fd' [ 200.246777][ T330] usb 6-1: config 0 descriptor?? [ 200.456378][ T8577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.477835][ T8577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.500521][ T8577] 9pnet: Could not find request transport: =\'dG$K [ 200.539783][ T8626] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.547493][ T8626] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.554903][ T8626] bridge_slave_0: entered allmulticast mode [ 200.561792][ T8626] bridge_slave_0: entered promiscuous mode [ 200.568540][ T8626] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.575720][ T8626] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.583273][ T8626] bridge_slave_1: entered allmulticast mode [ 200.590043][ T8626] bridge_slave_1: entered promiscuous mode [ 200.612572][ T330] usb 6-1: USB disconnect, device number 3 [ 200.621459][ T8637] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2620'. [ 200.800240][ T8626] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.807547][ T8626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.815062][ T8626] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.822196][ T8626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.916384][ T6935] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.931132][ T6935] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.962436][ T6935] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.969556][ T6935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.987078][ T6935] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.994372][ T6935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.098115][ T8626] veth0_vlan: entered promiscuous mode [ 201.125877][ T8626] veth1_macvtap: entered promiscuous mode [ 201.238605][ T8662] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 201.246476][ T8664] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.477659][ T1447] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 201.672813][ T8674] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2629'. [ 201.792310][ T8682] rust_binder: Failed to allocate buffer. len:120, is_oneway:true [ 201.898902][ T8687] /dev/sr0: Can't lookup blockdev [ 201.994588][ T8691] __vm_enough_memory: pid: 8691, comm: syz.2.2637, bytes: 18014402804453376 not enough memory for the allocation [ 202.032489][ T8698] fuse: Bad value for 'user_id' [ 202.043052][ T8698] fuse: Bad value for 'user_id' [ 202.070425][ T8702] 9pnet: p9_errstr2errno: server reported unknown error OX۵רѳlu9v [ 202.113467][ T8708] netlink: 'syz.5.2643': attribute type 4 has an invalid length. [ 202.145074][ T8711] SELinux: Context system_u:object_r:boot_t:s0 is not valid (left unmapped). [ 202.155050][ T36] kauditd_printk_skb: 64 callbacks suppressed [ 202.155069][ T36] audit: type=1400 audit(7044526675.348:78730): avc: denied { relabelto } for pid=8703 comm="syz.3.2641" name="file0" dev="tmpfs" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 202.187992][ T36] audit: type=1400 audit(7044526675.348:78731): avc: denied { associate } for pid=8703 comm="syz.3.2641" name="file0" dev="tmpfs" ino=40 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:boot_t:s0" [ 202.234068][ T8713] rust_binder: Write failure EFAULT in pid:24 [ 202.347529][ T31] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 202.377539][ T330] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 202.508963][ T31] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 202.520523][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 202.532257][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 202.542102][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 202.555122][ T31] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 202.564566][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.573168][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.584422][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.595212][ T31] usb 5-1: config 0 descriptor?? [ 202.603752][ T330] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 202.617738][ T330] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 202.629763][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.642641][ T330] usb 3-1: config 0 descriptor?? [ 202.652995][ T330] hub 3-1:0.0: USB hub found [ 202.740740][ T8727] __vm_enough_memory: pid: 8727, comm: syz.3.2648, bytes: 18014402804453376 not enough memory for the allocation [ 202.849195][ T330] hub 3-1:0.0: 14 ports detected [ 202.854465][ T330] hub 3-1:0.0: insufficient power available to use all downstream ports [ 202.925660][ T8735] rust_binder: Error while translating object. [ 202.925702][ T8735] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 202.932044][ T8735] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:24 [ 