last executing test programs: 48.272622625s ago: executing program 2 (id=514): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6cb, 0x73f5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 47.759111336s ago: executing program 2 (id=515): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r0, 0x400, 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {}, [], {}, [{}]}, 0x2c, 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) chdir(&(0x7f00000001c0)='./file0\x00') setuid(0xee01) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x102) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001040)=ANY=[@ANYRES32], 0x1100}, 0x1, 0x7}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCXONC(r2, 0x80045440, 0x3) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9041, 0x0) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r4 = syz_open_pts(r1, 0x498403) r5 = dup3(r4, r3, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000780), &(0x7f00000007c0)={'U+', 0x80000000}, 0x16, 0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x12) socket(0x2, 0x2, 0x1) bind$unix(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') socket$packet(0x11, 0x3, 0x300) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') preadv(r7, &(0x7f0000000040)=[{&(0x7f0000000180)=""/66, 0x42}], 0x1, 0x2003, 0x1) preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/170, 0xaa}], 0x1, 0x9f, 0x106) modify_ldt$write(0x1, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}}, 0x803) fcntl$getflags(r0, 0x401) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x100a, 0x1}) 47.748305577s ago: executing program 2 (id=516): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000001c40)=0x1) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000000)=0x9) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x141000, 0x0, 0x3d}, 0x18) open_tree(r2, 0x0, 0x89901) io_submit(0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 47.698008772s ago: executing program 2 (id=517): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @ioapic={0x8000000, 0x6, 0x0, 0x0, 0x0, [{0x4, 0x3, 0x5, '\x00', 0xc}, {0x6, 0x7, 0xd, '\x00', 0x4}, {0xfc, 0xd0, 0x67, '\x00', 0xa}, {0x0, 0x80, 0x6, '\x00', 0xa}, {0x2, 0x1, 0x8, '\x00', 0x2}, {0x7, 0x7, 0x0, '\x00', 0x8}, {0x5, 0x9, 0x6, '\x00', 0xf2}, {0xfc, 0x2, 0x0, '\x00', 0x9}, {0x2, 0x3, 0x3, '\x00', 0x9}, {0x1, 0xe0, 0x4}, {0x6, 0xcb, 0x3, '\x00', 0x13}, {0x1, 0x9, 0x7, '\x00', 0x80}, {0x5, 0x85, 0x9, '\x00', 0x1}, {0x4, 0x5, 0x0, '\x00', 0x1}, {0x0, 0x3, 0xe7, '\x00', 0xe}, {0x9, 0x5, 0x7, '\x00', 0x9}, {0xcc, 0x6, 0x40, '\x00', 0x2}, {0x7, 0x1, 0x2, '\x00', 0x7}, {0x7, 0x2, 0x5, '\x00', 0xb1}, {0x3, 0x5, 0xb, '\x00', 0x5}, {0x4, 0x5a, 0x8, '\x00', 0xf7}, {0x6, 0x8, 0x8, '\x00', 0x7f}, {0xea, 0x1, 0x8, '\x00', 0x8}, {0x7, 0x7, 0x1, '\x00', 0xa1}]}}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x40000071, 0x0, 0x32feb97c}]}) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x200010000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x5af, {0xfeffffffffffffff, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x21, 0xf, 0x1, 0x8000, 0x0, r2, r3, 0x1000003, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0xffffffffffffffff, r3, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000002c0)=0x20) r8 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x70, r9, 0x0, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x4, 0x24}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ae}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x22000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB='mode=0000']) r11 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$netlink(r11, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x400c810) bind$netlink(r11, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x80000}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x800) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r12, &(0x7f00000029c0)={0x2020}, 0x2020) 47.697347111s ago: executing program 2 (id=518): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x68680, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r0, 0xd6baf000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003e40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002ebd7000fedbdf25120000000800070000000000180001000000000000891e68315f746f5f626f6e64000000"], 0x34}}, 0x400c810) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r8, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x3b48, &(0x7f00000000c0)={0x0, 0xc5fa, 0x1, 0x1, 0xc3}, 0x0, 0x0) sendmsg$tipc(r9, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x2, {0x41}}, 0x10, 0x0}, 0x0) connect$tipc(r9, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x40}, 0x2}}, 0x10) getpeername$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @local}, &(0x7f0000000300)=0x1c) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) sendto$packet(r7, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x8100, r10, 0x1, 0xe0}, 0x14) fcntl$setlease(r2, 0x400, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, 0x0, &(0x7f0000000400)) 47.631509767s ago: executing program 2 (id=519): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) vmsplice(r0, &(0x7f0000000700)=[{&(0x7f0000000240)="35d2246ab633b4d7a72f5171803a4ab273b43bdd3ba725739383ddd1ea21892b481c70e07ed763940c3b1bc5cb0d78fd3483b4c5844da1359c1689aa0a4c6cc93a0a78c88d4d27f2fdb2444fd5fc87bd146a442966b63e3efeed23ee50a9d0f530a10a3e022719708dd01dbe8dbcaba9b4f852a88c", 0x75}, {&(0x7f00000002c0)="c7415085a9bf11499ff0e4ce90b4ffd86b2cd9c78e311c4ea38720c7a89a26f0e7638dc5da386fab18510c16e5372f7832654d61", 0x34}, {&(0x7f0000000400)="60b23941658551347e20394dc259ffb21b0be17253833f1b9348dc9b3e1dac4e42097efbf3956f4c5949e0b40b73c9cc95f664e6d2c09ff44f337b755a595df43646ab9b4062142c5155b34ddef4f32a4274771244ae485254d8dd8744870ab9dff05cdf3be7b1a92c0473bc7c7235a1d8152c3e2030e1b941ec06f68d50da0838bb9f1a6b20b0fce4642221f902fdf282476e0d1103b817fa2767e7d9ecf5412c7c8ab5fda14cacff6045005943bd2a847525e71cbba7c3c9efd475e50df131f40410a4562bf8e8e69b465f8fa52e4e706fe5f110cbe4", 0xd7}, {&(0x7f0000000300)="a31b2ba268bd6cfd6c5f2e9c6a6557f23f5d6a1e89ebeed2e567", 0x1a}, {&(0x7f0000000340)="d96301bc497a8265ecff0c575e5065c85bbcc89d4a4567075ae4fb91a855fa34638920d0e4e09897f76fc869bb1677b0bab71af9c67c7d582a4e7fc2e4", 0x3d}, {&(0x7f0000000500)="d1841a8b44ebc63d30c582a51eaccc74eaff7559b252299bbb7cb41fbe4e3fca0018358a7a85cc4ab185c792961044e6e97aa6cbd19049407ceae210aef23d6d18060a2b605342b7800c", 0x4a}, {&(0x7f0000000600)="23147c698da6cf3080b2972d313f641fa4386de722cd331551513ba919953224f232fbfa2c4a40473b3ca26a76fea1f46b315523532eb1b681938d709d39b10222c3e11a574dcda55f06971c7a1174f0232d8f8cf421b60c2b9c1e2b83f323aa765e6d1a8837a44d26770f32f8777634ed7bc45c6209368f3366a646ff58170fcdbd177cd85125ab9923535a1ca0179660777f38e98ce55cd70212b00fdd4d3a34f285692aca70568e9fa9e1965fac374ccb778826e4f4c154ae99a6cdd59f8a8df1473bb9e8a7501f2436e849168fbc04e4fced1d64c3bbf201", 0xda}], 0x7, 0xb) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42041, 0x19a) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='gid=']) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000005c0)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780)='rootfs\x00', 0x108a010, &(0x7f0000000840)='\xec~\xd8\x12\xb2\xfeh\xec\xeb\xe35\xc77\x00\x00\xbd\xf5\xc0\xccQ\xb9\x8eq\xe7\xa1\x91\xc4\xc60\xf9\xbe#WN\x95\xe6\xdb\xda\xdb\x1c\xbf\xfd[\xb3\xcdoJ\xce\xd9\xb0W\x1a\xd49\x91W\xfa\xb9\xd2\x84B\xe0\xe2\x11\x95?o\xe17AUM\xa4\x9b\xe6\xafn\n\xc9\xd6\x8e\xc3\x0e\x8dg@\x0e<9\xcf\x18~\xbaMA$,\x93\x02I\xd1\xa87\xa5\x16\xf3h\xa9(\xa2\xb2\x817Y\xba\xdb\x86/:Pw\x98\xa4+\\{\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00dm\'b\xf7\xab\x8e\xd8-9R%\x11P\xa7\xcfX\xd4\x1cg\x9bP\xe5T\x86\x8b<\x17\x11!1\xd4vD\x9fE\xbcr3g\xdd\'\x1b\f\x13\a*U\x8cT7\xacV\x99\x12\x92\xd7\xb2\xf5t\xc6\x86$\x99\xe0\x90\xc2\tdzH\xa3\xfba!\xcaE%\xdf-\xd5\f6\xd6W\xa1\x05)E\x9b\x17\x86\n5\xabk\xc3E:\x93>\x05\xe2-\xc7\xdaG\xc4\x03\x8eM\x12N\xda^n\x1b\xd4T1\xfb\x88\xecrm \xee4\xbb\xa2\xd3\xdc\'k\xc9\xeb\xf6\x88_\xefz\v\x13\xe5\x00\x18\xa1\xb5[\xdb\x1d') socket(0x1e, 0x800, 0x2) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, 0x0, &(0x7f0000000240)) r3 = socket$igmp(0x2, 0x3, 0x2) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = memfd_secret(0x80000) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, 0x0, 0x0, 0xffffffffffffffff) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r5 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r5, 0x4c00, 0x3) futex(&(0x7f0000000140)=0x2, 0x9, 0x2, &(0x7f00000001c0), 0x0, 0x1) getsockopt$MRT(r3, 0x0, 0xd0, &(0x7f0000000000), &(0x7f0000000200)=0x4) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000dc0)={0x5}) 47.573930141s ago: executing program 32 (id=519): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) vmsplice(r0, &(0x7f0000000700)=[{&(0x7f0000000240)="35d2246ab633b4d7a72f5171803a4ab273b43bdd3ba725739383ddd1ea21892b481c70e07ed763940c3b1bc5cb0d78fd3483b4c5844da1359c1689aa0a4c6cc93a0a78c88d4d27f2fdb2444fd5fc87bd146a442966b63e3efeed23ee50a9d0f530a10a3e022719708dd01dbe8dbcaba9b4f852a88c", 0x75}, {&(0x7f00000002c0)="c7415085a9bf11499ff0e4ce90b4ffd86b2cd9c78e311c4ea38720c7a89a26f0e7638dc5da386fab18510c16e5372f7832654d61", 0x34}, {&(0x7f0000000400)="60b23941658551347e20394dc259ffb21b0be17253833f1b9348dc9b3e1dac4e42097efbf3956f4c5949e0b40b73c9cc95f664e6d2c09ff44f337b755a595df43646ab9b4062142c5155b34ddef4f32a4274771244ae485254d8dd8744870ab9dff05cdf3be7b1a92c0473bc7c7235a1d8152c3e2030e1b941ec06f68d50da0838bb9f1a6b20b0fce4642221f902fdf282476e0d1103b817fa2767e7d9ecf5412c7c8ab5fda14cacff6045005943bd2a847525e71cbba7c3c9efd475e50df131f40410a4562bf8e8e69b465f8fa52e4e706fe5f110cbe4", 0xd7}, {&(0x7f0000000300)="a31b2ba268bd6cfd6c5f2e9c6a6557f23f5d6a1e89ebeed2e567", 0x1a}, {&(0x7f0000000340)="d96301bc497a8265ecff0c575e5065c85bbcc89d4a4567075ae4fb91a855fa34638920d0e4e09897f76fc869bb1677b0bab71af9c67c7d582a4e7fc2e4", 0x3d}, {&(0x7f0000000500)="d1841a8b44ebc63d30c582a51eaccc74eaff7559b252299bbb7cb41fbe4e3fca0018358a7a85cc4ab185c792961044e6e97aa6cbd19049407ceae210aef23d6d18060a2b605342b7800c", 0x4a}, {&(0x7f0000000600)="23147c698da6cf3080b2972d313f641fa4386de722cd331551513ba919953224f232fbfa2c4a40473b3ca26a76fea1f46b315523532eb1b681938d709d39b10222c3e11a574dcda55f06971c7a1174f0232d8f8cf421b60c2b9c1e2b83f323aa765e6d1a8837a44d26770f32f8777634ed7bc45c6209368f3366a646ff58170fcdbd177cd85125ab9923535a1ca0179660777f38e98ce55cd70212b00fdd4d3a34f285692aca70568e9fa9e1965fac374ccb778826e4f4c154ae99a6cdd59f8a8df1473bb9e8a7501f2436e849168fbc04e4fced1d64c3bbf201", 0xda}], 0x7, 0xb) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42041, 0x19a) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='gid=']) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000005c0)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780)='rootfs\x00', 0x108a010, &(0x7f0000000840)='\xec~\xd8\x12\xb2\xfeh\xec\xeb\xe35\xc77\x00\x00\xbd\xf5\xc0\xccQ\xb9\x8eq\xe7\xa1\x91\xc4\xc60\xf9\xbe#WN\x95\xe6\xdb\xda\xdb\x1c\xbf\xfd[\xb3\xcdoJ\xce\xd9\xb0W\x1a\xd49\x91W\xfa\xb9\xd2\x84B\xe0\xe2\x11\x95?o\xe17AUM\xa4\x9b\xe6\xafn\n\xc9\xd6\x8e\xc3\x0e\x8dg@\x0e<9\xcf\x18~\xbaMA$,\x93\x02I\xd1\xa87\xa5\x16\xf3h\xa9(\xa2\xb2\x817Y\xba\xdb\x86/:Pw\x98\xa4+\\{\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00dm\'b\xf7\xab\x8e\xd8-9R%\x11P\xa7\xcfX\xd4\x1cg\x9bP\xe5T\x86\x8b<\x17\x11!1\xd4vD\x9fE\xbcr3g\xdd\'\x1b\f\x13\a*U\x8cT7\xacV\x99\x12\x92\xd7\xb2\xf5t\xc6\x86$\x99\xe0\x90\xc2\tdzH\xa3\xfba!\xcaE%\xdf-\xd5\f6\xd6W\xa1\x05)E\x9b\x17\x86\n5\xabk\xc3E:\x93>\x05\xe2-\xc7\xdaG\xc4\x03\x8eM\x12N\xda^n\x1b\xd4T1\xfb\x88\xecrm \xee4\xbb\xa2\xd3\xdc\'k\xc9\xeb\xf6\x88_\xefz\v\x13\xe5\x00\x18\xa1\xb5[\xdb\x1d') socket(0x1e, 0x800, 0x2) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, 0x0, &(0x7f0000000240)) r3 = socket$igmp(0x2, 0x3, 0x2) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = memfd_secret(0x80000) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, 0x0, 0x0, 0xffffffffffffffff) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r5 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r5, 0x4c00, 0x3) futex(&(0x7f0000000140)=0x2, 0x9, 0x2, &(0x7f00000001c0), 0x0, 0x1) getsockopt$MRT(r3, 0x0, 0xd0, &(0x7f0000000000), &(0x7f0000000200)=0x4) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000dc0)={0x5}) 25.125347253s ago: executing program 3 (id=764): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xaece, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x440042, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x7cab6ced6415608, 0x3}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000100)={0x6001, 0x10000}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000100)={0x6001, 0x10000}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000036000/0x18000)=nil, 0x0, 0x0, 0x49, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000036000/0x18000)=nil, 0x0, 0x0, 0x49, 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x4e24, 0xa, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c) (async) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x4e24, 0xa, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000005000000", @ANYRES32, @ANYBLOB="0000000000f0ffffffffffff0000000000000100", @ANYRES32, @ANYBLOB="0000000000800000000000000040000000000000", @ANYRES32, @ANYBLOB="00000000000000f0ffffffffe0b9630265b755a8", @ANYRES32, @ANYBLOB="0000000000f0ffff000000000020000000000000", @ANYRES32, @ANYBLOB="0000000000000000010000000000000100000000"]) close_range(r3, r0, 0x0) ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f0000000400)) 25.016164682s ago: executing program 3 (id=765): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x34, r1, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xa000000}]}, 0x34}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f00000002c0)={0x400002, r5}) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000000)={0x0, r5}) close_range(r2, 0xffffffffffffffff, 0x0) 24.895540692s ago: executing program 3 (id=769): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getpgid(0x0) sendmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) r4 = fsopen(&(0x7f00000000c0)='overlay\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)=':..:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='ceph\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='ceph\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) (async) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write(r5, &(0x7f0000002400)="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", 0x1000) 24.876735973s ago: executing program 3 (id=771): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x7, 0x7d, 0x4, '\x00', 0x5}) ioctl$KIOCSOUND(r3, 0x4b2f, 0xffffffffffffff4a) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x120584c, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x10001) ioctl$ASHMEM_SET_NAME(r4, 0x41007701, &(0x7f00000005c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x00\x00\x00\x00Fc\x0f\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a\x00\x00\x00\x00\x00\x00\x01\xc0\x91\xa5\xe8\x8d\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7\x04\xf7\xc4\x16\xee\xa0Tn\t\x0f\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xd7\n \x9b\xab\x8d\xa3h\xe9\x04h=/\xb4\x1c\xdd\xef4]L\x8d\xc3\xcf\x00\x00\x00\x05\x8f\xfex\xcf\x9brGti\xb3\x05\xf1\xe4\xca\xf9\x7f\xed3\x1aJ\xad\xe1-\xf0\xa5\xf5;[c%\xcd\x86\xce,^\x0fV\x93\xa2\xe3\xe8\xad]\xb0\xe1Y\xab\xeea\xd4\xd7\xa2\x1c\x87\xbdO\x9e67K#\xddy\xc8\xb0=\x83\x99\x8c\xfc\xfcks1\x1b\xe1o\xfdC\xedeS0\xd4\xaf\nC\xffZ\r\xdfXO\x9a\xd8P\x9b\xae\xee\xe6\v\xd0\xa6a\x8f\xa0\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x001T0\x11\xa1\xca^\x16\x17\xb8*D\xaa \xbe\xe4\xff\x03\x838\b\xbb\xf9*\x9a\xf8\xd5\xee\xd1\\\x1b\xddP\x16NY}\xc8\xd8;%\xff\n(D<\xac,\xc4\x18\x89\x8d\xb6[\xfd\x18=?\xdd\x95\x19\xf3\x87\x9eo3\x02\x8f\xadn9\xd1X\xbbCR\xab\xa5\x99U\x1d$_`\x11??\xf0]\x9b{\xc3\xaa\x1b\xea\fZ\xbf\xc02\xbb\x8c\x9b\xc4\xdb\xf7\x196\xca\x00\xdb\x8f\x80|\xf9\'h\xe11-\xbbA\xb0\x9ed\xea\xf6\xcd\'8\xc0\x83\xd2{\xf9\x8a\xda:\x8ap\v\xe3\xd6I\xc87\x84<\xcbuY6\xc0\xfb\x8a\xab\x9e\xdeeD\x86\xadpCy\xd5\xde\x9as\x9f\x00\x00\x00\x00\x00') r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x9, @local, 0xb}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000000)="65f2", 0x2}], 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r6, 0x0, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0100001000130700000000fcdbdf257f00000100000000000000000000000020010000000000000000000000000001020000004e2100020a0000003b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc020000000000000000000000000000000004d432000000fe80000000000000000000000000001b000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000020000000000000043050000000000000400000000000000ffffffffffffff7f0000000000000000000000000000000000000000ffffffff0000000028bd7000003500000a00040000000000000000004c0012007266633431000000000000cfcd6573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060"], 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x0) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26001, 0x13, r4, 0x22e7c000) 24.836463366s ago: executing program 3 (id=772): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) futex_waitv(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x1) (async) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) 23.650030731s ago: executing program 3 (id=792): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x18, 0x31, 0x80d, 0x70bd29, 0x25dfdbfb, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x101801, 0x0) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000002600)=[@rdmsr={0x32, 0x18, {0x8ea}}, @uexit={0x0, 0x18, 0xfffffffffffffffa}, @wr_crn={0x46, 0x20, {0x2, 0x8}}, @wrmsr={0x1e, 0x20, {0x2d9, 0x1ff}}, @cpuid={0x14, 0x18, {0xf17, 0x2}}, @wrmsr={0x1e, 0x20, {0x370, 0x331}}, @wr_crn={0x46, 0x20, {0x4, 0x1}}, @uexit={0x0, 0x18}, @uexit={0x0, 0x18, 0xfffffffffffffbff}, @rdmsr={0x32, 0x18, {0x92c}}, @rdmsr={0x32, 0x18, {0x9b}}, @wrmsr={0x1e, 0x20, {0x8ac, 0x711}}, @cpuid={0x14, 0x18, {0xa, 0x42e4}}, @wr_crn={0x46, 0x20, {0x0, 0x9}}, @wrmsr={0x1e, 0x20, {0x384, 0x1}}, @wrmsr={0x1e, 0x20, {0x400000b5, 0x4}}, @code={0xa, 0x57, {"b9840a00000f32440fa066662666410f3832590065450f01ca672e450f01c90fc7580b66b853008ec0470f2e18450f79144a66baf80cb82201b58cef66bafc0c66b8020066ef"}}, @wr_crn={0x46, 0x20, {0x0, 0x8aea}}, @uexit={0x0, 0x18, 0x9e62ae0}, @cpuid={0x14, 0x18, {0x10000, 0x8}}, @uexit={0x0, 0x18, 0x2}, @code={0xa, 0x69, {"f20f10825d5e41932ef3420f08b9e00a0000b805000000ba000000000f300f015800b99c0800000f3266b87f008ee0c74424002f010000c744240200000000ff2c24d0212e0f08b9f60a0000b893860000ba000000000f30"}}, @code={0xa, 0x43, {"0f01c2b9ac0a00000f32653ef2470cdb67dbe4660f01f8b97c0300000f3236430f1ad82e2e0fc72a3ec16bea02c4a2c94732"}}, @uexit={0x0, 0x18, 0x8}, @cpuid={0x14, 0x18, {0x8, 