last executing test programs: 2m12.542519596s ago: executing program 3 (id=789): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) syslog(0x3, &(0x7f0000000200)=""/69, 0x45) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x501280, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="65660f38825dd48fe9f801ea66b8b1008ee8f30f0966b806010f00d00f23c4b9330a00000f3266b821008ee8650f78143bc4e221a78b6de80000", 0x3a}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000000000000100000ff07000002000000380100000000000008000080"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'veth0_to_team\x00', 0x400}) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020409100000000000004c9e00000002001b00027f0000000000000000004105000600200000000a00000000000000000500"], 0x80}}, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000001ac0)={0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000300)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r7, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, r8, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x7c}}, 0x20000840) close_range(r0, 0xffffffffffffffff, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) ioctl$KVM_CAP_X2APIC_API(r11, 0x4068aea3, &(0x7f00000004c0)) 2m11.365404305s ago: executing program 3 (id=816): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000280)={0x6, 0x0, [{0xac1, 0x0, 0x1000}, {0x9d2, 0x0, 0xfffffffffffffffb}, {0x2c6, 0x0, 0x9}, {0x0, 0x0, 0x3}, {0x934, 0x0, 0x8}, {0x392, 0x0, 0xd}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r2 = openat$incfs(r1, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x80) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSCOMPRESS(r3, 0x4010744d) write$tcp_congestion(r1, &(0x7f0000000040)='illinois\x00', 0x9) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0xc058671e, &(0x7f00000000c0)) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="050000000000000008000080030000000300000003000000080000000000000008000000000000000000000000000000000000800700000000000000df000000fcffc6658c04ffff0000000004000000000000000000000000000000190000800101000000000000a20000001400000000000100d06500000000000000000000000000000b000000000000000100000001000000020000008000000006000000000000000000000000000000000000c001070000000000000800000049000000070000000e00"/212]) 2m11.327383916s ago: executing program 3 (id=817): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) write(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) preadv2(r2, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x1, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_uid}, {@privport}, {@afid={'afid', 0x3d, 0x8}}]}}) r6 = open(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) sendfile(r6, r0, 0x0, 0x80000000) 2m11.275721537s ago: executing program 3 (id=818): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x404c02, 0x0) (async, rerun: 64) mmap(&(0x7f00007e4000/0x3000)=nil, 0x3000, 0xc, 0x20011, 0xffffffffffffffff, 0xf648a000) (async, rerun: 64) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d44ebb40ec188832cf690102030109021b00010000000009040000010e01000009058103"], 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) timer_create(0x7, &(0x7f0000000100)={0x0, 0x28, 0x7, @tid=r0}, &(0x7f00000000c0)) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='.\x02\x00', 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async, rerun: 64) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 64) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m9.931773438s ago: executing program 3 (id=826): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000380)=0x5) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x2, 0x12) 2m9.889424449s ago: executing program 3 (id=827): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000006240), 0x42, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002180), 0xa0002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4020aeb2, &(0x7f0000000400)={0x0, 0xffffffffffffffff, 0xfffffffd}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10428, 0x0, 0x0, 0x0, 0x1000004}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000000)) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@seclabel}]}) 1m54.728041306s ago: executing program 32 (id=827): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000006240), 0x42, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002180), 0xa0002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4020aeb2, &(0x7f0000000400)={0x0, 0xffffffffffffffff, 0xfffffffd}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10428, 0x0, 0x0, 0x0, 0x1000004}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000000)) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@seclabel}]}) 1m24.93341323s ago: executing program 4 (id=1353): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r1 = socket(0x10, 0x2, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) (async) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x6, &(0x7f0000000080)=0x4, 0x4) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xc, 0x32, 0x0, 0xffffd000) (async) getsockopt$inet6_tcp_int(r4, 0x6, 0x6, 0x0, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (async) write(r1, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) (async) sendfile(r1, r0, &(0x7f0000000000)=0x1068000000000, 0x800) (async) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x800) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000840)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x14}, @flat=@weak_binder={0x77622a85, 0x0, 0x3}, @flat=@weak_binder={0x77622a85, 0x110a, 0x2}}, 0x0}, 