203.029879][ T31] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 203.048492][ T31] plantronics 0003:047F:FFFF.000E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 203.067511][ T330] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 203.077506][ T330] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 203.257786][ T330] usb 3-1: USB disconnect, device number 40 [ 203.547506][ T330] usb 3-1: new low-speed USB device number 41 using dummy_hcd [ 203.708960][ T330] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 203.718498][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.727364][ T330] usb 3-1: config 0 descriptor?? [ 203.804892][ T36] audit: type=1400 audit(7044526676.998:78732): avc: denied { nlmsg_read } for pid=8747 comm="syz.3.2653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 203.804909][ T8748] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2653'. [ 203.839070][ T63] usb 5-1: USB disconnect, device number 12 [ 204.042785][ T8760] exFAT-fs (rnullb0): invalid boot record signature [ 204.050272][ T8760] exFAT-fs (rnullb0): failed to read boot sector [ 204.056696][ T8760] exFAT-fs (rnullb0): failed to recognize exfat type [ 204.140277][ T330] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 204.151781][ T330] asix 3-1:0.0: probe with driver asix failed with error -71 [ 204.164289][ T330] usb 3-1: USB disconnect, device number 41 [ 204.184274][ T36] audit: type=1400 audit(7044526677.378:78733): avc: denied { view } for pid=8770 comm="syz.2.2661" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 204.327555][ T63] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 204.364065][ T8773] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 204.478760][ T63] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 204.494892][ T63] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.503909][ T63] usb 4-1: config 0 descriptor?? [ 204.517554][ T330] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 204.668644][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.679896][ T330] usb 3-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 204.689221][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.698044][ T330] usb 3-1: config 0 descriptor?? [ 204.712774][ T63] usb 4-1: Cannot read MAC address [ 204.718258][ T63] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 204.730898][ T63] usb 4-1: USB disconnect, device number 45 [ 205.105123][ T8771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.113849][ T8771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.122290][ T36] audit: type=1400 audit(7044526678.318:78734): avc: denied { ioctl } for pid=8770 comm="syz.2.2661" path="socket:[37587]" dev="sockfs" ino=37587 ioctlcmd=0x9370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 205.147814][ T36] audit: type=1400 audit(7044526678.338:78735): avc: denied { create } for pid=8770 comm="syz.2.2661" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 205.150661][ T330] usbhid 3-1:0.0: can't add hid device: -71 [ 205.174727][ T330] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 205.184030][ T330] usb 3-1: USB disconnect, device number 42 [ 205.239480][ T36] audit: type=1400 audit(7044526678.438:78736): avc: denied { write } for pid=63 comm="kworker/0:2" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=38145 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 205.292384][ T8788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.301155][ T8788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.677531][ T1447] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 205.827603][ T1447] usb 4-1: Using ep0 maxpacket: 32 [ 205.834891][ T1447] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 205.845008][ T1447] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 205.856539][ T1447] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 205.865887][ T1447] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.874277][ T1447] usb 4-1: Product: ј [ 205.878428][ T1447] usb 4-1: Manufacturer: ࡀ [ 205.883281][ T1447] usb 4-1: SerialNumber: syz [ 206.288603][ T1447] cdc_ncm 4-1:1.0: bind() failure [ 206.306890][ T1447] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 206.317139][ T1447] cdc_ncm 4-1:1.1: bind() failure [ 206.333218][ T1447] usb 4-1: USB disconnect, device number 46 [ 206.920185][ T8820] rust_binder: Failed to allocate buffer. len:10558401041834454400, is_oneway:false [ 207.044672][ T8827] fuse: Unknown parameter '000000000000000000000030000000000000000000000000000000000000000000003' [ 207.051044][ T8828] binder: Unknown parameter '00000000000000000000' [ 207.327614][ T1447] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 207.347504][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 207.477508][ T1447] usb 