0x7c39}}, @uexit={0x0, 0x18, 0x7}, @wrmsr={0x1e, 0x20, {0xc0010063, 0x7}}, @code={0xa, 0x50, {"b96b0300000f32c4017571d47d66400fc731438191fe0000000e00000064410f01c26467451d467a9ee7430f070f01c30f2385266566400f3801af1ecb77b4"}}, @rdmsr={0x32, 0x18, {0xb24}}, @uexit={0x0, 0x18, 0xd}, @cpuid={0x14, 0x18, {0x6, 0x1000}}, @rdmsr={0x32, 0x18, {0x8a2}}], 0x443}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="0f44a8fc256c5d2626f3440f1ec0660f383b0b0f013c4726460f2007c7442400ed000000c744240299a50000ff2c24653e650fc72fc4217a2da7f7580000c744240021000000c744240204000000ff1c24b8010000000f01d9", 0x59}], 0x1, 0x2, &(0x7f0000000180)=[@efer], 0x1) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x183001, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0xa0002004}) close_range(r3, 0xffffffffffffffff, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{}]}}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') setsockopt(0xffffffffffffffff, 0x90, 0x1, 0x0, 0x0) read$FUSE(r7, &(0x7f00000005c0)={0x2020}, 0x2020) 23.586105506s ago: executing program 33 (id=792): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x18, 0x31, 0x80d, 0x70bd29, 0x25dfdbfb, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x101801, 0x0) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000002600)=[@rdmsr={0x32, 0x18, {0x8ea}}, @uexit={0x0, 0x18, 0xfffffffffffffffa}, @wr_crn={0x46, 0x20, {0x2, 0x8}}, @wrmsr={0x1e, 0x20, {0x2d9, 0x1ff}}, @cpuid={0x14, 0x18, {0xf17, 0x2}}, @wrmsr={0x1e, 0x20, {0x370, 0x331}}, @wr_crn={0x46, 0x20, {0x4, 0x1}}, @uexit={0x0, 0x18}, @uexit={0x0, 0x18, 0xfffffffffffffbff}, @rdmsr={0x32, 0x18, {0x92c}}, @rdmsr={0x32, 0x18, {0x9b}}, @wrmsr={0x1e, 0x20, {0x8ac, 0x711}}, @cpuid={0x14, 0x18, {0xa, 0x42e4}}, @wr_crn={0x46, 0x20, {0x0, 0x9}}, @wrmsr={0x1e, 0x20, {0x384, 0x1}}, @wrmsr={0x1e, 0x20, {0x400000b5, 0x4}}, @code={0xa, 0x57, {"b9840a00000f32440fa066662666410f3832590065450f01ca672e450f01c90fc7580b66b853008ec0470f2e18450f79144a66baf80cb82201b58cef66bafc0c66b8020066ef"}}, @wr_crn={0x46, 0x20, {0x0, 0x8aea}}, @uexit={0x0, 0x18, 0x9e62ae0}, @cpuid={0x14, 0x18, {0x10000, 0x8}}, @uexit={0x0, 0x18, 0x2}, @code={0xa, 0x69, {"f20f10825d5e41932ef3420f08b9e00a0000b805000000ba000000000f300f015800b99c0800000f3266b87f008ee0c74424002f010000c744240200000000ff2c24d0212e0f08b9f60a0000b893860000ba000000000f30"}}, @code={0xa, 0x43, {"0f01c2b9ac0a00000f32653ef2470cdb67dbe4660f01f8b97c0300000f3236430f1ad82e2e0fc72a3ec16bea02c4a2c94732"}}, @uexit={0x0, 0x18, 0x8}, @cpuid={0x14, 0x18, {0x8, 0x7c39}}, @uexit={0x0, 0x18, 0x7}, @wrmsr={0x1e, 0x20, {0xc0010063, 0x7}}, @code={0xa, 0x50, {"b96b0300000f32c4017571d47d66400fc731438191fe0000000e00000064410f01c26467451d467a9ee7430f070f01c30f2385266566400f3801af1ecb77b4"}}, @rdmsr={0x32, 0x18, {0xb24}}, @uexit={0x0, 0x18, 0xd}, @cpuid={0x14, 0x18, {0x6, 0x1000}}, @rdmsr={0x32, 0x18, {0x8a2}}], 0x443}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="0f44a8fc256c5d2626f3440f1ec0660f383b0b0f013c4726460f2007c7442400ed000000c744240299a50000ff2c24653e650fc72fc4217a2da7f7580000c744240021000000c744240204000000ff1c24b8010000000f01d9", 0x59}], 0x1, 0x2, &(0x7f0000000180)=[@efer], 0x1) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x183001, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0xa0002004}) close_range(r3, 0xffffffffffffffff, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{}]}}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') setsockopt(0xffffffffffffffff, 0x90, 0x1, 0x0, 0x0) read$FUSE(r7, &(0x7f00000005c0)={0x2020}, 0x2020) 9.937265775s ago: executing program 5 (id=793): io_setup(0x2, &(0x7f0000000000)=0x0) io_destroy(r0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x104000, 0x20) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 8.187284005s ago: executing program 5 (id=793): io_setup(0x2, &(0x7f0000000000)=0x0) io_destroy(r0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x104000, 0x20) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 6.446690423s ago: executing program 1 (id=865): r0 = gettid() wait4(r0, 0x0, 0x20000000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg(r1, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x22, 0x0) sched_setattr(r0, &(0x7f0000000100)={0x38, 0x0, 0x3, 0x0, 0x0, 0x74, 0x3, 0x0, 0x0, 0xfffffffc}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) signalfd(r3, &(0x7f0000000080)={[0x8000000000000001]}, 0x8) r4 = socket$inet6(0xa, 0x80001, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000000)=ANY=[], 0x190) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x1800000) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffff000) gettid() 6.36246458s ago: executing program 1 (id=869): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000a40)=0x1, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000300)=0x208) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000180), 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x15, 0x0, &(0x7f0000000140)) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./cgroup/file0\x00', &(0x7f0000000080)='ubifs\x00', 0x880000, 0x0) 6.36160666s ago: executing program 4 (id=870): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0xa}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x14, 0x3, 0x3, 0x101}, 0x14}}, 0x0) r3 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 6.36124528s ago: executing program 1 (id=871): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f0000000280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}}) madvise(&(0x7f0000366000/0x2000)=nil, 0x2000, 0x11) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xff, 0xd}) r6 = dup(r4) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f00000002c0)=ANY=[@ANYBLOB="820000000000000002000040"]) r7 = socket(0x1e, 0x7, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) epoll_create(0x0) recvmmsg$unix(r7, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/37, 0x25}], 0x1}}], 0x1, 0x400120a0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r8) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r9, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}}, 0x800) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) close_range(r0, 0xffffffffffffffff, 0x0) 6.313530354s ago: executing program 4 (id=874): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="ebb79e9e360f0183660fd2eff30f10f1b961020000b80e080000ba000000000f30b98d020000ec327f7f99f3530000660f71e300c4e2f91d20", 0x39}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFBR(r7, 0x8940, &(0x7f0000000080)=@get={0x1, 0x0, 0x1000}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6.277234087s ago: executing program 5 (id=793): io_setup(0x2, &(0x7f0000000000)=0x0) io_destroy(r0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x104000, 0x20) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 4.392045338s ago: executing program 1 (id=876): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0x20, 0x6, 0x0, 0xa1}, {0x6}]}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f0000000040)=0xfffffffffffffde4) read$ptp(0xffffffffffffffff, &(0x7f0000000480)=""/161, 0xa1) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x40802, 0x2, 0x5, 0x1000007f}, 0xfffffffffffffecc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000428ed240860502015a370102031e075726af26b6d6c6c33c1b01090212000106"], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0xa, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000200)="6766c7442400000001006766c7442402815600006766c744240600000000670f01142464660f380764c6d9c066b96c08000066b80200000066ba000000000f30f00fc78d4c856766c7442400620000006766c7442402040000006766c744240600000000670f011c240f381d49029e65360f38f05300660f380067ce", 0x7c}], 0x1, 0x45, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000001d80)={'filter\x00', 0x111, 0x4, 0x3a0, 0x0, 0x1d0, 0x1d0, 0x2b8, 0x2b8, 0x2b8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @dev={0xac, 0x14, 0x14, 0x19}, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg1\x00', 'lo\x00', {}, {}, 0x0, 0x158}, 0xc0, 0xe8, 0x0, {0xb000000}}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x2}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)=0x0) ptrace(0x11, r8) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ptrace$setregs(0xd, r7, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r7, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r7, 0x2, &(0x7f0000000740)={0x0}) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r9, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) recvmsg(r10, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1, 0x0, 0x46, 0x407006}, 0x104) setsockopt$inet_tcp_TLS_RX(r10, 0x6, 0x2, &(0x7f0000000380)=@ccm_128={{0x303}, "818c318323662392", "3c31033bb694b3b46f95211d3e30c82e", "15b3193a", "121342a611189318"}, 0x28) 4.391527638s ago: executing program 4 (id=877): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="ebb79e9e360f0183660fd2eff30f10f1b961020000b80e080000ba000000000f30b98d020000ec327f7f99f3530000660f71e300c4e2f91d20", 0x39}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) open(&(0x7f0000000100)='\x00', 0x101100, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="ebb79e9e360f0183660fd2eff30f10f1b961020000b80e080000ba000000000f30b98d020000ec327f7f99f3530000660f71e300c4e2f91d20", 0x39}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (async) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) (async) open(&(0x7f0000000100)='\x00', 0x101100, 0x9) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) (async) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) 4.269369918s ago: executing program 5 (id=793): io_setup(0x2, &(0x7f0000000000)=0x0) io_destroy(r0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x104000, 0x20) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 2.334321263s ago: executing program 0 (id=880): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) futex_waitv(&(0x7f00000006c0)=[{0x7, 0x0, 0x2, 0xca9a3b}], 0x1, 0x0, 0x0, 0x1) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x16, 0x0, 0x101}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newtaction={0x4c, 0x30, 0x1, 0x70bd29, 0x25dfdbfa, {}, [{0x38, 0x1, [@m_ipt={0x34, 0x1, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r0, 0x22e7c000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000000c0)=0x4411, 0x4) 2.331053644s ago: executing program 4 (id=881): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x3000000, @mcast2, 0x2db}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x11, &(0x7f0000000000)=0x1, 0x4) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100), 0x10) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) mkdir(0x0, 0x0) mount$incfs(0x0, 0x0, 0x0, 0x1004002, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 2.296569586s ago: executing program 0 (id=882): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = getpid() r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x3ff, 0x8006}, 0x4) (async) bind$packet(r2, &(0x7f0000000040)={0x11, 0x1c, 0x0, 0x1, 0x9}, 0x14) (async) r3 = syz_pidfd_open(r1, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000600)=""/238, 0xee, 0x2, 0x400000000000025}, @fd={0x66642a85, 0x0, r3}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000340)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000fedbdf250100000006000600214e000008000100", @ANYRES32=r8], 0x24}, 0x1, 0x0, 0x0, 0x4000005}, 0x800) r9 = socket$xdp(0x2c, 0x3, 0x0) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) (async) bind$xdp(r9, &(0x7f0000000240)={0x2c, 0x1, r11, 0x1000000}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x29, 0x9, 0x1, 0x9d, 0x1, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x40, 0x80, 0x3, 0x6}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)={0x70, r4, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x70}}, 0x8000) 2.229390982s ago: executing program 0 (id=883): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1800, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) (async) r1 = socket(0x11, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000000)={'veth0_virt_wifi\x00', {0x2, 0x0, @loopback}}) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r2, 0x29, 0xce, 0x0, 0x0) (async) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) (async) keyctl$clear(0x11, 0xfffffffffffffffd) listen(r0, 0xa) setresuid(0x0, 0xee00, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000fe6000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x5a, 0x0, 0x0) (async) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r7 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) request_key(&(0x7f0000000040)='syzkaller\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000100)='./binderfs/binder1\x00', r7) (async) close_range(r0, r5, 0x0) 2.159925748s ago: executing program 0 (id=884): prlimit64(0x0, 0xd, &(0x7f0000000140)={0xa, 0x88}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @remote, 0x7}, 0x1c) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x1f, 0xe, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000700)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000009f0000ffffffffffffffff0000000000200000000000000000000000000076e0df282828ed64270000000000000a000000000000feffffffff7f40000210000000000008000000000000000001000000000000f44300050000000000000000003c00000002000000ffffffff00000000000000000000000006000000040100000000000000000000000000005ccedb74f30348516704640d133d534693e01ef5930400"/212], 0xfc}}, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000080), 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 2.159323007s ago: executing program 5 (id=793): io_setup(0x2, &(0x7f0000000000)=0x0) io_destroy(r0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x104000, 0x20) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 132.714909ms ago: executing program 0 (id=885): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000a80)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000001440)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b8020000000f23d80f21f835000000300f23f8b9800000c00f3235008000000f30f20f5f48540f01c20f01b700300000c4e3514170d3316766f30f0966b8d6000f00d8660f38829c3f432b00000fc7bc3d00000000", 0x55}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x5a9100, 0x0) socketpair(0x9, 0x5, 0x0, &(0x7f00000001c0)) r6 = timerfd_create(0x6, 0x81800) dup3(r4, r6, 0x80000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f00000004c0)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) 130.386869ms ago: executing program 1 (id=886): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x0, 0x80, 0x6, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0x80, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x3d}}}}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup(r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x5, &(0x7f0000000140)=[{0xd, 0x8, 0xb, 0x5}, {0xfff8, 0x0, 0x6, 0x7fffffff}, {0x3, 0x2, 0x8f, 0x4}, {0x7ff, 0x5, 0x7, 0x1}, {0x1, 0x1, 0x7, 0xfffffffa}]}) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf250ae4d8001800018014000200"], 0x2c}, 0x1, 0x0, 0x0, 0x24000004}, 0x40) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0xfffffffffffffffd) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000080)="260fae079a65cb071000000f01c4b8c30000000f23c80f21f8350400e0000f23f80fc76e00660f3a0dd1000f9b13b8010000000f01d966ba6100b800000000ef66b82f008ee8", 0x46}], 0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100002c, &(0x7f0000000380)={[{@none}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) 129.455749ms ago: executing program 4 (id=887): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d7379737465225f75dd47d0b90b893a03ffdf"]) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/215, 0xd7}], 0x1, 0x0, 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000280)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@local, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x10000000, 0x0, 0x0, 0x1, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000200000000000000080012000007a18208"], 0x50}}, 0x20000000) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2000, 0x0, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r3, {0x7, 0x2b, 0x0, 0x10815, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}}, 0x50) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) getresgid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f00000000c0)) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r7, 0x10e, 0xa, &(0x7f00000003c0)=0x1, 0x4) syz_genetlink_get_family_id$team(&(0x7f0000000440), r7) (async) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r8, &(0x7f0000004380)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591438d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0226cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734b5ecaf5e82983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1b8abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296565722d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fda8bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f1cb390aaf82b0bc6af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde67f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c51ca11116b21e87887b462aa9770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff19427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c94c114d3c4c35eed4d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46babdb9247ce8eabad9718a8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a65247317882fbf171520f00b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0ca62212a1b6d41043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5d18f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077bec885ce88d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc670ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f9", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0xfffffffffffffffd, 0x0, 0x20000000, 0x2000000005, 0x6, 0x0, {0x0, 0x900, 0x200004, 0xd, 0x0, 0x100, 0x0, 0x0, 0x0, 0x4000, 0xfffffffc, r9, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$key(0xf, 0x3, 0x2) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) futex(0x0, 0xb, 0x2, 0x0, &(0x7f0000006340)=0x2, 0x2) (async) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) (async) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000002280)={0x158, 0x0, r3, [{{0x1, 0x2, 0x8, 0x7, 0x15, 0x24c97ad5, {0x5, 0x6, 0x7, 0x8, 0xd, 0x9, 0xfffffffd, 0x9243, 0x5, 0xc000, 0x51e, r5, r6, 0x1, 0x23}}, {0x6, 0x0, 0xb, 0x2, './binderfs\x00'}}, {{0x3, 0x2, 0x4, 0x9cb9, 0xf40, 0x10001, {0x1, 0x3, 0xd46, 0x400, 0x5, 0x3, 0x2, 0xc, 0x9, 0x1000, 0x6, r9, r10, 0x8, 0x7}}, {0x3, 0x10001, 0x1, 0x5, ':'}}]}, 0x158) (async) r11 = syz_clone(0x20080a00, &(0x7f0000004200)="561ed44fae8415325f73f0a0ba23b06bd30870b52bbefaa4ef1450f5c5dfb70d1cd9291391a8b0ae8963c7393df7c55e7e9bc9e694569e1e02e86e26d3ed3aa700a6f939d02d94333f931c9ee9115d6ad498a4cf1e659fb2fe5ab403e77135f42f8df0a42a1580883764076cf0a2dd0a5c4aa216270f41cb472bd12625c4bd7237986d2cfa288ff008b7b02b78fc58c2480fb63d4fcfeb44a9bfda423b361e20f795767cbeb74f9befafb3425818ba9ba2d2b985f176e287f3d90cbd7b2edce78a63430c34460b2eb1c462166937daf1da3c750f4f5b213946fa5af5c23c3229", 0xe0, &(0x7f0000004300), &(0x7f0000004340), &(0x7f0000006380)="4b4f76071742f568fc81b3e05da98dbe0b908e5e1a2590c2f5e3bd572b5e14041c43425d1458c9b84cdf8d2de656366669fe42c274645fffab9b5c47725b03d28d02c99bf09ca544d2d965452e877dd93e50da47da39453baa5b8c1f04a7aefc574c983b174df9fbc1ab60e227f05b797b8150f87522ef2f199a719f43bc53bc896ac7fb4971e1df91f0b650ff2ed3f48db1c71556d59783029f3b3000a1fd4b44adc4fe83") ptrace$getenv(0x4201, r11, 0x93766d0, &(0x7f0000006440)) 45.095306ms ago: executing program 0 (id=888): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000300)) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xffffedc7fff, 0x1000, 0x4, 0x5}, 0x20) (async) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="836ff8bed6"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io(r4, &(0x7f0000000140)={0x2c, &(0x7f0000000000)=ANY=[@ANYRES8=r2], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r6 = open(0x0, 0x1407c2, 0x78e22799f4a46ef7) (async) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$sock(r8, &(0x7f0000002940)=[{{&(0x7f0000000000)=@l2={0x1f, 0x4, @any, 0x4, 0x1}, 0x80, 0x0}}], 0x1, 0x20000000) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x36) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x4) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x4000000000000005) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYRES32=r5]) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) (async) r10 = syz_open_dev$usbfs(&(0x7f0000000080), 0xff, 0x200041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r10, 0x8108551b, &(0x7f00000001c0)={0x6, 0x2, "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"}) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r12 = openat$cgroup_ro(r6, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x4000) (async) setsockopt$inet6_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f0000000380), 0x4) (async) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r13, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) 43.513046ms ago: executing program 1 (id=889): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x2040000, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0xfffffffc, 0xfffffffd, 0x6, 0x6eddb310, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6835446b3"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000001280)={0x7, 0xc239, 0x4, 0x3, 0x16, "b920df02aa57b844"}) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000005fc0)={0x2020}, 0x2020) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) 41.932196ms ago: executing program 4 (id=890): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x68, 0x0, &(0x7f0000000380)=[@dead_binder_done, @exit_looper, @enter_looper, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000500)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/97, 0x61, 0x0, 0x3c}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x1f}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0xf7, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) sync_file_range(r0, 0x0, 0x9, 0x6) 0s ago: executing program 5 (id=793): io_setup(0x2, &(0x7f0000000000)=0x0) io_destroy(r0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x104000, 0x20) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): evices/virtual/input/input5 [ 29.287826][ T547] rust_binder: validate_parent_fixup: fixup_min_offset=58, parent_offset=36 [ 29.287877][ T547] rust_binder: Error while translating object. [ 29.301628][ T547] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.309410][ T547] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:57 [ 29.323812][ T9] ipheth 2-1:176.218: Unable to find alternate settings interface [ 29.366373][ T9] usb 2-1: USB disconnect, device number 2 [ 29.380078][ T336] wacom 0003:056A:003F.0002: hidraw0: USB HID v0.06 Device [HID 056a:003f] on usb-dummy_hcd.0-1/input0 [ 29.456596][ T555] rust_binder: Write failure EFAULT in pid:63 [ 29.485665][ T560] rust_binder: 74: no such ref 0 [ 29.501860][ T564] overlayfs: failed to resolve './file1': -2 [ 29.512360][ T566] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 29.521212][ T566] rust_binder: Write failure EINVAL in pid:79 [ 29.632087][ T336] usb 1-1: USB disconnect, device number 3 [ 29.655015][ T582] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0xee [ 29.851162][ T589] binder: Unknown parameter '' [ 29.926197][ T520] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 29.985309][ T594] rust_binder: Write failure EINVAL in pid:68 [ 30.075641][ T520] usb 4-1: Using ep0 maxpacket: 8 [ 30.090526][ T520] usb 4-1: unable to get BOS descriptor or descriptor too short [ 30.101072][ T520] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 30.110684][ T520] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.122834][ T520] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 973, setting to 64 [ 30.135376][ T520] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 30.148755][ T520] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 30.159153][ T520] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.168259][ T520] usb 4-1: Product: syz [ 30.172870][ T520] usb 4-1: Manufacturer: syz [ 30.177871][ T520] usb 4-1: SerialNumber: syz [ 30.385312][ T584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.396149][ T584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.412612][ T520] usb 4-1: USB disconnect, device number 2 [ 30.421090][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.670506][ T626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.98'. [ 30.684117][ T626] netlink: 104 bytes leftover after parsing attributes in process `syz.1.98'. [ 30.727840][ T626] rust_binder: Error while translating object. [ 30.727863][ T626] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 30.735188][ T626] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:81 [ 30.839261][ T632] tipc: Started in network mode [ 30.854730][ T632] tipc: Node identity 7aa041198ba1, cluster identity 4711 [ 30.862430][ T632] tipc: Enabled bearer , priority 0 [ 30.870882][ T632] tipc: Disabling bearer [ 30.935527][ T31] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 30.944557][ T636] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 31.097230][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 31.107676][ T31] usb 3-1: not running at top speed; connect to a high speed hub [ 31.117627][ T31] usb 3-1: config 13 has an invalid interface number: 90 but max is 0 [ 31.126673][ T31] usb 3-1: config 13 has no interface number 0 [ 31.133843][ T31] usb 3-1: config 13 interface 90 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 31.150719][ T31] usb 3-1: language id specifier not provided by device, defaulting to English [ 31.162578][ T31] usb 3-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=81.b7 [ 31.173658][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.183090][ T31] usb 3-1: Product: syz [ 31.188372][ T31] usb 3-1: Manufacturer: syz [ 31.193790][ T31] usb 3-1: SerialNumber: syz [ 31.208265][ T640] IPv6: NLM_F_CREATE should be specified when creating new route [ 31.374743][ T643] binder: Bad value for 'stats' [ 31.578731][ T31] usb 3-1: USB disconnect, device number 4 [ 31.597641][ T356] udevd[356]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:13.90/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.635537][ T329] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 31.726575][ T649] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 31.745568][ T649] rust_binder: Failed to allocate buffer. len:18446744073709551048, is_oneway:false [ 31.745595][ T649] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 31.775556][ T649] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:96 [ 31.786053][ T329] usb 1-1: device descriptor read/64, error -71 [ 31.947551][ T36] kauditd_printk_skb: 48 callbacks suppressed [ 31.947593][ T36] audit: type=1400 audit(1755352089.360:246): avc: denied { read write } for pid=653 comm="syz.2.108" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 32.035062][ T36] audit: type=1400 audit(1755352089.360:247): avc: denied { open } for pid=653 comm="syz.2.108" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 32.066604][ T329] usb 1-1: device descriptor read/64, error -71 [ 32.315535][ T329] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 32.413392][ T36] audit: type=1400 audit(1755352089.820:248): avc: denied { ioctl } for pid=664 comm="syz.2.112" path="socket:[5597]" dev="sockfs" ino=5597 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.455571][ T329] usb 1-1: device descriptor read/64, error -71 [ 32.472028][ T36] audit: type=1400 audit(1755352089.860:249): avc: denied { map } for pid=664 comm="syz.2.112" path="socket:[5599]" dev="sockfs" ino=5599 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 32.532210][ T36] audit: type=1400 audit(1755352089.860:250): avc: denied { accept } for pid=664 comm="syz.2.112" path="socket:[5599]" dev="sockfs" ino=5599 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 32.584599][ T675] tipc: Enabling of bearer rejected, media not registered [ 32.596963][ T676] rust_binder: Error while translating object. [ 32.597012][ T676] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 32.604363][ T676] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:97 [ 32.630379][ T36] audit: type=1400 audit(1755352090.040:251): avc: denied { create } for pid=677 comm="syz.3.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 32.678443][ T36] audit: type=1400 audit(1755352090.080:252): avc: denied { bind } for pid=677 comm="syz.3.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 32.735576][ T329] usb 1-1: device descriptor read/64, error -71 [ 32.762888][ T36] audit: type=1400 audit(1755352090.170:253): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=458 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 32.796829][ T36] audit: type=1400 audit(1755352090.170:254): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=458 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 32.823418][ T36] audit: type=1400 audit(1755352090.170:255): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=458 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 32.856833][ T329] usb usb1-port1: attempt power cycle [ 33.115605][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 33.205909][ T329] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 33.227116][ T329] usb 1-1: device descriptor read/8, error -71 [ 33.235771][ T62] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 33.266967][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.280232][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.291202][ T10] usb 4-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 33.301387][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.311358][ T10] usb 4-1: config 0 descriptor?? [ 33.357096][ T329] usb 1-1: device descriptor read/8, error -71 [ 33.397524][ T62] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.411034][ T62] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 33.421282][ T62] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.431678][ T62] usb 2-1: config 0 descriptor?? [ 33.595683][ T329] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 33.617023][ T329] usb 1-1: device descriptor read/8, error -71 [ 33.720348][ T10] belkin 0003:050D:3201.0003: unknown main item tag 0x0 [ 33.727851][ T10] belkin 0003:050D:3201.0003: unknown main item tag 0x0 [ 33.735125][ T10] belkin 0003:050D:3201.0003: unknown main item tag 0x0 [ 33.743595][ T10] belkin 0003:050D:3201.0003: unknown main item tag 0x0 [ 33.751499][ T10] belkin 0003:050D:3201.0003: unknown main item tag 0x0 [ 33.756875][ T329] usb 1-1: device descriptor read/8, error -71 [ 33.759164][ T10] belkin 0003:050D:3201.0003: unknown main item tag 0x0 [ 33.774870][ T10] belkin 0003:050D:3201.0003: unknown main item tag 0x0 [ 33.783797][ T10] belkin 0003:050D:3201.0003: hiddev96,hidraw0: USB HID v0.00 Device [HID 050d:3201] on usb-dummy_hcd.3-1/input0 [ 33.843805][ T62] itetech 0003:06CB:73F5.0004: hidraw1: USB HID v0.02 Device [HID 06cb:73f5] on usb-dummy_hcd.1-1/input0 [ 33.865608][ T329] usb usb1-port1: unable to enumerate USB device [ 33.924913][ T685] can0: slcan on ptm0. [ 33.948352][ T685] can0 (unregistered): slcan off ptm0. [ 33.956800][ T329] usb 4-1: USB disconnect, device number 3 [ 34.498656][ T736] overlayfs: failed to resolve './file0': -2 [ 34.791160][ T771] FAULT_INJECTION: forcing a failure. [ 34.791160][ T771] name failslab, interval 1, probability 0, space 0, times 1 [ 34.795750][ T774] rust_binder: Write failure EINVAL in pid:120 [ 34.815894][ T771] CPU: 0 UID: 0 PID: 771 Comm: syz.0.134 Not tainted 6.12.38-syzkaller-g3f3a5c5e782d #0 c9247809a66a5ebb3467d1c2e99b1dedbd707993 [ 34.815929][ T771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 34.815954][ T771] Call Trace: [ 34.815964][ T771] [ 34.815971][ T771] __dump_stack+0x21/0x30 [ 34.816005][ T771] dump_stack_lvl+0x10c/0x190 [ 34.816030][ T771] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.816063][ T771] ? avc_has_perm+0x144/0x220 [ 34.816089][ T771] ? __cfi_avc_has_perm+0x10/0x10 [ 34.816117][ T771] dump_stack+0x19/0x20 [ 34.816156][ T771] should_fail_ex+0x3d9/0x530 [ 34.816187][ T771] should_failslab+0xac/0x100 [ 34.816209][ T771] __kmalloc_cache_noprof+0x41/0x3c0 [ 34.816246][ T771] ? vhost_task_create+0x101/0x350 [ 34.816266][ T771] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 34.816291][ T771] vhost_task_create+0x101/0x350 [ 34.816309][ T771] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 34.816339][ T771] ? __cfi_vhost_task_create+0x10/0x10 [ 34.816359][ T771] ? __cfi_vhost_task_fn+0x10/0x10 [ 34.816379][ T771] ? __kasan_check_write+0x18/0x20 [ 34.816406][ T771] ? mutex_lock+0x92/0x1c0 [ 34.816442][ T771] ? __cfi_mutex_lock+0x10/0x10 [ 34.816478][ T771] ? kernel_text_address+0xa9/0xe0 [ 34.816504][ T771] kvm_mmu_post_init_vm+0x1a6/0x310 [ 34.816534][ T771] kvm_arch_vcpu_ioctl_run+0xd7/0x1aa0 [ 34.816559][ T771] ? _parse_integer_limit+0x195/0x1e0 [ 34.816595][ T771] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 34.816622][ T771] ? kstrtoull+0x13b/0x1e0 [ 34.816647][ T771] ? kstrtouint+0x78/0xf0 [ 34.816680][ T771] ? ioctl_has_perm+0x1aa/0x4d0 [ 34.816701][ T771] ? __asan_memcpy+0x5a/0x80 [ 34.816731][ T771] ? ioctl_has_perm+0x3e0/0x4d0 [ 34.816754][ T771] ? has_cap_mac_admin+0xd0/0xd0 [ 34.816782][ T771] ? __kasan_check_write+0x18/0x20 [ 34.816816][ T771] ? mutex_lock_killable+0x92/0x1c0 [ 34.816843][ T771] ? __cfi_mutex_lock_killable+0x10/0x10 [ 34.816880][ T771] ? proc_fail_nth_write+0x17e/0x210 [ 34.817018][ T771] kvm_vcpu_ioctl+0x96f/0xee0 [ 34.817049][ T771] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 34.817075][ T771] ? __cfi_vfs_write+0x10/0x10 [ 34.817095][ T771] ? __kasan_check_write+0x18/0x20 [ 34.817122][ T771] ? mutex_unlock+0x8b/0x240 [ 34.817148][ T771] ? __cfi_mutex_unlock+0x10/0x10 [ 34.817182][ T771] ? __fget_files+0x2c5/0x340 [ 34.817205][ T771] ? __fget_files+0x2c5/0x340 [ 34.817222][ T771] ? bpf_lsm_file_ioctl+0xd/0x20 [ 34.817247][ T771] ? security_file_ioctl+0x34/0xd0 [ 34.817269][ T771] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 34.817300][ T771] __se_sys_ioctl+0x135/0x1b0 [ 34.817321][ T771] __x64_sys_ioctl+0x7f/0xa0 [ 34.817353][ T771] x64_sys_call+0x1878/0x2ee0 [ 34.817383][ T771] do_syscall_64+0x58/0xf0 [ 34.817406][ T771] ? clear_bhb_loop+0x50/0xa0 [ 34.817434][ T771] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.817464][ T771] RIP: 0033:0x7f30e918ebe9 [ 34.817486][ T771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.817502][ T771] RSP: 002b:00007f30e9f11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 34.817534][ T771] RAX: ffffffffffffffda RBX: 00007f30e93b5fa0 RCX: 00007f30e918ebe9 [ 34.817550][ T771] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 34.817562][ T771] RBP: 00007f30e9f11090 R08: 0000000000000000 R09: 0000000000000000 [ 34.817579][ T771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.817592][ T771] R13: 00007f30e93b6038 R14: 00007f30e93b5fa0 R15: 00007ffe8c0f2d78 [ 34.817607][ T771] [ 34.890391][ T777] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 35.475652][ T791] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 35.475691][ T791] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 35.487502][ T791] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:135 [ 35.559804][ T31] rust_binder: 790: removing orphan mapping 0:24 [ 35.613388][ T806] FAULT_INJECTION: forcing a failure. [ 35.613388][ T806] name failslab, interval 1, probability 0, space 0, times 0 [ 35.616667][ T808] input: syz0 as /devices/virtual/input/input10 [ 35.634262][ T806] CPU: 0 UID: 0 PID: 806 Comm: syz.0.146 Not tainted 6.12.38-syzkaller-g3f3a5c5e782d #0 c9247809a66a5ebb3467d1c2e99b1dedbd707993 [ 35.634294][ T806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 35.634305][ T806] Call Trace: [ 35.634311][ T806] [ 35.634318][ T806] __dump_stack+0x21/0x30 [ 35.634348][ T806] dump_stack_lvl+0x10c/0x190 [ 35.634371][ T806] ? __cfi_dump_stack_lvl+0x10/0x10 [ 35.634397][ T806] dump_stack+0x19/0x20 [ 35.634419][ T806] should_fail_ex+0x3d9/0x530 [ 35.634447][ T806] should_failslab+0xac/0x100 [ 35.634466][ T806] kmem_cache_alloc_node_noprof+0x45/0x3b0 [ 35.634493][ T806] ? dup_task_struct+0xbc/0xc50 [ 35.634514][ T806] ? kasan_save_track+0x4f/0x80 [ 35.634531][ T806] dup_task_struct+0xbc/0xc50 [ 35.634551][ T806] ? __kasan_check_write+0x18/0x20 [ 35.634576][ T806] ? _raw_spin_lock_irq+0x8d/0x120 [ 35.634599][ T806] ? copy_process+0x3220/0x3220 [ 35.634619][ T806] ? __kasan_check_write+0x18/0x20 [ 35.634645][ T806] copy_process+0x538/0x3220 [ 35.634668][ T806] ? __cfi_copy_process+0x10/0x10 [ 35.634689][ T806] ? __kasan_check_write+0x18/0x20 [ 35.634713][ T806] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 35.634734][ T806] vhost_task_create+0x1d6/0x350 [ 35.634754][ T806] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 35.634774][ T806] ? __cfi_vhost_task_create+0x10/0x10 [ 35.634792][ T806] ? __cfi_vhost_task_fn+0x10/0x10 [ 35.634809][ T806] ? __kasan_check_write+0x18/0x20 [ 35.634833][ T806] ? mutex_lock+0x92/0x1c0 [ 35.634858][ T806] ? __cfi_mutex_lock+0x10/0x10 [ 35.634883][ T806] ? kernel_text_address+0xa9/0xe0 [ 35.634906][ T806] kvm_mmu_post_init_vm+0x1a6/0x310 [ 35.634932][ T806] kvm_arch_vcpu_ioctl_run+0xd7/0x1aa0 [ 35.634955][ T806] ? _parse_integer_limit+0x195/0x1e0 [ 35.634981][ T806] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 35.635003][ T806] ? kstrtoull+0x13b/0x1e0 [ 35.635027][ T806] ? kstrtouint+0x78/0xf0 [ 35.635051][ T806] ? ioctl_has_perm+0x1aa/0x4d0 [ 35.635072][ T806] ? __asan_memcpy+0x5a/0x80 [ 35.635097][ T806] ? ioctl_has_perm+0x3e0/0x4d0 [ 35.635129][ T806] ? has_cap_mac_admin+0xd0/0xd0 [ 35.635150][ T806] ? __kasan_check_write+0x18/0x20 [ 35.635175][ T806] ? mutex_lock_killable+0x92/0x1c0 [ 35.635201][ T806] ? __cfi_mutex_lock_killable+0x10/0x10 [ 35.635227][ T806] ? proc_fail_nth_write+0x17e/0x210 [ 35.635251][ T806] kvm_vcpu_ioctl+0x96f/0xee0 [ 35.635284][ T806] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 35.635311][ T806] ? __cfi_vfs_write+0x10/0x10 [ 35.635327][ T806] ? __kasan_check_write+0x18/0x20 [ 35.635351][ T806] ? mutex_unlock+0x8b/0x240 [ 35.635376][ T806] ? __cfi_mutex_unlock+0x10/0x10 [ 35.635401][ T806] ? __fget_files+0x2c5/0x340 [ 35.635422][ T806] ? __fget_files+0x2c5/0x340 [ 35.635440][ T806] ? bpf_lsm_file_ioctl+0xd/0x20 [ 35.635464][ T806] ? security_file_ioctl+0x34/0xd0 [ 35.635484][ T806] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 35.635509][ T806] __se_sys_ioctl+0x135/0x1b0 [ 35.635529][ T806] __x64_sys_ioctl+0x7f/0xa0 [ 35.635548][ T806] x64_sys_call+0x1878/0x2ee0 [ 35.635574][ T806] do_syscall_64+0x58/0xf0 [ 35.635595][ T806] ? clear_bhb_loop+0x50/0xa0 [ 35.635613][ T806] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.635639][ T806] RIP: 0033:0x7f30e918ebe9 [ 35.635655][ T806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.635670][ T806] RSP: 002b:00007f30e9f11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 35.635692][ T806] RAX: ffffffffffffffda RBX: 00007f30e93b5fa0 RCX: 00007f30e918ebe9 [ 35.635706][ T806] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 35.635719][ T806] RBP: 00007f30e9f11090 R08: 0000000000000000 R09: 0000000000000000 [ 35.635731][ T806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.635743][ T806] R13: 00007f30e93b6038 R14: 00007f30e93b5fa0 R15: 00007ffe8c0f2d78 [ 35.635759][ T806] [ 35.694791][ T520] rust_binder: 775: removing orphan mapping 0:1048 [ 35.995522][ T31] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 36.114050][ T10] usb 2-1: USB disconnect, device number 3 [ 36.145953][ T817] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 36.336660][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 36.357456][ T31] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 36.368416][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.387697][ T31] usb 3-1: Product: syz [ 36.396673][ T31] usb 3-1: Manufacturer: syz [ 36.413706][ T31] usb 3-1: SerialNumber: syz [ 36.424702][ T31] usb 3-1: config 0 descriptor?? [ 36.645571][ T329] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 36.699529][ T31] cdc_ether 3-1:0.0: skipping garbage [ 36.705990][ T31] usb 3-1: bad CDC descriptors [ 36.713469][ T31] usb 3-1: unsupported MDLM descriptors [ 36.721924][ T31] usb 3-1: USB disconnect, device number 5 [ 36.755662][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 36.795669][ T329] usb 4-1: Using ep0 maxpacket: 32 [ 36.803394][ T329] usb 4-1: unable to get BOS descriptor or descriptor too short [ 36.813685][ T329] usb 4-1: config 1 interface 0 altsetting 106 bulk endpoint 0x1 has invalid maxpacket 64 [ 36.825264][ T329] usb 4-1: config 1 interface 0 altsetting 106 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 36.840371][ T329] usb 4-1: config 1 interface 0 has no altsetting 0 [ 36.850160][ T329] usb 4-1: string descriptor 0 read error: -22 [ 36.863329][ T329] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 36.863446][ T848] FAULT_INJECTION: forcing a failure. [ 36.863446][ T848] name failslab, interval 1, probability 0, space 0, times 0 [ 36.873419][ T329] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.889189][ T848] CPU: 0 UID: 0 PID: 848 Comm: syz.1.160 Not tainted 6.12.38-syzkaller-g3f3a5c5e782d #0 c9247809a66a5ebb3467d1c2e99b1dedbd707993 [ 36.889232][ T848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 36.889243][ T848] Call Trace: [ 36.889250][ T848] [ 36.889257][ T848] __dump_stack+0x21/0x30 [ 36.889287][ T848] dump_stack_lvl+0x10c/0x190 [ 36.889310][ T848] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.889335][ T848] dump_stack+0x19/0x20 [ 36.889358][ T848] should_fail_ex+0x3d9/0x530 [ 36.889385][ T848] should_failslab+0xac/0x100 [ 36.889405][ T848] __kmalloc_cache_node_noprof+0x46/0x3d0 [ 36.889433][ T848] ? __get_vm_area_node+0x154/0x3a0 [ 36.889455][ T848] ? kasan_save_track+0x3e/0x80 [ 36.889473][ T848] __get_vm_area_node+0x154/0x3a0 [ 36.889496][ T848] __vmalloc_node_range_noprof+0x33c/0x1420 [ 36.889520][ T848] ? copy_process+0x538/0x3220 [ 36.889544][ T848] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 36.889569][ T848] ? kasan_save_alloc_info+0x40/0x50 [ 36.889593][ T848] ? arch_dup_task_struct+0x5b/0xe0 [ 36.889618][ T848] ? __asan_memcpy+0x5a/0x80 [ 36.889643][ T848] dup_task_struct+0x5bd/0xc50 [ 36.889664][ T848] ? copy_process+0x538/0x3220 [ 36.889684][ T848] ? _raw_spin_lock_irq+0x8d/0x120 [ 36.889706][ T848] ? copy_process+0x3220/0x3220 [ 36.889726][ T848] ? __kasan_check_write+0x18/0x20 [ 36.889751][ T848] copy_process+0x538/0x3220 [ 36.889774][ T848] ? __cfi_copy_process+0x10/0x10 [ 36.889795][ T848] ? __kasan_check_write+0x18/0x20 [ 36.889819][ T848] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 36.889840][ T848] vhost_task_create+0x1d6/0x350 [ 36.889858][ T848] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 36.889879][ T848] ? __cfi_vhost_task_create+0x10/0x10 [ 36.889897][ T848] ? __cfi_vhost_task_fn+0x10/0x10 [ 36.889914][ T848] ? __kasan_check_write+0x18/0x20 [ 36.889938][ T848] ? mutex_lock+0x92/0x1c0 [ 36.890047][ T848] ? __cfi_mutex_lock+0x10/0x10 [ 36.890074][ T848] ? kernel_text_address+0xa9/0xe0 [ 36.890098][ T848] kvm_mmu_post_init_vm+0x1a6/0x310 [ 36.890125][ T848] kvm_arch_vcpu_ioctl_run+0xd7/0x1aa0 [ 36.890149][ T848] ? _parse_integer_limit+0x195/0x1e0 [ 36.890176][ T848] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 36.890200][ T848] ? kstrtoull+0x13b/0x1e0 [ 36.890224][ T848] ? kstrtouint+0x78/0xf0 [ 36.890248][ T848] ? ioctl_has_perm+0x1aa/0x4d0 [ 36.890269][ T848] ? __asan_memcpy+0x5a/0x80 [ 36.890295][ T848] ? ioctl_has_perm+0x3e0/0x4d0 [ 36.890316][ T848] ? has_cap_mac_admin+0xd0/0xd0 [ 36.890338][ T848] ? __kasan_check_write+0x18/0x20 [ 36.890365][ T848] ? mutex_lock_killable+0x92/0x1c0 [ 36.890393][ T848] ? __cfi_mutex_lock_killable+0x10/0x10 [ 36.890421][ T848] ? proc_fail_nth_write+0x17e/0x210 [ 36.890448][ T848] kvm_vcpu_ioctl+0x96f/0xee0 [ 36.890478][ T848] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 36.890508][ T848] ? __cfi_vfs_write+0x10/0x10 [ 36.890527][ T848] ? __kasan_check_write+0x18/0x20 [ 36.890554][ T848] ? mutex_unlock+0x8b/0x240 [ 36.890581][ T848] ? __cfi_mutex_unlock+0x10/0x10 [ 36.890608][ T848] ? __fget_files+0x2c5/0x340 [ 36.890629][ T848] ? __fget_files+0x2c5/0x340 [ 36.890649][ T848] ? bpf_lsm_file_ioctl+0xd/0x20 [ 36.890676][ T848] ? security_file_ioctl+0x34/0xd0 [ 36.890699][ T848] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 36.890727][ T848] __se_sys_ioctl+0x135/0x1b0 [ 36.890749][ T848] __x64_sys_ioctl+0x7f/0xa0 [ 36.890771][ T848] x64_sys_call+0x1878/0x2ee0 [ 36.890798][ T848] do_syscall_64+0x58/0xf0 [ 36.890820][ T848] ? clear_bhb_loop+0x50/0xa0 [ 36.890861][ T848] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.890890][ T848] RIP: 0033:0x7f8170d8ebe9 [ 36.890908][ T848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.890925][ T848] RSP: 002b:00007f8171b79038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 36.890961][ T848] RAX: ffffffffffffffda RBX: 00007f8170fb5fa0 RCX: 00007f8170d8ebe9 [ 36.890976][ T848] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 36.890988][ T848] RBP: 00007f8171b79090 R08: 0000000000000000 R09: 0000000000000000 [ 36.891000][ T848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.891012][ T848] R13: 00007f8170fb6038 R14: 00007f8170fb5fa0 R15: 00007ffdb2da8588 [ 36.891029][ T848] [ 36.891039][ T848] syz.1.160: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 36.915904][ T838] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 36.924085][ T848] ,cpuset= [ 36.932996][ T838] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 36.935332][ T848] syz1 [ 37.154438][ T329] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 106 proto 1 vid 0x0525 pid 0xA4A8 [ 37.155836][ T848] ,mems_allowed=0 [ 37.225563][ T329] usb 4-1: USB disconnect, device number 4 [ 37.231075][ T848] [ 37.238369][ T329] usblp0: removed [ 37.242115][ T848] CPU: 0 UID: 0 PID: 848 Comm: syz.1.160 Not tainted 6.12.38-syzkaller-g3f3a5c5e782d #0 c9247809a66a5ebb3467d1c2e99b1dedbd707993 [ 37.242147][ T848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 37.242158][ T848] Call Trace: [ 37.242164][ T848] [ 37.242172][ T848] __dump_stack+0x21/0x30 [ 37.242207][ T848] dump_stack_lvl+0x10c/0x190 [ 37.242231][ T848] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.242256][ T848] dump_stack+0x19/0x20 [ 37.242278][ T848] warn_alloc+0x1bc/0x2a0 [ 37.242302][ T848] ? __cfi_warn_alloc+0x10/0x10 [ 37.242324][ T848] ? kasan_save_track+0x3e/0x80 [ 37.242343][ T848] ? __get_vm_area_node+0x392/0x3a0 [ 37.242367][ T848] __vmalloc_node_range_noprof+0x361/0x1420 [ 37.242394][ T848] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 37.242419][ T848] ? kasan_save_alloc_info+0x40/0x50 [ 37.242442][ T848] ? arch_dup_task_struct+0x5b/0xe0 [ 37.242468][ T848] ? __asan_memcpy+0x5a/0x80 [ 37.242493][ T848] dup_task_struct+0x5bd/0xc50 [ 37.242514][ T848] ? copy_process+0x538/0x3220 [ 37.242534][ T848] ? _raw_spin_lock_irq+0x8d/0x120 [ 37.242556][ T848] ? copy_process+0x3220/0x3220 [ 37.242576][ T848] ? __kasan_check_write+0x18/0x20 [ 37.242602][ T848] copy_process+0x538/0x3220 [ 37.242625][ T848] ? __cfi_copy_process+0x10/0x10 [ 37.242646][ T848] ? __kasan_check_write+0x18/0x20 [ 37.242671][ T848] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 37.242692][ T848] vhost_task_create+0x1d6/0x350 [ 37.242710][ T848] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 37.242731][ T848] ? __cfi_vhost_task_create+0x10/0x10 [ 37.242750][ T848] ? __cfi_vhost_task_fn+0x10/0x10 [ 37.242767][ T848] ? __kasan_check_write+0x18/0x20 [ 37.242792][ T848] ? mutex_lock+0x92/0x1c0 [ 37.242817][ T848] ? __cfi_mutex_lock+0x10/0x10 [ 37.242843][ T848] ? kernel_text_address+0xa9/0xe0 [ 37.242866][ T848] kvm_mmu_post_init_vm+0x1a6/0x310 [ 37.242891][ T848] kvm_arch_vcpu_ioctl_run+0xd7/0x1aa0 [ 37.242915][ T848] ? _parse_integer_limit+0x195/0x1e0 [ 37.242940][ T848] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 37.242972][ T848] ? kstrtoull+0x13b/0x1e0 [ 37.242995][ T848] ? kstrtouint+0x78/0xf0 [ 37.243019][ T848] ? ioctl_has_perm+0x1aa/0x4d0 [ 37.243040][ T848] ? __asan_memcpy+0x5a/0x80 [ 37.243065][ T848] ? ioctl_has_perm+0x3e0/0x4d0 [ 37.243085][ T848] ? has_cap_mac_admin+0xd0/0xd0 [ 37.243107][ T848] ? __kasan_check_write+0x18/0x20 [ 37.243131][ T848] ? mutex_lock_killable+0x92/0x1c0 [ 37.243156][ T848] ? __cfi_mutex_lock_killable+0x10/0x10 [ 37.243182][ T848] ? proc_fail_nth_write+0x17e/0x210 [ 37.243207][ T848] kvm_vcpu_ioctl+0x96f/0xee0 [ 37.243234][ T848] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 37.243260][ T848] ? __cfi_vfs_write+0x10/0x10 [ 37.243278][ T848] ? __kasan_check_write+0x18/0x20 [ 37.243302][ T848] ? mutex_unlock+0x8b/0x240 [ 37.243326][ T848] ? __cfi_mutex_unlock+0x10/0x10 [ 37.243351][ T848] ? __fget_files+0x2c5/0x340 [ 37.243372][ T848] ? __fget_files+0x2c5/0x340 [ 37.243391][ T848] ? bpf_lsm_file_ioctl+0xd/0x20 [ 37.243415][ T848] ? security_file_ioctl+0x34/0xd0 [ 37.243435][ T848] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 37.243460][ T848] __se_sys_ioctl+0x135/0x1b0 [ 37.243480][ T848] __x64_sys_ioctl+0x7f/0xa0 [ 37.243500][ T848] x64_sys_call+0x1878/0x2ee0 [ 37.243525][ T848] do_syscall_64+0x58/0xf0 [ 37.243547][ T848] ? clear_bhb_loop+0x50/0xa0 [ 37.243565][ T848] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.243591][ T848] RIP: 0033:0x7f8170d8ebe9 [ 37.243608][ T848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.243623][ T848] RSP: 002b:00007f8171b79038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 37.243646][ T848] RAX: ffffffffffffffda RBX: 00007f8170fb5fa0 RCX: 00007f8170d8ebe9 [ 37.243660][ T848] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 37.243672][ T848] RBP: 00007f8171b79090 R08: 0000000000000000 R09: 0000000000000000 [ 37.243684][ T848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.243695][ T848] R13: 00007f8170fb6038 R14: 00007f8170fb5fa0 R15: 00007ffdb2da8588 [ 37.243711][ T848] [ 37.243762][ T848] Mem-Info: [ 37.371208][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 37.371226][ T36] audit: type=1400 audit(1755352094.780:282): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 37.381547][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.381595][ T10] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 37.381620][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.383616][ T848] active_anon:6000 inactive_anon:0 isolated_anon:0 [ 37.383616][ T848] active_file:17911 inactive_file:2182 isolated_file:0 [ 37.383616][ T848] unevictable:0 dirty:414 writeback:0 [ 37.383616][ T848] slab_reclaimable:5360 slab_unreclaimable:70920 [ 37.383616][ T848] mapped:24351 shmem:163 pagetables:798 [ 37.383616][ T848] sec_pagetables:0 bounce:0 [ 37.383616][ T848] kernel_misc_reclaimable:0 [ 37.383616][ T848] free:1528362 free_pcp:2649 free_cma:0 [ 38.085344][ T848] Node 0 active_anon:23960kB inactive_anon:0kB active_file:71772kB inactive_file:8728kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97372kB dirty:1656kB writeback:0kB shmem:652kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5376kB pagetables:3280kB sec_pagetables:24kB all_unreclaimable? no [ 38.085849][ T10] usb 1-1: config 0 descriptor?? [ 38.128643][ T848] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965968kB mlocked:0kB bounce:0kB free_pcp:5756kB local_pcp:5756kB free_cma:0kB [ 38.165646][ T848] lowmem_reserve[]: 0 3921 3921 [ 38.170773][ T848] Normal free:3155180kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23960kB inactive_anon:0kB active_file:71772kB inactive_file:8728kB unevictable:0kB writepending:1656kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:832kB local_pcp:376kB free_cma:0kB [ 38.211605][ T848] lowmem_reserve[]: 0 0 0 [ 38.216634][ T848] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 38.234325][ T848] Normal: 297*4kB (UME) 545*8kB (UME) 460*16kB (UME) 222*32kB (UME) 529*64kB (UME) 13*128kB (UME) 16*256kB (M) 12*512kB (M) 9*1024kB (M) 8*2048kB (ME) 748*4096kB (M) = 3155180kB [ 38.254803][ T848] 20286 total pagecache pages [ 38.259967][ T848] 0 pages in swap cache [ 38.264559][ T848] Free swap = 124996kB [ 38.269856][ T848] Total swap = 124996kB [ 38.274363][ T848] 2097051 pages RAM [ 38.279440][ T848] 0 pages HighMem/MovableOnly [ 38.287711][ T848] 351529 pages reserved [ 38.292571][ T848] 0 pages cma reserved [ 38.307490][ T848] Memory allocations: [ 38.319638][ T848] 0 B 0 init/main.c:1370 func:do_initcalls [ 38.327893][ T848] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 38.344311][ T848] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 38.353533][ T848] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 38.363154][ T848] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 38.374832][ T848] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 38.384974][ T848] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 38.405202][ T848] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 38.414507][ T848] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 38.426888][ T848] 0 B 0 init/initramfs.c:101 func:find_link [ 38.519590][ T36] audit: type=1400 audit(1755352095.930:283): avc: denied { ioctl } for pid=873 comm="syz.1.168" path="socket:[7775]" dev="sockfs" ino=7775 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.571314][ T878] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 38.571342][ T878] rust_binder: Error while translating object. [ 38.585849][ T878] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 38.595795][ T878] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:112 [ 38.607816][ T10] itetech 0003:06CB:73F5.0005: hidraw0: USB HID v0.02 Device [HID 06cb:73f5] on usb-dummy_hcd.0-1/input0 [ 38.858870][ T894] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 38.870486][ T36] audit: type=1400 audit(1755352096.280:284): avc: denied { relabelto } for pid=893 comm="syz.2.175" name="file0" dev="tmpfs" ino=360 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 38.904364][ T36] audit: type=1400 audit(1755352096.280:285): avc: denied { associate } for pid=893 comm="syz.2.175" name="file0" dev="tmpfs" ino=360 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 38.936118][ T36] audit: type=1400 audit(1755352096.310:286): avc: denied { unmount } for pid=893 comm="syz.2.175" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.959976][ T36] audit: type=1400 audit(1755352096.370:287): avc: denied { unlink } for pid=290 comm="syz-executor" name="file0" dev="tmpfs" ino=360 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 38.991452][ T36] audit: type=1400 audit(1755352096.370:288): avc: denied { setopt } for pid=897 comm="syz.2.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.017500][ T36] audit: type=1400 audit(1755352096.400:289): avc: denied { name_bind } for pid=902 comm="syz.2.178" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 39.043205][ T36] audit: type=1400 audit(1755352096.420:290): avc: denied { setopt } for pid=906 comm="syz.2.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.066015][ T36] audit: type=1400 audit(1755352096.420:291): avc: denied { bind } for pid=906 comm="syz.2.