last executing test programs: 2m21.72394077s ago: executing program 2 (id=1811): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) prctl$PR_SET_MM_EXE_FILE(0x53564d41, 0xd, 0xffffffffffffffff) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x21) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f000014f000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x42, 0x0, 0x0) (async) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0xffffffffffffff7f, {0x0, 0x20200000000000}}, "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", "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"}) (async) prlimit64(0x0, 0xe, 0x0, 0x0) (async) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) fcntl$setstatus(r7, 0x4, 0x800) waitid$P_PIDFD(0x3, r7, 0x0, 0x8, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user}]}}) (async) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r8, &(0x7f0000000200)={0x2020}, 0x2020) 2m21.673894484s ago: executing program 2 (id=1814): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r0, 0xd6baf000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x7) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="800000001e00210000000000fddbdf250a0000000500020000000000620003"], 0x80}, 0x1, 0x0, 0x0, 0x48}, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, 0x0, &(0x7f0000000400)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$FUSE_GETXATTR(r3, &(0x7f0000004200)={0x18, 0x0, 0x0, {0x4}}, 0x18) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000e86000)="002204", 0x7f8) ioctl$KVM_CAP_X86_GUEST_MODE(r3, 0x4068aea3, &(0x7f0000000140)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000040)={0x0, 0x1, r0, 0x7, 0x80000}) 2m21.565799133s ago: executing program 2 (id=1815): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x2, 0x0, 0x4000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0xfffffffffffffd6b, &(0x7f0000000440)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x100, 0xfffffffffffffffc}, @ptr={0x70742a85, 0x2, &(0x7f0000000380)=""/183, 0xb7, 0xffffffffffffffff, 0x2f}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0xfffffffffffffd6b, &(0x7f0000000440)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x100, 0xfffffffffffffffc}, @ptr={0x70742a85, 0x2, &(0x7f0000000380)=""/183, 0xb7, 0xffffffffffffffff, 0x2f}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 2m21.533657665s ago: executing program 2 (id=1816): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4}, 0x0) read(0xffffffffffffffff, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x3, 0x0, 0x0) socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f00000004c0)={0x2, 0x1, 0x18, 0x6, 0x130, &(0x7f00000000c0)="019aca1c0c09c1239de021717ac11931c081c8cb36bb0a58fa56aecdc297896b0ca492c8ed14015f1786a474118c51f4da26348c1ecb6f1269ff43d82cff86b4f375546331519005af2dcb0b8dbf470a00f124889d212c47d5be3d85e4f8c716fa4be594efb9a6638b358cf4193c5d067b84f8bf3a0a6c8dd0d3be423bb731ed346648d2522f67499e25edca11f47d4b08164563cefd087484df2d84a52dd9c8e24868c979c020d6d861ccbcb00ddde2960476905f6b3a79a87ff85592a53849e87026dca639ade1ab144e3df1baa10fe532a88ad086ffd5e28a1bf349d2870c0de7da87f1582767eb41dad6e9d342f528cbe2f91eb6d40946a4a4c6e2eaff421174d6de9d21c4304e305ff54e09c32969d7dff92490b36bc4b31dd60b7f8c63ba10028827a4c9c1d5c0af657509e8be9f9ca5e62335b5e92176d11b8264ba6ed705decd2798e6a03d8f24818eed7930f46f9a01c570959aa0cc0f9f9a80cdbfa15f00e5860398f97988e091ed88fa952373d1c7dfec5907127cb0a6968a04b398b546dd7aa02bc8d74213d134e506d53156d1301a5f0240c0a756fbbdcda92c6790748a30d2324c989ec7086c38fa380e22fca9a5ca96732c82c2319b74c7add700414c51973f1c07e436d2c84262375ebef7c9004054f446c956113d82d6ae8a0df37fa4f343f42fe5ddc388d61abf305a68fe1e2bf59210da9aac0e06a7f093d07dac4d6079a2d5745884737af7d70e2715b7372b3351e3b5fdce93d14abb42bb3d331e311a3c5180dc51c26a20e8d863d27381a2bdc85211c2090fda352359f566fb5589840cade0311dbb4b405cb1f3ca38c1186c631b213f90133b787acbbf8ca70b8794337bc23d8960b4b28d41692b36a1905b924f2755a22876f3063ab63cbedbe14c708eb6f1c132e87eded9cc4164a9e9b394c81b1b3fd0ba99f94b85b90381aa64b16e8bb3e4ba04d8a91d8b1812ac5c19080ad523ab01334ef483f3b6eb634b2e22a8b977db6ef87b4332cfc07c56be2510efc627728afa2f979da7914af96889f21934946706bbcedec4cf71c17dac67c7d35c6983f1619ffd079923e1bf3f02cdf4dd974bb9ece83ef50a60dd1887da2121cecaea2aacc4df473503bbf1e50dde6632f3ee8835e130eeea460eba1e07fcc76d7426244a772dd0b3ebc4cba809a90a2ce7abdd52cf5dee3bef85b22992cbb152a61407bb8d52d087d268598548bb937a168d99d664e252abb9b137bff258e698984809ec186d9e43f152da6a513052ff8dcaac113593a2df9c60f491ca6de75fd17326ed5656e4b89a69fd908af024ed9ca92c4aeb8e69e6877e731644057e7d2a4e6588c479081d719e1544559390ea661134fbc9726855bb95d8bc53409f585f0e6572ac13f878ad3a1c8187fd5203985b5790d061ed6ed7aba9fba84a9a70305135afe735"}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_modinfo={0x42, 0x287, 0x7}}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) munmap(&(0x7f0000002000/0x800000)=nil, 0x800000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 2m21.440220102s ago: executing program 2 (id=1818): ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448df, &(0x7f0000000400)="b93fe504852bd23589322d4b917a66ca11bf65cf8e8963ba2032353afaa4b96ef2e0d0") sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000500000000000a00000000000000f65e0190536134fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200ff"], 0xa0}}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x38a}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x3a, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x4}, @flat=@weak_binder={0x77622a85, 0xb, 0x2}, @flat=@binder={0x73622a85, 0x134efe4ac76e8b6f, 0x3}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000000000000d00000000000000000000ef60fc4bd8ecc4e3200000000006004dee00000000000032acaace3269d47147"], 0xd0060) 2m21.430968283s ago: executing program 2 (id=1819): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\x00', 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x88a8, r4, 0x1, 0xe0}, 0x14) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r8, &(0x7f0000000140)=ANY=[], 0x138) mount$9p_fd(0x0, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x2000000, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',2000000,\x00'/26]) sendfile(r1, r0, 0x0, 0x80000000) 2m6.42311383s ago: executing program 32 (id=1819): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\x00', 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x88a8, r4, 0x1, 0xe0}, 0x14) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r8, &(0x7f0000000140)=ANY=[], 0x138) mount$9p_fd(0x0, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x2000000, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',2000000,\x00'/26]) sendfile(r1, r0, 0x0, 0x80000000) 2m5.408347521s ago: executing program 1 (id=2115): ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3#\x82\xf7\x92\x10\x02k!i\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\x99\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdbv\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,{\xd3:`G\x81oN\xbd\x0f\xb8\xb7\xc0\xb8\"T0Z\xb1\x18\xe2\xd4&\xdb\x19\xb1\xbe\xcc}\x9d\x84\x10\x0e8^.d\xe1wSJ\xcf\xec\t\x12\x8b\xe1\x92\xf9hq\xbbs\x80x\xd5\xee~\xef\xea\x018\xec\xc3t\x992\xea\x93\x92\xdb\xb0|sdK\n\x8eN\x9a\x02\xe2\xdd\xf7Ho\x0f\"\f\xaf\xd7hb\a\x00\x00$\x1a\xc9\x06\x12Bg\x1a\xc8$v\xa2\xa1\xad\xed{\x8a\x0fn\xa8U0B\b\xc3Y=\xa6\xe9=m\xdc\xd9\x03\xa8\x93\x9c\xb6\xf8\xfc\xbb\n\xd9\xc8{\x1cs\xf5\xbd^\xb1\xda\x8f\xcb\xc5R\xe7b\xdf\xae\x7fo\x98\xc9\xf2\xa6\xa8\xaa)\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00}\x83\xd8\rX@\xa2JA\x84\xcc6\xc8\x05r\xb0\xbe\xf5\\\xfc\xb0\xa1\xb1\xa1`%S\xbe\xf4\xf3\x1cVD\xc9\x04\x1d\xc4#\xe9m\xa1\x82\x9a\x1e\x9c\xd1\"?4c7\x00Jf\x8a:X\xe1u\xb14.tf\xbd\x9b\xac\xa7\xb0o\x0e\xac!\x1f\x91+\xe2w\"\xf8\x9b\xe4\x8e\xcf#>\xbfi!\xc0\xc5\xd6\xab\xe2\xb8\x8e\x99}\x00j\x8d\xa7Z\xf3\xde%D\xe6U\'\\\xe8\xd6UV\x1f%\x0f\r^\xd1\xe8e3\xaa\x0f\xbf\xfc\x05\xd6\xe2\xc2\xbeN\xa9\xa4J\xd4~iK\"\xe6\xda0\x87\xe3\b3c\xd9ox\xecP\xc3\x81\xd2\x1aC\xb0\xed\xf8}\x18\xce\xe9\x86\xc9\xb4\xc8K<,\v\xac\xdc\xd6\xb8u\x01\xa9NQ\x9c\xa0\re\x13\xbdM\x8e\xf1\xc7h\xd3f\x8b\x10\xce\x91\xd4\x97\xfbt\xae\r^\xd7q\xea\x02\xc00\x10\x9a\xb1k\x8e%\xe1\x13\x9d') write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000"], 0x15) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0xa0}}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000000000000d00000000000000000000ef60fc4bd8ecc4e3200000000006004dee00000000000032acaace3269d47147"], 0xd0060) 2m5.399627811s ago: executing program 1 (id=2116): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x114004, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats']) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) socket$inet6(0xa, 0x2, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x7) close(0x3) (async) close(0x3) sendto$inet6(r3, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) fstat(r1, &(0x7f00000000c0)) (async) fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r4, r4) (async) setreuid(r4, r4) socket(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000009c0), &(0x7f0000cab000)=0xc) (async) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000009c0)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1a) (async) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1a) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r8, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/262, 0x106}], 0x1) r9 = userfaultfd(0x80801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) getdents(r8, &(0x7f0000000380)=""/181, 0xb5) ioctl$KVM_HYPERV_EVENTFD(r7, 0x4018aebd, &(0x7f0000000140)={0x3, r8}) setresgid(0xffffffffffffffff, r6, r6) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x85000c, &(0x7f0000000280)=ANY=[@ANYBLOB="83913d", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC=r6, @ANYBLOB=',fscontext=unconfined_u,seclabel,rootcontext=user_u,\x00']) 2m4.515903572s ago: executing program 1 (id=2120): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=\"']) r0 = syz_usb_connect$uac1(0x3, 0x9d, &(0x7f00000015c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x3, 0x1, 0xf7, 0x80, 0xb, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x1}, [@selector_unit={0x9, 0x24, 0x5, 0x5, 0x6, "ac4c1ac9"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x3, 0x1001}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x3, 0xb2, 0x1, "fc", "9293d6"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x0, 0x48, 0x12, {0x7, 0x25, 0x1, 0x80, 0x0, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x6, 0x3, 0x9f, 0x1, "ca"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x5, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3, 0x40, 0x1, {0x7, 0x25, 0x1, 0x1, 0x7, 0x3}}}}}}}]}}, &(0x7f0000001a80)={0xa, &(0x7f0000001680)={0xa, 0x6, 0x310, 0x7, 0x4, 0x7, 0xff, 0x8}, 0x17, &(0x7f00000016c0)={0x5, 0xf, 0x17, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0x7, 0x505}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0xb, 0xb, 0xb6d8, 0x81}]}, 0x9, [{0xdf, &(0x7f0000001700)=@string={0xdf, 0x3, "e050d1c65027928b7c7bed2c72b4344d358f4e7c9845ff14bcf54f0562964753e772184dc3f0592308828e65d5e8ff501fa15b306f0223350b439ea257999eb905db5e4be9be0ffcfb772abae934450054ec94c342b4bf35e4c89f6426fe41b06029a745eb3b711ec5b772a0f4aa3a9449724950a57b160772bc2b82dea703446f1583848cf53541bf14b65bed773bf093a8b55dbe0fba54b3fde70952fa7cd15201a6c9580d6e3479628312b0ee9b2c49366e4f05c9af8e66fba32229f94b0cb3e10c6eedb587ecb37d256d0c152c8d90feebd5c32c16f1a5b2630def"}}, {0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x361e}}, {0x9a, &(0x7f0000001840)=@string={0x9a, 0x3, "06ae024be5e97d4245c7416e857a21c2c9c1dfa3d72bbe4ef398806e3a71883fcc032d1cc2f2f18134d29484570d8dfa986ec6f45cea8f778ee770e57fbe8a32db08dd6cfa100b23464a97fba21580d58a36ba7452687e900d6ac01921f1a84f837ada67e4c8b8d351e60c5bbc7eb2bd2a7f7f8ec0a91aac84153dd90bdcfb29ebfcbc3b1ba09e21bea90f72d800065b57d605152f986569"}}, {0x6, &(0x7f0000001900)=@string={0x6, 0x3, "eb4ce461"}}, {0x4, &(0x7f0000001940)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f0000001980)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x4, &(0x7f00000019c0)=@lang_id={0x4, 0x3, 0x3468}}, {0x4, &(0x7f0000001a00)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f0000001a40)=@lang_id={0x4, 0x3, 0x44d}}]}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0xfffb}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000002040)={0x0, &(0x7f0000001f80)=ANY=[@ANYBLOB="3200000000000000180000000000000003000040000000001e000000000000002000000000000000f30900000000000005000000000000001e0000000000000020000000000000104e0dd900760900000000000001000080000000004600000000000000200200000000000008000000000000000600000000000000000000000000000018000000000000000400000000000000"], 0x90}) ioctl$KVM_NMI(r3, 0xae9a) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000002100)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591438d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0226cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734bc5862ef52983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1d7abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296565722d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fda8bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f1cb390aaf82b0bc6af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde67f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c51ca11116b21e87887b462aa9770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff14427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c97cba5ca94ef1c555d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46babdb9247ce8eabad9718a8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a65247317882fbf171520f00b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0ca62212a1b6d41043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5b38f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077bec885ce88d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc670ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f9", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004100)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x9, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0x40d, 0xfffffffffffffffd, 0x102, 0xed3, 0x2, 0x4005, 0xc000, 0xfffffffc, r5, 0x0, 0xaa4, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004300)={0x50, 0x0, r4, {0x7, 0x26, 0x8, 0x7383ca4a, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000a400)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0xa0, 0x0, 0x16, {{0x6, 0x0, 0x4, 0x9, 0xfffffffc, 0x6, {0x0, 0xa8, 0x6, 0x100000008, 0x3, 0x1, 0x1ff, 0xffffff61, 0x0, 0x8000, 0x0, r5, 0xee01, 0xfffffff9, 0x4}}, {0x0, 0x2}}}, 0x0, 0x0}) mount$9p_xen(&(0x7f0000001e80), &(0x7f0000001ec0)='./file0\x00', &(0x7f0000001f00), 0x88002, &(0x7f0000001f40)={'trans=xen,', {[{@access_client}, {@nodevmap}], [{@uid_eq={'uid', 0x3d, r5}}]}}) syz_usb_control_io$uac1(r0, &(0x7f0000001bc0)={0x14, &(0x7f0000001b40)={0x0, 0x31, 0x6, {0x6, 0x11, "600ea3d2"}}, &(0x7f0000001b80)=ANY=[@ANYBLOB="00030420000004030130"]}, &(0x7f0000001e00)={0x44, &(0x7f0000001c00)={0x20, 0xe, 0x19, "5fad9b0f86d8b005a09be16d3474e1467a31c6a01a2a375509"}, &(0x7f0000001c40)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001c80)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000001cc0)={0x20, 0x81, 0x1, 'U'}, &(0x7f0000001d00)={0x20, 0x82, 0x3, "c6ed7a"}, &(0x7f0000001d40)={0x20, 0x83, 0x2, "32df"}, &(0x7f0000001d80)={0x20, 0x84, 0x1, "12"}, &(0x7f0000001dc0)={0x20, 0x85, 0x3, "c4bf3e"}}) r6 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) recvmsg$unix(r6, &(0x7f0000001580)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000001400)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000000300)=""/65, 0x41}, {&(0x7f00000000c0)=""/38, 0x26}, {&(0x7f0000000380)=""/67, 0x43}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x5, &(0x7f0000001480)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}, 0x40002000) 2m4.04171018s ago: executing program 1 (id=2130): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x2, 0x4) r1 = socket$pppl2tp(0x18, 0x1, 0x1) getsockname(r1, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f00000002c0)=0x80) 2m4.010158642s ago: executing program 1 (id=2134): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r0, 0x22e7c000) (async) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) 2m3.960132036s ago: executing program 1 (id=2136): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x38a, 0x3}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sync() ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000180)=[{0x6}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) writev(0xffffffffffffffff, 0x0, 0x0) ptrace(0x10, r1) unshare(0x22020600) r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000000), 0x4) r6 = fsmount(r4, 0x0, 0x4) r7 = openat$cgroup_ro(r6, &(0x7f0000001100)='cgroup.kill\x00', 0x5000000, 0x0) readv(r7, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) ptrace(0x8, r1) wait4(r1, 0x0, 0x20000000, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@nested={0x18, 0xca, 0x0, 0x1, [@nested={0x14, 0x1, 0x0, 0x1, [@nested={0x4, 0x4}, @typed={0x8, 0x76, 0x0, 0x0, @uid}, @generic="334924eb"]}]}]}, 0x2c}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x3a, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x4}, @flat=@weak_binder={0x77622a85, 0xb, 0x2}, @flat=@binder={0x73622a85, 0x134efe4ac76e8b6f, 0x3}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 1m48.965784592s ago: executing program 33 (id=2136): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x38a, 0x3}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sync() ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000180)=[{0x6}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) writev(0xffffffffffffffff, 0x0, 0x0) ptrace(0x10, r1) unshare(0x22020600) r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000000), 0x4) r6 = fsmount(r4, 0x0, 0x4) r7 = openat$cgroup_ro(r6, &(0x7f0000001100)='cgroup.kill\x00', 0x5000000, 0x0) readv(r7, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) ptrace(0x8, r1) wait4(r1, 0x0, 0x20000000, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@nested={0x18, 0xca, 0x0, 0x1, [@nested={0x14, 0x1, 0x0, 0x1, [@nested={0x4, 0x4}, @typed={0x8, 0x76, 0x0, 0x0, @uid}, @generic="334924eb"]}]}]}, 0x2c}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x3a, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x4}, @flat=@weak_binder={0x77622a85, 0xb, 0x2}, @flat=@binder={0x73622a85, 0x134efe4ac76e8b6f, 0x3}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 49.360206624s ago: executing program 4 (id=3108): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003940)={0x18, 0x11, 0x1, 0x0, 0x2, {0x7}, [@nested={0x4, 0xe3}]}, 0x18}}, 0x0) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) unshare(0x60000600) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x8, 0xffffffff, 0xd66}}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0x10010, r0, 0x98373000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003940)={0x18, 0x11, 0x1, 0x0, 0x2, {0x7}, [@nested={0x4, 0xe3}]}, 0x18}}, 0x0) (async) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) (async) unshare(0x60000600) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x8, 0xffffffff, 0xd66}}) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0x10010, r0, 0x98373000) (async) 49.258732493s ago: executing program 4 (id=3110): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000180)=0xc) mount$cgroup2(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x200000, &(0x7f0000000440)={[{@subsystem='memory'}, {@subsystem='cpu'}, {@favordynmods}, {}, {@favordynmods}], [{@appraise_type}, {@flag='nomand'}, {@obj_type={'obj_type', 0x3d, ':-'}}, {@fsname={'fsname', 0x3d, 'obj_type'}}, {@flag='mand'}, {@fowner_lt={'fowner<', r0}}, {@appraise_type}, {@flag='rw'}, {@smackfsdef={'smackfsdef', 0x3d, '!