last executing test programs: 3m15.056839353s ago: executing program 32 (id=3096): mount$incfs(0x0, 0x0, 0x0, 0x1080000, &(0x7f0000000500)=ANY=[@ANYBLOB="7265616417782b0b7f51cdae64656f757400000000a6771004b61db9515dc6e5f4139572d5f0e785345eb9c5efee403dd9c15a76900215f53d6727909a14f18a16d9bd8a3586208cac6e30e700bc41903cd0e903ca0d94686d6ea5c5e130b0ee1346a3c24ec926dfaa7b69a00fb6b441bc0a07a624393133bbcc7553d647fca3ab00"/140]) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="880000000202010400000000000000000a0000020c0002800600034000000000680002800c00028005000100150000000c00028005000100880000001400018008000100ac1414aa08000200000000000c00028005000100950000002c0001801400030000000000000000000000000000000001140004"], 0x88}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'pimreg0\x00', 0xe}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x74, 0x0, 0x0, 0xfffffffd}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000001c0)={0xc0, r4, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x94, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x90, 0x3, 0x0, 0x1, [{0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x84, 0x2, '\x00\x91P{5\x057\x97:\xf1\xa0\x9fj\n\"\xf8\xcf\\\xc6/\xed\xe9\xe3Z\x9c\x8bK(\v|\xc0!\xfe\x04\xa3)\xc2\xb4\xe0j\x9ej)\a\x83~\x0e\x13\xaaF\x00\x00\x00\x00\x00\x00\x00o\xfao\xfe\x18\xe2\xbf\x15Q\xe8W*\x85N\x80\t\xd2n\x87\xf1|%.\x94\xea^[\xf37\xab\x9a\xf0 \xd3\x94H\x05\x1a\n8\xe95w\a0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) (async) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) (async) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c000074d923d47c912000", @ANYRESHEX=r2, @ANYBLOB=',cache=readahead,\x00']) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r3, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) 2m28.708394082s ago: executing program 2 (id=3525): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x803, 0x0) mount$incfs(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x80, &(0x7f0000000580)=ANY=[@ANYBLOB='read_timeout_ms=040000000006']) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000080)) 2m28.670348836s ago: executing program 2 (id=3528): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000340)) (async, rerun: 64) fchdir(r0) (async, rerun: 64) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) (async) mount$bind(0x0, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0xa820a8, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x1c, 0x1d, 0x1, 0x0, 0x25dfdbff, {0x7}, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async, rerun: 32) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) (rerun: 32) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) (async) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe00000000000029", 0x29) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x442, 0x0) (async) r4 = socket$key(0xf, 0x3, 0x2) (async) syz_io_uring_setup(0x62ef, &(0x7f0000000140)={0x0, 0xf50a, 0x2, 0x3, 0x145}, &(0x7f0000000280), &(0x7f00000002c0)=0x0) sendmsg$key(r4, &(0x7f0000000300)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES64=r5], 0x58}, 0x1, 0x7}, 0x0) (async, rerun: 32) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f00000001c0)=0x4000004) (async, rerun: 32) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 2m28.62126054s ago: executing program 2 (id=3530): prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000018000000000000000000000005000600000000000a004e2400000000fc010000000000000000000000000000000000000000000005000500000000000a"], 0xc0}}, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x248082, 0x0) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f00000001c0)={0x7, 0x3}) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r2, 0x0, 0x7, 0x0, &(0x7f0000000500)) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @flat=@weak_binder={0x77622a85, 0x30a}, @flat=@binder={0x73622a85, 0x14, 0x3}}, &(0x7f0000000000)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) 2m28.592197363s ago: executing program 2 (id=3531): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x6542) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="cc0000001b0001002dbd7000fddbdf2500008000000700000000000000000000ac1e00010000000000000000119e9c66c800040a00008032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00080000000000008000000000000000f8ffffffffffffffff01000000000000010000000000000009000000000000000900000000000000000000008015010002000000000000000100000000000000fd0000000000000004000000000000000700000000000000000002030000000029000000000000000c0008"], 0xcc}, 0x1, 0x0, 0x0, 0xc040}, 0x8010) ftruncate(r2, 0x8979) sendfile(r1, r2, 0x0, 0x10) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/wakeup_count', 0x40000, 0x80) unshare(0x2a020400) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r5, &(0x7f0000001440)={0x24, @short={0x2, 0x2, 0xffff}}, 0x8) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x587, 0x4000000000000ffd, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a114537735387f7c90bbcc964914503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c81f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a52cbcaed1e831fa79a00", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000100), 0x4) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r4) syz_clone(0x140011, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x4000, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = epoll_create1(0x80000) r9 = fcntl$dupfd(r7, 0x406, r8) listen(r7, 0x14) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) connect$inet6(r9, 0x0, 0x0) accept$inet6(r9, 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000340)={0x0, {}, 0x0, {}, 0xff, 0x9, 0x13, 0x4, "37b4d3e0a295c063efbca67058155dae4d051017e2658b6321b6b95afbcccce8383326b28e3bb521f92c100b407e9d2bcf8194cd73c1508ac9b61a086cd48fa5", "4f1f59a6a6c31fa7f80111c2fbf28fa76a849280ba805279b0ded705630b65a2", [0x6]}) 2m12.078934508s ago: executing program 33 (id=3531): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x6542) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="cc0000001b0001002dbd7000fddbdf2500008000000700000000000000000000ac1e00010000000000000000119e9c66c800040a00008032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00080000000000008000000000000000f8ffffffffffffffff01000000000000010000000000000009000000000000000900000000000000000000008015010002000000000000000100000000000000fd0000000000000004000000000000000700000000000000000002030000000029000000000000000c0008"], 0xcc}, 0x1, 0x0, 0x0, 0xc040}, 0x8010) ftruncate(r2, 0x8979) sendfile(r1, r2, 0x0, 0x10) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/wakeup_count', 0x40000, 0x80) unshare(0x2a020400) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r5, &(0x7f0000001440)={0x24, @short={0x2, 0x2, 0xffff}}, 0x8) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x587, 0x4000000000000ffd, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a114537735387f7c90bbcc964914503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c81f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a52cbcaed1e831fa79a00", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000100), 0x4) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r4) syz_clone(0x140011, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x4000, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = epoll_create1(0x80000) r9 = fcntl$dupfd(r7, 0x406, r8) listen(r7, 0x14) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) connect$inet6(r9, 0x0, 0x0) accept$inet6(r9, 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000340)={0x0, {}, 0x0, {}, 0xff, 0x9, 0x13, 0x4, "37b4d3e0a295c063efbca67058155dae4d051017e2658b6321b6b95afbcccce8383326b28e3bb521f92c100b407e9d2bcf8194cd73c1508ac9b61a086cd48fa5", "4f1f59a6a6c31fa7f80111c2fbf28fa76a849280ba805279b0ded705630b65a2", [0x6]}) 2m9.556691486s ago: executing program 34 (id=3542): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x40, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0xd, @loopback, 0x1}, 0x1c) listen(r0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x6542) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_debug_messages', 0x0, 0x80) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000340)={0x0, {}, 0x0, {}, 0xff, 0x9, 0x13, 0x4, "37b4d3e0a295c063efbca67058155dae4d051017e2658b6321b6b95afbcccce8383326b28e3bb521f92c100b407e9d2bcf8194cd73c1508ac9b61a086cd48fa5", "4f1f59a6a6c31fa7f80111c2fbf28fa76a849280ba805279b0ded705630b65a2", [0x6]}) 2m0.756173312s ago: executing program 1 (id=3767): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) syz_usb_connect$uac1(0x69a90eab3db9c902, 0xa6, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x3, 0x1, 0x5, 0xa0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff7, 0x7}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x300, 0x3, 0x3, 0xb}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x82, 0x4, 0x9, 0x10, "", "ca"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9, 0x4, 0x7, 0x6, "04000000"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xff, 0xc8, 0x3, {0x7, 0x25, 0x1, 0x0, 0x4, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x6, 0x4, 0x8, 0x1, "3a3882"}, @as_header={0x7, 0x24, 0x1, 0x1, 0xc0, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x50, 0x5, 0x8, 0x41, {0x7, 0x25, 0x1, 0x82, 0xfe, 0x7}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)="86"}) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x10, 0xe, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x7, 0x1, 0x3, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x7, 0x4, 0x14}}, [{{0x9, 0x5, 0x82, 0x2, 0xedf2104f41c42ac5, 0x6, 0x7, 0xfb}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x81, 0x0, 0x4, 0xff, 0x8}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x1, [{0x43, &(0x7f00000002c0)=@string={0x43, 0x3, "8b5bcf8d5425adc742b0a73e29a5dbd1b69b7f6ecb6a7feac171cc924cc795ece3ffc89039dbca09cde3bcc129473d907ea28ce9c22cb1637dd5f5a59e6f75b9e3"}}]}) 2m0.208840976s ago: executing program 1 (id=3769): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0xfffffffffffffff5, r2, {0x7, 0x2b, 0xff, 0x800400, 0x5, 0x7, 0x5, 0x14fe3a13, 0x0, 0x0, 0x80, 0x1}}, 0x50) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xa8, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x8}, @fda={0x66646185, 0x4, 0x0, 0xfffffffffffffffd}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}, @transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@handle={0x73682a85, 0x0, 0x3}, @fd, @flat=@weak_handle={0x77682a85, 0xa}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @release={0x40046306, 0x3}, @request_death], 0x0, 0x0, 0x0}) 2m0.196524477s ago: executing program 1 (id=3770): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000040)={0x10, 0x3ddd, 0x3}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) close_range(r0, 0xffffffffffffffff, 0x0) 2m0.142012952s ago: executing program 1 (id=3771): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001200010026bd7002fedbdf25feffffff0b00ce00000000000000000014002e800df30682"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x4000800) (async) readv(r0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x2) 2m0.141725522s ago: executing program 1 (id=3772): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x0, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x2001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x50, 0x0, &(0x7f0000000240)="0979e127b8b3891be8dd397c67fc82251cecd27196a59beb85cb7450266767e735d2f6932155ed86f508fe87dbb49fc69db4458cbb2113dbf9f32c7a53eed2206e041bb9eee97a5798b41527404ddeff"}) 2m0.141092472s ago: executing program 1 (id=3773): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r0 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x1267, 0x3) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r1, 0xffffd000) socket(0x25, 0x1, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x60100, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r2, 0x400c330d, &(0x7f0000000080)={0x8000000000000001, 0x5624}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write(r3, &(0x7f0000000400)="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", 0x1f000) 1m44.002992929s ago: executing program 35 (id=3773): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r0 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x1267, 0x3) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r1, 0xffffd000) socket(0x25, 0x1, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x60100, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r2, 0x400c330d, &(0x7f0000000080)={0x8000000000000001, 0x5624}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write(r3, &(0x7f0000000400)="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", 0x1f000) 1m43.518229697s ago: executing program 7 (id=3879): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x6542) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_debug_messages', 0x0, 0x80) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x6}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000340)={0x0, {}, 0x0, {}, 0xff, 0x9, 0x13, 0x4, "37b4d3e0a295c063efbca67058155dae4d051017e2658b6321b6b95afbcccce8383326b28e3bb521f92c100b407e9d2bcf8194cd73c1508ac9b61a086cd48fa5", "4f1f59a6a6c31fa7f80111c2fbf28fa76a849280ba805279b0ded705630b65a2", [0x6]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'pimreg1\x00'}) 1m33.025735679s ago: executing program 4 (id=3975): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) fadvise64(r0, 0x1fe, 0x0, 0x3) 1m33.025463609s ago: executing program 4 (id=3976): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2181, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000240)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) socket(0xa, 0x1, 0x0) (async) r4 = socket(0xa, 0x1, 0x0) ioctl(r4, 0x8916, &(0x7f0000000240)) (async) ioctl(r4, 0x8916, &(0x7f0000000240)) writev(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000300010000004500000025000000190011000600ad000200000000000006040000000000000000", 0x39}], 0x1) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeee0000, 0x8, 0x9, 0xfb, 0xe5, 0x6, 0xa6, 0x0, 0x2b, 0x19}, {0x5000, 0x4000, 0xd, 0x0, 0x40, 0x5, 0x7, 0x6, 0x5, 0x3, 0x3, 0xb5}, {0xeeef0000, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa7, 0x5, 0x81}, {0x6000, 0x0, 0xb, 0x7f, 0x8, 0x42, 0xb, 0x1, 0x8, 0x7, 0xe}, {0x10000, 0xd000, 0xb, 0x21, 0x15, 0x6, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x33391002, 0xe, 0x23, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0x1}, {0x3000, 0x1, 0x8, 0x5, 0x7, 0x5, 0x7, 0x3, 0x5, 0x81, 0x1, 0x70}, {0x1000, 0x10000, 0xe, 0x5, 0x3, 0x7, 0x1, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x29}, {0xd000, 0x7}, 0x80000034, 0x0, 0x8000000, 0x2024, 0x200000000000000a, 0x0, 0xb000, [0x6800000000000000, 0x4, 0x3, 0xff]}) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) copy_file_range(r5, 0x0, r5, 0x0, 0xd, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x2, 0x1440000, 0x1}) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x2, 0x1440000, 0x1}) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000000906050000000000000000000a0000085800078005000300070000000900120073797a3000000000060004404e210000060005404e2000000800094000000003060004404e230000050003000300ad5cbbff633878c69a33c96fac00001800148014000240fc020000000000000000000000000001050001c0260d94530f772ee635abd3a2ee03b6b71bd02767d60503268a142adece7b5fbd3d03df0b2ae488560d65"], 0x7c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000080) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x20010, r7, 0x8fe69000) fspick(r6, &(0x7f0000000080)='./file0\x00', 0x0) (async) fspick(r6, &(0x7f0000000080)='./file0\x00', 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000331000/0x400000)=nil) ioctl$BLKRRPART(r7, 0x125f, 0x0) (async) ioctl$BLKRRPART(r7, 0x125f, 0x0) 1m32.909366641s ago: executing program 4 (id=3977): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = socket(0x11, 0xa, 0xffffffd) r1 = fcntl$dupfd(r0, 0x406, r0) openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r1, &(0x7f00000010c0)='0\x00', 0x2) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x12b8b000) fadvise64(r2, 0xfffffffffffffff9, 0x10, 0x4) sendmsg$nl_generic(r1, 0x0, 0x858de8d412eb2aac) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setitimer(0x0, &(0x7f0000000200)={{0x0, 0xea60}, {0x0, 0xea60}}, &(0x7f0000000280)) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0xb, {"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", 0x1000}}, 0x1006) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r4, &(0x7f0000000040)={0x2, 0x6e27, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r4, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r4, 0x0, 0x6, &(0x7f0000000080)=0x40, 0x4) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[], 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8001, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x2000000a, 0x20000000, 0x6, 0x5f, 0x9, 0x4, 0xffff2d37, 0x1002, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x2, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0x8e661, 0x4, 0x7, 0x3, 0x1000008, 0x4c74, 0x80000000, 0x242, 0x6, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0xa8000000, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2e, 0xe, 0x4, 0x78, 0xea4, 0xfff, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x3, 0x9, 0x4, 0xd, 0xe1, 0x47, 0x8000, 0x2, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0xfffffff8, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x80002, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x3, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x2000005, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x9, 0x5, 0x938, 0x6, 0x6, 0x12, 0xb9, 0xce7, 0x1ff, 0x2, 0xfffffffb, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x8000003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x101, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x1ff, 0xfffffffb]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m29.652618281s ago: executing program 4 (id=4010): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1_virt_wifi\x00', 0x10) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000080)={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2e}}, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x1802, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) (async) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') (async) socket$inet(0x2, 0x2, 0x1) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1_virt_wifi\x00', 0x10) (async) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000080)={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2e}}, 0xc) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x1802, 0x0) (async) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, 0x0) (async) 1m29.545898182s ago: executing program 4 (id=4011): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f0000004fc0)) (async) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f0000004fc0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="b805000000b9fa0000000f01d9660f78c4020a1bf7b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f00d0", 0x49}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x31}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r4 = memfd_create(&(0x7f0000000740)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\x04\x00\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \x90\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd1M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca\x00\x00\x00\x00\x00\x03\xfcWZ!<\x16a5ZL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xdew\x94\x01\x88K\xe6\x86\xaf)hW\xc8\\/Pl\x9b\x1b\xf2\xf1_\xbb\xaa\xc9?\xf7\xae\x13\xc2\f=\x059\x1c\xb7\x1ca\xe4\xb8C[\x06\x8c\f%l\x19I\x1fq9y)\xaf~~\xa8\xaf\'S\xf0kA\xa8\x93\x8a\xd3\x98\xbf[5\x0f\x05\"\xbd4h\xd9\xd4\xb8\x17P\xb4\xa7\xd6\x03\x86\xe6\xb0\x90W\xc3\xbd\xcb\x1er\xc4e\xc2\x96\r\x15\x84\xda\x16m\xc7\x19g\x83O\a=\xcb\'\xb7E\xc2\xd3L\xd5\xe5\xc2&L\xebjb\xfaOBc\x95\xb7\x97[\xcd$n\xbcO\x81\x03\xc3e:C&\"\x06B:\xa4\xe9\xab\x95DG(^\xd7\xb4\x8e5\x1a\xdb\xcf\x12\xccV\xb7\x98i\xfb\xadv\xb3', 0x0) write(r3, &(0x7f0000000300)="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", 0x255) sendfile(r4, r4, &(0x7f0000000040), 0xfec) mmap(&(0x7f0000fea000/0xa000)=nil, 0xa000, 0x300000c, 0x10, r4, 0x80a6f000) (async) mmap(&(0x7f0000fea000/0xa000)=nil, 0xa000, 0x300000c, 0x10, r4, 0x80a6f000) mkdir(&(0x7f0000000140)='./control\x00', 0x94) (async) mkdir(&(0x7f0000000140)='./control\x00', 0x94) setitimer(0x0, &(0x7f0000000580)={{0x0, 0xea60}, {0x77359400}}, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0xe) rmdir(&(0x7f0000000100)='./control\x00') r5 = socket(0x10, 0x2, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRESOCT=r5, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000001340e92c4bb800"/24, @ANYRESDEC=r3], 0x48}, 0x300}, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000240)={0x0, 0x5}) (async) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000240)={0x0, 0x5}) sendmsg$can_bcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\a\x00'/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000020200000017000000000200003fd31340e92c4bb8"], 0x48}, 0x300}, 0x8040) getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r8, 0x89a2, &(0x7f0000000200)='bridge0\x00') (async) ioctl$sock_SIOCBRDELBR(r8, 0x89a2, &(0x7f0000000200)='bridge0\x00') 1m29.481889778s ago: executing program 4 (id=4012): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) write$UHID_DESTROY(r1, &(0x7f0000000640), 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000000000000d901000000b4cb8bdd7e000000020000000000000084097f41390bf271a75254de0e82c58bfe23005aa0d5e332eaa7fea3f8a8644a4732c1d354fe9a0f41abcb357b06c4a6ef1680e7971b778404a2f413208add6f5176f1e8087a062b96755207e9a8ef174c063bec8357ed0bc61bdd5b160aff97435136d9909c14b0c52d1dc444a28126b21f04b212c4ea5a527acf153fc0e401b6b7b750"]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 1m29.480084668s ago: executing program 36 (id=4012): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) write$UHID_DESTROY(r1, &(0x7f0000000640), 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000000000000d901000000b4cb8bdd7e000000020000000000000084097f41390bf271a75254de0e82c58bfe23005aa0d5e332eaa7fea3f8a8644a4732c1d354fe9a0f41abcb357b06c4a6ef1680e7971b778404a2f413208add6f5176f1e8087a062b96755207e9a8ef174c063bec8357ed0bc61bdd5b160aff97435136d9909c14b0c52d1dc444a28126b21f04b212c4ea5a527acf153fc0e401b6b7b750"]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 1m27.364210796s ago: executing program 37 (id=3879): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x6542) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_debug_messages', 0x0, 0x80) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r2, 0x6}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000340)={0x0, {}, 0x0, {}, 0xff, 0x9, 0x13, 0x4, "37b4d3e0a295c063efbca67058155dae4d051017e2658b6321b6b95afbcccce8383326b28e3bb521f92c100b407e9d2bcf8194cd73c1508ac9b61a086cd48fa5", "4f1f59a6a6c31fa7f80111c2fbf28fa76a849280ba805279b0ded705630b65a2", [0x6]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'pimreg1\x00'}) 1m10.353790799s ago: executing program 6 (id=4254): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=G']) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@md5={0x1, "32d132ecb88ea8e8cebac23bbd9076a3"}, 0x11, 0x1) (async) read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 1m10.353178539s ago: executing program 6 (id=4255): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket(0x10, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000500)="1c0000001a009b8a14e500"/28, 0x1c) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f0000000100)={0x800, {0x3, 0x10001, 0x5, 0x4, 0x3, 0xfff}}) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x11) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$EVIOCSABS20(r3, 0x40044591, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m10.106615003s ago: executing program 6 (id=4256): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="146f44", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000780)="040e8f45fffdf50e4c7910c171b127c3cab890c81f614f27ad683b963769ef24d84f082556fd1b43f878a65dcc23ad409d4ef51c5a36900c6a5ab314bb2a406d10a6a499793d7a2e03661510116d87dc79356005e01c7474b76cacaf8136be8cda811a39567f643c0612dc5d7cf19330c281bb05c1f040dd51aea0dc4d2afa3e4aaa6c3abce4cfaeb2ba13", 0x8b}, {&(0x7f0000000840)="57c4451b3c7c75655c57ffb8dccde119b54a69a485415fd700812b78ca50a3e54c8889a100a7f82a7f53238a20b00bd47bc39e1db1b3e2694f378c94e9184aa53cc6032a2783db559dba2208439229a2bae2e355ebfe4f7563f0579056d94e75e1c33b5b68fe4cf4a85b48558a56b4e4076d56e10087c6ec2b3c50ea02951bbb8d8b36197ed4e2fcb1cf8686dffe5f3f9a3e9f565daa2ea6c783c11ef3f63dc91a0e66add12776e48fab54a2494e4fadc2ef061f489139cd012acd", 0xbb}, {&(0x7f0000000500)="6f0070751b7d82b11bf815a5a350de1cf2af793b6fa1f5c5d603cf3fc8a89b0bebd59dc535fe23b45ea92cc77c6bd1b9e06eeb847e70cf231771050820bdc0521f72ba507ad7241fe7e91a1575c01cb37892c93cf0ea46dfb147f330534806ab5374870e0762ef26", 0x68}, {&(0x7f0000000900)="38ebeb016e356fee4cda85d0cd971519cbb747f2f5dc8aa685667417945724349c2e53956a81cc01b96257be6cf756ee9a1dbdb4805abaadcdb07fb7fda595b750", 0x41}, {&(0x7f0000000980)="ab07cb5269eaac6a6d8297a151f6ff8a153e45bf2a870dfe905021cdda98e2d6477ec965f23931447052dc921b69a55a12335828601119c981897e5f9d23246304c348b44d28b95fe7fb2e3464e8cbca139ef88350e5009432e741b1e76efaf855d18b7583abc382ae1007611eb41150ce1a7244f400691426252a7da7033ed275dbfa75153d247ab17aed244023c89edc8dae89d2748d2a59a87e7062d3d17c7c5fe0cbf61e709d5d62181d7c8bd12d21ff6f437150ef26fc26bbab9c00f788e11201628f229c46a6ac29494bc8487e5fc89fb0cd958a91bed8f36a7a57243f1fd6c9f0", 0xe4}, {&(0x7f0000000a80)="7827d3e65741740426d89147d59fd333d253aded53fa8a969a0f05177236c017d4a616e2c81a0e06caf88f55f46992a594ecd5ba2c71a70b5e9002e3dcdb3bf067e087ad62c4b02c7c8345cc901abc0d990e0dfe9a5efccffccd163c7e4c10683fe57ad5eff3fc73d8e5878410b52606538f56778aef3e7fae1a0c4f64506cc6815e23929bea0316b3e35cc28e017fa57e5fe08ee8feb3718f6859119a51aa97bbeea8ec9c9afa7c9c8fe96023e7649b5e412642c78972184b9e7cb5a81b05c6f85bd24c01fa3c417c", 0xc9}], 0x6}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000d80)="c8c9bb0395733c925946bc562a54294b423cabffedb1436e2eeafec0dd5c365ee1453384a53151ac4520d0219b79105da2854cf859b2c67258d1b6e49b896188564a215ed2d8e36b81b1752c752f2ac52c559f562459a8b2f1f3da79b25b40062732bca7bf5b651c411cec17ef07fab31d5762eaaea7eaf30a5f52423d6c923b2125809279561c8000dad1c6fd86f3a4439a72d085fee666a9e251a92bde44605d4bca2dcc5a9ed5b751ee3c30646752fbbc797f2b4d593ec4ca4f898eb6c60c3fac", 0xc2}], 0x1}}], 0x3, 0x40) sendto$inet(r0, &(0x7f0000000300)="d633d94edc088ccc8cec3dbd5a2a839b505aefcc7c9cebc6e0f44b14eb7e2a5cee7d573ac2175dc34c5763fb047b53b270785de19649ee5ecb970a4021fca0d647c8177f1e686ac9c7fc5504a884ab866164e7f25d369f21b0f9c6d944d97ed9", 0x60, 0x20044000, &(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10) 1m10.073355076s ago: executing program 6 (id=4258): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x400, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fdb000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000640)="66ba2100ec430f00994798b213b9240a00000f32b885a08d80ef8f0838a6fe99b000ee0f30f3400f09660f38803f8f23c00f21f835020002001723f8c40279134e9ac4c17b117d0d000000000001c5", 0x4f}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000340)={0x1, 0x0, @pic={0x3, 0x12, 0x81, 0x69, 0x3, 0x9, 0x6d, 0x3, 0x6, 0x7, 0x9, 0x2, 0x98, 0x5, 0xc0, 0x8}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01b275dea8a1f700ec2b13000000"], 0x14}, 0x1, 0x0, 0x0, 0x4048080}, 0x20048800) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f00000002c0)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0xa) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$FS_IOC_RESVSP(r8, 0xc0189436, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x3}) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) 1m9.965850817s ago: executing program 6 (id=4259): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.mem_exclusive\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x41e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000940)={0x4c, 0x1d, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="03002bbd7000fddbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004004}, 0x400c800) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x541b, &(0x7f0000000000)={'veth0_virt_wifi\x00', @local}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000d40)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') r6 = inotify_init() r7 = fsopen(&(0x7f0000000080)='exfat\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000ac0)='gid', 0x0, 0x0) inotify_add_watch(r6, &(0x7f0000000200)='.