3-1: Using ep0 maxpacket: 16 [ 207.483939][ T1447] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.495152][ T1447] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 207.508272][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 207.513462][ T1447] usb 3-1: config 0 interface 0 has no altsetting 0 [ 207.520179][ T1447] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 207.529508][ T1447] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.538300][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.549391][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.559562][ T1447] usb 3-1: config 0 descriptor?? [ 207.564613][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 207.571433][ T10] usb 5-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 207.581711][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.590550][ T10] usb 5-1: config 0 descriptor?? [ 207.983976][ T1447] kye 0003:0458:0138.000F: unknown main item tag 0x0 [ 207.991135][ T1447] kye 0003:0458:0138.000F: unknown main item tag 0x0 [ 207.998152][ T1447] kye 0003:0458:0138.000F: unknown main item tag 0x0 [ 208.006425][ T10] wacom 0003:056A:032C.0010: unknown main item tag 0x0 [ 208.014108][ T10] wacom 0003:056A:032C.0010: unknown main item tag 0x0 [ 208.021402][ T1447] kye 0003:0458:0138.000F: hidraw0: USB HID v0.08 Device [HID 0458:0138] on usb-dummy_hcd.2-1/input0 [ 208.036213][ T10] wacom 0003:056A:032C.0010: unknown main item tag 0x0 [ 208.043449][ T10] wacom 0003:056A:032C.0010: unknown main item tag 0x0 [ 208.050795][ T10] wacom 0003:056A:032C.0010: item fetching failed at offset 5/6 [ 208.058992][ T10] wacom 0003:056A:032C.0010: parse failed [ 208.064882][ T10] wacom 0003:056A:032C.0010: probe with driver wacom failed with error -22 [ 208.188033][ T10] usb 3-1: USB disconnect, device number 43 [ 208.779840][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 209.154012][ T36] audit: type=1400 audit(7044526682.348:78737): avc: denied { mounton } for pid=8867 comm="syz.3.2695" path="/syzcgroup/cpu/syz3/cpuset.cpus" dev="cgroup" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 209.157915][ T8868] overlay: Unknown parameter '/' [ 209.258254][ T8878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.266937][ T8878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.108766][ T330] usb 5-1: USB disconnect, device number 14 [ 210.124279][ T8884] loop2: detected capacity change from 0 to 7 [ 210.142947][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 210.154308][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 210.163613][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 210.171949][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 210.181428][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 210.192030][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 210.203927][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 210.216127][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 210.228964][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 210.247454][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 210.256664][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 210.321519][ T36] audit: type=1400 audit(7044526683.518:78738): avc: denied { getopt } for pid=8898 comm="syz.4.2704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 210.451217][ T36] audit: type=1400 audit(7044526683.648:78739): avc: denied { append } for pid=8909 comm="syz.4.2707" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 210.541523][ T8917] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2709'. [ 210.620939][ T36] audit: type=1400 audit(7044526683.818:78740): avc: denied { execute } for pid=8926 comm="syz.3.2712" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 210.847513][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 210.847526][ T878] Bluetooth: hci0: command 0x1003 tx timeout [ 210.981627][ T8941] binder: Bad value for 'stats' [ 211.001072][ T8943] netlink: 'syz.2.2719': attribute type 16 has an invalid length. [ 211.039984][ T8949] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.537905][ T8956] netlink: 'syz.3.2724': attribute type 4 has an invalid length. [ 211.689513][ T8963] rust_binder: Write failure EFAULT in pid:148 [ 211.750661][ T8971] SELinux: truncated policydb string identifier [ 211.763918][ T8971] SELinux: failed to load policy [ 211.850509][ T8983] cgroup: noprefix used incorrectly [ 211.869830][ T8987] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 211.879669][ T8987] SELinux: failed to load policy [ 212.247513][ T1447] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 212.267497][ T403] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 212.397528][ T1447] usb 4-1: Using ep0 maxpacket: 8 [ 212.404253][ T1447] usb 