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.415221][ T936] rust_binder: Write failure EINVAL in pid:126 [ 39.415256][ T936] rust_binder: Write failure EINVAL in pid:126 [ 39.515537][ T947] rust_binder: Error while translating object. [ 39.523880][ T947] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 39.539209][ T948] tipc: Started in network mode [ 39.545636][ T947] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:159 [ 39.553367][ T948] tipc: Node identity 0000000000005f000000000000000001, cluster identity 4711 [ 39.576177][ T948] tipc: Enabling of bearer rejected, failed to enable media [ 39.706247][ T965] tipc: Enabling of bearer rejected, media not registered [ 39.767262][ T967] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 39.777422][ T967] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 39.787990][ T967] overlayfs: missing 'lowerdir' [ 39.844894][ T329] usb 1-1: USB disconnect, device number 8 [ 39.845600][ T336] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 39.937981][ T976] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1176, size: 18446744073709551611) [ 39.938001][ T976] rust_binder: Error while translating object. [ 39.951308][ T976] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 39.958691][ T976] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:171 [ 39.980515][ T978] rust_binder: Write failure EFAULT in pid:173 [ 40.025602][ T336] usb 2-1: Using ep0 maxpacket: 16 [ 40.040719][ T336] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.052507][ T336] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 40.063660][ T336] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 40.073235][ T336] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.081636][ T336] usb 2-1: Product: syz [ 40.085950][ T336] usb 2-1: Manufacturer: syz [ 40.091092][ T336] usb 2-1: SerialNumber: syz [ 40.232091][ T984] overlayfs: failed to clone upperpath [ 40.251188][ T986] fuse: Bad value for 'fd' [ 40.291305][ T992] fuse: Bad value for 'fd' [ 40.785564][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 40.915336][ T1013] netlink: 32 bytes leftover after parsing attributes in process `syz.3.212'. [ 40.925743][ T1013] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:179 [ 40.936768][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.958919][ T10] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 40.968266][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.977923][ T10] usb 1-1: config 0 descriptor?? [ 41.387323][ T10] itetech 0003:06CB:73F5.0006: hidraw0: USB HID v0.02 Device [HID 06cb:73f5] on usb-dummy_hcd.0-1/input0 [ 41.762292][ T1031] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 41.820360][ T1041] overlayfs: failed to clone upperpath [ 41.871688][ T1047] overlayfs: failed to resolve '/./file0': -2 [ 42.058857][ T1056] rust_binder: Write failure EFAULT in pid:198 [ 42.605671][ T336] usb 2-1: 0:2 : does not exist [ 42.620758][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 42.620779][ T36] audit: type=1400 audit(1755352100.030:312): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 42.652903][ T336] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 42.666313][ T336] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 42.677219][ T336] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 42.687658][ T336] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 42.695629][ T36] audit: type=1400 audit(1755352100.100:313): avc: denied { ioctl } for pid=1065 comm="syz.1.230" path="socket:[10534]" dev="sockfs" ino=10534 ioctlcmd=0x9436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 42.724057][ T36] audit: type=1400 audit(1755352100.100:314): avc: denied { read } for pid=1065 comm="syz.1.230" name="usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 42.754023][ T336] usb 2-1: USB disconnect, device number 4 [ 42.761418][ T36] audit: type=1400 audit(1755352100.100:315): avc: denied { open } for pid=1065 comm="syz.1.230" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 42.790118][ T36] audit: type=1400 audit(1755352100.120:316): avc: denied { ioctl } for pid=1065 comm="syz.1.230" path="/dev/usbmon0" dev="devtmpfs" ino=90 ioctlcmd=0x6687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 42.817429][ T1069] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:140 [ 43.046859][ T1071] 9pnet: Could not find request transport: xen [ 43.064150][ T1071] netlink: 80 bytes leftover after parsing attributes in process `syz.3.232'. [ 43.187055][ T36] audit: type=1400 audit(1755352100.600:317): avc: denied { bind } for pid=1070 comm="syz.3.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 43.220665][ T1074] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 43.220698][ T1074] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:207 [ 43.231076][ T1076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.259648][ T36] audit: type=1400 audit(1755352100.670:318): avc: denied { map } for pid=1078 comm="syz.3.234" path="socket:[9504]" dev="sockfs" ino=9504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 43.293355][ T36] audit: type=1400 audit(1755352100.670:319): avc: denied { read } for pid=1078 comm="syz.3.234" path="socket:[9504]" dev="sockfs" ino=9504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 43.319725][ T36] audit: type=1400 audit(1755352100.680:320): avc: denied { accept } for pid=1078 comm="syz.3.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 43.664013][ T629] usb 1-1: USB disconnect, device number 9 [ 43.675904][ T1087] rust_binder: 1084 RLIMIT_NICE not set [ 43.693379][ T1090] binder: Bad value for 'max' [ 43.705619][ T1090] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 43.783426][ T1093] rust_binder: 1092 RLIMIT_NICE not set [ 43.827769][ T1098] netlink: 44 bytes leftover after parsing attributes in process `syz.0.241'. [ 43.844259][ T36] audit: type=1400 audit(1755352101.250:321): avc: denied { search } for pid=1097 comm="syz.0.241" name="/" dev="configfs" ino=1523 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 44.130782][ T1109] rust_binder: Error while translating object. [ 44.130867][ T1109] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 44.138381][ T1109] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:117 [ 44.435541][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 44.519441][ T1123] netlink: 'syz.3.251': attribute type 2 has an invalid length. [ 44.534480][ T1123] x_tables: unsorted underflow at hook 2 [ 44.541783][ T1123] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47190 sclass=netlink_route_socket pid=1123 comm=syz.3.251 [ 44.556935][ T1123] netlink: 'syz.3.251': attribute type 2 has an invalid length. [ 44.608392][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.624213][ T1140] netlink: 20 bytes leftover after parsing attributes in process `syz.3.255'. [ 44.628834][ T10] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 44.643720][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.655533][ T10] usb 1-1: config 0 descriptor?? [ 44.683752][ T1143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.694705][ T1143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.766999][ T1139] rust_binder: Error while translating object. [ 44.767034][ T1139] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 44.774381][ T1139] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:157 [ 44.861189][ T629] rust_binder: 1138: removing orphan mapping 0:24 [ 44.883103][ T1147] fuse: Bad value for 'fd' [ 44.891909][ T1149] overlay: Unknown parameter '/' [ 44.915643][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 45.007394][ T1156] netlink: 176 bytes leftover after parsing attributes in process `syz.2.260'. [ 45.066622][ T10] itetech 0003:06CB:73F5.0007: hidraw0: USB HID v0.02 Device [HID 06cb:73f5] on usb-dummy_hcd.0-1/input0 [ 45.078577][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 45.086889][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.099377][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.110579][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 45.120994][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.132244][ T9] usb 4-1: config 0 descriptor?? [ 45.138754][ T9] hub 4-1:0.0: USB hub found [ 45.346767][ T9] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 45.359297][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 45.366531][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 45.396137][ T9] usb 4-1: USB disconnect, device number 5 [ 45.532749][ T1162] rust_binder: Write failure EFAULT in pid:164 [ 45.752788][ T1170] cgroup: Name too long [ 45.855864][ T1183] fuse: Unknown parameter ' ' [ 46.510529][ T1222] overlayfs: failed to clone lowerpath [ 46.595574][ T629] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 46.727253][ T1230] netlink: 40 bytes leftover after parsing attributes in process `syz.3.287'. [ 46.745536][ T629] usb 2-1: device descriptor read/64, error -71 [ 46.991454][ T1236] overlayfs: missing 'lowerdir' [ 46.997047][ T629] usb 2-1: device descriptor read/64, error -71 [ 47.114726][ T1253] overlay: ./file1 is not a directory [ 47.205141][ T9] usb 1-1: USB disconnect, device number 10 [ 47.235542][ T629] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 47.311569][ T1275] rust_binder: Failed to allocate buffer. len:1184, is_oneway:false [ 47.365538][ T629] usb 2-1: device descriptor read/64, error -71 [ 47.615557][ T629] usb 2-1: device descriptor read/64, error -71 [ 47.725726][ T629] usb usb2-port1: attempt power cycle [ 47.885547][ T62] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 47.912162][ T1292] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 48.025549][ T62] usb 4-1: device descriptor read/64, error -71 [ 48.072382][ T629] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 48.116008][ T629] usb 2-1: device descriptor read/8, error -71 [ 48.246533][ T629] usb 2-1: device descriptor read/8, error -71 [ 48.266533][ T62] usb 4-1: device descriptor read/64, error -71 [ 48.485554][ T629] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 48.505660][ T62] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 48.515053][ T629] usb 2-1: device descriptor read/8, error -71 [ 48.585574][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 48.645816][ T62] usb 4-1: device descriptor read/64, error -71 [ 48.653569][ T629] usb 2-1: device descriptor read/8, error -71 [ 48.746891][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.759102][ T9] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 48.765622][ T629] usb usb2-port1: unable to enumerate USB device [ 48.768640][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.784489][ T9] usb 1-1: config 0 descriptor?? [ 48.887021][ T62] usb 4-1: device descriptor read/64, error -71 [ 48.995836][ T62] usb usb4-port1: attempt power cycle [ 49.194383][ T9] itetech 0003:06CB:73F5.0008: hidraw0: USB HID v0.02 Device [HID 06cb:73f5] on usb-dummy_hcd.0-1/input0 [ 49.335604][ T62] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 49.367710][ T62] usb 4-1: device descriptor read/8, error -71 [ 49.491015][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 49.491108][ T36] audit: type=1400 audit(1755352106.900:333): avc: denied { view } for pid=1347 comm="syz.2.331" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 49.520156][ T62] usb 4-1: device descriptor read/8, error -71 [ 49.765603][ T62] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 49.786876][ T62] usb 4-1: device descriptor read/8, error -71 [ 49.916995][ T62] usb 4-1: device descriptor read/8, error -71 [ 50.025737][ T62] usb usb4-port1: unable to enumerate USB device [ 50.563113][ T1370] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 50.574382][ T1370] overlayfs: missing 'lowerdir' [ 50.589088][ T1372] netlink: 57 bytes leftover after parsing attributes in process `syz.2.340'. [ 50.663241][ T1383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.345'. [ 50.903817][ T1397] netlink: 'syz.2.350': attribute type 1 has an invalid length. [ 50.963147][ T36] audit: type=1400 audit(1755352108.370:334): avc: denied { setattr } for pid=1404 comm="syz.1.353" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 51.174028][ T1405] rust_binder: Error while translating object. [ 51.174080][ T1405] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 51.180482][ T1405] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:189 [ 51.346271][ T62] usb 1-1: USB disconnect, device number 11 [ 51.451161][ T36] audit: type=1400 audit(1755352108.860:335): avc: denied { setattr } for pid=1413 comm="syz.2.357" name="PINGv6" dev="sockfs" ino=11323 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 51.474518][ T36] audit: type=1400 audit(1755352108.860:336): avc: denied { ioctl } for pid=1413 comm="syz.2.357" path="socket:[11323]" dev="sockfs" ino=11323 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 51.572694][ T1427] /dev/loop0: Can't lookup blockdev [ 51.755579][ T31] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 51.776976][ T1470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.786368][ T1470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.856415][ T1474] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 51.856447][ T1474] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:200 [ 51.878379][ T1476] input: syz0 as /devices/virtual/input/input13 [ 51.905541][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 51.914628][ T31] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 51.934027][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.949625][ T31] usb 4-1: Product: syz [ 51.961859][ T31] usb 4-1: Manufacturer: syz [ 51.967374][ T31] usb 4-1: SerialNumber: syz [ 51.977380][ T31] usb 4-1: config 0 descriptor?? [ 51.988238][ T31] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 52.184878][ T1507] netlink: 104 bytes leftover after parsing attributes in process `syz.1.379'. [ 52.245105][ T520] usb 4-1: USB disconnect, device number 10 [ 52.333745][ T36] audit: type=1400 audit(1755352109.740:337): avc: denied { wake_alarm } for pid=1512 comm="syz.0.382" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 52.639452][ T1531] binder: Unknown parameter '00000000000000000000000' [ 52.736190][ T1539] __vm_enough_memory: pid: 1539, comm: syz.1.389, bytes: 18014402804453376 not enough memory for the allocation [ 52.808342][ T36] audit: type=1400 audit(1755352110.220:338): avc: denied { write } for pid=1553 comm="syz.1.393" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 52.834304][ T1554] SELinux: Context system_u:object_r:syslogd_var_lib_t:s0 is not valid (left unmapped). [ 52.850044][ T36] audit: type=1400 audit(1755352110.260:339): avc: denied { relabelto } for pid=1553 comm="syz.1.393" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 52.882649][ T36] audit: type=1400 audit(1755352110.260:340): avc: denied { associate } for pid=1553 comm="syz.1.393" name="ptp0" dev="devtmpfs" ino=196 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 52.886835][ T1562] netlink: 36 bytes leftover after parsing attributes in process `syz.2.396'. [ 52.914493][ T36] audit: type=1400 audit(1755352110.300:341): avc: denied { create } for pid=1561 comm="syz.2.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 52.933712][ T1563] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.976631][ T1569] SELinux: security_context_str_to_sid () failed with errno=-22 [ 53.010702][ T36] audit: type=1400 audit(1755352110.420:342): avc: denied { accept } for pid=1565 comm="syz.1.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 53.010997][ T1567] binder: Bad value for 'stats' [ 53.035243][ T1576] rust_binder: Write failure EFAULT in pid:191 [ 53.147730][ T1589] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.156324][ T1589] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.161480][ T1589] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.168665][ T1589] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.175207][ T1589] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.182722][ T1589] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.189165][ T1589] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.196729][ T1589] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.203816][ T1589] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.211440][ T1589] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.217818][ T1589] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.224613][ T1589] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.231729][ T1589] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.238080][ T1589] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.245856][ T1589] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.251773][ T1592] capability: warning: `syz.2.406' uses 32-bit capabilities (legacy support in use) [ 53.258766][ T1589] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.268953][ T1589] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.285539][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 53.435590][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 53.444406][ T9] usb 4-1: config 252 has an invalid interface number: 125 but max is 2 [ 53.453656][ T9] usb 4-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 53.465268][ T9] usb 4-1: config 252 has 1 interface, different from the descriptor's value: 3 [ 53.476124][ T9] usb 4-1: config 252 has no interface number 0 [ 53.483005][ T9] usb 4-1: config 252 interface 125 altsetting 240 endpoint 0x2 has an invalid bInterval 229, changing to 11 [ 53.495443][ T9] usb 4-1: config 252 interface 125 has no altsetting 0 [ 53.504875][ T9] usb 4-1: New USB device found, idVendor=1a8d, idProduct=100f, bcdDevice=22.98 [ 53.515957][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.525118][ T9] usb 4-1: Product: 쥻㍽锱瓘〸ᨦ㪠⛶糮耎ຮ둃ꅷ㈐⼑형췆輶ඈ⑊導ℒ㟌寝뜈쎷公䄏￱녕୘⅁伡탥詸ᑇ [ 53.541287][ T9] usb 4-1: Manufacturer: 낲⏃㺭렕摪볅薥㵵缲徣둙덼ꃸ贮荴譩죌噭仡⠚郁盒ᥙⴆ棩窛鐴嵎⩛ꗕꅿ릩彬薷덅ᦴ콀뤮㇅㣶惧䦭裟楒汄㚕ỗ誎 [ 53.561868][ T9] usb 4-1: SerialNumber: ᐇ [ 53.973560][ T9] usb 4-1: USB disconnect, device number 11 [ 54.173695][ T1633] rust_binder: Error in use_page_slow: ESRCH [ 54.173721][ T1633] rust_binder: use_range failure ESRCH [ 54.205532][ T1633] rust_binder: Failed to allocate buffer. len:216, is_oneway:false [ 54.211161][ T1633] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 54.243705][ T1633] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:208 [ 54.552243][ T1658] netlink: 56 bytes leftover after parsing attributes in process `syz.1.427'. [ 54.574126][ T1658] rust_binder: Write failure EFAULT in pid:263 [ 54.603587][ T1666] rust_binder: Write failure EFAULT in pid:273 [ 54.626029][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 54.626048][ T36] audit: type=1400 audit(1755352112.040:346): avc: denied { append } for pid=1667 comm="syz.3.430" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 54.690502][ T36] audit: type=1400 audit(1755352112.090:347): avc: denied { open } for pid=1667 comm="syz.3.430" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 54.734818][ T36] audit: type=1400 audit(1755352112.140:348): avc: denied { getopt } for pid=1671 comm="syz.1.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 54.881809][ T36] audit: type=1400 audit(1755352112.290:349): avc: denied { read } for pid=1676 comm="syz.3.434" path="socket:[12800]" dev="sockfs" ino=12800 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.965558][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 55.047655][ T36] audit: type=1400 audit(1755352112.460:350): avc: denied { listen } for pid=1692 comm="syz.2.