\x00', 0x82000714) r8 = socket$can_bcm(0x1d, 0x2, 0x2) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000005280), 0x10) r10 = dup3(r9, r8, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$BTRFS_IOC_FS_INFO(r9, 0x8400941f, &(0x7f00000005c0)) sendmsg$can_bcm(r10, &(0x7f0000000080)={&(0x7f00000001c0)={0x1d, r12, 0x3f420f00}, 0x10, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x2c004000) sendmsg$can_bcm(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="05000000230800"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x2710], 0x80}}, 0x0) socket(0x23, 0x9, 0xc) sendmsg$can_bcm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x80}}, 0x0) 1m9.865782267s ago: executing program 6 (id=4261): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x1c, 0x3, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x1c}}, 0x20000080) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffd}) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) 1m9.829183691s ago: executing program 38 (id=4261): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x1c, 0x3, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x1c}}, 0x20000080) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffd}) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) 50.158587206s ago: executing program 5 (id=4620): waitid(0x20, 0x0, 0x0, 0x8, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0xb540f1e41053034d}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000020c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioprio_get$pid(0x2, r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x80, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x1}}}, 0xb8}}, 0x4000) r4 = syz_usb_connect$sierra_net(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x7, 0x2, 0x3ff, 0x0, 0x5, 0xff}, {0x9, 0x5, 0xa, 0x2, 0x10, 0xfb, 0xbd, 0xc}, {0x9, 0x5, 0x9, 0x3, 0x40, 0x8, 0x1, 0xf8}}}}}}]}}, 0x0) syz_usb_disconnect(r4) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0x400001000001fe) ioctl$ASHMEM_SET_PROT_MASK(r5, 0x40087705, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000824}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r7, 0x1, 0x70bd2c, 0xfffffffd, {{}, {}, {0x14, 0x19, {0xfffffffe, 0xfff, 0x5, 0x101}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24040050}, 0x24008841) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r5, 0x66053000) waitid(0x20, 0x0, 0x0, 0x8, 0x0) (async) userfaultfd(0x801) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0xb540f1e41053034d}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) (async) read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) (async) ioprio_get$pid(0x2, r2) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x80, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x1}}}, 0xb8}}, 0x4000) (async) syz_usb_connect$sierra_net(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x7, 0x2, 0x3ff, 0x0, 0x5, 0xff}, {0x9, 0x5, 0xa, 0x2, 0x10, 0xfb, 0xbd, 0xc}, {0x9, 0x5, 0x9, 0x3, 0x40, 0x8, 0x1, 0xf8}}}}}}]}}, 0x0) (async) syz_usb_disconnect(r4) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0x400001000001fe) (async) ioctl$ASHMEM_SET_PROT_MASK(r5, 0x40087705, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000824}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r7, 0x1, 0x70bd2c, 0xfffffffd, {{}, {}, {0x14, 0x19, {0xfffffffe, 0xfff, 0x5, 0x101}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24040050}, 0x24008841) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r5, 0x66053000) (async) 49.881840583s ago: executing program 5 (id=4622): setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x367542, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa00090582024000"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000300)={0x40, 0x30, 0x6, "aaf640ba47b6"}, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x82, 0x2, "88fa"}, &(0x7f0000000480)={0x20, 0x83, 0x2, 'r\a'}, &(0x7f00000004c0)=ANY=[@ANYBLOB="208402000000bf"], &(0x7f0000000500)={0x20, 0x85, 0x3, "8ddd74"}}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x0, 0x30, 0xb, {0xb, 0x10, "bff2b121143c3d6e22"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000240)={0x1c, &(0x7f0000000140)={0x40, 0x0, 0x64, "247334b0aa583f8a5fcfbaa6e2bbec266a649d801133bdc3c60e9f991d8e5448c9f440436e58f090605e3fe995fb8115b9e25f9f573ee12b4ea39ea5b574c56aeaa4c00916974eac6203d6683f8548da85136c87cbfcf224332345276f944fbec1c256c0"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0xfd}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xb}}) r2 = fsopen(&(0x7f00000002c0)='devpts\x00', 0x1) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x22, 0x0, 0x8, {'/dev/loop-control\x00'}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x85, &(0x7f00000005c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x2, 0x1, 0x2, 0x20, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, '~,'}, {0x5, 0x24, 0x0, 0x400}, {0xd, 0x24, 0xf, 0x1, 0xcef, 0x401, 0x2, 0x4}, {0x6, 0x24, 0x1a, 0x3b4c, 0x10}, [@country_functional={0xe, 0x24, 0x7, 0x2, 0xa7d1, [0x9, 0x63bf, 0x4, 0x2]}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x0, 0x8, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x8e, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x7b, 0x32, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x1, 0x4, 0x9}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x3, 0x1, 0x5, 0x0, 0x9}, 0x5c, &(0x7f0000000680)={0x5, 0xf, 0x5c, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "9e596087751668f5df3ebde9667e2bd6"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "9719566ae9dc52c32e089d4192d2d900"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0x1, 0x3, 0x80, 0xff}, @ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0x5, 0xf000, 0x9, [0x3f, 0x1fe3f0f, 0xc007, 0x3f30, 0x3f00, 0xff0000]}]}, 0x1, [{0x1a, &(0x7f0000000340)=@string={0x1a, 0x3, "a4609c9e8adaabfac4156ceb785a07aef5df96b94b15225b"}}]}) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) write(r0, &(0x7f0000001400)="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", 0x1000) 49.330008907s ago: executing program 5 (id=4630): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) chdir(&(0x7f0000000000)='./file0\x00') (async) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) 49.328332677s ago: executing program 5 (id=4631): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004100)='/proc/tty/ldiscs\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x3a) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000002540)={0x0, 0x0, 0x1, 0x0, '\x00', [{0xcc2b, 0x5, 0x7, 0x400, 0x5, 0x10}, {0x2, 0x1, 0x80000001, 0x8000000000000001, 0x0, 0x5}], ['\x00']}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000140)={0x1, [0x0]}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) dup(r0) write$FUSE_DIRENTPLUS(r3, &(0x7f00000000c0)=ANY=[@ANYRES16=r2], 0xfffffffffffffff3) write$uinput_user_dev(r3, &(0x7f00000020c0)={'syz1\x00', {0x1, 0x8, 0x3, 0x8e0}, 0x19, [0x0, 0x0, 0x3, 0x8001, 0x84, 0x1b, 0x6, 0x1, 0x4, 0x0, 0x367, 0xd, 0x0, 0x9, 0xf6, 0x0, 0x0, 0x100, 0x3, 0x4, 0x1, 0x6, 0x10000, 0xe77a, 0x1, 0x8, 0xff6, 0x200, 0x5, 0x40, 0x2, 0xa3, 0x2, 0x4, 0x6, 0x2, 0x1, 0x9, 0x1, 0xfffffffe, 0x80, 0x401, 0x6, 0xb, 0x8000, 0x49, 0x0, 0x4, 0xfff, 0x10000, 0x5, 0x7fe000, 0x0, 0x623, 0x3, 0x3, 0x3, 0x80, 0x1, 0x4, 0x380, 0x40, 0x59e, 0xffffff25], [0x10000, 0x9, 0x5, 0x2479, 0x7, 0xdd, 0xc, 0x9, 0x100, 0x80000000, 0x7, 0x8001, 0x668, 0x8000, 0x6, 0x7, 0x1, 0x10, 0x9, 0x0, 0xfffffc01, 0x49, 0x4, 0x8, 0x6, 0x86c, 0x951, 0x16, 0x1, 0x5, 0x8001, 0x3499, 0x5, 0xeb, 0x9, 0x3, 0xe, 0x3, 0x7f, 0x4, 0x5, 0xa, 0x8, 0x200, 0x0, 0x5, 0xe, 0x39, 0x10000, 0x8001, 0xfffffffa, 0x0, 0x7, 0x4, 0xe, 0x0, 0x0, 0x9, 0x7fffffff, 0xffff722b, 0x7, 0xd, 0x8, 0xe4], [0x7ff, 0x3, 0x4, 0x5, 0x8, 0x7fffffff, 0x8, 0x0, 0x1, 0x1ff, 0x5, 0xf48b, 0x100, 0x5, 0x0, 0x7, 0x800, 0xfffffffd, 0x9, 0x8, 0x3ff, 0xc, 0x365d, 0x10, 0x5, 0x0, 0x9, 0x2, 0x6, 0x1, 0x400, 0x9, 0x80000000, 0x8, 0x5, 0xfffffffd, 0x1, 0x3, 0x0, 0x34, 0x7f, 0xe53, 0x200, 0x7, 0x5, 0x2, 0x8001, 0x8, 0x61, 0x80000001, 0x81, 0x0, 0x842, 0x1, 0x3, 0x9, 0x6, 0x6, 0x9, 0x8, 0x0, 0x9, 0x8, 0x4], [0x2, 0x6, 0x9, 0x80000000, 0x35c9, 0x55d1, 0x8d44, 0x9, 0x63, 0x9, 0x6, 0xfffffff7, 0x3, 0x2, 0x10, 0x8000, 0x4a1, 0x5, 0x80, 0x394, 0x5, 0x3, 0x6b9b, 0x4, 0x80000001, 0x8, 0x9, 0x5, 0x4, 0x8, 0x8, 0x7, 0x1, 0x7, 0xc899, 0xf, 0x7fff, 0x1, 0x9, 0x7, 0x75, 0xfff, 0x6, 0x1af, 0x7, 0x4, 0x5, 0x6, 0x1, 0x7fff, 0x0, 0xffc25000, 0x7, 0x3, 0x0, 0x0, 0x7, 0xcd, 0x1, 0x0, 0xe, 0xfffffffe, 0x2, 0x33b]}, 0x45c) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f0000001200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@directio}]}}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r4, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) 49.29949337s ago: executing program 5 (id=4633): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) (async, rerun: 32) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000002480)={@remote, r2}, 0x14) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) shutdown(r3, 0x1) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max']) (async) ioctl$sock_proto_private(r0, 0x89ef, &(0x7f0000000140)="427f7c8260f523e511e535537c581081708004a4eca55b59d6e20c115ac800af690571bbb37a649afb44f02b12c8429f5455d68571b318a804e19d4bda60f326005ed6f089ef7d9498eabd0b409f2f8f665e812109dc367d2c") (async) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x541c, &(0x7f0000000080)) 49.241967966s ago: executing program 5 (id=4634): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r0, 0x10000000005, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x103, 0x3}) r2 = getpid() r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x8f4, &(0x7f0000002400)=0x0) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x58, 0x1, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}]) r5 = syz_pidfd_open(r2, 0x0) process_mrelease(r5, 0x0) pidfd_send_signal(r5, 0x31, &(0x7f0000000140)={0xd, 0x1, 0x4}, 0x0) sync() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f000067f000/0x4000)=nil, 0x4000, 0x3) r6 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0xf0, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}, @free_buffer={0x40086303, r6}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 33.273130836s ago: executing program 39 (id=4634): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r0, 0x10000000005, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x103, 0x3}) r2 = getpid() r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x8f4, &(0x7f0000002400)=0x0) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x58, 0x1, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}]) r5 = syz_pidfd_open(r2, 0x0) process_mrelease(r5, 0x0) pidfd_send_signal(r5, 0x31, &(0x7f0000000140)={0xd, 0x1, 0x4}, 0x0) sync() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f000067f000/0x4000)=nil, 0x4000, 0x3) r6 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0xf0, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}, @free_buffer={0x40086303, r6}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 32.781704864s ago: executing program 2 (id=4794): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000080)=0xff, 0x4) timer_create(0x1, &(0x7f0000000340)={0x0, 0xe, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000380)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) ptrace$setregs(0xd, r2, 0x4, &(0x7f0000000100)="a3f679be0bcc6d03facc2877010bbd2cc579fc616aa3592f42f304e12957350ab08079a6f4d467724ff297a3606c95f604b4e137a2e986e8fc60f0b674bfc642c1b067e1abb3feb41d066695adf5f7b43b7884ac8c79ab9d98f21f6bbd6307df142dc981374effaf9dd7ff62a57bb502bc39e313730b4e3534eae11b4748b10941") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f00000005c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000640)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/38, 0x0, 0x1, 0x38}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/10, 0xa, 0x0, 0x29}, @fda={0x66646185, 0x6, 0x1, 0x29}}, &(0x7f00000002c0)={0x0, 0xfffffffffffffe69, 0x40}}, 0x40}], 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1e4}, 0x1, 0x0, 0x0, 0x20000801}, 0x10) 16.454747291s ago: executing program 40 (id=4794): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000080)=0xff, 0x4) timer_create(0x1, &(0x7f0000000340)={0x0, 0xe, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000380)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) ptrace$setregs(0xd, r2, 0x4, &(0x7f0000000100)="a3f679be0bcc6d03facc2877010bbd2cc579fc616aa3592f42f304e12957350ab08079a6f4d467724ff297a3606c95f604b4e137a2e986e8fc60f0b674bfc642c1b067e1abb3feb41d066695adf5f7b43b7884ac8c79ab9d98f21f6bbd6307df142dc981374effaf9dd7ff62a57bb502bc39e313730b4e3534eae11b4748b10941") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f00000005c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000640)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/38, 0x0, 0x1, 0x38}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/10, 0xa, 0x0, 0x29}, @fda={0x66646185, 0x6, 0x1, 0x29}}, &(0x7f00000002c0)={0x0, 0xfffffffffffffe69, 0x40}}, 0x40}], 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1e4}, 0x1, 0x0, 0x0, 0x20000801}, 0x10) 3.905860455s ago: executing program 0 (id=5288): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000081c09668800000000000109022400010000000f090400000403"], 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x4b3d9000) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="c7"}) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r2 = openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0xc058671e, &(0x7f00000000c0)) ioctl$KDMKTONE(r2, 0x4b30, 0x400) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x1c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x440c4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000440)=[{0x2d, 0x0, 0x1, 0xfffffffc}, {0x4}, {0x6, 0xfc, 0x0, 0x7fff0000}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x11', 0x2) fcntl$addseals(r4, 0x409, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x12, r4, 0x4e652000) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r7, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00042abd7000fbdbdf254100000008000300", @ANYRES32=r9, @ANYBLOB="08002700010000000800a1000100000003ab8ce73d474ad59fbbdc84048f098d0aa74b8d25c0709092f1e2b429efcdb35115119960146c85efe2b3df7bf3da98e38fd3195f9307cf166f9436c2dfbd8f18a76ce941bfd0c25c6095417f1a21270efbc64bd6808b74bfde5b223362317dce6ad23b1c2c800b283fc5594c4a45b3d8f0b9f6fa6ac97051e7099b5f85d15ac05231f0eb0955aed034952ee2c77ec297424144c409ecde81fe198508b6e0f3cb426605b1f4f1ad1f9e69395279d03f1c677d7e00d40b486c226728"], 0x2c}}, 0x20000800) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x51}], 0x1, 0x0, 0x0, 0x0) 3.390440236s ago: executing program 0 (id=5297): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8955, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1f}, @fda={0x66646185, 0x4, 0x0, 0xffffffffffffffff}, @flat=@weak_binder={0x77622a85, 0x10b, 0x3}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) (async) r2 = getpid() (async) r3 = getpid() kcmp(r2, r3, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6}}, &(0x7f0000000580)=0xe8) (async) fstat(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r6 = getuid() (async) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, r8, {0x7, 0x29, 0xfffffffe, 0x0, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x10, 0x66}}, 0x50) syz_fuse_handle_req(r7, &(0x7f0000004280)="c9614df797d5bbaf2d529ccfe807cb2396820ca614edc8f52d067330a81f6c26f4cc0f48e5ae1d42335297538a44b9b28f2d36c39510bcdb6cf2fc17d9b35688d0447cc7167668496bdd28d8df1292b12b61894268f707c212263b3f1ae188c8a69527ac8e196f23028853fd4009294124f18fc47bd2322220e5f0d5d30223095e4e748803b6bf25ba87f40183766b5d2c3a6b3d2f7566b160f0e0742a6cabf6b0071295bc4d5ca4ee60a1fbdc8bbc1f2a59428bc836a1ef0c2dfcbe514f9857f7230f848af37be100dc4f4115ffcb0198774affeb7690dd6782a9f51987dba5d9fd0b6a3426c1ce1e04e48f4255c157450791ba022f0bad4844a22679bb17601987f461d7a35d7de8874cc3c47f360b3c31dfdbf7bb9f93ec80046118660e8bbb18930914f087c05df436073b9ccc5a740f8f634cc827245366b1179aaaddd2bd161f2fa413e1beded9f3063cabd52ece7139af17db00b63117a6b6a1ad8c33ed779d7dddf5b40c17635397b878c7117923f26767864e788da1f79dbbc769fbab45b34198b69dd0599904a0c1297812f9ad9cbf48c59d553b1004ab8213802f3a0852b5b827ab3ea7220873b379b459d7a09af061ccda8bd857d3b2bf2dbaea1b00e2cd0bcc8d6eb11c04bd21532bec66ae36d674a4dd01ab54c27d3267961ecfad0042837fea87d75cecc7a1a58f79f77d72fede0757b7c1f54a5040e741a0fc785ea0ad13bcfc0b69df4dc29dc75e331d2ba03c3cdf04e0a4490159b43c6ae2c010f276c85f3bc46ca94e73e11762739e40e6bfbc113f46ee6ab801b97d42fadc067e23a3151ae90ff64c80e64bba5313475948fbd24a6a95f7ec0b221c9f901c68d184d38b2e09cde68fbd6dd022b6fa1db26aa6ebe2128a93fcb7259ebcde896bd81685c881cb25f581e27479f929e1094852559209c255b0dd5317b148567674b235b10e093363e8e4bd15c4ab90c44abaadbfeabd65e26223543c415befff4d280ad0f0dc132b5413bbe96fdedcabc55e9f3eeead53a1f2d7c0455c8a3bda363a8c33c99888a05546f49dc4c3593aeb30b8ea314b77b8d117334d9c3f800a132e4c3bab461863f027dcfc066bf93f0426d74e02c92a0727309d5bf5bf8242a2b594b81de0e030e55f0125b5d4e12dbffc6806a6c7bd6d62c3d54e87f0607e08750d808a2f442a7eac0ec311c3498b9709ae2f505d5e8b3670079847644147741ffca679bbd1b658bc6c422e58d070f8608c246677af0e2efff5cbf88b3b4a0431a2f26648d64991cf99848012cb6eecb8a13ea91ce77d3c8f2bc047370f4811ae5c341371e3b65bed88294580ba90258c8d36683f21d91a8a914948b2222e4127b061cc0121b97a1b9b1c4ebb7ee166b5af58497d7e0ac90fda25e41a2490ec5d143d0e47475741b30138585637d7997fff2a8805a88c4bd75975ccffcbabefa3576328d86e802b8490e8a773e01afa74fa26c6849deb15b05596e7226cdc0c0ff364bcb4e62ec54984c9485b6eb819165972b9c935a3ae18c698438582e170437c538d7d24a935036964c77e6ed37de77c64384b258f7bbe944f630d3ca82c441c6b2c5bc73dd9f90ecff67a816de7b15bdcaa5a5f1bb8b270a8ac1119e1626e29eb5f2ae4595ca2e10c2e6b297c30c3eeb432ad374101938916c77aefd2ed0f5bb658922bdec9bd76767b9a4b56a15aaa2f7e7d06dba36710a4c8d69d2361aa5f1864710d0868d8f7616cffac40e0accd9b44df8cb5b5324039d82c44e9b97d3a77d914a3738cab84541f0dfc2ed93fb3a746d19cf73495cab380afcdac8acf300e34bb68917009ec1d205dc315669c6341218ebbd0a380c0d14396732e430544ea02d9aff1ffd199c475c4cd313aac4de1121055d806858ee1538436a5f3a549230a42698aeaa3b58b5b9dbf6e11292dad9e0535f5c0685105a448888101ca2228ab50af16b657bb9abb5d4c40cf03931f345663ef6e7655048f78bd23227c6a78bd8b8a457abad7267c8d3ed8decb74cfb21c98471c31f068fd8fea32f13d44783fac14b71e614fd156bddbbde1bf759d0023eb50345e970fa93efd99469583eecec690147f3c075da4efeda849b172829f34e31b281d844fb7c04ca49b30a15abbe493c191e003b76ccb8b2e560ddc3573c6182a87f8e5bdbe10333b3ff3381705984e5595831c025335d0438b053d17fe2f43424735ec3e9d0e8dc278d9e3f35d8d6881e47801d9f77ddf9954ba8f4fe95c295a67968b07bde6378b5ccf24f3d0d228b3cfb4624318828a2649af11698c56860c85617a5151f879846383f5fcf0e9ac483bc4c60beda3bd273a594fc26850d31a852839f23f9e5ffd31d63a7cee2341f22f385d41521aacfe6faf1c5b1e024cd6c6cd4b8696b8e66c6268196da27dc4090552748260bba916b932cbf8066b07dbf5f75b5ea04c385d2ac971d079ab7d4a6bec1008b7564f167aa903acda2ef1756ddbdee86ad25b172479756036d1e11b5c2ab10e657e3b3c768840fd111477bfa05b9e7a2ee765d685f7688765f2441e052a60f56286e6d15ea19d98306a0a5b5efd5b1363bf357d836cb20bb2420ecff7fd682c78763bd1ab31561e6a36a20bf57024632e168bdbc82efa42f7302dc5519c2b56ba3e960437e69f5502048e914540bd4e6138e04e3cb04c75abaee441dd29e23a23948eecb2a7883ae6f3c35b3a3a965fd062688a5975059da47b6029f38baec8d3932295a2257c83a0f966aa7c19db13ccadb86c6c81d84a09bd0782cc87369c8b3a006fee64323c964dcd731fbcaa2f1c1b19f55688365f183bc26bcb636eb0622fc5f5804d46db493737078fe6a6e82f34e48eef5974787c8c4b8abd8a0dcf516862454915b7b9d81a48b9d14a3a08a9408e41c3522480a925cb9521f02cf4380aa44796fa9569aa5043787d9c3a0a345f202d66e28f6c5fc17f8998655bff0351687e2ef6ee523f965d37ed7c4c1fedc51ad7024d8c1102fef833ecf9289050b944e2e9a5646e090f5ab5be3759ea66ee79d5f870fea4ed505a231461421084317c6c5379c74ba5eef02b77c9687f49b05606c5969ae5c84f74a7d43b148dddaffcbd45e8c4eefacdd5c8c07f926baf0b1e7f65c7184c56c9ac355fde5df39557d4011b7eeb65a18fca8de446d9879404bf64f3e460232642960938e6c797d3d942534fa64b9fb0ec5648940456ae4ec22df6ccbaca34ff8a296640ed28f903db33533e0bb4927ac96312580810a38738d5c5ae638359379d244d0c45cc9bc4525648748f4a2becb101c08d7c4ecc407067cf1008cb0f14279bae658ea5f16084769ad66a8e6a9a5137ec65764ec6d25e688cf8a357252420b1ba619e8ab19d28019060434a9d2579be998e8a735778b690cad9512cc9604d2e60e01f2cbb714dbfd87795092e0ff7acb8217074a6d0b9ae00d80685798eb4bee828dff6e1f6858202381cb4051c6a5b6918f8c042a3698ac5eb402abc1f27932764ebd54daa45105666041c1a51e55bf1761c2dbe2c75a511b168f4961385d1a7b7c780fc1c23f1710b7c1e4716e99ed044ce4697fa3b649bc85443ef1b111549d342cd2a417158d01c483e6a2d6535a5801c00f5a7bb47a0d51656bd50824b2f998ea59cde88a7c329e09f19a704104309b674e9b6dd48acd0abee6366ae1ccc24fc2cb1fc0666e71c57e314464c2f2b950b76d426441265f34ae20af7e5dbf47773459f2e34a3b1a2af5d2f406cda82049ca734f22c6ac5e284c4f4c3f10edf89ba7eac611dfd27c46fbad61aa3c5acfd1a29611b917a26ba070169f08e81441e7d6f77f73837dcf6c758c40fecebab6475fee4a6105c844fc52eb603159d4762408911fce84b736a4fae34cb79dd525ebdd53b3b241a08c664a90a6bab087052b82db1f0a9e2f98b78b4998504b148711f47caac7229b708a562e6968b91720b585b2446f7f8aa848d433ebdf0d9d5c866ae7c3660f0be9734959533da9b9484dd10954c7bbc631fc07cf74d1a103076721639a19dec9ba88904c55c3d0e4829d14e48c3f93097521c4a9f4fbcf7b0d17baa7b742afd32a2e78be29f6fb37018bd0579af59985171a8dd5dd35af833fd8816cdd704fa5214260994cd64bae6c7d1376b864874de542dafb0a5c4b29c5bd887bf1dc8ec0e2f907fcffeb6522a3aa20c8ae5912b519049719cba277be7bb6c4341d65fc530804dec7ce5c1a64c4aef279c0da8a1bcc89a63542fc2af2cd1d69701c78db225c596190e81fadabd718b794689fafc929ed092b90218642ae0c75ffe6b9fa9baff10f2424d43ecda2867013d4f2e7562d3bcaa7f51f1f5a96bcc9bff8dd1bce4eaaf49626550183dc19eb358c146b657c2b34fe67a8ecb12b1b29b3d0bf28d6ecc13578f7d1ec1c7f7f76f325d920ff717c7d01baffa0d52166f6849832895f9ec960c65b06506caf39ea6ececccfa197ae151b948d415338c18b3ac35f6f96e67c7662de01f8a92c2a224f4567fc72333b43fb099dda8c49c3cbaee48cff545894390165fc290d798888a84c583b0096513a5c61b2ee1e836b17632cff8f71f9c73546882961cf25a010c7276791167e0dd7d2de8bf44abe9f12419c8776d84418d8e26463ea139e64f82f81fc5b577957f6d34b247a6d7d79aec95d80320b7999f398347835d82a74f3f5637a37ca08158d4022e39ef514f264ba84dacb3c5270272ae94ee3858eaf4de98e8d944273398e315dc42a277fb97d9ee7ddc4f7dbb6cbdbb9283ff1ecbde638ce6edeb18e680addd942f6632e73fc11ba5874a179c79ae67a6406d19ab7293af407cd319862fd4c9568a3bcf31a11adc4ddd8a924e10768594e4689a109daeff28f15a182ee3bfb347f0500005d8dcc691421b6fad377a9ceda726d195eb847ee879664861d4e2e0d3567362524303feafc2b552f0f1f64436ce9efaa63b2b268c674969c879d027c37aca197b71cfe47670cc268de9714a91a3a50c7c205daa613c56c1b1f13d34eaf8dbfc126e0e9fc10cd3e508154e6cea0572e179e424d2270454b1000a3bf4aac26b18efeb9115b6fcd3fcee6ed5b9c3d585394077c35850ef697c5f8a57a270431a0a2e81f6a62600130375de62e9796eed4e4e25bfd3f6addfe62addcf2b8fa8eb28d8c3fb20800a8e9ae87c114a1ae91ed347f8ff589cead9e646722180fd60bdc9d0923a1a6ec8fc6de5fadc2203344d459ef6f0145ff71a4cacdabaf1b55f262c86733dd109b747f8740a3959a13a32377e522997fbf93c41fe3408a67d7253df6e399345d9216600f82fefcba9db303442ab3f184c012b1359e8601d85d6b0312ea7b0474d0c8dbca06625643e94ffdacd9a0a2839674249370fa67a5681df0442079cf67bd073859cf3d423711639f8addb6a9acceda893f017f3ca1f23f1245473be8bc6b5c51abc5d088fc764b3d96c9bbe7908806e2b64908bd0be73aa09eeb09de1117d0159b17a166bdb1394892b815aabb68dd7aef00bb6660a31088c88d16d433079552f25801472a7302a44fcdaf13410d15ab5e690cabdfddf112046f58ded90f4d4cdc4de5bfbc5259456ace66f7dbde5c49446d377b87181f0ba03598973137ec2f9b038c0a8ddcd46a6d963086c383c9e86b98fafc0a3b8d7ace5e5f96a0414a4afd5ae75847997f982b338901d81a852081bd47ccd553c2a41aac73f2381e611c8c2581052779e0494f0e1efa0974e11659866f8687fae4236556988b24e0bfc2dceb6f71fe09ee3b4e723dbf369dd22b7889ba296d8c4062aeef1113839c793e4bf16a35b1388ec6af47c363855e03137e9e1d4795beef29d4bb62d611e14fd8f880ff1c8267f259b46229b96bd0e8f7068503b223fc01ba9d8986c601e9807bcd3c232babbbb3112c87d7c30ae496841c03b361045a31e9819b69ec7b94a12d1793ee0b9267a3f9b77e965d1089a2356c46a05f6facfe3e1fe10f5257dd1e83972a9bdf1275ed03ee0c32d8021f264ecd67f635051c9f51f69d4848876c7d68703cbdacaaac18c1ea5e43d9554ddfaeb22f72e73e53760ca15ee52fee57e153702f7f78001a282c8389adc9f1a9b33bda27d4ac6b29dca8b082db3f858df468570d2c099a2b2e5c0897e0183ab8b4dfb62d65d7492347d51ed7b69b414d0de1be678664c7209f849d62d0a5e3a64daeccd1f332831c4b91a11a5c48444e39cd19d0e45120d5ac9c03856df66c8615d359e2f89484a068468a3e319166631932b643d73ad3879b8c8854232384ec62bf7d3c68c51deacdf8685870842e57464659fc9cbfe75f97d8a34d730a74828757661040f9f2cd1832d4c15cb774e0af4d4d0dad5e0098e580f6259bcacb3557fd8442910c8222feb58104d075ef976218a6ceaf10a807b0df2fa5b08945ad17dbc17cd88d7a9bbe2d21332d2ce8a29abbfca7df2f498798e0cb0846c10e4a9125c0b7ab06902f15d8521c10def1ddc94e4f563252894f844a3ee109aec35f766001520926351795ecaa582e90598503a22a9d75bd60c8cb631897d98ea5d66d8f9f06345bb889c4aa21115518b444c2d9d45de72abc73659aafc00465cd3564834389576c5c04f911e2ac0082d72c58e2cec954e6ae72dba6c8b7ed682f488e81bc706d34c723fa3a7ba967b6b00e1abea0e7622a0d9ca17d403bcbf5e2316ab4d46734226ed6797c84161384fbb46b8fe8653cd351e526cca50e7ab8885dd7b5d240cfd15a0253830a7ceb9db44bb12529b77e3cc835442b4d58c7db6a762b7e2c5a3fb37ae9f1426a99823c2df6ca2f6fbf886af52e8565abb7904da69ad7f7029cf73ecc37b5a8c1da6a9e9e1cde38506c944130000303d494e422fe181c96a6359b377f18917ae78729911b40b7e69cbefea3c25dd9803aee3183ee3933b5c19d84a400e6c57cb20dc7c7e68739edbf1e8e3475e0a64823dedb46c27780ad01a90a4244891c262d8b0f99e3b1adbb906f82e1977a6101a9d2b44b4b9bfc1f102490ae19e657fa8e7f432eb52d2a4ce932d5346566b887ad4c4f4b5d0dbce790a429f546593e52979c8400441bfe8485c8b864f81b627cf1e20c800b0197b562d0f9b173ca3ba0fae69fe11b91909df9a98ba358e59edbd73da0707a170b3e51928c9c27863dbc83bdecf632b0cc757ab90a270312b2949fdd93f6bea54e303fb0a97b380d516a36f86f053e55e81504affaf7d7b1b8bbde5da525d3f60a628ae17918e07b32b408b51ad3ba6030c3555556334f