\xd2-+'}}, {@appraise_type}]}) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000540)=@sg0, r0, &(0x7f0000000580)={0x0, 0x0, 0x5, 0x5, 0x100, 0x0, 0x25, 0x1ff, 0x4}) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1008000, &(0x7f0000000340)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x4}}, {@max_read={'max_read', 0x3d, 0x889}}], [{@subj_role={'subj_role', 0x3d, ']'}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@obj_type={'obj_type', 0x3d, './binderfs\x00'}}]}}) 49.211329776s ago: executing program 4 (id=3112): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000880)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x2, 0x0, 0xfe, {{0x5}, {0x5, 0x24, 0x0, 0x175a}, {0xd, 0x24, 0xf, 0x1, 0x80000000}, [@country_functional={0x6, 0x24, 0x7, 0x6, 0x7}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0x3, 0xfa}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0xf8}}}}}]}}]}}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030f0000000000000000070000e10b0002"], 0x20}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x800, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x29, 0x40000002, 0x80000}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x20, 0x0, 0x0, {0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000700)) r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/1433], 0x599) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000100)) 48.555305818s ago: executing program 4 (id=3116): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000140)='./file1\x00', 0x401) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000040)='./bus\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r3, &(0x7f0000000040)=[{&(0x7f0000000180)="e3", 0x1}], 0x1, 0x8) fcntl$setpipe(r2, 0x407, 0x176) vmsplice(r3, &(0x7f0000001080)=[{&(0x7f0000000a40)='5', 0x1}], 0x1, 0x8) vmsplice(r2, &(0x7f0000002a80)=[{&(0x7f0000000580)='I', 0x1}], 0x1, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0xffffffffa003e45b, 0x700000000000000) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) personality(0x5400004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r6, 0x99b33000) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$poke(0x4, r7, &(0x7f0000001040), 0x282d) 48.452735277s ago: executing program 4 (id=3119): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(0xffffffffffffffff, 0x0, 0x9900, &(0x7f0000000100)={0x100082, 0xa, 0x100000, {r0}}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000340)={{0x100000, 0xeeef0000, 0x3, 0xad, 0x3, 0xd2, 0x81, 0x7, 0x0, 0x2b, 0x9}, {0x4000, 0x6000, 0x3, 0x0, 0x3c, 0x9, 0x7f, 0x1, 0x5, 0x0, 0x3}, {0x2, 0x1000, 0x8, 0x5, 0x1, 0x2, 0x0, 0x9, 0x0, 0xa7, 0xb, 0x81}, {0xdddd1000, 0x100000, 0xc, 0xe7, 0x3, 0x2, 0x1, 0x4, 0x8, 0x7, 0xe, 0xf1}, {0xdddd0000, 0x2000, 0xd, 0xf7, 0x5, 0x86, 0xa, 0x7f, 0xfe, 0x0, 0xf5, 0x43}, {0xeeee0000, 0xdddd1000, 0x3, 0x83, 0xb1, 0x8, 0x4, 0xac, 0x80, 0xc, 0x5}, {0x1000, 0x11d004, 0xc, 0x7, 0x7, 0x5, 0x1, 0x3, 0x1, 0x80, 0x3, 0x4}, {0x100000, 0x3000, 0xb, 0x5, 0x5, 0x7, 0x22, 0x37, 0x2, 0x7, 0xf0, 0xa}, {0xeeef0000, 0x70}, {0xdddd0000, 0x7}, 0x80000037, 0x0, 0xeeee0000, 0x2004, 0xf, 0x0, 0x3000, [0x3, 0xfffffffffffffffc, 0x3, 0x2]}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r6, 0x540a, 0x5) r7 = socket$inet_tcp(0x2, 0x1, 0x0) sendfile(r7, r5, 0x0, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x901, 0x0) 48.324646407s ago: executing program 4 (id=3120): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair(0xf, 0x3, 0xb83e, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000140)={0xa, 0x4, {0x55, 0x7, 0x1, {0x2, 0x1000}, {0x8, 0x3}, @ramp={0xb7, 0x4, {0x8, 0x2, 0x5, 0xd9f}}}, {0x0, 0x3, 0xfff, {0x81, 0x400b}, {0x6, 0x9}, @ramp={0x60, 0x9, {0x0, 0xa3, 0x2, 0x1ff}}}}) ioctl$int_out(0xffffffffffffffff, 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000020101010000000000000000020000000400018018000a801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x86) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f0000000040)='&\x00', 0x0, r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r9, 0x8918, &(0x7f0000000940)={'sit0\x00', {0x2, 0x4e24, @multicast1}}) r10 = syz_clone(0x800, &(0x7f0000000340)="3df694b4c18b807ec790910c4fa7565dbb337eddbe380ed41e5c18e51d75", 0x1e, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) sendmsg$nl_generic(r3, &(0x7f0000001500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000440)={0x104c, 0x32, 0x200, 0x70bd2a, 0x25dfdbfb, {0x10}, [@typed={0x8, 0x13c, 0x0, 0x0, @fd=r1}, @typed={0x14, 0x98, 0x0, 0x0, @ipv6=@loopback}, @generic="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", @nested={0xc, 0x19, 0x0, 0x1, [@typed={0x8, 0xdc, 0x0, 0x0, @pid=r10}]}, @generic="f94475c3bcf826c76b2a2e05bf4f05"]}, 0x104c}, 0x1, 0x0, 0x0, 0x40}, 0x20008095) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0x1, 0x0, 0xf4, 0xcf, 0xfd, 0xd4, 0x1, 0x0, 0x4, 0x3, 0x6}, {0x10102006, 0xffff1000, 0x9, 0x9, 0x7, 0x3, 0x6, 0x5, 0x5, 0xf, 0x3, 0xca}, {0x6000, 0xdddd0000, 0xb, 0x0, 0x6, 0x7, 0x11, 0x21, 0xc, 0x0, 0x6, 0x9}, {0x8000000, 0x8000000, 0xd, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x2, 0x0, 0x9}, {0xffff1000, 0x4, 0x9, 0x7f, 0x10, 0x9, 0x9, 0x6, 0x7, 0x14, 0x2e, 0x4b}, {0x2, 0x4, 0x0, 0x26, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0xdddd1000, 0x6000, 0x8, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x81, 0x0, 0x78}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x5, 0x54, 0x6, 0x2, 0x8}, {0x3000, 0x5}, {0x5000, 0x9}, 0x10000, 0x0, 0x1, 0x22a0, 0x9, 0x0, 0x2000, [0x40000000001, 0x401, 0x8, 0xc5]}) close_range(r0, 0xffffffffffffffff, 0x0) 48.290653529s ago: executing program 34 (id=3120): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair(0xf, 0x3, 0xb83e, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f0000000140)={0xa, 0x4, {0x55, 0x7, 0x1, {0x2, 0x1000}, {0x8, 0x3}, @ramp={0xb7, 0x4, {0x8, 0x2, 0x5, 0xd9f}}}, {0x0, 0x3, 0xfff, {0x81, 0x400b}, {0x6, 0x9}, @ramp={0x60, 0x9, {0x0, 0xa3, 0x2, 0x1ff}}}}) ioctl$int_out(0xffffffffffffffff, 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000020101010000000000000000020000000400018018000a801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x86) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f0000000040)='&\x00', 0x0, r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r9, 0x8918, &(0x7f0000000940)={'sit0\x00', {0x2, 0x4e24, @multicast1}}) r10 = syz_clone(0x800, &(0x7f0000000340)="3df694b4c18b807ec790910c4fa7565dbb337eddbe380ed41e5c18e51d75", 0x1e, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) sendmsg$nl_generic(r3, &(0x7f0000001500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000440)={0x104c, 0x32, 0x200, 0x70bd2a, 0x25dfdbfb, {0x10}, [@typed={0x8, 0x13c, 0x0, 0x0, @fd=r1}, @typed={0x14, 0x98, 0x0, 0x0, @ipv6=@loopback}, @generic="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", @nested={0xc, 0x19, 0x0, 0x1, [@typed={0x8, 0xdc, 0x0, 0x0, @pid=r10}]}, @generic="f94475c3bcf826c76b2a2e05bf4f05"]}, 0x104c}, 0x1, 0x0, 0x0, 0x40}, 0x20008095) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0x1, 0x0, 0xf4, 0xcf, 0xfd, 0xd4, 0x1, 0x0, 0x4, 0x3, 0x6}, {0x10102006, 0xffff1000, 0x9, 0x9, 0x7, 0x3, 0x6, 0x5, 0x5, 0xf, 0x3, 0xca}, {0x6000, 0xdddd0000, 0xb, 0x0, 0x6, 0x7, 0x11, 0x21, 0xc, 0x0, 0x6, 0x9}, {0x8000000, 0x8000000, 0xd, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x2, 0x0, 0x9}, {0xffff1000, 0x4, 0x9, 0x7f, 0x10, 0x9, 0x9, 0x6, 0x7, 0x14, 0x2e, 0x4b}, {0x2, 0x4, 0x0, 0x26, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0xdddd1000, 0x6000, 0x8, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x81, 0x0, 0x78}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x5, 0x54, 0x6, 0x2, 0x8}, {0x3000, 0x5}, {0x5000, 0x9}, 0x10000, 0x0, 0x1, 0x22a0, 0x9, 0x0, 0x2000, [0x40000000001, 0x401, 0x8, 0xc5]}) close_range(r0, 0xffffffffffffffff, 0x0) 954.465654ms ago: executing program 6 (id=3950): syz_io_uring_setup(0x4021, &(0x7f0000000240)={0x0, 0x391, 0x1, 0x8002, 0xda}, 0x0, 0x0) r0 = getpgrp(0x0) r1 = syz_open_procfs(r0, &(0x7f0000000080)='clear_refs\x00') ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={@private2, @dev={0xac, 0x14, 0x14, 0x32}, 0x19, 0x1c}}) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000180)) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000002c0)="35ada6966cb7dfd67e3134799f622a1694b81f013275a39f8ddd28f0403dc11c1e398ca5a0bc79eae94748c35d55548e837ebdf2fd8143a29e7abd2c4ca5c82ef6badeba1f534c52827a1eb5b9877433b369170e2091ae987189e032d036d30356c50ce58cc9b56eb436a650af0a70a476b6d96f237d6f0d4faee6afa4ded542ddc14d18790a7a54faeece6c42f9b147d36ef9a49459a24863c31bb60791bf2b815fddb38f617dc7a872de890a7da8a895f2219e9a7ffb62b447d93d325aa9961ed8f848c5b3194464f498cfb4a496ac38964881b07685d0ebd5c9ecf091ee16e40c451a880b5e51b179cbf288b48710272956a559bcf3e3f5269a039e7f52f0") 856.045492ms ago: executing program 6 (id=3951): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000300)=ANY=[], 0xfdef) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00aa6600000000", 0x8) setsockopt$inet_opts(r1, 0x0, 0xd, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x800, 0x12) 854.416702ms ago: executing program 3 (id=3952): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r2 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000140)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f0000000840)=""/4096, &(0x7f0000000040)=0x1000) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x54, 0x18, 0x0, &(0x7f0000000000)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 852.120642ms ago: executing program 3 (id=3953): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x3, 0x9, 0x4}, 0x10) write(r1, &(0x7f0000000280)="240000001e005f0214ffffffffff08001f000000000000000800"/36, 0x24) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@default_permissions}]}) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 823.800254ms ago: executing program 3 (id=3954): fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x2) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f00000000c0)) r1 = accept(r0, &(0x7f0000000100)=@un=@abs, &(0x7f0000000180)=0x80) splice(r0, &(0x7f00000001c0)=0x7, r0, &(0x7f0000000200)=0xce91, 0x259, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000280)) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f00000002c0)={0x800, 0x1}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000340)={&(0x7f0000000300)=""/10, 0xa}) preadv(r2, &(0x7f0000000640)=[{&(0x7f0000000380)=""/241, 0xf1}, {&(0x7f0000000480)=""/83, 0x53}, {&(0x7f0000000500)=""/112, 0x70}, {&(0x7f0000000580)=""/148, 0x94}], 0x4, 0x8, 0xffffffff) fstat(r0, &(0x7f0000000680)) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x110, r0, 0x0) r4 = syz_io_uring_complete(r3) setsockopt$MRT_PIM(r0, 0x0, 0xcf, &(0x7f0000000700)=0x1, 0x4) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x3000)=nil) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000740)={0xf8, "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"}) lseek(r4, 0x7, 0x3) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000980), 0x2) r5 = syz_usb_connect$cdc_ncm(0x6, 0x76, &(0x7f00000009c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x8, 0x40, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xfbff}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x400, 0x8, 0x2}, {0x6, 0x24, 0x1a, 0x3f08, 0x7}, [@mbim_extended={0x8, 0x24, 0x1c, 0x9, 0xa7, 0x3df3}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x40, 0x0, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xf7, 0x3, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x8, 0x5, 0x2}}}}}}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x310, 0x3, 0x8, 0x5, 0x10, 0x2}, 0x13, &(0x7f0000000a80)={0x5, 0xf, 0x13, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0xe, 0x9, 0xb}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x6, 0x67f}]}, 0x3, [{0xc9, &(0x7f0000000ac0)=@string={0xc9, 0x3, "0e25ccb2f2e52ed22684745efb2ae214cf786c2f162da85f2253cd6a5f3e1578d6a913c8588364efdf9cf288d90393ba851cf847679c79e2441e0cb62b7979312935df7a8edb150edecc79e70a36ca49aff08a980cb44a813e5a969a93f32b03c2b01542d9337866475f55ffc085f6f080cb1657c1e63e47ba11155aec8f889f6fd6e2b552091a2cf95ecf766be098c26f222e3dc61b8e2c1c50b169992c56adad5d135af71e7d086d7b75f1ead1ebd5aec40a0e2a15b8024e0ef815d337e4cd359edb2d3e1920"}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0xc0c}}]}) syz_usb_disconnect(r5) ioctl$KVM_GET_TSC_KHZ_cpu(r0, 0xaea3) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000c80)='./binderfs/custom1\x00', 0x0, 0x0) linkat(r4, &(0x7f0000000cc0)='./file0\x00', r4, &(0x7f0000000d00)='./file0\x00', 0x1400) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000d40)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x4}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000d80)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r6, 0x80047213, &(0x7f0000000dc0)) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000e00)={0x9, "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"}) setsockopt$MRT6_PIM(r4, 0x29, 0xcf, &(0x7f0000001040), 0x4) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000001240)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x4c, 0x0, 0x100, 0x3, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x42}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x8010) 760.084909ms ago: executing program 6 (id=3955): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) r2 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0xcc, 0x0, &(0x7f00000003c0)=[@exit_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0), 0x0, 0x2, 0x3b}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x5d, 0x28, 0x40}}, 0x40}, @clear_death={0x400c630f, 0x2}, @free_buffer={0x40086303, r2}, @increfs={0x40046304, 0x3}, @increfs_done={0x40106308, 0x1}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/139, 0x8b, 0x1, 0x1f}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}}], 0x36, 0x0, &(0x7f00000004c0)="566e9ce33c75c6a89394f77cbf60115b2687bcb91e469e22a88d3a47146389b38a88229c7a828007439bbfd63a8446e2a4d9a7e21f1f"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x19, 0x0, &(0x7f0000000080)="a733974201259ee146d588ae29aca8ee741487850c96be7e39"}) 708.077943ms ago: executing program 6 (id=3956): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000080)) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') r4 = openat2(r3, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)={0x10c00, 0x0, 0x8}, 0x18) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x26) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000009100)={0x14, 0x18, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000880)=ANY=[@ANYBLOB='+cpu'], 0x5) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x3}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x82, 0x0, 0x0, 0x0, 0x15}, @flat=@binder={0x73622a85, 0x100, 0xfffffffffffffffc}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f00000005c0)="2078b98d43d07572a4ac17e070f6e4ffd39036ed0af8f56f83f08868dc94aaa397e205bed98262b9477344a911603869d9f3f877f7aad1829f47273251843760bd7de0381b6c857784bb0ddc8246ff1e0b7dfd6c9276f53e0667dd48f28b11c6b3c7ee46fd0943891c35a7ab3218af5c438fbfe1deef085e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001fc0)={0x14, 0x0, &(0x7f0000000240)=[@increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) 589.092503ms ago: executing program 6 (id=3957): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000018c0)={0x14, 0x25, 0x1, 0x70bd2b, 0x25dfdbfd, "", [@generic='&']}, 0x14}], 0x1, 0x0, 0x0, 0x4050}, 0x40) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) 512.102829ms ago: executing program 6 (id=3958): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000000)=""/42, 0xffffffffffffff54, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x50, 0x0, &(0x7f0000000600)="dd3dcb8ed3596fb60a52f56e1a2d06c921decd52342f658f94085fea462fbe4380e50f0d78e28babedd9607a2d2769cd2b76b86d7a93bd5d36a28631a10f3ca9e13d62b95ef3d9eafed8e5b5bd73f5f4"}) waitid(0x2, 0x0, 0xffffffffffffffff, 0x40000000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x381, 0x3}) r5 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x3065a7505c571d71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000200)=[@free_buffer={0x40086303, r5}], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x68, 0x0, &(0x7f0000000380)=[@dead_binder_done, @exit_looper, @enter_looper, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000500)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/97, 0x61, 0x0, 0x3c}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x2, 0xd}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0xf7, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 511.782099ms ago: executing program 0 (id=3959): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x6e24, 0x0, @mcast1, 0xc}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000003080)=0x7a) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write(r1, &(0x7f0000000300)="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", 0x100a) 490.967791ms ago: executing program 0 (id=3960): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0xff, 0x1, 0x49}, 0x20) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001c40)={'ip6tnl0\x00', &(0x7f0000001bc0)={'syztnl1\x00', 0x0, 0x4, 0x22, 0x1, 0x2, 0x10, @remote, @empty, 0x700, 0x20, 0x1, 0x2}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, 0x0, 0x4) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x80000) read$watch_queue(r4, &(0x7f0000007200)=""/4095, 0xfff) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000040)={0xa0000004}) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x27) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x191}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x5c, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/118, 0x76, 0xfffffffffffffffe, 0x5}, @flat=@binder={0x73622a85, 0xa}}, &(0x7f0000000080)={0x0, 0x18, 0x40}}, 0x1000}, @clear_death], 0x0, 0x0, 0x0}) 471.246032ms ago: executing program 0 (id=3961): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="1a9d00001200e7ef007b0000000000000044", 0x12, 0x4008005, 0x0, 0x13) recvmmsg(r0, &(0x7f0000009080)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/177, 0xb1}, {&(0x7f0000000100)=""/83, 0x53}, {&(0x7f0000004580)=""/4102, 0x1006}], 0x4}, 0x5e}], 0x1, 0x2, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1000, 0x2}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x28, 0x13, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x8, 0x1a, 0x0, 0x1, [@generic="1a1e45cb"]}]}, 0x28}], 0x1}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) (async, rerun: 64) ptrace(0x8, r3) (async, rerun: 64) r4 = getpid() (async) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) (async) bind$tipc(r6, 0x0, 0x0) (async, rerun: 32) bind$tipc(r6, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) (async, rerun: 32) bind$tipc(r5, 0x0, 0x0) (async) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r7) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x18, r8, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000841}, 0x24004084) r9 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r9, &(0x7f0000000480)={&(0x7f0000000280)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000340)=""/122, 0x7a}, {&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000500)=""/103, 0x67}, {&(0x7f0000000740)=""/173, 0xad}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/44, 0x2c}], 0x6, &(0x7f0000000880)=""/80, 0x50}, 0x40000001) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000900)={0x78, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffe}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x16}, @IPVS_SVC_ATTR_PE_NAME={0xfcc5}, @IPVS_SVC_ATTR_FLAGS={0x0, 0x7, {0x20, 0x2}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010101}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x330}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x24040044) 404.212697ms ago: executing program 0 (id=3962): set_robust_list(&(0x7f0000000100)={0x0, 0x4}, 0x18) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xea200, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0xa09ab000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 389.661249ms ago: executing program 0 (id=3964): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x0, 0x0, 0x0, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) prctl$PR_SET_THP_DISABLE(0x29, 0x1) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000003, 0x6031, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) socket$inet6_tcp(0xa, 0x1, 0x0) clock_getres(0xfffffffffffffffa, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) write$tcp_congestion(r6, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r6, 0x50009401, &(0x7f0000000d40)={{}, "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"}) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000040)={[{0x4, 0x4, 0x9, 0x4, 0x4, 0x3, 0xd, 0x3, 0x3, 0x6, 0x5, 0x3, 0x4846b1ce}, {0x630, 0x5, 0x2, 0xff, 0x81, 0x7f, 0x2, 0x3, 0x7, 0x71, 0xd, 0x40, 0x400}, {0x3, 0x2, 0xfe, 0x1, 0x6, 0x6, 0x9, 0xdc, 0x8, 0x5, 0x6, 0x2, 0x4f}], 0x63}) r7 = eventfd(0x5) r8 = eventfd2(0x5, 0x80000) creat(&(0x7f00000001c0)='./bus\x00', 0x11f) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000000c0)={r8, 0x4, 0x2, r7}) close_range(r0, 0xffffffffffffffff, 0x0) 388.669009ms ago: executing program 5 (id=3965): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (rerun: 64) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e000197305e07af0300000000000000", @ANYBLOB="0400"], 0x1c}], 0x1}, 0x0) (async) close_range(r0, r0, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000001e00210000000000000000000a00000005000000000000000a0005"], 0x28}}, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async) mount$bind(0x0, 0x0, 0x0, 0x89101a, 0x0) (async) mount$bind(&(0x7f00000000c0)='.