last executing test programs: 2m46.684658867s ago: executing program 1 (id=798): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x10) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x8}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a80010061cc", 0x10) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x5, 0x2, 0x5) r6 = open(&(0x7f0000000280)='./file0\x00', 0x2000, 0x106) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r6) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050b2bbd7000fcdbdf254e0000000800010070636900110002"], 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r8, 0x1, 0x1b, 0x0, &(0x7f0000000100)) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x40) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2m45.861588042s ago: executing program 1 (id=813): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) (async) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) inotify_init() (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max']) (async) getsockopt$inet6_udp_int(r2, 0x11, 0x67, 0x0, &(0x7f0000017200)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x7}, @fda={0x66646185, 0x2, 0x0, 0x1d}, @ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/5, 0x5, 0x1, 0x33}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0}) 2m45.834534173s ago: executing program 1 (id=815): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x1802, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000180)={0x2020}, 0x2020) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x4}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f0000000180)={{r7, r8+60000000}, {r9, r10+60000000}}, &(0x7f00000001c0)) 2m45.756838495s ago: executing program 1 (id=817): syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000040)={0x14, &(0x7f0000000100)={0x0, 0x10, 0xf3, {0xf3, 0xb, "f8191da099ed8d41aa03ece031a2b48362d7c78431a3906ac28d78e352682fef5c0d277c258f977b427780e2034c619e1f8e2453ddb8ba3517322632bf9e764e54fe1b531813d6a9bbc7f4781659219895167d7a90005d67c6e5804712d8c18fb1659062d4e61f8136581704efd8a28044d6e38d2adb1374c5cd78da31ace83b1a38d28165f581f83111eec0e521c02ae937301dfbf7885307f1c485702e5e3e996de2e4c4eb2ad82780687500059f4708f5e1f584db2bdebb2479869930b3661492b08615eb5cefa1de57f2defe544039dbb6c71f20adf249e4833e4afd2b666a4a7dee15b2538f17dc0a18e019c993f0"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc01}}}, &(0x7f0000000380)={0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="200d30000000960300871c8ccfca6fcbe5c9f368dce198809ae5eb17c0f0a464a2025ef50c1a82cb03004c3205baae8ea601113b1663"], &(0x7f0000000240)={0x0, 0xa, 0x1, 0x72}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000002c0)={0x20, 0x0, 0x2d, {0x2b, "14c12950175c4b97945a97f5acd21add8c078df88bc432a141b6ea16bc828ff84c06de97a1b528764595ed"}}, &(0x7f0000000300)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000000340)={0x20, 0x0, 0x1, 0x1}}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x40980, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/keycreate\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0xa0001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m45.287337664s ago: executing program 1 (id=819): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x18b8, 0x185021) ioctl$USBDEVFS_CONNECTINFO(r1, 0x8108551b, &(0x7f0000000080)) close_range(r0, 0xffffffffffffffff, 0x0) 2m45.228837375s ago: executing program 1 (id=820): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000003480)=ANY=[@ANYBLOB="1300000065ffff001000000600395032303030"], 0x13) (async) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) (async) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x705e, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0xf) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cacIe=loose,nodevmap']) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000040)={'veth0_to_bridge\x00'}) (async) read$FUSE(r3, &(0x7f0000003800)={0x2020}, 0x2020) (async) dup3(r3, r0, 0x80000) 2m29.850557235s ago: executing program 32 (id=820): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000003480)=ANY=[@ANYBLOB="1300000065ffff001000000600395032303030"], 0x13) (async) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) (async) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x705e, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0xf) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cacIe=loose,nodevmap']) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000040)={'veth0_to_bridge\x00'}) (async) read$FUSE(r3, &(0x7f0000003800)={0x2020}, 0x2020) (async) dup3(r3, r0, 0x80000) 1m37.470900107s ago: executing program 2 (id=2049): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x20102) (async, rerun: 32) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) (async, rerun: 32) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000180)={0x5, 0x6, 0x8, 0x0, 0x2}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdwo=', @ANYRESHEX=r0, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=',dfltgid=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) 1m37.428881108s ago: executing program 2 (id=2050): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x8042, 0x85) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x2000) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x2b, 0x0, 0xa0031718561b10dc, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x78, 0x0, 0x3, {0x8000, 0xcd, 0x0, {0x2, 0x0, 0x9ef1, 0x1000, 0x5, 0x9b, 0xf79c000, 0x2339fdf8, 0x3, 0x8000, 0x538, 0x0, 0xffffffffffffffff, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x30, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x2004c0c0) 1m37.35680453s ago: executing program 2 (id=2051): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r1, 0x0, 0xd) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) r2 = syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000002280)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0xa, 0xf0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x401, 0x9, 0x6f7, 0x83}, {0x6, 0x24, 0x1a, 0x4, 0x20}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0x0, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0x16}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x3, 0x46, 0x12}}}}}}}]}}, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, &(0x7f0000002740)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="7e57c449e8cfc1afecdee06fd6da98cd307c6b190cbf16a751fe2f105f015d4a413de4efe0fd28108d32cc5b98058568968d51ee00000100d98241d54b90"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xffffffffffffffe2, 0x0, &(0x7f0000001400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000480)={@flat=@binder={0x73622a85, 0x100, 0x3}, @fda={0x66646185, 0xa, 0x2, 0x7}, @fd}, &(0x7f00000001c0)={0x0, 0x4b, 0x38}}}], 0x0, 0x0, 0x0}) 1m36.81668451s ago: executing program 2 (id=2054): r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000240)=0x8000, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000340)=0xfff) (async) connect$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) getsockname$unix(r0, &(0x7f0000000440), &(0x7f0000000040)=0x6e) connect$unix(r0, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8c83, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x6}, 0x1c) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) (async) lseek(r3, 0x8342, 0x0) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) (async) r4 = fcntl$dupfd(r2, 0x0, r2) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4880}, 0x1) (async) sendmmsg$inet6(r4, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}], 0x1}}], 0x4000000000000ec, 0x8001) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/165, 0xee, 0x1, 0x0}, &(0x7f0000000180)=0x40) ioctl$BLKRRPART(r1, 0x125f, 0x0) 1m36.81577671s ago: executing program 2 (id=2055): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, &(0x7f0000002400)}) unshare(0x64000600) r0 = socket$inet6(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="fc0000001c000705ab092509b86813000aab080102000000b85b0e93210001c0f0060848050000010000000000039815fa2c53c28648000000b937799f377a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a3c313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b2863ef3d92c94170e5bba2e177312e081f691bc5110556888100000463ae4f5df1b394cfd6239ec2a0f0d1bcae5f5502943283f4b9e611183b102b2b8f5566791cb19020191bd0733802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4794eedfca92c09d776e7a90ab79a6f00a1960548deac279c00"/252, 0xfc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=0x0) ptrace(0x11, r3) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_PIT(r4, 0xc048ae65, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r5, 0x4188aec6, &(0x7f00000001c0)) pipe(&(0x7f0000000040)) close(0x3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000020000210d0000aaa8fa017242ba9380d412000000000000002900000003000000", 0xeb0e7a7d4c6f0553) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r8) r9 = inotify_init() inotify_add_watch(r9, &(0x7f0000000000)='./file0\x00', 0x84000584) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$KVM_SET_CLOCK(r5, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x95d}) 1m36.725658662s ago: executing program 2 (id=2057): sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() 1m21.663981696s ago: executing program 33 (id=2057): sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() 1m0.778160854s ago: executing program 4 (id=2652): r0 = socket(0xa, 0x1, 0x0) prctl$PR_SET_TSC(0x1a, 0x1) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe64, 0x10001ff, @empty, 0x2}, 0x1c) r1 = socket(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0xdc, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20008000}, 0x880) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r5, 0x400454cc, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000200)={'#! ', '', [], 0xa, "2897c5f8c3a447f8fe1f8807c880"}, 0x12) close_range(r4, 0xffffffffffffffff, 0x0) 41.381595072s ago: executing program 3 (id=2945): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r2) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) r4 = syz_clone(0x20022180, 0x0, 0xfe02, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = syz_open_procfs(r4, &(0x7f00000001c0)='schedstat\x00') pread64(r5, &(0x7f0000000140)=""/15, 0xf, 0x4) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') mmap(&(0x7f00006f4000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f000000b5c0), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = syz_open_dev$ttys(0xc, 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="1f043cbf", @ANYBLOB="aa6a967baaeb15616466809f5dcb499e376f762b9eaf2a9fe7b6e91c4ebc10d4665a7d73f30fa26ebc9e3be14290f13593c30a6ce52bad80b1461dbcb25b48c81a76e262a6074a2b545a004dc71a4589c2756d9620ccd1200aefde759fc1c5d50db216d3824bea01e2e94733422360a8a4b1c417076e60556d013aa5b2db967a6bab92247059593bc5fb3813131a6659f2", @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000100)={0x9, 0x9e9f5225, 0x4d, 0xffffd49a, 0x1a, "e82efa46c9bc2dd9128e3453d664ed14e7c51c"}) setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000040)=0xf3, 0x1c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r10, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKALIGNOFF(r9, 0x127a, &(0x7f0000000080)) splice(r9, 0x0, r11, 0x0, 0x25a5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) 41.316732163s ago: executing program 3 (id=2946): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@arp={@multicast1, @private=0xa010101, 0x0, 0xff, 0x0, 0xf, {@mac=@broadcast, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@remote, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x200, 0xb943, 0x7, 0x1, 0xffff, 'veth1_virt_wifi\x00', 'syzkaller1\x00', {0xff}, {}, 0x0, 0x81}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1, 0x3}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @loopback, @local, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1010040, &(0x7f0000000280)=ANY=[@ANYBLOB="6673757569643d30636136443565332d663737662d350061332d333232662d38353231630232642c00"]) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r2 = socket$inet6(0xa, 0x4, 0x0) sendmmsg$inet6(r2, &(0x7f0000003fc0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x43, {@dev={0xfe, 0x80, '\x00', 0x30}}}}], 0x28}}], 0x1, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x64, 0x0, &(0x7f0000000380)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fef0ead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df5215b75a482436e231f28e370fafd3b4afd276d2"}) 40.766229284s ago: executing program 3 (id=2952): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)={0x2c, 0x18, 0x15, 0x70bd2a, 0xfeffffff, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x02\x02\x00\x00\x00\x00'}, @nested={0x10, 0x9, 0x0, 0x1, [@nested={0xa, 0x3b, 0x0, 0x1, [@generic="538ebda148ba"]}]}]}, 0x2c}], 0x1}, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x802) close_range(r0, 0xffffffffffffffff, 0x0) 40.662210266s ago: executing program 35 (id=2952): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)={0x2c, 0x18, 0x15, 0x70bd2a, 0xfeffffff, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x02\x02\x00\x00\x00\x00'}, @nested={0x10, 0x9, 0x0, 0x1, [@nested={0xa, 0x3b, 0x0, 0x1, [@generic="538ebda148ba"]}]}]}, 0x2c}], 0x1}, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x802) close_range(r0, 0xffffffffffffffff, 0x0) 31.504648795s ago: executing program 0 (id=3044): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x5c5ed000) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x100000000) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000ff1000/0x2000)=nil}) (async) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/217, 0xd9}, {&(0x7f0000001a40)=""/211, 0xd3}, {&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/158, 0x9e}, {&(0x7f0000000780)=""/154, 0x9a}, {&(0x7f0000000600)=""/159, 0x9f}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000000)=""/260, 0x104}], 0x8}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x810}], 0x7, 0x40000100, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x404c031}, 0x404a05c) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x1c8c0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) (async) mount(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540)='ext3\x00', 0x80c000, &(0x7f0000000580)='dax=always') (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) (async) syz_kvm_setup_cpu$x86(r3, r0, &(0x7f0000a29000/0x18000)=nil, &(0x7f0000000380)=[@text16={0x10, &(0x7f0000000480)="6766c7442400070000006766c74424024c6d8edd6766c744240600000000670f011424650fafee0f01dfba4200ed66b9800000c00f326635000800000f30b842008ec00f2242d85a31b8b9008ed80f01cf", 0x51}], 0x1, 0x4, &(0x7f0000000500)=[@vmwrite={0x8, 0x0, 0x19, 0x0, 0x3, 0x0, 0x1, 0x0, 0x6}], 0x1) ioctl$TCFLSH(r5, 0x400455c8, 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) (async) r6 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f00000001c0)=[{0x30, 0x3, 0x51, 0xfffff034}, {0x6, 0x4, 0x6, 0x6}]}, 0x10) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) syz_open_procfs(0x0, &(0x7f0000000800)='net/wireless\x00') 31.396528957s ago: executing program 0 (id=3048): r0 = syz_open_dev$loop(&(0x7f0000000600), 0x5, 0x10b100) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000700)={0x3, 0x0, 0x98, &(0x7f0000000640)={0x10000000, 0x200, 0x3}}) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[]) 31.394870977s ago: executing program 0 (id=3050): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f00000000c0)=[{{&(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000001b40)=[{&(0x7f0000000580)="d6e2fd07ed22ed49218d6877ada59c4dbc68bd1278b35b28f1875a39d06aa9d9c7b747a0cad7e773b66659154f16e6710e2a9f146601b2ce22da5a4850055e5a926d74c5b7", 0x45}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001bc0)="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", 0x154}, {&(0x7f0000001740)="ee7ff47e91ba03999451483c34d71198d6396835822c341646b1bbc0deb30c0d52108e63c167d26295757f07b08790ea87b5d19afb40863acbd47e753faaa8481d", 0x41}, {&(0x7f00000017c0)="5176307d43adca8f3ce0d873bfc664c3329f0e895f7056b8e882494d63619b816d3d7e37a7a7419200b2ffb0d265a33cb5eb894c7dad1707435f61c2da607acb315946d075184571fd4b437748f5b67fef0baab42cd4ef9b670b485114f1d41a54421037b1f912284ace3fe47283eb367fa959252c82e6e3e1555d61b2c066c5cada524ae31ce948925102683b0cf8221f05e8484d25327c9461d7bf25e74504828c8d922895ed5c9c9150aa2aeca87978169d5daa55cbca446976331fe52b8df3d2a7b26869474459681fd858db71a4f86a65c06ef36fbfda9b129023f36e203adeddd6ab57312853c999e6caa069cfb92404a7", 0xf4}, {&(0x7f00000018c0)="db9905c30418f173441f1f388132cb4aadbabefc0522617fc0632a2e8be832b0fe75fff2204a96fd34aa2a5547a2c3a9bbad345a2b0d8d72e7326966e09fcb2efaab0a8fdf6170a1233a58003dba9bf386dfc0e8fa9fac2d6b7e9e6475e4b128c56ff293f82a2bbc0ca981d58dcda1a6badb50db4274db79093bb866581bcfaf61813f3f335553d08d0325c5293cd68cfc1679d6bf5002e006943999b11ece87bb78882226", 0xa5}, {&(0x7f0000001980)="21c3f72af248e7dc088d4c9c14caa4a7b42b4901bf3c326748472f775b0c3d9eeac0bf9caca7498367946c079cf0141dc17f922bac99e4ac3abccada6421739b591f63d346c0dd6e875a2459c1deb5857aadb598956cc21d761c575b8acedfe875a962931561ed98a15d2059182825b957cdea8b2f7f8698b771213ef3a256fd521e2ec71f3a7aec334d118af784ff32b6d75e6c8d537e6a996041677d1d1cd6a8993bc876154b36ab329a7a6717413b1e7bdf3b098e1969c689693117ae5a21bdf5", 0xc2}, {&(0x7f0000001a80)="927b323050cb06b7f1908049498f5eed3df85fa25e9929a6d676fb7678369dffc2114262343ff006bbf60d43eeae11a7e9ee934076da999ab07cac37ed7f6a273614f8b9c3cb996fab5e64b12c6dab57c638834413d59db1069ebffbf63c81b2b94f5ab2178714eadef8731e9319e5c82f8e2c65bdf2ceba5c57dae89cd2dd0fc8832c3f8cbe3316711995ba5e07ab216bf25a03e831e47fa924ba08073a47c02a591fba086c0286767759608c47c03e6b2db7dd0bd45379fe", 0xb9}], 0x8}}], 0x1, 0x0) sendto$inet(r1, &(0x7f0000000700)='\f&', 0x2, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x13, r2, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000180)={0x80000000}, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x8000000000000001) 31.394507157s ago: executing program 0 (id=3051): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x0, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@private=0xa0100fe, @broadcast, 0x0, 0xffffffff, 0x0, 0x10, {@mac=@remote, {[0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x8, 0x2000, 0x0, 0xffff, 0x4, 'pimreg\x00', 'nr0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xf000, 0x4}}}, {{@arp={@multicast1, @dev={0xac, 0x14, 0x14, 0x1b}, 0xffffff00, 0xff000000, 0x9, 0x9, {@empty, {[0xff, 0xff, 0xff, 0x1fe, 0xff, 0xff]}}, {@mac=@random="e5a1091340a3", {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x9, 0xff81, 0x1, 0x0, 0xb1, 0x3, 'bond0\x00', 'ip6gre0\x00', {}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010102, @multicast2, 0xf, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x4, 0x5, 0xff03}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x14fffffd) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f0000000880)={0xa3}) flock(0xffffffffffffffff, 0xa) r6 = creat(0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r6, 0x8983, &(0x7f0000000080)={0x1, 'pimreg\x00', {}, 0xd}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0x3f}, @fda={0x66646185, 0x1, 0x0, 0x38}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x50, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df"}) 31.336709488s ago: executing program 0 (id=3052): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r2, r3) ioctl$SIOCGETSGCNT(r4, 0x89e1, &(0x7f0000000180)={@broadcast, @empty}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat$cgroup_int(r5, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) (async) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f00000003c0)={{0x0, 0x0, 0x80, {0x8000000, 0xeeee0000, 0x1}}, "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", "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"}) (async) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on}, {@volatile}]}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000000000)=""/95, 0x5f}], 0x1, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) ioctl$FITHAW(r4, 0xc0045878) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) geteuid() (async) mount$9p_rdma(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', &(0x7f0000000200), 0x1000, &(0x7f0000002440)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532322c63616368657461673d6e73002c72713d3078303030303030300430303030303030342c73713d30783030303030302c72713d3078303030303030303030303030303030322c736d61636b66736861743d6d6f756e74696e666f002c636f6e746578743d757365725f752c66736d616769633d3078303030303030303330303030303030302c7569643d00"/182, @ANYRES32=r4, @ANYRESHEX=0x0]) (async) read$FUSE(r6, &(0x7f0000003480)={0x2020}, 0x2020) 31.336361868s ago: executing program 0 (id=3053): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r3, &(0x7f00000000c0)={'veth0_macvtap', 0x32, 0x31}, 0x10) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000003c0)="b805000000660f6ae10f01d9660f78c4020ab8010000000f01c1b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f00d0", 0x4e}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 16.114113216s ago: executing program 36 (id=3053): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r3, &(0x7f00000000c0)={'veth0_macvtap', 0x32, 0x31}, 0x10) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000003c0)="b805000000660f6ae10f01d9660f78c4020ab8010000000f01c1b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f00d0", 0x4e}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 5.768750837s ago: executing program 8 (id=3387): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x3) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)={0x4c, 0x12, 0x0, 0x70bd2c, 0x25dfdbfd, {0x3, 0xd0, 0xc6, 0x6, {0x4e20, 0x4e24, [0xe8, 0x2, 0x7d, 0x3], [0x80000001, 0xb, 0x1, 0x2], 0x0, [0x2]}, 0x2, 0x9}}, 0x4c}, 0x1, 0x0, 0x0, 0x20004044}, 0x4000000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x4018aee3, &(0x7f0000000280)) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000001740)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r4, &(0x7f0000000380)={0x28, 0xdb28639a22af2514, r5, {{0x7, 0x9, 0x1}}}, 0x28) write$FUSE_POLL(r3, &(0x7f0000000080)={0x18, 0x0, r5, {0x1ff}}, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x38, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r1}, @clear_death={0x400c630f, 0x2}, @request_death, @dead_binder_done], 0x0, 0x0, 0x0}) 5.763613947s ago: executing program 8 (id=3389): r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x40282, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000380)=@ethtool_wolinfo={0x5, 0x0, 0x8, "edf958e7e942"}}) (async) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000380)=@ethtool_wolinfo={0x5, 0x0, 0x8, "edf958e7e942"}}) lseek(r0, 0x4, 0x0) (async) lseek(r0, 0x4, 0x0) recvmmsg$unix(r0, &(0x7f00000020c0)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000280)=""/255, 0xff}, {&(0x7f0000000180)=""/176, 