2fe7c11098007f3e232c8953754c794f807b0ac3680b2a3688f5205d90ccce3ba9c7907508cec61287ad0aa55a151e639bb9086444bdcd149bc5c003340b8381d8c35b073729d2e95a21af1d9995c8093d570b59d8730dd04f3e26ac85e20166e5596082680de90522bcb9532d9e9dce3a10e998f25503902fd7814577ded668bbf3de129c024135a8af420ded350479f13d55290274e3ac63f4568ec7c7a8244f610458d85ecf29aa135d0e56ee52d743200a754ee4508e94d5bc15b3cc837de84fb3cf27ad7590dcaedb78fd8c8f46aaa3529fbb1a2536956c940b605eda0668b1a0f763060bba65d471450a2b34c328c9fb5971851b341a092e315e34a6801cc0808559e5de6d2d9508d11d3072426aa2d43e65f8429c48dbd03197c4f616c253a5b1b50e7ff7cd44df88f5f142997adf976cd2f0cffd673c1791ab969f9dad5867abe531227c059e7b7a9c2343aad230c83513a130ce6e0c4d6815e2bd91f99b6c514703f50fb43139f2e83c521b7e5a3ff4603f006bc7d162047e647234b87439278b10ccd92a4fca136f74d211592235e602d3643fa190cecc8edaf2d727dd5db07f9873048b1f75e19e7c39ef839c0703ec53f70c9fe39b43b98fdacd56b49a416e3b8c66604fb912e3672b8b1a6c5ff7db16320b599513d39460098138b7336d9152df98179f2e07c5abffd4ecf8a2cc8903a40563f187da3a99071bf0c93a65708cb36cd6a69545b78be13a3df9b6c336166b591637bc1be3dfc502200ea982d3b428824cf257184ee93f2d0f3168d4179d238497b84cb73abead20f710057b52ed535adee055081cee4aa842c82c220c160477c16bd1baaa73f46442d2a00658303a9433aa858ce880ed80fa04b592da3c3452a0810f759cbfccd7143d10427c1d39b5c5ecffc590377ce68976315db340e0c00d35d34bec22cfe95882f52f40248281c94758c809d5e65cbf9aeb2dffbdbf2f9a7d10dcd6e7eccc5781851c26990d4a2a2e71598dca6973bfabc82a6135bcc1ee3f1611ced7454e271cbd85a07a583fe89ea98dc4c1b52293adaadfd195b95e6fef37525736a048bd3bb7cc769c50b26c42445f2d5aa37c5ae529b90a5638d920a330ce1ebaf9d979e1b8ee70aba747f7f1a0b9a873167fb5829e64ad08facdfed0fdb76718ef97eeb028cbea23578969190d46e27f81d5eae27987007e217d540d11a33cb36e5768d34d7607ea83221cda3cfefb1cc65f171711160eaadc737013ec1d51de97afd4afc67aa15a23f197800a0566ef4937a6bba9f3334c0aa0e1ed7e9b5c3fc52a3ee112169ed5bce66e88a06f7f3fdda21a10b818c080f2e08e16af6eaac777dff81bfc2231f4cd7360d460091929035b268785e54b3704d52b8c32ffcdf00f21e7f8d3434b3e1ee711a8427596a0e8ae606d02b06914ba09c0a75b2858c7a8dcfff15e2a78549a447dd5d0d5ce912623e4b43fa4106d98e0a5f7960deef827fa30e52697f486cc9928e9b614253a461435d9e993f4a2a700dd0bc54519a2044f36e8f02fb78ca1025d1ce8c35366eddc90818ca1cf9e28bb8ae0f337efe98b82af2547fa03c3eb0813e942d92f1dedac412fa6738c73339959d8f620ceb02ef65dc0a9e4ca272d1965c73c2b06810ba6e13d83de07c4eecbb9e43744b414003057bc26fce09696e98146e59b79a6d817e26b132e3c935d8e5230335ae363a42084ba271058fb25268b139397ef984861d4adbec66e66477df46049fcb8e5f0179846ca020284eccac22b51c3273ae69898295686843bfe2c2ce4f43ea8668a3121558c52d4eb967341197f650e3f145877eb1f5de8377434b18eb2a7bdbb5d7db569d0564d2db7b31f174113d8487be7a5f91f97cda158aac83f0b84eb6a787d30f35f8a1e5ce28f9f86999a06cec497fcd1c8c1c570eb00f1946f300a03bf9b08584df33e2050950dcf4010928365d667d8ee42403c9d1bab54a7518428f7679e0a0e172f33bb3b8b0a829ea3d53fe478fc2556fdb4e51bfa638e9343f628ea570a096e016f5e47e4b72b29b445f9eb12d133277b1213eae6a2ea224ee80e30eb2fd12b08bfb56a588f2f2e67b9c2cb4795c025bb257e954a7720f57687482d119b1850208267eefe0e65b0dc022da6c3324a0d4e1d35dea840b6bdf2fc652579ba3fe55c41126ca4cd54636e86089451e97e5ce3d7cc2499f0882a2c761f0c74640d5152a5bad5091187cbc0c11683f53b5f2b8d4202e33f42070f13e77a63e0794c6ac5dc986a531ab49225d408d8da33a3c89ec856b336faaee251afabc4895afc41165fb558e6c26a3dc12037945f47fc6e60d710f68ca3dd2f18ca8d96cb9e60d2d91cd5b5f56168dc8bda3d3d31779e02c9c6349847504fac30a82466cd692becd3aec74238d336e20a31c2b97be3bbd90c3a2ad938d7ff1b033fc899006acb36eb561a37d4397c09403c845f6081a36d9e4c590f335ebffdee96a0208bf18a9a5ce84ee45c76a22786822e296a957920150f5e11c3354329d4dc328552fa3f2a93d506c7159ddc3054cb1447808cd87c78b9cf74ace81847d712a68d5e88f9c75808fe57383d9867b264e7e3ba233a6bc79a13bf35531e40a1c0d8becacf3d51b07a0cd50e81153e4a0a70128d36ffc096c408b55f47496d08b0153a3e669688a4354ba7dcb65fad21760813afa8a8e4789a9466d7997a27f92e9dfd0e3f9e499c188a200dddc7b57794a2239feb263e8421b79df4f0e6444704476e209101ac5fbc55d41ed0ea466b05401148963ae15dbebfb8d6981330e5b9dcdb01c9d6f9f95ccf28a878e891ae69163071eebd1b738861c58c7b8b0022379412596ea8c2914977e419c5ed53c32e7b191cb148784f42044947eb19e61daf6c853364037a9f734732c8fe5ef76fcec755469621aa4cb7cffd79ffb01b18630bff7751a7e13c3e1427f3cc068ff199ddfe132eaeb4ecd69e48ce59230eff0a81f98ed2835afe2f8911bd9b03ea42cf67abe104cc8b6ee648b515c53f082aaf2ff9cccd1c5c11b920ad82b3bab7e301547713acc37a507059d5a854d08c1330827c87bcf9fb8a337f9d786f653ae90fa293285d5b2b8baf0bc97214dceb9ce1f882acdc45fc1b1c9c1ab8b9931c284fdd21a1c459a064b66f9ccecdc34bf616d9c96c44d741410307968b30d5d4512d5e3c130e2837c10a534bdc7598015c2c0fd1ced2b19628494e5726e55816da6f64c599f7617298c5e1cf4459622dfbf795488238ae1c2716843d2c8ecd1427e068d868ff4d1fa4ba4c701ac81962372867d7c021dd1d0056ef9426e5f8f0579cb26c812abf463d954d5776a3b9f52691ba69ef9dc8fbad3bbafabf6080a9811d23fc9ef802a85a5c315c4700b4d8c68544ca96203f606065bd5e42e1f593d34ef6a086a5399505d12dcd85aafb81da899eb2f01d742b735ec7820330cc92e10b243cafb228c195ade2a4f096b0170bb1be7d5265af0b9598740a5a874326e60cf475c99cacecb013d1eb5202169bcc3d8a1b98484d0dd5b06e4c432e6af4b1fe2a897215295febd579ef3ff568cf02ff1a5c6ba147c4505b3a6119a43b0f960e5fafbcf50135b7efe743580d399f1b21dd8566ab93c12efe9a00902e9fdd333c08ddeebd1a0bcad6cf5ad53fbfa2ce04bb6aa24fe9367c63e2f4f90359b7db4d68d9b68d3d40a5722c6c1fb1e62b27ebbf1bdb39ed409fb579572d64078d1391bad71b2816183da174f2d5c956ae58fd926750a272921b919f0a4aa5f824a79ddaab60c7da7c282053274df30d1df6df3e7e023e9675c329f921999c3afd1ba877b1e19ed260f2119795db264fbb9d72f4a31f230d26e12ebfa04ff480f2e6636daf722ef11df1ee5d99cf999f7dd61606c132d5f8ce95e0b154af0cb9f9ad20a49dc86bb2ad7e2f86069123aa8e25347ab2367c10b3835b72f25e953041dea58242a9b6dcd3635c24bc75f69fc7f18e90fc7c02e11c5243fa9ffceb2951eef8538f49b05c08779e8b68ce637a95e41d057522b60e5b1ed27d5a9bbb1400d01c40ce78ca77ba40cfbfbf7a9104b5d3db2f27bc78136599f3c9434167c8c09a8cb159034cac86167174cda08f81f384a8ea3d0fb9344d2eb1ee9171a2ed8e8eb1d60b669db2274c6811a9d254083f5d0f65aacd3dd4dad307c48a1d46f354bab93bcf98b174c40b00717fd55381519ed602675faa9a7f9cad1c46f66bdfd0c8c16f93ab11cb5773227af6a104dd57783b3e03cfa19f5183af3c908bc53d62bcdcb68d767c6afe9fc3be46ff9a9e94833bd3900", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x8, {0x1, 0xfffffffffffffffd, 0x2200, 0x1ffff, 0x7, 0x8, {0x4, 0x27, 0x7, 0x280000000, 0x4, 0xffff, 0x7d79, 0x1, 0x4, 0x2000, 0x7f, r9, r10, 0xcb, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r11 = getuid() r12 = geteuid() fstat(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) lstat(&(0x7f0000000840)='./file0\x00', &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000006380)={&(0x7f0000006280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000006340)={&(0x7f0000006300)=ANY=[@ANYBLOB="f9000000", @ANYRES16=0x0, @ANYBLOB="020028bd7000fddbdf2525000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x44000) (async) lstat(&(0x7f0000002b80)='./file0\x00', &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002d40)={0x0, 0x0}, &(0x7f0000002d80)=0xc) (async) r17 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r18 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r19 = add_key$keyring(&(0x7f0000000100), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r18) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) keyctl$chown(0x4, r19, 0x0, r20) (async) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000980)="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", 0x2000, &(0x7f0000002f00)={&(0x7f0000000000)={0x50, 0x0, 0x1000, {0x7, 0x2b, 0x401, 0x80004, 0xffff, 0xe51e, 0x0, 0xf9, 0x0, 0x0, 0x2, 0x2}}, &(0x7f0000000080)={0x18, 0x0, 0x4, {0x6}}, &(0x7f00000000c0)={0x18, 0xfffffffffffffffe, 0x4, {0x5}}, &(0x7f0000000100)={0x18, 0x0, 0x1b8, {0x8}}, &(0x7f00000001c0)={0x18, 0x0, 0x6, {0xa}}, &(0x7f0000000200)={0x28, 0x37aaf9bcf50c0ee, 0x6, {{0xfffffffffffffffe, 0x5, 0x1, r3}}}, &(0x7f0000000380)={0x60, 0x0, 0xfffc000000000000, {{0x2, 0x2, 0x2, 0xbe9f, 0x9c64, 0x7, 0x7, 0xffffff80}}}, &(0x7f0000000240)={0x18, 0x0, 0x0, {0x5}}, &(0x7f00000063c0)=ANY=[@ANYBLOB="230000ffffff7fff26004a2b776affff2d2f62696e44657266730f62696e6465723100029ca47107e380cb21f50816e714d1c568d1e79dc604443200aae7a0812faf745a08615ae8797baf1cc8bd9ecd15dd1a5c9105f65068a984f0c9bb26eedfa39e4fb8f6cf8d8d76a66867acda0448936d8f"], &(0x7f0000000440)={0x20, 0xffffffffffffffda, 0x90, {0x0, 0x14}}, &(0x7f0000000640)={0x78, 0x0, 0x7, {0x4, 0x6, 0x0, {0x3, 0x7, 0x2, 0x5c73, 0x2, 0x5aad, 0x1, 0xffff, 0xfffffff8, 0x1000, 0x6, r4, r5, 0x401, 0x733}}}, &(0x7f00000006c0)={0x90, 0xfffffffffffffff5, 0x1, {0x2, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffb, 0x1, 0xcf4, {0x5, 0x4, 0x3, 0x7, 0x5, 0x100000000, 0x2, 0x70e, 0x8, 0x1000, 0x1, r6, r10, 0xc810, 0x80}}}, &(0x7f0000000780)={0xa0, 0x0, 0x8, [{0x4, 0xffffffffffffff0b, 0x13, 0x4a, './binderfs/binder1\x00'}, {0x6, 0x1000, 0x13, 0xfff, './binderfs/binder1\x00'}, {0x1, 0x6, 0x13, 0x8, './binderfs/binder1\x00'}]}, &(0x7f0000002980)={0x160, 0xfffffffffffffff5, 0x55e7, [{{0x6, 0x2, 0x1, 0x10000, 0x38e, 0x80000001, {0x5, 0x5, 0x1, 0x9, 0x9, 0x7, 0x400, 0x0, 0x6, 0x1000, 0x7, r11, 0x0, 0x0, 0x9}}, {0x3, 0x112, 0x13, 0x2, './binderfs/binder1\x00'}}, {{0x2, 0x0, 0xa, 0x8, 0x8, 0x69, {0x3, 0x752, 0x360, 0x8, 0x9, 0x7, 0x4, 0x3, 0x0, 0xa000, 0x81, r12, r13, 0x9, 0x4}}, {0x1, 0x100000000, 0x1, 0x4, '^'}}]}, &(0x7f0000002c40)={0xa0, 0x0, 0x0, {{0x2, 0x2, 0x7fffffffffffffff, 0x2, 0xf, 0x579, {0x0, 0x9, 0xb32, 0x5, 0x0, 0x8001, 0xa, 0x0, 0x9, 0x6000, 0x2, r14, r15, 0x1, 0x2}}, {0x0, 0x1}}}, &(0x7f0000002d00)={0x20, 0x0, 0x5, {0x100, 0x4, 0x6, 0x73}}, &(0x7f0000002dc0)={0x130, 0x0, 0x3, {0x3, 0x0, 0x0, '\x00', {0x8000, 0x2, 0xfffffffffffff5fe, 0xfff, r16, r20, 0x8000, '\x00', 0x5, 0x9, 0x7fff, 0x2, {0x35e5, 0x200}, {0x2a6f, 0xf94c}, {0x6, 0x5}, {0x401, 0x8000}, 0x10001, 0x12, 0x9, 0x7}}}}) 3.278037457s ago: executing program 0 (id=5298): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000081c09668800000000000109022400010000000f0904000004030000000921faff0890a98b1e09058103ff03c9ff"], 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="02012009707260124811bdd4d92997e7059c0200"/30], 0x10}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x11, r1, 0xf648e000) read(r0, &(0x7f0000000040)=""/92, 0x5c) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 1.852734957s ago: executing program 3 (id=5315): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000540), 0x8) (async) connect$bt_sco(r0, &(0x7f0000000680)={0x1f, @none}, 0x8) r1 = gettid() r2 = getpgrp(r1) get_robust_list(r2, &(0x7f0000000200)=&(0x7f00000001c0)={&(0x7f0000000140)={&(0x7f0000000040)}, 0x0, &(0x7f0000000180)}, &(0x7f0000000240)=0x18) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r3, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) (async) fcntl$lock(r3, 0x5, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x401}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r5) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, r6, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x44000) (async) r7 = dup2(r4, r4) read$FUSE(r7, &(0x7f0000001180)={0x2020}, 0x2020) 952.403906ms ago: executing program 8 (id=5326): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165142, 0x0) (async) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r2 = openat$incfs(r1, &(0x7f0000000180)='.pending_reads\x00', 0x10b441, 0xc0) ioctl$INCFS_IOC_CREATE_FILE(r2, 0x40306727, &(0x7f0000000340)={{}, {0x200007}, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) write(r0, &(0x7f0000001400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0xffffffbf) 949.287196ms ago: executing program 9 (id=5329): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_usb_connect(0x2, 0x36, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) prlimit64(0x0, 0xd, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x0, 0xf, 0x21, {0x21, 0x3, "6afaf1eb71bb2c2995cfe3450195ee97c9e603f8e4789ba89bf3c37c78f5af"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000002c0)={0x1c, &(0x7f0000000180)={0x40, 0x11, 0x8b, "86b8803021a11a9b0476aa108a26ce09d6c4988fb057918f199cfc86ae0d6e33c00ce9b207406852741219c53bb88abf9fe71950d4bbf0d26a83d0c5d8606326e5861c923be3bdf80a72d02c27d6be570e7020967ef3745b8ea21533f651fe82d5a42494fad54bbc6feddb4cd5fd8fdc93bb90d25718ca59260c8f5aa5f1aa276c544cfef89c954507d602"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x9}}) ioctl$TCFLSH(r3, 0x400455c8, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) write$bt_hci(r0, &(0x7f0000000300)={0x1, @read_clock_offset={{0x41f, 0x2}, {0xc9}}}, 0x6) 948.178466ms ago: executing program 3 (id=5330): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x2) fcntl$setlease(r3, 0x400, 0x0) r4 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r5, &(0x7f0000000140)='./file0\x00') mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x40, &(0x7f00000005c0)={[{}]}) unlinkat(r5, &(0x7f0000000080)='./file0/../file0/file0\x00', 0x200) write$FUSE_BMAP(r2, &(0x7f0000000140)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000001200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x7}}]}}) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r6, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) 940.108447ms ago: executing program 8 (id=5331): setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@ng={0x4, 0xd, '*'}, 0x3, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x5dd93000) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) readv(r1, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4089, 0xff9}], 0x1) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syslog(0x300, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x30) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000aba000/0x3000)=nil, &(0x7f0000a24000/0x4000)=nil, 0x3000}) 882.012103ms ago: executing program 8 (id=5332): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000200)='fdinfo/3\x00') (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) (async) r2 = socket(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SIOCGETLINKNAME(r2, 0x89e0, 0x0) pipe2(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) flistxattr(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) lseek(r4, 0x0, 0x3) read$eventfd(r1, &(0x7f0000000080), 0x8) 881.683983ms ago: executing program 8 (id=5333): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000000)={"b6f45c86c3c7f21dfdc760a5c52df3e6", 0x0, 0x0, {0x5, 0x9}, {0x8, 0xf48b}, 0x80000000, [0x7, 0x3, 0x9, 0xaf, 0x1, 0x1, 0x4, 0x2, 0x8000000000000001, 0x100000000, 0x1, 0x1, 0x8, 0x6, 0xfffffffffffffffb, 0x3]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000100)={"e99e377b07bae2838166a9ad705571c7", 0x0, r1, {0x3, 0x1}, {0x1c0000, 0x7fff}, 0x700, [0x100, 0x3, 0x7f, 0x5, 0x0, 0x200, 0x100, 0xfffffffffffffff9, 0x8000000000000000, 0x5, 0x0, 0x2, 0x2, 0x5, 0x5, 0x6]}) prctl$PR_GET_SECUREBITS(0x1b) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x7800, 0x7800, 0x4, 0x5, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x67, 0x0, 0x4, 0x2f, 0x0, @private=0xa010100, @rand_addr=0x64010100}}}}) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) fadvise64(r0, 0x1fe, 0x7ffc, 0x3) 875.680324ms ago: executing program 3 (id=5334): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="020500020e00000000000000070000000500060000000e000a004e217ffbfffffee700000000000000000000000000aa040000000000000002000100000004d4008100000100008005000500000000000a"], 0x70}, 0x1, 0x400000000000000}, 0x20000000) (async) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x13}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f00000000c0)={0x2, 0x0, [{0x80000021, 0x0, 0x6, 0x7fffffff, 0x1d19c00, 0x2, 0x5000000}, {0xd, 0x3, 0xb, 0x8, 0x10000, 0x8}]}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_usb_disconnect(r1) (async) syz_usb_disconnect(r1) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x72221366c090a602, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 862.230054ms ago: executing program 8 (id=5335): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/217, 0xd9}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000004500)=""/4101, 0x1005}, {&(0x7f0000003500)=""/4080, 0xff0}, {&(0x7f00000003c0)=""/158, 0x9e}, {&(0x7f0000000480)=""/138, 0x8a}, {&(0x7f0000000840)=""/176, 0xb0}, {&(0x7f0000000780)=""/132, 0x84}, {&(0x7f0000000000)=""/260, 0x104}], 0x9}, 0x1000000d}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0xfd}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x3ff}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x810}], 0x8, 0x40000100, 0x0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010002000000102505a8a440000102030109021b000101000000090400ff0207010100090501020000130000218be0b15d5d13b5c9eb8d713ec0e27ccdb0cd8a11f060598f7d3ea84f39d52f861f294a71c98e4ac43329848542b9"], 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) open(&(0x7f0000000140)='./file0\x00', 0x200000, 0x120) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)=ANY=[@ANYBLOB="40100000", @ANYRES16=r4, @ANYBLOB="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"], 0x1040}}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000400)={0x20, 0x18}, 0x0, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000540)=ANY=[@ANYBLOB="20003015d000002e4def5b7d023ffa876ae5d13f864a7aab22b7bfba5300000000989b83277fb366b65282d07734a0ce000000000000"], &(0x7f0000000640)={0x20, 0x1, 0x1, 0x6}, 0x0}) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) r6 = epoll_create1(0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@uuid_off}]}) epoll_pwait(r6, 0x0, 0x0, 0x80004, 0x0, 0x0) syz_usb_disconnect(r1) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) write$P9_RVERSION(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="133030"], 0x13) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 814.827839ms ago: executing program 3 (id=5336): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xdc, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x7f}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3bb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1133942a}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xda61}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7f}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xfff}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]]}, 0xdc}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f0000090583"], 0x0) 377.871822ms ago: executing program 9 (id=5337): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x130, 0x0, 0x4fcb6233, {0x0, 0x0, 0x0, '\x00', {0x7ff, 0x801, 0xadf, 0x804, 0xee01, 0x0, 0x2000, '\x00', 0x6, 0x81, 0x1, 0x3, {0x8, 0x8}, {0x4000000000006, 0x9}, {0x1, 0x7}, {0x1000000000, 0xa00}, 0x80008003, 0xa, 0xfffffffe, 0x6}}}}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) listen(r2, 0xfffffbeb) mlockall(0x6) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000c00)={0xffffffffffffffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x9, "bfcf2b859dcd95"}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000001c00)={{r4, 0xffff, 0xfffffffffffeffff, 0x4, 0x100, 0x1, 0xdf5, 0x4, 0x100, 0xf, 0x6d1e, 0x0, 0xe63, 0x4, 0xed}}) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d80080003"], 0x24}], 0x1}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f00000004c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0xbb, 0x0, &(0x7f0000000680)="bdee7ccbf76f4d04edcb106d80eb434eb6039cbcd24e272156d3f98c8c55f1fe94c3b71e223f0c9074af765850a8339f503ee249104e0be9b9771cd3fc872ae0290dbef28c2f1b04ca6a05fe67bd76aee3269d69c703665d0b10506c5caaf125b1681ab6c8a892d9f52020a08c3e2877af5d6243b698fda9d1dff1febbf98d8c0c5f8885c8fab4431854c5dc85aa5e0f1fa36c690a7a0ab155ed51f8c220f1b4cc40d0fbfbb7cce79a463bc2585c7128ecc9c527d90be072861060"}) 377.566153ms ago: executing program 9 (id=5338): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000080), 0x2000011a) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x1100, &(0x7f0000000100)={0xf2, 0x80}, 0x20) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 346.092795ms ago: executing program 9 (id=5339): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f00004cd000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x5bc7000) 335.700916ms ago: executing program 9 (id=5340): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000300)={{0x100000, 0x8080000, 0x3, 0xad, 0x3, 0x1, 0x7a, 0x7, 0x0, 0x2b, 0x9, 0x8}, {0x4000, 0x10000, 0x3, 0xfc, 0x40, 0x8, 0x72, 0x0, 0x6, 0x0, 0x7}, {0x80a0000, 0x1000, 0x8, 0x2, 0x1, 0xff, 0x0, 0x9, 0x0, 0xa7, 0xb, 0x85}, {0x1, 0xeeef0000, 0xb, 0xe7, 0x3, 0x2, 0x1, 0xfc, 0x4, 0x7, 0xe, 0xf1}, {0xdddd0000, 0x100000, 0xf, 0x7f, 0x5, 0x87, 0xc, 0x2, 0x9, 0x8, 0xf7}, {0xeeef0000, 0x8080000, 0xb, 0x2, 0xb1, 0x5, 0x4, 0x80, 0x4, 0xf, 0x1, 0x3}, {0xdddd0000, 0x11d004, 0xc, 0x7, 0x0, 0x0, 0x1, 0x4, 0x5, 0x80, 0x3, 0x4}, {0x100000, 0x8000000, 0xb, 0x5, 0x5, 0x7, 0x1, 0x37, 0x2, 0x0, 0x80, 0xa}, {0xe6e50000, 0x70}, {0xdddd0000, 0x407}, 0x80000037, 0x0, 0xdddd0000, 0x2000, 0x20000000000f, 0xb800, 0x8000000, [0x8000000000000000, 0xfffffffffffffffc, 0x15e, 0x3]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x51, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="6321a1780e3fe8d9098f1f28f3c1f1895857b6b4afebba414b5998fa7c73702eb715d85b6a7709a53bf91325a9fbf7387371592c3533a8a34a28e9364405bb05cdeedb9ddfbe45a6933c33e5019991d691e8e8817a584f5392630d34c12a00aac5c546266df9fbb755447a0ff32acb32fc4b9c54b7fa15f82a9848478df5354f7158ece711c634aead9f427b8a3e580b3bd0920814473069f285753c945e0baa9072f76c542acf2986649075a243126f6d736b8bfa9a88672388eaa7902fc6c9a3c1b2781d", 0xc5}], 0x1}}], 0x1, 0x20000001) read$FUSE(r0, &(0x7f0000003000)={0x2020}, 0x2020) sendmmsg$inet(r0, &(0x7f0000002f80)=[{{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000001240)="668546927ae520a8f3049a2f50ca1553a5e62dc469b5b2348ffe35a76a94a3ad96f8e87e3bd8a5c3c8ce4da39c468ccfb81bc03e88c8a813e9ce7cb1410024b82b58364f6dc5fbf35e04c17ccb4c793d5578c99cf2e1fe30481bb07c86c6806ad25840494578c1516bc6d6e1942cc9f6d3b5491d949c4b93d7a403ca75cb7bc8fea7d325645cbe4c87da88e362c3ae3206fe2d3d88d62500c4f5ccbc1af04079cc5d49c05f487f40ed97703cf5f46cc9d074e5a8811d3e43b5b4f6456c508e0695433ea9f6", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001800)="db", 0x1}], 0x1}}], 0x2, 0x0) close(0x3) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(r4, 0xffffffffffffffff, 0x0) 281.539662ms ago: executing program 9 (id=5341): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = socket(0x11, 0xa, 0xffffffd) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000001180)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x6b, 0x9, 0xf8, 0x4, 0xfffffffffffffff8]}, &(0x7f0000001100)=0x78) r1 = fcntl$dupfd(r0, 0x406, r0) openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz2\x00', 0x2, 0x0) write$binfmt_format(r1, &(0x7f00000010c0)='0\x00', 0x2) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x12b8b000) (async) fadvise64(r2, 0xfffffffffffffff9, 0x10, 0x4) (async) sendmsg$nl_generic(r1, 0x0, 0x858de8d412eb2aac) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) (async) ptrace(0x8, r5) (async) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000006f0200000000000000001000"]) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001100010029bd7000fedbdf25ac1ed701000000000000000000000000000004d40a003200"], 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x80) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) (async) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) (async) setitimer(0x0, &(0x7f0000000200)={{0x0, 0xea60}, {0x0, 0xea60}}, &(0x7f0000000280)) (async) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002240)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYBLOB="202600002d0001002abd70000000000008000000"], 0x1020}], 0x1}, 0x0) (async) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0xb, {"a2e3ad21ed0d09f91b4d090987f70906d038e7ff7fc6e5539b0d3d0e8b089b3f310768060890e0878f0e70d4e8cd9b334a959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b4d31070b07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383701d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b4124351eb000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15771aaa18119a867e1088334975e9f73483b6a62fa478ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b477941554ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535e0dcb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d789d6c4b2d8dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb06ffc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a290744da7afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59767bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a6033bba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f465a034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624080043a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e50bee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) (async) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[], 0x0) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8001, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x2000000a, 0x20000000, 0x6, 0x5f, 0x7fff, 0x4, 0xffff2d37, 0x1002, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x2, 0x24, 0xd, 0x4, 0x0, 0xffffffff, 0x8e661, 0x4, 0x7, 0x3, 0x1000008, 0x4c74, 0x80000000, 0x242, 0x6, 0xc, 0x0, 0x8071, 0x7, 0x5, 0xffffffff, 0x7, 0x6, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0xa8000000, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2e, 0xe, 0x4, 0x78, 0xea4, 0xfff, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x3, 0x9, 0x4, 0xd, 0xe1, 0x47, 0x8000, 0x2, 0xfe000000, 0xfffe, 0x2, 0x4, 0x4, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0xfffffff8, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x80002, 0x202, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x3, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x2000005, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x9, 0x5, 0x938, 0x6, 0x6, 0x12, 0xb9, 0xce7, 0x1ff, 0x2, 0xfffffffb, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x8000003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x101, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1000005, 0xb1e, 0xd7, 0x200, 0x1ff, 0xfffffffb]}, 0x45c) 270.296193ms ago: executing program 3 (id=5342): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x369a02, 0x109) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000023c0)='fscrypt:', &(0x7f0000002400)='./file0\x00', r0) r1 = inotify_init1(0x80800) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) dup3(r1, r2, 0x80000) fgetxattr(r2, &(0x7f0000000b00)=@known='system.posix_acl_default\x00', 0x0, 0x0) r3 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x88040, 0xc8) fcntl$setlease(r3, 0x400, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x440, 0x0) fcntl$setlease(r4, 0x400, 0x2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) 258.176594ms ago: executing program 3 (id=5343): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES32=r1, @ANYBLOB="53c6fea4530419e0abec8bb2be7075f8daf2b03377ce218bae149ba11087e5b4a89aa0a0e58babaaa5bb226f9f4779e165914206b016462fb420b059", @ANYRESHEX=r0, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) r3 = socket(0x10, 0x5, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="780000001a0001002abd7000000000000a"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$MRT_DEL_VIF(r6, 0x0, 0xcb, 0x0, 