\x00', 0x0, 0x0, 0x80700a, 0x0) (async) r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x3a, 0x37, 0x5, 0x20, 0x781, 0x5, 0x5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xe6, 0x2, 0x2, 0x5b, 0xbd, 0x97, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000140)={0x44, &(0x7f0000000280)={0x20, 0x15, 0x2, 'k\t'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000340)={0x44, &(0x7f00000004c0)=ANY=[@ANYBLOB="402e93bf7ff528233f66ff8e9e8828120200b9c45262835ece78cac724b4969ca1c51cfca879d359bdf8b41ee37e67a4fbdbb163ce665f061839bcfeaa667099b6fc53885d11d04fb6062165bd858770d118650f5e1e862c90abae6c43b3bba0117c74f614431a4fd7599a70bddfae88aa50a9283462d09a6c7354636f7f83aecac38e52309eabd7385f25cf99fa998eabb1b074b8bf53bf40a7792dc40b16212e246076bbd7cdd1c7300f1a9cc949000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) sendmmsg$inet6(r4, &(0x7f0000000c00)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xe8}}], 0x2, 0x931766f6319eed40) (async) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000001c0)={0x20, 0x11, 0x31, "ed4e1673f495b6affa991475636c0ef17bf1da05b0673240f60746e25cf8b2fab93b943e5caf11ed9c50320cd83f9b7eb4"}, 0x0, 0x0}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mlockall(0x0) (async) write(r5, &(0x7f00000000c0)="bba99475105094568ada45167329fd08a88d0d1c94a8d5b6c84db0a187738549e998e09c27e34a450ca7eb503cb9844ee14eb0b7fc2d21a50f4ec99adff0bd2b48cf6cd7d4dbeb4a35d81a91add5f351b63dc21a155f642a5534aff81a1433a6fc394f73bd6541ef031ea87c2fbc1d9c", 0x70) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 356.989711ms ago: executing program 5 (id=3966): madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x6c, r2, 0xc4fc9e906872338b, 0x24, 0x25dfdbff, {{0x15}, {@void, @val={0xc, 0x99, {0xa, 0x2}}}}, [@NL80211_ATTR_TID_CONFIG={0x4c, 0x11d, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x44, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1, 0x7, 0xff7f, 0xffff, 0x7, 0x8000, 0xe1b]}}]}]}]}]}]}, 0x6c}}, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"]) 276.182058ms ago: executing program 5 (id=3967): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086602, &(0x7f0000000080)={@desc={0xffff8000, 0x0, @desc2}}) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r1, 0x45809000) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000100)="240000001e005f1814fffffffffffff807000000b800000000000000080009000d000000", 0x24) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000040)=0x5) r4 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000140), 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000180)={0xc, 0x7ff, 0x4, 0x2, 0x1}) ioctl$BLKRRPART(r3, 0x125f, 0x0) 276.010398ms ago: executing program 5 (id=3968): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000a80)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000001440)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000009080)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)=""/181, 0xb5}, {&(0x7f0000001180)=""/4094, 0xffe}, {&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000500)=""/88, 0x58}, {&(0x7f0000000200)=""/27, 0x1b}, {&(0x7f0000000100)=""/251, 0xfb}], 0x7}, 0xfffffffc}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x2, 0x0) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f00000004c0)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) 255.61323ms ago: executing program 5 (id=3969): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000001600)={0x3, &(0x7f0000000040)=[{0x50, 0x0, 0x0, 0x5}, {0x28, 0x10, 0xfd, 0x7fff}, {0xdc, 0x8, 0x0, 0x80}]}, 0x10) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r2, 0xd6baf000) r3 = creat(&(0x7f0000001380)='./file0\x00', 0x4) mmap(&(0x7f000000a000/0x4000)=nil, 0x4000, 0x4, 0x8031, 0xffffffffffffffff, 0x30500000) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f00000013c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r4, &(0x7f0000000040)={0x18, 0x0, r5, {0x4}}, 0x18) lstat(0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008d"]) r10 = socket$unix(0x1, 0x5, 0x0) setresuid(r6, r6, r6) ioctl$sock_SIOCETHTOOL(r10, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0xd, "f4624400"/13}}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$BINDER_CTL_ADD(r3, 0xc1086201, &(0x7f0000000180)={'custom1\x00'}) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xaece, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) 254.20864ms ago: executing program 0 (id=3970): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x40000000000000, 0xe}, @flat=@weak_handle={0x77682a85, 0x0, 0x2}, @flat=@weak_binder={0x77622a85, 0x0, 0x3}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}, @acquire={0x40046305, 0x3}], 0x157, 0x0, &(0x7f0000000580)="d5151f180793ab3c8ddabd60a973d672476ed34dd147b9b25f5bc4a74735961659b1d7745821b50bba452d8873800ce0dfded6628e79136230b9b85b562c320586cd0b136a82054634d225179829b129a8cdc12f1456d227098bd447a25768f74b711dbdfc3a5c3f2258a6b2e605c5e25ea460bffc34483ca0f6fc477447a71d99ff80cb24d78c2f5bd72111367eb37fc37965e6aff4841fa9a50e79580c266aec4fc253d1a40bb172d2d3ae91a6a48d2899aa9f5e34a29686108c30a0b052c899aab8ed38ea6f3dca0c5953571d1a3a81b3dfa2f8d44e85bc5f9335fb10d0d7dcddc91aa9b25c6764da5c3d8dd3402d0587936375e1901b7b90f65a850f80c655c28ee9e4ced5c448368496997c36f4701f37eabd2a5e74ca7d661b0503baed1bffbfc9455b590c5952103f677ca773dd4bee72463fb6f2560c459428ad0e54adba516b3f3bb2a3b1fa2603f711045a7d4f62684dea3b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 211.480133ms ago: executing program 5 (id=3972): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = getpid() syz_pidfd_open(r1, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x1400037e) (async) inotify_add_watch(0xffffffffffffffff, 0x0, 0x1400037e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="9b", 0x1, 0xfffffffffffffffc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) keyctl$describe(0x6, r2, &(0x7f00000010c0)=""/69, 0x45) mount$incfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000480)='./file0/file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x18) (async) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x18) r5 = socket$inet6(0xa, 0x80002, 0x0) writev(r5, &(0x7f0000000400)=[{&(0x7f0000000440)='X\x00\x00', 0x3}], 0x1) (async) writev(r5, &(0x7f0000000400)=[{&(0x7f0000000440)='X\x00\x00', 0x3}], 0x1) openat$rnullb(0xffffffffffffff9c, 0x0, 0x60a00, 0x0) (async) r6 = openat$rnullb(0xffffffffffffff9c, 0x0, 0x60a00, 0x0) pipe(&(0x7f0000001300)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0x1, {0xa, 0x4e21, 0x7e, @local, 0x7}}}, 0x32) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r8, @ANYBLOB="05", @ANYRES16=r7], 0x0) (async) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r8, @ANYBLOB="05", @ANYRES16=r7], 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e23, 0x10001, @empty, 0x207}, 0xfffffffffffffdbc) getsockopt$inet6_opts(r4, 0x29, 0x37, 0x0, &(0x7f0000000000)=0xa4) (async) getsockopt$inet6_opts(r4, 0x29, 0x37, 0x0, &(0x7f0000000000)=0xa4) 52.220846ms ago: executing program 3 (id=3973): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async, rerun: 32) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x2, @mcast2, 0x3}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 38.667017ms ago: executing program 3 (id=3974): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x38a, 0x3}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000500)=[@increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=3975): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x20001) syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb700000001090212"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 216.970222][ T8819] arch_do_signal_or_restart+0x96/0x720 [ 216.970245][ T8819] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 216.970271][ T8819] irqentry_exit_to_user_mode+0x4e/0xb0 [ 216.970288][ T8819] irqentry_exit+0x16/0x60 [ 216.970303][ T8819] exc_page_fault+0x66/0xc0 [ 216.970319][ T8819] asm_exc_page_fault+0x2b/0x30 [ 216.970341][ T8819] RIP: 0033:0x7fcb4958ebf1 [ 216.970361][ T8819] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 216.970376][ T8819] RSP: 002b:ffffffffffffff30 EFLAGS: 00010217 [ 216.970393][ T8819] RAX: 0000000000000000 RBX: 00007fcb497b5fa0 RCX: 00007fcb4958ebe9 [ 216.970405][ T8819] RDX: 0000000000000000 RSI: ffffffffffffff30 RDI: 000000000320a080 [ 216.970418][ T8819] RBP: 00007fcb49611e19 R08: 0000000000000000 R09: 0000000000000000 [ 216.970430][ T8819] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 216.970441][ T8819] R13: 00007fcb497b6038 R14: 00007fcb497b5fa0 R15: 00007ffcde5c7138 [ 216.970457][ T8819] [ 216.970464][ T8819] memory: usage 305572kB, limit 307200kB, failcnt 76609 [ 217.141411][ T6679] usb 6-1: Using ep0 maxpacket: 8 [ 217.146027][ T8819] memory+swap: usage 423168kB, limit 9007199254740988kB, failcnt 0 [ 217.160439][ T6679] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.313908][ T8819] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 217.315778][ T6679] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.405321][ T8819] Memory cgroup stats for [ 217.424963][ T6679] usb 6-1: config 0 interface 0 has no altsetting 0 [ 217.425001][ T6679] usb 6-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 217.536630][ T8819] /syz0 [ 217.551535][ T6679] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.567847][ T9517] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 217.575405][ T9517] rust_binder: Write failure EINVAL in pid:683 [ 217.575637][ T6679] usb 6-1: config 0 descriptor?? [ 217.592097][ T8819] : [ 217.592247][ T8819] cache 314261504 [ 217.609943][ T8819] rss 217088 [ 217.613349][ T8819] rss_huge 0 [ 217.618271][ T8819] shmem 313958400 [ 217.622860][ T8819] mapped_file 184320 [ 217.627953][ T8819] dirty 0 [ 217.630930][ T8819] writeback 0 [ 217.651698][ T8819] workingset_refault_anon 89 [ 217.656514][ T8819] workingset_refault_file 61895 [ 217.692174][ T9525] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 217.692208][ T9525] rust_binder: Read failure Err(EFAULT) in pid:687 [ 217.704533][ T8819] swap 127954944 [ 217.716744][ T8819] swapcached 40960 [ 217.722086][ T603] rust_binder: 0: removing orphan mapping 0:4120 [ 217.738484][ T8819] pgpgin 477619 [ 217.742178][ T8819] pgpgout 401330 [ 217.745975][ T8819] pgfault 280465 [ 217.750219][ T8819] pgmajfault 1178 [ 217.754209][ T8819] inactive_anon 19357696 [ 217.758719][ T36] audit: type=1326 audit(1755263922.996:32389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9543 comm="syz.3.3034" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2b1698ebe9 code=0x0 [ 217.761403][ T8819] active_anon 294834176 [ 217.785772][ T8819] inactive_file 36864 [ 217.789749][ T8819] active_file 81920 [ 217.793592][ T8819] unevictable 0 [ 217.797048][ T8819] hierarchical_memory_limit 314572800 [ 217.798086][ T9546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.802877][ T8819] hierarchical_memsw_limit 9223372036854771712 [ 217.812590][ T9546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.818065][ T8819] total_cache 314261504 [ 217.829422][ T8819] total_rss 217088 [ 217.829799][ T9546] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:694 [ 217.833241][ T8819] total_rss_huge 0 [ 217.843997][ T9546] rust_binder: 694: no such ref 3 [ 217.846267][ T8819] total_shmem 313958400 [ 217.851252][ T9546] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:694 [ 217.855359][ T8819] total_mapped_file 184320 [ 217.868919][ T8819] total_dirty 0 [ 217.872413][ T8819] total_writeback 0 [ 217.876301][ T8819] total_workingset_refault_anon 89 [ 217.881567][ T8819] total_workingset_refault_file 61895 [ 217.886955][ T8819] total_swap 127954944 [ 217.891046][ T8819] total_swapcached 40960 [ 217.895331][ T8819] total_pgpgin 477619 [ 217.899322][ T8819] total_pgpgout 401330 [ 217.903460][ T8819] total_pgfault 280465 [ 217.907532][ T8819] total_pgmajfault 1178 [ 217.911877][ T8819] total_inactive_anon 19357696 [ 217.916625][ T8819] total_active_anon 294834176 [ 217.921295][ T8819] total_inactive_file 36864 [ 217.925901][ T8819] total_active_file 81920 [ 217.930284][ T8819] total_unevictable 0 [ 217.934295][ T8819] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2794,pid=8827,uid=0 [ 217.949184][ T8819] Memory cgroup out of memory: Killed process 8827 (syz.0.2794) total-vm:89972kB, anon-rss:964kB, file-rss:30044kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:0 [ 218.013706][ T8831] syz.0.2794 invoked oom-killer: gfp_mask=0x2100cca(GFP_HIGHUSER_MOVABLE|__GFP_CMA), order=0, oom_score_adj=0 [ 218.027064][ T6679] ntrig 0003:1B96:0004.0011: unknown main item tag 0x0 [ 218.035837][ T6679] ntrig 0003:1B96:0004.0011: unknown main item tag 0x0 [ 218.042803][ T6679] ntrig 0003:1B96:0004.0011: unknown main item tag 0x0 [ 218.051229][ T6679] ntrig 0003:1B96:0004.0011: unknown main item tag 0x0 [ 218.062578][ T6679] ntrig 0003:1B96:0004.0011: unknown main item tag 0x0 [ 218.076087][ T6679] ntrig 0003:1B96:0004.0011: hidraw0: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.5-1/input0 [ 218.102212][ T8831] CPU: 0 UID: 0 PID: 8831 Comm: syz.0.2794 Not tainted 6.12.38-syzkaller-g450db842cf3b #0 67dc9e25005870c23be976f8e40d6eb6654f4075 [ 218.102242][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 218.102255][ T8831] Call Trace: [ 218.102261][ T8831] [ 218.102270][ T8831] __dump_stack+0x21/0x30 [ 218.102302][ T8831] dump_stack_lvl+0x10c/0x190 [ 218.102324][ T8831] ? __cfi_dump_stack_lvl+0x10/0x10 [ 218.102346][ T8831] ? ___ratelimit+0x3f7/0x5a0 [ 218.102371][ T8831] dump_stack+0x19/0x20 [ 218.102392][ T8831] dump_header+0xd7/0x490 [ 218.102410][ T8831] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 218.102433][ T8831] oom_kill_process+0x4c0/0x7e0 [ 218.102453][ T8831] ? sched_clock_cpu+0x75/0x400 [ 218.102476][ T8831] out_of_memory+0x7ee/0xbd0 [ 218.102495][ T8831] ? __cfi_out_of_memory+0x10/0x10 [ 218.102514][ T8831] ? mutex_lock_killable+0x92/0x1c0 [ 218.102540][ T8831] ? __cfi_mutex_lock_killable+0x10/0x10 [ 218.102566][ T8831] mem_cgroup_out_of_memory+0x279/0x350 [ 218.102584][ T8831] ? drain_obj_stock+0xed0/0xed0 [ 218.102602][ T8831] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 218.102628][ T8831] try_charge_memcg+0x8f7/0xde0 [ 218.102651][ T8831] ? __cfi_try_charge_memcg+0x10/0x10 [ 218.102672][ T8831] ? xas_load+0x3a2/0x3d0 [ 218.102696][ T8831] mem_cgroup_swapin_charge_folio+0x1b3/0x3e0 [ 218.102721][ T8831] __read_swap_cache_async+0x34a/0x690 [ 218.102742][ T8831] swap_cluster_readahead+0x43a/0x530 [ 218.102761][ T8831] ? xas_load+0x3a2/0x3d0 [ 218.102782][ T8831] ? __cfi_swap_cluster_readahead+0x10/0x10 [ 218.102801][ T8831] ? kernel_text_address+0xa9/0xe0 [ 218.102824][ T8831] swapin_readahead+0xf2/0x820 [ 218.102842][ T8831] ? __filemap_get_folio+0x97f/0x9d0 [ 218.102864][ T8831] ? __cfi_swapin_readahead+0x10/0x10 [ 218.102882][ T8831] ? stack_depot_save_flags+0x38/0x800 [ 218.102910][ T8831] ? get_swap_device+0x10f/0x290 [ 218.102929][ T8831] do_swap_page+0x43c/0x42f0 [ 218.102946][ T8831] ? post_alloc_hook+0x3b9/0x3f0 [ 218.102966][ T8831] ? get_page_from_freelist+0x48ce/0x4960 [ 218.102987][ T8831] ? __alloc_pages_noprof+0x31f/0x7b0 [ 218.103009][ T8831] ? __kasan_check_write+0x18/0x20 [ 218.103032][ T8831] ? __update_page_owner_handle+0x318/0x370 [ 218.103055][ T8831] ? __cfi_do_swap_page+0x10/0x10 [ 218.103072][ T8831] ? __set_page_owner+0x3bf/0x5d0 [ 218.103092][ T8831] ? __cfi_default_wake_function+0x10/0x10 [ 218.103114][ T8831] ? __pte_offset_map+0x1b0/0x230 [ 218.103138][ T8831] ? pte_offset_map_rw_nolock+0xba/0x110 [ 218.103161][ T8831] handle_mm_fault+0x1205/0x1b90 [ 218.103180][ T8831] ? __kasan_check_write+0x18/0x20 [ 218.103216][ T8831] ? __cfi_handle_mm_fault+0x10/0x10 [ 218.103235][ T8831] ? follow_page_pte+0x4a3/0xb90 [ 218.103256][ T8831] ? gup_must_unshare+0x1e0/0x1e0 [ 218.103277][ T8831] ? vma_is_secretmem+0x11/0x50 [ 218.103300][ T8831] __get_user_pages+0x1169/0x22d0 [ 218.103322][ T8831] ? __kasan_check_write+0x18/0x20 [ 218.103348][ T8831] ? populate_vma_page_range+0x230/0x230 [ 218.103367][ T8831] ? __alloc_pages_noprof+0x31f/0x7b0 [ 218.103390][ T8831] get_dump_page+0x107/0x220 [ 218.103410][ T8831] ? __cfi_get_dump_page+0x10/0x10 [ 218.103431][ T8831] ? __free_pages+0x6b/0x3b0 [ 218.103451][ T8831] dump_user_range+0x181/0xdf0 [ 218.103475][ T8831] ? __cfi_dump_emit+0x10/0x10 [ 218.103499][ T8831] ? __cfi_dump_user_range+0x10/0x10 [ 218.103524][ T8831] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 218.103550][ T8831] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 218.103575][ T8831] elf_core_dump+0x2cd9/0x3810 [ 218.103598][ T8831] ? __cfi_elf_core_dump+0x10/0x10 [ 218.103624][ T8831] ? dump_interrupted+0xf0/0xf0 [ 218.103647][ T8831] ? filp_open+0x182/0x1d0 [ 218.103668][ T8831] ? 0xffffffffff600000 [ 218.103683][ T8831] do_coredump+0x1bf7/0x2bd0 [ 218.103709][ T8831] ? __cfi_do_coredump+0x10/0x10 [ 218.103732][ T8831] ? asm_exc_page_fault+0x2b/0x30 [ 218.103764][ T8831] ? __kasan_slab_free+0x6a/0x80 [ 218.103786][ T8831] ? kmem_cache_free+0x1c1/0x510 [ 218.103810][ T8831] ? get_signal+0xa75/0x14f0 [ 218.103832][ T8831] get_signal+0x11fd/0x14f0 [ 218.103861][ T8831] arch_do_signal_or_restart+0x96/0x720 [ 218.103887][ T8831] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 218.103914][ T8831] irqentry_exit_to_user_mode+0x4e/0xb0 [ 218.103932][ T8831] irqentry_exit+0x16/0x60 [ 218.103949][ T8831] exc_page_fault+0x66/0xc0 [ 218.103965][ T8831] asm_exc_page_fault+0x2b/0x30 [ 218.103988][ T8831] RIP: 0033:0x7fcb4958ebf1 [ 218.104004][ T8831] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 218.104020][ T8831] RSP: 002b:ffffffffffffff30 EFLAGS: 00010217 [ 218.104038][ T8831] RAX: 0000000000000000 RBX: 00007fcb497b5fa0 RCX: 00007fcb4958ebe9 [ 218.104052][ T8831] RDX: 0000000000000000 RSI: ffffffffffffff30 RDI: 000000000320a080 [ 218.104066][ T8831] RBP: 00007fcb49611e19 R08: 0000000000000000 R09: 0000000000000000 [ 218.104078][ T8831] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 218.104090][ T8831] R13: 00007fcb497b6038 R14: 00007fcb497b5fa0 R15: 00007ffcde5c7138 [ 218.104106][ T8831] [ 218.603901][ T6679] ntrig 0003:1B96:0004.0011: Firmware version: 6.14.22.25.3 (fa3d 33cb) [ 218.691367][ T8831] memory: usage 292092kB, limit 307200kB, failcnt 79971 [ 218.698355][ T8831] memory+swap: usage 413284kB, limit 9007199254740988kB, failcnt 0 [ 218.791377][ T8831] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 218.812246][ T9498] __vm_enough_memory: pid: 9498, comm: syz.5.3016, bytes: 18014402804453376 not enough memory for the allocation [ 218.818184][ T8831] Memory cgroup stats for [ 218.825853][ T6674] usb 6-1: USB disconnect, device number 28 [ 218.838281][ T8831] /syz0: [ 218.838778][ T8831] cache 299126784 [ 218.845304][ T8831] rss 73728 [ 218.848422][ T8831] rss_huge 0 [ 218.851640][ T8831] shmem 297795584 [ 218.855262][ T8831] mapped_file 1171456 [ 218.859248][ T8831] dirty 0 [ 218.862214][ T8831] writeback 0 [ 218.865492][ T8831] workingset_refault_anon 91 [ 218.870074][ T8831] workingset_refault_file 63266 [ 218.871630][ T36] audit: type=1326 audit(1755263924.116:32390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9562 comm="syz.0.3041" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcb4958ebe9 code=0x0 [ 218.875537][ T8831] swap 124104704 [ 218.901383][ T8831] swapcached 8192 [ 218.905010][ T8831] pgpgin 481147 [ 218.913869][ T8831] pgpgout 408608 [ 218.917424][ T8831] pgfault 280717 [ 218.920962][ T8831] pgmajfault 1226 [ 218.924619][ T8831] inactive_anon 286085120 [ 218.930567][ T8831] active_anon 11190272 [ 218.934685][ T8831] inactive_file 0 [ 218.938360][ T8831] active_file 1331200 [ 218.942473][ T8831] unevictable 0 [ 218.947238][ T8831] hierarchical_memory_limit 314572800 [ 218.952733][ T8831] hierarchical_memsw_limit 9223372036854771712 [ 218.959059][ T8831] total_cache 299126784 [ 218.963491][ T8831] total_rss 73728 [ 218.967291][ T8831] total_rss_huge 0 [ 218.972690][ T8831] total_shmem 297795584 [ 218.976857][ T8831] total_mapped_file 1171456 [ 218.981382][ T8831] total_dirty 0 [ 218.984883][ T8831] total_writeback 0 [ 218.988860][ T8831] total_workingset_refault_anon 91 [ 218.995811][ T8831] total_workingset_refault_file 63266 [ 219.001285][ T8831] total_swap 124104704 [ 219.008824][ T8831] total_swapcached 8192 [ 219.013036][ T8831] total_pgpgin 481147 [ 219.017299][ T8831] total_pgpgout 408608 [ 219.021504][ T8831] total_pgfault 280717 [ 219.025659][ T8831] total_pgmajfault 1226 [ 219.030325][ T8831] total_inactive_anon 286085120 [ 219.035271][ T8831] total_active_anon 11190272 [ 219.039855][ T8831] total_inactive_file 0 [ 219.044128][ T8831] total_active_file 1331200 [ 219.048665][ T8831] total_unevictable 0 [ 219.052669][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2794,pid=8852,uid=0 [ 219.067544][ T8831] Memory cgroup out of memory: Killed process 8852 (syz.0.2794) total-vm:89972kB, anon-rss:964kB, file-rss:39516kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:0 [ 219.133451][ T9576] rust_binder: Error while translating object. [ 219.133507][ T9576] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 219.146665][ T9576] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:706 [ 219.184635][ T9578] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.184972][ T9580] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:708 [ 219.194099][ T9579] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:708 [ 219.252543][ T9584] overlayfs: conflicting options: userxattr,redirect_dir=on [ 219.421621][ T603] rust_binder: 9590: removing orphan mapping 0:8 [ 219.585887][ T9605] overlayfs: failed to clone upperpath [ 219.601393][ T6674] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 219.648442][ T36] audit: type=1400 audit(1755263924.886:32391): avc: denied { accept } for pid=9608 comm="syz.3.3059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 219.701359][ T36] audit: type=1326 audit(1755263924.936:32392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9616 comm="syz.3.3061" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b1698ebe9 code=0x0 [ 219.772417][ T6674] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 219.782505][ T8816] syz.0.2794 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 219.783745][ T6674] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.792925][ T8816] CPU: 1 UID: 0 PID: 8816 Comm: syz.0.2794 Not tainted 6.12.38-syzkaller-g450db842cf3b #0 67dc9e25005870c23be976f8e40d6eb6654f4075 [ 219.792956][ T8816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 219.792968][ T8816] Call Trace: [ 219.792974][ T8816] [ 219.792981][ T8816] __dump_stack+0x21/0x30 [ 219.793009][ T8816] dump_stack_lvl+0x10c/0x190 [ 219.793030][ T8816] ? __cfi_dump_stack_lvl+0x10/0x10 [ 219.793051][ T8816] ? ___ratelimit+0x3f7/0x5a0 [ 219.793074][ T8816] dump_stack+0x19/0x20 [ 219.793093][ T8816] dump_header+0xd7/0x490 [ 219.793108][ T8816] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 219.793127][ T8816] oom_kill_process+0x4c0/0x7e0 [ 219.793146][ T8816] ? sched_clock_cpu+0x75/0x400 [ 219.793168][ T8816] out_of_memory+0x7ee/0xbd0 [ 219.793187][ T8816] ? __cfi_out_of_memory+0x10/0x10 [ 219.793210][ T8816] ? mutex_lock_killable+0x92/0x1c0 [ 219.793235][ T8816] ? __cfi_mutex_lock_killable+0x10/0x10 [ 219.793260][ T8816] mem_cgroup_out_of_memory+0x279/0x350 [ 219.793275][ T8816] ? drain_obj_stock+0xed0/0xed0 [ 219.793293][ T8816] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 219.793320][ T8816] try_charge_memcg+0x8f7/0xde0 [ 219.793364][ T8816] ? __cfi_try_charge_memcg+0x10/0x10 [ 219.793386][ T8816] ? __alloc_pages_noprof+0x31f/0x7b0 [ 219.793408][ T8816] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 219.793429][ T8816] __mem_cgroup_charge+0xf6/0x410 [ 219.793452][ T8816] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 219.793475][ T8816] ? __switch_to_asm+0x3d/0x70 [ 219.793500][ T8816] shmem_alloc_and_add_folio+0x86d/0x1050 [ 219.793522][ T8816] ? put_swap_device+0x130/0x130 [ 219.793540][ T8816] ? shmem_huge_global_enabled+0x2da/0x360 [ 219.793557][ T8816] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 219.793575][ T8816] ? __kasan_check_write+0x18/0x20 [ 219.793597][ T8816] ? _raw_spin_lock+0x8c/0x120 [ 219.793617][ T8816] shmem_get_folio_gfp+0x5f0/0x1380 [ 219.793636][ T8816] ? shmem_get_folio+0xc0/0xc0 [ 219.793652][ T8816] ? follow_page_pte+0xa5c/0xb90 [ 219.793673][ T8816] ? inode_to_bdi+0x6d/0x100 [ 219.793695][ T8816] shmem_write_begin+0xf4/0x270 [ 219.793713][ T8816] generic_perform_write+0x32d/0x960 [ 219.793736][ T8816] ? __cfi_generic_perform_write+0x10/0x10 [ 219.793757][ T8816] ? down_write+0xe9/0x2a0 [ 219.793774][ T8816] ? file_update_time+0xa3/0x220 [ 219.793795][ T8816] shmem_file_write_iter+0x105/0x130 [ 219.793816][ T8816] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 219.793836][ T8816] __kernel_write_iter+0x392/0x830 [ 219.793859][ T8816] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 219.793880][ T8816] ? __cfi___kernel_write_iter+0x10/0x10 [ 219.793903][ T8816] ? get_dump_page+0x160/0x220 [ 219.793922][ T8816] ? __asan_memset+0x39/0x50 [ 219.793944][ T8816] ? iov_iter_bvec+0xc0/0x180 [ 219.793962][ T8816] dump_user_range+0xb06/0xdf0 [ 219.793987][ T8816] ? __cfi_dump_emit+0x10/0x10 [ 219.794010][ T8816] ? __cfi_dump_user_range+0x10/0x10 [ 219.794034][ T8816] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 219.794058][ T8816] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 219.794082][ T8816] elf_core_dump+0x2cd9/0x3810 [ 219.794103][ T8816] ? __cfi_elf_core_dump+0x10/0x10 [ 219.794126][ T8816] ? dump_interrupted+0xf0/0xf0 [ 219.794149][ T8816] ? filp_open+0x182/0x1d0 [ 219.794169][ T8816] ? 0xffffffffff600000 [ 219.794183][ T8816] do_coredump+0x1bf7/0x2bd0 [ 219.794208][ T8816] ? __cfi_do_coredump+0x10/0x10 [ 219.794230][ T8816] ? asm_exc_page_fault+0x2b/0x30 [ 219.794259][ T8816] ? __kasan_slab_free+0x6a/0x80 [ 219.794277][ T8816] ? kmem_cache_free+0x1c1/0x510 [ 219.794299][ T8816] ? get_signal+0xa75/0x14f0 [ 219.794320][ T8816] get_signal+0x11fd/0x14f0 [ 219.794354][ T8816] arch_do_signal_or_restart+0x96/0x720 [ 219.794378][ T8816] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 219.794404][ T8816] irqentry_exit_to_user_mode+0x4e/0xb0 [ 219.794421][ T8816] irqentry_exit+0x16/0x60 [ 219.794437][ T8816] exc_page_fault+0x66/0xc0 [ 219.794452][ T8816] asm_exc_page_fault+0x2b/0x30 [ 219.794474][ T8816] RIP: 0033:0x7fcb4958ebf1 [ 219.794489][ T8816] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 219.794503][ T8816] RSP: 002b:ffffffffffffff30 EFLAGS: 00010217 [ 219.794521][ T8816] RAX: 0000000000000000 RBX: 00007fcb497b5fa0 RCX: 00007fcb4958ebe9 [ 219.794534][ T8816] RDX: 0000000000000000 RSI: ffffffffffffff30 RDI: 000000000320a080 [ 219.794546][ T8816] RBP: 00007fcb49611e19 R08: 0000000000000000 R09: 0000000000000000 [ 219.794558][ T8816] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 219.794569][ T8816] R13: 00007fcb497b6038 R14: 00007fcb497b5fa0 R15: 00007ffcde5c7138 [ 219.794584][ T8816] [ 219.794593][ T8816] memory: usage 307200kB, limit 307200kB, failcnt 83256 [ 219.825914][ T6674] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.991537][ T8816] memory+swap: usage 426816kB, limit 9007199254740988kB, failcnt 0 [ 220.034356][ T9630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3065'. [ 220.060771][ T9635] 9pnet_fd: Insufficient options for proto=fd [ 220.062351][ T6674] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 220.279532][ T8816] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 220.287304][ T6674] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 220.296045][ T9647] overlayfs: failed to clone upperpath [ 220.301570][ T6674] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 220.351415][ T6674] usb 6-1: Manufacturer: syz [ 220.356717][ T6674] usb 6-1: config 0 descriptor?? [ 220.400845][ T8816] Memory cgroup stats for /syz0: [ 220.400986][ T8816] cache 303792128 [ 220.415265][ T8816] rss 196608 [ 220.418511][ T8816] rss_huge 0 [ 220.446004][ T8816] shmem 302231552 [ 220.449812][ T8816] mapped_file 1437696 [ 220.486096][ T8816] dirty 0 [ 220.492507][ T8816] writeback 0 [ 220.496244][ T8816] workingset_refault_anon 105 [ 220.510888][ T8816] workingset_refault_file 65753 [ 220.519075][ T8816] swap 127963136 [ 220.522759][ T8816] swapcached 32768 [ 220.526600][ T8816] pgpgin 491149 [ 220.530141][ T8816] pgpgout 417440 [ 220.580924][ T602] rust_binder: 9657: removing orphan mapping 0:4120 [ 220.594893][ T9672] overlayfs: failed to resolve './file0': -2 [ 220.621421][ T8816] pgfault 281326 [ 220.634133][ T8816] pgmajfault 1289 [ 220.642935][ T8816] inactive_anon 194510848 [ 220.674059][ T8816] active_anon 107147264 [ 220.704330][ T8816] inactive_file 0 [ 220.708076][ T8816] active_file 1560576 [ 220.713030][ T8816] unevictable 0 [ 220.716560][ T8816] hierarchical_memory_limit 314572800 [ 220.722275][ T8816] hierarchical_memsw_limit 9223372036854771712 [ 220.728526][ T8816] total_cache 303792128 [ 220.733037][ T8816] total_rss 196608 [ 220.736814][ T8816] total_rss_huge 0 [ 220.740696][ T8816] total_shmem 302231552 [ 220.745329][ T8816] total_mapped_file 1437696 [ 220.749921][ T8816] total_dirty 0 [ 220.753722][ T8816] total_writeback 0 [ 220.757639][ T8816] total_workingset_refault_anon 105 [ 220.766090][ T6674] usbhid 6-1:0.0: can't add hid device: -71 [ 220.772180][ T6674] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 220.782782][ T6674] usb 6-1: USB disconnect, device number 29 [ 220.788804][ T8816] total_workingset_refault_file 65753 [ 220.797164][ T8816] total_swap 127963136 [ 220.801967][ T8816] total_swapcached 32768 [ 220.806419][ T8816] total_pgpgin 491149 [ 220.810452][ T8816] total_pgpgout 417440 [ 220.814950][ T8816] total_pgfault 281326 [ 220.819128][ T8816] total_pgmajfault 1289 [ 220.823506][ T8816] total_inactive_anon 194510848 [ 220.828444][ T8816] total_active_anon 107147264 [ 220.833469][ T8816] total_inactive_file 0 [ 220.837670][ T8816] total_active_file 1560576 [ 220.842273][ T8816] total_unevictable 0 [ 220.846281][ T8816] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2794,pid=8840,uid=0 [ 220.865132][ T8816] Memory cgroup out of memory: Killed process 8840 (syz.0.2794) total-vm:89972kB, anon-rss:964kB, file-rss:29600kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:0 [ 221.048593][ T8816] syz.0.2794 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 221.102563][ T8816] CPU: 0 UID: 0 PID: 8816 Comm: syz.0.2794 Not tainted 6.12.38-syzkaller-g450db842cf3b #0 67dc9e25005870c23be976f8e40d6eb6654f4075 [ 221.102597][ T8816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 221.102609][ T8816] Call Trace: [ 221.102616][ T8816] [ 221.102624][ T8816] __dump_stack+0x21/0x30 [ 221.102652][ T8816] dump_stack_lvl+0x10c/0x190 [ 221.102674][ T8816] ? __cfi_dump_stack_lvl+0x10/0x10 [ 221.102696][ T8816] ? ___ratelimit+0x3f7/0x5a0 [ 221.102719][ T8816] dump_stack+0x19/0x20 [ 221.102740][ T8816] dump_header+0xd7/0x490 [ 221.102758][ T8816] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 221.102780][ T8816] oom_kill_process+0x4c0/0x7e0 [ 221.102800][ T8816] ? sched_clock_cpu+0x75/0x400 [ 221.102823][ T8816] out_of_memory+0x7ee/0xbd0 [ 221.102844][ T8816] ? __cfi_out_of_memory+0x10/0x10 [ 221.102863][ T8816] ? mutex_lock_killable+0x92/0x1c0 [ 221.102888][ T8816] ? __cfi_mutex_lock_killable+0x10/0x10 [ 221.102915][ T8816] mem_cgroup_out_of_memory+0x279/0x350 [ 221.102933][ T8816] ? drain_obj_stock+0xed0/0xed0 [ 221.102952][ T8816] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 221.102978][ T8816] try_charge_memcg+0x8f7/0xde0 [ 221.103001][ T8816] ? __cfi_try_charge_memcg+0x10/0x10 [ 221.103024][ T8816] ? __alloc_pages_noprof+0x31f/0x7b0 [ 221.103046][ T8816] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 221.103068][ T8816] __mem_cgroup_charge+0xf6/0x410 [ 221.103092][ T8816] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 221.103116][ T8816] ? __switch_to_asm+0x3d/0x70 [ 221.103140][ T8816] shmem_alloc_and_add_folio+0x86d/0x1050 [ 221.103163][ T8816] ? put_swap_device+0x130/0x130 [ 221.103181][ T8816] ? shmem_huge_global_enabled+0x2da/0x360 [ 221.103198][ T8816] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 221.103215][ T8816] ? __kasan_check_write+0x18/0x20 [ 221.103244][ T8816] ? _raw_spin_lock+0x8c/0x120 [ 221.103264][ T8816] shmem_get_folio_gfp+0x5f0/0x1380 [ 221.103284][ T8816] ? shmem_get_folio+0xc0/0xc0 [ 221.103301][ T8816] ? follow_page_pte+0xa5c/0xb90 [ 221.103323][ T8816] ? inode_to_bdi+0x6d/0x100 [ 221.103345][ T8816] shmem_write_begin+0xf4/0x270 [ 221.103365][ T8816] generic_perform_write+0x32d/0x960 [ 221.103390][ T8816] ? __cfi_generic_perform_write+0x10/0x10 [ 221.103413][ T8816] ? down_write+0xe9/0x2a0 [ 221.103431][ T8816] ? file_update_time+0xa3/0x220 [ 221.103453][ T8816] shmem_file_write_iter+0x105/0x130 [ 221.103475][ T8816] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 221.103496][ T8816] __kernel_write_iter+0x392/0x830 [ 221.103521][ T8816] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 221.103543][ T8816] ? __cfi___kernel_write_iter+0x10/0x10 [ 221.103566][ T8816] ? get_dump_page+0x160/0x220 [ 221.103587][ T8816] ? __asan_memset+0x39/0x50 [ 221.103613][ T8816] ? iov_iter_bvec+0xc0/0x180 [ 221.103633][ T8816] dump_user_range+0xb06/0xdf0 [ 221.103660][ T8816] ? __cfi_dump_emit+0x10/0x10 [ 221.103685][ T8816] ? __cfi_dump_user_range+0x10/0x10 [ 221.103709][ T8816] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 221.103735][ T8816] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 221.103761][ T8816] elf_core_dump+0x2cd9/0x3810 [ 221.103782][ T8816] ? __cfi_elf_core_dump+0x10/0x10 [ 221.103806][ T8816] ? dump_interrupted+0xf0/0xf0 [ 221.103829][ T8816] ? filp_open+0x182/0x1d0 [ 221.103849][ T8816] ? 0xffffffffff600000 [ 221.103865][ T8816] do_coredump+0x1bf7/0x2bd0 [ 221.103892][ T8816] ? __cfi_do_coredump+0x10/0x10 [ 221.103915][ T8816] ? asm_exc_page_fault+0x2b/0x30 [ 221.103947][ T8816] ? __kasan_slab_free+0x6a/0x80 [ 221.103965][ T8816] ? kmem_cache_free+0x1c1/0x510 [ 221.103989][ T8816] ? get_signal+0xa75/0x14f0 [ 221.104011][ T8816] get_signal+0x11fd/0x14f0 [ 221.104034][ T8816] arch_do_signal_or_restart+0x96/0x720 [ 221.104059][ T8816] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 221.104086][ T8816] irqentry_exit_to_user_mode+0x4e/0xb0 [ 221.104105][ T8816] irqentry_exit+0x16/0x60 [ 221.104121][ T8816] exc_page_fault+0x66/0xc0 [ 221.104138][ T8816] asm_exc_page_fault+0x2b/0x30 [ 221.104161][ T8816] RIP: 0033:0x7fcb4958ebf1 [ 221.104177][ T8816] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 221.104193][ T8816] RSP: 002b:ffffffffffffff30 EFLAGS: 00010217 [ 221.104211][ T8816] RAX: 0000000000000000 RBX: 00007fcb497b5fa0 RCX: 00007fcb4958ebe9 [ 221.104225][ T8816] RDX: 0000000000000000 RSI: ffffffffffffff30 RDI: 000000000320a080 [ 221.104243][ T8816] RBP: 00007fcb49611e19 R08: 0000000000000000 R09: 0000000000000000 [ 221.104256][ T8816] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 221.104268][ T8816] R13: 00007fcb497b6038 R14: 00007fcb497b5fa0 R15: 00007ffcde5c7138 [ 221.104284][ T8816] [ 221.107551][ T8816] memory: usage 294088kB, limit 307200kB, failcnt 84838 [ 221.434497][ T9699] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=37892 sclass=netlink_xfrm_socket pid=9699 comm=syz.5.3089 [ 221.437922][ T8816] memory+swap: usage 430712kB, limit 9007199254740988kB, failcnt 0 [ 221.511448][ T36] audit: type=1400 audit(1755263926.746:32393): avc: denied { bind } for pid=9692 comm="syz.5.3089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 221.517962][ T8816] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 221.585810][ T9706] syz.4.3092 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 221.674948][ T9709] netlink: 'syz.5.3094': attribute type 2 has an invalid length. [ 221.696683][ T9709] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4216, limit: 5264, size: 18446744073709551583) [ 221.696709][ T9709] rust_binder: Error while translating object. [ 221.714515][ T9709] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 221.720730][ T9709] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:295 [ 221.723074][ T8816] Memory cgroup stats for /syz0: [ 221.745459][ T8816] cache 314281984 [ 221.755813][ T8816] rss 139264 [ 221.759670][ T8816] rss_huge 0 [ 221.771549][ T8816] shmem 314269696 [ 221.775372][ T36] audit: type=1400 audit(1755263927.016:32394): avc: denied { append } for pid=9713 comm="syz.4.3096" name="binder1" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 221.803477][ T8816] mapped_file 0 [ 221.807011][ T8816] dirty 0 [ 221.809987][ T8816] writeback 0 [ 221.813600][ T8816] workingset_refault_anon 111 [ 221.824467][ T8816] workingset_refault_file 67293 [ 221.829420][ T8816] swap 127815680 [ 221.834023][ T8816] swapcached 180224 [ 221.838050][ T8816] pgpgin 505937 [ 221.842382][ T8816] pgpgout 429648 [ 221.846274][ T8816] pgfault 282273 [ 221.849929][ T8816] pgmajfault 1306 [ 221.855760][ T1191] Bluetooth: hci1: Frame reassembly failed (-84) [ 221.863877][ T8816] inactive_anon 202653696 [ 221.870317][ T8816] active_anon 111906816 [ 221.874850][ T8816] inactive_file 12288 [ 221.878935][ T8816] active_file 0 [ 221.883196][ T8816] unevictable 0 [ 221.886841][ T9718] netlink: 'syz.5.3098': attribute type 4 has an invalid length. [ 221.886863][ T8816] hierarchical_memory_limit 314572800 [ 221.900343][ T8816] hierarchical_memsw_limit 9223372036854771712 [ 221.901359][ T9718] netlink: 17 bytes leftover after parsing attributes in process `syz.5.3098'. [ 221.906799][ T8816] total_cache 314281984 [ 221.920500][ T8816] total_rss 139264 [ 221.924542][ T8816] total_rss_huge 0 [ 221.929956][ T8816] total_shmem 314269696 [ 221.929969][ T9718] netlink: 'syz.5.3098': attribute type 1 has an invalid length. [ 221.934457][ T8816] total_mapped_file 0 [ 221.946176][ T8816] total_dirty 0 [ 221.949808][ T8816] total_writeback 0 [ 221.953888][ T8816] total_workingset_refault_anon 111 [ 221.959214][ T8816] total_workingset_refault_file 67293 [ 221.961362][ T9718] netlink: 'syz.5.3098': attribute type 2 has an invalid length. [ 221.964908][ T8816] total_swap 127815680 [ 221.976690][ T8816] total_swapcached 180224 [ 221.983921][ T8816] total_pgpgin 505937 [ 221.988048][ T8816] total_pgpgout 429648 [ 221.992456][ T8816] total_pgfault 282273 [ 221.996601][ T8816] total_pgmajfault 1306 [ 222.000903][ T8816] total_inactive_anon 202653696 [ 222.006076][ T8816] total_active_anon 111906816 [ 222.010824][ T8816] total_inactive_file 12288 [ 222.015753][ T8816] total_active_file 0 [ 222.019812][ T8816] total_unevictable 0 [ 222.024051][ T8816] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2794,pid=8829,uid=0 [ 222.039198][ T8816] Memory cgroup out of memory: Killed process 8829 (syz.0.2794) total-vm:89972kB, anon-rss:964kB, file-rss:27676kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:0 [ 222.138130][ T9707] syz-executor invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 222.213143][ T9707] CPU: 0 UID: 0 PID: 9707 Comm: syz-executor Not tainted 6.12.38-syzkaller-g450db842cf3b #0 67dc9e25005870c23be976f8e40d6eb6654f4075 [ 222.213178][ T9707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 222.213190][ T9707] Call Trace: [ 222.213197][ T9707] [ 222.213205][ T9707] __dump_stack+0x21/0x30 [ 222.213233][ T9707] dump_stack_lvl+0x10c/0x190 [ 222.213256][ T9707] ? __cfi_dump_stack_lvl+0x10/0x10 [ 222.213277][ T9707] ? ___ratelimit+0x3f7/0x5a0 [ 222.213301][ T9707] dump_stack+0x19/0x20 [ 222.213322][ T9707] dump_header+0xd7/0x490 [ 222.213340][ T9707] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 222.213362][ T9707] oom_kill_process+0x4c0/0x7e0 [ 222.213384][ T9707] ? sched_clock_cpu+0x75/0x400 [ 222.213407][ T9707] out_of_memory+0x7ee/0xbd0 [ 222.213427][ T9707] ? __cfi_out_of_memory+0x10/0x10 [ 222.213446][ T9707] ? mutex_lock_killable+0x104/0x1c0 [ 222.213472][ T9707] ? __cfi_mutex_lock_killable+0x10/0x10 [ 222.213498][ T9707] mem_cgroup_out_of_memory+0x279/0x350 [ 222.213516][ T9707] ? drain_obj_stock+0xed0/0xed0 [ 222.213534][ T9707] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 222.213560][ T9707] try_charge_memcg+0x8f7/0xde0 [ 222.213583][ T9707] ? __cfi_try_charge_memcg+0x10/0x10 [ 222.213605][ T9707] ? __alloc_pages_noprof+0x31f/0x7b0 [ 222.213628][ T9707] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 222.213650][ T9707] __mem_cgroup_charge+0xf6/0x410 [ 222.213675][ T9707] ? __cfi_lru_add+0x10/0x10 [ 222.213694][ T9707] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 222.213719][ T9707] folio_prealloc+0x67/0x240 [ 222.213739][ T9707] do_wp_page+0x1885/0x2ed0 [ 222.213758][ T9707] ? cgroup_rstat_updated+0x132/0x7f0 [ 222.213783][ T9707] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 222.213805][ T9707] ? folio_put+0x90/0x90 [ 222.213823][ T9707] ? __cfi__raw_spin_lock+0x10/0x10 [ 222.213843][ T9707] ? __pte_offset_map+0x1b0/0x230 [ 222.213865][ T9707] ? pte_offset_map_rw_nolock+0xba/0x110 [ 222.213888][ T9707] handle_mm_fault+0xff7/0x1b90 [ 222.213909][ T9707] ? __cfi_handle_mm_fault+0x10/0x10 [ 222.213926][ T9707] ? lock_vma_under_rcu+0x49d/0x530 [ 222.213955][ T9707] do_user_addr_fault+0x96c/0x1200 [ 222.213980][ T9707] ? arch_exit_to_user_mode_prepare+0x22/0x70 [ 222.214004][ T9707] exc_page_fault+0x59/0xc0 [ 222.214020][ T9707] asm_exc_page_fault+0x2b/0x30 [ 222.214044][ T9707] RIP: 0033:0x7fcb49585254 [ 222.214060][ T9707] Code: 84 d6 00 48 8d 05 7c 84 d6 00 49 8b 92 c0 02 00 00 66 49 0f 6e c1 66 48 0f 6e c8 49 8b 82 c8 02 00 00 66 0f 6c c0 66 0f 6c c9 <48> 89 42 08 48 89 10 31 c0 0f 11 05 5c 84 d6 00 0f 11 0d 45 84 d6 [ 222.214076][ T9707] RSP: 002b:00007ffcde5c73c0 EFLAGS: 00010246 [ 222.214094][ T9707] RAX: 00007fcb4a2ed6b0 RBX: 0000000000000000 RCX: 00007fcb4958548d [ 222.214109][ T9707] RDX: 00007fcb4a2ed6b0 RSI: 0000000000000018 RDI: 000055555695b7e0 [ 222.214122][ T9707] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fcb4a2ed6c0 [ 222.214135][ T9707] R10: 000055555695b500 R11: 00007fcb4a2ed6c0 R12: 0000000000000000 [ 222.214148][ T9707] R13: 00000000000927c0 R14: 000000000003612a R15: 00007ffcde5c7550 [ 222.214163][ T9707] [ 222.214170][ T9707] memory: usage 306716kB, limit 307200kB, failcnt 86067 [ 222.221382][ T602] usb 6-1: new low-speed USB device number 30 using dummy_hcd [ 222.377298][ T9707] memory+swap: usage 431608kB, limit 9007199254740988kB, failcnt 0 [ 222.522691][ T602] usb 6-1: unable to get BOS descriptor or descriptor too short [ 222.545397][ T602] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x1 is Bulk; changing to Interrupt [ 222.555627][ T602] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x82 is Bulk; changing to Interrupt [ 222.569547][ T602] usb 6-1: config 1 interface 0 has no altsetting 0 [ 222.581429][ T602] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 222.590657][ T602] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.598838][ T602] usb 6-1: SerialNumber: Њ [ 222.604619][ T9718] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 222.612245][ T9718] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 222.621357][ T9707] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 222.628307][ T9707] Memory cgroup stats for /syz0: [ 222.628440][ T9707] cache 314159104 [ 222.637080][ T9707] rss 196608 [ 222.640277][ T9707] rss_huge 0 [ 222.643721][ T9707] shmem 314159104 [ 222.647418][ T9707] mapped_file 0 [ 222.651015][ T9707] dirty 0 [ 222.654355][ T9707] writeback 172032 [ 222.658144][ T9707] workingset_refault_anon 133 [ 222.663107][ T9707] workingset_refault_file 68398 [ 222.668063][ T9707] swap 