0xb0}, {&(0x7f0000000380)=""/80, 0x50}, {&(0x7f0000000400)=""/107, 0x6b}, {&(0x7f0000000480)=""/137, 0x89}, {&(0x7f0000000540)=""/90, 0x5a}, {&(0x7f00000005c0)=""/218, 0xda}, {&(0x7f00000006c0)=""/143, 0x8f}], 0x8, &(0x7f0000000800)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x150}}, {{&(0x7f0000000980), 0x6e, &(0x7f0000001140)=[{&(0x7f0000000a00)=""/198, 0xc6}, {&(0x7f0000000b00)=""/246, 0xf6}, {&(0x7f0000000c00)=""/246, 0xf6}, {&(0x7f0000000d00)=""/107, 0x6b}, {&(0x7f0000000d80)=""/95, 0x5f}, {&(0x7f0000000e00)=""/252, 0xfc}, {&(0x7f0000000f00)=""/158, 0x9e}, {&(0x7f0000000fc0)=""/132, 0x84}, {&(0x7f0000001080)=""/186, 0xba}], 0x9, &(0x7f0000000000)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001200)=@abs, 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000080)=""/60, 0x3c}, {&(0x7f0000001280)=""/137, 0x89}, {&(0x7f0000001340)=""/198, 0xc6}, {&(0x7f0000001440)=""/242, 0xf2}, {&(0x7f0000001540)=""/129, 0x81}, {&(0x7f0000001600)=""/235, 0xeb}, {&(0x7f0000001700)=""/149, 0x95}], 0x7, &(0x7f0000001840)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001900)=""/244, 0xf4}, {&(0x7f0000001a00)=""/82, 0x52}, {&(0x7f0000001a80)=""/214, 0xd6}, {&(0x7f0000001b80)=""/85, 0x55}, {&(0x7f0000001c00)=""/50, 0x32}, {&(0x7f0000001c40)=""/190, 0xbe}, {&(0x7f0000001d00)=""/46, 0x2e}, {&(0x7f0000001d40)=""/13, 0xd}, {&(0x7f0000001d80)=""/59, 0x3b}, {&(0x7f0000001dc0)=""/246, 0xf6}], 0xa, &(0x7f0000001f80)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}}], 0x4, 0x10120, &(0x7f00000021c0)={0x77359400}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) pipe(0x0) (async) pipe(0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) mount(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f0000000540)='ext2\x00', 0x80c000, &(0x7f0000000580)='dax,always') r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = eventfd2(0x4001, 0x800) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000040)={r5, 0x7, 0x2, r5}) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) 5.694988589s ago: executing program 8 (id=3390): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x101) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0xc000, 0x6) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.nlink\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x4000, 0xf) move_mount(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00', 0x20) chdir(&(0x7f00000001c0)='./file0/file0\x00') mkdir(&(0x7f0000000200)='./file0\x00', 0x20) rename(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00') r2 = open(&(0x7f00000002c0)='./file0\x00', 0x191400, 0x0) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)={0x400102, 0x0, 0x8}, 0x18) getdents(r3, &(0x7f0000000380)=""/4096, 0x1000) mount$tmpfs(0x0, &(0x7f0000001380)='./file0/../file0\x00', &(0x7f00000013c0), 0x60, &(0x7f0000001400)={[{@quota}, {@inode64}, {@noswap}]}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000001440)={0x9, 0x3, 0x7, 0x4, 0x7}, 0x14) getpeername$unix(r2, &(0x7f0000001480)=@abs, &(0x7f0000001500)=0x6e) openat$dir(0xffffffffffffff9c, &(0x7f0000001540)='./file0\x00', 0x120481, 0x80) r4 = getpgid(0xffffffffffffffff) newfstatat(0xffffffffffffff9c, &(0x7f0000001a40)='./file0/file0\x00', &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) r7 = getegid() ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000001b00)=0x0) getgroups(0x6, &(0x7f0000001b40)=[0xee01, 0xee01, 0xee01, 0x0, 0xee01, 0x0]) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001b80)={0x0}, &(0x7f0000001bc0)=0xc) fstat(r0, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001580)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f00000019c0)=[{&(0x7f0000001600)="f11954a0d432a9d4875c25c81f2ec9fc004db0a2030b553329c4a079591b23804850e38ebfc866099468332f1ce469268d2568659a57e5453352645d1011fc9a2e45ee58703f19f0d1f936a9506472dfabc83c69fd49f390a908a9bba0c41e217e01019a4bcbf1200864d20fb71f2cdc6f1abdbf16f3f700c209c3f1b2b17860b313ee74b3e60ac6e039ab52c0f6efe7709da3ca9dd3aaedf88cee0d5e1a59702005f7a22c7003047d1416baa7212e2d43a7438e1c7c1397c3a061f32b93449c03cb9631bbd5ad63", 0xc8}, {&(0x7f0000001700)="d2ee2ed9047b86f3622c4928f831c2d0a54dd98384a323ee7950", 0x1a}, {&(0x7f0000001740)="1d15a46bb6d0c10d8593cabf672deea1bb95e7752d2eed01ec59d931d2187c4d5da27d2c4eff5161b1bbe788ecd5d41b9ce40dfd11c3ff33420752a6dc1b5aaa51a74a59ed47c837a795c801d393b6ff6cbd5071d5dfdeb4b2ee51ef7923b2d6ac61b73e35bafef2d41889e8fb8beffa775d49f3fd585565f5c30104c7d8081f58d36e697251155759349333daa9adafa4d995662d3303d7b0b7f9dd5f79d343b093d245df27ad3ecf911555ae4eeb0818c0268fce7ba8", 0xb7}, {&(0x7f0000001800)="1df169dcc818ff75b513ae425e96a62d252de26965b36b3427c167b622addc1339e29482ff4cec9b6fe68c30bd1657a878a5ce4adcb452ea817ed943468801dc37b2e3bf803099ea641b4d4dc8ccfa2869b6ac0517262c5e6275d93299ebba6adf2103d4a96bd092ee6ed47efbb47a06d8a32d1d37a952960430dc082e126f86412dc291a7cb2580be8a3a47c3235c72d71bf0d53fc3ccfe8d8f1139b1e931577cfa454599933c29aabf22e3b6d84a4e638da83a26d07b0a4acbcb0783ef0b28b95e1aa45f77579d256922c65456b3a56504101d0c31e3f84cc88495d25ea83dc252fb41b24217d709b24a965a", 0xed}, {&(0x7f0000001900)="1d943445bf079515f1e356dbc2dc83bde98595c83ebd014e69", 0x19}, {&(0x7f0000001940)="5b5495e2561a3b5c6c7220a83056d7cd64dd97a8c770f8d3896d183d44dfe1939391c799d250d68b82c255af8d22970590712a461c2c8bd911bdeefe3d4174c9", 0x40}, {&(0x7f0000001980)}], 0x7, &(0x7f0000001c80)=[@cred={{0x1c, 0x1, 0x2, {r4, 0xffffffffffffffff, r6}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r7}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xffffffffffffffff, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, 0xee00, r13}}}, @rights={{0x18, 0x1, 0x1, [r2, r0]}}], 0xb0, 0x4000}, 0x8800) r14 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001d80), 0x2, 0x0) lstat(&(0x7f0000004280)='./file0/../file0\x00', &(0x7f00000042c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000004640)=0x0) syz_fuse_handle_req(r14, &(0x7f0000001dc0)="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", 0x2000, &(0x7f00000047c0)={&(0x7f0000003dc0)={0x50, 0x0, 0xa, {0x7, 0x2b, 0xfff, 0x200000, 0x5, 0xc, 0x5315da64, 0x9e24, 0x0, 0x0, 0x8, 0x7b}}, &(0x7f0000003e40)={0x18, 0x0, 0x8000000000000000, {0x9}}, &(0x7f0000003e80)={0x18, 0x0, 0x0, {0x1ff}}, &(0x7f0000003ec0)={0x18, 0x0, 0x7f, {0x8}}, &(0x7f0000003f00)={0x18, 0x0, 0xfffffffffffffff9, {0xfffffffe}}, &(0x7f0000003f40)={0x28, 0x0, 0xad0000000000, {{0xdab, 0x9, 0x0, r4}}}, &(0x7f0000003f80)={0x60, 0xfffffffffffffff5, 0x200, {{0xcf, 0x5, 0x7fffffffffffffff, 0x3, 0x9, 0x2, 0x1, 0x2}}}, &(0x7f0000004000)={0x18, 0xfffffffffffffff5, 0x10001, {0xa}}, &(0x7f0000004040)={0x16, 0xfffffffffffffff5, 0x6, {'noswap'}}, &(0x7f0000004080)={0x20, 0xffffffffffffffda, 0xa905, {0x0, 0x2}}, &(0x7f00000040c0)={0x78, 0x0, 0x1, {0x2, 0x100, 0x0, {0x0, 0x1, 0xfffffffffffffab6, 0x8, 0x4, 0x7fff, 0x9, 0x5, 0x6, 0x6000, 0x401, 0xffffffffffffffff, r9, 0x7, 0xa}}}, &(0x7f0000004140)={0x90, 0x0, 0x0, {0x2, 0x2, 0x1, 0x3, 0x9, 0x2, {0x4, 0x9, 0xd27, 0x9, 0x3, 0x8, 0x3, 0x1, 0x3ff, 0x6000, 0x5, r12, r10, 0x6, 0x1}}}, &(0x7f0000004200)={0x50, 0x0, 0x2, [{0x5, 0x0, 0x2, 0x7, '!+'}, {0x2, 0x9d39, 0x6, 0x4, 'tmpfs\x00'}]}, &(0x7f0000004340)={0x200, 0xfffffffffffffffe, 0xee, [{{0x1, 0x0, 0x1, 0x2, 0x0, 0x3, {0x1, 0x8, 0x8000, 0xfffffffffffffffc, 0x6, 0xffffffff00000000, 0x4, 0x2704, 0x3, 0xa000, 0x101, r12, r6, 0x0, 0x7ff}}, {0x2, 0x1, 0x5, 0x9, 'quota'}}, {{0x1, 0x3, 0x8, 0x6, 0x47, 0xfffffff7, {0x1, 0x8, 0x1000, 0x2, 0x4, 0x9, 0x6, 0x3, 0x1ff, 0x4000, 0x5, r15, r6, 0x80000001, 0x4}}, {0x1, 0xffffffff, 0x16, 0x8, 'trusted.overlay.nlink\x00'}}, {{0x3, 0x2, 0x4, 0xd63, 0x24, 0x33, {0x2, 0x9, 0xf34, 0x7, 0xa, 0x0, 0x6, 0x4, 0x2, 0x1000, 0x988, r5, r7, 0x3ff, 0x3}}, {0x3, 0x4, 0x1, 0xfffff001, '{'}}]}, &(0x7f0000004540)={0xa0, 0x0, 0x7fff, {{0x0, 0x0, 0x4, 0x7, 0xe, 0x7, {0x1, 0x3, 0x5, 0x2, 0x0, 0x7, 0xffff0001, 0x0, 0x666, 0x4000, 0x6, r5, 0xee00, 0x3, 0x2}}, {0x0, 0x3}}}, &(0x7f0000004600)={0x20, 0xffffffffffffffda, 0x10001, {0x8, 0x0, 0x1000, 0x7}}, &(0x7f0000004680)={0x130, 0x0, 0x8, {0x6, 0x0, 0x0, '\x00', {0x4000, 0x8, 0xfffffffffffffffb, 0x6, r16, r9, 0xc000, '\x00', 0x41e26886, 0x8c, 0x8, 0x1, {0x9f91, 0x3a7}, {0x2, 0x58}, {0xb, 0x9}, {0x5, 0x1}, 0x3, 0xffffffff, 0x693d, 0x2}}}}) dup2(r2, r0) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000004880)) ptrace(0x4208, r8) 5.675656039s ago: executing program 8 (id=3391): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) socketpair(0x20, 0x0, 0x7, &(0x7f0000000080)) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f0000000000)=0x8, 0x4) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)={0x101080, 0x120, 0x2c}, 0x18) open_tree(r2, &(0x7f0000000300)='\x00', 0x89101) close_range(r0, 0xffffffffffffffff, 0x0) 5.6043698s ago: executing program 8 (id=3392): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet6(0xa, 0xa, 0x10000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89b0, &(0x7f0000000a40)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x4, 0x8, 0x4a, @mcast1, @empty, 0x20, 0x1, 0xdfb, 0x7}}) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) syz_open_dev$loop(0x0, 0xd5d1, 0x200001) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r3, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x3}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r4, 0x1, 0x1b, 0x0, &(0x7f0000000100)) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000b40)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0x0, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x37}, {0x5000, 0x4000, 0xa, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0xeefec001, 0x4000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x6000, 0x0, 0xb, 0x6, 0x3, 0x6e, 0xfe, 0xff, 0x6, 0x90, 0x1, 0xfc}, {0x4000, 0x4000, 0xf, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0x4, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xeeee8000, 0x5}, {0x4, 0x9}, 0x40010000, 0x0, 0x80a0000, 0x300, 0x1, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000740)={"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"}) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$inet6(0xa, 0xa, 0x10000000) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89b0, &(0x7f0000000a40)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x4, 0x8, 0x4a, @mcast1, @empty, 0x20, 0x1, 0xdfb, 0x7}}) (async) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) (async) syz_open_dev$loop(0x0, 0xd5d1, 0x200001) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CAP_X2APIC_API(r3, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x3}) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) getsockopt$sock_int(r4, 0x1, 0x1b, 0x0, &(0x7f0000000100)) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000b40)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0x0, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x37}, {0x5000, 0x4000, 0xa, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0xeefec001, 0x4000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x6000, 0x0, 0xb, 0x6, 0x3, 0x6e, 0xfe, 0xff, 0x6, 0x90, 0x1, 0xfc}, {0x4000, 0x4000, 0xf, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0x4, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xeeee8000, 0x5}, {0x4, 0x9}, 0x40010000, 0x0, 0x80a0000, 0x300, 0x1, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) (async) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000740)={"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"}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 5.593388051s ago: executing program 8 (id=3393): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 5.530351352s ago: executing program 37 (id=3393): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 4.632147809s ago: executing program 6 (id=3411): mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) (async) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, 0x0, 0xffffffffffffffff) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0xa4, 0x0, &(0x7f00000003c0)=[@acquire, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@fd, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/171, 0xab, 0x2, 0x34}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}}, @enter_looper, @increfs={0x40046304, 0x2}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000380)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 4.616582789s ago: executing program 6 (id=3414): r0 = socket$inet_udplite(0x2, 0x2, 0x11) flistxattr(r0, &(0x7f0000000000)=""/1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00008c1000/0x4000)=nil, 0x400000, 0x3, 0x2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r6, 0x407, 0x5) read$FUSE(r6, &(0x7f0000000440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, r8, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x8, 0x2}}, 0x50) vmsplice(r7, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) dup2(r5, r6) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r9, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x401}, 0x4, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000d59c3b6d12198e6776c0a517e4780f06a1c0eb230aa385c9f973b9d7f58b54f14e23c946936ce1786ca7086ac4234ed1d685432120c2495ddd5c034d555e6f9d4e8e89c10bce9243a3d50b22e9eeb184669ed59a90030c1944a97fa734fcd520738b29c7235a9b80e7b85dfb64a2b0d91c928618a6", @ANYRESHEX=0x0, @ANYRES8=r3], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) 4.140874089s ago: executing program 6 (id=3416): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000003480)=ANY=[@ANYBLOB="1300000065ffff001000000600395032303030"], 0x13) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) fcntl$dupfd(r0, 0x406, r3) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0xffffc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) (async) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) (async) r4 = dup(r1) (async) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r5) (async) syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0) ioctl$EVIOCRMFF(r5, 0x80085502, &(0x7f00000000c0)=0x18) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) (async, rerun: 64) write$FUSE_INIT(r4, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50) (rerun: 64) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',cacIe=loose,nodevmap']) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r6, &(0x7f0000003800)={0x2020}, 0x2020) 4.117537039s ago: executing program 6 (id=3419): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x30}}, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004300)=ANY=[@ANYBLOB="1c0000001c000100000000000200000007"], 0x1c}, 0x1, 0x0, 0x0, 0x80000}, 0x4000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r2, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0xe253db93f6bd9019, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$BTRFS_IOC_ADD_DEV(r3, 0x5000940a, &(0x7f0000000080)={{r4}, "8a581ac55823a060fe3129603fb082e8d4cb03b91da7dafb9ea27b2f1466fab9926f9fdc7ae609ef39c228f713f1c725830a5b2f6e6cae34570df5ad27d96de68b45dbac9b5856589bc81071434b6287ee742a381c6257e78de245f7a22a0c3c43015823ab85c89fad40c41508608c26c2fa5ef967ec24e4ed1108289d508e2de0f9f73b5ce44624a10c545d9cdaa57487b33e23f9d97247fb527ed27382c7bb61786b8b64921f5e7d5eda822c65d65f1483ce7a70e69723e66c739e9a0f448aa1a0ba01f87ba577bc2b63d7bf610a33af04125f0bd93d86da09043c927e7d3422676be23f765b6a1ce175eb83dbe32e25103e9fbd1ae166eea4b4b586921d0521d184869050b0595134b9b07e1ceb181907c85ad098a04abb52ca09f12ad869f3616f6997a6ac130f4251200cb2f482f11df0ae539392ffe56599afbd115c10ce9014f5cb0b666bac7329c38a43d85ea3fac2b4a06f229882bdbca62f400309773da63dce9045c9395ac72357d7fb49d95e3a8f3e923da17bac27d7c84045090d466ac1a5b36a9a6870e19ef8a76d1a799d4be3f49bbeaa7af073eef75cc8e8270f750094466c227d5b1169572bfb2618ed597740ce880d8387a286ef940038512a867c7307b8a8f949e9caeadfce460661f759860674e8654f09cdb5abc19b5aa401b496d88fa8f3787590de488a400ace607913161851e07d5371b1b24033783f33fdea8c8694cac2a4f79a9294093a9298ec70cffa884a7685af02c4fb1719a5fe9eb35f1f8afcc01ef1b8263862c12a75ec631530162bc13b65406e458b49b9b1c4c3e0f1fb073612012e7391c830f2eeb2db92031a5a685768853f0063b6bec01bd741d021caac1dfc57b129d7d47af7c3e4a88ce46cb48adb8951918db8783bb57547817763a4a43bc88f65c8146876d92d54e8c1a75e1e0877668ef85f554ae73c4bf459738b62b6395ae3b65d52489162ec2df904c352b49363673e28711105fd096e354e479daae67cbbc233b024ed6898eca6ba0172871b780daf40fd9c543dcd2a15f4b9aca6a75b1f484e98c7fa8d091f8bfb714ae812a503ebb8765ac40c327596b0baff7fd6871154b646b9a4e382b06d003d603e07df1c36a9f59390681647b7b3ae4d45110cf8aa1b2c050977f1e6fa9401fcb06f355a5bca2c0cb462be7f4cf8a1acbe40249c6b9c87596fdea447df9fbcec98934c79b399b5797e028ceb544f1418d58471571a6b7e1990b3778b8c7494b50e262f1a1c3844e48e6991bb9b26bdd5968e7dd382aba8278f48084767ddfd53624d259f3458285e42e494bf9434d121a84c50c431f32209eb575ee477162f3191f73d635bf4038f1622a8b66654cbe6a98b8ead419d62014f973babe9e2751e65eb2b86c8099e71caa1d23254169b9f6b2e8893874d8ce190f0fb78a50668a8a3026f434658c4985c41fa2b9de60ddba2130dcc1cd812ee9b92943ff91e5240ef14d6c0637f3cc32cab9c2ba9b7ea084b1ed5252397a14e1a97dcfeac06bd7b03f0d3a8524e1ce19be10799d9720991dbf8f97565292aa61fcb7b105fca4b125e70805714aad08544fb653911a143b4872b2855b34531a1ea4efc1436cbd4c41b9a7f8871bf691cccefd302874d92856d345f92dc47ae3047a39aa7e75c61221605d3091d3c5c6dea7039034f9eeffe82d6dfedd02647db39d4e7af1afd8c39a7e84db37af0b33de12c2780ae23332c8943201438d6ebc674bfae8c221adea76ffb1d1c66b9d917769719b20f8e86b1e7f451f49a317f779f1e8a94dab335a417d1bc81f2dc97731ddbe554eb30691ee2fde626a099a156fb486ef4306138c16e057b4cf48eea18eba500ca8e40bbfd266bcf99f313a32a2bc49743e5ab297123c42c85662034f68be8c1f2f366b264225e0f1bf7eb16176fa40193954bbdf1a481fce52edb84eeb3524111c11acacae9e581d50e5b637469c7acd3394f0281bb66475fffa8d8c2090095b4c8e4191ad627932aa49ec47394bdd5cd96894942f5a28fba5c085362930523e7a089091f633aa23ea5a596cb4c8fb719a20c8a8892cf4f928785a0c6ddc6c03cfe2e1561be1840681ef80944f159b7b3f542d84252b95d3d4d7cba792f057b49b3dff07435edcfa0c70fe0695f7edf808f0ce2e8fe0d93854dc38fc15b33dd1fc8abd4ddf16795ee7415e582ca7cbf5c6a1b62fa151f61411aa328b778a4fed548fb48e24dfcb3bdea578f39af2750eaac035f21e952f197a291856dcbfef7ec5a804b94a0ac57b3d2f202c4e6876067f85b0e556692a25674bb83725969cf9f79a2265f05b24e18be41c91f8147923a30145bb9dfc0a5e5544a1e901f05f2568a24574da0918c6bf6a0f7f359e6ff42ba865f1c0aa9d0e579c17f60559c57af409f1b253bef18f4e487af732e0e1683b1eb9c6790e492b7e8752adbc7b2c8c8bbe5c012b3ba2503d7b8278b14dadaf607d3f330fc3ea0b1288815d634c55b3f0087c84577b14b3984fbad011dcaad63a61502067909f6ecdd237ccbd999812e1e7f0a65beddfa64ac949ec99543e2f71c55e57bc63e1a0fdf2853c7aef2fd6e809e47eb3d36349917056a9d77273121f026a3b8dd6a191976c46e05d1c9d95f7933b547163a468cc92108248b5592d29f8f2562655c2d4a906a661fa0ccdb4b97617af0534db843ef15117fbbc85dff01b263946581fe43a7a859b5c58212207bec118224ae5998f8f8744a55b749d701b4967b11cc16f38b2a9682db1bd8f3a96cea827b1ac5c7d190d9ee04572fecfafe91bfa737d547cf687562c56f20d79d7bb6854d12b9a0124cea94a273860218be677b78fb1924acb07b318caa8ea3db20edc9588f68454fecfcaa940993f1c84acabee8066ba842d85e400740b14eecaf3565411c489c9174efc95b90b3243aa9089d350e6f81e94c5a7c8f557fe12631b7a39306a73908e86d442066a6f2b058e099a49b738116d27f9aa3f270e401e09bd9a5ac0be028572dce84b04a696b5b1cb455a9bf934f58e2635869755b7e746d16cafb4ba25f76ec319c60294666fa5c9010b48fd3e618cd8923b99da5fb4995b091183ee99a36e209dc156cbf24da0dfad41646fb2a7e6640484da4a3584c4836276980e9e68def7d0a3b82d04fb7c251151d70398254023258d4f6a88e205d9771f55093889988f7aa58a950ebf8359546f2f70eeb31dd0a9a94c91027700b070c056610c4a3a3d4178bec492a3b3df8732875e206cf4c5146ecb9d391e37005ae00fa4f2ff24b8c4e1dc363398817c549d4d33112bc4fb67b24596e09fabcbc575a11473a10d76f576a4c87b41962b3e134b7cfc21ebfa1097ba6a779799e574bf0d5f87dc3d39d64515517fa03e714e39c99e803a523066806de68e876c1db914f0e6b28ee2278a63b6191b063ef3355e50b2acab33d9b2399cea9e4aee69ac6444ea7d951b544b054db8ecc9f01721baa32b5ad083cb3d2b675e6f3d92223351ba20f1d32a3f296da1f44327dafae9354b410534cad9049e5871a32c9a8169ece605f4f94d4bdfab5d3f75bf2b5c3197038f73be24f4d79bd78243dfd7b5a449f8bf006607b33c1e36ccbc4bdec1dd423f8f23b5b267ff0f07f95b614beb81238ef4672dfbd51a875d8b3d123a3173d8347cab8a55511fc6ef561dff00e64d70375e57dfc51f22a0127722d717635b8717fbdf7b6416319e50e28a8a2e3bb434a7907bcbec854ab9d6d6ff14437865db79818d0dc03dadd169f42c72f6929312b382b5df36e7f971b2a1912f113f6e901d1f7b8826ab2ce261c87c367068339fc1e131337f75d02c98b7f02c5488b3639c6647958eb58372139dc6e6779a61f278b5a0ddad7c1641c1fe1410f8e77cdf4aef2680096fb5b0b359db89f9379a9def71486407d49f0722cee158e59b9cb2ea147771c1ef777985bcf41f0a247dc5759d22e1eeb2c63e67c9dff4bf84f708b9bb56e6ca1c3806686c4180df41387540cde802bd830bb73c1ce4d7866d3d68271729b751215259f1e67d42fba150c8e16d063419c0069a5bfe05a14865457ce1161175b06eb87f4124ee23979833a1f8243609b8a59ef062f3863e59a56e3b82d80d6080f0f406470ff53624ae6875707c80a1b6851f8a179d8cadef5b3fd045c4ae7ada9e9a3f18a3414cead6b51fa490c0890f1c11c1badd1a1261ae8b7f1cbe132d2d901d9a87105f8a11c937b0b3143274cf64fa98c3933e0567c5c43b9108eff31e13fc74285085703ea20c7db60d7e08b793d37bd9ce600a7d2e85eb409c1c7c3dca1e2be1c119cfb2920fd1ad57a982d61cf4c5226276f4263bef20e0d07db6bd1bee2d8cc6f77226e2d6b139bb9e8115e379e9faab841c8bb88683b64602b2dbb2116428ef398f68f05a137e2c1066f330ccbf99779598af2d385458652b2b38f15bde2cafcddd56ecaf4e2bf17c1928ec8cef3bfd70cce564da73311bd9e861b7b496e9ce54c219eac8ed3ff9f60945ab88419184222f6798769ce21bf6d602d65c0ed0259c8d943ccb672e9d946389fd4ebca63b7a58a0365ddd0b740c249f30ba72b43557385e15d3231f8879ffb26849e4617624a30277a4b1423021f2b27d46548ce00634a7fad877be46d826db0795bf25c98f96bf9d32199d318594b3d47635344604d072a0ce57dc81cf9be20de6b6e3d1fd6e5865f5ac37e4ed3848598f0852f958ee8e982e57d681be1b22c35db02b90e7f05993c211a0504b97e0dba42d33d6258d44165675f4feaa1a977ab944231a382f2af5a33427e5add2466aaa426c8d869fcd1cf2bdf17b4709ddff2fb3a7fc947d525df5690982d8462560e2e54b7d8e401e2dea1b41192e977b7d6ee0a3de95eb3f4742f00469a1572aa7f57a380ec72dd0b8615809f85000960960a80ce5d6e4f2e9a9bc8d300344d2426c9fd1945f01e0e3e845f1418dc4da3e311d763a63b0edcc5165fb2cf90af0a66e90f466ac59416afd252dc2e1d887d2075df2199df58fd7cb1e3c6cc1a2c57536ae5267067a6d64ace6aa5dba84b0d5a621125e68668efe2fdb15efaefd3c0f986dc7436c0f379026a8c07a69bc9d32f242ab910eb0a442c3bf50c684cc3f2f478610a11116925611882f1e68f32bc4477deba3e0a2bbda019702116ae7d4a596ab153cd9eab12ad7408bc17873ef3b2fdca4e381bcdbac4dd39e6f220425cc1cbc8aaf6ecb60390f2f149803fe399f4aed80df9a0a0894b1906143dbfa498cd197cfdd5e0edb896ab12c14d0a487f7578ef1dda7765b191cb9cd251388f1f1d79d47dac32dd19237d5ae09593c215f21a89d42614476cb571961db39ff7c8ec52adbcafc8d9ba6b9915ff1264ea678f7f015268603e1c807ef4124a8e4aed3d0e7839ea732325b4ef9abd0d05b900431ece9dcbfb6a0cb31b85ab68259c56b585a666996b67c62213f639fef615575e409d3fbe66e86ec4178e8e27d1c29d3978f32b1c5a6ab8cca820628ed6fc3c4de6d5f9047c0b3d47faec9a4a31cd7a1f98bc3f07453537a31ee28c1bd5ce5bb6c8a8d02ab3250a6c71f357909c0dd7e4382d5fdd20054fa0414654c8a54d7837c385d629fb86f324abf8f503fe4c9edcc8eb3b65cee205f0ab69f1b5e636502d0f4a1f80c79048ecd82a6c9f7270f2239c41c887d64934dd71e25042ef17821a58f89ec58258bc70b4158864f8ead14347d161b927f6250e698328062a56ceb7f68f971a63bd4eea6bdfb015850e6abf3200eec4466cc532001d791353efe1f8bedcd5a739"}) mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) getsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000001080)=""/47, &(0x7f00000010c0)=0x2f) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000000)=0x5) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x30}}, 