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.115512][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 55.123945][ T10] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 55.137122][ T10] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 55.150474][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 55.162380][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.171759][ T10] usb 2-1: Product: syz [ 55.176994][ T10] usb 2-1: Manufacturer: 훫⫧桎⳨ⷭ︳㶲Ƴⲕ굲鈚吮瘡ဢ푷꫎댔鳽䄊Ῑ偼鶁㿓⓶廨睯ư믉幟歮舯먑౦ꃶ鉗Ḉ壦ৃ읡ᮌ㌑谳ᤆ쪌 [ 55.200514][ T10] usb 2-1: SerialNumber: syz [ 55.276025][ T329] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 55.417835][ T10] cdc_ncm 2-1:1.0: bind() failure [ 55.423894][ T10] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 55.433048][ T10] cdc_ncm 2-1:1.1: bind() failure [ 55.441093][ T10] usb 2-1: USB disconnect, device number 9 [ 55.447751][ T329] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 55.466334][ T329] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.479173][ T329] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 55.495186][ T329] usb 4-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.00 [ 55.505183][ T329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.520759][ T329] usb 4-1: config 0 descriptor?? [ 55.798276][ T1717] rust_binder: Write failure EFAULT in pid:224 [ 55.929416][ T329] saitek 0003:0738:1709.0009: unknown main item tag 0x0 [ 55.943364][ T36] audit: type=1400 audit(1755352113.350:351): avc: denied { create } for pid=1718 comm="syz.1.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 55.945942][ T329] saitek 0003:0738:1709.0009: unknown main item tag 0x0 [ 55.976702][ T329] saitek 0003:0738:1709.0009: unknown main item tag 0x0 [ 55.984525][ T329] saitek 0003:0738:1709.0009: item fetching failed at offset 3/5 [ 55.995886][ T329] saitek 0003:0738:1709.0009: parse failed [ 56.002624][ T329] saitek 0003:0738:1709.0009: probe with driver saitek failed with error -22 [ 56.018704][ T36] audit: type=1400 audit(1755352113.430:352): avc: denied { connect } for pid=1718 comm="syz.1.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.055057][ T36] audit: type=1400 audit(1755352113.460:353): avc: denied { read } for pid=1721 comm="syz.1.449" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 56.081503][ T62] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 56.081496][ T36] audit: type=1400 audit(1755352113.460:354): avc: denied { open } for pid=1721 comm="syz.1.449" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 56.117983][ T1723] overlay: Unknown parameter 'fowner<00000000000000000000' [ 56.157026][ T1725] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 56.157946][ T1726] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 56.164554][ T1726] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 56.173080][ T1726] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:274 [ 56.191469][ T1729] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 56.208902][ T1729] rust_binder: Write failure EINVAL in pid:278 [ 56.225020][ T36] audit: type=1400 audit(1755352113.630:355): avc: denied { setopt } for pid=1732 comm="syz.1.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 56.255598][ T62] usb 1-1: device descriptor read/64, error -71 [ 56.279604][ T1689] binder: Unknown parameter 'rw' [ 56.282345][ T1734] binder: Unknown parameter 'rw' [ 56.360317][ T10] rust_binder: 1732: removing orphan mapping 0:24 [ 56.367153][ T10] rust_binder: 0: removing orphan mapping 24:1120 [ 56.495573][ T62] usb 1-1: device descriptor read/64, error -71 [ 56.735532][ T62] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 56.816614][ T1746] 9pnet_fd: Insufficient options for proto=fd [ 56.865567][ T62] usb 1-1: device descriptor read/64, error -71 [ 57.105592][ T62] usb 1-1: device descriptor read/64, error -71 [ 57.215670][ T62] usb usb1-port1: attempt power cycle [ 57.555549][ T62] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 57.576605][ T62] usb 1-1: device descriptor read/8, error -71 [ 57.591571][ T1768] overlayfs: failed to clone upperpath [ 57.632306][ T1780] overlayfs: failed to clone upperpath [ 57.706691][ T62] usb 1-1: device descriptor read/8, error -71 [ 57.884759][ T1808] overlayfs: failed to resolve './file0': -2 [ 57.945540][ T62] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 57.966603][ T62] usb 1-1: device descriptor read/8, error -71 [ 58.017887][ T629] usb 4-1: USB disconnect, device number 12 [ 58.096908][ T62] usb 1-1: device descriptor read/8, error -71 [ 58.205614][ T62] usb usb1-port1: unable to enumerate USB device [ 59.205603][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 59.356923][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.369438][ T10] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 59.380082][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.388621][ T10] usb 1-1: config 0 descriptor?? [ 59.797579][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 59.803832][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 59.812881][ T10] usb 1-1: USB disconnect, device number 16 [ 59.952138][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 59.952154][ T36] audit: type=1400 audit(1755352117.360:361): avc: denied { bind } for pid=1871 comm="syz.2.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 59.982754][ T36] audit: type=1400 audit(1755352117.360:362): avc: denied { name_bind } for pid=1871 comm="syz.2.500" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 60.014503][ T36] audit: type=1400 audit(1755352117.360:363): avc: denied { node_bind } for pid=1871 comm="syz.2.500" saddr=172.30.1.3 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 60.082445][ T36] audit: type=1400 audit(1755352117.490:364): avc: denied { write } for pid=1876 comm="syz.1.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 60.288121][ T36] audit: type=1400 audit(1755352117.700:365): avc: denied { write } for pid=1883 comm="syz.1.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.308150][ T36] audit: type=1400 audit(1755352117.700:366): avc: denied { setopt } for pid=1883 comm="syz.1.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.324361][ T1886] can0: slcan on ptm0. [ 60.367909][ T1887] can0 (unregistered): slcan off ptm0. [ 60.391240][ T1895] rust_binder: Write failure EINVAL in pid:304 [ 60.418139][ T36] audit: type=1400 audit(1755352117.830:367): avc: denied { write } for pid=1901 comm="syz.0.507" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 60.458155][ T36] audit: type=1400 audit(1755352117.830:368): avc: denied { ioctl } for pid=1901 comm="syz.0.507" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 60.542052][ T36] audit: type=1400 audit(1755352117.950:369): avc: denied { execute } for pid=1919 comm="syz.2.510" path="/dev/rnullb0" dev="tmpfs" ino=468 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 60.649696][ T1935] 9pnet_fd: Insufficient options for proto=fd [ 60.855521][ T486] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 61.005554][ T486] usb 1-1: Invalid ep0 maxpacket: 32 [ 61.135576][ T486] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 61.221544][ T36] audit: type=1400 audit(1755352118.630:370): avc: denied { audit_read } for pid=1949 comm="syz.2.517" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 61.285634][ T486] usb 1-1: Invalid ep0 maxpacket: 32 [ 61.291920][ T486] usb usb1-port1: attempt power cycle [ 61.322834][ T13] bridge_slave_1: left allmulticast mode [ 61.329240][ T13] bridge_slave_1: left promiscuous mode [ 61.336417][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.346167][ T13] bridge_slave_0: left allmulticast mode [ 61.352228][ T13] bridge_slave_0: left promiscuous mode [ 61.358832][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.473673][ T1952] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.482371][ T1952] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.490623][ T1952] bridge_slave_0: entered allmulticast mode [ 61.492623][ T1959] rust_binder: Error while translating object. [ 61.497358][ T1959] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 61.498505][ T1952] bridge_slave_0: entered promiscuous mode [ 61.505353][ T1959] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:316 [ 61.517343][ T1952] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.542319][ T1952] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.550738][ T1952] bridge_slave_1: entered allmulticast mode [ 61.558231][ T1952] bridge_slave_1: entered promiscuous mode [ 61.565687][ T13] tipc: Left network mode [ 61.571972][ T13] veth1_macvtap: left promiscuous mode [ 61.578186][ T13] veth0_vlan: left promiscuous mode [ 61.635523][ T486] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 61.647753][ T1952] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.654944][ T1952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.655892][ T486] usb 1-1: Invalid ep0 maxpacket: 32 [ 61.663296][ T1952] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.676662][ T1952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.706879][ T569] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.715424][ T569] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.726097][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.733480][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.743229][ T569] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.750879][ T569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.776747][ T1952] veth0_vlan: entered promiscuous mode [ 61.787210][ T1952] veth1_macvtap: entered promiscuous mode [ 61.795544][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 61.804277][ T486] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 61.826218][ T486] usb 1-1: Invalid ep0 maxpacket: 32 [ 61.832634][ T486] usb usb1-port1: unable to enumerate USB device [ 61.943693][ T486] rust_binder: 1968: removing orphan mapping 0:24 [ 61.951227][ T486] rust_binder: 0: removing orphan mapping 24:1120 [ 61.958319][ T1972] cgroup: Name too long [ 61.960553][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.984296][ T9] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 61.997007][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.000283][ T1974] rust_binder: Read failure Err(EFAULT) in pid:7 [ 62.016997][ T1976] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 62.035670][ T9] usb 2-1: config 0 descriptor?? [ 62.041364][ T1978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.527'. [ 62.078972][ T1981] input: syz1 as /devices/virtual/input/input15 [ 62.177994][ T1993] binder: Bad value for 'max' [ 62.454967][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 62.461463][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 62.471169][ T9] usb 2-1: USB disconnect, device number 10 [ 62.545580][ T62] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 62.695537][ T62] usb 5-1: Using ep0 maxpacket: 32 [ 62.702768][ T62] usb 5-1: config 1 interface 0 has no altsetting 0 [ 62.710958][ T62] usb 5-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.40 [ 62.720381][ T62] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.728969][ T62] usb 5-1: Product: syz [ 62.733228][ T62] usb 5-1: Manufacturer: syz [ 62.737973][ T62] usb 5-1: SerialNumber: syz [ 62.951197][ T62] usbhid 5-1:1.0: can't add hid device: -71 [ 62.957436][ T62] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 62.969920][ T62] usb 5-1: USB disconnect, device number 2 [ 63.022323][ T2010] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.023107][ T2009] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 63.037211][ T2009] rust_binder: Read failure Err(EAGAIN) in pid:325 [ 63.285604][ T31] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 63.447196][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 63.455869][ T31] usb 2-1: not running at top speed; connect to a high speed hub [ 63.471649][ T31] usb 2-1: config 12 has an invalid interface number: 173 but max is 1 [ 63.480959][ T31] usb 2-1: config 12 has an invalid interface number: 173 but max is 1 [ 63.489612][ T31] usb 2-1: config 12 has 1 interface, different from the descriptor's value: 2 [ 63.498986][ T31] usb 2-1: config 12 has no interface number 0 [ 63.505254][ T31] usb 2-1: config 12 interface 173 has no altsetting 0 [ 63.512575][ T31] usb 2-1: config 12 interface 173 has no altsetting 1 [ 63.526397][ T31] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=33.b7 [ 63.550982][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.565893][ T31] usb 2-1: Product: syz [ 63.572127][ T31] usb 2-1: Manufacturer: syz [ 63.577434][ T31] usb 2-1: SerialNumber: syz [ 63.795957][ T31] usb 2-1: USB disconnect, device number 11 [ 63.836085][ T62] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 63.905578][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 64.006580][ T62] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.018158][ T62] usb 5-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 64.027643][ T62] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.045766][ T62] usb 5-1: config 0 descriptor?? [ 64.055559][ T9] usb 1-1: device descriptor read/64, error -71 [ 64.105572][ T31] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 64.255620][ T31] usb 2-1: device descriptor read/64, error -71 [ 64.295585][ T9] usb 1-1: device descriptor read/64, error -71 [ 64.454845][ T62] usbhid 5-1:0.0: can't add hid device: -71 [ 64.461128][ T62] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 64.471211][ T62] usb 5-1: USB disconnect, device number 3 [ 64.495642][ T31] usb 2-1: device descriptor read/64, error -71 [ 64.545571][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 64.685615][ T9] usb 1-1: device descriptor read/64, error -71 [ 64.735575][ T31] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 64.875549][ T31] usb 2-1: device descriptor read/64, error -71 [ 64.935546][ T9] usb 1-1: device descriptor read/64, error -71 [ 65.045611][ T9] usb usb1-port1: attempt power cycle [ 65.076073][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 65.125612][ T31] usb 2-1: device descriptor read/64, error -71 [ 65.235734][ T31] usb usb2-port1: attempt power cycle [ 65.395613][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 65.416768][ T9] usb 1-1: device descriptor read/8, error -71 [ 65.546949][ T9] usb 1-1: device descriptor read/8, error -71 [ 65.575560][ T31] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 65.596221][ T2069] rust_binder: Write failure EINVAL in pid:334 [ 65.597565][ T31] usb 2-1: device descriptor read/8, error -71 [ 65.656874][ T2071] rust_binder: 336: no such ref 3 [ 65.662148][ T2071] rust_binder: 336: no such ref 1 [ 65.667447][ T2071] rust_binder: Read failure Err(EAGAIN) in pid:336 [ 65.667893][ T2071] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 65.682121][ T2071] rust_binder: 336: no such ref 2 [ 65.737247][ T31] usb 2-1: device descriptor read/8, error -71 [ 65.785555][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 65.806871][ T9] usb 1-1: device descriptor read/8, error -71 [ 65.936671][ T9] usb 1-1: device descriptor read/8, error -71 [ 65.975622][ T31] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 65.985574][ T486] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 65.996750][ T31] usb 2-1: device descriptor read/8, error -71 [ 66.045661][ T9] usb usb1-port1: unable to enumerate USB device [ 66.117063][ T2078] rust_binder: Write failure EINVAL in pid:332 [ 66.126351][ T31] usb 2-1: device descriptor read/8, error -71 [ 66.136933][ T486] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.153408][ T486] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 66.164508][ T486] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.174353][ T486] usb 4-1: config 0 descriptor?? [ 66.245952][ T31] usb usb2-port1: unable to enumerate USB device [ 66.583843][ T486] usbhid 4-1:0.0: can't add hid device: -71 [ 66.590205][ T486] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 66.599142][ T486] usb 4-1: USB disconnect, device number 13 [ 66.750027][ T2084] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 66.750058][ T2084] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:263 [ 66.819085][ T2088] binder: Unknown parameter 'defcontext01777777777777777777777' [ 66.882629][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 66.882645][ T36] audit: type=1400 audit(1755352124.290:381): avc: denied { mounton } for pid=2097 comm="syz.0.571" path="/90/file0" dev="tmpfs" ino=508 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 66.932034][ T2102] netlink: 60 bytes leftover after parsing attributes in process `syz.1.573'. [ 67.039438][ T2108] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 67.096916][ T2128] rust_binder: 342: no such ref 2 [ 67.125543][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 67.132342][ T420] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 67.135367][ T2129] rust_binder: 2126 RLIMIT_NICE not set [ 67.140034][ T2129] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 67.288617][ T2148] rust_binder: 55: no such ref 0 [ 67.303264][ T2148] rust_binder: 55: no such ref 0 [ 67.308621][ T2148] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:55 [ 67.752606][ T2163] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 67.773128][ T2163] rust_binder: Write failure EINVAL in pid:287 [ 68.045665][ T629] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 68.117962][ T36] audit: type=1400 audit(1755352125.530:382): avc: denied { create } for pid=2179 comm="syz.1.599" name="#19" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 68.139936][ T36] audit: type=1400 audit(1755352125.530:383): avc: denied { link } for pid=2179 comm="syz.1.599" name="#19" dev="tmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 68.164304][ T36] audit: type=1400 audit(1755352125.530:384): avc: denied { rename } for pid=2179 comm="syz.1.599" name="#1a" dev="tmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 68.191390][ T2184] 9pnet_fd: Insufficient options for proto=fd [ 68.215559][ T629] usb 1-1: device descriptor read/64, error -71 [ 68.246348][ T486] rust_binder: 2179: removing orphan mapping 0:24 [ 68.254165][ T486] rust_binder: 0: removing orphan mapping 24:1120 [ 68.336969][ T36] audit: type=1400 audit(1755352125.750:385): avc: denied { mounton } for pid=2198 comm="syz.1.607" path="/127/file0" dev="tmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 68.445325][ T36] audit: type=1326 audit(1755352125.850:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2200 comm="syz.1.608" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8170d8ebe9 code=0x0 [ 68.458959][ T629] usb 1-1: device descriptor read/64, error -71 [ 68.705602][ T629] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 68.721857][ T36] audit: type=1400 audit(1755352126.130:387): avc: denied { mount } for pid=2205 comm="syz.1.609" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 68.747316][ T36] audit: type=1400 audit(1755352126.130:388): avc: denied { mounton } for pid=2205 comm="syz.1.609" path="/129/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 68.835617][ T629] usb 1-1: device descriptor read/64, error -71 [ 68.867644][ T36] audit: type=1400 audit(1755352126.280:389): avc: denied { connect } for pid=2213 comm="syz.4.