127737856 [ 222.671834][ T9707] swapcached 258048 [ 222.675912][ T9707] pgpgin 515367 [ 222.679696][ T9707] pgpgout 439086 [ 222.683552][ T9707] pgfault 282413 [ 222.687219][ T9707] pgmajfault 1341 [ 222.690886][ T9707] inactive_anon 80060416 [ 222.695558][ T9707] active_anon 234217472 [ 222.699813][ T9707] inactive_file 0 [ 222.704065][ T9707] active_file 0 [ 222.707562][ T9707] unevictable 0 [ 222.711239][ T9707] hierarchical_memory_limit 314572800 [ 222.717263][ T9707] hierarchical_memsw_limit 9223372036854771712 [ 222.723492][ T9707] total_cache 314159104 [ 222.727652][ T9707] total_rss 196608 [ 222.731407][ T9707] total_rss_huge 0 [ 222.735114][ T9707] total_shmem 314159104 [ 222.739250][ T9707] total_mapped_file 0 [ 222.743247][ T9707] total_dirty 0 [ 222.746710][ T9707] total_writeback 172032 [ 222.750950][ T9707] total_workingset_refault_anon 133 [ 222.756176][ T9707] total_workingset_refault_file 68398 [ 222.761759][ T9707] total_swap 127737856 [ 222.765863][ T9707] total_swapcached 258048 [ 222.770205][ T9707] total_pgpgin 515367 [ 222.774269][ T9707] total_pgpgout 439086 [ 222.778421][ T9707] total_pgfault 282413 [ 222.782506][ T9707] total_pgmajfault 1341 [ 222.786656][ T9707] total_inactive_anon 80060416 [ 222.791452][ T9707] total_active_anon 234217472 [ 222.796207][ T9707] total_inactive_file 0 [ 222.800363][ T9707] total_active_file 0 [ 222.804478][ T9707] total_unevictable 0 [ 222.808478][ T9707] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2794,pid=8822,uid=0 [ 222.823378][ T9707] Memory cgroup out of memory: Killed process 8822 (syz.0.2794) total-vm:89972kB, anon-rss:964kB, file-rss:25860kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:0 [ 222.851503][ T8832] syz.0.2794 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 222.861109][ T8832] CPU: 0 UID: 0 PID: 8832 Comm: syz.0.2794 Not tainted 6.12.38-syzkaller-g450db842cf3b #0 67dc9e25005870c23be976f8e40d6eb6654f4075 [ 222.861141][ T8832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 222.861154][ T8832] Call Trace: [ 222.861161][ T8832] [ 222.861169][ T8832] __dump_stack+0x21/0x30 [ 222.861198][ T8832] dump_stack_lvl+0x10c/0x190 [ 222.861220][ T8832] ? __cfi_dump_stack_lvl+0x10/0x10 [ 222.861243][ T8832] ? ___ratelimit+0x3f7/0x5a0 [ 222.861268][ T8832] dump_stack+0x19/0x20 [ 222.861290][ T8832] dump_header+0xd7/0x490 [ 222.861308][ T8832] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 222.861333][ T8832] oom_kill_process+0x4c0/0x7e0 [ 222.861354][ T8832] ? sched_clock_cpu+0x75/0x400 [ 222.861377][ T8832] out_of_memory+0x7ee/0xbd0 [ 222.861398][ T8832] ? __cfi_out_of_memory+0x10/0x10 [ 222.861417][ T8832] ? mutex_lock_killable+0x104/0x1c0 [ 222.861442][ T8832] ? __cfi_mutex_lock_killable+0x10/0x10 [ 222.861465][ T8832] mem_cgroup_out_of_memory+0x279/0x350 [ 222.861481][ T8832] ? drain_obj_stock+0xed0/0xed0 [ 222.861496][ T8832] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 222.861522][ T8832] try_charge_memcg+0x8f7/0xde0 [ 222.861542][ T8832] ? __cfi_try_charge_memcg+0x10/0x10 [ 222.861562][ T8832] ? __alloc_pages_noprof+0x31f/0x7b0 [ 222.861581][ T8832] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 222.861600][ T8832] ? __folio_batch_add_and_move+0x2fe/0x370 [ 222.861618][ T8832] __mem_cgroup_charge+0xf6/0x410 [ 222.861641][ T8832] ? _raw_spin_lock+0x8c/0x120 [ 222.861662][ T8832] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 222.861687][ T8832] shmem_alloc_and_add_folio+0x86d/0x1050 [ 222.861710][ T8832] ? put_swap_device+0x130/0x130 [ 222.861729][ T8832] ? shmem_huge_global_enabled+0x2da/0x360 [ 222.861748][ T8832] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 222.861766][ T8832] ? __kasan_check_write+0x18/0x20 [ 222.861790][ T8832] ? _raw_spin_lock+0x8c/0x120 [ 222.861899][ T8832] shmem_get_folio_gfp+0x5f0/0x1380 [ 222.861924][ T8832] ? shmem_get_folio+0xc0/0xc0 [ 222.861941][ T8832] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 222.861963][ T8832] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 222.861987][ T8832] ? inode_to_bdi+0x6d/0x100 [ 222.862009][ T8832] shmem_write_begin+0xf4/0x270 [ 222.862030][ T8832] generic_perform_write+0x32d/0x960 [ 222.862056][ T8832] ? __cfi_generic_perform_write+0x10/0x10 [ 222.862075][ T8832] ? down_write+0xe9/0x2a0 [ 222.862089][ T8832] ? mnt_get_write_access_file+0x1af/0x3b0 [ 222.862111][ T8832] ? mnt_put_write_access_file+0xc2/0x100 [ 222.862133][ T8832] ? file_update_time+0x1ef/0x220 [ 222.862157][ T8832] shmem_file_write_iter+0x105/0x130 [ 222.862179][ T8832] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 222.862201][ T8832] __kernel_write_iter+0x392/0x830 [ 222.862228][ T8832] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 222.862251][ T8832] ? __cfi___kernel_write_iter+0x10/0x10 [ 222.862276][ T8832] ? get_dump_page+0x160/0x220 [ 222.862298][ T8832] ? __asan_memset+0x39/0x50 [ 222.862322][ T8832] ? iov_iter_bvec+0xc0/0x180 [ 222.862343][ T8832] dump_user_range+0xb06/0xdf0 [ 222.862371][ T8832] ? __cfi_dump_emit+0x10/0x10 [ 222.862395][ T8832] ? __cfi_dump_user_range+0x10/0x10 [ 222.862421][ T8832] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 222.862446][ T8832] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 222.862469][ T8832] elf_core_dump+0x2cd9/0x3810 [ 222.862490][ T8832] ? __cfi_elf_core_dump+0x10/0x10 [ 222.862512][ T8832] ? dump_interrupted+0xf0/0xf0 [ 222.862535][ T8832] ? filp_open+0x182/0x1d0 [ 222.862558][ T8832] ? 0xffffffffff600000 [ 222.862573][ T8832] do_coredump+0x1bf7/0x2bd0 [ 222.862599][ T8832] ? __cfi_do_coredump+0x10/0x10 [ 222.862624][ T8832] ? asm_exc_page_fault+0x2b/0x30 [ 222.862656][ T8832] ? __kasan_slab_free+0x6a/0x80 [ 222.862676][ T8832] ? kmem_cache_free+0x1c1/0x510 [ 222.862700][ T8832] ? get_signal+0xa75/0x14f0 [ 222.862723][ T8832] get_signal+0x11fd/0x14f0 [ 222.862747][ T8832] arch_do_signal_or_restart+0x96/0x720 [ 222.862773][ T8832] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 222.862803][ T8832] irqentry_exit_to_user_mode+0x4e/0xb0 [ 222.862836][ T8832] irqentry_exit+0x16/0x60 [ 222.862853][ T8832] exc_page_fault+0x66/0xc0 [ 222.862871][ T8832] asm_exc_page_fault+0x2b/0x30 [ 222.862895][ T8832] RIP: 0033:0x7fcb4958ebf1 [ 222.862912][ T8832] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 222.862927][ T8832] RSP: 002b:ffffffffffffff30 EFLAGS: 00010217 [ 222.862946][ T8832] RAX: 0000000000000000 RBX: 00007fcb497b5fa0 RCX: 00007fcb4958ebe9 [ 222.862976][ T8832] RDX: 0000000000000000 RSI: ffffffffffffff30 RDI: 000000000320a080 [ 222.862989][ T8832] RBP: 00007fcb49611e19 R08: 0000000000000000 R09: 0000000000000000 [ 222.863002][ T8832] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 222.863014][ T8832] R13: 00007fcb497b6038 R14: 00007fcb497b5fa0 R15: 00007ffcde5c7138 [ 222.863030][ T8832] [ 222.943053][ T602] usb 6-1: USB disconnect, device number 30 [ 222.950592][ T8832] memory: usage 278560kB, limit 307200kB, failcnt 87782 [ 223.357003][ T8832] memory+swap: usage 390516kB, limit 9007199254740988kB, failcnt 0 [ 223.366218][ T8832] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 223.373115][ T8832] Memory cgroup stats for /syz0: [ 223.373228][ T8832] cache 285057024 [ 223.381841][ T8832] rss 176128 [ 223.385058][ T8832] rss_huge 0 [ 223.388252][ T8832] shmem 285057024 [ 223.391930][ T8832] mapped_file 0 [ 223.395418][ T8832] dirty 0 [ 223.398352][ T8832] writeback 0 [ 223.401660][ T8832] workingset_refault_anon 133 [ 223.406363][ T8832] workingset_refault_file 68398 [ 223.411233][ T8832] swap 114642944 [ 223.414851][ T8832] swapcached 81920 [ 223.418672][ T8832] pgpgin 515408 [ 223.422213][ T8832] pgpgout 446279 [ 223.425852][ T8832] pgfault 282499 [ 223.429402][ T8832] pgmajfault 1341 [ 223.433116][ T8832] inactive_anon 85508096 [ 223.437395][ T8832] active_anon 199737344 [ 223.441603][ T8832] inactive_file 0 [ 223.445376][ T8832] active_file 0 [ 223.448838][ T8832] unevictable 0 [ 223.452536][ T8832] hierarchical_memory_limit 314572800 [ 223.457916][ T8832] hierarchical_memsw_limit 9223372036854771712 [ 223.464092][ T8832] total_cache 285057024 [ 223.468253][ T8832] total_rss 176128 [ 223.472079][ T8832] total_rss_huge 0 [ 223.475803][ T8832] total_shmem 285057024 [ 223.479941][ T8832] total_mapped_file 0 [ 223.483955][ T8832] total_dirty 0 [ 223.487410][ T8832] total_writeback 0 [ 223.491196][ T8832] total_workingset_refault_anon 133 [ 223.496440][ T8832] total_workingset_refault_file 68398 [ 223.501836][ T8832] total_swap 114642944 [ 223.505890][ T8832] total_swapcached 81920 [ 223.510111][ T8832] total_pgpgin 515408 [ 223.514113][ T8832] total_pgpgout 446279 [ 223.518260][ T8832] total_pgfault 282499 [ 223.522343][ T8832] total_pgmajfault 1341 [ 223.526483][ T8832] total_inactive_anon 85508096 [ 223.531226][ T8832] total_active_anon 199737344 [ 223.535919][ T8832] total_inactive_file 0 [ 223.540066][ T8832] total_active_file 0 [ 223.544077][ T8832] total_unevictable 0 [ 223.548049][ T8832] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2794,pid=8832,uid=0 [ 223.563470][ T8832] Memory cgroup out of memory: Killed process 8832 (syz.0.2794) total-vm:89972kB, anon-rss:964kB, file-rss:25744kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:0 [ 223.881383][ T52] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 223.887596][ T652] Bluetooth: hci1: command 0x1003 tx timeout [ 223.900979][ T6678] rust_binder: 9713: removing orphan mapping 0:4120 [ 223.929158][ T9729] rust_binder: Read failure Err(EAGAIN) in pid:756 [ 223.929226][ T9729] rust_binder: got new transaction with bad transaction stack [ 223.939640][ T9729] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:756 [ 224.029775][ T9741] input: syz1 as /devices/virtual/input/input16 [ 224.293513][ T9763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.302775][ T9763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.311777][ T9763] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3112'. [ 224.340548][ T36] audit: type=1326 audit(1755263929.576:32395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9764 comm="syz.0.3111" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb4958ebe9 code=0x0 [ 224.562423][ T9768] fuse: Bad value for 'user_id' [ 224.584322][ T9778] /dev/loop0: Can't lookup blockdev [ 224.619190][ T9768] fuse: Bad value for 'user_id' [ 224.670555][ T9779] netlink: 'syz.3.3115': attribute type 4 has an invalid length. [ 224.679084][ T9779] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3115'. [ 224.688622][ T9779] netlink: 'syz.3.3115': attribute type 1 has an invalid length. [ 224.696605][ T9779] netlink: 'syz.3.3115': attribute type 2 has an invalid length. [ 224.982158][ T9783] rust_binder: Write failure EFAULT in pid:308 [ 224.982354][ T9784] rust_binder: Write failure EFAULT in pid:308 [ 225.019158][ T6679] usb 5-1: USB disconnect, device number 15 [ 225.142102][ T12] bridge_slave_1: left allmulticast mode [ 225.147798][ T12] bridge_slave_1: left promiscuous mode [ 225.153465][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.241388][ T6678] usb 6-1: new low-speed USB device number 31 using dummy_hcd [ 225.291007][ T12] veth1_macvtap: left promiscuous mode [ 225.296628][ T12] veth0_vlan: left promiscuous mode [ 225.349881][ T9803] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.356978][ T9803] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.364065][ T9803] bridge_slave_0: entered allmulticast mode [ 225.370435][ T9803] bridge_slave_0: entered promiscuous mode [ 225.376797][ T9803] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.383947][ T9803] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.391285][ T9803] bridge_slave_1: entered allmulticast mode [ 225.397690][ T9803] bridge_slave_1: entered promiscuous mode [ 225.405022][ T6678] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.415296][ T6678] usb 6-1: config 0 has no interfaces? [ 225.420830][ T6678] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 225.429916][ T6678] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.439642][ T6678] usb 6-1: config 0 descriptor?? [ 225.501414][ T9803] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.508594][ T9803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.515917][ T9803] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.523087][ T9803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.541782][ T1191] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.549164][ T1191] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.558451][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.565547][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.574795][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.581863][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.605775][ T9803] veth0_vlan: entered promiscuous mode [ 225.616118][ T9803] veth1_macvtap: entered promiscuous mode [ 225.652017][ T6679] usb 6-1: USB disconnect, device number 31 [ 225.696007][ T1191] Bluetooth: hci0: Frame reassembly failed (-84) [ 225.941442][ T6679] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 226.091471][ T6679] usb 6-1: Using ep0 maxpacket: 32 [ 226.098676][ T6679] usb 6-1: config 9 has an invalid interface number: 214 but max is 3 [ 226.106925][ T6679] usb 6-1: config 9 has an invalid interface number: 142 but max is 3 [ 226.115284][ T6679] usb 6-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 226.124565][ T6679] usb 6-1: config 9 has an invalid interface number: 180 but max is 3 [ 226.132815][ T6679] usb 6-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 226.141886][ T6679] usb 6-1: config 9 has an invalid interface number: 4 but max is 3 [ 226.150313][ T6679] usb 6-1: config 9 has no interface number 0 [ 226.152843][ T9832] overlay: ./file0 is not a directory [ 226.156505][ T6679] usb 6-1: config 9 has no interface number 1 [ 226.168025][ T6679] usb 6-1: config 9 has no interface number 2 [ 226.174162][ T6679] usb 6-1: config 9 has no interface number 3 [ 226.180260][ T6679] usb 6-1: config 9 interface 214 altsetting 54 has an endpoint descriptor with address 0x66, changing to 0x6 [ 226.192043][ T6679] usb 6-1: config 9 interface 214 altsetting 54 endpoint 0x6 has invalid maxpacket 61362, setting to 1024 [ 226.203436][ T6679] usb 6-1: config 9 interface 214 altsetting 54 bulk endpoint 0x6 has invalid maxpacket 1024 [ 226.213677][ T6679] usb 6-1: config 9 interface 214 altsetting 54 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 226.224676][ T6679] usb 6-1: config 9 interface 214 altsetting 54 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 226.236506][ T6679] usb 6-1: config 9 interface 214 altsetting 54 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 226.249707][ T6679] usb 6-1: config 9 interface 142 altsetting 22 has a duplicate endpoint with address 0x1, skipping [ 226.260589][ T6679] usb 6-1: config 9 interface 142 altsetting 22 has a duplicate endpoint with address 0xB, skipping [ 226.271444][ T6679] usb 6-1: config 9 interface 142 altsetting 22 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 226.282935][ T6679] usb 6-1: config 9 interface 142 altsetting 22 bulk endpoint 0x8 has invalid maxpacket 32 [ 226.292973][ T6679] usb 6-1: config 9 interface 142 altsetting 22 has an invalid descriptor for endpoint zero, skipping [ 226.304235][ T6679] usb 6-1: config 9 interface 142 altsetting 22 has a duplicate endpoint with address 0x4, skipping [ 226.315025][ T6679] usb 6-1: config 9 interface 142 altsetting 22 has a duplicate endpoint with address 0x9, skipping [ 226.325977][ T6679] usb 6-1: config 9 interface 180 altsetting 4 has an endpoint descriptor with address 0x2F, changing to 0xF [ 226.337588][ T6679] usb 6-1: config 9 interface 180 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 226.348509][ T6679] usb 6-1: config 9 interface 180 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 226.359409][ T6679] usb 6-1: config 9 interface 180 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 226.370436][ T6679] usb 6-1: config 9 interface 180 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 226.381155][ T6679] usb 6-1: config 9 interface 180 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 226.391921][ T6679] usb 6-1: config 9 interface 4 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 226.402460][ T6679] usb 6-1: config 9 interface 4 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 226.413030][ T6679] usb 6-1: config 9 interface 4 altsetting 0 endpoint 0xE has an invalid bInterval 38, changing to 9 [ 226.423951][ T6679] usb 6-1: config 9 interface 214 has no altsetting 0 [ 226.430716][ T6679] usb 6-1: config 9 interface 142 has no altsetting 0 [ 226.437562][ T6679] usb 6-1: config 9 interface 180 has no altsetting 0 [ 226.445990][ T6679] usb 6-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=ed.12 [ 226.455127][ T6679] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.463364][ T6679] usb 6-1: Product: Ъ [ 226.467434][ T6679] usb 6-1: Manufacturer: 椚㑵慟犘￙㺨㈮庇谮툸ꟻ繶⛢碞䶣裏틐캂䶶렾Ϸ哘ሰ厉넂鳭ₕ恦ףּ츴墸⁗롞侉⧠䣊꠴ⵍ剁輻铜떫⎬핧輠헣喖ꨅ麼睏賦뵁뛓훡翸䖶쫾磶ꂴ鍸ꡞ瓇诓ヨ癋埣fl븓س晳梲䎺ᄞ腠ퟚ奨Π꿼缮᷿翸㗩 [ 226.496700][ T9787] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 226.706091][ T6679] asix 6-1:9.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 226.716350][ T6679] asix 6-1:9.214: probe with driver asix failed with error -71 [ 226.725167][ T6679] asix 6-1:9.142 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 226.735431][ T6679] asix 6-1:9.142: probe with driver asix failed with error -71 [ 226.745617][ T6679] asix 6-1:9.180 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 226.755894][ T6679] asix 6-1:9.180: probe with driver asix failed with error -71 [ 226.770356][ T6679] asix 6-1:9.4 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 226.780376][ T6679] asix 6-1:9.4: probe with driver asix failed with error -71 [ 226.790315][ T6679] usb 6-1: USB disconnect, device number 32 [ 226.831902][ T9839] overlay: ./file0 is not a directory [ 226.838940][ T9839] overlayfs: failed to clone upperpath [ 227.363498][ T9848] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:319 [ 227.721433][ T652] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 227.721466][ T52] Bluetooth: hci0: command 0x1003 tx timeout [ 227.751186][ T6679] rust_binder: 9815: removing orphan mapping 0:4120 [ 227.867041][ T36] audit: type=1400 audit(1755263933.106:32396): avc: denied { rename } for pid=9891 comm="syz.5.3153" name="#2e" dev="tmpfs" ino=668 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 228.016009][ T9899] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 228.016808][ T9898] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true [ 228.048735][ T36] audit: type=1400 audit(1755263933.286:32397): avc: denied { read } for pid=9903 comm="syz.5.3158" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 228.079912][ T36] audit: type=1400 audit(1755263933.286:32398): avc: denied { open } for pid=9903 comm="syz.5.3158" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 228.081394][ T602] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 228.241731][ T602] usb 7-1: device descriptor read/64, error -71 [ 228.495701][ T602] usb 7-1: device descriptor read/64, error -71 [ 228.505472][ T9949] overlay: ./file0 is not a directory [ 228.526392][ T9951] rust_binder: Write failure EFAULT in pid:365 [ 228.526742][ T9951] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 228.751397][ T602] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 228.863994][ T9968] overlay: ./file0 is not a directory [ 228.921385][ T602] usb 7-1: device descriptor read/64, error -71 [ 229.017056][ T9985] overlayfs: failed to clone upperpath [ 229.120510][T10007] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10007 comm=syz.3.3192 [ 229.162819][ T36] audit: type=1400 audit(1755263934.406:32399): avc: denied { audit_write } for pid=10011 comm="syz.0.3194" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 229.185181][ T36] audit: type=1107 audit(1755263934.406:32400): pid=10011 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 229.198897][ T602] usb 7-1: device descriptor read/64, error -71 [ 229.312037][ T602] usb usb7-port1: attempt power cycle [ 229.671390][ T602] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 229.694152][ T602] usb 7-1: device descriptor read/8, error -71 [ 229.832891][ T602] usb 7-1: device descriptor read/8, error -71 [ 230.071407][ T602] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 230.092416][ T602] usb 7-1: device descriptor read/8, error -71 [ 230.222595][ T602] usb 7-1: device descriptor read/8, error -71 [ 230.252780][T10030] overlayfs: failed to clone upperpath [ 230.331451][ T602] usb usb7-port1: unable to enumerate USB device [ 231.123248][T10107] 9pnet_fd: Insufficient options for proto=fd [ 231.129550][T10108] 9pnet_fd: Insufficient options for proto=fd [ 231.137060][T10107] netlink: 'syz.3.3229': attribute type 4 has an invalid length. [ 231.144941][T10107] netlink: 'syz.3.3229': attribute type 21 has an invalid length. [ 231.152845][T10107] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.3229'. [ 231.201370][ T333] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 231.351370][ T333] usb 7-1: Using ep0 maxpacket: 8 [ 231.365323][ T333] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 231.375524][ T333] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.391469][ T333] usb 