0x0) (async) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004300)=ANY=[@ANYBLOB="1c0000001c000100000000000200000007"], 0x1c}, 0x1, 0x0, 0x0, 0x80000}, 0x4000) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$inet_buf(r2, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0xe253db93f6bd9019, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x0) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) ioctl$BTRFS_IOC_ADD_DEV(r3, 0x5000940a, &(0x7f0000000080)={{r4}, "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"}) (async) mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) (async) getsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000001080)=""/47, &(0x7f00000010c0)=0x2f) (async) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000000)=0x5) (async) 3.262016046s ago: executing program 6 (id=3430): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, 0x0, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 1.764830455s ago: executing program 9 (id=3453): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f00000003c0)=""/184, 0xb8}, {&(0x7f00000000c0)=""/128, 0x80}], 0x3}}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x2, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000001000)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@flat=@weak_binder, @flat=@weak_binder, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.680821327s ago: executing program 9 (id=3457): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x64342, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x7f, 0xea, 0xd2, 0x8, 0x1d2a, 0x801, 0x72c7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x60, 0x80, 0x64, [{{0x9, 0x4, 0x70, 0xf, 0x0, 0x7b, 0x6, 0x72, 0xf7}}]}}]}}, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r1, 0x0, &(0x7f0000000840)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000300)={0x0, 0x31, 0x4, "d544cd51"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_user(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="73797374656d5f753a6f358ffe50745f723a7661725f6c6f636b5f743a73302075"], 0x2d) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x68f, 0x58) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvfrom(r4, 0x0, 0x0, 0x21, 0x0, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000080)={0xfff, {0x10001, 0xfffffff7, 0x9, 0xfffffe01, 0x1}}) write(r0, &(0x7f0000001400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a010ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a9cfa7e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0x1000) 1.464826611s ago: executing program 7 (id=3466): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2ced, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0022ff0300000000000042"], 0x0}, &(0x7f0000000680)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0x10008, &(0x7f0000000300)={[{@nr_inodes={'nr_inodes', 0x3d, [0x4b]}}]}) ioctl$VHOST_VDPA_SET_CONFIG_CALL(0xffffffffffffffff, 0x4004af77, 0x0) r2 = accept4$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10, 0x80000) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000180)="7e3c7fdc0df5a9e7d6b46c0a8ebf3ef64fb56362569e3afb2434643484b857714d82c7374d25f009988c3bef4104d31cac87e457f9e8654c4a1e0e627e92e0641537f98ec5fb45060faa95e09f50c2bcf2b84568745fd9603d5d23b05b6f67288cde1321c24a3fc7614f837059ba98e286d481eb9b29e57000f83b59b992f474813740c730f68b8f210bc62224763f6f2a7d2d9a2664abe5414a83826d4185db96", 0xa1}], 0x1, &(0x7f0000000580)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xbe46}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x70}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x60}, 0x4000000) (async, rerun: 64) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) (rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x35}, @fda={0x66646185, 0x4, 0x0, 0x25}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 948.968091ms ago: executing program 7 (id=3469): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x3) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYBLOB="000000806d6178"]) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x7c, 0x3000, 0x0, r3, 0xa}) close_range(r0, 0xffffffffffffffff, 0x0) 948.646772ms ago: executing program 7 (id=3470): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10002, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0x81007702, 0x2) 948.447261ms ago: executing program 7 (id=3471): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) (async) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}}, 0x50) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',access=', @ANYRESDEC=0x0]) (async, rerun: 64) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') (rerun: 64) read$FUSE(r3, &(0x7f00000003c0)={0x2020}, 0x2020) 948.048291ms ago: executing program 7 (id=3472): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002740)=0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r4) ptrace(0x4207, r4) tkill(r4, 0x12) ptrace(0x4208, r4) syz_clone3(&(0x7f00000038c0)={0x100000, &(0x7f0000002780), &(0x7f00000027c0)=0x0, &(0x7f0000002800), {0x20}, &(0x7f0000002840)=""/5, 0x5, &(0x7f0000002880)=""/4096, &(0x7f0000003880)=[0x0], 0x1}, 0x58) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000003940)={'\x00', 0x3, 0x4, 0x100, 0x1ff, 0x8, 0xffffffffffffffff}) r7 = syz_clone(0x380000, &(0x7f00000039c0)="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", 0xfe, &(0x7f0000003ac0), &(0x7f0000003b00), &(0x7f0000003b40)) syz_clone3(&(0x7f0000003bc0)={0x100000000, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), {0x3e}, &(0x7f00000025c0)=""/87, 0x57, &(0x7f0000002680)=""/163, &(0x7f0000003b80)=[r3, r4, r5, r6, 0xffffffffffffffff, r7], 0x6, {r1}}, 0x58) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0xd23c0853f5c4551d, 0x4000, 0x5, 0x1, 0x7}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000021c0)={"48994708df8eaa3332a93543f64d3b266b50b4e9d933a0f24b9447a1734b9825c26e5a2f20b03fd7eb78b9449f6e3c04905ff98b968f7d9d5e1cfbd24b28081f17c508f3f3258da2df5c6a033cacf28aac7fb621875959b5e68582a2f81827b1bf564ff840589d711a81ea374b2f42cdc7e657c1548337a96f045545b74d1ec4b95c4b4639b1ca69cdbdde954dfd108b1dc2c81e31a4f28ca826afaaee6737ece2d44f69882e8f8ca2c1e3ae820fed623e5a56394f399e4f7c5f9856598a7d759cc289b9876650801cd314b01710ffd84578f5ff2969a9b192de538352675827bd73ce2d69c5fb266d74c2b864aaa4ccef164a4adf7f754870de2d0842cea2574d6a635407aa99a89507fcbb5a9c96c2b25dc3f4429028f6c6371dfd52fc44574e369e3470743324c57d8662d47b0b935c0505ed4f9fde33b908ee6f7596fdc3e219d2d3a6cf1dad524dfe4c5798a33433927de6d67c88ad20d1b64fda9770b04746903bff3f081328a03d640c74c3b6c197b5d5377b99d3f2f939dbc6f0ae04d22d4db1f765806ee71d634ecaf39d56fca4a24549e59f758a5a7640615dda695398dcccda95669b2f3f0e4c643320ea1e9857cf3824729bdb519b577cd44c6032532ae43bae6d3aa78d57c809419da02267283744defad26268b8ef026ffd0f4cf216117be0832a03dc93208e35913e645f304362d8616146337ffb170811383043276079b04be9bac3ca0897a3058f0d4e7774acd2bcd6135b7063d6eecd94b46b7b65d7280909eb1c42dec57c4c5902ca47f6defc98b8f0f1e88c768a490e10af968171b9d7f3f4c64fd110137244c9bac641acf723a3c462126dbb4860ebcd7a9a5c7480b0bb565514ac9c16bddc00fc2f696ea03153a77042b0afa49a85241cc6d6857653844cab3dd94903f43f64ccb9e4407502df8ae3efae77d313b41c0497956ad7887fd1f45db3ed54e886e909ba6426344b4d21b1e207658ce4df416e909828d6958c1cc688e686bfa213468a147e677357dc3ffcd30e15280656fc6ead62e80e48c89041fd05ed12fa1ad2151047b56d6d2c50b3878288c6217412b4c8b971f264042329e1020b056b5093867c779a17ffc748521923921419a1519607fedafd53d9a9270c8774d6c6120daa6ba4cf80da9be83ea094461ea409cdd1f7b1bbda23052db3a94d361a5739245bfa7501e70148d121ce919fb36bc0ae2c0ecdeb459fb9abc11e6c09520a1349906fdcec9d7676f3745267a9e16d0c139f309fdea2c4f7d12ed3162cbb37f68a2a09157563aa0c8d3a1bb36f47c6d65837a060b45e22552c893046461a07464799eb6d12f384a8508843374a5e042fcd7945baa32e4773ed5f15ee7c2843a676f743c814c1aa878656a14ed635c47541943b0ce4e8e13ff9a24a9d02b27f03fa9eb3f7488883d22207815f63c77b4d"}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r9, 0x6, 0x3, &(0x7f0000000440)=0x10, 0x4) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r10 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000002180), 0x0, 0x0) fcntl$F_GET_RW_HINT(r10, 0x40b, &(0x7f0000002640)) read$FUSE(r8, &(0x7f0000000180)={0x2020}, 0x2020) 906.447842ms ago: executing program 7 (id=3473): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x458}) readv(r2, &(0x7f0000000540)=[{&(0x7f0000000040)=""/80, 0x50}], 0x1) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) r3 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000006, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000922000/0x2000)=nil, 0x2000}}) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0), 0x0) bind$can_raw(r4, &(0x7f00000003c0), 0x10) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffc, 0x103803) syz_usb_disconnect(r5) bind$can_raw(r4, &(0x7f0000000400)={0x1d, r1}, 0x10) socket(0xb, 0x1, 0x3) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 620.869358ms ago: executing program 6 (id=3479): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000081c09668800000000000109022400010000000f0904000004030000000921faff0890a98b1e09058103ff03c9ff"], 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_readahead}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x10001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x80) sendfile(r4, r4, 0x0, 0x7a680000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 560.126659ms ago: executing program 5 (id=3481): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x141342, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f00000005c0)={&(0x7f0000000240)=@canfd={{0x1}, 0x88, 0x3, 0x0, 0x0, "d6654fb393eb970e005e920024e8fe45ae01ab710300000000000000c6b6aa275866f025eecb750a3371571c516f4d7ec48f1dbabe3172939f52577f72fcd45d"}, 0x48}, 0x1, 0x0, 0x0, 0x48004}, 0x80) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000300)={{r2}, 0xf, 0x1, 0xff}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r6, &(0x7f00000015c0)=ANY=[@ANYBLOB='decodes io'], 0xf) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="6af1a2efe1b44ca4aa2849c6495bab954f65c4fe61e7f4fe2095385aad6f87f91e4d7bb65150af22be30a1aa404257e9fc425cd74112f81933f8f51578aa8568c612f8fa9135bce73af85eca12081347188287095e34a83f4e14569f8ad4620b23550b93e54ebd42fee5f695cf7d7e490519f056aecbef33a6b8d999b9", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_DIRENTPLUS(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES64=r7], 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffc000) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_RESEND(r7, &(0x7f0000000080)={0x14}, 0x14) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_PIM(r8, 0x29, 0xcf, &(0x7f0000000100), 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 525.804579ms ago: executing program 5 (id=3482): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r4 = epoll_create1(0x0) epoll_wait(r4, &(0x7f0000000840)=[{}], 0x1, 0x7) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x14, 0x3, 0x3, 0x101}, 0x14}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r5) sendmsg$IEEE802154_SET_MACPARAMS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r6, 0xe81, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x804c090) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002000), r7) sendmsg$IEEE802154_ASSOCIATE_REQ(r7, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000000040)={0x24, r8, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040041}, 0x2008844) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r5, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r8, 0x200, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x40) 460.687171ms ago: executing program 5 (id=3483): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@getae={0x4c, 0x1f, 0x1, 0x70bd27, 0x25dfdbfe, {{@in6=@remote, 0x4d6, 0x2, 0x6c}, @in=@loopback, 0x2, 0x34ff}, [@mark={0xc, 0x15, {0x350759, 0x6}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x5}, 0x40040) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x1, 0x14) (async) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x8) r3 = inotify_init1(0x800) inotify_add_watch(r3, &(0x7f0000000180)='./control\x00', 0xa4000960) (async) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000280)='./control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x1, 0x80092a3, 0x4, 0x2, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0xa, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x5, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0x6, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0xfffffffe, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x4, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x95ff, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x8008770b, &(0x7f00000007c0)='\x00\x80\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xaf\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda(\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8\x0f\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') 459.685921ms ago: executing program 5 (id=3484): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x49, 0x0, &(0x7f00000000c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='fscontext?}']) socket$inet6_tcp(0xa, 0x1, 0x0) 458.198501ms ago: executing program 5 (id=3485): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) setreuid(0xee00, 0x0) (async, rerun: 32) r1 = getuid() (rerun: 32) setreuid(0x0, r1) (async) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@generic={0x2, 0x1}) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) (async) r2 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='^\t*([%\x8e\x00', &(0x7f0000000200)='\x00\x00\x00', 0x0) (async) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) close_range(r3, 0xffffffffffffffff, 0x0) 457.133561ms ago: executing program 5 (id=3486): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newsa={0x170, 0x10, 0x633, 0x0, 0x0, {{@in6=@local, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8004}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, {0x327, 0x9, 0x0, 0x4, 0xfff, 0x0, 0x1}, {}, {0x8f, 0x0, 0x8}, 0x70bd29, 0x0, 0xa, 0x1}, [@encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in=@remote}}, @algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x5e21, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x3f}}}]}, 0x170}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x20340, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000080)={0x6, {0x3, 0x14c2d460, 0x6, 0x78f, 0x6, 0x5}}) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) (async, rerun: 64) ioctl$TCFLSH(r3, 0x400455c8, 0x0) (rerun: 64) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448e3, &(0x7f0000000100)) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c0, 0x0, 0x0, 0x0, 0x2d8, 0x2d8, 0x2d8, 0x7fffffe, 0x0, {[{{@arp={@private=0xa010100, @empty, 0x0, 0x0, 0xa, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0x2}}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) (async) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) (async) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000040)='\x00') pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c0000000e2639fe57d49a21f06b902f490056cb1613221a85b266d1237f9f2763727e2d57cc929c0a9630d0ebda0e8c25bb82b274fa5764d84e564f133c7d900ebe559e7f10997c5ba326502ee4218df8fd37dfa0035f29687896be9349af429f9156a49f44609b9e58b13d56ab1f5ce4df7626d2031a522c50773f39a5ef0988ae64d0197b888359d3bc5746315c5746a758acd178cbcb03641fd6b18be15b3bb2caed4fc70025ea5e21e1d923ddbc57e8eb11d8004bc6d6a34321fba4f7b2670175e92c028fc530f8bd5f1177a398d473b220d7b5bd6b55ba383cffdd95b12c6ac", @ANYRES16=r7, @ANYBLOB="200027bd7000fddbdf253d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0xc0}, 0x1, 0x0, 0x0, 0xd0}, 0x4000800) 126.043237ms ago: executing program 9 (id=3487): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000)=0x401, 0x4) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 109.363828ms ago: executing program 9 (id=3488): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x20000, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xffffffff, 0xffffffff910d11b9, 0xab2, 0x8, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x800}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0x2, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) ppoll(&(0x7f00000003c0)=[{r3, 0x620a}], 0x1, 0x0, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x3) (async) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0xc6225a99193a0f6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 789.98µs ago: executing program 9 (id=3489): syz_open_procfs$namespace(0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 0s ago: executing program 9 (id=3490): syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000012c35b400304106098c6000000010902120001000000000904"], 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, @in=@remote, 0x0, 0x2400, 0x1000, 0x0, 0x2, 0x20, 0x20, 0x84, 0x0, 0xee01}}}, 0xb8}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000140)={0x1f, 0x17, 0x3, 0x7, 0xb6, 0x7, &(0x7f00000001c0)="29b0c8dfba42f542dbb8fe65f0a6d18e8629ad5bcfb379b7ce0a4dc521b2d43367bd7c7075721b51ba4e006644200da55ac48b0eed422a2709fd32836ed58686ec336d015fe1ed7df798eb258979754975c550367eeed047eb92aa0667d0a0988ad85d4f0f038cf696ba89d9b52952a0c15a57e2c74b7f8325bbd971418b80418ed6f19967f8b9caf67cc9df6392d49e377d139f77067280fc345f1d0dc31ee2fb3293b752a520fb872f4740c672c71346456dcae4f9"}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000000), 0x22004, &(0x7f0000000100)=ANY=[@ANYRESHEX=0x0]) kernel console output (not intermixed with test programs): 000005.370:564): avc: denied { connect } for pid=7512 comm="syz.5.2400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 177.592158][ T7513] rust_binder: 78: no such ref 0 [ 177.614848][ T7513] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 177.615678][ T10] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 177.623466][ T7513] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 177.631482][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.647619][ T10] usb 5-1: config 0 descriptor?? [ 177.735402][ T7519] kvm: kvm [7518]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0xc1) = 0x5 [ 177.744049][ T7519] kvm: kvm [7518]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0xc2) = 0x5 [ 177.754941][ T7519] kvm: kvm [7518]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x11e) = 0x5 [ 177.766173][ T7519] kvm: kvm [7518]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x186) = 0x5 [ 177.774899][ T7519] kvm: kvm [7518]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x187) = 0x5 [ 177.788921][ T7519] kvm_intel: kvm [7518]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x1d9) = 0x5 [ 177.928260][ T36] audit: type=1400 audit(2000000005.710:565): avc: denied { relabelfrom } for pid=7532 comm="syz.5.2408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 177.948292][ T36] audit: type=1400 audit(2000000005.710:566): avc: denied { relabelto } for pid=7532 comm="syz.5.2408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 178.263396][ T7545] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2413'. [ 178.279526][ T329] tipc: Disabling bearer [ 178.286143][ T329] tipc: Left network mode [ 178.324982][ T7547] kvm: kvm [7546]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0xc1) = 0x5 [ 178.337287][ T7547] kvm: kvm [7546]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0xc2) = 0x5 [ 178.348851][ T7547] kvm: kvm [7546]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x11e) = 0x5 [ 178.361676][ T7547] kvm: kvm [7546]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x186) = 0x5 [ 178.370566][ T7547] kvm: kvm [7546]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x187) = 0x5 [ 178.383824][ T7547] kvm_intel: kvm [7546]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x1d9) = 0x5 [ 178.557846][ T7558] rust_binder: Write failure EFAULT in pid:110 [ 178.666999][ T7563] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2419'. [ 178.698054][ T7565] cgroup: name respecified [ 178.703913][ T7565] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 178.704035][ T7565] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 178.711052][ T7565] rust_binder: Read failure Err(EAGAIN) in pid:117 [ 178.882943][ T10] usb 5-1: Cannot set autoneg [ 178.894385][ T10] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 178.907020][ T10] usb 5-1: USB disconnect, device number 30 [ 179.133420][ T36] audit: type=1400 audit(2000000006.920:567): avc: denied { read } for pid=95 comm="acpid" name="event4" dev="devtmpfs" ino=681 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 179.155310][ T36] audit: type=1400 audit(2000000006.920:568): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=681 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 179.178125][ T36] audit: type=1400 audit(2000000006.920:569): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=681 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 179.225773][ T7604] netlink: 126 bytes leftover after parsing attributes in process `syz.0.2432'. [ 179.247299][ T7606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2433'. [ 179.256333][ T7606] bridge_slave_1: left allmulticast mode [ 179.262327][ T7606] bridge_slave_1: left promiscuous mode [ 179.268096][ T7606] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.276438][ T7606] bridge_slave_0: left allmulticast mode [ 179.282286][ T7606] bridge_slave_0: left promiscuous mode [ 179.287935][ T7606] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.369765][ T7609] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=261 sclass=netlink_xfrm_socket pid=7609 comm=syz.3.2434 [ 179.410769][ T7613] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 179.411154][ T7613] rust_binder: Error while translating object. [ 179.417709][ T7613] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 179.424073][ T7613] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:690 [ 179.468689][ T7615] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 179.529213][ T7616] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 179.535743][ T7616] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 179.543836][ T7616] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:692 [ 179.569829][ T405] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 179.731431][ T7600] tmpfs: Bad value for 'nr_inodes' [ 179.738191][ T405] usb 6-1: unable to get BOS descriptor or descriptor too short [ 179.746083][ T405] usb 6-1: no configurations [ 179.750815][ T405] usb 6-1: can't read configurations, error -22 [ 180.116673][ T7620] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 180.268684][ T7640] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 180.281458][ T7640] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 180.414579][ T7649] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.626534][ T7660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2453'. [ 180.658086][ T7662] netlink: 'syz.3.2454': attribute type 4 has an invalid length. [ 180.666089][ T7662] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2454'. [ 180.853281][ T7681] fuse: Bad value for 'fd' [ 180.880699][ T7684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2462'. [ 181.019823][ T425] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 181.170929][ T425] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 181.180160][ T425] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.188846][ T425] usb 6-1: config 0 descriptor?? [ 181.506734][ T7711] fuse: Bad value for 'fd' [ 181.620495][ T7727] 9pnet_fd: Insufficient options for proto=fd [ 181.653549][ T7731] netlink: 'syz.3.2480': attribute type 1 has an invalid length. [ 182.401868][ T425] usb 6-1: Cannot set autoneg [ 182.407109][ T425] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 182.419490][ T425] usb 6-1: USB disconnect, device number 6 [ 182.442972][ T36] audit: type=1326 audit(2000000010.230:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7728 comm="syz.0.