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.891044][ T36] audit: type=1400 audit(1755352126.300:390): avc: denied { read } for pid=2213 comm="syz.4.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.965715][ T31] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96 [ 69.075603][ T629] usb 1-1: device descriptor read/64, error -71 [ 69.185767][ T629] usb usb1-port1: attempt power cycle [ 69.259652][ T2223] netlink: 'syz.1.613': attribute type 4 has an invalid length. [ 69.269362][ T2223] netlink: 'syz.1.613': attribute type 4 has an invalid length. [ 69.285318][ T2225] binder: Bad value for 'stats' [ 69.317435][ T2227] kvm: pic: non byte read [ 69.322073][ T2227] kvm: pic: level sensitive irq not supported [ 69.322115][ T2227] kvm: pic: non byte read [ 69.333064][ T2227] kvm: pic: non byte read [ 69.338160][ T2227] kvm: pic: non byte read [ 69.342789][ T2227] kvm: pic: non byte read [ 69.348510][ T2227] kvm: pic: level sensitive irq not supported [ 69.348580][ T2227] kvm: pic: non byte read [ 69.359947][ T2227] kvm: pic: non byte read [ 69.365143][ T2227] kvm: pic: non byte read [ 69.370194][ T2227] kvm: pic: level sensitive irq not supported [ 69.370264][ T2227] kvm: pic: non byte read [ 69.525722][ T629] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 69.546985][ T629] usb 1-1: device descriptor read/8, error -71 [ 69.655603][ T31] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 69.683616][ T629] usb 1-1: device descriptor read/8, error -71 [ 69.757578][ T2231] overlayfs: overlapping lowerdir path [ 69.762621][ T2232] netlink: 'syz.4.616': attribute type 4 has an invalid length. [ 69.787007][ T2236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.617'. [ 69.796446][ T2236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.617'. [ 69.805530][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 69.812196][ T31] usb 2-1: config 0 has an invalid interface number: 101 but max is 11 [ 69.823003][ T31] usb 2-1: config 0 has an invalid descriptor of length 114, skipping remainder of the config [ 69.835080][ T31] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 12 [ 69.845533][ T31] usb 2-1: config 0 has no interface number 0 [ 69.852911][ T31] usb 2-1: too many endpoints for config 0 interface 101 altsetting 115: 95, using maximum allowed: 30 [ 69.864857][ T31] usb 2-1: config 0 interface 101 altsetting 115 has 0 endpoint descriptors, different from the interface descriptor's value: 95 [ 69.880073][ T31] usb 2-1: config 0 interface 101 has no altsetting 0 [ 69.889822][ T31] usb 2-1: New USB device found, idVendor=14cd, idProduct=6116, bcdDevice= 1.58 [ 69.900825][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.909363][ T31] usb 2-1: Product: syz [ 69.914772][ T31] usb 2-1: Manufacturer: syz [ 69.919786][ T31] usb 2-1: SerialNumber: syz [ 69.925308][ T31] usb 2-1: config 0 descriptor?? [ 69.945577][ T629] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 69.966640][ T629] usb 1-1: device descriptor read/8, error -71 [ 70.096563][ T629] usb 1-1: device descriptor read/8, error -71 [ 70.134815][ T31] ums-cypress 2-1:0.101: USB Mass Storage device detected [ 70.205691][ T629] usb usb1-port1: unable to enumerate USB device [ 70.218262][ T31] usb 2-1: USB disconnect, device number 16 [ 70.419871][ T2246] rust_binder: inc_ref_done called when no active inc_refs [ 70.532865][ T2265] rust_binder: Write failure EFAULT in pid:109 [ 70.553544][ T2267] netlink: 'syz.4.628': attribute type 40 has an invalid length. [ 70.734362][ T2274] tipc: New replicast peer: 255.255.255.255 [ 70.740819][ T2274] tipc: Enabled bearer , priority 10 [ 71.095401][ T2288] binder: Bad value for 'max' [ 71.215638][ T629] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 71.295570][ T31] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 71.365623][ T629] usb 1-1: Using ep0 maxpacket: 32 [ 71.372124][ T629] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 71.380547][ T629] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.390829][ T629] usb 1-1: config 0 has no interfaces? [ 71.396320][ T629] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 71.405371][ T629] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.414312][ T629] usb 1-1: config 0 descriptor?? [ 71.446314][ T31] usb 4-1: not running at top speed; connect to a high speed hub [ 71.455000][ T31] usb 4-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 71.467949][ T31] usb 4-1: config 1 interface 0 has no altsetting 0 [ 71.476015][ T31] usb 4-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 71.485131][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.493264][ T31] usb 4-1: Product: syz [ 71.497457][ T31] usb 4-1: Manufacturer: syz [ 71.502041][ T31] usb 4-1: SerialNumber: syz [ 71.667661][ T629] usb 1-1: USB disconnect, device number 29 [ 71.818254][ T2320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.636'. [ 71.855557][ T520] tipc: Node number set to 4043391257 [ 72.287912][ T2325] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.288232][ T2325] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true [ 72.295137][ T2325] rust_binder: inc_ref_done called when no active inc_refs [ 72.308270][ T2325] rust_binder: Write failure EINVAL in pid:303 [ 72.772121][ T2350] rust_binder: Got transaction with invalid offset. [ 72.778731][ T2350] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 72.785828][ T2350] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:446 [ 72.797402][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 72.797422][ T36] audit: type=1400 audit(1755352130.210:399): avc: denied { read } for pid=2349 comm="syz.1.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.990894][ T2353] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 72.990927][ T2353] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:309 [ 73.022559][ T2355] input: syz0 as /devices/virtual/input/input16 [ 73.636314][ T2368] rust_binder: Error in use_page_slow: ESRCH [ 73.636332][ T2368] rust_binder: use_range failure ESRCH [ 73.642912][ T2368] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 73.648644][ T2368] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 73.657729][ T2368] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:455 [ 73.788431][ T2370] netlink: 'syz.1.662': attribute type 21 has an invalid length. [ 73.805297][ T2370] netlink: 388 bytes leftover after parsing attributes in process `syz.1.662'. [ 74.073639][ T31] usbhid 4-1:1.0: can't add hid device: -71 [ 74.081749][ T31] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 74.090464][ T31] usb 4-1: USB disconnect, device number 14 [ 74.185590][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 74.334775][ T2394] netlink: 80 bytes leftover after parsing attributes in process `syz.1.670'. [ 74.343929][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 74.351293][ T9] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1 [ 74.367791][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 74.379856][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 74.388990][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.395973][ T2395] rust_binder: 2394 RLIMIT_NICE not set [ 74.397255][ T9] usb 1-1: Product: syz [ 74.407156][ T9] usb 1-1: Manufacturer: syz [ 74.413792][ T9] usb 1-1: SerialNumber: syz [ 74.420083][ T2376] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 74.548939][ T31] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 74.570390][ T2408] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 74.655577][ T629] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 74.685537][ T31] usb 4-1: device descriptor read/64, error -71 [ 74.805596][ T629] usb 2-1: Using ep0 maxpacket: 16 [ 74.812081][ T629] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 74.821435][ T629] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.831845][ T629] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 74.842892][ T629] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 74.854398][ T629] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 74.863622][ T629] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.871833][ T629] usb 2-1: Product: syz [ 74.876117][ T629] usb 2-1: Manufacturer: syz [ 74.880728][ T629] usb 2-1: SerialNumber: syz [ 74.935533][ T31] usb 4-1: device descriptor read/64, error -71 [ 75.129502][ T629] usb 2-1: MIDIStreaming interface descriptor not found [ 75.142141][ T629] usb 2-1: USB disconnect, device number 17 [ 75.157135][ T356] udevd[356]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 75.175588][ T31] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 75.315605][ T31] usb 4-1: device descriptor read/64, error -71 [ 75.434925][ T9] cdc_ncm 1-1:1.0: bind() failure [ 75.444244][ T9] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 75.452545][ T9] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 75.461823][ T9] usb 1-1: USB disconnect, device number 30 [ 75.555733][ T31] usb 4-1: device descriptor read/64, error -71 [ 75.665636][ T31] usb usb4-port1: attempt power cycle [ 75.693437][ T36] audit: type=1400 audit(1755352133.100:400): avc: denied { accept } for pid=2424 comm="syz.1.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.744072][ T36] audit: type=1400 audit(1755352133.150:401): avc: denied { read } for pid=2424 comm="syz.1.680" dev="sockfs" ino=18281 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.855539][ T486] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 76.005512][ T31] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 76.017886][ T36] audit: type=1400 audit(1755352133.430:402): avc: denied { write } for pid=2430 comm="syz.0.682" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 76.021610][ T486] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.043329][ T31] usb 4-1: device descriptor read/8, error -71 [ 76.054164][ T486] usb 5-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 76.069775][ T486] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.079064][ T486] usb 5-1: config 0 descriptor?? [ 76.093470][ T2432] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 76.186792][ T31] usb 4-1: device descriptor read/8, error -71 [ 76.425565][ T31] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 76.456583][ T31] usb 4-1: device descriptor read/8, error -71 [ 76.490656][ T486] usbhid 5-1:0.0: can't add hid device: -71 [ 76.497002][ T486] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 76.507720][ T486] usb 5-1: USB disconnect, device number 4 [ 76.586896][ T31] usb 4-1: device descriptor read/8, error -71 [ 76.631272][ T36] audit: type=1400 audit(1755352134.040:403): avc: denied { map } for pid=2441 comm="syz.1.686" path="pipe:[1895]" dev="pipefs" ino=1895 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 76.661193][ T36] audit: type=1400 audit(1755352134.070:404): avc: denied { create } for pid=2443 comm="syz.1.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 76.705659][ T31] usb usb4-port1: unable to enumerate USB device [ 77.010211][ T2453] batadv_slave_1: entered promiscuous mode [ 77.020705][ T36] audit: type=1400 audit(1755352134.430:405): avc: denied { lock } for pid=2452 comm="syz.4.691" path="socket:[20536]" dev="sockfs" ino=20536 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 77.115542][ T31] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 77.159211][ T2453] batadv_slave_1: left promiscuous mode [ 77.171998][ T2456] : renamed from bond_slave_0 [ 77.212101][ T2460] rust_binder: Write failure EFAULT in pid:168 [ 77.222944][ T36] audit: type=1400 audit(1755352134.630:406): avc: denied { accept } for pid=2461 comm="syz.4.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 77.271560][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.294002][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 77.304973][ T31] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 77.309143][ T36] audit: type=1400 audit(1755352134.720:407): avc: denied { map } for pid=2463 comm="syz.3.695" path="socket:[19933]" dev="sockfs" ino=19933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 77.314884][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 77.347104][ T31] usb 1-1: SerialNumber: syz [ 77.450471][ T2474] rust_binder: 2472 RLIMIT_NICE not set [ 77.450911][ T2472] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 77.566372][ T31] usb 1-1: 0:2 : does not exist [ 77.571291][ T31] usb 1-1: unit 5 not found! [ 77.579765][ T31] usb 1-1: USB disconnect, device number 31 [ 77.685563][ T329] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 77.725566][ T520] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 77.836597][ T329] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 77.847552][ T329] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.858538][ T329] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.868457][ T329] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 77.882156][ T329] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 77.886728][ T520] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.891519][ T329] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 77.903940][ T520] usb 5-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 77.912231][ T329] usb 4-1: Manufacturer: syz [ 77.923031][ T520] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.929274][ T329] usb 4-1: config 0 descriptor?? [ 77.944756][ T520] usb 5-1: config 0 descriptor?? [ 78.109457][ T2490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.703'. [ 78.138931][ T36] audit: type=1326 audit(1755352135.550:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2489 comm="syz.0.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f30e9185ba7 code=0x7ffc0000 [ 78.162447][ T36] audit: type=1326 audit(1755352135.550:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2489 comm="syz.0.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f30e9185ba7 code=0x7ffc0000 [ 78.186972][ T36] audit: type=1326 audit(1755352135.550:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2489 comm="syz.0.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f30e912add9 code=0x7ffc0000 [ 78.212078][ T329] appleir 0003:05AC:8243.000A: unknown main item tag 0x0 [ 78.215794][ T36] audit: type=1326 audit(1755352135.550:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2489 comm="syz.0.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f30e912add9 code=0x7ffc0000 [ 78.219545][ T329] appleir 0003:05AC:8243.000A: No inputs registered, leaving [ 78.243467][ T36] audit: type=1326 audit(1755352135.550:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2489 comm="syz.0.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30e918ebe9 code=0x7ffc0000 [ 78.252078][ T329] appleir 0003:05AC:8243.000A: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 78.275872][ T36] audit: type=1326 audit(1755352135.550:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2489 comm="syz.0.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f30e9185ba7 code=0x7ffc0000 [ 78.310998][ T36] audit: type=1326 audit(1755352135.550:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2489 comm="syz.0.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f30e9185ba7 code=0x7ffc0000 [ 78.334786][ T36] audit: type=1326 audit(1755352135.550:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2489 comm="syz.0.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f30e912add9 code=0x7ffc0000 [ 78.359129][ T36] audit: type=1326 audit(1755352135.550:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2489 comm="syz.0.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f30e912add9 code=0x7ffc0000 [ 78.383348][ T36] audit: type=1326 audit(1755352135.550:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2489 comm="syz.0.703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f30e9185ba7 code=0x7ffc0000 [ 78.410011][ T520] usbhid 5-1:0.0: can't add hid device: -71 [ 78.416394][ T520] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 78.418168][ T2494] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.427331][ T520] usb 5-1: USB disconnect, device number 5 [ 78.428191][ T2494] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 78.475702][ T2494] rust_binder: Write failure EINVAL in pid:489 [ 78.490155][ T2495] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:489 [ 78.577873][ T2497] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 78.615352][ T2498] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:492 [ 78.615343][ T2497] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:492 [ 78.733711][ T2509] netlink: 12 bytes leftover after parsing attributes in process `syz.1.708'. [ 79.695543][ T520] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 79.765725][ T9] usb 4-1: reset high-speed USB device number 19 using dummy_hcd [ 79.846942][ T520] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.858049][ T520] usb 5-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 79.867312][ T520] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.879827][ T520] usb 5-1: config 0 descriptor?? [ 80.235237][ T2546] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 80.246264][ T2546] rust_binder: Failed to allocate buffer. len:18446744073709551048, is_oneway:false [ 80.246298][ T2546] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 80.264771][ T2546] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:383 [ 80.301724][ T520] usbhid 5-1:0.0: can't add hid device: -71 [ 80.310330][ T520] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 80.333766][ T520] usb 5-1: USB disconnect, device number 6 [ 80.441910][ T2551] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 144, size: 75) [ 80.441939][ T2551] rust_binder: Error while translating object. [ 80.453426][ T2551] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 80.460441][ T2551] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:526 [ 80.555993][ T486] usb 4-1: USB disconnect, device number 19 [ 80.855523][ T520] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 80.938605][ T2558] overlay: ./file0 is not a directory [ 80.985499][ T520] usb 2-1: device descriptor read/64, error -71 [ 81.155100][ T2568] fuse: Bad value for 'fd' [ 81.225541][ T520] usb 2-1: device descriptor read/64, error -71 [ 81.455512][ T486] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 81.465520][ T520] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 81.595587][ T520] usb 2-1: device descriptor read/64, error -71 [ 81.607000][ T486] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.618343][ T486] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 81.627712][ T486] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.636808][ T486] usb 4-1: config 0 descriptor?? [ 81.835556][ T520] usb 2-1: device descriptor read/64, error -71 [ 81.945767][ T520] usb usb2-port1: attempt power cycle [ 82.044247][ T486] usbhid 4-1:0.0: can't add hid device: -71 [ 82.051438][ T486] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 82.063834][ T486] usb 4-1: USB disconnect, device number 20 [ 82.083223][ T2614] overlayfs: failed to resolve './file0': -2 [ 82.204155][ T2624] EXT4-fs: dax option not supported [ 82.269176][ T2632] overlayfs: missing 'lowerdir' [ 82.285545][ T520] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 82.316867][ T520] usb 2-1: device descriptor read/8, error -71 [ 82.446658][ T520] usb 2-1: device descriptor read/8, error -71 [ 82.685755][ T520] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 82.706588][ T520] usb 2-1: device descriptor read/8, error -71 [ 82.815525][ T486] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 82.836796][ T520] usb 2-1: device descriptor read/8, error -71 [ 82.945801][ T520] usb usb2-port1: unable to enumerate USB device [ 82.966885][ T486] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 82.976134][ T486] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 82.986956][ T486] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 82.996316][ T486] usb 4-1: config 1 has no interface number 0 [ 83.002582][ T486] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 83.013524][ T486] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 83.028068][ T486] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 83.037247][ T486] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.045261][ T486] usb 4-1: Product: syz [ 83.049483][ T486] usb 4-1: Manufacturer: syz [ 83.054172][ T486] usb 4-1: SerialNumber: syz [ 83.061868][ T486] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 83.068719][ T486] cdc_ncm 4-1:1.1: bind() failure [ 83.264575][ T36] kauditd_printk_skb: 37249 callbacks suppressed [ 83.264595][ T36] audit: type=1400 audit(1755352140.670:37667): avc: denied { append } for pid=2642 comm="syz.3.755" name="event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 83.264752][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 83.412734][ T36] audit: type=1400 audit(1755352140.820:37668): avc: denied { write } for pid=2646 comm="syz.0.