7-1: config 0 descriptor?? [ 231.592256][T10151] rust_binder: Failed to allocate buffer. len:4184, is_oneway:false [ 231.612210][ T333] asix 7-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 231.676041][ T36] audit: type=1400 audit(1755263936.916:32401): avc: denied { watch_reads } for pid=10170 comm="syz.5.3253" path="/131/file0" dev="tmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 231.676969][T10171] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3253'. [ 231.760740][T10185] overlayfs: failed to clone lowerpath [ 231.768505][T10183] overlayfs: failed to resolve './file1': -2 [ 231.812778][T10200] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3264'. [ 231.821973][T10200] netlink: 35 bytes leftover after parsing attributes in process `syz.5.3264'. [ 231.830938][T10200] netlink: 'syz.5.3264': attribute type 6 has an invalid length. [ 231.838923][T10200] netlink: 'syz.5.3264': attribute type 5 has an invalid length. [ 231.846930][T10200] netlink: 35 bytes leftover after parsing attributes in process `syz.5.3264'. [ 231.878134][T10216] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:397 [ 232.235532][T10235] overlayfs: missing 'lowerdir' [ 232.329394][T10258] incfs: Error accessing: ./file1. [ 232.334596][T10258] incfs: mount failed -2 [ 232.615782][ T333] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 232.627118][ T333] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 232.637382][ T333] asix 7-1:0.0: probe with driver asix failed with error -71 [ 232.648447][ T333] usb 7-1: USB disconnect, device number 6 [ 232.814952][T10328] netlink: 'syz.5.3309': attribute type 11 has an invalid length. [ 232.823116][T10328] rust_binder: Error while translating object. [ 232.823147][T10328] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 232.829415][T10328] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:404 [ 232.839390][T10328] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 232.890077][T10330] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3310'. [ 233.060969][T10347] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3315'. [ 233.111388][ T333] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 233.148496][T10353] rust_binder: Failed copying remainder into alloc: EFAULT [ 233.148521][T10353] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 233.155855][T10353] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 233.164476][T10353] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:26 [ 233.213711][T10355] rust_binder: Write failure EINVAL in pid:28 [ 233.226485][ T36] audit: type=1400 audit(1755263938.466:32402): avc: denied { write } for pid=10354 comm="syz.6.3319" name="/" dev="configfs" ino=2565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 233.271398][ T333] usb 6-1: Using ep0 maxpacket: 32 [ 233.277788][ T333] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 233.286189][ T333] usb 6-1: config 0 has no interface number 0 [ 233.292499][ T333] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 233.302822][ T333] usb 6-1: config 0 interface 196 has no altsetting 0 [ 233.311108][ T333] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 233.320406][ T333] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.329328][ T333] usb 6-1: Product: syz [ 233.333721][ T333] usb 6-1: Manufacturer: syz [ 233.338335][ T333] usb 6-1: SerialNumber: syz [ 233.347071][ T333] usb 6-1: config 0 descriptor?? [ 233.352624][T10335] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 233.461628][T10360] netlink: 'syz.0.3321': attribute type 27 has an invalid length. [ 233.469640][T10360] netlink: 'syz.0.3321': attribute type 27 has an invalid length. [ 233.477758][ T6678] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 233.520459][T10364] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3323'. [ 233.529751][T10364] gretap0: entered promiscuous mode [ 233.561349][ T333] ipheth 6-1:0.196: ipheth_get_macaddr: usb_control_msg: -32 [ 233.568918][ T333] ipheth 6-1:0.196: probe with driver ipheth failed with error -32 [ 233.652511][ T6678] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.667538][ T6678] usb 7-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 233.677042][ T6678] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.685084][ T6678] usb 7-1: Product: syz [ 233.689337][ T6678] usb 7-1: Manufacturer: syz [ 233.694267][ T6678] usb 7-1: SerialNumber: syz [ 233.699693][ T6678] usb 7-1: config 0 descriptor?? [ 233.705423][ T6678] hub 7-1:0.0: bad descriptor, ignoring hub [ 233.711665][ T6678] hub 7-1:0.0: probe with driver hub failed with error -5 [ 233.720683][ T6678] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 233.737007][T10384] overlayfs: failed to clone upperpath [ 233.749825][ T7831] udevd[7831]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 233.779802][T10395] 9pnet_fd: Insufficient options for proto=fd [ 233.884975][T10412] /dev/loop0: Can't lookup blockdev [ 233.890430][T10413] /dev/loop0: Can't lookup blockdev [ 233.897568][T10413] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3339'. [ 233.906746][T10412] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3339'. [ 234.011466][ T6678] usb 7-1: USB disconnect, device number 7 [ 234.500835][T10435] netlink: 'syz.6.3348': attribute type 13 has an invalid length. [ 234.572464][T10442] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 234.643680][T10449] rust_binder: Error while translating object. [ 234.643737][T10449] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 234.650150][T10449] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:45 [ 234.808552][T10462] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:58 [ 235.095645][T10481] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 235.362562][ T36] audit: type=1400 audit(1755263940.606:32403): avc: granted { setsecparam } for pid=10505 comm="syz.6.3373" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 235.416434][T10513] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:98 [ 235.890920][ T6678] usb 6-1: USB disconnect, device number 33 [ 235.899776][T10528] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 236.489152][ T36] audit: type=1400 audit(1755263941.736:32404): avc: denied { create } for pid=10542 comm="syz.6.3386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 236.489335][T10543] rust_binder: Error in use_page_slow: ESRCH [ 236.516459][T10543] rust_binder: use_range failure ESRCH [ 236.522527][T10543] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 236.528072][T10543] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 236.536201][T10543] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:108 [ 236.548379][ T36] audit: type=1400 audit(1755263941.796:32405): avc: denied { call } for pid=10542 comm="syz.6.3386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 236.548398][T10543] rust_binder: Error in use_page_slow: ESRCH [ 236.548416][T10543] rust_binder: use_range failure ESRCH [ 236.582705][T10543] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false [ 236.588236][T10543] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 236.596577][T10543] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:108 [ 236.616780][ T36] audit: type=1400 audit(1755263941.866:32406): avc: denied { read write } for pid=9803 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 236.650160][ T36] audit: type=1400 audit(1755263941.866:32407): avc: denied { open } for pid=9803 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 236.674724][ T36] audit: type=1400 audit(1755263941.866:32408): avc: denied { ioctl } for pid=9803 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 236.693357][T10565] __nla_validate_parse: 1 callbacks suppressed [ 236.693376][T10565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3394'. [ 236.700525][ T36] audit: type=1400 audit(1755263941.886:32409): avc: denied { create } for pid=10551 comm="syz.0.3389" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 236.737332][ T36] audit: type=1400 audit(1755263941.886:32410): avc: denied { ioctl } for pid=10551 comm="syz.0.3389" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=44875 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 236.763746][ T36] audit: type=1400 audit(1755263941.926:32411): avc: denied { create } for pid=10562 comm="syz.0.3393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 236.783612][ T36] audit: type=1400 audit(1755263941.926:32412): avc: denied { setopt } for pid=10562 comm="syz.0.3393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 236.803388][ T36] audit: type=1400 audit(1755263941.936:32413): avc: denied { create } for pid=10564 comm="syz.0.3394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 236.822992][ T36] audit: type=1400 audit(1755263941.936:32414): avc: denied { write } for pid=10564 comm="syz.0.3394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 236.842525][ T36] audit: type=1400 audit(1755263941.946:32415): avc: denied { create } for pid=10564 comm="syz.0.3394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 236.863649][ T36] audit: type=1400 audit(1755263941.946:32416): avc: denied { write } for pid=10564 comm="syz.0.3394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 236.884990][ T36] audit: type=1400 audit(1755263941.956:32417): avc: denied { map } for pid=10564 comm="syz.0.3394" path="socket:[44893]" dev="sockfs" ino=44893 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 236.891658][ T6674] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 236.909029][ T36] audit: type=1400 audit(1755263941.956:32418): avc: denied { create } for pid=10564 comm="syz.0.3394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 237.084243][ T6674] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 237.093438][ T6674] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.103064][ T6674] usb 7-1: config 0 descriptor?? [ 237.241693][ T6678] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 237.391680][ T6678] usb 6-1: Using ep0 maxpacket: 16 [ 237.399045][ T6678] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.411541][ T6678] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 237.424574][ T6678] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 237.433754][ T6678] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.443268][ T6678] usb 6-1: config 0 descriptor?? [ 237.713735][ T6674] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 237.723780][ T6674] asix 7-1:0.0: probe with driver asix failed with error -61 [ 237.855350][ T6678] microsoft 0003:045E:07DA.0012: item fetching failed at offset 29/34 [ 237.863901][ T6678] microsoft 0003:045E:07DA.0012: parse failed [ 237.870009][ T6678] microsoft 0003:045E:07DA.0012: probe with driver microsoft failed with error -22 [ 238.144320][ T333] usb 6-1: USB disconnect, device number 34 [ 238.747548][T10614] overlayfs: failed to clone upperpath [ 238.937034][T10619] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 238.937069][T10619] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:434 [ 238.958697][T10619] overlayfs: workdir and upperdir must be separate subtrees [ 238.982557][T10621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.998513][T10621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.010201][T10621] rust_binder: 111: no such ref 0 [ 239.021554][T10621] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 239.114679][T10623] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 239.414517][T10632] binder: Bad value for 'defcontext' [ 239.564977][ T59] bridge_slave_1: left promiscuous mode [ 239.570980][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.602612][ T59] bridge_slave_0: left allmulticast mode [ 239.608290][ T59] bridge_slave_0: left promiscuous mode [ 239.633768][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.750473][T10654] netlink: 'syz.3.3422': attribute type 25 has an invalid length. [ 239.750609][T10655] 9pnet_fd: Insufficient options for proto=fd [ 239.765229][T10655] 9pnet_fd: Insufficient options for proto=fd [ 239.775221][T10655] 9pnet_fd: Insufficient options for proto=fd [ 239.781826][T10655] 9pnet_fd: Insufficient options for proto=fd [ 239.789820][T10655] 9pnet_fd: Insufficient options for proto=fd [ 239.798574][ T59] veth1_macvtap: left promiscuous mode [ 239.804117][ T59] veth0_vlan: left promiscuous mode [ 239.811436][T10655] 9pnet_fd: Insufficient options for proto=fd [ 239.818356][T10655] 9pnet_fd: Insufficient options for proto=fd [ 239.826419][T10655] 9pnet_fd: Insufficient options for proto=fd [ 239.834001][T10655] 9pnet_fd: Insufficient options for proto=fd [ 239.840946][T10655] 9pnet_fd: Insufficient options for proto=fd [ 239.849119][T10655] 9pnet_fd: Insufficient options for proto=fd [ 239.856750][T10655] 9pnet_fd: Insufficient options for proto=fd [ 239.865999][T10655] 9pnet_fd: Insufficient options for proto=fd [ 239.873632][T10655] 9pnet_fd: Insufficient options for proto=fd [ 239.880528][T10655] 9pnet_fd: Insufficient options for proto=fd [ 239.890224][T10655] 9pnet_fd: Insufficient options for proto=fd [ 239.897888][T10655] 9pnet_fd: Insufficient options for proto=fd [ 239.909754][T10655] 9pnet_fd: Insufficient options for proto=fd [ 239.917383][T10655] 9pnet_fd: Insufficient options for proto=fd [ 239.921993][ T334] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 239.925212][T10655] 9pnet_fd: Insufficient options for proto=fd [ 239.943078][T10655] 9pnet_fd: Insufficient options for proto=fd [ 239.950004][T10655] 9pnet_fd: Insufficient options for proto=fd [ 239.957998][T10655] 9pnet_fd: Insufficient options for proto=fd [ 239.965303][T10655] 9pnet_fd: Insufficient options for proto=fd [ 239.972600][T10655] 9pnet_fd: Insufficient options for proto=fd [ 239.979414][T10655] 9pnet_fd: Insufficient options for proto=fd [ 239.987013][T10655] 9pnet_fd: Insufficient options for proto=fd [ 239.995783][T10655] 9pnet_fd: Insufficient options for proto=fd [ 240.003180][T10655] 9pnet_fd: Insufficient options for proto=fd [ 240.009992][T10655] 9pnet_fd: Insufficient options for proto=fd [ 240.017329][T10655] 9pnet_fd: Insufficient options for proto=fd [ 240.024204][T10655] 9pnet_fd: Insufficient options for proto=fd [ 240.030906][T10655] 9pnet_fd: Insufficient options for proto=fd [ 240.038726][T10655] 9pnet_fd: Insufficient options for proto=fd [ 240.043044][ T6678] usb 7-1: USB disconnect, device number 8 [ 240.046354][T10655] 9pnet_fd: Insufficient options for proto=fd [ 240.074393][T10655] 9pnet_fd: Insufficient options for proto=fd [ 240.081114][T10655] 9pnet_fd: Insufficient options for proto=fd [ 240.097675][T10655] 9pnet_fd: Insufficient options for proto=fd [ 240.103842][ T334] usb 6-1: Using ep0 maxpacket: 8 [ 240.111742][T10655] 9pnet_fd: Insufficient options for proto=fd [ 240.112586][ T334] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 240.125372][T10655] 9pnet_fd: Insufficient options for proto=fd [ 240.137623][T10655] 9pnet_fd: Insufficient options for proto=fd [ 240.142052][ T334] usb 6-1: config 179 has no interface number 0 [ 240.144434][T10655] 9pnet_fd: Insufficient options for proto=fd [ 240.160962][ T334] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 240.163532][T10655] 9pnet_fd: Insufficient options for proto=fd [ 240.178720][ T334] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 240.180629][T10655] 9pnet_fd: Insufficient options for proto=fd [ 240.190776][ T334] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 240.197056][T10655] 9pnet_fd: Insufficient options for proto=fd [ 240.208644][ T334] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 240.224550][T10655] 9pnet_fd: Insufficient options for proto=fd [ 240.226216][ T334] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 240.245315][ T334] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 240.245420][T10655] 9pnet_fd: Insufficient options for proto=fd [ 240.255240][ T334] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.270142][T10655] 9pnet_fd: Insufficient options for proto=fd [ 240.277544][T10655] 9pnet_fd: Insufficient options for proto=fd [ 240.285861][T10646] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 240.296012][T10655] 9pnet_fd: Insufficient options for proto=fd [ 240.303056][T10655] 9pnet_fd: Insufficient options for proto=fd [ 240.309983][T10655] 9pnet_fd: Insufficient options for proto=fd [ 240.317094][T10655] 9pnet_fd: Insufficient options for proto=fd [ 240.323880][T10655] 9pnet_fd: Insufficient options for proto=fd [ 240.330658][T10655] 9pnet_fd: Insufficient options for proto=fd [ 240.338012][T10655] 9pnet_fd: Insufficient options for proto=fd [ 240.344932][T10655] 9pnet_fd: Insufficient options for proto=fd [ 240.351688][T10655] 9pnet_fd: Insufficient options for proto=fd [ 240.358831][T10655] 9pnet_fd: Insufficient options for proto=fd [ 240.365636][T10655] 9pnet_fd: Insufficient options for proto=fd [ 240.372526][T10655] 9pnet_fd: Insufficient options for proto=fd [ 240.379365][T10655] 9pnet_fd: Insufficient options for proto=fd [ 240.386456][T10655] 9pnet_fd: Insufficient options for proto=fd [ 240.393233][T10655] 9pnet_fd: Insufficient options for proto=fd [ 240.399995][T10655] 9pnet_fd: Insufficient options for proto=fd [ 240.517489][ T334] usb 6-1: USB disconnect, device number 35 [ 240.523483][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 240.523524][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 241.026378][T10723] SELinux: security_context_str_to_sid () failed with errno=-22 [ 241.085998][T10725] binder: Bad value for 'max' [ 241.867351][ T36] kauditd_printk_skb: 437 callbacks suppressed [ 241.867369][ T36] audit: type=1400 audit(1755263947.115:32856): avc: denied { create } for pid=10746 comm="syz.0.3452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 241.940880][ T36] audit: type=1400 audit(1755263947.155:32857): avc: denied { setopt } for pid=10746 comm="syz.0.3452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 241.981369][ T36] audit: type=1400 audit(1755263947.155:32858): avc: denied { setopt } for pid=10746 comm="syz.0.3452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 242.003101][ T36] audit: type=1400 audit(1755263947.235:32859): avc: denied { create } for pid=10748 comm="syz.3.3453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 242.044546][ T36] audit: type=1400 audit(1755263947.235:32860): avc: denied { create } for pid=10748 comm="syz.3.3453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 242.085521][T10754] overlayfs: failed to clone upperpath [ 242.089013][ T36] audit: type=1400 audit(1755263947.235:32861): avc: denied { write } for pid=10748 comm="syz.3.3453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 242.117412][T10754] overlayfs: failed to clone upperpath [ 242.137052][ T36] audit: type=1400 audit(1755263947.235:32862): avc: denied { read } for pid=10748 comm="syz.3.3453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 242.159144][ T36] audit: type=1400 audit(1755263947.335:32863): avc: denied { mounton } for pid=10753 comm="syz.3.3455" path="/371/bus" dev="tmpfs" ino=2045 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 242.205348][ T36] audit: type=1400 audit(1755263947.365:32864): avc: denied { mounton } for pid=10753 comm="syz.3.3455" path="/371/bus" dev="tmpfs" ino=2045 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 242.229909][ T36] audit: type=1400 audit(1755263947.375:32865): avc: denied { create } for pid=10756 comm="syz.0.3457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 242.297299][T10767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3460'. [ 242.368249][T10778] overlayfs: failed to clone upperpath [ 242.396225][T10777] rust_binder: Error while translating object. [ 242.396330][T10777] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 242.410210][T10777] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:468 [ 242.529146][T10790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3468'. [ 242.695360][T10811] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT [ 242.695391][T10811] rust_binder: Error in use_page_slow: EFAULT [ 242.695402][T10812] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT [ 242.706189][T10811] rust_binder: use_range failure EFAULT [ 242.713532][T10812] rust_binder: Error in use_page_slow: EFAULT [ 242.722860][T10811] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 242.729276][T10812] rust_binder: use_range failure EFAULT [ 242.734645][T10811] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 242.743546][T10812] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 242.748191][T10811] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:481 [ 242.757735][T10812] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 242.775251][T10812] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:481 [ 243.247461][T10825] /dev/loop0: Can't lookup blockdev [ 243.958087][T10855] 9pnet_fd: Insufficient options for proto=fd [ 243.970490][T10855] rust_binder: 492: no such ref 1 [ 243.975719][T10855] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:492 [ 244.014455][T10862] rust_binder: Error while translating object. [ 244.025103][T10862] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 244.031374][T10862] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:494 [ 244.257249][T10874] overlay: Unknown parameter 'fowner' [ 244.380776][T10877] SELinux: failed to load policy [ 244.386483][T10877] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 244.402557][T10877] rust_binder: Write failure EINVAL in pid:498 [ 244.812634][ T334] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 244.877681][T10895] fuse: Bad value for 'fd' [ 244.883250][T10895] 9pnet_fd: Insufficient options for proto=fd [ 244.929335][T10897] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 244.985181][ T334] usb 6-1: config 14 has an invalid interface number: 13 but max is 2 [ 244.994326][ T334] usb 6-1: config 14 has an invalid interface number: 11 but max is 2 [ 245.002536][ T334] usb 6-1: config 14 contains an unexpected descriptor of type 0x2, skipping [ 245.011494][ T334] usb 6-1: config 14 contains an unexpected descriptor of type 0x2, skipping [ 245.020294][ T334] usb 6-1: config 14 has an invalid interface number: 81 but max is 2 [ 245.028665][ T334] usb 6-1: config 14 contains an unexpected descriptor of type 0x1, skipping [ 245.037474][ T334] usb 6-1: config 14 has no interface number 0 [ 245.043655][ T334] usb 6-1: config 14 has no interface number 1 [ 245.049895][ T334] usb 6-1: config 14 has no interface number 2 [ 245.056117][ T334] usb 6-1: config 14 interface 11 altsetting 3 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 245.067020][ T334] usb 6-1: config 14 interface 81 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 245.078980][ T334] usb 6-1: config 14 interface 81 altsetting 7 endpoint 0xA has invalid maxpacket 1072, setting to 64 [ 245.086275][ T6678] hid (null): invalid report_size -1634643772 [ 245.090814][ T334] usb 6-1: config 14 interface 81 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 245.099816][ T6678] hid (null): global environment stack underflow [ 245.108425][ T334] usb 6-1: config 14 interface 81 altsetting 7 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 245.114112][ T6678] hid (null): unknown global tag 0xd8 [ 245.125719][ T334] usb 6-1: config 14 interface 81 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 245.131660][ T6678] hid (null): bogus close delimiter [ 245.141901][ T334] usb 6-1: config 14 interface 81 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 245.148482][ T6678] hid-generic 005A:000D:1000.0013: unknown main item tag 0x0 [ 245.157977][ T334] usb 6-1: config 14 interface 81 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 245.164866][ T6678] hid-generic 005A:000D:1000.0013: invalid report_size -1634643772 [ 245.178213][ T334] usb 6-1: config 14 interface 13 has no altsetting 0 [ 245.191021][ T6678] hid-generic 005A:000D:1000.0013: item 0 4 1 7 parsing failed [ 245.198862][ T6678] hid-generic 005A:000D:1000.0013: probe with driver hid-generic failed with error -22 [ 245.211058][ T334] usb 6-1: config 14 interface 11 has no altsetting 0 [ 245.218418][ T334] usb 6-1: config 14 interface 81 has no altsetting 0 [ 245.230012][ T334] usb 6-1: New USB device found, idVendor=05c6, idProduct=9225, bcdDevice=d6.2c [ 245.253368][ T334] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.261399][ T334] usb 6-1: Product: syz [ 245.274683][T10905] overlayfs: failed to clone upperpath [ 245.280374][ T334] usb 6-1: Manufacturer: syz [ 245.286014][ T334] usb 6-1: SerialNumber: syz [ 245.345588][T10913] overlayfs: failed to clone upperpath [ 245.530324][T10890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.542827][T10890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.594821][ T334] usb 6-1: USB disconnect, device number 36 [ 245.884748][T10974] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3528'. [ 246.014009][T10980] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 246.018881][ T6678] rust_binder: 10978: removing orphan mapping 0:4224 [ 246.226805][T10995] binder: Bad value for 'max' [ 246.318902][T10997] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 246.402773][ T334] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 246.565199][ T334] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 246.582345][ T334] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 246.604109][ T334] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 246.620107][ T334] usb 6-1: Product: syz [ 246.634410][ T334] usb 6-1: Manufacturer: syz [ 246.643328][ T334] usb 6-1: SerialNumber: syz [ 246.871424][ T334] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 37 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 246.882584][ T36] kauditd_printk_skb: 751 callbacks suppressed [ 246.882600][ T36] audit: type=1400 audit(1755263952.135:33617): avc: denied { node_bind } for pid=11039 comm="syz.6.3553" saddr=::ffff:172.20.20.8 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 246.948103][ T36] audit: type=1400 audit(1755263952.185:33618): avc: denied { read write } for pid=9803 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 246.983856][ T36] audit: type=1400 audit(1755263952.185:33619): avc: denied { read write open } for pid=9803 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 247.009994][ T36] audit: type=1400 audit(1755263952.185:33620): avc: denied { ioctl } for pid=9803 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 247.028502][T11048] audit: audit_backlog=65 > audit_backlog_limit=64 [ 247.043472][T11048] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 247.046586][ T36] audit: type=1400 audit(1755263952.225:33621): avc: denied { read } for pid=11045 comm="syz.6.3554" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 247.052038][T11046] audit: audit_backlog=65 > audit_backlog_limit=64 [ 247.074343][ T36] audit: type=1400 audit(1755263952.225:33622): avc: denied { read open } for pid=11045 comm="syz.6.3554" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 247.080441][T11048] audit: backlog limit exceeded [ 247.087097][T10990] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3534'. [ 247.187491][ C1] usblp0: nonzero write bulk status received: -71 [ 247.196465][ T334] usb 6-1: USB disconnect, device number 37 [ 247.206932][ T334] usblp0: removed [ 247.212490][T10990] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3534'. [ 247.472938][ T6678] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 247.624942][ T6678] usb 7-1: config 0 has no interfaces? [ 247.633750][ T6678] usb 7-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 247.642981][ T6678] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.650985][ T6678] usb 7-1: Product: syz [ 247.655186][ T6678] usb 7-1: Manufacturer: syz [ 247.659775][ T6678] usb 7-1: SerialNumber: syz [ 247.665772][ T6678] usb 7-1: config 0 descriptor?? [ 247.877589][T11054] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 247.884751][T11054] rust_binder: 201: no such ref 1 [ 247.891001][T11054] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:201 [ 247.894928][T11054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.927654][T11054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.937728][ T334] usb 7-1: USB disconnect, device number 9 [ 248.329500][T11083] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3567'. [ 248.483032][ T6678] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 248.643061][ T6678] usb 6-1: Using ep0 maxpacket: 16 [ 248.650469][ T6678] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.661794][ T6678] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 248.670838][ T6678] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 248.679951][ T6678] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.689513][ T6678] usb 6-1: config 0 descriptor?? [ 248.899979][ T6678] rust_binder: 11103: removing orphan mapping 0:24 [ 249.223152][ T334] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 249.259565][T11117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.273158][T11117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.301258][T11117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.316789][T11117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.330048][ T333] usb 6-1: USB disconnect, device number 38 [ 249.373125][ T334] usb 7-1: Using ep0 maxpacket: 8 [ 249.389136][ T334] usb 7-1: unable to get BOS descriptor or descriptor too short [ 249.408468][ T334] usb 7-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid maxpacket 12288, setting to 1024 [ 249.440073][ T334] usb 7-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 1024 [ 249.451391][ T334] usb 7-1: config 8 interface 0 has no altsetting 0 [ 249.524067][ T334] usb 7-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 249.533157][ T334] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.541376][ T334] usb 7-1: Product: syz [ 249.546514][ T334] usb 7-1: Manufacturer: syz [ 249.551219][ T334] usb 7-1: SerialNumber: syz [ 249.984739][T11139] tipc: Started in network mode [ 249.989727][T11139] tipc: Node identity 100, cluster identity 4711 [ 249.996210][T11139] tipc: Node number set to 256 [ 250.127056][ T334] usb 7-1: selecting invalid altsetting 0 [ 250.149341][ T334] usb 7-1: USB disconnect, device number 10 [ 250.223917][ T7829] udevd[7829]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:8.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 250.944827][T11187] overlayfs: missing 'workdir' [ 251.418254][T11205] rust_binder: inc_ref_done called when no active inc_refs [ 251.532967][T11216] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3613'. [ 251.641394][T11223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3615'. [ 251.653264][T11223] netlink: 1276 bytes leftover after parsing attributes in process `syz.3.3615'. [ 251.684097][T11223] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3615'. [ 251.699693][T11226] overlayfs: failed to clone upperpath [ 251.875665][T11241] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3623'. [ 251.896988][ T36] kauditd_printk_skb: 717 callbacks suppressed [ 251.897007][ T36] audit: type=1400 audit(1755263957.144:34320): avc: denied { read } for pid=11240 comm="syz.5.3623" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 251.974636][ T36] audit: type=1400 audit(1755263957.144:34321): avc: denied { read open } for pid=11240 comm="syz.5.3623" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 252.032823][ T36] audit: type=1400 audit(1755263957.144:34322): avc: denied { read write } for pid=11240 comm="syz.5.3623" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 252.093498][ T36] audit: type=1400 audit(1755263957.144:34323): avc: denied { read write open } for pid=11240 comm="syz.5.3623" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 252.180208][ T36] audit: type=1400 audit(1755263957.144:34324): avc: denied { ioctl } for pid=11240 comm="syz.5.3623" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 252.214295][ T36] audit: type=1400 audit(1755263957.214:34325): avc: denied { execmem } for pid=11242 comm="syz.3.3622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 252.235564][ T36] audit: type=1400 audit(1755263957.224:34326): avc: denied { execute } for pid=11242 comm="syz.3.3622" path="/dev/rnullb0" dev="tmpfs" ino=576 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 252.260046][ T36] audit: type=1400 audit(1755263957.224:34327): avc: denied { read write } for pid=11246 comm="syz.6.3624" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 252.263533][ T334] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 252.284683][ T36] audit: type=1400 audit(1755263957.224:34328): avc: denied { read write open } for pid=11246 comm="syz.6.3624" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 252.331865][ T36] audit: type=1400 audit(1755263957.224:34329): avc: denied { ioctl } for pid=11246 comm="syz.6.3624" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 252.363653][ T602] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 252.463510][ T334] usb 7-1: Using ep0 maxpacket: 32 [ 252.471168][ T334] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.493655][ T334] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.513525][ T334] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 252.522637][ T334] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.531726][ T602] usb 6-1: Using ep0 maxpacket: 32 [ 252.539316][ T602] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 252.549208][ T602] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 252.558188][ T334] usb 7-1: config 0 descriptor?? [ 252.578133][ T602] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 252.600519][ T602] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 252.618722][ T602] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 252.629344][ T602] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 252.643211][ T602] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 252.653144][ T602] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.663783][ T602] usb 6-1: config 0 descriptor?? [ 252.887956][ T602] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 39 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 252.932302][ T602] usb 6-1: USB disconnect, device number 39 [ 252.958466][ T602] usblp0: removed [ 252.982092][ T334] savu 0003:1E7D:2D5A.0014: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 253.123831][T11282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3636'. [ 253.239700][T11290] 9pnet_fd: p9_fd_create_tcp (11290): problem connecting socket to 127.0.0.1 [ 253.383689][ T602] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 253.533675][ T602] usb 6-1: Using ep0 maxpacket: 32 [ 253.540785][ T602] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 253.549289][ T602] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 253.558041][ T602] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 253.567124][ T602] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 253.576814][ T602] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 253.586497][ T602] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 253.599527][ T602] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 253.608588][ T602] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.618138][ T602] usb 6-1: config 0 descriptor?? [ 253.828282][ T602] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 40 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 254.028380][ C0] usblp0: nonzero read bulk status received: -71 [ 254.033907][ T602] usb 6-1: USB disconnect, device number 40 [ 254.054240][ T602] usblp0: removed [ 254.190073][T11308] overlayfs: failed to clone upperpath [ 254.413784][ T602] usb 7-1: reset high-speed USB device number 11 using dummy_hcd [ 254.841436][T11337] tipc: Started in network mode [ 254.846371][T11337] tipc: Node identity , cluster identity 4711 [ 254.853052][T11337] tipc: Failed to set node id, please configure manually [ 254.862388][T11337] tipc: Enabling of bearer rejected, failed to enable media [ 254.870922][T11338] netlink: 'syz.5.3653': attribute type 39 has an invalid length. [ 254.894207][ T603] rust_binder: 11332: removing orphan mapping 0:4224 [ 255.183840][ T6674] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 255.254128][T11367] netlink: 'syz.3.3666': attribute type 2 has an invalid length. [ 255.355964][ T6674] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 255.365095][ T6674] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.374846][ T6674] usb 6-1: config 0 descriptor?? [ 255.587710][ T6674] usb 6-1: Cannot read MAC address [ 255.592939][ T6674] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 255.607344][ T6674] usb 6-1: USB disconnect, device number 41 [ 255.754118][ T334] usb 7-1: USB disconnect, device number 11 [ 256.053054][T11372] netlink: 'syz.6.3667': attribute type 27 has an invalid length. [ 256.233012][T11379] rust_binder: Error while translating object. [ 256.233075][T11379] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 256.251706][T11379] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:590 [ 256.478400][T11400] rust_binder: 11399 RLIMIT_NICE not set [ 256.495807][T11403] netlink: 'syz.6.3678': attribute type 16 has an invalid length. [ 256.509575][T11403] netlink: 'syz.6.3678': attribute type 4 has an invalid length. [ 256.518924][T11403] netlink: 64126 bytes leftover after parsing attributes in process `syz.6.3678'. [ 256.716345][T11415] rust_binder: Error while translating object. [ 256.716393][T11415] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 256.722700][T11415] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:606 [ 256.927571][ T36] kauditd_printk_skb: 563 callbacks suppressed [ 256.927589][ T36] audit: type=1400 audit(1755263962.173:34893): avc: denied { read } for pid=11424 comm="syz.6.3688" name="binder1" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 256.969756][ T36] audit: type=1400 audit(1755263962.173:34894): avc: denied { read open } for pid=11424 comm="syz.6.3688" path="/dev/binderfs/binder1" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 257.018525][ T36] audit: type=1400 audit(1755263962.213:34895): avc: denied { name_bind } for pid=11424 comm="syz.6.3688" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 257.050988][ T36] audit: type=1400 audit(1755263962.213:34896): avc: denied { node_bind } for pid=11424 comm="syz.6.3688" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 257.074403][ T36] audit: type=1400 audit(1755263962.213:34897): avc: denied { read write } for pid=9803 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 257.108426][ T36] audit: type=1400 audit(1755263962.213:34898): avc: denied { read write open } for pid=9803 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 257.137001][ T36] audit: type=1400 audit(1755263962.213:34899): avc: denied { ioctl } for pid=9803 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 257.148987][T11431] binder: Unknown parameter 'fscontext?}' [ 257.163508][ T36] audit: type=1400 audit(1755263962.243:34900): avc: denied { read } for pid=11426 comm="syz.5.3689" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 257.192675][ T36] audit: type=1400 audit(1755263962.243:34901): avc: denied { read open } for pid=11426 comm="syz.5.3689" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 257.222205][ T36] audit: type=1400 audit(1755263962.253:34902): avc: denied { ioctl } for pid=11426 comm="syz.5.3689" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 257.306792][T11437] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 257.314742][T11437] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 97) [ 257.314766][T11437] rust_binder: Error while translating object. [ 257.326344][T11437] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 257.332621][T11437] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:291 [ 257.387809][ T6677] rust_binder: 11432: removing orphan mapping 0:1048 [ 257.435272][T11440] overlayfs: missing 'workdir' [ 257.766387][T11475] overlayfs: failed to clone upperpath [ 258.058300][T11514] can0: slcan on ptm2. [ 258.277529][T11538] 9pnet: Could not find request transport: xen [ 258.354218][ T6677] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 258.485001][T11564] 9pnet_fd: Insufficient options for proto=fd [ 258.526646][ T6677] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.537350][ T6677] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 258.547797][ T6677] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 258.565296][ T6677] usb 7-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 258.574910][ T6677] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.583002][ T6677] usb 7-1: Product: syz [ 258.588493][ T6677] usb 7-1: Manufacturer: syz [ 258.593553][ T6677] usb 7-1: SerialNumber: syz [ 258.604471][ T6677] usb 7-1: config 0 descriptor?? [ 258.831819][T11514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.858991][T11580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.860708][T11514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.876807][T11581] 9pnet: Could not find request transport: ft [ 258.889128][T11580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.906638][T11581] overlay: ./file0 is not a directory [ 258.911815][ T6677] usb 7-1: USB disconnect, device number 12 [ 258.995237][T11514] can0 (unregistered): slcan off ptm2. [ 259.126052][T11597] rust_binder: Failed copying into alloc: EFAULT [ 259.126077][T11597] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 259.139960][T11597] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 259.157295][T11597] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:632 [ 259.494369][ T6677] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 259.664411][ T6677] usb 6-1: Using ep0 maxpacket: 16 [ 259.696679][ T6677] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 259.726920][ T6677] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 259.746111][ T6677] usb 6-1: config 1 interface 1 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 259.766790][ T6677] usb 6-1: config 1 interface 1 has no altsetting 0 [ 259.777677][ T6677] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 259.804460][ T6677] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.832446][T11662] 9pnet_fd: Insufficient options for proto=fd [ 259.833412][T11660] overlayfs: failed to resolve './file1/file0': -2 [ 259.838829][ T6677] usb 6-1: Product: и [ 259.859732][ T6677] usb 6-1: Manufacturer: Ќ [ 259.865176][ T6677] usb 6-1: SerialNumber: ᐁ [ 260.292075][T11611] tmpfs: Unknown parameter 