0x0) (async) setsockopt$MRT_DEL_VIF(r6, 0x0, 0xcb, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000440)={0x0, r5, 0x0, 0x8, 0x4, 0x14000000000000}) (async) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000440)={0x0, r5, 0x0, 0x8, 0x4, 0x14000000000000}) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) (async) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="6b7d42c3a6cabf2e200e8e8e67dca1b18e3698eb54db3fbc0584be53843242afed7ae775159180810618467df04812206a0dd6e82e719f6395687fd98e3ec35adaea6896c8ef784ae145c0f626ab1f59d8d1e7ad80c6123a735554bf3036ed8b88745a56b4fa431be02b39d217f5155937dda676c21d2275c7ee0b6ba6af8ea4b6a171539db387f56c43eb67a0d201af693fb565ee217986fab5c7ec2c07e5c9b89a8abb1490d110a549dc108bd60b0cfb842dc4ae0ccfa3fc19b99ad54ff82446ac2d77f316f655d9b74dcbe99a1693b8fd059d8d565367f986c73dd8a46dd42c14fa18291a600275659425ea2b87235b1570efd1bd00"/262], 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000240), 0x4) (async) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000240), 0x4) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165142, 0x0) write(r7, &(0x7f0000001400)="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", 0xffffffbf) sendfile(r0, r0, &(0x7f0000000140)=0xf86, 0x5) syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="12015002f10a80085a041052010001020301090212000106bd200f0904"], &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0}) 49.645424ms ago: executing program 8 (id=5344): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x20001, 0x0) (async) socketpair(0x6, 0x80000, 0x0, 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) fcntl$getflags(r2, 0x40a) (async) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000280)) (async) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) (async) listen(r4, 0x0) (async) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) sendto(r6, &(0x7f0000000200)="3996", 0x2, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}}, {{0x0, 0x0, &(0x7f0000004600), 0x2}}, {{0x0, 0x0, &(0x7f0000005c40)=[{0x0, 0x7}], 0x1}}], 0x3, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700}) recvfrom(r5, &(0x7f0000000000)=""/44, 0x2c, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) (async) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000080)=ANY=[@ANYBLOB="0700000f6faf"]) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="a40000005400010000000000000080000700fd0020794eebc761a542015983f7ccda9ccf681574ef4dec56234c627b128fca603a5295596201e904dc6003af325a0952926ec97b4678"], 0xa4}], 0x1, 0x0, 0x0, 0x80}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setresuid(r8, r8, r8) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)) (async) syz_usb_connect$uac1(0x0, 0x9f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109028d0003010000000904000000010100000a24010000000201020624040000520b2405000053f11ee5f7260b24050000133b9bda531c090501000001020000090401010101020000090501090000000000072501000000000904020000010200000904020101010200000b240209000200018b7e8e0724010000000009058209ff"], 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f00000002c0)={'macvlan1\x00', @random="010000e5ff00"}) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) (async) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000180)={0x6, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000200)=@attr_other={0x0, 0x4, 0xffffffffffffffff, &(0x7f00000001c0)=0x100}) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@flag='rw'}]}) 48.066265ms ago: executing program 0 (id=5345): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x1, 0x700, 0x0, 0x6, {{0x5, 0x4, 0x2, 0x3e, 0x14, 0x68, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010102, @empty}}}}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x381, 0x3}) 36.631476ms ago: executing program 0 (id=5346): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003580)=""/4094, 0xffe}, {&(0x7f0000000040)=""/190, 0xbe}, {&(0x7f0000000100)=""/63, 0x37}, {&(0x7f0000000200)=""/107, 0x6b}, {&(0x7f0000002580)=""/4065, 0xff1}, {&(0x7f0000000380)=""/109}], 0x5}, 0xd}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x4}], 0x400021c, 0x40012002, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) r3 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r2, &(0x7f00000074c0)={0x0, 0x0, &(0x7f0000007480)={&(0x7f0000001000)=ANY=[@ANYBLOB="14000000100001"], 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCGARP(r5, 0x8954, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, 0x0) 0s ago: executing program 0 (id=5347): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)={0x1f, 0x11, 0x15, "db4e06b1020000000000000095339c3865b6918eb7"}, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}}) write$FUSE_DIRENTPLUS(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES64=r3], 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/126, 0x7e, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x0, 0x25}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): state [ 326.662607][T11390] veth0_vlan: entered promiscuous mode [ 326.676610][T11390] veth1_macvtap: entered promiscuous mode [ 327.297545][ T36] audit: type=1400 audit(1776826794.638:34336): avc: denied { map } for pid=11425 comm="syz.5.3673" path="socket:[53792]" dev="sockfs" ino=53792 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 327.324640][ T36] audit: type=1400 audit(1776826794.638:34337): avc: denied { accept } for pid=11425 comm="syz.5.3673" path="socket:[53792]" dev="sockfs" ino=53792 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 327.551127][T11446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 327.636554][T11452] rust_binder: Error in use_page_slow: ESRCH [ 327.643562][T11452] rust_binder: use_range failure ESRCH [ 327.651575][T11452] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 327.664182][T11452] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 327.667403][T11466] bridge0: port 3(veth0_vlan) entered blocking state [ 327.673380][T11452] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:17 [ 327.688436][T11466] bridge0: port 3(veth0_vlan) entered disabled state [ 327.714254][T11466] veth0_vlan: entered allmulticast mode [ 327.724552][T11471] 9pnet_fd: Insufficient options for proto=fd [ 327.724748][T11466] bridge0: port 3(veth0_vlan) entered blocking state [ 327.736157][T11474] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:509 [ 327.737629][T11466] bridge0: port 3(veth0_vlan) entered forwarding state [ 327.754953][T11477] exFAT-fs (rnullb0): invalid boot record signature [ 327.762715][T11477] exFAT-fs (rnullb0): failed to read boot sector [ 327.764720][T11452] veth0_virt_wifi: entered allmulticast mode [ 327.775868][T11477] exFAT-fs (rnullb0): failed to recognize exfat type [ 327.789407][T11445] veth0_virt_wifi: left allmulticast mode [ 327.921195][T11499] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3693'. [ 327.934431][T11499] rust_binder: Error while translating object. [ 327.934483][T11499] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 327.941460][T11499] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:67 [ 329.250115][T11528] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3704'. [ 330.101938][T11543] netlink: 'syz.1.3709': attribute type 58 has an invalid length. [ 330.453524][ T440] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 330.613404][ T440] usb 5-1: Using ep0 maxpacket: 16 [ 330.620094][ T440] usb 5-1: unable to get BOS descriptor or descriptor too short [ 330.628708][ T440] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.638865][ T440] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 330.650028][ T440] usb 5-1: string descriptor 0 read error: -22 [ 330.656318][ T440] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 330.665478][ T440] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.676142][ T440] usb 5-1: 0:2 : does not exist [ 330.802217][T11553] netlink: 37 bytes leftover after parsing attributes in process `syz.1.3713'. [ 331.754336][T11546] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 331.754468][T11546] rust_binder: Error while translating object. [ 331.761050][T11546] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 331.767535][T11546] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:535 [ 332.412376][T11598] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 332.442417][T11601] 9pnet: p9_errstr2errno: server reported unknown error 2ꓒ۰|sdK [ 332.442417][T11601] NHo" hb [ 332.454648][T11599] rust_binder: 538: no such ref 0 [ 332.460876][T11598] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 332.468558][T11602] 9pnet: p9_errstr2errno: server reported unknown error 2ꓒ۰|sdK [ 332.468558][T11602] NHo" hb [ 332.486043][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 332.486064][ T36] audit: type=1400 audit(1776826799.507:34341): avc: denied { accept } for pid=11596 comm="syz.4.3730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 332.582794][T11605] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 332.749010][ T440] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 332.760175][ T440] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 332.769804][ T440] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 332.780777][ T440] usb 5-1: USB disconnect, device number 24 [ 333.107512][ T375] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 333.224816][ T440] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 333.246241][ T375] usb 6-1: device descriptor read/64, error -71 [ 333.385752][ T440] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.396048][ T440] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 333.405714][ T440] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 333.415124][ T440] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 333.423528][ T440] usb 5-1: SerialNumber: syz [ 333.512557][ T375] usb 6-1: device descriptor read/64, error -71 [ 333.650838][ T440] usb 5-1: 0:2 : does not exist [ 333.656419][ T440] usb 5-1: unit 5 not found! [ 333.664982][ T440] usb 5-1: USB disconnect, device number 25 [ 333.779027][ T375] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 333.917566][ T375] usb 6-1: device descriptor read/64, error -71 [ 334.173459][ T375] usb 6-1: device descriptor read/64, error -71 [ 334.201836][T11655] rust_binder: 548: no such ref 2 [ 334.207148][T11655] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:548 [ 334.227630][T11658] rust_binder: Write failure EFAULT in pid:550 [ 334.291438][ T375] usb usb6-port1: attempt power cycle [ 334.410390][T11667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.410422][T11667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.410432][T11669] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 334.423734][T11667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.431768][T11667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.438414][T11667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.444769][T11667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.451462][T11667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.457760][T11667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.464371][T11667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.470725][T11667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.477318][T11667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.483672][T11667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.490248][T11667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.496610][T11667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.503312][T11667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.509610][T11667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.516204][T11667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.526149][T11667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.529192][T11667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.535774][T11667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.542199][T11667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.556714][T11667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.556740][T11667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.564766][T11667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.571701][T11667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.578190][T11667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.584980][T11667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.591680][T11667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.598215][T11667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.598702][T11675] rust_binder: Error while translating object. [ 334.605383][T11667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.611909][T11675] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 334.617774][T11667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.624190][T11675] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:37 [ 334.634410][T11667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.667681][T11680] rust_binder: Error while translating object. [ 334.674239][ T36] audit: type=1400 audit(1776826801.552:34342): avc: denied { append } for pid=11679 comm="syz.4.3759" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 334.674424][T11680] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 334.680556][ T375] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 334.706438][T11680] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:564 [ 334.746289][ T36] audit: type=1400 audit(1776826801.627:34343): avc: denied { accept } for pid=11677 comm="syz.6.3758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 334.760785][ T375] usb 6-1: device descriptor read/8, error -71 [ 334.803988][T11687] netlink: 'syz.4.3761': attribute type 4 has an invalid length. [ 334.811844][T11687] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.3761'. [ 334.837956][T11692] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:576 [ 334.931206][ T375] usb 6-1: device descriptor read/8, error -71 [ 335.100688][ T7613] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 335.196680][ T375] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 335.219053][ T375] usb 6-1: device descriptor read/8, error -71 [ 335.261656][ T7613] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.272725][ T7613] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.282726][ T7613] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 335.295689][ T7613] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 335.304789][ T7613] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.313586][ T7613] usb 5-1: config 0 descriptor?? [ 335.357741][ T375] usb 6-1: device descriptor read/8, error -71 [ 335.473832][ T375] usb usb6-port1: unable to enumerate USB device [ 335.584090][T11710] netlink: 'syz.1.3771': attribute type 46 has an invalid length. [ 335.747851][ T7613] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 335.755407][ T7613] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 335.762850][ T7613] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 335.770267][ T7613] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 335.777745][ T7613] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 335.785247][ T7613] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 335.792645][ T7613] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 335.800307][ T7613] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 335.809407][ T7613] plantronics 0003:047F:FFFF.0012: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 336.039030][ T9] usb 5-1: USB disconnect, device number 26 [ 336.335012][T11734] __vm_enough_memory: pid: 11734, comm: syz.5.3779, bytes: 18014402804453376 not enough memory for the allocation [ 336.575032][T11736] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 336.590325][ T36] audit: type=1400 audit(1776826804.351:34344): avc: denied { lock } for pid=11738 comm="syz.4.3781" path="/dev/binderfs/binder1" dev="binder" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 336.848724][ T9] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 337.009700][ T9] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 337.020657][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 337.031695][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 337.042624][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 337.056460][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 337.065569][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 337.073974][ T9] usb 5-1: SerialNumber: syz [ 337.082487][T11739] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 337.305933][ T9] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 337.313202][ T9] usb 5-1: USB disconnect, device number 27 [ 337.381862][T11741] rust_binder: 117: no such ref 0 [ 337.387132][T11741] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 337.394569][T11741] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 337.458951][T11743] 9pnet: Could not find request transport: xen [ 337.485505][T11745] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 337.871955][ T439] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 338.035347][ T439] usb 6-1: unable to get BOS descriptor or descriptor too short [ 338.043217][ T439] usb 6-1: no configurations [ 338.047842][ T439] usb 6-1: can't read configurations, error -22 [ 338.309108][T11760] input: syz0 as /devices/virtual/input/input37 [ 338.315434][T11760] input: failed to attach handler leds to device input37, error: -6 [ 338.325209][T11760] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 338.325241][T11760] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 338.333325][T11760] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:51 [ 338.546664][T11779] rust_binder: 599: no such ref 0 [ 338.560986][T11779] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 338.568268][T11779] rust_binder: 599: no such ref 2 [ 338.573347][T11779] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 338.573759][T11779] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:599 [ 338.795591][T11799] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 338.850331][ T36] audit: type=1400 audit(1776826806.472:34345): avc: denied { write } for pid=11798 comm="syz.5.3801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 338.860154][T11801] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 338.872563][ T375] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 339.023114][ T375] usb 5-1: device descriptor read/64, error -71 [ 339.161706][ T439] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 339.278943][ T375] usb 5-1: device descriptor read/64, error -71 [ 339.321526][ T439] usb 6-1: Using ep0 maxpacket: 8 [ 339.327684][ T439] usb 6-1: config 1 has an invalid interface number: 250 but max is 3 [ 339.336077][ T439] usb 6-1: config 1 has an invalid interface number: 21 but max is 3 [ 339.344225][ T439] usb 6-1: config 1 has an invalid interface number: 134 but max is 3 [ 339.352421][ T439] usb 6-1: config 1 has an invalid interface number: 189 but max is 3 [ 339.360767][ T439] usb 6-1: config 1 has an invalid interface number: 77 but max is 3 [ 339.368896][ T439] usb 6-1: config 1 has 5 interfaces, different from the descriptor's value: 4 [ 339.378291][ T439] usb 6-1: config 1 has no interface number 0 [ 339.384393][ T439] usb 6-1: config 1 has no interface number 1 [ 339.390715][ T439] usb 6-1: config 1 has no interface number 2 [ 339.396876][ T439] usb 6-1: config 1 has no interface number 3 [ 339.402957][ T439] usb 6-1: config 1 has no interface number 4 [ 339.409126][ T439] usb 6-1: config 1 interface 250 altsetting 238 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 339.420323][ T439] usb 6-1: config 1 interface 250 altsetting 238 endpoint 0x5 has an invalid bInterval 253, changing to 7 [ 339.431665][ T439] usb 6-1: config 1 interface 250 altsetting 238 has an endpoint descriptor with address 0x37, changing to 0x7 [ 339.443443][ T439] usb 6-1: config 1 interface 250 altsetting 238 has a duplicate endpoint with address 0x7, skipping [ 339.454385][ T439] usb 6-1: config 1 interface 250 altsetting 238 has a duplicate endpoint with address 0x5, skipping [ 339.465279][ T439] usb 6-1: config 1 interface 250 altsetting 238 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 339.478546][ T439] usb 6-1: config 1 interface 21 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 339.489200][ T439] usb 6-1: config 1 interface 134 altsetting 24 has an invalid descriptor for endpoint zero, skipping [ 339.500273][ T439] usb 6-1: config 1 interface 134 altsetting 24 endpoint 0x1 has an invalid bInterval 128, changing to 11 [ 339.511614][ T439] usb 6-1: config 1 interface 134 altsetting 24 has a duplicate endpoint with address 0x5, skipping [ 339.522446][ T439] usb 6-1: config 1 interface 134 altsetting 24 has an invalid descriptor for endpoint zero, skipping [ 339.533464][ T439] usb 6-1: config 1 interface 134 altsetting 24 endpoint 0x9 has an invalid bInterval 139, changing to 11 [ 339.544826][ T439] usb 6-1: config 1 interface 134 altsetting 24 has a duplicate endpoint with address 0xD, skipping [ 339.545391][ T375] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 339.555785][ T439] usb 6-1: config 1 interface 134 altsetting 24 has 8 endpoint descriptors, different from the interface descriptor's value: 9 [ 339.576442][ T439] usb 6-1: too many endpoints for config 1 interface 189 altsetting 24: 124, using maximum allowed: 30 [ 339.587542][ T439] usb 6-1: config 1 interface 189 altsetting 24 endpoint 0x8 has invalid wMaxPacketSize 0 [ 339.597517][ T439] usb 6-1: config 1 interface 189 altsetting 24 has 1 endpoint descriptor, different from the interface descriptor's value: 124 [ 339.610890][ T439] usb 6-1: config 1 interface 77 altsetting 4 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 339.621800][ T439] usb 6-1: config 1 interface 77 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 339.632449][ T439] usb 6-1: config 1 interface 77 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 339.643151][ T439] usb 6-1: config 1 interface 77 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 339.653820][ T439] usb 6-1: config 1 interface 77 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 339.664484][ T439] usb 6-1: config 1 interface 77 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 339.675133][ T439] usb 6-1: config 1 interface 77 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 339.685779][ T439] usb 6-1: config 1 interface 77 altsetting 4 has a duplicate endpoint with address 0x8C, skipping [ 339.696501][ T439] usb 6-1: config 1 interface 77 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 339.705327][ T375] usb 5-1: device descriptor read/64, error -71 [ 339.707154][ T439] usb 6-1: config 1 interface 250 has no altsetting 0 [ 339.720174][ T439] usb 6-1: config 1 interface 21 has no altsetting 0 [ 339.726933][ T439] usb 6-1: config 1 interface 134 has no altsetting 0 [ 339.733760][ T439] usb 6-1: config 1 interface 189 has no altsetting 0 [ 339.740586][ T439] usb 6-1: config 1 interface 77 has no altsetting 0 [ 339.748658][ T439] usb 6-1: New USB device found, idVendor=0582, idProduct=0007, bcdDevice=5a.8e [ 339.757709][ T439] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.765746][ T439] usb 6-1: Product: Џ [ 339.769905][ T439] usb 6-1: Manufacturer: 횹鶢忲Ⰸ鎡⽍䆊㋻鍲ῤヸ韈缚⍔截돫⽍Ự冲팳ႂᮿ텨鷁庰羁遝肁쿗壔⚟ [ 339.782893][ T439] usb 6-1: SerialNumber: ည [ 339.788525][T11800] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 339.961097][ T375] usb 5-1: device descriptor read/64, error -71 [ 340.078421][ T375] usb usb5-port1: attempt power cycle [ 340.223762][T11800] rust_binder: Error while translating object. [ 340.223813][T11800] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 340.230156][T11800] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:139 [ 340.440742][ T375] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 340.473767][ T375] usb 5-1: device descriptor read/8, error -71 [ 340.612705][ T375] usb 5-1: device descriptor read/8, error -71 [ 340.867085][ T375] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 340.889446][ T375] usb 5-1: device descriptor read/8, error -71 [ 341.028053][ T375] usb 5-1: device descriptor read/8, error -71 [ 341.144288][ T375] usb usb5-port1: unable to enumerate USB device [ 341.870127][ T36] audit: type=1400 audit(1776826809.314:34346): avc: denied { mounton } for pid=11802 comm="syz.4.3802" path="/bus" dev="ramfs" ino=56328 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 341.924875][T11810] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 341.924910][T11810] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:70 [ 341.961132][T11812] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 341.970442][T11812] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:72 [ 342.003971][ T439] usb-storage 6-1:1.77: USB Mass Storage device detected [ 342.006598][T11814] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3807'. [ 342.035252][T11814] rust_binder: inc_ref_done called when no active inc_refs [ 342.091996][ T439] usb 6-1: USB disconnect, device number 7 [ 342.115961][T11223] udevd[11223]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.250/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 342.391248][ T342] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 342.508500][ T439] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 342.561815][ T342] usb 5-1: Using ep0 maxpacket: 16 [ 342.569646][ T342] usb 5-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 342.578830][ T342] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.586932][ T342] usb 5-1: Product: syz [ 342.591112][ T342] usb 5-1: Manufacturer: syz [ 342.595763][ T342] usb 5-1: SerialNumber: syz [ 342.601157][ T342] usb 5-1: config 0 descriptor?? [ 342.608904][ T342] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 342.623248][T11223] udevd[11223]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 342.668359][ T439] usb 6-1: Using ep0 maxpacket: 16 [ 342.674774][ T439] usb 6-1: config 0 interface 0 has no altsetting 0 [ 342.681480][ T439] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 342.690629][ T439] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.699207][ T439] usb 6-1: config 0 descriptor?? [ 343.001170][ T342] usb 5-1: USB disconnect, device number 32 [ 343.046987][ T36] audit: type=1400 audit(1776826810.412:34347): avc: denied { remount } for pid=11838 comm="syz.6.3814" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 343.048130][T11839] option changes via remount are deprecated (pid=11838 comm=syz.6.3814) [ 343.076857][T11839] cgroup: option or name mismatch, new: 0x0 "memory", old: 0x0 "" [ 343.155646][ T36] audit: type=1400 audit(1776826810.515:34348): avc: denied { unmount } for pid=11390 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 343.242409][T11842] __vm_enough_memory: pid: 11842, comm: syz.6.3815, bytes: 18014402804453376 not enough memory for the allocation [ 343.354714][ T439] hid (null): unknown global tag 0xe [ 343.360179][ T439] hid (null): report_id 0 is invalid [ 343.365589][ T439] hid (null): unknown global tag 0x7a [ 343.370992][ T439] hid (null): unknown global tag 0xd5 [ 