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 83.412800][ T2647] netlink: 20 bytes leftover after parsing attributes in process `syz.0.756'. [ 83.435503][ T36] audit: type=1400 audit(1755352140.820:37669): avc: denied { nlmsg_write } for pid=2646 comm="syz.0.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 83.594851][ T2656] overlayfs: failed to clone upperpath [ 83.609590][ T36] audit: type=1400 audit(1755352141.019:37670): avc: denied { create } for pid=2657 comm="syz.0.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 83.629667][ T36] audit: type=1400 audit(1755352141.029:37671): avc: denied { getopt } for pid=2657 comm="syz.0.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.844676][ T2668] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 83.845509][ T486] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 83.969445][ T36] audit: type=1400 audit(1755352141.379:37672): avc: denied { create } for pid=2672 comm="syz.4.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 83.989543][ T36] audit: type=1400 audit(1755352141.379:37673): avc: denied { ioctl } for pid=2672 comm="syz.4.766" path="socket:[20993]" dev="sockfs" ino=20993 ioctlcmd=0x556c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 84.016080][ T486] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.035549][ T486] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 84.045170][ T486] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.056074][ T486] usb 2-1: config 0 descriptor?? [ 84.209157][ T569] bridge_slave_1: left allmulticast mode [ 84.214903][ T569] bridge_slave_1: left promiscuous mode [ 84.220814][ T569] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.226193][ T2702] overlayfs: failed to resolve './file1': -2 [ 84.235147][ T569] bridge_slave_0: left allmulticast mode [ 84.235728][ T2704] overlayfs: failed to resolve './file1': -2 [ 84.241797][ T569] bridge_slave_0: left promiscuous mode [ 84.252850][ T569] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.397843][ T569] veth1_macvtap: left promiscuous mode [ 84.403412][ T569] veth0_vlan: left promiscuous mode [ 84.468002][ T486] usbhid 2-1:0.0: can't add hid device: -71 [ 84.474370][ T486] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 84.483429][ T486] usb 2-1: USB disconnect, device number 22 [ 84.997176][ T2729] tipc: Failed to remove unknown binding: 66,1,1/4043391257:3548118726/3548118728 [ 85.165553][ T486] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 85.285735][ T420] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 85.285769][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 85.285823][ T520] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 85.293512][ T629] usb 4-1: USB disconnect, device number 21 [ 85.318880][ T486] usb 5-1: config index 0 descriptor too short (expected 37156, got 36) [ 85.327849][ T486] usb 5-1: config 150 has too many interfaces: 51, using maximum allowed: 32 [ 85.336834][ T486] usb 5-1: config 150 has an invalid descriptor of length 1, skipping remainder of the config [ 85.347607][ T486] usb 5-1: config 150 has 0 interfaces, different from the descriptor's value: 51 [ 85.356977][ T486] usb 5-1: New USB device found, idVendor=04cd, idProduct=0755, bcdDevice= 0.00 [ 85.368603][ T486] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.450192][ T2740] overlayfs: failed to clone upperpath [ 85.467580][ T520] usb 2-1: too many configurations: 53, using maximum allowed: 8 [ 85.485008][ T520] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 85.493674][ T520] usb 2-1: can't read configurations, error -61 [ 85.635502][ T520] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 85.786270][ T486] usb 5-1: string descriptor 0 read error: -71 [ 85.793077][ T486] usb 5-1: USB disconnect, device number 7 [ 85.799607][ T520] usb 2-1: too many configurations: 53, using maximum allowed: 8 [ 85.815189][ T520] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 85.822863][ T520] usb 2-1: can't read configurations, error -61 [ 85.829451][ T520] usb usb2-port1: attempt power cycle [ 85.990877][ T2721] input: syz0 as /devices/virtual/input/input19 [ 86.165563][ T520] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 86.186683][ T520] usb 2-1: too many configurations: 53, using maximum allowed: 8 [ 86.196012][ T520] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 86.204744][ T520] usb 2-1: can't read configurations, error -61 [ 86.335613][ T520] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 86.356275][ T520] usb 2-1: too many configurations: 53, using maximum allowed: 8 [ 86.365215][ T520] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 86.373025][ T520] usb 2-1: can't read configurations, error -61 [ 86.379719][ T520] usb usb2-port1: unable to enumerate USB device [ 86.799449][ T2756] Invalid ELF header magic: != ELF [ 86.805539][ T36] audit: type=1400 audit(1755352144.209:37674): avc: denied { module_load } for pid=2754 comm="syz.0.796" path="/162/bus" dev="tmpfs" ino=911 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 86.836936][ T2756] overlay: ./bus is not a directory [ 86.906465][ T2770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.800'. [ 86.915531][ T36] audit: type=1400 audit(1755352144.319:37675): avc: denied { nlmsg_read } for pid=2769 comm="syz.0.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 87.642125][ T2785] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:223 [ 88.665534][ T329] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 88.825527][ T329] usb 2-1: Using ep0 maxpacket: 16 [ 88.831938][ T329] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 88.840102][ T329] usb 2-1: config 0 has no interface number 0 [ 88.846226][ T329] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 88.855370][ T329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.864040][ T329] usb 2-1: config 0 descriptor?? [ 89.071754][ T2802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.080520][ T2802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.089506][ T2802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.098042][ T2802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.106429][ T2802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.114877][ T2802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.126190][ T520] usb 2-1: USB disconnect, device number 27 [ 89.374871][ T36] audit: type=1400 audit(1755352146.779:37676): avc: denied { load_policy } for pid=2816 comm="syz.4.816" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 90.400616][ T2826] veth1_vlan: mtu greater than device maximum [ 90.464234][ T2838] process 'syz.0.822' launched './file0' with NULL argv: empty string added [ 90.481195][ T36] audit: type=1400 audit(1755352147.889:37677): avc: denied { execute_no_trans } for pid=2837 comm="syz.0.822" path="/175/file0" dev="tmpfs" ino=991 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 90.635603][ T629] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 90.785508][ T629] usb 5-1: Using ep0 maxpacket: 32 [ 90.791969][ T629] usb 5-1: unable to get BOS descriptor or descriptor too short [ 90.800495][ T629] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 90.808977][ T629] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 90.819438][ T629] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 90.828621][ T629] usb 5-1: config 128 has no interface number 0 [ 90.834889][ T629] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 98, changing to 10 [ 90.846321][ T629] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 32862, setting to 1024 [ 90.857843][ T629] usb 5-1: config 128 interface 127 has no altsetting 0 [ 90.866226][ T629] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 90.875393][ T629] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.883463][ T629] usb 5-1: Product: syz [ 90.887741][ T629] usb 5-1: Manufacturer: syz [ 90.892447][ T629] usb 5-1: SerialNumber: syz [ 91.104897][ T629] usb 5-1: USB disconnect, device number 8 [ 91.112464][ T811] udevd[811]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 92.964378][ T2873] netlink: 44 bytes leftover after parsing attributes in process `syz.0.834'. [ 93.175547][ T329] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 93.327259][ T329] usb 5-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 93.340260][ T329] usb 5-1: config 1 interface 0 has no altsetting 0 [ 93.348638][ T329] usb 5-1: New USB device found, idVendor=045e, idProduct=0750, bcdDevice= 0.40 [ 93.357992][ T329] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.366634][ T329] usb 5-1: Manufacturer: ᱹ뷻ﱏ㗾镀终㔃㗟柖⡆읂꿸ᄡ褔௧빵Ꝑ䜫ࢭ芦꟨᷐ἡ堪㕚ઋ媻閮暔霰ᜌ膆氊ⱱꯃ˛型塽㹖藤덤瑒췡岦䔉굓㧱䧧싒篺┅᜸辚鿊甀댒ⱒ鬩ᒼ丟紝ꃡ睁蓭䪮䛍䶱蚙呞匚﹀圶࿳䣱앞툆稲쇁굱뛌숨봲䖘맾ᗾ䬗䋴辐 [ 93.396853][ T329] usb 5-1: SerialNumber: ㊎냧ḓ侘쑒系鱮ό믎༌謰埝䥐ᇠ틏䁏휂⨇扐熎⩨ඳ먓멧悀슂ࠒݦ唨䊈瓫䬑摝ꍘ灲痌瓉⒬ꖰ䖿ꉭ橭Ⲵⵎˣ硹戄媵㌹政嬹旟薷羙䋡愜⼽ᒦⅅ [ 93.418296][ T329] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 93.427020][ T329] usb 5-1: no configuration chosen from 1 choice [ 94.298107][ T2893] tmpfs: Bad value for 'nr_blocks' [ 94.351528][ T2903] overlayfs: failed to clone upperpath [ 94.535503][ T520] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 94.686833][ T520] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.698058][ T520] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 94.707097][ T520] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.715570][ T520] usb 2-1: config 0 descriptor?? [ 95.125242][ T520] itetech 0003:06CB:73F5.000B: hidraw0: USB HID v0.02 Device [HID 06cb:73f5] on usb-dummy_hcd.1-1/input0 [ 95.323775][ T2894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.332373][ T2894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.340976][ T329] usb 2-1: USB disconnect, device number 28 [ 95.727562][ T2912] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=2912 comm=syz.0.845 [ 95.911615][ T329] usb 5-1: USB disconnect, device number 9 [ 97.289729][ T2923] 9pnet_fd: Insufficient options for proto=fd [ 97.297230][ T2923] 9pnet_fd: Insufficient options for proto=fd [ 97.545621][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 97.705541][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 97.713253][ T10] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 97.722433][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.730459][ T10] usb 5-1: Product: syz [ 97.734611][ T10] usb 5-1: Manufacturer: syz [ 97.739200][ T10] usb 5-1: SerialNumber: syz [ 97.745838][ T10] r8152-cfgselector 5-1: Unknown version 0x0000 [ 97.752073][ T10] r8152-cfgselector 5-1: config 0 descriptor?? [ 97.758920][ T10] hub 5-1:0.0: bad descriptor, ignoring hub [ 97.764805][ T10] hub 5-1:0.0: probe with driver hub failed with error -5 [ 97.960805][ T10] r8152-cfgselector 5-1: Unknown version 0x0000 [ 97.967268][ T10] r8152-cfgselector 5-1: bad CDC descriptors [ 98.275609][ T629] r8152-cfgselector 5-1: USB disconnect, device number 10 [ 98.941787][ T36] audit: type=1400 audit(1755352156.349:37678): avc: denied { bind } for pid=2947 comm="syz.4.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 99.205506][ T629] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 99.355510][ T629] usb 5-1: Using ep0 maxpacket: 16 [ 99.361960][ T629] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 99.373135][ T629] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.386022][ T629] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 99.395039][ T629] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.403682][ T629] usb 5-1: config 0 descriptor?? [ 99.810833][ T2949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.820155][ T2949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.829588][ T629] usbhid 5-1:0.0: can't add hid device: -71 [ 99.835561][ T629] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 99.843990][ T629] usb 5-1: USB disconnect, device number 11 [ 100.659352][ T2962] fuse: Bad value for 'group_id' [ 100.665795][ T2962] fuse: Bad value for 'group_id' [ 100.727300][ T36] audit: type=1400 audit(1755352158.139:37679): avc: denied { getopt } for pid=2971 comm="syz.1.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 100.905564][ T10] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 101.056792][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 101.064823][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 101.074078][ T10] usb 5-1: config 1 has an invalid interface number: 138 but max is 0 [ 101.082298][ T10] usb 5-1: config 1 has no interface number 0 [ 101.088533][ T10] usb 5-1: config 1 interface 138 has no altsetting 0 [ 101.096732][ T10] usb 5-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 101.105804][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.113781][ T10] usb 5-1: Product: syz [ 101.118002][ T10] usb 5-1: Manufacturer: syz [ 101.122612][ T10] usb 5-1: SerialNumber: syz [ 101.620079][ T10] usb 5-1: USB disconnect, device number 12 [ 101.630272][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.138/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 102.595793][ T3000] netlink: 68 bytes leftover after parsing attributes in process `syz.0.872'. [ 104.805672][ T520] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 104.826038][ T36] audit: type=1400 audit(1755352162.239:37680): avc: denied { listen } for pid=3020 comm="syz.0.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 104.956017][ T520] usb 2-1: too many configurations: 30, using maximum allowed: 8 [ 104.964875][ T520] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 104.972609][ T520] usb 2-1: can't read configurations, error -61 [ 105.105578][ T520] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 105.255945][ T520] usb 2-1: too many configurations: 30, using maximum allowed: 8 [ 105.265056][ T520] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 105.272766][ T520] usb 2-1: can't read configurations, error -61 [ 105.279149][ T520] usb usb2-port1: attempt power cycle [ 105.615573][ T520] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 105.636330][ T520] usb 2-1: too many configurations: 30, using maximum allowed: 8 [ 105.645187][ T520] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 105.652933][ T520] usb 2-1: can't read configurations, error -61 [ 105.785576][ T520] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 105.806367][ T520] usb 2-1: too many configurations: 30, using maximum allowed: 8 [ 105.815265][ T520] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 105.822891][ T520] usb 2-1: can't read configurations, error -61 [ 105.829466][ T520] usb usb2-port1: unable to enumerate USB device [ 106.700729][ T3033] wireguard: wg2: Could not create IPv4 socket [ 106.763484][ T36] audit: type=1400 audit(1755352164.169:37681): avc: denied { setopt } for pid=3043 comm="syz.0.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 106.763682][ T3044] netlink: 68 bytes leftover after parsing attributes in process `syz.0.884'. [ 108.833872][ T3051] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 108.839713][ T3050] cgroup: Need name or subsystem set [ 108.843080][ T36] audit: type=1400 audit(1755352166.239:37682): avc: denied { create } for pid=3046 comm="syz.0.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 108.887495][ T36] audit: type=1400 audit(1755352166.249:37683): avc: denied { remount } for pid=3047 comm="syz.1.886" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=5 req=793 state=3 status=67 (errno 9: Bad file descriptor) [ 108.935193][ T3064] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 108.973722][ T36] audit: type=1400 audit(1755352166.379:37684): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[1889]" dev="pipefs" ino=1889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 108.990854][ T62] rust_binder: 3060: removing orphan mapping 0:112 [ 109.023859][ T62] rust_binder: 0: removing orphan mapping 112:1048 [ 109.230890][ T46] bridge_slave_1: left allmulticast mode [ 109.238519][ T46] bridge_slave_1: left promiscuous mode [ 109.244132][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.251990][ T46] bridge_slave_0: left allmulticast mode [ 109.257814][ T46] bridge_slave_0: left promiscuous mode [ 109.263402][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.407349][ T46] veth1_macvtap: left promiscuous mode [ 109.412861][ T46] veth0_vlan: left promiscuous mode [ 109.726851][ T46] bridge_slave_1: left allmulticast mode [ 109.732519][ T46] bridge_slave_1: left promiscuous mode [ 109.738160][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.745712][ T46] bridge_slave_0: left allmulticast mode [ 109.751435][ T46] bridge_slave_0: left promiscuous mode [ 109.757069][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.866426][ T46] tipc: Disabling bearer [ 109.871824][ T46] tipc: Left network mode [ 109.876853][ T46] veth1_macvtap: left promiscuous mode [ 109.882320][ T46] veth0_vlan: left promiscuous mode