'fowner>00000000000000000000' [ 260.778378][T11703] veth1: entered allmulticast mode [ 260.803578][T11703] overlayfs: failed to clone upperpath [ 260.825052][T11702] veth1: left allmulticast mode [ 260.936592][T11708] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 261.004771][T11712] fuse: Unknown parameter '' [ 261.068021][T11717] overlayfs: conflicting options: userxattr,verity=require [ 261.984436][ T36] kauditd_printk_skb: 1441 callbacks suppressed [ 261.984451][ T36] audit: type=1400 audit(1755263967.223:36344): avc: denied { read write } for pid=9803 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 261.992745][T11776] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10243 sclass=netlink_route_socket pid=11776 comm=syz.0.3783 [ 262.031155][ T36] audit: type=1400 audit(1755263967.233:36345): avc: denied { create } for pid=11775 comm="syz.0.3783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 262.059180][ T36] audit: type=1400 audit(1755263967.263:36346): avc: denied { read write open } for pid=9803 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 262.086627][ T36] audit: type=1400 audit(1755263967.263:36347): avc: denied { ioctl } for pid=9803 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 262.113692][ T36] audit: type=1400 audit(1755263967.273:36348): avc: denied { name_bind } for pid=11775 comm="syz.0.3783" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 262.136831][ T36] audit: type=1400 audit(1755263967.303:36349): avc: denied { read write } for pid=11779 comm="syz.6.3784" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 262.162912][ T36] audit: type=1400 audit(1755263967.333:36350): avc: denied { read write open } for pid=11779 comm="syz.6.3784" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 262.189258][ T36] audit: type=1400 audit(1755263967.333:36351): avc: denied { ioctl } for pid=11779 comm="syz.6.3784" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 262.217198][ T36] audit: type=1400 audit(1755263967.333:36352): avc: denied { ioctl } for pid=11779 comm="syz.6.3784" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 262.245867][ T36] audit: type=1400 audit(1755263967.333:36353): avc: denied { ioctl } for pid=11779 comm="syz.6.3784" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 262.336831][ T6677] usb 6-1: 0:2 : does not exist [ 262.369195][ T6677] usb 6-1: USB disconnect, device number 42 [ 262.382271][T11802] tmpfs: Unknown parameter '/proc/sys/fs/binfmt_misc/register' [ 262.434720][ T334] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 262.457139][T11806] 9pnet_fd: Insufficient options for proto=fd [ 262.477331][T11807] 9pnet_fd: Insufficient options for proto=fd [ 262.523940][ T7831] udevd[7831]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 262.607425][ T334] usb 7-1: unable to get BOS descriptor or descriptor too short [ 262.624766][ T334] usb 7-1: not running at top speed; connect to a high speed hub [ 262.639513][ T334] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 262.661739][ T334] usb 7-1: config 1 has no interface number 1 [ 262.679990][ T334] usb 7-1: too many endpoints for config 1 interface 2 altsetting 2: 56, using maximum allowed: 30 [ 262.697539][ T334] usb 7-1: config 1 interface 2 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 56 [ 262.713850][ T334] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1552, setting to 1023 [ 262.745694][ T334] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 262.754803][ T334] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.773172][ T334] usb 7-1: Product: syz [ 262.783316][ T334] usb 7-1: Manufacturer: syz [ 262.793486][ T334] usb 7-1: SerialNumber: syz [ 263.038832][T11844] overlayfs: failed to clone upperpath [ 263.094937][T11848] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3809'. [ 263.132403][T11851] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 263.140758][T11851] overlayfs: missing 'lowerdir' [ 263.194835][ T6678] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 263.346819][ T6678] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 263.357790][ T6678] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 263.371437][ T6678] usb 6-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.00 [ 263.381304][ T6678] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.392061][ T6678] usb 6-1: config 0 descriptor?? [ 263.407994][T11837] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 263.447748][T11857] 9pnet_fd: Insufficient options for proto=fd [ 263.454463][T11857] 9pnet_fd: Insufficient options for proto=fd [ 263.582330][T11867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.595951][T11867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.713352][T11873] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3819'. [ 263.723253][T11873] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 263.766106][T11877] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=11877 comm=syz.3.3820 [ 263.834631][ T6678] wacom 0003:056A:0020.0015: Unknown device_type for 'HID 056a:0020'. Assuming pen. [ 263.845772][ T6678] wacom 0003:056A:0020.0015: hidraw0: USB HID v1.01 Device [HID 056a:0020] on usb-dummy_hcd.5-1/input0 [ 263.857642][ T6678] input: Wacom Intuos 4x5 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:0020.0015/input/input18 [ 264.045618][ T6678] usb 6-1: USB disconnect, device number 43 [ 264.304478][T11915] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.304787][T11915] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.321888][T11915] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.340558][T11915] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.480412][T11931] netlink: 'syz.6.3835': attribute type 12 has an invalid length. [ 264.682824][T11939] bpf: Bad value for 'mode' [ 264.687524][T11940] bpf: Bad value for 'mode' [ 264.808354][T11948] overlayfs: failed to clone upperpath [ 264.979473][T11952] rust_binder: Read failure Err(EFAULT) in pid:377 [ 265.056076][T11955] tipc: Started in network mode [ 265.078270][T11955] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 265.087406][T11955] tipc: Enabling of bearer rejected, failed to enable media [ 265.564650][T11988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.573446][T11988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.673924][T11996] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3855'. [ 265.682944][T11996] netlink: 35 bytes leftover after parsing attributes in process `syz.3.3855'. [ 265.691927][T11996] netlink: 'syz.3.3855': attribute type 6 has an invalid length. [ 265.699714][T11996] netlink: 'syz.3.3855': attribute type 5 has an invalid length. [ 265.707466][T11996] netlink: 35 bytes leftover after parsing attributes in process `syz.3.3855'. [ 266.548998][T12008] overlayfs: failed to clone upperpath [ 266.998105][ T36] kauditd_printk_skb: 591 callbacks suppressed [ 266.998123][ T36] audit: type=1400 audit(1755263972.242:36945): avc: denied { read write } for pid=9803 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 267.073516][ T36] audit: type=1400 audit(1755263972.242:36946): avc: denied { read write open } for pid=9803 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 267.115978][ T36] audit: type=1400 audit(1755263972.242:36947): avc: denied { ioctl } for pid=9803 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 267.148904][ T36] audit: type=1400 audit(1755263972.272:36948): avc: denied { read write } for pid=9803 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 267.181093][ T36] audit: type=1400 audit(1755263972.272:36949): avc: denied { read write open } for pid=9803 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 267.216197][ T36] audit: type=1400 audit(1755263972.272:36950): avc: denied { ioctl } for pid=9803 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 267.243286][ T36] audit: type=1400 audit(1755263972.352:36951): avc: denied { read } for pid=12013 comm="syz.6.3862" name="binder0" dev="binder" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 267.264595][T12022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.270497][ T36] audit: type=1400 audit(1755263972.352:36952): avc: denied { read open } for pid=12013 comm="syz.6.3862" path="/dev/binderfs/binder0" dev="binder" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 267.299153][T12022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.305895][ T36] audit: type=1400 audit(1755263972.352:36953): avc: denied { ioctl } for pid=12013 comm="syz.6.3862" path="/dev/binderfs/binder0" dev="binder" ino=9 ioctlcmd=0x620c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 267.359017][ T36] audit: type=1400 audit(1755263972.382:36954): avc: denied { mounton } for pid=12017 comm="syz.3.3863" path="/496/file0" dev="tmpfs" ino=2742 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 267.659799][T12055] overlayfs: failed to clone upperpath [ 267.773846][T12069] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 268.120168][T12084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3883'. [ 268.557503][T12100] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 268.565211][T12100] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:672 [ 268.909962][T12120] overlayfs: overlapping lowerdir path [ 269.053932][T12124] tc_dump_action: action bad kind [ 269.279091][T12146] rust_binder: Write failure EFAULT in pid:413 [ 271.105659][T12201] overlayfs: failed to clone upperpath [ 271.703225][T12212] tmpfs: Unknown parameter 'grpquota' [ 271.706701][T12211] tmpfs: Unknown parameter 'grpquota' [ 271.855230][T12221] fuse: blksize only supported for fuseblk [ 271.862027][T12221] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 271.872086][T12221] fuse: Unknown parameter 'fowner' [ 271.960399][T12223] overlayfs: failed to clone upperpath [ 272.025083][ T36] kauditd_printk_skb: 749 callbacks suppressed [ 272.025102][ T36] audit: type=1400 audit(1755263977.262:37704): avc: denied { name_bind } for pid=12229 comm="syz.3.3938" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 272.054487][ T36] audit: type=1400 audit(1755263977.262:37705): avc: denied { node_bind } for pid=12229 comm="syz.3.3938" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 272.077909][ T36] audit: type=1400 audit(1755263977.272:37706): avc: denied { create } for pid=12229 comm="syz.3.3938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 272.160670][ T36] audit: type=1400 audit(1755263977.402:37707): avc: denied { bpf } for pid=12234 comm="syz.3.3940" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 272.184414][ T36] audit: type=1400 audit(1755263977.412:37708): avc: denied { create } for pid=12234 comm="syz.3.3940" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 272.207721][ T36] audit: type=1400 audit(1755263977.412:37709): avc: denied { ioctl } for pid=12234 comm="syz.3.3940" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=52391 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 272.243526][ T36] audit: type=1400 audit(1755263977.412:37710): avc: denied { create } for pid=12234 comm="syz.3.3940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 272.284160][ T36] audit: type=1400 audit(1755263977.482:37711): avc: denied { execute } for pid=12237 comm="syz.0.3941" path="/dev/rnullb0" dev="tmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 272.308069][ T36] audit: type=1400 audit(1755263977.522:37712): avc: denied { create } for pid=12239 comm="syz.0.3942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 272.330096][ T36] audit: type=1400 audit(1755263977.522:37713): avc: denied { write } for pid=12239 comm="syz.0.3942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 272.370459][T12247] overlayfs: failed to clone upperpath [ 272.655145][T12269] overlayfs: failed to clone upperpath [ 272.735094][T12273] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:429 [ 272.960806][T12280] netlink: 679 bytes leftover after parsing attributes in process `syz.6.3958'. [ 272.980932][T12280] netlink: 679 bytes leftover after parsing attributes in process `syz.6.3958'. [ 273.044234][T12291] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 273.047219][T12291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.069775][T12291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.079035][T12291] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true [ 273.118617][T12300] x_tables: duplicate entry at hook 2 [ 273.138213][T12305] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 273.145722][T12305] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 144, size: 97) [ 273.145745][T12305] rust_binder: Error while translating object. [ 273.162847][T12305] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 273.170528][T12305] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:436 [ 273.486280][ T37] INFO: task syz.1.2136:6811 blocked for more than 122 seconds. [ 273.503276][ T37] Not tainted 6.12.38-syzkaller-g450db842cf3b #0 [ 273.511317][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 273.520093][ T37] task:syz.1.2136 state:D stack:0 pid:6811 tgid:6810 ppid:6015 flags:0x00004004 [ 273.530301][ T37] Call Trace: [ 273.533590][ T37] [ 273.536644][ T37] __schedule+0x1322/0x1df0 [ 273.541196][ T37] ? __sched_text_start+0x10/0x10 [ 273.546253][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 273.551729][ T37] ? mutex_unlock+0x8b/0x240 [ 273.556353][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 273.562164][ T37] schedule+0xc6/0x240 [ 273.566256][ T37] super_lock+0x150/0x300 [ 273.570680][ T37] ? user_get_super+0x350/0x350 [ 273.575539][ T37] ? __cfi_var_wake_function+0x10/0x10 [ 273.581319][ T37] ? __kasan_check_write+0x18/0x20 [ 273.586473][ T37] iterate_supers+0x8a/0x560 [ 273.591148][ T37] ? __cfi_sync_inodes_one_sb+0x10/0x10 [ 273.596727][ T37] ksys_sync+0x95/0x160 [ 273.600903][ T37] ? __cfi_ksys_sync+0x10/0x10 [ 273.605674][ T37] ? switch_fpu_return+0x12/0x20 [ 273.610659][ T37] __ia32_sys_sync+0x12/0x20 [ 273.615256][ T37] x64_sys_call+0x2a58/0x2ee0 [ 273.620031][ T37] do_syscall_64+0x58/0xf0 [ 273.624436][ T37] ? clear_bhb_loop+0x50/0xa0 [ 273.629131][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 273.635101][ T37] RIP: 0033:0x7f587818ebe9 [ 273.639518][ T37] RSP: 002b:00007f5878f68038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 273.647984][ T37] RAX: ffffffffffffffda RBX: 00007f58783b5fa0 RCX: 00007f587818ebe9 [ 273.655951][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 273.663943][ T37] RBP: 00007f58783b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 273.672023][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 273.680030][ T37] R13: 00007f58783b6038 R14: 00007f58783b5fa0 R15: 00007ffcb74c3f68 [ 273.688026][ T37] [ 273.697144][ T37] NMI backtrace for cpu 1 [ 273.697161][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.12.38-syzkaller-g450db842cf3b #0 67dc9e25005870c23be976f8e40d6eb6654f4075 [ 273.697187][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 273.697200][ T37] Call Trace: [ 273.697207][ T37] [ 273.697215][ T37] __dump_stack+0x21/0x30 [ 273.697241][ T37] dump_stack_lvl+0x10c/0x190 [ 273.697258][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 273.697278][ T37] dump_stack+0x19/0x20 [ 273.697296][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 273.697315][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 273.697336][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 273.697353][ T37] ? sched_show_task+0x379/0x560 [ 273.697374][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 273.697391][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 273.697412][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 273.697434][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 273.697456][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 273.697478][ T37] watchdog+0xd8f/0xed0 [ 273.697500][ T37] ? __cfi_watchdog+0x10/0x10 [ 273.697518][ T37] ? __kasan_check_read+0x15/0x20 [ 273.697539][ T37] ? __kthread_parkme+0x138/0x180 [ 273.697552][ T37] ? schedule+0xc6/0x240 [ 273.697572][ T37] kthread+0x2ca/0x370 [ 273.697588][ T37] ? __cfi_watchdog+0x10/0x10 [ 273.697606][ T37] ? __cfi_kthread+0x10/0x10 [ 273.697623][ T37] ret_from_fork+0x67/0xa0 [ 273.697643][ T37] ? __cfi_kthread+0x10/0x10 [ 273.697658][ T37] ret_from_fork_asm+0x1a/0x30 [ 273.697681][ T37] [ 273.853101][ T37] Sending NMI from CPU 1 to CPUs 0: [ 273.858885][ C0] NMI backtrace for cpu 0 [ 273.858898][ C0] CPU: 0 UID: 0 PID: 10458 Comm: syz.6.3357 Not tainted 6.12.38-syzkaller-g450db842cf3b #0 67dc9e25005870c23be976f8e40d6eb6654f4075 [ 273.858919][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 273.858928][ C0] RIP: 0010:__mod_memcg_lruvec_state+0x2f3/0x460 [ 273.858952][ C0] Code: 00 fc ff df 41 0f b6 04 14 84 c0 0f 85 8d 00 00 00 c7 03 00 00 00 00 44 8b 75 c8 48 83 c3 08 48 89 d8 48 c1 e8 03 80 3c 10 00 <0f> 84 e5 fe ff ff 48 89 df e8 8f 37 fb ff 48 ba 00 00 00 00 00 fc [ 273.858964][ C0] RSP: 0018:ffffc90004c6f460 EFLAGS: 00000246 [ 273.858978][ C0] RAX: 1ffff1103edce541 RBX: ffff8881f6e72a08 RCX: dffffc0000000000 [ 273.858989][ C0] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 273.858999][ C0] RBP: ffffc90004c6f4a8 R08: ffffea00044fb673 R09: 1ffffd400089f6ce [ 273.859010][ C0] R10: dffffc0000000000 R11: fffff9400089f6cf R12: 1ffff1103edce540 [ 273.859021][ C0] R13: 0000000000000035 R14: 0000000000000001 R15: 00000000ffffffff [ 273.859031][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 273.859052][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 273.859062][ C0] CR2: 00007f341eae7d60 CR3: 0000000149ff4000 CR4: 00000000003526b0 [ 273.859076][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 273.859085][ C0] DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000400 [ 273.859095][ C0] Call Trace: [ 273.859100][ C0] [ 273.859107][ C0] __lruvec_stat_mod_folio+0x124/0x1a0 [ 273.859124][ C0] ? folio_remove_rmap_ptes+0xf1/0x350 [ 273.859139][ C0] folio_remove_rmap_ptes+0x104/0x350 [ 273.859153][ C0] unmap_page_range+0x27c0/0x3f80 [ 273.859175][ C0] ? __cfi_unmap_page_range+0x10/0x10 [ 273.859195][ C0] unmap_vmas+0x2c5/0x3e0 [ 273.859214][ C0] ? __cfi_unmap_vmas+0x10/0x10 [ 273.859233][ C0] ? __kasan_check_write+0x18/0x20 [ 273.859252][ C0] exit_mmap+0x25b/0xb60 [ 273.859265][ C0] ? __cfi_exit_mmap+0x10/0x10 [ 273.859278][ C0] ? __cfi_mutex_unlock+0x10/0x10 [ 273.859299][ C0] ? uprobe_clear_state+0x2cd/0x340 [ 273.859316][ C0] __mmput+0x93/0x320 [ 273.859331][ C0] ? mmput+0x4d/0x170 [ 273.859344][ C0] mmput+0x55/0x170 [ 273.859357][ C0] do_exit+0x918/0x2630 [ 273.859373][ C0] ? __sched_text_start+0x10/0x10 [ 273.859390][ C0] ? __cfi_do_exit+0x10/0x10 [ 273.859406][ C0] ? __kasan_check_write+0x18/0x20 [ 273.859423][ C0] ? _raw_spin_lock_irq+0x8d/0x120 [ 273.859440][ C0] ? __kasan_check_read+0x15/0x20 [ 273.859457][ C0] ? cgroup_update_frozen+0x160/0x990 [ 273.859472][ C0] do_group_exit+0x22a/0x300 [ 273.859487][ C0] ? cgroup_leave_frozen+0x16c/0x2b0 [ 273.859500][ C0] get_signal+0x139d/0x14f0 [ 273.859519][ C0] arch_do_signal_or_restart+0x96/0x720 [ 273.859538][ C0] ? common_nsleep+0x93/0xb0 [ 273.859550][ C0] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 273.859569][ C0] ? __se_sys_clock_nanosleep+0x300/0x390 [ 273.859590][ C0] ? __kasan_check_read+0x15/0x20 [ 273.859607][ C0] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 273.859625][ C0] syscall_exit_to_user_mode+0x58/0xb0 [ 273.859638][ C0] do_syscall_64+0x64/0xf0 [ 273.859654][ C0] ? clear_bhb_loop+0x50/0xa0 [ 273.859667][ C0] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 273.859686][ C0] RIP: 0033:0x7fc562bc14a5 [ 273.859697][ C0] Code: Unable to access opcode bytes at 0x7fc562bc147b. [ 273.859705][ C0] RSP: 002b:00007fc56392af80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 273.859719][ C0] RAX: fffffffffffffdfc RBX: 00007fc562db5fa0 RCX: 00007fc562bc14a5 [ 273.859730][ C0] RDX: 00007fc56392afc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 273.859740][ C0] RBP: 00007fc562c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 273.859751][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 273.859760][ C0] R13: 00007fc562db6038 R14: 00007fc562db5fa0 R15: 00007ffec4e413d8 [ 273.859773][ C0] [ 273.874538][ T6677] usb 7-1: USB disconnect, device number 13 [ 274.443514][ T3084] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.451081][ T3084] bridge_slave_0: left allmulticast mode [ 274.456889][ T3084] bridge_slave_0: left promiscuous mode [ 274.462502][ T3084] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.597352][ T3084] tipc: Left network mode [ 274.602453][ T3084] veth1_macvtap: left promiscuous mode [ 274.608024][ T3084] veth0_vlan: left promiscuous mode [ 274.867165][ T3084] bridge_slave_1: left allmulticast mode [ 274.872816][ T3084] bridge_slave_1: left promiscuous mode [ 274.878470][ T3084] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.885829][ T3084] bridge_slave_0: left allmulticast mode [ 274.891604][ T3084] bridge_slave_0: left promiscuous mode [ 274.897241][ T3084] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.047571][ T3084] tipc: Left network mode [ 275.052528][ T3084] veth1_macvtap: left promiscuous mode [ 275.058082][ T3084] veth0_vlan: left promiscuous mode [ 275.459305][ T3084] veth1_macvtap: left promiscuous mode [ 275.464819][ T3084] veth0_vlan: left promiscuous mode