343.562537][T11844] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3816'. [ 343.571617][T11844] IPv6: NLM_F_CREATE should be specified when creating new route [ 343.946993][T11847] rust_binder: Write failure EFAULT in pid:148 [ 345.407016][ T439] usb 6-1: USB disconnect, device number 8 [ 345.623235][T11874] 9pnet_fd: Insufficient options for proto=fd [ 346.008309][ T36] audit: type=1400 audit(1776826813.199:34349): avc: denied { mounton } for pid=11892 comm="syz.5.3830" path="/56/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 346.292378][ T375] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 346.324378][ T439] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 346.453331][ T375] usb 6-1: config 1 has an invalid interface number: 146 but max is 0 [ 346.461554][ T375] usb 6-1: config 1 has no interface number 0 [ 346.467831][ T375] usb 6-1: config 1 interface 146 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 346.480209][ T375] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=fd.eb [ 346.484198][ T439] usb 5-1: Using ep0 maxpacket: 8 [ 346.489330][ T375] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.495932][ T439] usb 5-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 1023 [ 346.502417][ T375] usb 6-1: Product: syz [ 346.512685][ T439] usb 5-1: config 1 interface 0 altsetting 4 endpoint 0x82 has invalid maxpacket 1120, setting to 1024 [ 346.516553][ T375] usb 6-1: Manufacturer: syz [ 346.527971][ T439] usb 5-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 1024 [ 346.532235][ T375] usb 6-1: SerialNumber: syz [ 346.542618][ T439] usb 5-1: config 1 interface 0 has no altsetting 0 [ 346.552026][ T375] usbserial_generic 6-1:1.146: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 346.555303][ T439] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 346.565165][ T375] usbserial_generic 6-1:1.146: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 346.574098][ T439] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.585251][ T375] usbserial_generic 6-1:1.146: generic converter detected [ 346.593137][ T439] usb 5-1: Product: ␉ [ 346.602064][ T375] usb 6-1: generic converter now attached to ttyUSB0 [ 346.604551][ T439] usb 5-1: Manufacturer: Я [ 346.615745][ T439] usb 5-1: SerialNumber: Х [ 346.624087][T11897] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 346.631545][T11897] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 346.772990][T11895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.781565][T11895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.790168][ T375] usb 6-1: USB disconnect, device number 9 [ 346.797817][ T375] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 346.806179][ T375] usbserial_generic 6-1:1.146: device disconnected [ 347.072867][ T36] audit: type=1400 audit(1776826814.193:34350): avc: denied { ioctl } for pid=11896 comm="syz.4.3832" path="socket:[56062]" dev="sockfs" ino=56062 ioctlcmd=0xae9c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 347.076458][ T375] usb 5-1: USB disconnect, device number 33 [ 347.363965][T11905] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:191 [ 347.364320][T11905] netlink: 'syz.5.3836': attribute type 7 has an invalid length. [ 347.608798][T11912] netlink: 'syz.5.3838': attribute type 4 has an invalid length. [ 347.616702][T11912] netlink: 17 bytes leftover after parsing attributes in process `syz.5.3838'. [ 347.630977][T11912] sit0: entered promiscuous mode [ 347.637609][T11912] netlink: 'syz.5.3838': attribute type 1 has an invalid length. [ 347.646077][T11912] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3838'. [ 347.696916][T11914] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:628 [ 347.780143][T11924] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3841'. [ 347.818884][T11927] usb usb9: check_ctrlrecip: process 11927 (syz.4.3843) requesting ep 01 but needs 81 [ 347.828649][T11927] usb usb9: usbfs: process 11927 (syz.4.3843) did not claim interface 0 before use [ 347.861847][T11930] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:638 [ 347.947792][T11937] rust_binder: 643: no such ref 3 [ 347.962399][T11937] rust_binder: 643: no such ref 3 [ 348.032330][T11943] rust_binder: Error while translating object. [ 348.032392][T11943] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 348.038620][T11943] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:647 [ 348.095893][ T36] audit: type=1400 audit(1776826815.159:34351): avc: denied { mounton } for pid=11949 comm="syz.4.3851" path="/syzcgroup/unified/syz4" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 348.264228][ T439] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 348.425270][ T439] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 348.435600][ T439] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 348.445274][ T439] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 348.454450][ T439] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 348.462625][ T439] usb 6-1: SerialNumber: syz [ 348.684486][ T439] usb 6-1: 0:2 : does not exist [ 348.689435][ T439] usb 6-1: unit 5 not found! [ 348.695906][ T439] usb 6-1: USB disconnect, device number 10 [ 348.703955][T11223] udevd[11223]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 349.232516][T11963] block device autoloading is deprecated and will be removed. [ 349.251552][T11965] rust_binder: Write failure EINVAL in pid:210 [ 349.362927][T11972] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:217 [ 349.369710][T11972] netlink: 'syz.5.3857': attribute type 1 has an invalid length. [ 349.399863][T11974] fuse: Bad value for 'fd' [ 350.217852][T12008] netlink: 'syz.5.3870': attribute type 21 has an invalid length. [ 350.225823][T12008] netlink: 388 bytes leftover after parsing attributes in process `syz.5.3870'. [ 350.502523][ T342] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 350.663563][ T342] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.674596][ T342] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.684441][ T342] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 350.697374][ T342] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 350.706455][ T342] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.715139][ T342] usb 5-1: config 0 descriptor?? [ 350.936430][ T342] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 350.949274][ T342] plantronics 0003:047F:FFFF.0014: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 350.982245][ T342] usb 5-1: USB disconnect, device number 34 [ 351.344571][ T342] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 351.505753][ T342] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.515660][ T342] usb 5-1: config 0 interface 0 has no altsetting 0 [ 351.522299][ T342] usb 5-1: New USB device found, idVendor=056a, idProduct=0018, bcdDevice= 0.00 [ 351.531380][ T342] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.540141][ T342] usb 5-1: config 0 descriptor?? [ 351.915996][T12048] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.923397][T12048] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.930603][T12048] bridge_slave_0: entered allmulticast mode [ 351.937079][T12048] bridge_slave_0: entered promiscuous mode [ 351.943840][T12048] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.950906][T12048] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.958064][T12048] bridge_slave_1: entered allmulticast mode [ 351.964453][T12048] bridge_slave_1: entered promiscuous mode [ 352.029433][T12048] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.036554][T12048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.043880][T12048] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.050961][T12048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.076907][T11385] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.084752][T11385] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.096302][T11384] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.103424][T11384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.113478][T11385] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.120555][T11385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.150054][T12048] veth0_vlan: entered promiscuous mode [ 352.162950][T12048] veth1_macvtap: entered promiscuous mode [ 352.193622][ T342] wacom 0003:056A:0018.0015: Unknown device_type for 'HID 056a:0018'. Assuming pen. [ 352.204245][ T342] wacom 0003:056A:0018.0015: hidraw0: USB HID v0.07 Device [HID 056a:0018] on usb-dummy_hcd.4-1/input0 [ 352.216285][ T342] input: Wacom BambooFun 6x8 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0018.0015/input/input40 [ 352.415001][T12025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.423838][T12025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.433361][ T439] usb 5-1: USB disconnect, device number 35 [ 352.457192][T12068] netlink: 'syz.5.3885': attribute type 15 has an invalid length. [ 352.465176][T12068] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3885'. [ 352.490016][T12072] overlayfs: failed to clone lowerpath [ 352.496163][T12072] overlayfs: failed to clone lowerpath [ 352.502220][T12072] overlayfs: failed to clone lowerpath [ 352.508199][T12072] overlayfs: failed to clone lowerpath [ 352.515338][T12072] overlayfs: failed to clone lowerpath [ 352.521830][T12072] overlayfs: failed to clone lowerpath [ 352.529947][T12072] overlayfs: failed to clone lowerpath [ 352.535803][T12072] overlayfs: failed to clone lowerpath [ 352.541813][T12072] overlayfs: failed to clone lowerpath [ 352.542285][T12071] overlayfs: failed to clone lowerpath [ 352.553285][T12072] overlayfs: failed to clone lowerpath [ 352.704413][T12086] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3892'. [ 352.984145][T12092] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 353.137730][ T36] audit: type=1326 audit(1776826819.888:34352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12063 comm="syz.7.3879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47db58eec9 code=0x7fc00000 [ 353.252474][ T375] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 353.412324][ T375] usb 5-1: Using ep0 maxpacket: 8 [ 353.418684][ T375] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 353.427032][ T375] usb 5-1: config 179 has no interface number 0 [ 353.433326][ T375] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 353.444910][ T375] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 353.456638][ T375] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 353.466844][ T375] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 353.480345][ T375] usb 5-1: config 179 interface 65 has no altsetting 0 [ 353.487469][ T375] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 353.496780][ T375] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.546984][T12103] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=12103 comm=syz.5.3899 [ 353.729854][ T342] usb 5-1: USB disconnect, device number 36 [ 354.128355][ T36] audit: type=1400 audit(1776826820.817:34353): avc: denied { getopt } for pid=12105 comm="syz.5.3900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 354.345909][T12126] 9pnet_fd: Insufficient options for proto=fd [ 354.542177][ T342] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 354.702042][ T342] usb 5-1: Using ep0 maxpacket: 16 [ 354.708334][ T342] usb 5-1: config 0 has no interfaces? [ 354.715446][ T342] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 354.725102][ T342] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.733118][ T342] usb 5-1: Product: syz [ 354.737371][ T342] usb 5-1: Manufacturer: syz [ 354.741993][ T342] usb 5-1: SerialNumber: syz [ 354.747832][ T342] usb 5-1: config 0 descriptor?? [ 354.968222][ T9] usb 5-1: USB disconnect, device number 37 [ 355.255178][T12158] netlink: 'syz.5.3920': attribute type 2 has an invalid length. [ 355.526653][ T36] audit: type=1326 audit(1776826822.121:34354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12166 comm="syz.4.3924" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb219b8eec9 code=0x0 [ 355.580973][T12168] rust_binder: Write failure EINVAL in pid:692 [ 355.581451][ T36] audit: type=1326 audit(1776826822.177:34355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12166 comm="syz.4.3924" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb219b8eec9 code=0x0 [ 355.842565][ T439] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 356.004827][ T439] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 356.014751][ T439] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1959, setting to 1024 [ 356.025773][ T439] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 356.037347][ T439] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 356.046457][ T439] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.054558][ T439] usb 5-1: Product: 䰏诖撁薦灀䧝呓맿㊌侲芭䴫妜赨ꈤ熴ꣶㅇ忡堋㓲뭀䃞덜9糏嵬卲㰮떞庀髡噢ᒺ㫟嫚峻㝎埪ឮਨ杋⛫峐⮝ⶳꕶ㝃힕뒍珞ǔᜆ᥷凜섙꜌빦斂➫䇽詹๦챐嬮佹⛯䣙ꤓ牨ՙ祼肂ᒎꗏ䚻栖鉔携ὖ緹堭킢 [ 356.084587][ T439] usb 5-1: Manufacturer: 㐁 [ 356.089242][ T439] usb 5-1: SerialNumber: ࠝ [ 356.523386][ T439] cdc_ncm 5-1:1.0: bind() failure [ 356.529428][ T439] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 356.536320][ T439] cdc_ncm 5-1:1.1: bind() failure [ 356.542543][ T439] usb 5-1: USB disconnect, device number 38 [ 357.071130][T12179] netlink: 5308 bytes leftover after parsing attributes in process `syz.4.3928'. [ 357.494651][ T376] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 357.526608][T12187] syz.6.3931 (12187): /proc/12184/oom_adj is deprecated, please use /proc/12184/oom_score_adj instead. [ 357.527072][ T36] audit: type=1326 audit(1776826824.007:34356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12184 comm="syz.6.3931" exe="/root/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7fc71a78eec9 code=0x0 [ 357.574118][T12190] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 122) [ 357.574141][T12190] rust_binder: Error while translating object. [ 357.584922][T12190] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 357.591260][T12190] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:104 [ 357.601844][T12190] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 357.656548][ T376] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 357.665684][ T376] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.674898][ T376] usb 5-1: config 0 descriptor?? [ 358.322426][ T376] usb 5-1: Cannot set autoneg [ 358.327316][ T376] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 358.339672][ T376] usb 5-1: USB disconnect, device number 39 [ 358.898785][ T36] audit: type=1326 audit(1776826825.283:34357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12206 comm="syz.4.3937" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb219b8eec9 code=0x0 [ 358.934044][T12209] syzkaller1: entered allmulticast mode [ 358.935860][ T36] audit: type=1400 audit(1776826825.311:34358): avc: denied { create } for pid=12208 comm="syz.6.3938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 358.940448][T12209] __vm_enough_memory: pid: 12209, comm: syz.6.3938, bytes: 18014402804453376 not enough memory for the allocation [ 358.973528][T12210] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 358.973552][T12210] rust_binder: Error while translating object. [ 358.984200][T12210] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 358.990763][T12210] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:705 [ 359.104247][T12226] overlayfs: failed to clone upperpath [ 359.314547][T12229] netlink: 88 bytes leftover after parsing attributes in process `syz.6.3944'. [ 359.386623][ T36] audit: type=1400 audit(1776826825.742:34359): avc: denied { ioctl } for pid=12228 comm="syz.6.3944" path="socket:[58560]" dev="sockfs" ino=58560 ioctlcmd=0x7210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 359.798485][T12242] binder: Unknown parameter '' [ 360.524742][ T36] audit: type=1400 audit(1776826826.812:34360): avc: denied { map } for pid=12266 comm="syz.6.3959" path="socket:[58032]" dev="sockfs" ino=58032 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 360.664028][T12271] rust_binder: Write failure EFAULT in pid:156 [ 361.054681][ T439] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 361.227060][ T439] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.236965][ T439] usb 5-1: config 0 interface 0 has no altsetting 0 [ 361.243582][ T439] usb 5-1: New USB device found, idVendor=056a, idProduct=0018, bcdDevice= 0.00 [ 361.252902][ T439] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.261564][ T439] usb 5-1: config 0 descriptor?? [ 361.919786][ T439] wacom 0003:056A:0018.0016: Unknown device_type for 'HID 056a:0018'. Assuming pen. [ 361.939458][ T439] wacom 0003:056A:0018.0016: hidraw0: USB HID v0.07 Device [HID 056a:0018] on usb-dummy_hcd.4-1/input0 [ 361.968081][ T439] input: Wacom BambooFun 6x8 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0018.0016/input/input43 [ 362.123899][ T439] usb 5-1: USB disconnect, device number 40 [ 362.676909][T12312] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3973'. [ 362.699614][ T36] audit: type=1400 audit(1776826828.857:34361): avc: denied { create } for pid=12313 comm="syz.4.3974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 362.747760][T12321] netlink: 'syz.4.3976': attribute type 4 has an invalid length. [ 362.760661][T12321] netlink: 'syz.4.3976': attribute type 17 has an invalid length. [ 363.142741][T12328] overlayfs: failed to clone upperpath [ 363.175748][ T376] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 363.314274][ T376] usb 5-1: device descriptor read/64, error -71 [ 363.570102][ T376] usb 5-1: device descriptor read/64, error -71 [ 363.825885][ T376] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 363.858161][T12358] Invalid ELF header type: 22530 != 1 [ 363.858307][ T36] audit: type=1400 audit(1776826829.945:34362): avc: denied { module_load } for pid=12357 comm="syz.5.3991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 363.964504][ T376] usb 5-1: device descriptor read/64, error -71 [ 364.220285][ T376] usb 5-1: device descriptor read/64, error -71 [ 364.337661][ T376] usb usb5-port1: attempt power cycle [ 364.434350][T12367] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3994'. [ 364.510298][T12381] veth0_to_team: mtu greater than device maximum [ 364.536132][ T36] audit: type=1400 audit(1776826830.574:34363): avc: denied { create } for pid=12383 comm="syz.5.4000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 364.711167][ T376] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 364.733565][ T376] usb 5-1: device descriptor read/8, error -71 [ 364.871883][ T376] usb 5-1: device descriptor read/8, error -71 [ 365.126973][ T376] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 365.148617][ T376] usb 5-1: device descriptor read/8, error -71 [ 365.287205][ T376] usb 5-1: device descriptor read/8, error -71 [ 365.403536][ T376] usb usb5-port1: unable to enumerate USB device [ 365.776905][T12409] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 365.791442][T12411] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 366.343712][ T36] audit: type=1400 audit(1776826832.272:34364): avc: denied { bind } for pid=12426 comm="syz.5.4015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 366.414727][T12430] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.421845][T12430] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.428949][T12430] bridge_slave_0: entered allmulticast mode [ 366.435212][T12430] bridge_slave_0: entered promiscuous mode [ 366.441947][T12430] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.449059][T12430] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.456215][T12430] bridge_slave_1: entered allmulticast mode [ 366.462959][T12430] bridge_slave_1: entered promiscuous mode [ 366.596674][ T36] audit: type=1400 audit(1776826832.507:34365): avc: denied { ioctl } for pid=12442 comm="syz.5.4019" path="socket:[58251]" dev="sockfs" ino=58251 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 366.729554][T11384] bridge_slave_1: left allmulticast mode [ 366.735321][T11384] bridge_slave_1: left promiscuous mode [ 366.741092][T11384] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.748979][T11384] bridge_slave_0: left allmulticast mode [ 366.754651][T11384] bridge_slave_0: left promiscuous mode [ 366.760342][T11384] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.894912][T12430] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.902027][T12430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.909361][T12430] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.916433][T12430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.938031][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.945591][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.953860][T11384] tipc: Left network mode [ 366.961612][T11385] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.968708][T11385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.977913][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.985018][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.011804][T12430] veth0_vlan: entered promiscuous mode [ 367.023810][T12430] veth1_macvtap: entered promiscuous mode [ 367.036327][T11384] veth1_macvtap: left promiscuous mode [ 367.041921][T11384] veth0_vlan: left promiscuous mode [ 368.053473][T12472] overlayfs: failed to resolve './file0': -2 [ 368.156895][ T36] audit: type=1400 audit(1776826833.980:34366): avc: denied { watch watch_reads } for pid=12483 comm="syz.5.4031" path="/" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 368.395454][T12493] netlink: 'syz.8.4033': attribute type 4 has an invalid length. [ 368.541576][T12504] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 368.541625][T12504] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 368.549765][T12504] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:22 [ 368.560843][T12499] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.584572][T12499] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.596577][T12499] bridge_slave_0: entered allmulticast mode [ 368.604184][ T36] audit: type=1400 audit(1776826834.393:34367): avc: denied { ioctl } for pid=12505 comm="syz.8.4036" path="socket:[59591]" dev="sockfs" ino=59591 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 368.629596][T12499] bridge_slave_0: entered promiscuous mode [ 368.636329][T12499] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.643396][T12499] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.651215][T12499] bridge_slave_1: entered allmulticast mode [ 368.658222][T12499] bridge_slave_1: entered promiscuous mode [ 368.768778][T11384] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.775901][T11384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.787256][T11384] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.794370][T11384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.823800][T12499] veth0_vlan: entered promiscuous mode [ 368.836707][T12499] veth1_macvtap: entered promiscuous mode [ 368.984928][ T375] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 369.146111][ T375] usb 9-1: unable to get BOS descriptor or descriptor too short [ 369.154156][ T375] usb 9-1: not running at top speed; connect to a high speed hub [ 369.162865][ T375] usb 9-1: config 12 has an invalid interface number: 184 but max is 0 [ 369.171186][ T375] usb 9-1: config 12 has no interface number 0 [ 369.177419][ T375] usb 9-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 369.187250][ T10] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 369.190108][ T375] usb 9-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 369.205421][ T375] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.213487][ T375] usb 9-1: Product: syz [ 369.217682][ T375] usb 9-1: Manufacturer: syz [ 369.222450][ T375] usb 9-1: SerialNumber: syz [ 369.347125][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 369.353901][ T10] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 369.362559][ T10] usb 10-1: config 0 has no interface number 0 [ 369.369263][ T10] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.380693][ T10] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.391151][ T10] usb 10-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 369.400694][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.410510][ T10] usb 10-1: config 0 descriptor?? [ 369.442162][T12509] __vm_enough_memory: pid: 12509, comm: syz.8.4037, bytes: 18014402804453376 not enough memory for the allocation [ 369.463360][ T375] usb 9-1: USB disconnect, device number 2 [ 369.640189][ T10] uclogic 0003:28BD:0071.0017: failed retrieving string descriptor #100: -71 [ 369.650080][ T10] uclogic 0003:28BD:0071.0017: failed retrieving pen parameters: -71 [ 369.658492][ T10] uclogic 0003:28BD:0071.0017: pen probing failed: -71 [ 369.668595][ T10] uclogic 0003:28BD:0071.0017: failed probing parameters: -71 [ 369.676209][ T10] uclogic 0003:28BD:0071.0017: probe with driver uclogic failed with error -71 [ 369.686322][T12548] netlink: 5 bytes leftover after parsing attributes in process `syz.9.4048'. [ 369.691478][ T10] usb 10-1: USB disconnect, device number 2 [ 369.695780][T12548] 0{X: renamed from bridge_slave_1 (while UP) [ 369.708760][T12548] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 369.759570][T12555] netlink: 'syz.9.4050': attribute type 4 has an invalid length. [ 369.767561][T12556] netlink: 'syz.9.4050': attribute type 4 has an invalid length. [ 369.782460][T12555] exFAT-fs (rnullb0): invalid boot record signature [ 369.789240][T12555] exFAT-fs (rnullb0): failed to read boot sector [ 369.795656][T12555] exFAT-fs (rnullb0): failed to recognize exfat type [ 369.918041][ T36] audit: type=1400 audit(1776826835.622:34368): avc: denied { write } for pid=12561 comm="syz.9.4052" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 369.918124][T12562] random: crng reseeded on system resumption [ 369.941498][ T36] audit: type=1400 audit(1776826835.622:34369): avc: denied { open } for pid=12561 comm="syz.9.4052" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 370.112862][T12571] rust_binder: Write failure EFAULT in pid:190 [ 370.274443][ T10] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 370.306389][ T9] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 370.446170][ T10] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 370.455377][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.463488][ T9] usb 10-1: device descriptor read/64, error -71 [ 370.470636][ T10] usb 9-1: config 0 descriptor?? [ 370.722117][ T9] usb 10-1: device descriptor read/64, error -71 [ 370.798258][T12583] rust_binder: inc_ref_done called when no active inc_refs [ 370.977903][ T9] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 371.127132][ T9] usb 10-1: device descriptor read/64, error -71 [ 371.382909][ T9] usb 10-1: device descriptor read/64, error -71 [ 371.503269][ T9] usb usb10-port1: attempt power cycle [ 371.862693][ T9] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 371.885005][ T9] usb 10-1: device descriptor read/8, error -71 [ 372.023658][ T9] usb 10-1: device descriptor read/8, error -71 [ 372.278277][ T9] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 372.300545][ T9] usb 10-1: device descriptor read/8, error -71 [ 372.439929][ T9] usb 10-1: device descriptor read/8, error -71 [ 372.474611][T12607] overlayfs: failed to clone upperpath [ 372.517064][T12611] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4072'. [ 372.555533][ T9] usb usb10-port1: unable to enumerate USB device [ 372.887812][ T10] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 372.898012][ T10] asix 9-1:0.0: probe with driver asix failed with error -71 [ 372.906366][ T10] usb 9-1: USB disconnect, device number 3 [ 373.347632][T12624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 373.347746][T12624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 373.367517][T12626] binder: Binderfs stats mode cannot be changed during a remount [ 373.655794][ T36] audit: type=1400 audit(1776826839.130:34370): avc: denied { relabelto } for pid=12644 comm="syz.5.4084" name="file0" dev="tmpfs" ino=1144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:pinentry_exec_t:s0" [ 373.682928][ T36] audit: type=1400 audit(1776826839.130:34371): avc: denied { associate } for pid=12644 comm="syz.5.4084" name="file0" dev="tmpfs" ino=1144 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:pinentry_exec_t:s0" [ 373.738568][ T333] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 373.899488][ T333] usb 9-1: config 66 has an invalid interface number: 105 but max is 0 [ 373.907945][ T333] usb 9-1: config 66 has no interface number 0 [ 373.914603][ T333] usb 9-1: config 66 interface 105 has no altsetting 0 [ 373.923192][ T333] usb 9-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.7d [ 373.932415][ T333] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.940467][ T333] usb 9-1: Product: syz [ 373.944719][ T333] usb 9-1: Manufacturer: syz [ 373.949341][ T333] usb 9-1: SerialNumber: syz [ 374.172155][ T333] usb 9-1: USB disconnect, device number 4 [ 374.322977][T12648] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 374.323115][T12648] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 374.372661][ T36] audit: type=1400 audit(1776826839.806:34372): avc: denied { read } for pid=12657 comm="syz.9.4088" path="socket:[61067]" dev="sockfs" ino=61067 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 374.475456][ T36] audit: type=1400 audit(1776826839.909:34373): avc: denied { create } for pid=12668 comm="syz.9.4091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 374.817073][T12678] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 374.825479][T12678] rust_binder: Write failure EINVAL in pid:39 [ 375.149639][T12695] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4102'. [ 375.193866][ T36] audit: type=1326 audit(1776826840.575:34374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12698 comm="syz.5.4104" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f616238eec9 code=0x0 [ 375.620165][T12710] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4107'. [ 375.646232][T12716] Invalid ELF header magic: != ELF [ 375.646388][ T36] audit: type=1400 audit(1776826840.997:34375): avc: denied { module_load } for pid=12715 comm="syz.9.4109" path="/bus" dev="ramfs" ino=59994 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=system permissive=1 [ 375.688516][ T36] audit: type=1400 audit(1776826841.035:34376): avc: denied { bind } for pid=12717 comm="syz.9.4110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 375.910353][T12730] rust_binder: Failed to allocate buffer. len:4294967136, is_oneway:true [ 376.275270][ T376] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 376.446908][ T376] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 376.457938][ T376] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 376.470808][ T376] usb 9-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 376.480018][ T376] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.488825][ T376] usb 9-1: config 0 descriptor?? [ 376.494070][T12743] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 376.502203][ T376] usbhid 9-1:0.0: can't add hid device: -22 [ 376.508174][ T376] usbhid 9-1:0.0: probe with driver usbhid failed with error -22 [ 376.679224][T12757] rust_binder: Write failure EFAULT in pid:201 [ 376.693975][ T36] audit: type=1326 audit(1776826841.983:34377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12727 comm="syz.9.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdc398eec9 code=0x7fc00000 [ 376.742385][ T375] usb 9-1: USB disconnect, device number 5 [ 376.756370][T12765] SELinux: Context system_u:object_r:agp_device_t:s0 is not valid (left unmapped). [ 376.769907][ T36] audit: type=1400 audit(1776826842.058:34378): avc: denied { relabelto } for pid=12763 comm="syz.9.4125" name="file0" dev="tmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:agp_device_t:s0" [ 376.771415][T12768] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4126'. [ 376.802378][ T36] audit: type=1400 audit(1776826842.058:34379): avc: denied { associate } for pid=12763 comm="syz.9.4125" name="file0" dev="tmpfs" ino=175 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:agp_device_t:s0" [ 376.980856][T12797] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4136'. [ 376.989976][T12797] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4136'. [ 376.998968][T12797] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4136'. [ 377.298120][ T36] audit: type=1400 audit(1776826842.545:34380): avc: denied { getopt } for pid=12818 comm="syz.8.4142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 377.336934][T12822] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:226 [ 377.353381][T12825] rust_binder: Write failure EFAULT in pid:228 [ 377.478143][T12833] fuseblk: Bad value for 'group_id' [ 377.489776][T12833] fuseblk: Bad value for 'group_id' [ 377.677568][T12840] fuseblk: Unknown parameter 'fd50x0000000000000003' [ 378.380196][ T36] audit: type=1400 audit(1776826843.568:34381): avc: denied { unmount } for pid=12430 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 378.425082][ T36] audit: type=1400 audit(1776826843.606:34382): avc: denied { module_load } for pid=12885 comm="syz.8.4167" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=62647 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1 [ 378.961549][T12904] Invalid ELF header magic: != ELF [ 379.526193][ T9] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 379.603584][T12920] overlayfs: failed to clone upperpath [ 379.687351][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 379.697635][ T9] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 379.709408][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 379.721939][ T9] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 379.731063][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.739160][ T9] usb 9-1: Product: syz [ 379.743387][ T9] usb 9-1: Manufacturer: syz [ 379.748002][ T9] usb 9-1: SerialNumber: syz [ 380.187454][ T9] cdc_ncm 9-1:1.0: failed GET_NTB_PARAMETERS [ 380.197666][ T9] cdc_ncm 9-1:1.0: bind() failure [ 380.204445][ T9] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 380.215441][ T9] cdc_ncm 9-1:1.1: bind() failure [ 380.220855][T12925] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 380.224121][ T9] usb 9-1: USB disconnect, device number 6 [ 380.243550][T12928] binder: Unknown parameter '00000000000000000000003' [ 380.448744][T12935] netlink: 'syz.9.4182': attribute type 64 has an invalid length. [ 381.034165][ T36] audit: type=1400 audit(1776826846.054:34383): avc: denied { create } for pid=12942 comm="syz.9.4186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 381.084842][T12951] 9pnet_fd: Insufficient options for proto=fd [ 381.113153][T12955] tipc: Started in network mode [ 381.113272][T12954] Unsupported ieee802154 address type: 0 [ 381.118201][T12955] tipc: Node identity 4, cluster identity 4711 [ 381.130363][T12955] tipc: Node number set to 4 [ 381.468104][ T36] audit: type=1400 audit(1776826846.467:34384): avc: denied { nlmsg_read } for pid=12965 comm="syz.8.4194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 381.518675][T12971] netlink: 188 bytes leftover after parsing attributes in process `syz.8.4196'. [ 381.751312][T12978] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 382.471341][T13013] overlayfs: failed to clone upperpath [ 382.747387][T13038] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4223'. [ 382.757376][T13038] +$<: renamed from bridge0 (while UP) [ 384.015548][T13075] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=66 sclass=netlink_audit_socket pid=13075 comm=syz.5.4237 [ 384.030005][T13075] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13075 comm=syz.5.4237 [ 384.123912][T13084] netlink: 596 bytes leftover after parsing attributes in process `syz.5.4240'. [ 384.702146][ T36] audit: type=1400 audit(1776826849.491:34385): avc: denied { execute } for pid=13092 comm="syz.5.4244" path="/memory.events.local" dev="ramfs" ino=62961 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 384.763232][ T36] audit: type=1326 audit(1776826849.557:34386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13094 comm="syz.5.4245" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f616238eec9 code=0x0 [ 385.045727][T13097] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 385.046874][T13098] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 385.053390][T13098] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 385.061455][T13098] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:248 [ 385.134580][T13110] devpts: called with bogus options [ 385.178011][ T36] audit: type=1400 audit(1776826849.941:34387): avc: denied { bind } for pid=13115 comm="syz.8.4252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 385.197676][ T36] audit: type=1400 audit(1776826849.941:34388): avc: denied { name_bind } for pid=13115 comm="syz.8.4252" src=24097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 385.218816][ T36] audit: type=1400 audit(1776826849.941:34389): avc: denied { node_bind } for pid=13115 comm="syz.8.4252" src=24097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 385.372542][T13118] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 385.409108][ T36] audit: type=1400 audit(1776826850.157:34390): avc: denied { getattr } for pid=13123 comm="syz.6.4255" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 385.409143][T13124] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 385.449255][ T36] audit: type=1400 audit(1776826850.195:34391): avc: denied { mounton } for pid=13123 comm="syz.6.4255" path="/91/file0" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 385.470140][T13124] syzkaller0: entered promiscuous mode [ 385.479559][T13124] syzkaller0: entered allmulticast mode [ 385.489688][ T36] audit: type=1400 audit(1776826850.232:34392): avc: denied { relabelfrom } for pid=13123 comm="syz.6.4255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 386.028878][T11384] bridge_slave_1: left allmulticast mode [ 386.034587][T11384] bridge_slave_1: left promiscuous mode [ 386.040285][T11384] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.047989][T11384] bridge_slave_0: left allmulticast mode [ 386.053810][T11384] bridge_slave_0: left promiscuous mode [ 386.059465][T11384] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.205094][T13140] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.212593][T13140] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.219896][T13140] bridge_slave_0: entered allmulticast mode [ 386.226618][T13140] bridge_slave_0: entered promiscuous mode [ 386.233818][T13140] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.240923][T13140] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.251947][T13140] bridge_slave_1: entered allmulticast mode [ 386.258296][T13140] bridge_slave_1: entered promiscuous mode [ 386.265569][T11384] veth1_macvtap: left promiscuous mode [ 386.271121][T11384] veth0_vlan: left promiscuous mode [ 386.401764][T13140] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.408854][T13140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.416193][T13140] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.423312][T13140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.448503][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.456107][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.475213][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.482350][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.490744][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.497846][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.506241][T13164] tipc: Enabling of bearer rejected, failed to enable media [ 386.531666][T13170] netlink: 3 bytes leftover after parsing attributes in process `syz.5.4269'. [ 386.538021][T13140] veth0_vlan: entered promiscuous mode [ 386.557338][T13140] veth1_macvtap: entered promiscuous mode [ 386.558006][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 386.558025][ T36] audit: type=1400 audit(1776826851.231:34395): avc: denied { mounton } for pid=13174 comm="syz.5.4270" path="/file0" dev="rootfs" ino=19853 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 386.576468][T13175] 9pnet_fd: Insufficient options for proto=fd [ 386.755851][T13181] veth0_to_team: mtu greater than device maximum [ 386.762792][T13181] 9pnet_fd: Insufficient options for proto=fd [ 386.851033][T13209] rust_binder: Error while translating object. [ 386.851066][T13209] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 386.857412][T13209] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:5 [ 386.868266][T13209] rust_binder: 5: no such ref 3 [ 386.883930][T13209] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 386.891166][T13209] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 386.891190][T13193] cgroup: fork rejected by pids controller in /syz8 [ 386.905361][T13209] rust_binder: Write failure EFAULT in pid:5 [ 387.182202][T13252] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:13 [ 387.201071][T13254] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:13 [ 387.202347][T13253] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 387.320642][T13281] 9pnet_fd: Insufficient options for proto=fd [ 387.536747][ T36] audit: type=1400 audit(1776826852.159:34396): avc: denied { bind } for pid=13291 comm="syz.0.4285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 388.182137][T13316] netlink: 'syz.9.4293': attribute type 11 has an invalid length. [ 388.540375][T13343] fuseblk: Bad value for 'fd' [ 388.557157][T13347] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 388.557688][T13347] rust_binder: Error while translating object. [ 388.564166][T13347] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 388.570483][T13347] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:29 [ 388.965155][T13366] cgroup: fork rejected by pids controller in /syz9 [ 388.976163][T13389] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 389.028426][T13411] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 389.028764][T13411] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:42 [ 389.050471][ T36] audit: type=1400 audit(1776826853.576:34397): avc: denied { remount } for pid=13414 comm="syz.0.4319" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 389.115011][T13430] rust_binder: Error while translating object. [ 389.115064][T13430] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 389.127112][T13430] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:49 [ 389.170460][T13445] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 389.189284][T13445] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:51 [ 389.255845][ T36] audit: type=1400 audit(1776826853.764:34398): avc: denied { map } for pid=13534 comm="syz.0.4326" path="socket:[66792]" dev="sockfs" ino=66792 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 389.256536][T13535] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 389.265036][ T36] audit: type=1400 audit(1776826853.764:34399): avc: denied { read write accept } for pid=13534 comm="syz.0.4326" path="socket:[66792]" dev="sockfs" ino=66792 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 389.290748][T13535] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 389.370684][T13545] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 389.377581][T13545] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 389.475666][T13563] __vm_enough_memory: pid: 13563, comm: syz.0.4335, bytes: 18014402804453376 not enough memory for the allocation [ 389.802885][T13570] /dev/loop0: Can't lookup blockdev [ 390.387408][ T10] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 390.481486][ T36] audit: type=1400 audit(1776826854.918:34400): avc: denied { map } for pid=13588 comm="syz.5.4345" path="socket:[66393]" dev="sockfs" ino=66393 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_kobject_uevent_socket permissive=1 [ 390.507368][ T36] audit: type=1400 audit(1776826854.918:34401): avc: denied { accept } for pid=13588 comm="syz.5.4345" path="socket:[66393]" dev="sockfs" ino=66393 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_kobject_uevent_socket permissive=1 [ 390.516158][T13591] /dev/loop0: Can't lookup blockdev [ 390.538966][T13591] netlink: 92 bytes leftover after parsing attributes in process `syz.5.4346'. [ 390.557953][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 390.575114][ T10] usb 1-1: config 0 has an invalid interface number: 72 but max is 0 [ 390.584678][ T10] usb 1-1: config 0 has no interface number 0 [ 390.591248][ T10] usb 1-1: config 0 interface 72 has no altsetting 0 [ 390.601874][ T10] usb 1-1: New USB device found, idVendor=6069, idProduct=0f39, bcdDevice=e8.f9 [ 390.611108][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.624353][ T10] usb 1-1: Product: syz [ 390.628607][ T10] usb 1-1: Manufacturer: syz [ 390.633409][ T10] usb 1-1: SerialNumber: syz [ 390.638804][ T10] usb 1-1: config 0 descriptor?? [ 390.847010][T13630] fuse: Bad value for 'fd' [ 390.916591][T13582] rust_binder: Write failure EINVAL in pid:87 [ 390.917661][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 390.931370][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 390.938859][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 390.946313][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 390.953814][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 390.961247][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 390.968789][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 390.976290][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 390.983752][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 390.991216][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 390.998752][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.006230][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.013651][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.021091][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.028523][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.035924][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.043366][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.050821][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.058246][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.065753][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.073223][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.080727][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.088149][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.095584][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.103010][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.110507][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.118031][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.125482][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.133833][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.141261][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.148787][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.156315][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.163755][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.171235][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.178746][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.186162][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.193640][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.201077][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.208519][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.215937][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.223715][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.231190][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.238615][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.246076][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.253528][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.260935][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.268444][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.275891][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.283357][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.290787][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.298214][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.305703][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.313122][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.320571][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.328055][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.335462][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.342915][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.350346][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.357947][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.365438][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.372928][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.380402][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.387849][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.403418][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.410974][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.420362][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.427867][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.436268][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x0 [ 391.443884][ T9] hid-generic 0003:0008:000F.0018: unknown main item tag 0x2 [ 391.452691][ T9] hid-generic 0003:0008:000F.0018: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 391.481723][T13645] fido_id[13645]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 391.497703][ T10] usb 1-1: MIDIStreaming interface descriptor not found [ 391.510460][ T10] usb 1-1: USB disconnect, device number 79 [ 391.513228][T13653] netlink: 25 bytes leftover after parsing attributes in process `syz.8.4368'. [ 391.531491][ T9958] udevd[9958]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.72/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 391.550020][ T36] audit: type=1400 audit(1776826855.922:34402): avc: denied { ioctl } for pid=13654 comm="syz.8.4369" path="socket:[66490]" dev="sockfs" ino=66490 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 392.049140][T13671] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:92 [ 392.240438][T13684] overlayfs: failed to clone lowerpath [ 392.378333][T13690] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:103 [ 392.408345][T13694] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4383'. [ 392.493631][ T36] audit: type=1400 audit(7107438496.651:34403): avc: denied { accept } for pid=13701 comm="syz.8.4386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 392.734101][T13726] 9pnet_fd: Insufficient options for proto=fd [ 393.494525][T13754] raw_sendmsg: syz.5.4406 forgot to set AF_INET. Fix it! [ 393.721139][T13772] overlayfs: failed to clone upperpath [ 393.972117][T13782] rust_binder: 110: no such ref 0 [ 393.978697][T13782] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 393.986126][T13782] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:110 [ 393.989627][T13767] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4409'. [ 394.206020][T13791] 9pnet_fd: p9_fd_create_tcp (13791): problem connecting socket to 127.0.0.1 [ 394.215193][T13792] 9pnet_fd: p9_fd_create_tcp (13792): problem connecting socket to 127.0.0.1 [ 394.268546][T13806] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4423'. [ 394.288463][T13808] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 394.322980][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.331163][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.337832][T13813] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 394.338206][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.352571][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.359083][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.365627][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.372084][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.379068][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.385637][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.392181][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.398713][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.405221][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.412237][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.418782][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.425244][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.436718][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.443471][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.450389][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.456865][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.463374][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.469955][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.476419][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.482921][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.489455][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.495945][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.502455][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.509048][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.515694][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.522254][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.528741][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.535237][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.541692][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.548395][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.555361][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.561831][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.568377][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.574853][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.581324][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.587855][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.594290][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.600886][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.607342][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.613832][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.620294][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.626741][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.633259][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.639704][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.646191][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.652672][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.659111][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.665619][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.672216][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.678657][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.685134][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.691584][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.698077][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.704575][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.711033][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.717723][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.724187][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.730682][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.737181][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.743613][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.750084][T13812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 