4-1: unable to get BOS descriptor or descriptor too short [ 212.413042][ T1447] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 212.418747][ T403] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.421187][ T1447] usb 4-1: config 0 has no interface number 0 [ 212.432467][ T403] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 212.438560][ T1447] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 212.447735][ T403] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.458859][ T1447] usb 4-1: config 0 interface 88 has no altsetting 0 [ 212.473937][ T403] usb 5-1: config 0 descriptor?? [ 212.479454][ T1447] usb 4-1: string descriptor 0 read error: -22 [ 212.485743][ T1447] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 212.495242][ T1447] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 212.504393][ T1447] usb 4-1: config 0 descriptor?? [ 212.511145][ T1447] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input26 [ 212.714556][ T10] usb 4-1: USB disconnect, device number 48 [ 212.720960][ C0] usb_acecad 4-1:0.88: can't resubmit intr, dummy_hcd.3-1/input0, status -19 [ 212.885103][ T403] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor [ 212.895528][ T403] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0011/input/input27 [ 212.964577][ T403] keytouch 0003:0926:3333.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 213.214873][ T36] audit: type=1400 audit(7044526686.408:78741): avc: denied { read } for pid=9011 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 213.323566][ T36] audit: type=1400 audit(7044526686.518:78742): avc: denied { read write } for pid=9014 comm="syz.3.2742" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 213.370286][ T36] audit: type=1400 audit(7044526686.518:78743): avc: denied { open } for pid=9014 comm="syz.3.2742" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 213.393772][ T36] audit: type=1400 audit(7044526686.548:78744): avc: denied { map } for pid=9014 comm="syz.3.2742" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 Stopping sshd: [ 213.427345][ T36] audit: type=1400 audit(7044526686.558:78745): avc: denied { append } for pid=9014 comm="syz.3.2742" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 stopped /usr/sbin/sshd (pid 201) OK Stopping crond: stopped /usr/sbin/crond (pid 193) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 147) [ 213.620967][ T9032] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 213.687461][ T36] audit: type=1400 audit(7044526686.878:78746): avc: denied { search } for pid=9036 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Stopping network: OK Stopping iptables: OK Stopping system message bus: done [ 214.169395][ T31] usb 5-1: USB disconnect, device number 15 [ 214.245302][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 214.245322][ T36] audit: type=1400 audit(7044526687.438:78759): avc: denied { read write } for pid=8553 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 214.307478][ T36] audit: type=1400 audit(7044526687.478:78760): avc: denied { open } for pid=8553 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 Stopping klogd: [ 214.347482][ T9059] veth1: entered allmulticast mode [ 214.352957][ T9059] veth1: left allmulticast mode [ 214.373324][ T36] audit: type=1400 audit(7044526687.478:78761): avc: denied { ioctl } for pid=8553 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 OK Stopping acpid: [ 214.431524][ T36] audit: type=1400 audit(7044526687.628:78762): avc: denied { remove_name } for pid=94 comm="acpid" name="acpid.pid" dev="tmpfs" ino=7 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.455952][ T36] audit: type=1400 audit(7044526687.628:78763): avc: denied { unlink } for pid=94 comm="acpid" name="acpid.pid" dev="tmpfs" ino=7 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 214.549962][ T329] bridge_slave_1: left allmulticast mode [ 214.565310][ T329] bridge_slave_1: left promiscuous mode [ 214.571044][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.587746][ T329] bridge_slave_0: left allmulticast mode [ 214.593526][ T329] bridge_slave_0: left promiscuous mode [ 214.607581][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.691856][ T36] audit: type=1400 audit(7044526687.888:78764): avc: denied { sys_module } for pid=9077 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 214.722046][ T9079] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 214.753772][ T9077] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.768301][ T9077] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.775527][ T9077] bridge_slave_0: entered allmulticast mode [ 214.782189][ T9077] bridge_slave_0: entered promiscuous mode [ 214.789765][ T329] veth1_macvtap: left promiscuous mode [ 214.795307][ T329] veth0_vlan: left promiscuous mode [ 214.841153][ T9077] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.848485][ T9077] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.855583][ T9077] bridge_slave_1: entered allmulticast mode [ 214.861970][ T9077] bridge_slave_1: entered promiscuous mode [ 214.887500][ T31] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 214.923160][ T9077] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.930382][ T9077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.937697][ T9077] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.944732][ T9077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.968300][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.975778][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.985651][ T6935] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.992830][ T6935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.002452][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.009590][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.037238][ T9077] veth0_vlan: entered promiscuous mode [ 215.043377][ T31] usb 4-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 215.052305][ T9077] veth1_macvtap: entered promiscuous mode [ 215.057591][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.068500][ T31] usb 4-1: config 0 descriptor?? [ 215.083845][ T36] audit: type=1400 audit(7044526688.278:78765): avc: denied { mounton } for pid=9077 comm="syz-executor" path="/root/syzkaller.0eoowE/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=40459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 215.112856][ T36] audit: type=1400 audit(7044526688.318:78766): avc: denied { mount } for pid=9077 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 215.135672][ T36] audit: type=1400 audit(7044526688.318:78767): avc: denied { mounton } for pid=9077 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 215.152607][ T9091] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 215.162050][ T36] audit: type=1400 audit(7044526688.338:78768): avc: denied { read write } for pid=9090 comm="syz.2.2751" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 OK Stopping syslogd: stopped /sbin/syslogd (pid 91) OK umount: can't remount debugfs read-only umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only Connection to 10.128.1.230 closed by remote host. The system isSent SIGTERM to all processes [ 215.596458][ T9116] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 215.869930][ T329] bridge_slave_1: left allmulticast mode [ 215.898344][ T329] bridge_slave_1: left promiscuous mode [ 215.904082][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.914926][ T329] bridge_slave_0: left allmulticast mode [ 215.927466][ T329] bridge_slave_0: left promiscuous mode [ 215.941854][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.972964][ T31] usb 4-1: string descriptor 0 read error: -71 [ 215.979826][ T31] uclogic 0003:5543:004D.0012: failed retrieving string descriptor #200: -71 [ 215.989760][ T31] uclogic 0003:5543:004D.0012: failed retrieving pen parameters: -71 [ 215.998284][ T31] uclogic 0003:5543:004D.0012: failed probing pen v2 parameters: -71 [ 216.006657][ T31] uclogic 0003:5543:004D.0012: failed probing parameters: -71 [ 216.014308][ T31] uclogic 0003:5543:004D.0012: probe with driver uclogic failed with error -71 [ 216.029173][ T31] usb 4-1: USB disconnect, device number 49 [ 216.110062][ T329] veth1_macvtap: left promiscuous mode [ 216.115708][ T329] veth0_vlan: left promiscuous mode [ 216.559698][ T329] bridge_slave_1: left allmulticast mode [ 216.565399][ T329] bridge_slave_1: left promiscuous mode [ 216.571116][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.578839][ T329] bridge_slave_0: left allmulticast mode [ 216.584568][ T329] bridge_slave_0: left promiscuous mode [ 216.590214][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.598112][ T329] bridge_slave_1: left allmulticast mode [ 216.603943][ T329] bridge_slave_1: left promiscuous mode [ 216.609668][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.617261][ T329] bridge_slave_0: left allmulticast mode [ 216.623122][ T329] bridge_slave_0: left promiscuous mode [ 216.628884][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.871132][ T329] veth1_macvtap: left promiscuous mode [ 216.876707][ T329] veth0_vlan: left promiscuous mode [ 216.882387][ T329] veth1_macvtap: left promiscuous mode [ 216.888009][ T329] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 217.968330][ T9123] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 217.975761][ T9123] ACPI: PM: Preparing to enter system sleep state S5 [ 217.982931][ T9123] kvm: exiting hardware virtualization [ 217.988887][ T9123] reboot: Power down serialport: VM disconnected.