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3fb8eec9 code=0x7fc00000 [ 182.466607][ T36] audit: type=1326 audit(2000000010.230:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7728 comm="syz.0.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fde3fb8eec9 code=0x7fc00000 [ 182.819749][ T36] audit: type=1400 audit(2000000010.600:572): avc: denied { bpf } for pid=7747 comm="syz.3.2486" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 182.987314][ T7760] kvm: kvm [7759]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0xc1) = 0x5 [ 182.995799][ T7760] kvm: kvm [7759]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0xc2) = 0x5 [ 183.006634][ T7760] kvm: kvm [7759]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x11e) = 0x5 [ 183.017584][ T7760] kvm: kvm [7759]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x186) = 0x5 [ 183.026459][ T7760] kvm: kvm [7759]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x187) = 0x5 [ 183.041406][ T7760] kvm_intel: kvm [7759]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x1d9) = 0x5 [ 183.077667][ T7767] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 183.129660][ T7769] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:716 [ 183.149797][ T405] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 183.289835][ T405] usb 6-1: device descriptor read/64, error -71 [ 183.599850][ T425] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 183.741406][ T7793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2500'. [ 183.761011][ T425] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 183.770164][ T425] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.778785][ T425] usb 5-1: config 0 descriptor?? [ 183.789846][ T405] usb 6-1: device descriptor read/64, error -71 [ 183.864414][ T36] audit: type=1326 audit(2000000011.650:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7794 comm="syz.3.2501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c9f8eec9 code=0x7fc00000 [ 183.881240][ T7800] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2502'. [ 184.010068][ T7826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2510'. [ 184.029805][ T405] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 184.084602][ T7837] overlayfs: failed to clone upperpath [ 184.159830][ T405] usb 6-1: device descriptor read/64, error -71 [ 184.399798][ T405] usb 6-1: device descriptor read/64, error -71 [ 184.509899][ T405] usb usb6-port1: attempt power cycle [ 184.606115][ T7849] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7849 comm=syz.3.2518 [ 184.618947][ T7849] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7849 comm=syz.3.2518 [ 184.631938][ T7849] 9pnet_fd: Insufficient options for proto=fd [ 184.849840][ T405] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 184.870986][ T405] usb 6-1: device descriptor read/8, error -71 [ 184.988837][ T425] usb 5-1: Cannot set autoneg [ 184.993849][ T425] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 185.000993][ T405] usb 6-1: device descriptor read/8, error -71 [ 185.007433][ T425] usb 5-1: USB disconnect, device number 31 [ 185.122195][ T7851] netlink: 'syz.0.2519': attribute type 1 has an invalid length. [ 185.147038][ T7854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2520'. [ 185.158343][ T7856] 9pnet_fd: Insufficient options for proto=fd [ 185.188685][ T7862] netlink: 'syz.0.2524': attribute type 15 has an invalid length. [ 185.211768][ T7864] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2525'. [ 185.249845][ T405] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 185.270802][ T405] usb 6-1: device descriptor read/8, error -71 [ 185.401650][ T405] usb 6-1: device descriptor read/8, error -71 [ 185.415158][ T7904] netlink: 'syz.0.2538': attribute type 13 has an invalid length. [ 185.507890][ T7907] fuse: blksize only supported for fuseblk [ 185.514024][ T405] usb usb6-port1: unable to enumerate USB device [ 185.514433][ T7907] tipc: Enabled bearer , priority 0 [ 185.528862][ T7907] tipc: Disabling bearer [ 185.694512][ T7922] input: syz0 as /devices/virtual/input/input19 [ 185.703464][ T7921] rust_binder: Error while translating object. [ 185.703508][ T7921] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 185.710536][ T7921] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:750 [ 185.738349][ T7928] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 185.748086][ T7928] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 185.754842][ T7928] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:753 [ 185.764991][ T7928] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 185.774240][ T7932] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 185.780778][ T7932] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:753 [ 185.802917][ T7934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 185.891034][ T7934] rust_binder: Failed to allocate buffer. len:1192, is_oneway:true [ 185.897591][ T7934] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 185.905660][ T7934] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:757 [ 186.101715][ T7956] overlay: Bad value for 'xino' [ 186.567492][ T36] audit: type=1400 audit(2000000014.350:574): avc: denied { execute } for pid=7998 comm="syz.5.2575" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 186.656745][ T8012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.665397][ T8012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.843984][ T36] audit: type=1326 audit(2000000014.630:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8016 comm="syz.0.2582" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde3fb8eec9 code=0x0 [ 186.889801][ T787] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 186.904370][ T8025] tipc: Enabling of bearer rejected, failed to enable media [ 186.921943][ T8028] 9pnet_fd: Insufficient options for proto=fd [ 187.119832][ T31] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 187.271128][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.281410][ T31] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 187.292882][ T31] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 187.305209][ T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 187.314328][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.322428][ T31] usb 5-1: Product: syz [ 187.326620][ T31] usb 5-1: Manufacturer: syz [ 187.331547][ T31] usb 5-1: SerialNumber: syz [ 187.337446][ T8023] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 187.466287][ T8037] veth1: entered allmulticast mode [ 187.505322][ T8039] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2591'. [ 187.706815][ T36] audit: type=1326 audit(2000000015.490:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8049 comm="syz.0.2594" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde3fb8eec9 code=0x0 [ 187.807956][ T8051] 9pnet_fd: Insufficient options for proto=fd [ 188.069788][ T787] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 188.221049][ T787] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 188.232404][ T787] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 188.245684][ T787] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 188.255195][ T787] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.263382][ T787] usb 6-1: Product: syz [ 188.267819][ T787] usb 6-1: Manufacturer: syz [ 188.275190][ T787] usb 6-1: SerialNumber: syz [ 188.282509][ T8043] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 188.301642][ T31] cdc_ncm 5-1:1.0: bind() failure [ 188.312194][ T31] usb 5-1: USB disconnect, device number 32 [ 188.577776][ T8062] netlink: 393 bytes leftover after parsing attributes in process `syz.0.2597'. [ 188.587858][ T8064] netlink: 393 bytes leftover after parsing attributes in process `syz.0.2597'. [ 188.676672][ T8082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2603'. [ 188.826543][ T8103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2610'. [ 188.838201][ T8103] 9pnet_fd: Insufficient options for proto=fd [ 188.846106][ T36] audit: type=1400 audit(2000000016.640:577): avc: denied { attach_queue } for pid=8104 comm="syz.4.2611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 188.865842][ T8107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2612'. [ 188.890268][ T8109] 9pnet_fd: Insufficient options for proto=fd [ 188.971954][ T8118] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 188.971989][ T8118] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 188.980215][ T8118] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:776 [ 189.083634][ T8129] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 189.093516][ T787] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 189.093525][ T8130] rust_binder: inc_ref_done called when no active inc_refs [ 189.093549][ T787] cdc_ncm 6-1:1.0: dwNtbInMaxSize=1 is too small. Using 2048 [ 189.131380][ T787] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 189.137558][ T787] cdc_ncm 6-1:1.0: setting tx_max = 16384 [ 189.369788][ T31] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 189.440011][ T8043] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 189.461813][ T787] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 189.483182][ T787] usb 6-1: USB disconnect, device number 12 [ 189.489944][ T787] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 189.498936][ T8144] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 189.508374][ T8144] rust_binder: Write failure EINVAL in pid:206 [ 189.532566][ T31] usb 5-1: not running at top speed; connect to a high speed hub [ 189.548685][ T31] usb 5-1: config 95 has an invalid interface number: 1 but max is 0 [ 189.557618][ T31] usb 5-1: config 95 has no interface number 0 [ 189.577815][ T8154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2629'. [ 189.583606][ T31] usb 5-1: config 95 interface 1 has no altsetting 0 [ 189.595785][ T36] audit: type=1400 audit(2000000017.380:578): avc: denied { mount } for pid=8155 comm="syz.5.2630" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 189.595915][ T31] usb 5-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 189.619514][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.643937][ T31] usb 5-1: Product: syz [ 189.649424][ T31] usb 5-1: Manufacturer: syz [ 189.654534][ T31] usb 5-1: SerialNumber: syz [ 189.662266][ T8160] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:212 [ 189.746111][ T8170] tipc: Enabled bearer , priority 0 [ 189.894086][ T31] usb 5-1: USB disconnect, device number 33 [ 190.141182][ T8189] devpts: called with bogus options [ 190.386061][ T36] audit: type=1400 audit(2000000018.170:579): avc: denied { create } for pid=8193 comm="syz.4.2645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 190.406915][ T36] audit: type=1326 audit(2000000018.180:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8193 comm="syz.4.2645" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f865098eec9 code=0x0 [ 190.440812][ T8195] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 190.442630][ T8197] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 190.449274][ T8197] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 190.457377][ T8197] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:790 [ 190.474562][ T8040] veth1: left allmulticast mode [ 190.497512][ T8202] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2647'. [ 190.519447][ T8166] tipc: Disabling bearer [ 190.681927][ T8208] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 190.989777][ T405] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 191.161282][ T405] usb 6-1: unable to get BOS descriptor or descriptor too short [ 191.171109][ T405] usb 6-1: config 15 has an invalid interface number: 128 but max is 0 [ 191.179577][ T405] usb 6-1: config 15 has no interface number 0 [ 191.185859][ T405] usb 6-1: config 15 interface 128 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 191.196055][ T405] usb 6-1: config 15 interface 128 has no altsetting 0 [ 191.205239][ T405] usb 6-1: string descriptor 0 read error: -22 [ 191.211632][ T405] usb 6-1: New USB device found, idVendor=0fca, idProduct=8004, bcdDevice= 2.01 [ 191.220767][ T405] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.232525][ T405] usb-storage 6-1:15.128: USB Mass Storage device detected [ 191.251575][ T405] usb-storage 6-1:15.128: Quirks match for vid 0fca pid 8004: 400 [ 191.421069][ T36] audit: type=1400 audit(2000000019.210:581): avc: denied { read } for pid=8220 comm="syz.4.2652" dev="sockfs" ino=40765 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 191.435119][ T10] usb 6-1: USB disconnect, device number 13 [ 191.524357][ T8223] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.524473][ T8223] rust_binder: Failed to allocate buffer. len:1192, is_oneway:true [ 191.531108][ T8223] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 191.539194][ T8223] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:800 [ 191.582672][ T8230] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.592396][ T8230] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 191.598964][ T8230] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 191.607353][ T8230] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:802 [ 191.632865][ T8233] rust_binder: Write failure EFAULT in pid:805 [ 192.060767][ T8260] netlink: 'syz.5.2666': attribute type 13 has an invalid length. [ 192.068991][ T8260] erspan0: refused to change device tx_queue_len [ 192.102756][ T8264] netlink: 288 bytes leftover after parsing attributes in process `syz.5.2668'. [ 192.128194][ T8266] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 192.128715][ T8266] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 192.146709][ T8269] netlink: 37 bytes leftover after parsing attributes in process `syz.5.2670'. [ 192.833340][ T8299] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 192.833374][ T8299] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.239858][ T405] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 193.398032][ T8326] tipc: Enabling of bearer rejected, failed to enable media [ 193.406689][ T405] usb 6-1: Using ep0 maxpacket: 32 [ 193.413344][ T405] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.424291][ T405] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.434237][ T405] usb 6-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 193.443633][ T405] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.452797][ T405] usb 6-1: config 0 descriptor?? [ 193.666786][ T405] usbhid 6-1:0.0: can't add hid device: -71 [ 193.673002][ T405] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 193.680907][ T8329] rust_binder: Error while translating object. [ 193.680942][ T8329] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 193.682413][ T405] usb 6-1: USB disconnect, device number 14 [ 193.691551][ T8329] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:286 [ 193.716041][ T8331] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.727146][ T8331] rust_binder: Failed to allocate buffer. len:4240, is_oneway:true [ 193.802653][ T8342] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 193.810950][ T8342] rust_binder: Read failure Err(EFAULT) in pid:299 [ 193.830868][ T8345] rust_binder: Failed to allocate buffer. len:4160, is_oneway:false [ 193.837625][ T8345] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 193.846076][ T8345] rust_binder: Read failure Err(EFAULT) in pid:301 [ 194.001366][ T8363] fuse: Invalid gid '00000000000037777777777' [ 194.431235][ T8393] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2710'. [ 194.457420][ T8395] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2711'. [ 194.654181][ T8409] binder: Binderfs stats mode cannot be changed during a remount [ 194.739486][ T36] audit: type=1400 audit(2000000022.520:582): avc: denied { bind } for pid=8415 comm="syz.5.2719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 194.776656][ T8420] overlayfs: failed to clone lowerpath [ 194.783216][ T8422] SELinux: failed to load policy [ 194.804001][ T8426] rust_binder: Error while translating object. [ 194.804049][ T8426] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 194.810334][ T8426] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:334 [ 194.903257][ T8441] rust_binder: Write failure EFAULT in pid:340 [ 195.009295][ T8448] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8448 comm=syz.5.2730 [ 195.028595][ T8448] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=8448 comm=syz.5.2730 [ 195.036475][ T8452] netlink: 324 bytes leftover after parsing attributes in process `syz.3.2732'. [ 195.055410][ T8452] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2732'. [ 195.135633][ T8455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2733'. [ 195.274900][ T5337] Bluetooth: hci0: Frame reassembly failed (-84) [ 195.926207][ T8487] netlink: 'syz.3.2742': attribute type 1 has an invalid length. [ 196.701288][ T36] audit: type=1400 audit(2000000024.490:583): avc: denied { name_bind } for pid=8500 comm="syz.3.2747" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 196.875323][ T8520] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2753'. [ 196.898039][ T8525] fuse: Bad value for 'fd' [ 197.161934][ T8537] SELinux: Context system_u:object_r:pinentry_exec_t:s0 is not valid (left unmapped). [ 197.172241][ T36] audit: type=1400 audit(2000000024.960:584): avc: denied { relabelto } for pid=8535 comm="syz.0.2759" name="file0" dev="tmpfs" ino=1510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:pinentry_exec_t:s0" [ 197.204765][ T36] audit: type=1400 audit(2000000024.960:585): avc: denied { associate } for pid=8535 comm="syz.0.2759" name="file0" dev="tmpfs" ino=1510 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:pinentry_exec_t:s0" [ 197.319814][ T421] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 197.326135][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 197.361920][ T8541] 9pnet_fd: Insufficient options for proto=fd [ 197.376102][ T8542] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 197.408924][ T36] audit: type=1400 audit(2000000025.190:586): avc: denied { mounton } for pid=8546 comm="syz.5.2763" path="/125/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 197.463188][ T8553] fuse: Bad value for 'fd' [ 197.512438][ T8553] kvm: kvm [8552]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0xc1) = 0x5 [ 197.529946][ T8553] kvm: kvm [8552]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0xc2) = 0x5 [ 197.542131][ T8553] kvm: kvm [8552]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x11e) = 0x5 [ 197.553958][ T8553] kvm: kvm [8552]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x186) = 0x5 [ 197.572859][ T8553] kvm: kvm [8552]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x187) = 0x5 [ 197.584613][ T8553] kvm_intel: kvm [8552]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x1d9) = 0x5 [ 197.887141][ T8579] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=8579 comm=syz.0.2773 [ 197.900062][ T8579] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=8579 comm=syz.0.2773 [ 197.913308][ T8579] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=8579 comm=syz.0.2773 [ 197.926091][ T8579] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=8579 comm=syz.0.2773 [ 197.938910][ T8579] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=8579 comm=syz.0.2773 [ 198.019846][ T787] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 198.149794][ T787] usb 6-1: device descriptor read/64, error -71 [ 198.389809][ T787] usb 6-1: device descriptor read/64, error -71 [ 198.629883][ T787] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 198.759825][ T787] usb 6-1: device descriptor read/64, error -71 [ 198.999823][ T787] usb 6-1: device descriptor read/64, error -71 [ 199.109946][ T787] usb usb6-port1: attempt power cycle [ 199.353288][ T8610] tipc: Enabling of bearer rejected, media not registered [ 199.441297][ T36] audit: type=1400 audit(2000000027.230:587): avc: denied { create } for pid=8625 comm="syz.3.2795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 199.462474][ T787] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 199.490766][ T787] usb 6-1: device descriptor read/8, error -71 [ 199.621333][ T787] usb 6-1: device descriptor read/8, error -71 [ 199.869798][ T787] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 199.891003][ T787] usb 6-1: device descriptor read/8, error -71 [ 200.020962][ T787] usb 6-1: device descriptor read/8, error -71 [ 200.129901][ T787] usb usb6-port1: unable to enumerate USB device [ 200.230149][ T8645] netlink: 'syz.0.2801': attribute type 13 has an invalid length. [ 200.885635][ T8665] random: crng reseeded on system resumption [ 201.499828][ T10] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 201.629893][ T10] usb 6-1: device descriptor read/64, error -71 [ 201.869816][ T10] usb 6-1: device descriptor read/64, error -71 [ 201.971808][ T36] audit: type=1400 audit(2000000029.760:588): avc: denied { mount } for pid=8720 comm="syz.0.2827" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 202.109914][ T10] usb 6-1: new low-speed USB device number 20 using dummy_hcd [ 202.239916][ T10] usb 6-1: device descriptor read/64, error -71 [ 202.479874][ T10] usb 6-1: device descriptor read/64, error -71 [ 202.589959][ T10] usb usb6-port1: attempt power cycle [ 202.929848][ T10] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 202.950987][ T10] usb 6-1: device descriptor read/8, error -71 [ 203.080919][ T10] usb 6-1: device descriptor read/8, error -71 [ 203.319775][ T10] usb 6-1: new low-speed USB device number 22 using dummy_hcd [ 203.341044][ T10] usb 6-1: device descriptor read/8, error -71 [ 203.393612][ T36] audit: type=1400 audit(2000000031.180:589): avc: denied { mounton } for pid=8736 comm="syz.0.2832" path="/file0" dev="ramfs" ino=42753 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 203.404104][ T8737] overlayfs: failed to clone lowerpath [ 203.471246][ T10] usb 6-1: device descriptor read/8, error -71 [ 203.580153][ T10] usb usb6-port1: unable to enumerate USB device [ 204.097123][ T8755] overlayfs: failed to resolve '/«õ¤q?]': -2 [ 204.164848][ T36] audit: type=1400 audit(2000000031.950:590): avc: denied { watch watch_reads } for pid=8763 comm="syz.0.2842" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 204.282799][ T8777] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 204.282921][ T8777] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 204.283196][ T8778] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 204.297655][ T8777] rust_binder: Read failure Err(EAGAIN) in pid:395 [ 204.297702][ T8778] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:395 [ 205.246192][ T8794] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.255821][ T8794] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.265791][ T8794] rust_binder: Failed to allocate buffer. len:1184, is_oneway:false [ 205.288473][ T8798] netlink: 'syz.5.2855': attribute type 4 has an invalid length. [ 205.304574][ T8798] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2855'. [ 205.385680][ T8801] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.385954][ T8801] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 205.393209][ T8801] rust_binder: Read failure Err(EAGAIN) in pid:414 [ 205.401617][ T8801] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:414 [ 205.679852][ T8829] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.691591][ T8829] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 205.744437][ T36] audit: type=1400 audit(2000000033.530:591): avc: denied { ioctl } for pid=8836 comm="syz.5.2869" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 205.777624][ T36] audit: type=1326 audit(2000000033.530:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8836 comm="syz.5.2869" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f344c18eec9 code=0x0 [ 205.847321][ T8838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.952046][ T8838] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 206.929837][ T405] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 207.091003][ T405] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 207.101413][ T405] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 207.114382][ T405] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.122606][ T405] usb 6-1: Product: syz [ 207.127069][ T405] usb 6-1: Manufacturer: syz [ 207.131903][ T405] usb 6-1: SerialNumber: syz [ 207.340394][ T8867] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2880'. [ 207.351094][ T8867] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2880'. [ 207.360081][ T8867] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 207.381380][ T405] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 207.418879][ T405] usb 6-1: USB disconnect, device number 23 [ 207.426589][ T8879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2884'. [ 207.448441][ T8663] udevd[8663]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 207.552496][ T8881] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.559573][ T8881] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.567161][ T8881] bridge_slave_0: entered allmulticast mode [ 207.573678][ T8881] bridge_slave_0: entered promiscuous mode [ 207.580515][ T8881] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.587747][ T8881] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.595579][ T8881] bridge_slave_1: entered allmulticast mode [ 207.602208][ T8881] bridge_slave_1: entered promiscuous mode [ 207.658993][ T8881] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.666110][ T8881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.673491][ T8881] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.680591][ T8881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.703312][ T5364] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.710819][ T5364] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.721475][ T5337] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.728721][ T5337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.738640][ T5364] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.745771][ T5364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.774141][ T8881] veth0_vlan: entered promiscuous mode [ 207.786827][ T8881] veth1_macvtap: entered promiscuous mode [ 208.035239][ T8907] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 208.049937][ T8907] syzkaller1: group set to 0 [ 208.093270][ T8926] overlayfs: failed to clone lowerpath [ 208.469851][ T31] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 208.515268][ T36] audit: type=1400 audit(2000000037.299:593): avc: denied { append } for pid=8951 comm="syz.6.2906" name="file0" dev="tmpfs" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 208.560554][ T8958] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 208.560593][ T8958] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:38 [ 208.598076][ T8960] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 208.622081][ T31] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 208.633274][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.644494][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.654298][ T31] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 208.668295][ T31] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 208.677799][ T31] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 208.687937][ T31] usb 6-1: Manufacturer: syz [ 208.701499][ T31] usb 6-1: config 0 descriptor?? [ 208.717417][ T36] audit: type=1400 audit(2000000037.499:594): avc: denied { append } for pid=8964 comm="syz.6.2911" name="vsock" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 208.912982][ T31] appleir 0003:05AC:8243.000B: unknown main item tag 0x0 [ 208.922015][ T31] appleir 0003:05AC:8243.000B: No inputs registered, leaving [ 208.934828][ T31] appleir 0003:05AC:8243.000B: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 208.949573][ T31] usb 6-1: USB disconnect, device number 24 [ 208.977955][ T8982] fido_id[8982]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 209.053321][ T36] audit: type=1326 audit(2000000037.839:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.5.2916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344c18eec9 code=0x7fc00000 [ 209.729857][ T36] audit: type=1326 audit(2000000038.509:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8974 comm="syz.6.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b498eec9 code=0x7fc00000 [ 209.776399][ T36] audit: type=1326 audit(2000000038.559:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.5.2916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f344c12af79 code=0x7fc00000 [ 209.815844][ T36] audit: type=1326 audit(2000000038.559:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.5.2916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f344c12b03f code=0x7fc00000 [ 209.850499][ T36] audit: type=1326 audit(2000000038.559:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8979 comm="syz.5.2916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f344c18eec9 code=0x7fc00000 [ 210.007662][ T9010] overlayfs: overlapping lowerdir path [ 210.239783][ T31] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 210.402936][ T9020] rust_binder: Error while translating object. [ 210.402966][ T9020] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 210.409230][ T9020] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:61 [ 210.418862][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 210.440558][ T31] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 210.448906][ T31] usb 6-1: config 0 has no interface number 0 [ 210.460541][ T31] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 210.470696][ T31] usb 6-1: config 0 interface 196 has no altsetting 0 [ 210.479239][ T31] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 210.488458][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.497068][ T31] usb 6-1: Product: syz [ 210.501576][ T31] usb 6-1: Manufacturer: syz [ 210.506358][ T31] usb 6-1: SerialNumber: syz [ 210.513630][ T31] usb 6-1: config 0 descriptor?? [ 210.520081][ T9009] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 210.557134][ T9037] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=9037 comm=syz.0.2932 [ 210.938999][ T31] ipheth 6-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 210.944081][ T36] audit: type=1400 audit(2000000039.719:600): avc: denied { mounton } for pid=9007 comm="syz.5.2924" path="/156/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 210.957303][ T31] ipheth 6-1:0.196: Apple iPhone USB Ethernet device attached [ 210.976852][ T2582] can0 (unregistered): slcan off ptm0. [ 211.010548][ T36] audit: type=1400 audit(2000000039.769:601): avc: denied { unmount } for pid=6880 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 211.017338][ T31] usb 6-1: USB disconnect, device number 25 [ 211.092075][ T31] ipheth 6-1:0.196: Apple iPhone USB Ethernet now disconnected [ 211.305068][ T9105] rust_binder: 77: no such ref 0 [ 211.310482][ T9105] rust_binder: 77: no such ref 2 [ 211.315523][ T9105] rust_binder: 9105 RLIMIT_NICE not set [ 211.323529][ T405] rust_binder: 9104: removing orphan mapping 0:112 [ 211.400836][ T31] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 211.465676][ T5351] bridge_slave_1: left allmulticast mode [ 211.473879][ T5351] bridge_slave_1: left promiscuous mode [ 211.479558][ T5351] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.489012][ T5351] bridge_slave_0: left allmulticast mode [ 211.494823][ T5351] bridge_slave_0: left promiscuous mode [ 211.500837][ T5351] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.579779][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 211.589423][ T31] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 211.610836][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 211.635295][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 211.656761][ T5351] tipc: Left network mode [ 211.665170][ T5351] veth1_macvtap: left promiscuous mode [ 211.671910][ T31] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 211.677954][ T5351] veth0_vlan: left promiscuous mode [ 211.690939][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.706906][ T31] usb 6-1: config 0 descriptor?? [ 211.717851][ T9083] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 211.729088][ T31] hub 6-1:0.0: USB hub found [ 211.860045][ T9143] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.867144][ T9143] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.874413][ T9143] bridge_slave_0: entered allmulticast mode [ 211.881209][ T9143] bridge_slave_0: entered promiscuous mode [ 211.888034][ T9143] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.895246][ T9143] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.902430][ T9143] bridge_slave_1: entered allmulticast mode [ 211.908845][ T9143] bridge_slave_1: entered promiscuous mode [ 211.934613][ T31] hub 6-1:0.0: 1 port detected [ 211.972740][ T9143] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.979867][ T9143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.987200][ T9143] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.994299][ T9143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.019640][ T5337] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.027202][ T5337] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.037685][ T5364] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.044871][ T5364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.054259][ T5337] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.061365][ T5337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.079820][ T787] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 212.093784][ T9143] veth0_vlan: entered promiscuous mode [ 212.106496][ T9143] veth1_macvtap: entered promiscuous mode [ 212.239970][ T787] usb 7-1: Using ep0 maxpacket: 16 [ 212.246355][ T787] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.256630][ T787] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 212.271804][ T787] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 212.281136][ T787] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.289183][ T787] usb 7-1: Product: syz [ 212.293440][ T787] usb 7-1: Manufacturer: syz [ 212.298248][ T787] usb 7-1: SerialNumber: syz [ 212.306468][ T9165] kvm: kvm [9164]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0xc1) = 0x5 [ 212.315266][ T9165] kvm: kvm [9164]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0xc2) = 0x5 [ 212.326834][ T9165] kvm: kvm [9164]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x11e) = 0x5 [ 212.338444][ T9165] kvm: kvm [9164]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x186) = 0x5 [ 212.348789][ T9165] kvm: kvm [9164]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x187) = 0x5 [ 212.360766][ T9165] kvm_intel: kvm [9164]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x1d9) = 0x5 [ 212.464320][ T36] audit: type=1400 audit(2000000041.249:602): avc: denied { lock } for pid=9171 comm="syz.7.2959" path="socket:[45621]" dev="sockfs" ino=45621 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 212.464670][ T9172] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.491434][ T9172] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 212.514751][ T787] usb 7-1: 0:2 : does not exist [ 212.528321][ T787] usb 7-1: unit 9 not found! [ 212.537456][ T787] usb 7-1: 4:0: cannot get min/max values for control 3 (id 4) [ 212.547594][ T787] usb 7-1: 4:0: cannot get min/max values for control 4 (id 4) [ 212.558463][ T787] usb 7-1: 4:0: cannot get min/max values for control 6 (id 4) [ 212.568876][ T787] usb 7-1: USB disconnect, device number 2 [ 212.577034][ T8663] udevd[8663]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 212.948071][ T9083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.956841][ T9083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.965666][ T9083] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=60743 sclass=netlink_xfrm_socket pid=9083 comm=syz.5.2948 [ 212.981734][ T787] usb 6-1: USB disconnect, device number 26 [ 213.419848][ T425] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 213.509399][ T9192] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 213.548008][ T9194] kvm: kvm [9193]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0xc1) = 0x5 [ 213.556528][ T9194] kvm: kvm [9193]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0xc2) = 0x5 [ 213.567783][ T9194] kvm: kvm [9193]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x11e) = 0x5 [ 213.569788][ T425] usb 7-1: Using ep0 maxpacket: 8 [ 213.579654][ T9194] kvm: kvm [9193]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x186) = 0x5 [ 213.583370][ T425] usb 7-1: unable to get BOS descriptor or descriptor too short [ 213.590043][ T9194] kvm: kvm [9193]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x187) = 0x5 [ 213.599603][ T425] usb 7-1: too many configurations: 212, using maximum allowed: 8 [ 213.609431][ T9194] kvm_intel: kvm [9193]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x1d9) = 0x5 [ 213.616103][ T425] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 213.629688][ T9194] FAULT_INJECTION: forcing a failure. [ 213.629688][ T9194] name failslab, interval 1, probability 0, space 0, times 1 [ 213.631561][ T425] usb 7-1: can't read configurations, error -61 [ 213.645228][ T9194] CPU: 0 UID: 0 PID: 9194 Comm: syz.5.2967 Not tainted syzkaller #0 98bacdaf52065bb91416bd5578e49f5aee2639ea [ 213.645272][ T9194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 213.645291][ T9194] Call Trace: [ 213.645301][ T9194] [ 213.645313][ T9194] __dump_stack+0x21/0x30 [ 213.645372][ T9194] dump_stack_lvl+0x10c/0x190 [ 213.645406][ T9194] ? __cfi_dump_stack_lvl+0x10/0x10 [ 213.645447][ T9194] dump_stack+0x19/0x20 [ 213.645479][ T9194] should_fail_ex+0x3d9/0x530 [ 213.645507][ T9194] should_failslab+0xac/0x100 [ 213.645552][ T9194] kmem_cache_alloc_node_noprof+0x45/0x3b0 [ 213.645580][ T9194] ? dup_task_struct+0xbc/0xc50 [ 213.645613][ T9194] dup_task_struct+0xbc/0xc50 [ 213.645644][ T9194] ? copy_process+0x3220/0x3220 [ 213.645675][ T9194] ? __kasan_check_write+0x18/0x20 [ 213.645714][ T9194] copy_process+0x538/0x3220 [ 213.645750][ T9194] ? __cfi_copy_process+0x10/0x10 [ 213.645778][ T9194] ? proc_fail_nth_write+0x17e/0x210 [ 213.645817][ T9194] kernel_clone+0x23f/0x830 [ 213.645850][ T9194] ? __cfi_kernel_clone+0x10/0x10 [ 213.645886][ T9194] __x64_sys_clone+0x18c/0x1f0 [ 213.645920][ T9194] ? __cfi___x64_sys_clone+0x10/0x10 [ 213.645959][ T9194] ? __kasan_check_read+0x15/0x20 [ 213.646000][ T9194] x64_sys_call+0x2b3c/0x2ee0 [ 213.646042][ T9194] do_syscall_64+0x58/0xf0 [ 213.646075][ T9194] ? clear_bhb_loop+0x50/0xa0 [ 213.646125][ T9194] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 213.646166][ T9194] RIP: 0033:0x7f344c18eec9 [ 213.646195][ T9194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.646220][ T9194] RSP: 002b:00007f344d00bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 213.646254][ T9194] RAX: ffffffffffffffda RBX: 00007f344c3e5fa0 RCX: 00007f344c18eec9 [ 213.646275][ T9194] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 213.646292][ T9194] RBP: 00007f344d00c090 R08: 0000000000000000 R09: 0000000000000000 [ 213.646308][ T9194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.646325][ T9194] R13: 00007f344c3e6038 R14: 00007f344c3e5fa0 R15: 00007fff2cc67ca8 [ 213.646348][ T9194] [ 214.010116][ T425] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 214.049157][ T9203] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2969'. [ 214.059163][ T9203] bridge_slave_1: left allmulticast mode [ 214.065335][ T9203] bridge_slave_1: left promiscuous mode [ 214.071522][ T9203] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.079626][ T9203] bridge_slave_0: left allmulticast mode [ 214.086146][ T9203] bridge_slave_0: left promiscuous mode [ 214.092331][ T9203] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.111463][ T5337] Bluetooth: hci0: Frame reassembly failed (-84) [ 214.179757][ T425] usb 7-1: Using ep0 maxpacket: 8 [ 214.186344][ T425] usb 7-1: unable to get BOS descriptor or descriptor too short [ 214.194239][ T425] usb 7-1: too many configurations: 212, using maximum allowed: 8 [ 214.203621][ T425] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 214.211354][ T425] usb 7-1: can't read configurations, error -61 [ 214.218317][ T425] usb usb7-port1: attempt power cycle [ 214.559822][ T425] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 214.580194][ T425] usb 7-1: Using ep0 maxpacket: 8 [ 214.586787][ T425] usb 7-1: unable to get BOS descriptor or descriptor too short [ 214.594803][ T425] usb 7-1: too many configurations: 212, using maximum allowed: 8 [ 214.603738][ T425] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 214.611392][ T425] usb 7-1: can't read configurations, error -61 [ 214.739807][ T425] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 214.760147][ T425] usb 7-1: Using ep0 maxpacket: 8 [ 214.766817][ T425] usb 7-1: unable to get BOS descriptor or descriptor too short [ 214.774634][ T425] usb 7-1: too many configurations: 212, using maximum allowed: 8 [ 214.783698][ T425] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 214.791332][ T425] usb 7-1: can't read configurations, error -61 [ 214.797760][ T425] usb usb7-port1: unable to enumerate USB device [ 216.119959][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 216.120201][ T421] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 216.159389][ T9217] rust_binder: Error in use_page_slow: ESRCH [ 216.159410][ T9217] rust_binder: use_range failure ESRCH [ 216.165473][ T9217] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 216.171060][ T9217] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 216.179234][ T9217] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:491 [ 216.258056][ T9227] kvm_intel: kvm [9226]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x1d9) = 0x5 [ 216.279083][ T9230] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 216.279131][ T9230] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:28 [ 216.279445][ T9227] FAULT_INJECTION: forcing a failure. [ 216.279445][ T9227] name failslab, interval 1, probability 0, space 0, times 0 [ 216.312024][ T9227] CPU: 0 UID: 0 PID: 9227 Comm: syz.5.2977 Not tainted syzkaller #0 98bacdaf52065bb91416bd5578e49f5aee2639ea [ 216.312056][ T9227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 216.312069][ T9227] Call Trace: [ 216.312078][ T9227] [ 216.312091][ T9227] __dump_stack+0x21/0x30 [ 216.312134][ T9227] dump_stack_lvl+0x10c/0x190 [ 216.312178][ T9227] ? __cfi_dump_stack_lvl+0x10/0x10 [ 216.312201][ T9227] ? get_random_u64+0x2ac/0x4b0 [ 216.312223][ T9227] ? __cfi_get_random_u64+0x10/0x10 [ 216.312244][ T9227] dump_stack+0x19/0x20 [ 216.312266][ T9227] should_fail_ex+0x3d9/0x530 [ 216.312284][ T9227] should_failslab+0xac/0x100 [ 216.312305][ T9227] kmem_cache_alloc_noprof+0x42/0x3a0 [ 216.312332][ T9227] ? prepare_creds+0x48/0x6b0 [ 216.312351][ T9227] prepare_creds+0x48/0x6b0 [ 216.312369][ T9227] copy_creds+0xe8/0x5d0 [ 216.312387][ T9227] copy_process+0x894/0x3220 [ 216.312411][ T9227] ? __cfi_copy_process+0x10/0x10 [ 216.312430][ T9227] ? proc_fail_nth_write+0x17e/0x210 [ 216.312456][ T9227] kernel_clone+0x23f/0x830 [ 216.312477][ T9227] ? __cfi_kernel_clone+0x10/0x10 [ 216.312499][ T9227] __x64_sys_clone+0x18c/0x1f0 [ 216.312521][ T9227] ? __cfi___x64_sys_clone+0x10/0x10 [ 216.312545][ T9227] ? __kasan_check_read+0x15/0x20 [ 216.312571][ T9227] x64_sys_call+0x2b3c/0x2ee0 [ 216.312597][ T9227] do_syscall_64+0x58/0xf0 [ 216.312617][ T9227] ? clear_bhb_loop+0x50/0xa0 [ 216.312635][ T9227] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 216.312662][ T9227] RIP: 0033:0x7f344c18eec9 [ 216.312678][ T9227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.312693][ T9227] RSP: 002b:00007f344d00bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 216.312712][ T9227] RAX: ffffffffffffffda RBX: 00007f344c3e5fa0 RCX: 00007f344c18eec9 [ 216.312726][ T9227] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 216.312736][ T9227] RBP: 00007f344d00c090 R08: 0000000000000000 R09: 0000000000000000 [ 216.312747][ T9227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.312759][ T9227] R13: 00007f344c3e6038 R14: 00007f344c3e5fa0 R15: 00007fff2cc67ca8 [ 216.312774][ T9227] [ 216.663411][ T9241] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1040 sclass=netlink_route_socket pid=9241 comm=syz.5.2981 [ 216.927010][ T9259] kvm_intel: kvm [9258]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x1d9) = 0x5 [ 216.936204][ T425] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 216.948256][ T9259] FAULT_INJECTION: forcing a failure. [ 216.948256][ T9259] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 216.961799][ T9259] CPU: 1 UID: 0 PID: 9259 Comm: syz.7.2987 Not tainted syzkaller #0 98bacdaf52065bb91416bd5578e49f5aee2639ea [ 216.961839][ T9259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 216.961854][ T9259] Call Trace: [ 216.961862][ T9259] [ 216.961872][ T9259] __dump_stack+0x21/0x30 [ 216.961914][ T9259] dump_stack_lvl+0x10c/0x190 [ 216.961937][ T9259] ? __cfi_dump_stack_lvl+0x10/0x10 [ 216.961975][ T9259] dump_stack+0x19/0x20 [ 216.961996][ T9259] should_fail_ex+0x3d9/0x530 [ 216.962016][ T9259] should_fail_alloc_page+0xeb/0x110 [ 216.962037][ T9259] __alloc_pages_noprof+0x19b/0x7b0 [ 216.962061][ T9259] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 216.962084][ T9259] ? kernel_text_address+0xa9/0xe0 [ 216.962107][ T9259] ? __kernel_text_address+0x11/0x40 [ 216.962128][ T9259] ? unwind_get_return_address+0x51/0x90 [ 216.962149][ T9259] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 216.962179][ T9259] get_free_pages_noprof+0x14/0x40 [ 216.962202][ T9259] kasan_populate_vmalloc_pte+0x4c/0x170 [ 216.962218][ T9259] __apply_to_page_range+0x825/0xcb0 [ 216.962239][ T9259] ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10 [ 216.962255][ T9259] ? do_syscall_64+0x58/0xf0 [ 216.962277][ T9259] ? apply_to_page_range+0x60/0x60 [ 216.962295][ T9259] ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10 [ 216.962312][ T9259] apply_to_page_range+0x3f/0x60 [ 216.962329][ T9259] kasan_populate_vmalloc+0x64/0x80 [ 216.962344][ T9259] alloc_vmap_area+0x1d7f/0x2500 [ 216.962369][ T9259] ? kasan_save_alloc_info+0x40/0x50 [ 216.962394][ T9259] ? vm_map_ram+0xdd0/0xdd0 [ 216.962416][ T9259] ? __get_vm_area_node+0x154/0x3a0 [ 216.962438][ T9259] ? copy_process+0x538/0x3220 [ 216.962460][ T9259] __get_vm_area_node+0x1dc/0x3a0 [ 216.962483][ T9259] __vmalloc_node_range_noprof+0x33c/0x1420 [ 216.962508][ T9259] ? copy_process+0x538/0x3220 [ 216.962531][ T9259] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 216.962556][ T9259] ? kasan_save_alloc_info+0x40/0x50 [ 216.962580][ T9259] ? arch_dup_task_struct+0x5b/0xe0 [ 216.962605][ T9259] ? __asan_memcpy+0x5a/0x80 [ 216.962631][ T9259] dup_task_struct+0x5bd/0xc50 [ 216.962651][ T9259] ? copy_process+0x538/0x3220 [ 216.962671][ T9259] ? copy_process+0x3220/0x3220 [ 216.962702][ T9259] ? __kasan_check_write+0x18/0x20 [ 216.962728][ T9259] copy_process+0x538/0x3220 [ 216.962751][ T9259] ? __cfi_copy_process+0x10/0x10 [ 216.962769][ T9259] ? proc_fail_nth_write+0x17e/0x210 [ 216.962795][ T9259] kernel_clone+0x23f/0x830 [ 216.962820][ T9259] ? __cfi_kernel_clone+0x10/0x10 [ 216.962842][ T9259] __x64_sys_clone+0x18c/0x1f0 [ 216.962863][ T9259] ? __cfi___x64_sys_clone+0x10/0x10 [ 216.962887][ T9259] ? __kasan_check_read+0x15/0x20 [ 216.962913][ T9259] x64_sys_call+0x2b3c/0x2ee0 [ 216.962943][ T9259] do_syscall_64+0x58/0xf0 [ 216.962965][ T9259] ? clear_bhb_loop+0x50/0xa0 [ 216.962984][ T9259] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 216.963011][ T9259] RIP: 0033:0x7f6ac178eec9 [ 216.963026][ T9259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.963041][ T9259] RSP: 002b:00007f6ac2585fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 216.963061][ T9259] RAX: ffffffffffffffda RBX: 00007f6ac19e5fa0 RCX: 00007f6ac178eec9 [ 216.963074][ T9259] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 216.963085][ T9259] RBP: 00007f6ac2586090 R08: 0000000000000000 R09: 0000000000000000 [ 216.963097][ T9259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.963108][ T9259] R13: 00007f6ac19e6038 R14: 00007f6ac19e5fa0 R15: 00007ffff97aa9b8 [ 216.963123][ T9259] [ 216.963173][ T9259] syz.7.2987: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz7,mems_allowed=0 [ 217.338630][ T9259] CPU: 1 UID: 0 PID: 9259 Comm: syz.7.2987 Not tainted syzkaller #0 98bacdaf52065bb91416bd5578e49f5aee2639ea [ 217.338672][ T9259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 217.338687][ T9259] Call Trace: [ 217.338696][ T9259] [ 217.338705][ T9259] __dump_stack+0x21/0x30 [ 217.338753][ T9259] dump_stack_lvl+0x10c/0x190 [ 217.338788][ T9259] ? __cfi_dump_stack_lvl+0x10/0x10 [ 217.338820][ T9259] dump_stack+0x19/0x20 [ 217.338849][ T9259] warn_alloc+0x1bc/0x2a0 [ 217.338882][ T9259] ? kasan_save_track+0x3e/0x80 [ 217.338909][ T9259] ? __cfi_warn_alloc+0x10/0x10 [ 217.338940][ T9259] ? kfree+0x15c/0x460 [ 217.338978][ T9259] ? copy_process+0x538/0x3220 [ 217.339009][ T9259] ? __get_vm_area_node+0x1f5/0x3a0 [ 217.339045][ T9259] __vmalloc_node_range_noprof+0x361/0x1420 [ 217.339088][ T9259] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 217.339122][ T9259] ? kasan_save_alloc_info+0x40/0x50 [ 217.339157][ T9259] ? arch_dup_task_struct+0x5b/0xe0 [ 217.339190][ T9259] ? __asan_memcpy+0x5a/0x80 [ 217.339225][ T9259] dup_task_struct+0x5bd/0xc50 [ 217.339253][ T9259] ? copy_process+0x538/0x3220 [ 217.339282][ T9259] ? copy_process+0x3220/0x3220 [ 217.339313][ T9259] ? __kasan_check_write+0x18/0x20 [ 217.339350][ T9259] copy_process+0x538/0x3220 [ 217.339385][ T9259] ? __cfi_copy_process+0x10/0x10 [ 217.339413][ T9259] ? proc_fail_nth_write+0x17e/0x210 [ 217.339450][ T9259] kernel_clone+0x23f/0x830 [ 217.339482][ T9259] ? __cfi_kernel_clone+0x10/0x10 [ 217.339516][ T9259] __x64_sys_clone+0x18c/0x1f0 [ 217.339549][ T9259] ? __cfi___x64_sys_clone+0x10/0x10 [ 217.339586][ T9259] ? __kasan_check_read+0x15/0x20 [ 217.339625][ T9259] x64_sys_call+0x2b3c/0x2ee0 [ 217.339662][ T9259] do_syscall_64+0x58/0xf0 [ 217.339691][ T9259] ? clear_bhb_loop+0x50/0xa0 [ 217.339720][ T9259] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 217.339767][ T9259] RIP: 0033:0x7f6ac178eec9 [ 217.339787][ T9259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.339810][ T9259] RSP: 002b:00007f6ac2585fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 217.339836][ T9259] RAX: ffffffffffffffda RBX: 00007f6ac19e5fa0 RCX: 00007f6ac178eec9 [ 217.339853][ T9259] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 217.339869][ T9259] RBP: 00007f6ac2586090 R08: 0000000000000000 R09: 0000000000000000 [ 217.339885][ T9259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.339902][ T9259] R13: 00007f6ac19e6038 R14: 00007f6ac19e5fa0 R15: 00007ffff97aa9b8 [ 217.339924][ T9259] [ 217.597975][ T9259] Mem-Info: [ 217.601291][ T9259] active_anon:8040 inactive_anon:11 isolated_anon:0 [ 217.601291][ T9259] active_file:10979 inactive_file:13746 isolated_file:0 [ 217.601291][ T9259] unevictable:15417 dirty:91 writeback:0 [ 217.601291][ T9259] slab_reclaimable:5859 slab_unreclaimable:76859 [ 217.601291][ T9259] mapped:45956 shmem:197 pagetables:1051 [ 217.601291][ T9259] sec_pagetables:3 bounce:0 [ 217.601291][ T9259] kernel_misc_reclaimable:0 [ 217.601291][ T9259] free:1465882 free_pcp:2169 free_cma:0 [ 217.647009][ T425] usb 6-1: Using ep0 maxpacket: 32 [ 217.652497][ T9259] Node 0 active_anon:34208kB inactive_anon:44kB active_file:43916kB inactive_file:54984kB unevictable:61668kB isolated(anon):0kB isolated(file):0kB mapped:183824kB dirty:364kB writeback:0kB shmem:788kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:6144kB writeback_tmp:0kB kernel_stack:7868kB pagetables:4204kB sec_pagetables:12kB all_unreclaimable? no [ 217.685226][ T9259] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965936kB mlocked:0kB bounce:0kB free_pcp:5724kB local_pcp:5656kB free_cma:0kB [ 217.715614][ T9259] lowmem_reserve[]: 0 3921 3921 [ 217.721005][ T9259] Normal free:2903116kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34204kB inactive_anon:44kB active_file:43916kB inactive_file:54984kB unevictable:61668kB writepending:364kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:3176kB local_pcp:2932kB free_cma:0kB [ 217.752886][ T9259] lowmem_reserve[]: 0 0 0 [ 217.753288][ T425] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 217.757480][ T9259] DMA32: [ 217.770135][ T425] usb 6-1: New USB device found, idVendor=056a, idProduct=030a, bcdDevice= 0.00 [ 217.774762][ T9259] 5*4kB [ 217.782329][ T425] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.789740][ T9259] (M) [ 217.794371][ T425] usb 6-1: config 0 descriptor?? [ 217.794403][ T9259] 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 217.816456][ T9259] Normal: 493*4kB (UME) 657*8kB (UME) 685*16kB (UME) 523*32kB (UME) 369*64kB (UME) 82*128kB (UME) 54*256kB (UME) 38*512kB (ME) 20*1024kB (UME) 15*2048kB (UME) 672*4096kB (UM) = 2906028kB [ 217.837260][ T9259] 40373 total pagecache pages [ 217.842158][ T9259] 38 pages in swap cache [ 217.846485][ T9259] Free swap = 124296kB [ 217.847023][ T9265] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=9265 comm=syz.6.2989 [ 217.850813][ T9259] Total swap = 124996kB [ 217.867542][ T9259] 2097051 pages RAM [ 217.873345][ T9259] 0 pages HighMem/MovableOnly [ 217.878523][ T9259] 351537 pages reserved [ 217.883199][ T9259] 0 pages cma reserved [ 217.889533][ T9265] rust_binder: Failed to allocate buffer. len:128, is_oneway:true [ 217.890949][ T9259] Memory allocations: [ 217.903610][ T9259] 0 B 0 init/main.c:1370 func:do_initcalls [ 217.917305][ T9259] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 217.926002][ T9259] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 217.934097][ T9259] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 217.942356][ T9259] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 217.950629][ T9259] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 217.959384][ T9259] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 217.967491][ T9259] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 217.975498][ T9259] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 217.983527][ T9259] 0 B 0 init/initramfs.c:101 func:find_link [ 217.985015][ T9271] rust_binder: 9272 RLIMIT_NICE not set [ 218.020593][ T9279] __vm_enough_memory: pid: 9279, comm: syz.6.2995, bytes: 18014402804453376 not enough memory for the allocation [ 218.104193][ T9290] fuse: Bad value for 'user_id' [ 218.109160][ T9290] fuse: Bad value for 'user_id' [ 218.173267][ T9301] netlink: 'syz.0.3004': attribute type 16 has an invalid length. [ 218.219772][ T425] wacom 0003:056A:030A.000C: hidraw0: USB HID v0.07 Device [HID 056a:030a] on usb-dummy_hcd.5-1/input0 [ 218.421413][ T31] usb 6-1: USB disconnect, device number 27 [ 218.938821][ T9314] kvm_pr_unimpl_wrmsr: 10 callbacks suppressed [ 218.938844][ T9314] kvm: kvm [9313]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0xc1) = 0x5 [ 218.953881][ T9314] kvm: kvm [9313]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0xc2) = 0x5 [ 218.964883][ T9314] kvm: kvm [9313]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x11e) = 0x5 [ 218.975859][ T9314] kvm: kvm [9313]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x186) = 0x5 [ 218.984478][ T9314] kvm: kvm [9313]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x187) = 0x5 [ 218.995671][ T9314] kvm_intel: kvm [9313]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x1d9) = 0x5 [ 219.133762][ T9329] overlayfs: failed to clone lowerpath [ 219.257715][ T9346] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.257933][ T9346] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.264971][ T9346] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 219.495768][ T36] audit: type=1326 audit(2000000048.279:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9310 comm="syz.7.3007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac178eec9 code=0x7fc00000 [ 219.837580][ T9377] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 220.782052][ T9423] x_tables: duplicate entry at hook 1 [ 220.815565][ T9429] overlayfs: missing 'workdir' [ 220.869821][ T31] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 221.021018][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 221.032069][ T31] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 221.045082][ T31] usb 7-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 221.054202][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.063416][ T31] usb 7-1: config 0 descriptor?? [ 221.068850][ T9404] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 221.077150][ T31] usbhid 7-1:0.0: can't add hid device: -22 [ 221.083813][ T31] usbhid 7-1:0.0: probe with driver usbhid failed with error -22 [ 221.280114][ T787] usb 7-1: USB disconnect, device number 7 [ 221.925093][ T9451] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 221.947387][ T9453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 221.947731][ T9453] tc_dump_action: action bad kind [ 221.964803][ T9453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 221.980797][ T5337] Bluetooth: hci0: Frame reassembly failed (-84) [ 222.271510][ T9462] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3064'. [ 222.281250][ T9462] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3064'. [ 222.355033][ T9464] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:516 [ 222.357087][ T9464] rust_binder: 516: no such ref 1 [ 222.382973][ T36] audit: type=1326 audit(2000000051.169:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9465 comm="syz.5.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344c18eec9 code=0x7ffc0000 [ 222.407821][ T36] audit: type=1326 audit(2000000051.169:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9465 comm="syz.5.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344c18eec9 code=0x7ffc0000 [ 222.416008][ T9468] fuse: Unknown parameter '00000000000000000000003000000000000000000030000000000000000000000300000000000000000000' [ 222.431683][ T36] audit: type=1326 audit(2000000051.179:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9465 comm="syz.5.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f344c18eec9 code=0x7ffc0000 [ 222.466871][ T36] audit: type=1326 audit(2000000051.179:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9465 comm="syz.5.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344c18eec9 code=0x7ffc0000 [ 222.490438][ T36] audit: type=1326 audit(2000000051.179:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9465 comm="syz.5.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344c18eec9 code=0x7ffc0000 [ 222.513901][ T36] audit: type=1326 audit(2000000051.179:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9465 comm="syz.5.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f344c18eec9 code=0x7ffc0000 [ 222.538154][ T36] audit: type=1326 audit(2000000051.179:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9465 comm="syz.5.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344c18eec9 code=0x7ffc0000 [ 222.562124][ T36] audit: type=1326 audit(2000000051.179:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9465 comm="syz.5.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344c18eec9 code=0x7ffc0000 [ 222.585637][ T36] audit: type=1326 audit(2000000051.179:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9465 comm="syz.5.3066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f344c18eec9 code=0x7ffc0000 [ 222.653866][ T9472] tmpfs: Unknown parameter '2r_jlocks' [ 222.823135][ T9482] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 222.823212][ T9482] rust_binder: Read failure Err(EFAULT) in pid:534 [ 222.825339][ T9484] rust_binder: Write failure EFAULT in pid:534 [ 223.089809][ T538] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 223.251122][ T538] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.262209][ T538] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.272031][ T538] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 223.284969][ T538] usb 6-1: config 0 interface 0 has no altsetting 0 [ 223.291745][ T538] usb 6-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 223.300947][ T538] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.309830][ T538] usb 6-1: config 0 descriptor?? [ 223.917539][ T538] usb 6-1: string descriptor 0 read error: -71 [ 223.924290][ T538] uclogic 0003:256C:006E.000D: failed retrieving string descriptor #200: -71 [ 223.933176][ T538] uclogic 0003:256C:006E.000D: failed retrieving pen parameters: -71 [ 223.941441][ T538] uclogic 0003:256C:006E.000D: failed probing pen v2 parameters: -71 [ 223.949605][ T538] uclogic 0003:256C:006E.000D: failed probing parameters: -71 [ 223.957315][ T538] uclogic 0003:256C:006E.000D: probe with driver uclogic failed with error -71 [ 223.967796][ T538] usb 6-1: USB disconnect, device number 28 [ 224.039862][ T421] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 224.039902][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 224.181869][ T9502] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 224.391666][ T9516] rust_binder: Write failure EFAULT in pid:201 [ 224.426097][ T9520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 224.633972][ T9539] rust_binder: 549: no such ref 3 [ 224.645645][ T9539] rust_binder: 549: no such ref 0 [ 224.754987][ T9546] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 224.755008][ T9546] rust_binder: Read failure Err(EFAULT) in pid:554 [ 224.809883][ T787] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 224.971147][ T787] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 224.982270][ T787] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 224.995351][ T787] usb 7-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 225.004602][ T787] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.013509][ T787] usb 7-1: config 0 descriptor?? [ 225.018825][ T9540] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 225.027642][ T787] usbhid 7-1:0.0: can't add hid device: -22 [ 225.033690][ T787] usbhid 7-1:0.0: probe with driver usbhid failed with error -22 [ 225.128678][ T9569] netlink: 188 bytes leftover after parsing attributes in process `syz.5.3102'. [ 225.138915][ T9569] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 225.138954][ T9569] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:578 [ 225.161876][ T9571] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3103'. [ 225.318483][ T9572] rust_binder: 580: no such ref 0 [ 225.329877][ T9572] rust_binder: 580: no such ref 2 [ 225.335071][ T9572] rust_binder: 9572 RLIMIT_NICE not set [ 225.347116][ T405] rust_binder: 9570: removing orphan mapping 0:112 [ 226.288938][ T9598] rust_binder: Write failure EFAULT in pid:592 [ 227.301530][ T9673] rust_binder: Error while translating object. [ 227.307782][ T9673] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 227.314047][ T9673] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:594 [ 227.401834][ T9684] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 227.411091][ T9684] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:600 [ 227.436796][ T9686] rust_binder: Write failure EINVAL in pid:602 [ 227.475394][ T36] kauditd_printk_skb: 32 callbacks suppressed [ 227.475417][ T36] audit: type=1400 audit(2000000312.263:645): avc: denied { write } for pid=9692 comm="syz.5.3144" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 227.478641][ T405] usb 7-1: USB disconnect, device number 8 [ 227.515337][ T9697] netlink: 'syz.5.3146': attribute type 16 has an invalid length. [ 227.606615][ T9702] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 227.606824][ T9702] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:212 [ 227.613985][ T9702] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 227.623216][ T9702] rust_binder: Read failure Err(EFAULT) in pid:212 [ 227.664711][ T9707] loop7: detected capacity change from 0 to 16384 [ 227.969769][ T405] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 228.119798][ T405] usb 6-1: Using ep0 maxpacket: 16 [ 228.128450][ T405] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 228.137791][ T405] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.146078][ T405] usb 6-1: Product: syz [ 228.150497][ T405] usb 6-1: Manufacturer: syz [ 228.155335][ T405] usb 6-1: SerialNumber: syz [ 228.166402][ T405] r8152-cfgselector 6-1: Unknown version 0x0000 [ 228.172966][ T405] r8152-cfgselector 6-1: config 0 descriptor?? [ 228.573918][ T36] audit: type=1400 audit(2000000313.363:646): avc: denied { nlmsg_write } for pid=9719 comm="syz.7.3152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 228.575377][ T9721] overlayfs: failed to clone upperpath [ 228.602308][ T405] r8152-cfgselector 6-1: Needed 1 retries to read version [ 228.609861][ T405] r8152-cfgselector 6-1: Unknown version 0x64d0 [ 228.616407][ T405] r8152-cfgselector 6-1: bad CDC descriptors [ 228.647526][ T9726] tipc: Failed to remove unknown binding: 66,1,1/0:1419453102/1419453104 [ 228.657952][ T9726] tipc: Failed to remove unknown binding: 66,1,1/0:1419453102/1419453104 [ 228.666664][ T9726] tipc: Failed to remove unknown binding: 66,1,1/0:1419453102/1419453104 [ 228.919321][ T9753] overlayfs: failed to clone lowerpath [ 228.941588][ T9707] loop7: detected capacity change from 16384 to 0 [ 229.015939][ T10] r8152-cfgselector 6-1: USB disconnect, device number 29 [ 229.046519][ T9760] netlink: 'syz.7.3168': attribute type 2 has an invalid length. [ 229.054731][ T9760] futex_wake_op: syz.7.3168 tries to shift op by 144; fix this program [ 229.405538][ T9769] kvm: kvm [9768]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0xc1) = 0x5 [ 229.414322][ T9769] kvm: kvm [9768]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0xc2) = 0x5 [ 229.425113][ T9769] kvm: kvm [9768]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x11e) = 0x5 [ 229.436104][ T9769] kvm: kvm [9768]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x186) = 0x5 [ 229.444947][ T9769] kvm: kvm [9768]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x187) = 0x5 [ 229.458979][ T9769] kvm_intel: kvm [9768]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x1d9) = 0x5 [ 229.503613][ T36] audit: type=1400 audit(2000000314.293:647): avc: denied { audit_write } for pid=9773 comm="syz.6.3172" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 229.789875][ T405] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 229.941151][ T405] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.951831][ T405] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 229.961936][ T405] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 229.971253][ T405] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 229.979360][ T405] usb 6-1: SerialNumber: syz [ 230.263287][ T405] usb 6-1: 0:2 : does not exist [ 230.272856][ T405] usb 6-1: USB disconnect, device number 30 [ 230.322155][ T9810] netlink: 9 bytes leftover after parsing attributes in process `syz.7.3186'. [ 230.331549][ T9810] gretap0: entered promiscuous mode [ 230.384598][ T9812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.387748][ T36] audit: type=1400 audit(2000000315.173:648): avc: denied { write } for pid=9811 comm="syz.6.3187" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 230.408964][ T9812] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 230.416242][ T36] audit: type=1400 audit(2000000315.173:649): avc: denied { open } for pid=9811 comm="syz.6.3187" path="/80/file0" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 230.453461][ T9815] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.453718][ T9815] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 230.460411][ T9815] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 230.468764][ T9815] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:239 [ 230.478900][ T9817] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.523299][ T9820] kvm: kvm [9819]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0xc1) = 0x5 [ 230.531861][ T9820] kvm: kvm [9819]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0xc2) = 0x5 [ 230.542579][ T9820] kvm: kvm [9819]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x11e) = 0x5 [ 230.553698][ T9820] kvm: kvm [9819]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x186) = 0x5 [ 230.562381][ T9820] kvm: kvm [9819]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x187) = 0x5 [ 230.575289][ T9820] kvm_intel: kvm [9819]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x1d9) = 0x5 [ 230.936473][ T9846] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3198'. [ 230.989781][ T9849] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.990846][ T5351] Bluetooth: hci0: Frame reassembly failed (-84) [ 231.258663][ T9861] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 232.107394][ T9868] __vm_enough_memory: pid: 9868, comm: syz.5.3205, bytes: 18014402804453376 not enough memory for the allocation [ 232.389792][ T65] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 232.539788][ T65] usb 6-1: Using ep0 maxpacket: 32 [ 232.546357][ T65] usb 6-1: config 8 has an invalid interface number: 69 but max is 0 [ 232.554644][ T65] usb 6-1: config 8 has no interface number 0 [ 232.561334][ T65] usb 6-1: config 8 interface 69 has no altsetting 0 [ 232.569874][ T65] usb 6-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice= 6.d6 [ 232.579118][ T65] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.587177][ T65] usb 6-1: Product: syz [ 232.591396][ T65] usb 6-1: Manufacturer: syz [ 232.596031][ T65] usb 6-1: SerialNumber: syz [ 232.805498][ T65] usb_ehset_test 6-1:8.69: probe with driver usb_ehset_test failed with error -32 [ 232.815706][ T65] usb 6-1: USB disconnect, device number 31 [ 232.999825][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 232.999816][ T421] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 233.334016][ T9878] random: crng reseeded on system resumption [ 233.589857][ T405] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 233.741058][ T405] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.752133][ T405] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.762058][ T405] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 233.771159][ T405] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.780227][ T405] usb 6-1: config 0 descriptor?? [ 234.187878][ T405] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 234.194816][ T405] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 234.201764][ T405] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 234.208641][ T405] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 234.215512][ T405] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 234.222397][ T405] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 234.229210][ T405] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 234.236981][ T405] pyra 0003:1E7D:2CF6.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 234.339014][ T9893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=9893 comm=syz.7.3213 [ 234.470622][ T9895] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 234.839763][ T405] pyra 0003:1E7D:2CF6.000E: couldn't init struct pyra_device [ 234.847270][ T405] pyra 0003:1E7D:2CF6.000E: couldn't install mouse [ 234.854526][ T405] pyra 0003:1E7D:2CF6.000E: probe with driver pyra failed with error -71 [ 234.865472][ T405] usb 6-1: USB disconnect, device number 32 [ 235.493823][ T9919] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 235.501037][ T9919] rust_binder: Write failure EINVAL in pid:664 [ 235.514348][ T9921] rust_binder: Write failure EINVAL in pid:666 [ 235.522664][ T9923] overlayfs: failed to clone lowerpath [ 235.589809][ T787] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 235.665191][ T9933] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3228'. [ 235.675068][ T9933] rust_binder: Error while translating object. [ 235.675116][ T9933] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 235.681396][ T9933] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:673 [ 235.740997][ T787] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.761229][ T787] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.771103][ T787] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 235.784024][ T787] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 235.793099][ T787] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.802154][ T787] usb 7-1: config 0 descriptor?? [ 236.219036][ T787] plantronics 0003:047F:FFFF.000F: invalid report_count 2129187058 [ 236.229079][ T787] plantronics 0003:047F:FFFF.000F: item 0 4 1 9 parsing failed [ 236.237485][ T787] plantronics 0003:047F:FFFF.000F: parse failed [ 236.245879][ T787] plantronics 0003:047F:FFFF.000F: probe with driver plantronics failed with error -22 [ 236.249980][ T9953] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 236.258599][ T9953] rust_binder: Error in use_page_slow: ESRCH [ 236.265170][ T9953] rust_binder: use_range failure ESRCH [ 236.271937][ T9942] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.271939][ T9953] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 236.271960][ T9942] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.277438][ T9953] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 236.277473][ T9953] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:680 [ 236.284718][ T9942] bridge_slave_0: entered allmulticast mode [ 236.325356][ T9942] bridge_slave_0: entered promiscuous mode [ 236.332187][ T9942] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.339385][ T9942] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.346525][ T9942] bridge_slave_1: entered allmulticast mode [ 236.352849][ T9942] bridge_slave_1: entered promiscuous mode [ 236.404072][ T9942] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.411181][ T9942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.418489][ T9942] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.420200][ T9917] __vm_enough_memory: pid: 9917, comm: syz.6.3221, bytes: 18014402804453376 not enough memory for the allocation [ 236.425610][ T9942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.440838][ T787] usb 7-1: USB disconnect, device number 9 [ 236.459896][ T5351] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.467257][ T5351] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.486848][ T5360] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.493963][ T5360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.503944][ T5351] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.511025][ T5351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.538783][ T9942] veth0_vlan: entered promiscuous mode [ 236.551836][ T9942] veth1_macvtap: entered promiscuous mode [ 236.598986][ T9968] rust_binder: Failed copying remainder into alloc: EFAULT [ 236.599007][ T9968] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 236.606748][ T9968] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 236.615395][ T9968] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:4 [ 237.012040][ T9990] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 237.029843][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 237.142965][ T36] audit: type=1400 audit(2000000321.933:650): avc: denied { create } for pid=9989 comm="syz.6.3246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 237.212505][ T10] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 237.227169][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.239507][ T10] usb 9-1: config 0 descriptor?? [ 237.268215][T10010] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 237.268395][T10010] rust_binder: Error in use_page_slow: ESRCH [ 237.275408][T10010] rust_binder: use_range failure ESRCH [ 237.281777][T10010] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 237.287599][T10010] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 237.296226][T10010] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:690 [ 237.306805][T10010] rust_binder: Read failure Err(EAGAIN) in pid:690 [ 237.317286][T10010] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:690 [ 237.348069][T10016] EXT4-fs: dax option not supported [ 237.454898][T10026] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 237.489788][ T405] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 237.639940][ T405] usb 7-1: device descriptor read/64, error -71 [ 237.889803][ T405] usb 7-1: device descriptor read/64, error -71 [ 238.129800][ T405] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 238.269838][ T405] usb 7-1: device descriptor read/64, error -71 [ 238.519886][ T405] usb 7-1: device descriptor read/64, error -71 [ 238.629949][ T405] usb usb7-port1: attempt power cycle [ 238.969762][ T405] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 238.990787][ T405] usb 7-1: device descriptor read/8, error -71 [ 239.120787][ T405] usb 7-1: device descriptor read/8, error -71 [ 239.230213][ T425] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 239.361478][ T405] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 239.390836][ T405] usb 7-1: device descriptor read/8, error -71 [ 239.391034][ T425] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 239.408265][ T425] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 239.421828][ T425] usb 6-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 239.431101][T10097] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3286'. [ 239.440255][ T425] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.449212][ T425] usb 6-1: config 0 descriptor?? [ 239.454615][T10059] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 239.463085][ T425] usbhid 6-1:0.0: can't add hid device: -22 [ 239.469217][ T425] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 239.520890][ T405] usb 7-1: device descriptor read/8, error -71 [ 239.629888][ T405] usb usb7-port1: unable to enumerate USB device [ 239.651159][ T10] usb 9-1: Cannot set autoneg [ 239.656352][ T10] MOSCHIP usb-ethernet driver 9-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 239.671897][ T10] usb 9-1: USB disconnect, device number 2 [ 239.684158][ T425] usb 6-1: USB disconnect, device number 33 [ 239.689963][T10100] rust_binder: Write failure EINVAL in pid:11 [ 239.690525][T10100] rust_binder: Read failure Err(EAGAIN) in pid:11 [ 239.766904][T10105] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=10105 comm=syz.8.3289 [ 239.989875][T10118] overlayfs: failed to resolve './file1': -2 [ 240.055919][T10128] netlink: 176 bytes leftover after parsing attributes in process `syz.6.3299'. [ 240.169844][ T425] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 240.191075][ T36] audit: type=1400 audit(2000000325.977:651): avc: denied { remount } for pid=10137 comm="syz.6.3304" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 240.204836][T10140] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:709 [ 240.270564][T10152] input: syz0 as /devices/virtual/input/input25 [ 240.285308][T10152] rust_binder: Write failure EINVAL in pid:720 [ 240.321498][ T425] usb 9-1: not running at top speed; connect to a high speed hub [ 240.336367][ T425] usb 9-1: config 1 interface 0 altsetting 6 endpoint 0x82 has invalid wMaxPacketSize 0 [ 240.346291][ T425] usb 9-1: config 1 interface 0 has no altsetting 0 [ 240.354354][ T425] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 240.363776][ T425] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.371931][ T425] usb 9-1: Product: syz [ 240.376270][ T425] usb 9-1: Manufacturer: á°Š [ 240.381247][ T425] usb 9-1: SerialNumber: syz [ 240.629817][ T405] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 240.780919][ T405] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 240.792126][ T405] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 240.805360][ T405] usb 6-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 240.807968][T10112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.814790][ T405] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.825279][T10112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.832595][ T405] usb 6-1: config 0 descriptor?? [ 240.844355][T10154] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 240.850539][ T425] usblp 9-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 6 proto 2 vid 0x0525 pid 0xA4A8 [ 240.853113][ T405] usbhid 6-1:0.0: can't add hid device: -22 [ 240.866366][ T425] usb 9-1: USB disconnect, device number 3 [ 240.868984][ T405] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 240.878370][ T425] usblp0: removed [ 241.059054][ T425] usb 6-1: USB disconnect, device number 34 [ 241.400841][ T36] audit: type=1400 audit(2000000327.187:652): avc: denied { mount } for pid=10169 comm="syz.8.3317" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 241.578480][T10200] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 241.578869][T10200] rust_binder: Error in use_page_slow: ESRCH [ 241.583256][T10202] incfs: Options parsing error. -22 [ 241.586039][T10200] rust_binder: use_range failure ESRCH [ 241.593344][T10202] incfs: mount failed -22 [ 241.597272][T10200] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 241.606604][T10200] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 241.614942][T10200] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:724 [ 241.669792][ T405] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 241.829784][ T405] usb 9-1: Using ep0 maxpacket: 8 [ 241.836677][ T405] usb 9-1: unable to get BOS descriptor or descriptor too short [ 241.845259][ T405] usb 9-1: config 1 has an invalid interface number: 137 but max is 0 [ 241.853489][ T405] usb 9-1: config 1 has no interface number 0 [ 241.859603][ T405] usb 9-1: config 1 interface 137 has no altsetting 0 [ 241.868118][ T405] usb 9-1: New USB device found, idVendor=22b8, idProduct=2d99, bcdDevice=ee.71 [ 241.877272][ T405] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.885663][ T405] usb 9-1: Product: syz [ 241.890038][ T405] usb 9-1: Manufacturer: syz [ 241.894667][ T405] usb 9-1: SerialNumber: syz [ 241.959940][ T331] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 242.089836][ T331] usb 6-1: device descriptor read/64, error -71 [ 242.102620][T10172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.111371][T10172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.124198][ T405] usb 9-1: USB disconnect, device number 4 [ 242.379843][ T331] usb 6-1: device descriptor read/64, error -71 [ 242.619841][ T331] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 242.682949][ T5360] Bluetooth: hci0: Frame reassembly failed (-84) [ 242.749764][ T331] usb 6-1: device descriptor read/64, error -71 [ 242.871688][T10229] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3339'. [ 242.989814][ T331] usb 6-1: device descriptor read/64, error -71 [ 243.099932][ T331] usb usb6-port1: attempt power cycle [ 243.208396][T10240] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 243.260354][T10241] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 243.266892][T10241] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 243.274991][T10241] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:303 [ 243.285280][T10242] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 243.402705][T10254] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 243.414826][T10256] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 216, size: 238) [ 243.415854][T10256] rust_binder: Error while translating object. [ 243.426922][T10256] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 243.432930][T10256] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:317 [ 243.442517][ T331] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 243.460821][ T331] usb 6-1: device descriptor read/8, error -71 [ 243.464387][ T36] audit: type=1400 audit(2000000329.247:653): avc: denied { map } for pid=10257 comm="syz.7.3349" path="socket:[51395]" dev="sockfs" ino=51395 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 243.491981][ T36] audit: type=1400 audit(2000000329.247:654): avc: denied { accept } for pid=10257 comm="syz.7.3349" path="socket:[51395]" dev="sockfs" ino=51395 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 243.590925][ T331] usb 6-1: device descriptor read/8, error -71 [ 243.647055][T10265] rust_binder: Write failure EFAULT in pid:325 [ 243.675442][ T36] audit: type=1400 audit(2000000329.457:655): avc: denied { name_bind } for pid=10268 comm="syz.6.3353" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 243.717952][ T36] audit: type=1326 audit(2000000329.497:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10273 comm="syz.6.3354" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f14b498eec9 code=0x0 [ 243.830312][ T331] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 243.862624][ T331] usb 6-1: device descriptor read/8, error -71 [ 244.001856][ T331] usb 6-1: device descriptor read/8, error -71 [ 244.109877][ T331] usb usb6-port1: unable to enumerate USB device [ 244.229843][ T425] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 244.379761][ T425] usb 7-1: Using ep0 maxpacket: 16 [ 244.385988][ T425] usb 7-1: config 3 has an invalid interface number: 153 but max is 3 [ 244.394287][ T425] usb 7-1: config 3 has an invalid interface number: 41 but max is 3 [ 244.402463][ T425] usb 7-1: config 3 has an invalid interface number: 165 but max is 3 [ 244.410730][ T425] usb 7-1: config 3 has an invalid interface number: 157 but max is 3 [ 244.418924][ T425] usb 7-1: config 3 has an invalid interface number: 6 but max is 3 [ 244.426968][ T425] usb 7-1: config 3 has an invalid descriptor of length 128, skipping remainder of the config [ 244.437266][ T425] usb 7-1: config 3 has 5 interfaces, different from the descriptor's value: 4 [ 244.446483][ T425] usb 7-1: config 3 has no interface number 0 [ 244.452759][ T425] usb 7-1: config 3 has no interface number 1 [ 244.458968][ T425] usb 7-1: config 3 has no interface number 2 [ 244.465283][ T425] usb 7-1: config 3 has no interface number 3 [ 244.471501][ T425] usb 7-1: config 3 has no interface number 4 [ 244.477628][ T425] usb 7-1: config 3 interface 153 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 244.488578][ T425] usb 7-1: config 3 interface 41 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 244.499223][ T425] usb 7-1: config 3 interface 41 altsetting 2 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 244.510129][ T425] usb 7-1: config 3 interface 41 altsetting 2 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 244.521197][ T425] usb 7-1: config 3 interface 41 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 244.532012][ T425] usb 7-1: config 3 interface 165 altsetting 213 has an invalid descriptor for endpoint zero, skipping [ 244.543099][ T425] usb 7-1: config 3 interface 165 altsetting 213 has an invalid descriptor for endpoint zero, skipping [ 244.554219][ T425] usb 7-1: config 3 interface 165 altsetting 213 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 244.565526][ T425] usb 7-1: config 3 interface 165 altsetting 213 has a duplicate endpoint with address 0x9, skipping [ 244.576843][ T425] usb 7-1: config 3 interface 165 altsetting 213 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 244.588300][ T425] usb 7-1: config 3 interface 157 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 244.601604][ T425] usb 7-1: too many endpoints for config 3 interface 6 altsetting 9: 44, using maximum allowed: 30 [ 244.612406][ T425] usb 7-1: config 3 interface 6 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 44 [ 244.625434][ T425] usb 7-1: config 3 interface 41 has no altsetting 0 [ 244.632245][ T425] usb 7-1: config 3 interface 165 has no altsetting 0 [ 244.639075][ T425] usb 7-1: config 3 interface 157 has no altsetting 0 [ 244.645898][ T425] usb 7-1: config 3 interface 6 has no altsetting 0 [ 244.654097][ T425] usb 7-1: New USB device found, idVendor=1b3d, idProduct=015c, bcdDevice=84.ba [ 244.663240][ T425] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.671363][ T425] usb 7-1: Product: syz [ 244.675647][ T425] usb 7-1: Manufacturer: syz [ 244.680284][ T425] usb 7-1: SerialNumber: syz [ 244.727203][T10300] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 244.760103][ T421] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 244.760134][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 245.109753][ T31] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 245.259730][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 245.266094][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.277080][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.286893][ T31] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 245.299752][ T31] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 245.309060][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.318142][ T31] usb 6-1: config 0 descriptor?? [ 245.326063][ T31] usbhid 6-1:0.0: can't add hid device: -22 [ 245.332648][ T31] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 245.395567][T10319] binder: Unknown parameter 'fscontext?