394.782024][T13823] rust_binder: 131: no such ref 0 [ 394.933203][T13831] rust_binder: Error while translating object. [ 394.933238][T13831] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 394.939588][T13831] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:133 [ 395.006539][T13833] tipc: Started in network mode [ 395.020631][T13833] tipc: Node identity 4, cluster identity 4711 [ 395.026860][T13833] tipc: Node number set to 4 [ 395.301064][ T10] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 395.462138][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.473182][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.482971][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 395.495941][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 395.505021][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.513670][ T10] usb 1-1: config 0 descriptor?? [ 395.752018][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 395.759083][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 395.774743][ T10] usb 1-1: USB disconnect, device number 80 [ 395.810319][ T36] audit: type=1400 audit(7107438499.765:34404): avc: denied { read } for pid=13847 comm="syz.0.4437" name="file0" dev="tmpfs" ino=283 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 395.814102][T13848] overlay: ./file0 is not a directory [ 395.841468][T13848] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 396.217691][ T10] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 396.377562][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 396.383865][ T10] usb 1-1: config 0 has no interfaces? [ 396.390895][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 396.400057][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.408082][ T10] usb 1-1: Product: syz [ 396.412306][ T10] usb 1-1: Manufacturer: syz [ 396.416925][ T10] usb 1-1: SerialNumber: syz [ 396.422853][ T10] usb 1-1: config 0 descriptor?? [ 396.642686][ T36] audit: type=1400 audit(7107438500.544:34405): avc: denied { accept } for pid=13851 comm="syz.0.4439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 396.643871][ T375] usb 1-1: USB disconnect, device number 81 [ 397.287790][T13862] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 397.287927][T13862] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:151 [ 397.330203][T13866] netlink: 'syz.8.4446': attribute type 4 has an invalid length. [ 397.370115][ T36] audit: type=1400 audit(7107438501.229:34406): avc: denied { create } for pid=13867 comm="syz.8.4447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 397.571395][ T375] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 397.732435][ T375] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 397.743529][ T375] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 397.756513][ T375] usb 1-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 397.765625][ T375] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.774666][ T375] usb 1-1: config 0 descriptor?? [ 397.780148][T13864] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 397.788790][ T375] usbhid 1-1:0.0: can't add hid device: -22 [ 397.794773][ T375] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 398.011970][ T7616] usb 1-1: USB disconnect, device number 82 [ 398.041083][T13827] 9pnet_fd: p9_fd_create_tcp (13827): problem connecting socket to 127.0.0.1 [ 398.568240][T13892] 9p filesystem being mounted at /56/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 398.602452][T13895] overlayfs: failed to clone upperpath [ 398.602586][ T36] audit: type=1326 audit(7107438502.383:34407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13893 comm="syz.5.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616238eec9 code=0x7ffc0000 [ 398.631766][ T36] audit: type=1326 audit(7107438502.383:34408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13893 comm="syz.5.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616238eec9 code=0x7ffc0000 [ 398.832753][T13920] binder: Unknown parameter '0x0000000000000000' [ 399.032662][ T36] audit: type=1400 audit(7107438502.796:34409): avc: denied { setattr } for pid=13929 comm="syz.0.4470" path="/" dev="configfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 399.078922][T13934] binder: Unknown parameter '' [ 399.085810][ T36] audit: type=1400 audit(7107438502.796:34410): avc: denied { map } for pid=13929 comm="syz.0.4470" path="/" dev="configfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 399.115827][T13936] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 399.115860][T13936] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 399.123446][T13938] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false [ 399.144421][T13941] TCP: TCP_TX_DELAY enabled [ 399.294214][T13950] rust_binder: Write failure EFAULT in pid:184 [ 399.616784][T13964] 9p filesystem being mounted at /309/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 399.735403][T13974] netlink: 'syz.5.4484': attribute type 12 has an invalid length. [ 399.972902][ T36] audit: type=1400 audit(7107438503.668:34411): avc: denied { mount } for pid=14009 comm="syz.5.4496" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 400.096037][ T36] audit: type=1326 audit(7107438503.781:34412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14022 comm="syz.8.4500" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f05efd8eec9 code=0x0 [ 400.150482][T14026] netlink: 64 bytes leftover after parsing attributes in process `syz.8.4500'. [ 400.377475][T14036] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:195 [ 400.667781][T14062] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14062 comm=syz.9.4511 [ 400.989341][T14107] overlay: Unknown parameter 'smackfsfloor' [ 400.996267][T14107] fuse: Unknown parameter 'roup_id' [ 401.295716][T14137] 9pnet_fd: Insufficient options for proto=fd [ 401.314885][ T36] audit: type=1326 audit(7107438504.935:34413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14138 comm="syz.5.4539" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f616238eec9 code=0x0 [ 401.488043][T14160] rust_binder: Error while translating object. [ 401.488094][T14160] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 401.496684][T14160] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:204 [ 401.788458][T14180] netlink: 26 bytes leftover after parsing attributes in process `syz.9.4548'. [ 402.648417][T14202] 9p filesystem being mounted at /77/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 402.721380][T14204] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 402.721842][T14204] rust_binder: Error in use_page_slow: ESRCH [ 402.728408][T14204] rust_binder: use_range failure ESRCH [ 402.735540][T14204] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 402.741479][T14204] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 402.751612][T14204] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:222 [ 402.805388][T14213] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1015 sclass=netlink_tcpdiag_socket pid=14213 comm=syz.0.4559 [ 402.805753][T14214] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1015 sclass=netlink_tcpdiag_socket pid=14214 comm=syz.0.4559 [ 402.841252][T14212] rust_binder: 226: no such ref 1 [ 402.846465][T14212] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:226 [ 403.273848][T14256] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4575'. [ 404.702097][T14355] 9p filesystem being mounted at /135/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 405.373539][ T1477] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 405.373563][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 405.537204][T14385] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4618'. [ 405.671739][ T36] audit: type=1326 audit(7107438509.016:34414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14393 comm="syz.8.4621" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f05efd8eec9 code=0x0 [ 405.838168][T14402] devpts: called with bogus options [ 406.117226][T14408] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 406.210008][T14413] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:249 [ 406.222316][T14413] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch [ 406.357016][T14418] rust_binder: Error while translating object. [ 406.357074][T14418] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 406.363478][T14418] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:253 [ 406.673901][ T7616] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 406.845726][ T7616] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.856725][ T7616] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.866509][ T7616] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 406.879465][ T7616] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 406.888542][ T7616] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.897298][ T7616] usb 1-1: config 0 descriptor?? [ 407.331595][ T7616] plantronics 0003:047F:FFFF.0019: invalid report_count -1222977125 [ 407.340782][ T7616] plantronics 0003:047F:FFFF.0019: item 0 4 1 9 parsing failed [ 407.348702][ T7616] plantronics 0003:047F:FFFF.0019: parse failed [ 407.355051][ T7616] plantronics 0003:047F:FFFF.0019: probe with driver plantronics failed with error -22 [ 407.545871][ T7616] usb 1-1: USB disconnect, device number 83 [ 408.156066][T14464] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4644'. [ 408.165309][T14464] af_packet: tpacket_rcv: packet too big, clamped from 72 to 4294967272. macoff=96 [ 408.175574][T14463] rust_binder: Got transaction with invalid offset. [ 408.175574][T14464] rust_binder: Got transaction with invalid offset. [ 408.175611][T14463] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 408.182333][T14464] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 408.189275][T14463] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:263 [ 408.199007][T14464] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:263 [ 408.348875][T14468] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 408.358315][T14468] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:268 [ 408.379532][T14471] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:271 [ 408.389246][T14472] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 408.446576][T14483] netlink: 'syz.8.4651': attribute type 8 has an invalid length. [ 408.649228][T14499] /dev/loop0: Can't lookup blockdev [ 408.668703][ T36] audit: type=1400 audit(7107438511.831:34415): avc: denied { mounton } for pid=14500 comm="syz.0.4658" path="/proc/280/task" dev="proc" ino=70911 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 408.711886][T14504] 9pnet_fd: Insufficient options for proto=fd [ 408.922873][ T375] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 409.082773][ T375] usb 1-1: Using ep0 maxpacket: 16 [ 409.088999][ T375] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 409.099366][ T375] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 409.113231][ T375] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 409.122359][ T375] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 409.130392][ T375] usb 1-1: SerialNumber: syz [ 409.137425][ T375] usb 1-1: bad CDC descriptors [ 409.351131][T14501] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 409.351163][T14501] rust_binder: Read failure Err(EFAULT) in pid:280 [ 409.362003][ T333] usb 1-1: USB disconnect, device number 84 [ 409.953781][T14522] fuseblk: Bad value for 'fd' [ 410.031920][T14532] 9p filesystem being mounted at /100/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 410.043003][ T36] audit: type=1400 audit(7107438513.125:34416): avc: denied { setattr } for pid=14531 comm="syz.0.4666" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 410.050878][T14532] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 410.065585][T14532] rust_binder: Read failure Err(EFAULT) in pid:283 [ 410.065874][ T36] audit: type=1400 audit(7107438513.125:34417): avc: denied { write } for pid=14531 comm="syz.0.4666" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 410.158123][T14542] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4672'. [ 410.249618][ T36] audit: type=1400 audit(7107438513.313:34418): avc: denied { read } for pid=14539 comm="syz.9.4674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 410.436396][ T333] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 410.599143][ T333] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 410.608276][ T333] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.616300][ T333] usb 1-1: Product: syz [ 410.620538][ T333] usb 1-1: Manufacturer: syz [ 410.625163][ T333] usb 1-1: SerialNumber: syz [ 411.621377][T14556] netlink: 'syz.9.4680': attribute type 6 has an invalid length. [ 411.684548][T14558] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14558 comm=syz.9.4681 [ 411.723001][T14564] netlink: 'syz.9.4683': attribute type 2 has an invalid length. [ 412.489077][ T36] audit: type=1400 audit(7107438515.415:34419): avc: denied { audit_write } for pid=14590 comm="syz.8.4692" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 413.357133][ T333] usb 1-1: USB disconnect, device number 85 [ 413.372326][T14608] 9p filesystem being mounted at /102/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 413.587190][ T36] audit: type=1400 audit(7107438516.447:34420): avc: denied { read } for pid=14609 comm="syz.0.4700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 414.229181][T14621] overlayfs: failed to clone upperpath [ 414.940170][T14654] netlink: 'syz.0.4714': attribute type 4 has an invalid length. [ 414.956550][T14658] overlayfs: failed to clone lowerpath [ 414.957106][T14654] netlink: 'syz.0.4714': attribute type 4 has an invalid length. [ 415.018025][T14660] netlink: 'syz.0.4716': attribute type 12 has an invalid length. [ 415.029211][T14660] netlink: 'syz.0.4716': attribute type 5 has an invalid length. [ 415.980692][T14683] netlink: 'syz.9.4722': attribute type 2 has an invalid length. [ 416.170411][ T36] audit: type=1400 audit(7107438518.867:34421): avc: denied { remount } for pid=14709 comm="syz.0.4731" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 416.594223][ T109] udevd[109]: worker [9962] /devices/virtual/block/loop2 is taking a long time [ 416.609511][T14719] netlink: 'syz.0.4735': attribute type 4 has an invalid length. [ 416.617297][T14719] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4735'. [ 416.630961][T14719] 9pnet_fd: Insufficient options for proto=fd [ 416.758611][T14756] bridge0: port 3(dummy0) entered blocking state [ 416.765043][T14756] bridge0: port 3(dummy0) entered disabled state [ 416.771557][T14756] dummy0: entered allmulticast mode [ 416.777209][T14756] dummy0: entered promiscuous mode [ 416.782711][T14756] bridge0: port 3(dummy0) entered blocking state [ 416.789338][T14756] bridge0: port 3(dummy0) entered forwarding state [ 417.505162][T14767] netlink: 'syz.8.4748': attribute type 6 has an invalid length. [ 417.512959][T14767] netlink: 'syz.8.4748': attribute type 4 has an invalid length. [ 417.521065][T14767] netlink: 'syz.8.4748': attribute type 6 has an invalid length. [ 417.529184][T14767] netlink: 5944 bytes leftover after parsing attributes in process `syz.8.4748'. [ 417.563298][T14772] netlink: 'syz.0.4750': attribute type 5 has an invalid length. [ 417.572163][T14772] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.4750'. [ 417.586617][T14776] tmpfs: Unknown parameter '' [ 417.592691][T14776] sit0: entered promiscuous mode [ 417.598803][T14776] netlink: 1 bytes leftover after parsing attributes in process `syz.8.4752'. [ 417.984866][ T36] audit: type=1400 audit(7107438520.575:34422): avc: denied { create } for pid=14777 comm="syz.9.4753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 418.017611][T14781] /dev/loop0: Can't lookup blockdev [ 418.299421][T14803] 9pnet_fd: Insufficient options for proto=fd [ 419.551046][T14822] tipc: Enabling of bearer rejected, failed to enable media [ 420.374765][ T36] audit: type=1400 audit(7107438522.809:34423): avc: denied { setopt } for pid=14842 comm="syz.0.4773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 420.379714][T14843] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=14843 comm=syz.0.4773 [ 420.408091][T14843] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=14843 comm=syz.0.4773 [ 421.374832][T14860] 9pnet_fd: Insufficient options for proto=fd [ 421.403298][T14866] 9pnet_fd: Insufficient options for proto=fd [ 422.206449][T14892] overlayfs: failed to clone upperpath [ 422.630816][T14903] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.637898][T14903] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.645109][T14903] bridge_slave_0: entered allmulticast mode [ 422.651486][T14903] bridge_slave_0: entered promiscuous mode [ 422.657938][T14903] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.665024][T14903] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.672126][T14903] bridge_slave_1: entered allmulticast mode [ 422.678486][T14903] bridge_slave_1: entered promiscuous mode [ 422.748309][T14903] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.755486][T14903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.762834][T14903] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.769946][T14903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.787305][ T36] audit: type=1326 audit(7107438525.070:34424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14926 comm="syz.8.4801" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f05efd8eec9 code=0x0 [ 422.810643][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.818174][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.828572][T11381] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.835656][T11381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.845043][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.852143][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.881261][T14903] veth0_vlan: entered promiscuous mode [ 422.893684][T14903] veth1_macvtap: entered promiscuous mode [ 423.260899][T14930] /dev/loop0: Can't lookup blockdev [ 424.178602][T14980] validate_nla: 3 callbacks suppressed [ 424.178625][T14980] netlink: 'syz.9.4818': attribute type 5 has an invalid length. [ 424.191918][T14980] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4818'. [ 424.201945][T14980] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4818'. [ 424.934182][T15011] overlayfs: cannot append lower layer [ 425.448928][ T36] audit: type=1400 audit(7107438527.575:34425): avc: denied { create } for pid=15032 comm="syz.0.4837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 425.904803][T15035] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=37892 sclass=netlink_xfrm_socket pid=15035 comm=syz.9.4838 [ 425.975944][T15042] IPv6: NLM_F_CREATE should be specified when creating new route [ 426.067074][T15047] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 426.072709][ T36] audit: type=1400 audit(7107438528.157:34426): avc: denied { mounton } for pid=15046 comm="syz.0.4842" path="/file1/file0" dev="rootfs" ino=70540 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 426.074237][T15047] overlayfs: failed to set xattr on upper [ 426.102817][T15047] overlayfs: ...falling back to redirect_dir=nofollow. [ 426.109772][T15047] overlayfs: ...falling back to uuid=null. [ 426.936760][T15087] fuse: Unknown parameter 'rou0]id' [ 426.942878][T15087] fuse: Bad value for 'fd' [ 426.943140][T15088] fuse: Unknown parameter '0x0000000000000007' [ 427.636445][T15121] 9pnet_fd: Insufficient options for proto=fd [ 427.726160][T15140] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4873'. [ 427.824254][T15149] 9pnet_fd: Insufficient options for proto=fd [ 428.005358][T15164] 9p filesystem being mounted at /182/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 428.678241][T15179] netlink: 'syz.9.4888': attribute type 4 has an invalid length. [ 428.791124][T15187] overlayfs: failed to clone upperpath [ 429.233794][T15204] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4897'. [ 429.456678][ T36] audit: type=1326 audit(7107438531.337:34427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15207 comm="syz.9.4898" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efdc398eec9 code=0x0 [ 430.293263][T15225] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4904'. [ 430.304441][T15225] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4904'. [ 430.667160][T15254] fuse: Bad value for 'fd' [ 431.853415][T15327] 9p filesystem being mounted at /227/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 431.902279][T15334] netlink: 'syz.9.4943': attribute type 4 has an invalid length. [ 431.910230][T15334] netlink: 'syz.9.4943': attribute type 2 has an invalid length. [ 431.952985][T15341] /dev/loop0: Can't lookup blockdev [ 432.114731][T15362] tmpfs: Unknown parameter '0x0000000000000003' [ 432.161652][T15368] 9pnet_fd: Insufficient options for proto=fd [ 432.444030][T15394] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4964'. [ 432.453055][T15394] erspan0: default FDB implementation only supports local addresses [ 433.059749][T15398] overlay: filesystem on ./bus is read-only [ 433.753877][ T36] audit: type=1400 audit(7107438535.362:34428): avc: denied { read } for pid=15415 comm="syz.8.4973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 434.068706][ T36] audit: type=1326 audit(7107438535.662:34429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15449 comm="syz.0.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd827d8eec9 code=0x7ffc0000 [ 434.098896][ T36] audit: type=1326 audit(7107438535.662:34430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15449 comm="syz.0.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd827d8eec9 code=0x7ffc0000 [ 434.122832][ T36] audit: type=1326 audit(7107438535.681:34431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15449 comm="syz.0.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd827d8d710 code=0x7ffc0000 [ 434.146621][ T36] audit: type=1326 audit(7107438535.681:34432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15449 comm="syz.0.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd827d8d710 code=0x7ffc0000 [ 434.170406][ T36] audit: type=1326 audit(7107438535.681:34433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15449 comm="syz.0.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd827d8eec9 code=0x7ffc0000 [ 434.194090][ T36] audit: type=1326 audit(7107438535.681:34434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15449 comm="syz.0.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd827d8eec9 code=0x7ffc0000 [ 434.221017][T15443] 9pnet_fd: Insufficient options for proto=fd [ 434.228589][ T36] audit: type=1326 audit(7107438535.690:34435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15449 comm="syz.0.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fd827d8eec9 code=0x7ffc0000 [ 434.252387][ T36] audit: type=1326 audit(7107438535.690:34436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15449 comm="syz.0.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd827d8eec9 code=0x7ffc0000 [ 434.276364][ T36] audit: type=1326 audit(7107438535.690:34437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15449 comm="syz.0.