}' [ 245.470860][T10321] rust_binder: 48: no such ref 0 [ 245.529443][T10300] rust_binder: Error in use_page_slow: ESRCH [ 245.529473][T10300] rust_binder: use_range failure ESRCH [ 245.536334][T10300] rust_binder: Failed to allocate buffer. len:3328, is_oneway:false [ 245.542241][T10300] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 245.550904][T10300] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:732 [ 245.563987][T10341] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 216) [ 245.564081][ T65] usb 6-1: USB disconnect, device number 39 [ 245.579772][T10341] rust_binder: Error while translating object. [ 245.590116][T10341] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 245.596652][T10341] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:52 [ 246.135007][T10372] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 246.144710][T10372] rust_binder: Error in use_page_slow: ESRCH [ 246.151379][T10372] rust_binder: use_range failure ESRCH [ 246.157478][T10372] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 246.163063][T10372] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 246.171042][T10372] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:752 [ 246.350024][T10374] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 246.386325][T10378] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 246.393572][T10378] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 246.416203][T10382] EXT4-fs: dax option not supported [ 246.522644][ T36] audit: type=1400 audit(2000000332.311:657): avc: denied { create } for pid=10386 comm="syz.8.3391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 246.593917][ T5364] bridge_slave_1: left allmulticast mode [ 246.600374][ T5364] bridge_slave_1: left promiscuous mode [ 246.606298][ T5364] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.614525][ T5364] bridge_slave_0: left allmulticast mode [ 246.620424][ T5364] bridge_slave_0: left promiscuous mode [ 246.626204][ T5364] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.764379][ T5364] veth1_macvtap: left promiscuous mode [ 246.770002][ T5364] veth0_vlan: left promiscuous mode [ 246.795728][T10391] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 246.858236][T10389] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.871965][T10389] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.879163][T10389] bridge_slave_0: entered allmulticast mode [ 246.886692][T10389] bridge_slave_0: entered promiscuous mode [ 246.893883][T10389] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.901005][T10389] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.908243][T10389] bridge_slave_1: entered allmulticast mode [ 246.914884][T10389] bridge_slave_1: entered promiscuous mode [ 247.005174][ T425] ftdi_sio 7-1:3.153: FTDI USB Serial Device converter detected [ 247.020251][ T425] ftdi_sio ttyUSB0: unknown device type: 0x84ba [ 247.029585][ T425] ftdi_sio 7-1:3.41: FTDI USB Serial Device converter detected [ 247.047005][T10389] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.054157][T10389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.061522][T10389] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.064894][ T425] ftdi_sio ttyUSB1: unknown device type: 0x84ba [ 247.068580][T10389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.088806][ T425] ftdi_sio 7-1:3.165: FTDI USB Serial Device converter detected [ 247.115341][ T425] ftdi_sio ttyUSB2: unknown device type: 0x84ba [ 247.129001][ T5360] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.145448][ T5364] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.152012][ T425] ftdi_sio 7-1:3.157: FTDI USB Serial Device converter detected [ 247.152749][ T5364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.169000][ T425] ftdi_sio ttyUSB3: unknown device type: 0x84ba [ 247.180542][ T425] ftdi_sio 7-1:3.6: FTDI USB Serial Device converter detected [ 247.191211][ T425] ftdi_sio ttyUSB4: unknown device type: 0x84ba [ 247.216126][ T425] usb 7-1: USB disconnect, device number 14 [ 247.239338][T10389] veth0_vlan: entered promiscuous mode [ 247.250451][ T425] ftdi_sio 7-1:3.153: device disconnected [ 247.259098][ T425] ftdi_sio 7-1:3.41: device disconnected [ 247.279233][ T425] ftdi_sio 7-1:3.165: device disconnected [ 247.279574][T10389] veth1_macvtap: entered promiscuous mode [ 247.288674][ T425] ftdi_sio 7-1:3.157: device disconnected [ 247.298046][T10420] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 247.298821][ T425] ftdi_sio 7-1:3.6: device disconnected [ 247.324655][T10420] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 247.343572][T10422] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 247.343699][T10422] rust_binder: Error in use_page_slow: ESRCH [ 247.355332][T10422] rust_binder: use_range failure ESRCH [ 247.369770][T10422] rust_binder: Failed to allocate buffer. len:1192, is_oneway:true [ 247.378852][T10424] rust_binder: Write failure EFAULT in pid:354 [ 247.380669][T10422] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 247.405526][T10422] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:759 [ 247.407552][T10426] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 247.450294][T10426] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3394'. [ 247.468628][T10426] tipc: Invalid UDP bearer configuration [ 247.468656][T10426] tipc: Enabling of bearer rejected, failed to enable media [ 247.583633][T10457] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 247.619781][T10457] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 248.185356][T10495] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3422'. [ 248.202441][T10486] syz.6.3419: vmalloc error: size 66068480, failed to allocated page array size 129040, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz6,mems_allowed=0 [ 248.220594][T10486] CPU: 0 UID: 0 PID: 10486 Comm: syz.6.3419 Not tainted syzkaller #0 98bacdaf52065bb91416bd5578e49f5aee2639ea [ 248.220635][T10486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 248.220662][T10486] Call Trace: [ 248.220675][T10486] [ 248.220685][T10486] __dump_stack+0x21/0x30 [ 248.220722][T10486] dump_stack_lvl+0x10c/0x190 [ 248.220757][T10486] ? __cfi_dump_stack_lvl+0x10/0x10 [ 248.220789][T10486] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 248.220819][T10486] dump_stack+0x19/0x20 [ 248.220849][T10486] warn_alloc+0x1bc/0x2a0 [ 248.220884][T10486] ? __kasan_slab_free+0x5f/0x80 [ 248.220912][T10486] ? __cfi_warn_alloc+0x10/0x10 [ 248.220942][T10486] ? __get_vm_area_node+0x1dc/0x3a0 [ 248.220973][T10486] ? xt_alloc_entry_offsets+0x56/0xe0 [ 248.221004][T10486] __vmalloc_node_range_noprof+0x68e/0x1420 [ 248.221044][T10486] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 248.221078][T10486] ? __kmalloc_large_node_noprof+0x1e/0xe0 [ 248.221102][T10486] ? __kmalloc_node_noprof+0x2a5/0x450 [ 248.221125][T10486] ? nf_setsockopt+0x28d/0x2b0 [ 248.221161][T10486] __kvmalloc_node_noprof+0xfc/0x300 [ 248.221196][T10486] ? xt_alloc_entry_offsets+0x56/0xe0 [ 248.221225][T10486] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 248.221262][T10486] xt_alloc_entry_offsets+0x56/0xe0 [ 248.221291][T10486] translate_table+0x199/0x2010 [ 248.221339][T10486] ? kasan_save_alloc_info+0x40/0x50 [ 248.221376][T10486] ? ipt_register_table+0x7b0/0x7b0 [ 248.221413][T10486] ? __kmalloc_node_noprof+0x1b1/0x450 [ 248.221435][T10486] ? __kvmalloc_node_noprof+0x11d/0x300 [ 248.221469][T10486] ? __check_object_size+0xea/0x810 [ 248.221506][T10486] ? __kvmalloc_node_noprof+0x168/0x300 [ 248.221540][T10486] ? __cfi___check_object_size+0x10/0x10 [ 248.221576][T10486] ? should_fail+0xf/0x20 [ 248.221598][T10486] ? _copy_from_user+0x8b/0xb0 [ 248.221629][T10486] ? copy_from_sockptr_offset+0x77/0xb0 [ 248.221662][T10486] do_ipt_set_ctl+0x6ed/0x8a0 [ 248.221695][T10486] ? sockopt_release_sock+0x5c/0x70 [ 248.221725][T10486] ? do_ip_setsockopt+0x1bb2/0x29e0 [ 248.221756][T10486] ? __cfi_do_ipt_set_ctl+0x10/0x10 [ 248.221791][T10486] ? __cfi_mutex_unlock+0x10/0x10 [ 248.221824][T10486] ? selinux_socket_setsockopt+0x2ea/0x390 [ 248.221862][T10486] nf_setsockopt+0x28d/0x2b0 [ 248.221898][T10486] ip_setsockopt+0xf6/0x100 [ 248.221928][T10486] raw_setsockopt+0xf4/0x1a0 [ 248.221953][T10486] sock_common_setsockopt+0xb5/0xd0 [ 248.221977][T10486] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 248.222001][T10486] do_sock_setsockopt+0x26a/0x400 [ 248.222032][T10486] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 248.222066][T10486] __x64_sys_setsockopt+0x1b8/0x250 [ 248.222099][T10486] x64_sys_call+0x2adc/0x2ee0 [ 248.222134][T10486] do_syscall_64+0x58/0xf0 [ 248.222166][T10486] ? clear_bhb_loop+0x50/0xa0 [ 248.222189][T10486] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 248.222225][T10486] RIP: 0033:0x7f14b498eec9 [ 248.222245][T10486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.222266][T10486] RSP: 002b:00007f14b5883038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 248.222292][T10486] RAX: ffffffffffffffda RBX: 00007f14b4be5fa0 RCX: 00007f14b498eec9 [ 248.222311][T10486] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 248.222332][T10486] RBP: 00007f14b4a11f91 R08: 0000000000007590 R09: 0000000000000000 [ 248.222349][T10486] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 248.222365][T10486] R13: 00007f14b4be6038 R14: 00007f14b4be5fa0 R15: 00007ffc3bec17b8 [ 248.222387][T10486] [ 248.222397][T10486] Mem-Info: [ 248.579478][T10486] active_anon:9555 inactive_anon:11 isolated_anon:0 [ 248.579478][T10486] active_file:10979 inactive_file:13764 isolated_file:0 [ 248.579478][T10486] unevictable:15417 dirty:60 writeback:0 [ 248.579478][T10486] slab_reclaimable:5726 slab_unreclaimable:80931 [ 248.579478][T10486] mapped:50335 shmem:2267 pagetables:1039 [ 248.579478][T10486] sec_pagetables:0 bounce:0 [ 248.579478][T10486] kernel_misc_reclaimable:0 [ 248.579478][T10486] free:1427659 free_pcp:22039 free_cma:0 [ 248.625673][T10486] Node 0 active_anon:38220kB inactive_anon:44kB active_file:43916kB inactive_file:55056kB unevictable:61668kB isolated(anon):0kB isolated(file):0kB mapped:201340kB dirty:240kB writeback:0kB shmem:9068kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8064kB pagetables:4156kB sec_pagetables:0kB all_unreclaimable? no [ 248.658272][T10486] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965936kB mlocked:0kB bounce:0kB free_pcp:5724kB local_pcp:68kB free_cma:0kB [ 248.680243][T10499] overlayfs: failed to clone upperpath [ 248.688646][T10486] lowmem_reserve[]: 0 3921 3921 [ 248.699085][T10486] Normal free:2756416kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38120kB inactive_anon:44kB active_file:43916kB inactive_file:55056kB unevictable:61668kB writepending:240kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:81932kB local_pcp:80344kB free_cma:0kB [ 248.731067][T10486] lowmem_reserve[]: 0 0 0 [ 248.733026][T10499] overlayfs: failed to clone upperpath [ 248.735486][T10486] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 248.758356][T10486] Normal: 541*4kB (UME) 161*8kB (UE) 166*16kB (UME) 483*32kB (ME) 304*64kB (ME) 31*128kB (UME) 22*256kB (UME) 27*512kB (UME) 11*1024kB (UME) 7*2048kB (UME) 650*4096kB (UM) = 2752444kB [ 248.777538][T10486] 42461 total pagecache pages [ 248.782294][T10486] 38 pages in swap cache [ 248.786567][T10486] Free swap = 124500kB [ 248.790870][T10486] Total swap = 124996kB [ 248.795134][T10486] 2097051 pages RAM [ 248.798974][T10486] 0 pages HighMem/MovableOnly [ 248.803921][T10486] 351537 pages reserved [ 248.808100][T10486] 0 pages cma reserved [ 248.815702][T10486] Memory allocations: [ 248.820232][T10486] 0 B 0 init/main.c:1370 func:do_initcalls [ 248.827522][T10486] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 248.836170][T10486] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 248.844627][T10486] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 248.853268][T10486] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 248.861664][T10486] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 248.870531][T10486] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 248.884620][T10486] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 248.893186][T10486] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 248.902166][T10486] 0 B 0 init/initramfs.c:101 func:find_link [ 248.948679][T10529] syz.7.3431(10529): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 249.169930][ T331] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 249.296487][T10535] rust_binder: Error in use_page_slow: ESRCH [ 249.296508][T10535] rust_binder: use_range failure ESRCH [ 249.302667][T10535] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 249.308236][T10535] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 249.316439][T10535] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:23 [ 249.341110][ T331] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 249.359520][ T331] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.376591][ T331] usb 6-1: config 0 descriptor?? [ 249.569323][T10556] can: request_module (can-proto-0) failed. [ 250.087321][T10575] overlayfs: failed to clone upperpath [ 250.316072][T10586] tipc: Enabling of bearer rejected, media not registered [ 250.436692][T10599] 9pnet_fd: Insufficient options for proto=fd [ 250.455359][ T405] rust_binder: 10590: removing orphan mapping 0:112 [ 250.590726][ T331] usb 6-1: Cannot set autoneg [ 250.595521][ T331] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 250.608739][ T331] usb 6-1: USB disconnect, device number 40 [ 250.655284][T10626] 9pnet_fd: Insufficient options for proto=fd [ 250.683736][ T36] audit: type=1400 audit(2000000336.471:658): avc: denied { accept } for pid=10632 comm="syz.7.3466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 250.709799][ T405] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 250.859781][ T405] usb 10-1: Using ep0 maxpacket: 8 [ 250.866486][ T405] usb 10-1: unable to get BOS descriptor or descriptor too short [ 250.875021][ T405] usb 10-1: config 8 has an invalid interface number: 112 but max is 0 [ 250.883360][ T405] usb 10-1: config 8 has no interface number 0 [ 250.889545][ T405] usb 10-1: config 8 interface 112 has no altsetting 0 [ 250.898512][ T405] usb 10-1: string descriptor 0 read error: -22 [ 250.904861][ T405] usb 10-1: New USB device found, idVendor=1d2a, idProduct=0801, bcdDevice=72.c7 [ 250.914243][ T405] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.999746][ T421] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 250.999774][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 251.121460][T10639] overlay: filesystem on ./bus not supported as upperdir [ 251.128856][T10639] overlay: filesystem on ./bus not supported as upperdir [ 251.136247][T10639] overlay: filesystem on ./bus not supported as upperdir [ 251.143521][T10639] overlay: filesystem on ./bus not supported as upperdir [ 251.150823][T10639] overlay: filesystem on ./bus not supported as upperdir [ 251.158057][T10639] overlay: filesystem on ./bus not supported as upperdir [ 251.165641][T10639] overlay: filesystem on ./bus not supported as upperdir [ 251.173008][T10639] overlay: filesystem on ./bus not supported as upperdir [ 251.194373][T10642] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 251.327698][T10662] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10662 comm=syz.5.3474 [ 251.363449][T10666] overlayfs: missing 'lowerdir' [ 251.450436][T10670] netlink: 'syz.5.3477': attribute type 10 has an invalid length. [ 251.503569][T10673] __vm_enough_memory: pid: 10673, comm: syz.5.3478, bytes: 18014402804453376 not enough memory for the allocation [ 251.538151][ T405] asix 10-1:8.112 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 251.548637][ T405] asix 10-1:8.112 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 251.600279][ T36] audit: type=1400 audit(2000000337.391:659): avc: denied { create } for pid=10659 comm="syz.7.3473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 251.633546][T10680] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 251.644675][T10680] fuse: Bad value for 'user_id' [ 251.649544][T10680] fuse: Bad value for 'user_id' [ 251.701036][T10687] binder: Unknown parameter 'fscontext?}' [ 251.724121][ T405] asix 10-1:8.112 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 251.732022][T10693] netlink: 'syz.5.3486': attribute type 32 has an invalid length. [ 251.734507][ T405] asix 10-1:8.112 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 251.748914][ T5337] Bluetooth: hci0: Frame reassembly failed (-84) [ 251.779763][ T425] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 251.891642][ T405] asix 10-1:8.112 eth1: register 'asix' at usb-dummy_hcd.9-1, LyconSys FiberGecko 100 USB 2.0 to SFP Adapter, aa:aa:aa:aa:aa:bb [ 251.906062][ T405] usb 10-1: USB disconnect, device number 2 [ 251.912210][ T405] asix 10-1:8.112 eth1: unregister 'asix' usb-dummy_hcd.9-1, LyconSys FiberGecko 100 USB 2.0 to SFP Adapter [ 251.950905][ T425] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 251.962029][ T425] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 251.974905][ T425] usb 7-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 251.984004][ T425] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.992810][ T425] usb 7-1: config 0 descriptor?? [ 251.998174][T10678] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 252.006584][ T425] usbhid 7-1:0.0: can't add hid device: -22 [ 252.012631][ T425] usbhid 7-1:0.0: probe with driver usbhid failed with error -22 [ 252.211709][T10678] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI [ 252.224336][T10678] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 252.232799][T10678] CPU: 0 UID: 0 PID: 10678 Comm: syz.6.3479 Not tainted syzkaller #0 98bacdaf52065bb91416bd5578e49f5aee2639ea [ 252.244474][T10678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 252.254548][T10678] RIP: 0010:iter_file_splice_write+0xace/0x11b0 [ 252.260857][T10678] Code: 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 97 d3 e6 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 73 d3 e6 ff 4c 8b 1b 48 8b 3c 24 [ 252.280719][T10678] RSP: 0018:ffffc9000d2df820 EFLAGS: 00010202 [ 252.286826][T10678] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff888114d58000 [ 252.294816][T10678] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 7ffffffffffeffff [ 252.302871][T10678] RBP: ffffc9000d2dfa40 R08: ffff8881f6e72240 R09: 1ffff1103edce448 [ 252.310856][T10678] R10: 1ffff1103edce44b R11: 0000000000000fd8 R12: dffffc0000000000 [ 252.318939][T10678] R13: 7ffffffffffeffff R14: ffff88814d16b010 R15: ffff88814d16b000 [ 252.326945][T10678] FS: 00007f14b58836c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 252.335975][T10678] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 252.342585][T10678] CR2: 0000200000001900 CR3: 0000000138092000 CR4: 00000000003526b0 [ 252.350716][T10678] DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0000000000000081 [ 252.358815][T10678] DR3: ffffffffefffff14 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 252.366833][T10678] Call Trace: [ 252.370168][T10678] [ 252.373128][T10678] ? __cfi_iter_file_splice_write+0x10/0x10 [ 252.379046][T10678] ? __kasan_kmalloc+0x96/0xb0 [ 252.384032][T10678] ? __kasan_check_write+0x18/0x20 [ 252.389194][T10678] ? __cfi_iter_file_splice_write+0x10/0x10 [ 252.395203][T10678] direct_splice_actor+0x279/0x4b0 [ 252.399794][ T425] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 252.400435][T10678] splice_direct_to_actor+0x4fe/0xbc0 [ 252.411704][ T36] audit: type=1400 audit(2000000338.201:660): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 252.413404][T10678] ? __cfi_direct_splice_actor+0x10/0x10 [ 252.437270][ T36] audit: type=1400 audit(2000000338.201:661): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.440980][T10678] ? __cfi_splice_direct_to_actor+0x10/0x10 [ 252.441025][T10678] do_splice_direct+0x182/0x270 [ 252.441053][T10678] ? __cfi_do_splice_direct+0x10/0x10 [ 252.441088][T10678] ? __cfi_direct_file_splice_eof+0x10/0x10 [ 252.441118][T10678] ? security_file_permission+0x2e/0xc0 [ 252.441143][T10678] ? rw_verify_area+0xac/0x230 [ 252.441180][T10678] do_sendfile+0x5c8/0xfb0 [ 252.441210][T10678] ? vfs_writev+0xcf0/0xcf0 [ 252.441237][T10678] ? __se_sys_futex+0x28f/0x300 [ 252.441265][T10678] __x64_sys_sendfile64+0x193/0x1f0 [ 252.464369][ T36] audit: type=1400 audit(2000000338.201:662): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.468542][T10678] ? __cfi___x64_sys_sendfile64+0x10/0x10 [ 252.474092][ T36] audit: type=1400 audit(2000000338.201:663): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.478818][T10678] ? switch_fpu_return+0x12/0x20 [ 252.485171][ T36] audit: type=1400 audit(2000000338.201:664): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 252.490381][T10678] x64_sys_call+0xa26/0x2ee0 [ 252.490428][T10678] do_syscall_64+0x58/0xf0 [ 252.495772][ T36] audit: type=1400 audit(2000000338.221:665): avc: denied { append open } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 252.499692][T10678] ? clear_bhb_loop+0x50/0xa0 [ 252.499737][T10678] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 252.499774][T10678] RIP: 0033:0x7f14b498eec9 [ 252.499796][T10678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.504917][ T36] audit: type=1400 audit(2000000338.221:666): avc: denied { getattr } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 252.509212][T10678] RSP: 002b:00007f14b5883038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 252.509243][T10678] RAX: ffffffffffffffda RBX: 00007f14b4be5fa0 RCX: 00007f14b498eec9 [ 252.551179][ T425] usb 10-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 252.562209][T10678] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000009 [ 252.562240][T10678] RBP: 00007f14b4a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 252.562257][T10678] R10: 000000007a680000 R11: 0000000000000246 R12: 0000000000000000 [ 252.562273][T10678] R13: 00007f14b4be6038 R14: 00007f14b4be5fa0 R15: 00007ffc3bec17b8 [ 252.562297][T10678] [ 252.562307][T10678] Modules linked in: [ 252.562578][T10678] ---[ end trace 0000000000000000 ]--- [ 252.567917][ T425] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.589245][T10678] RIP: 0010:iter_file_splice_write+0xace/0x11b0 [ 252.597892][ T425] usb 10-1: config 0 descriptor?? [ 252.625533][T10678] Code: 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 97 d3 e6 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 73 d3 e6 ff 4c 8b 1b 48 8b 3c 24 [ 252.628587][ T425] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 252.634262][T10678] RSP: 0018:ffffc9000d2df820 EFLAGS: 00010202 [ 252.639944][ T425] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 252.666140][T10678] [ 252.812623][T10678] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff888114d58000 [ 252.822473][T10678] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 7ffffffffffeffff [ 252.830622][T10678] RBP: ffffc9000d2dfa40 R08: ffff8881f6e72240 R09: 1ffff1103edce448 [ 252.838825][T10678] R10: 1ffff1103edce44b R11: 0000000000000fd8 R12: dffffc0000000000 [ 252.846164][T10708] netlink: 277 bytes leftover after parsing attributes in process `syz.9.3490'. [ 252.846982][T10678] R13: 7ffffffffffeffff R14: ffff88814d16b010 R15: ffff88814d16b000 [ 252.857516][ T425] usb 10-1: USB disconnect, device number 3 [ 252.864100][T10678] FS: 00007f14b58836c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 252.875617][ T425] ftdi_sio 10-1:0.0: device disconnected [ 252.879542][T10678] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 252.891709][T10678] CR2: 00007f7daad6cab0 CR3: 0000000138092000 CR4: 00000000003526b0 [ 252.899908][T10678] Kernel panic - not syncing: Fatal exception [ 252.906286][T10678] Kernel Offset: disabled [ 252.910624][T10678] Rebooting in 86400 seconds..