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd827d8eec9 code=0x7ffc0000 [ 434.380372][T15460] tmpfs: Unknown parameter 'id' [ 435.229539][T15510] tipc: Enabled bearer , priority 26 [ 435.927819][T15572] /dev/loop0: Can't lookup blockdev [ 435.989345][T15580] incfs: Can't find or create .index dir in ./bus [ 435.995842][T15580] incfs: mount failed -1 [ 436.000931][T15580] incfs: Can't find or create .index dir in ./bus [ 436.007612][T15580] incfs: mount failed -1 [ 437.245186][T15631] overlayfs: failed to clone lowerpath [ 437.508175][T15641] cgroup: fork rejected by pids controller in /syz0 [ 437.581702][T15791] 9p filesystem being mounted at /277/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 439.325369][T15827] netlink: 'syz.9.5072': attribute type 27 has an invalid length. [ 439.428196][T15840] netlink: 'syz.9.5075': attribute type 12 has an invalid length. [ 439.466819][T15848] overlayfs: failed to resolve './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 439.485984][T15838] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.585345][T15838] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.592989][T15838] bridge_slave_0: entered allmulticast mode [ 439.600400][T15838] bridge_slave_0: entered promiscuous mode [ 439.607463][T15838] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.614839][T15838] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.623032][T15838] bridge_slave_1: entered allmulticast mode [ 439.629438][T15838] bridge_slave_1: entered promiscuous mode [ 439.639572][T15868] 9pnet_fd: Insufficient options for proto=fd [ 439.667603][T15873] netlink: 'syz.9.5085': attribute type 4 has an invalid length. [ 439.675715][T15873] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.5085'. [ 439.703444][T15875] 9pnet_fd: Insufficient options for proto=fd [ 439.754133][T15838] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.761279][T15838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.768653][T15838] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.775781][T15838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.841289][T11381] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.848964][T11381] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.865878][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.873260][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.881367][T11381] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 439.889222][T11381] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 439.899329][T11381] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.906402][T11381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.914858][ T10] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 439.952518][T15838] veth0_vlan: entered promiscuous mode [ 439.968545][T15838] veth1_macvtap: entered promiscuous mode [ 439.992668][T15887] 9pnet_fd: Insufficient options for proto=fd [ 439.999207][T15888] 9pnet_fd: Insufficient options for proto=fd [ 440.274143][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 440.274165][ T36] audit: type=1400 audit(7107438541.479:34459): avc: denied { lock } for pid=15908 comm="syz.8.5095" path="socket:[73864]" dev="sockfs" ino=73864 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 440.446179][T15923] 9pnet_fd: Insufficient options for proto=fd [ 440.558111][ T10] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 440.846046][ T9] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 441.064575][T15964] tc_dump_action: action bad kind [ 441.088513][T15971] netlink: 'syz.0.5115': attribute type 1 has an invalid length. [ 441.177862][T15994] 9p filesystem being mounted at /295/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 441.331142][T16002] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=261 sclass=netlink_route_socket pid=16002 comm=syz.9.5124 [ 441.908204][T16008] fuseblk: Unknown parameter 'euid' [ 442.048813][T16034] 9pnet_fd: Insufficient options for proto=fd [ 442.072426][ T36] audit: type=1400 audit(7107438543.177:34460): avc: denied { mount } for pid=16035 comm="syz.0.5140" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 442.112684][T16040] Invalid ELF header magic: != ELF [ 442.131548][T16044] 9pnet_fd: Insufficient options for proto=fd [ 442.138652][T16044] 9pnet_fd: Insufficient options for proto=fd [ 442.152339][ T36] audit: type=1326 audit(7107438543.243:34461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16046 comm="syz.0.5144" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd827d8eec9 code=0x0 [ 442.205557][T16057] can: request_module (can-proto-0) failed. [ 442.666145][T16083] 9p filesystem being mounted at /16/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 443.649950][T16112] overlayfs: failed to clone upperpath [ 443.678000][T16116] tipc: New replicast peer: 139.255.255.255 [ 443.684264][T16116] tipc: Enabled bearer , priority 10 [ 443.874424][ T36] audit: type=1326 audit(7107438544.866:34462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16130 comm="syz.0.5172" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd827d8eec9 code=0x0 [ 443.926113][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 444.230348][T16134] overlayfs: missing 'lowerdir' [ 444.885219][T16156] overlay: filesystem on ./bus is read-only [ 445.331344][T16159] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.409648][T16168] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5185'. [ 445.447598][ T36] audit: type=1400 audit(7107438546.330:34463): avc: denied { accept } for pid=16170 comm="syz.0.5186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 445.514963][T16184] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5190'. [ 446.439631][T16199] netlink: 'syz.9.5196': attribute type 46 has an invalid length. [ 446.493871][T16217] 9pnet_fd: Insufficient options for proto=fd [ 446.862763][T16227] tipc: Enabling of bearer rejected, failed to enable media [ 446.976093][T16246] overlayfs: failed to clone upperpath [ 446.976148][T16247] overlayfs: failed to clone upperpath [ 447.074573][T16253] overlayfs: failed to clone upperpath [ 447.202703][T16270] 9p filesystem being mounted at /280/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 447.228577][T16279] overlayfs: failed to clone upperpath [ 447.310941][T16287] incfs: Error accessing: ./file0. [ 447.316192][T16287] incfs: mount failed -20 [ 447.321209][T16287] 9pnet: Could not find request transport: frfdno=@rZWsks)T99j"ohXb88u~"2ƻ?hjާoL [ 448.694142][T16307] /dev/loop0: Can't lookup blockdev [ 448.700408][T16307] /dev/loop0: Can't lookup blockdev [ 448.722701][T16313] /dev/rnullb0: Can't lookup blockdev [ 449.329919][T16335] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5249'. [ 449.339093][T16335] tipc: Invalid UDP bearer configuration [ 449.339120][T16335] tipc: Enabling of bearer rejected, failed to enable media [ 449.376429][T16340] /dev/loop0: Can't lookup blockdev [ 449.382164][T16340] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 450.178247][T16355] /dev/rnullb0: Can't lookup blockdev [ 450.436518][T16373] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.443746][T16373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.594647][T16386] overlayfs: failed to clone upperpath [ 450.600858][T16386] overlayfs: failed to clone upperpath [ 450.607012][T16386] overlayfs: failed to clone upperpath [ 450.613173][T16386] overlayfs: failed to clone upperpath [ 450.618954][T16386] overlayfs: failed to clone upperpath [ 450.624787][T16386] overlayfs: failed to clone upperpath [ 450.630622][T16386] overlayfs: failed to clone upperpath [ 450.636427][T16386] overlayfs: failed to clone upperpath [ 450.642474][T16386] overlayfs: failed to clone upperpath [ 450.648432][T16386] overlayfs: failed to clone upperpath [ 450.654494][T16386] overlayfs: failed to resolve './file1': -2 [ 451.139009][ T36] audit: type=1400 audit(7107438551.677:34464): avc: denied { create } for pid=16412 comm="syz.8.5279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 451.723247][T16422] /dev/rnullb0: Can't lookup blockdev [ 451.744556][T16424] /dev/rnullb0: Can't lookup blockdev [ 451.773645][T16431] fuse: Unknown parameter 'gd' [ 451.803552][T16435] overlayfs: failed to clone upperpath [ 451.867706][T16448] netlink: 'syz.8.5292': attribute type 7 has an invalid length. [ 451.875545][T16448] netlink: 'syz.8.5292': attribute type 5 has an invalid length. [ 451.883369][T16448] netlink: 17 bytes leftover after parsing attributes in process `syz.8.5292'. [ 451.906025][T16450] 9pnet_fd: Insufficient options for proto=fd [ 451.936446][T16455] tipc: Enabling of bearer rejected, failed to enable media [ 452.357245][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 452.504407][T16467] 9p filesystem being mounted at /339/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 453.101501][T16479] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5302'. [ 453.649914][T16498] IPv6: Can't replace route, no match found [ 453.684135][T16503] /dev/rnullb0: Can't lookup blockdev [ 453.884911][T16509] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5314'. [ 454.618663][T16529] netlink: 'syz.8.5321': attribute type 16 has an invalid length. [ 454.626663][T16529] netlink: 'syz.8.5321': attribute type 3 has an invalid length. [ 454.634509][T16529] netlink: 64066 bytes leftover after parsing attributes in process `syz.8.5321'. [ 454.645131][T16529] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5321'. [ 454.702893][T16539] No source specified [ 454.815338][T16556] 9p filesystem being mounted at /64/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 454.899812][T16571] overlayfs: failed to clone upperpath [ 455.769013][ T37] INFO: task udevd:9962 blocked for more than 122 seconds. [ 455.776554][ T37] Not tainted syzkaller #0 [ 455.781968][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 455.790914][ T37] task:udevd state:D stack:0 pid:9962 tgid:9962 ppid:109 flags:0x00000000 [ 455.801268][ T37] Call Trace: [ 455.804792][ T37] [ 455.807752][ T37] __schedule+0x1322/0x1df0 [ 455.812373][ T37] ? __sched_text_start+0x10/0x10 [ 455.817529][ T37] ? __kasan_check_write+0x18/0x20 [ 455.822714][ T37] ? __mutex_add_waiter+0x17f/0x290 [ 455.827952][ T37] ? __kasan_check_write+0x18/0x20 [ 455.833163][ T37] ? trace_contention_begin+0xc0/0xc0 [ 455.838664][ T37] schedule+0xc6/0x240 [ 455.842802][ T37] schedule_preempt_disabled+0x14/0x30 [ 455.848297][ T37] __mutex_lock+0x81e/0x1b50 [ 455.852904][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 455.859870][ T37] ? __kasan_check_write+0x18/0x20 [ 455.865084][ T37] ? _raw_spin_lock+0x8c/0x120 [ 455.869974][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 455.875256][ T37] ? __asan_memcpy+0x5a/0x80 [ 455.879874][ T37] __mutex_lock_slowpath+0xe/0x20 [ 455.884918][ T37] mutex_lock+0x102/0x1c0 [ 455.889308][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 455.894192][ T37] ? disk_block_events+0xaf/0x120 [ 455.899293][ T37] ? _atomic_dec_and_lock+0x98/0x120 [ 455.904667][ T37] bdev_open+0xd5/0xd60 [ 455.908868][ T37] blkdev_open+0x3d1/0x560 [ 455.913315][ T37] ? __cfi_blkdev_open+0x10/0x10 [ 455.918322][ T37] do_dentry_open+0x97b/0x1510 [ 455.923121][ T37] vfs_open+0x86/0x230 [ 455.927208][ T37] ? __cfi_vfs_open+0x10/0x10 [ 455.931926][ T37] ? may_open+0x352/0x430 [ 455.936285][ T37] path_openat+0x2b6c/0x34b0 [ 455.940951][ T37] ? kasan_save_track+0x3e/0x80 [ 455.945826][ T37] ? kasan_save_alloc_info+0x40/0x50 [ 455.951181][ T37] ? getname+0x1b/0x30 [ 455.955272][ T37] ? x64_sys_call+0xe69/0x2ee0 [ 455.960121][ T37] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 455.966228][ T37] ? do_filp_open+0x3e0/0x3e0 [ 455.970947][ T37] do_filp_open+0x1c6/0x3e0 [ 455.975600][ T37] ? __cfi_do_filp_open+0x10/0x10 [ 455.980741][ T37] ? alloc_fd+0x4e7/0x5a0 [ 455.985171][ T37] do_sys_openat2+0x12c/0x1c0 [ 455.989885][ T37] ? do_sys_open+0x100/0x100 [ 455.994529][ T37] __x64_sys_openat+0x13a/0x170 [ 455.999413][ T37] x64_sys_call+0xe69/0x2ee0 [ 456.004081][ T37] do_syscall_64+0x58/0xf0 [ 456.008530][ T37] ? clear_bhb_loop+0x50/0xa0 [ 456.013264][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 456.019204][ T37] RIP: 0033:0x7fca448a7407 [ 456.023698][ T37] RSP: 002b:00007fff0c2e4990 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 456.032162][ T37] RAX: ffffffffffffffda RBX: 00007fca44f7c880 RCX: 00007fca448a7407 [ 456.040175][ T37] RDX: 00000000000a0800 RSI: 0000560cafe0b9a0 RDI: ffffffffffffff9c [ 456.048225][ T37] RBP: 0000560cafbcf2c0 R08: 0000000000000000 R09: 0000000000000000 [ 456.056258][ T37] R10: 0000000000000000 R11: 0000000000000202 R12: 0000560cafe10210 [ 456.064251][ T37] R13: 0000560cafe100f0 R14: 0000000000000000 R15: 0000560cafe10210 [ 456.072399][ T37] [ 456.075508][ T37] INFO: task syz.2.3531:10932 blocked for more than 123 seconds. [ 456.083315][ T37] Not tainted syzkaller #0 [ 456.088296][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 456.096965][ T37] task:syz.2.3531 state:D stack:0 pid:10932 tgid:10931 ppid:5762 flags:0x00004004 [ 456.107188][ T37] Call Trace: [ 456.110505][ T37] [ 456.113452][ T37] __schedule+0x1322/0x1df0 [ 456.118061][ T37] ? __sched_text_start+0x10/0x10 [ 456.123336][ T37] ? kasan_save_track+0x4f/0x80 [ 456.128223][ T37] ? kasan_save_free_info+0x4a/0x60 [ 456.133515][ T37] ? __kasan_slab_free+0x5f/0x80 [ 456.138485][ T37] ? kfree+0x15c/0x460 [ 456.142627][ T37] ? efi_partition+0x444/0x3150 [ 456.147600][ T37] ? bdev_disk_changed+0x819/0x1610 [ 456.152840][ T37] ? loop_reread_partitions+0x64/0x110 [ 456.158347][ T37] ? __kasan_check_write+0x18/0x20 [ 456.163540][ T37] schedule+0xc6/0x240 [ 456.167738][ T37] io_schedule+0x89/0xe0 [ 456.172014][ T37] folio_wait_bit_common+0x6ae/0x910 [ 456.177362][ T37] ? folio_wait_bit+0x50/0x50 [ 456.182108][ T37] ? __filemap_get_folio+0x932/0xaa0 [ 456.187554][ T37] ? __cfi_wake_page_function+0x10/0x10 [ 456.193135][ T37] ? __cfi___filemap_get_folio+0x10/0x10 [ 456.199109][ T37] ? kfree+0x15c/0x460 [ 456.203205][ T37] ? efi_partition+0x444/0x3150 [ 456.208599][ T37] do_read_cache_folio+0x14d/0x4d0 [ 456.213766][ T37] ? __cfi_blkdev_read_folio+0x10/0x10 [ 456.219273][ T37] read_cache_folio+0x54/0x90 [ 456.224020][ T37] read_part_sector+0xcc/0x250 [ 456.228856][ T37] msdos_partition+0x118/0x3000 [ 456.233737][ T37] ? __cfi_efi_partition+0x10/0x10 [ 456.239061][ T37] ? vsnprintf+0x19b8/0x1aa0 [ 456.243709][ T37] ? snprintf+0xdb/0x130 [ 456.248020][ T37] ? __cfi_msdos_partition+0x10/0x10 [ 456.253339][ T37] ? __cfi_snprintf+0x10/0x10 [ 456.258031][ T37] ? bdev_disk_changed+0x4f8/0x1610 [ 456.263270][ T37] bdev_disk_changed+0x819/0x1610 [ 456.268336][ T37] ? __cfi_bdev_disk_changed+0x10/0x10 [ 456.273885][ T37] ? __kasan_check_write+0x18/0x20 [ 456.279060][ T37] ? mutex_unlock+0x8b/0x240 [ 456.283703][ T37] ? __cfi_mutex_unlock+0x10/0x10 [ 456.288769][ T37] loop_reread_partitions+0x64/0x110 [ 456.294156][ T37] loop_configure+0xfd8/0x1310 [ 456.298970][ T37] ? __cfi_loop_configure+0x10/0x10 [ 456.304259][ T37] ? __kasan_check_write+0x18/0x20 [ 456.309427][ T37] lo_ioctl+0x802/0x1d50 [ 456.313759][ T37] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 456.319869][ T37] ? update_curr+0x821/0xaa0 [ 456.324597][ T37] ? __cfi_lo_ioctl+0x10/0x10 [ 456.329304][ T37] ? update_cfs_group+0x260/0x260 [ 456.334426][ T37] ? dequeue_entity+0xa9c/0x1750 [ 456.339461][ T37] ? kasan_save_track+0x4f/0x80 [ 456.344359][ T37] ? kasan_save_track+0x3e/0x80 [ 456.349411][ T37] ? common_lsm_audit+0x148c/0x1860 [ 456.354789][ T37] ? tg_unthrottle_up+0x980/0x980 [ 456.359846][ T37] ? kvm_sched_clock_read+0x15/0x30 [ 456.365149][ T37] ? sched_clock_noinstr+0xd/0x30 [ 456.370340][ T37] ? sched_clock+0x44/0x60 [ 456.374789][ T37] ? sched_clock_cpu+0x75/0x400 [ 456.379911][ T37] ? sched_balance_newidle+0x849/0xda0 [ 456.385410][ T37] ? xfd_validate_state+0x68/0x150 [ 456.390568][ T37] ? save_fpregs_to_fpstate+0x196/0x230 [ 456.396154][ T37] ? __kasan_check_write+0x18/0x20 [ 456.401376][ T37] ? __switch_to+0xc7b/0x1310 [ 456.406138][ T37] ? psi_group_change+0xb44/0x1130 [ 456.411332][ T37] ? __cfi___switch_to+0x10/0x10 [ 456.416363][ T37] ? _raw_spin_unlock+0x45/0x60 [ 456.421319][ T37] ? finish_task_switch+0x13a/0x780 [ 456.426600][ T37] ? __switch_to_asm+0x3d/0x70 [ 456.431481][ T37] ? avc_has_extended_perms+0x7c7/0xdd0 [ 456.437059][ T37] ? __asan_memcpy+0x5a/0x80 [ 456.441745][ T37] ? avc_has_extended_perms+0x921/0xdd0 [ 456.447487][ T37] ? do_vfs_ioctl+0xeda/0x1e30 [ 456.452803][ T37] ? __futex_queue+0x19a/0x340 [ 456.457622][ T37] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 456.463398][ T37] ? __cfi___futex_queue+0x10/0x10 [ 456.468587][ T37] ? futex_wait_setup+0x1bc/0x260 [ 456.473689][ T37] ? __futex_wait+0x218/0x2a0 [ 456.478398][ T37] ? blkdev_common_ioctl+0x10e4/0x2810 [ 456.483954][ T37] ? blkdev_bszset+0x220/0x220 [ 456.488786][ T37] ? has_cap_mac_admin+0xd0/0xd0 [ 456.493796][ T37] ? futex_wake+0x63a/0x900 [ 456.498337][ T37] ? futex_setup_timer+0xb4/0xd0 [ 456.503378][ T37] ? futex_wait+0x29a/0x7a0 [ 456.507922][ T37] ? __cfi_do_futex+0x10/0x10 [ 456.512632][ T37] ? __cfi_lo_ioctl+0x10/0x10 [ 456.517380][ T37] blkdev_ioctl+0x549/0x680 [ 456.521922][ T37] ? __cfi_blkdev_ioctl+0x10/0x10 [ 456.527141][ T37] ? bpf_lsm_file_ioctl+0xd/0x20 [ 456.532123][ T37] ? security_file_ioctl+0x34/0xd0 [ 456.537474][ T37] ? __cfi_blkdev_ioctl+0x10/0x10 [ 456.542550][ T37] __se_sys_ioctl+0x135/0x1b0 [ 456.547326][ T37] __x64_sys_ioctl+0x7f/0xa0 [ 456.552038][ T37] x64_sys_call+0x1878/0x2ee0 [ 456.556805][ T37] do_syscall_64+0x58/0xf0 [ 456.561262][ T37] ? clear_bhb_loop+0x50/0xa0 [ 456.565949][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 456.572030][ T37] RIP: 0033:0x7ff09bf8eec9 [ 456.576470][ T37] RSP: 002b:00007ff09cd7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 456.584950][ T37] RAX: ffffffffffffffda RBX: 00007ff09c1e5fa0 RCX: 00007ff09bf8eec9 [ 456.593022][ T37] RDX: 0000200000000080 RSI: 0000000000004c0a RDI: 0000000000000003 [ 456.601061][ T37] RBP: 00007ff09c011f91 R08: 0000000000000000 R09: 0000000000000000 [ 456.609086][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.617141][ T37] R13: 00007ff09c1e6038 R14: 00007ff09c1e5fa0 R15: 00007ffdb036e598 [ 456.625161][ T37] [ 456.628237][ T37] INFO: task syz.2.3531:10935 blocked for more than 123 seconds. [ 456.636042][ T37] Not tainted syzkaller #0 [ 456.641065][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 456.650060][ T37] task:syz.2.3531 state:D stack:0 pid:10935 tgid:10931 ppid:5762 flags:0x00004004 [ 456.660484][ T37] Call Trace: [ 456.663832][ T37] [ 456.666782][ T37] __schedule+0x1322/0x1df0 [ 456.671303][ T37] ? __sched_text_start+0x10/0x10 [ 456.676369][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 456.681861][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 456.687808][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 456.693657][ T37] schedule+0xc6/0x240 [ 456.697810][ T37] blk_mq_freeze_queue_wait+0xe6/0x170 [ 456.703301][ T37] ? __cfi_blk_mq_freeze_queue_wait+0x10/0x10 [ 456.709446][ T37] ? blk_mq_run_hw_queues+0x372/0x430 [ 456.714855][ T37] ? __cfi_autoremove_wake_function+0x10/0x10 [ 456.720962][ T37] ? __cfi_blk_mq_run_hw_queues+0x10/0x10 [ 456.726727][ T37] ? mutex_unlock+0x8b/0x240 [ 456.731409][ T37] ? __cfi_mutex_unlock+0x10/0x10 [ 456.736471][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 456.742346][ T37] blk_freeze_queue+0xc7/0x100 [ 456.747141][ T37] blk_mq_freeze_queue+0x19/0x30 [ 456.752159][ T37] lo_ioctl+0x1827/0x1d50 [ 456.756521][ T37] ? __cfi_lo_ioctl+0x10/0x10 [ 456.761258][ T37] ? update_load_avg+0x506/0x19a0 [ 456.766312][ T37] ? detach_entity_load_avg+0x7b0/0x7b0 [ 456.771906][ T37] ? dequeue_entity+0x354/0x1750 [ 456.776872][ T37] ? ip6_pol_route+0x42c/0x12c0 [ 456.781762][ T37] ? ip6_pol_route+0xe67/0x12c0 [ 456.786638][ T37] ? tg_unthrottle_up+0x980/0x980 [ 456.791819][ T37] ? update_cfs_group+0x260/0x260 [ 456.796871][ T37] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 456.803024][ T37] ? update_curr+0x4e4/0xaa0 [ 456.807688][ T37] ? kvm_sched_clock_read+0x15/0x30 [ 456.812947][ T37] ? sched_clock_noinstr+0xd/0x30 [ 456.818007][ T37] ? sched_clock+0x44/0x60 [ 456.822439][ T37] ? sched_clock_cpu+0x75/0x400 [ 456.827328][ T37] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 456.833522][ T37] ? update_curr+0xdc/0xaa0 [ 456.838070][ T37] ? xfd_validate_state+0x68/0x150 [ 456.843220][ T37] ? save_fpregs_to_fpstate+0x196/0x230 [ 456.848813][ T37] ? __kasan_check_write+0x18/0x20 [ 456.853973][ T37] ? __switch_to+0xc7b/0x1310 [ 456.858727][ T37] ? psi_group_change+0xb44/0x1130 [ 456.863872][ T37] ? __cfi___switch_to+0x10/0x10 [ 456.868858][ T37] ? _raw_spin_unlock+0x45/0x60 [ 456.873740][ T37] ? finish_task_switch+0x13a/0x780 [ 456.878990][ T37] ? __switch_to_asm+0x3d/0x70 [ 456.883814][ T37] ? avc_has_extended_perms+0x7c7/0xdd0 [ 456.889440][ T37] ? __asan_memcpy+0x5a/0x80 [ 456.894070][ T37] ? avc_has_extended_perms+0x921/0xdd0 [ 456.899707][ T37] ? do_vfs_ioctl+0xeda/0x1e30 [ 456.904497][ T37] ? __futex_queue+0x19a/0x340 [ 456.909295][ T37] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 456.914954][ T37] ? __cfi___futex_queue+0x10/0x10 [ 456.920115][ T37] ? futex_wait_setup+0x1bc/0x260 [ 456.925170][ T37] ? __futex_wait+0x218/0x2a0 [ 456.929892][ T37] ? blkdev_common_ioctl+0x10e4/0x2810 [ 456.935387][ T37] ? blkdev_bszset+0x220/0x220 [ 456.940173][ T37] ? has_cap_mac_admin+0xd0/0xd0 [ 456.945168][ T37] ? futex_wake+0x5fb/0x900 [ 456.949719][ T37] ? futex_setup_timer+0xb4/0xd0 [ 456.954694][ T37] ? futex_wait+0x29a/0x7a0 [ 456.959236][ T37] ? __cfi_futex_wait+0x10/0x10 [ 456.964283][ T37] ? selinux_socket_setsockopt+0x2ea/0x390 [ 456.970190][ T37] ? selinux_file_ioctl+0x6e0/0x1360 [ 456.975949][ T37] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 456.981590][ T37] ? _raw_spin_unlock_bh+0x54/0x60 [ 456.986792][ T37] ? do_futex+0x309/0x500 [ 456.991156][ T37] ? __cfi_do_futex+0x10/0x10 [ 456.995903][ T37] ? __cfi_lo_ioctl+0x10/0x10 [ 457.000618][ T37] blkdev_ioctl+0x549/0x680 [ 457.005170][ T37] ? __cfi_blkdev_ioctl+0x10/0x10 [ 457.010248][ T37] ? bpf_lsm_file_ioctl+0xd/0x20 [ 457.015443][ T37] ? security_file_ioctl+0x34/0xd0 [ 457.020611][ T37] ? __cfi_blkdev_ioctl+0x10/0x10 [ 457.025689][ T37] __se_sys_ioctl+0x135/0x1b0 [ 457.030428][ T37] __x64_sys_ioctl+0x7f/0xa0 [ 457.035047][ T37] x64_sys_call+0x1878/0x2ee0 [ 457.039807][ T37] do_syscall_64+0x58/0xf0 [ 457.044252][ T37] ? clear_bhb_loop+0x50/0xa0 [ 457.048983][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 457.054944][ T37] RIP: 0033:0x7ff09bf8eec9 [ 457.059448][ T37] RSP: 002b:00007ff09cd59038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 457.067896][ T37] RAX: ffffffffffffffda RBX: 00007ff09c1e6090 RCX: 00007ff09bf8eec9 [ 457.075910][ T37] RDX: 0000000000000007 RSI: 0000000000004c06 RDI: 0000000000000003 [ 457.083960][ T37] RBP: 00007ff09c011f91 R08: 0000000000000000 R09: 0000000000000000 [ 457.091972][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 457.099974][ T37] R13: 00007ff09c1e6128 R14: 00007ff09c1e6090 R15: 00007ffdb036e598 [ 457.108025][ T37] [ 457.111126][ T37] INFO: task syz.3.3542:10965 blocked for more than 124 seconds. [ 457.118953][ T37] Not tainted syzkaller #0 [ 457.124019][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 457.132751][ T37] task:syz.3.3542 state:D stack:0 pid:10965 tgid:10964 ppid:7012 flags:0x00000004 [ 457.143339][ T37] Call Trace: [ 457.146779][ T37] [ 457.149803][ T37] __schedule+0x1322/0x1df0 [ 457.154428][ T37] ? __sched_text_start+0x10/0x10 [ 457.159492][ T37] ? __mutex_add_waiter+0xcb/0x290 [ 457.164686][ T37] ? __kasan_check_write+0x18/0x20 [ 457.169833][ T37] ? trace_contention_begin+0xc0/0xc0 [ 457.175263][ T37] schedule+0xc6/0x240 [ 457.179366][ T37] schedule_preempt_disabled+0x14/0x30 [ 457.184849][ T37] __mutex_lock+0x81e/0x1b50 [ 457.189507][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 457.196407][ T37] ? __kasan_check_write+0x18/0x20 [ 457.201535][ T37] ? _raw_spin_lock+0x8c/0x120 [ 457.206334][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 457.211605][ T37] ? __asan_memcpy+0x5a/0x80 [ 457.216244][ T37] __mutex_lock_slowpath+0xe/0x20 [ 457.221379][ T37] mutex_lock+0x102/0x1c0 [ 457.225745][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 457.230826][ T37] ? disk_block_events+0xaf/0x120 [ 457.235980][ T37] ? _atomic_dec_and_lock+0x98/0x120 [ 457.241341][ T37] bdev_open+0xd5/0xd60 [ 457.245621][ T37] blkdev_open+0x3d1/0x560 [ 457.250166][ T37] ? __cfi_blkdev_open+0x10/0x10 [ 457.255176][ T37] do_dentry_open+0x97b/0x1510 [ 457.260277][ T37] vfs_open+0x86/0x230 [ 457.264434][ T37] ? __cfi_vfs_open+0x10/0x10 [ 457.269147][ T37] ? may_open+0x352/0x430 [ 457.273527][ T37] path_openat+0x2b6c/0x34b0 [ 457.278155][ T37] ? kasan_save_track+0x3e/0x80 [ 457.283080][ T37] ? kasan_save_alloc_info+0x40/0x50 [ 457.288414][ T37] ? getname+0x1b/0x30 [ 457.292528][ T37] ? x64_sys_call+0xe69/0x2ee0 [ 457.297327][ T37] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 457.303454][ T37] ? do_filp_open+0x3e0/0x3e0 [ 457.308160][ T37] do_filp_open+0x1c6/0x3e0 [ 457.312684][ T37] ? __cfi_do_filp_open+0x10/0x10 [ 457.317821][ T37] ? alloc_fd+0x4e7/0x5a0 [ 457.322182][ T37] do_sys_openat2+0x12c/0x1c0 [ 457.326933][ T37] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 457.332443][ T37] ? do_sys_open+0x100/0x100 [ 457.337171][ T37] ? __kasan_check_write+0x18/0x20 [ 457.342337][ T37] ? do_user_addr_fault+0xbc4/0x1200 [ 457.347719][ T37] ? _raw_spin_unlock_bh+0x54/0x60 [ 457.352979][ T37] __x64_sys_openat+0x13a/0x170 [ 457.357889][ T37] x64_sys_call+0xe69/0x2ee0 [ 457.362540][ T37] do_syscall_64+0x58/0xf0 [ 457.367021][ T37] ? clear_bhb_loop+0x50/0xa0 [ 457.371748][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 457.377784][ T37] RIP: 0033:0x7fb377b8d710 [ 457.382218][ T37] RSP: 002b:00007fb378a3fb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 457.390678][ T37] RAX: ffffffffffffffda RBX: 0000000000006542 RCX: 00007fb377b8d710 [ 457.398706][ T37] RDX: 0000000000006542 RSI: 00007fb378a3fc10 RDI: 00000000ffffff9c [ 457.406711][ T37] RBP: 00007fb378a3fc10 R08: 0000000000000000 R09: 0023706f6f6c2f76 [ 457.414739][ T37] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 457.422773][ T37] R13: 00007fb377de6038 R14: 00007fb377de5fa0 R15: 00007ffeac5f5bb8 [ 457.430787][ T37] [ 457.433932][ T37] NMI backtrace for cpu 1 [ 457.433953][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 9b63ddcf0ca82069290034062ca02b4369282e80 [ 457.433976][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 457.433987][ T37] Call Trace: [ 457.433993][ T37] [ 457.434000][ T37] __dump_stack+0x21/0x30 [ 457.434027][ T37] dump_stack_lvl+0x10c/0x190 [ 457.434049][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 457.434073][ T37] dump_stack+0x19/0x20 [ 457.434095][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 457.434115][ T37] ? rcu_read_unlock_special+0xab/0x410 [ 457.434137][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 457.434157][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 457.434176][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 457.434198][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 457.434220][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 457.434241][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 457.434263][ T37] watchdog+0xd8f/0xed0 [ 457.434287][ T37] ? __cfi_watchdog+0x10/0x10 [ 457.434309][ T37] ? __kasan_check_read+0x15/0x20 [ 457.434335][ T37] ? __kthread_parkme+0x138/0x180 [ 457.434351][ T37] ? schedule+0xc6/0x240 [ 457.434373][ T37] kthread+0x2ca/0x370 [ 457.434390][ T37] ? __cfi_watchdog+0x10/0x10 [ 457.434412][ T37] ? __cfi_kthread+0x10/0x10 [ 457.434429][ T37] ret_from_fork+0x67/0xa0 [ 457.434453][ T37] ? __cfi_kthread+0x10/0x10 [ 457.434470][ T37] ret_from_fork_asm+0x1a/0x30 [ 457.434501][ T37] [ 457.434513][ T37] Sending NMI from CPU 1 to CPUs 0: [ 457.588728][ C0] NMI backtrace for cpu 0 [ 457.588744][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 9b63ddcf0ca82069290034062ca02b4369282e80 [ 457.588767][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 457.588778][ C0] RIP: 0010:pv_native_safe_halt+0x17/0x20 [ 457.588803][ C0] Code: cc cc cc b8 67 89 2c a5 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 22 3a 00 f3 0f 1e fa 55 48 89 e5 fb f4 <5d> e9 d3 54 02 00 cc cc cc b8 00 00 00 00 90 90 90 90 90 90 90 90 [ 457.588819][ C0] RSP: 0018:ffffffff87207da0 EFLAGS: 000002c2 [ 457.588835][ C0] RAX: ffff8881f6e00000 RBX: ffffffff87215540 RCX: ffffffff858d30be [ 457.588849][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 000000000088589c [ 457.588861][ C0] RBP: ffffffff87207da0 R08: ffff8881f6e39733 R09: 1ffff1103edc72e6 [ 457.588874][ C0] R10: dffffc0000000000 R11: ffffed103edc72e7 R12: 1ffffffff0e42aa8 [ 457.588887][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff87cb1e68 [ 457.588899][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 457.588914][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 457.588926][ C0] CR2: 000000110c296bad CR3: 0000000105e66000 CR4: 00000000003526b0 [ 457.588942][ C0] DR0: 0000000000000000 DR1: 000000000000000e DR2: 0000000000000000 [ 457.588953][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 457.588964][ C0] Call Trace: [ 457.588971][ C0] [ 457.588979][ C0] default_idle+0x17/0x30 [ 457.588999][ C0] arch_cpu_idle+0xd/0x20 [ 457.589016][ C0] default_idle_call+0x3f/0x80 [ 457.589034][ C0] do_idle+0x1a0/0x470 [ 457.589051][ C0] ? idle_inject_timer_fn+0x80/0x80 [ 457.589070][ C0] ? do_idle+0x448/0x470 [ 457.589087][ C0] cpu_startup_entry+0x48/0x70 [ 457.589104][ C0] rest_init+0x10b/0x130 [ 457.589123][ C0] ? __cfi_x86_late_time_init+0x10/0x10 [ 457.589142][ C0] start_kernel+0x46a/0x4bb [ 457.589167][ C0] x86_64_start_reservations+0x2e/0x30 [ 457.589185][ C0] x86_64_start_kernel+0x6a/0x7b [ 457.589202][ C0] common_startup_64+0x13b/0x157 [ 457.589227][ C0]