0x400}], 0x50, 0x0, &(0x7f0000000300)="ae3f238d87e4ee9205d0842b529db2744ccf6892f6f65ebc4671b63de4ba15bd1a1533502e2a569d6aea8936ab051cf9bfc0d34c0581506339d94a60289c526d8168e83c2efd49c75aa9d82de77714ff"}) bind$inet6(r6, 0x0, 0x0) (async) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)) (async) recvmmsg(r6, &(0x7f0000006400)=[{{0x0, 0x0, 0x0}, 0xfff}], 0x1, 0x2, 0x0) (async) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m24.914626331s ago: executing program 4 (id=1354): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r3, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x7fffffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000035}, 0x8000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) openat(r4, &(0x7f0000000000)='./file0\x00', 0x800200, 0x181) ioctl$KVM_CREATE_VCPU(r4, 0x7706, 0x2) 1m24.863736922s ago: executing program 4 (id=1355): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=""/34, 0x22) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 1m24.863414582s ago: executing program 4 (id=1356): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x1, 0x7, 0x8, 0x8000000000000001}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x11) r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2179, 0x53, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x7, 0x2, 0x2}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000001300)={0x0, 0x22, 0x5, {[@global=@item_012={0x2, 0x1, 0x3, "8daf"}, @global=@item_012={0x1, 0x1, 0x4, ','}]}}, 0x0}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) 1m21.830648661s ago: executing program 4 (id=1378): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)={0x14, 0x42, 0x601, 0x0, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x800) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)={0x14, 0x42, 0x601, 0x0, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x800) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) 1m21.783833262s ago: executing program 4 (id=1380): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x1802, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) getpid() setns(0xffffffffffffffff, 0x24020000) mount_setattr(r1, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7, 0x0, 0x120000}, 0x20) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666703a"], 0xffdd) write$FUSE_INIT(r4, &(0x7f00000007c0)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x3c80c521, 0x3, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0xa4201f7e}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65be667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r8, 0x1, &(0x7f0000000780)=[&(0x7f0000000100)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x800, r7, &(0x7f00000000c0)='!', 0x1, 0x3000000000000000}]) socket$nl_netfilter(0x10, 0x3, 0xc) dup3(0xffffffffffffffff, r6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r3, 0xa81ab000) dup3(r2, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000840), 0xfffffffffffffd1c, 0x0, 0x0}) 1m6.706193722s ago: executing program 33 (id=1380): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x1802, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) getpid() setns(0xffffffffffffffff, 0x24020000) mount_setattr(r1, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7, 0x0, 0x120000}, 0x20) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666703a"], 0xffdd) write$FUSE_INIT(r4, &(0x7f00000007c0)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x3c80c521, 0x3, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0xa4201f7e}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r8, 0x1, &(0x7f0000000780)=[&(0x7f0000000100)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x800, r7, &(0x7f00000000c0)='!', 0x1, 0x3000000000000000}]) socket$nl_netfilter(0x10, 0x3, 0xc) dup3(0xffffffffffffffff, r6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r3, 0xa81ab000) dup3(r2, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000840), 0xfffffffffffffd1c, 0x0, 0x0}) 5.264074296s ago: executing program 0 (id=2575): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x6, 0x24, &(0x7f00000016c0)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.664557568s ago: executing program 0 (id=2616): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000040)={0x0, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)=ANY=[@ANYRES64, @ANYRES32=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x200a, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) statx(r1, &(0x7f0000000200)='./file0\x00', 0x300, 0x4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@local, @in6=@ipv4={""/10, ""/2, @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@private1}}, &(0x7f0000000540)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) r7 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0xffffffffffffffff, r8, r8) setregid(r8, r8) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getegid() getgroups(0x9, &(0x7f0000000700)=[0xee01, 0x0, 0xee00, 0xee00, 0xffffffffffffffff, 0xee00, 0x0, 0x0, 0xee01]) r12 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000005140)={0x0, 0x0, 0x0}, &(0x7f0000005180)=0xc) setgid(r13) read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getresgid(&(0x7f0000000740), &(0x7f0000000780)=0x0, &(0x7f00000007c0)) fsetxattr$system_posix_acl(r1, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000800)={{}, {0x1, 0x4378253cb278df54}, [{0x2, 0x2, r3}, {0x2, 0x1, r4}, {0x2, 0x2, r5}], {0x4, 0x7}, [{0x8, 0x2, r6}, {0x8, 0x4, r8}, {0x8, 0x2, r9}, {0x8, 0x2, r10}, {0x8, 0x0, r11}, {0x8, 0x1, r13}, {0x8, 0x3, r14}, {0x8, 0x1, r15}], {0x10, 0x1}, {0x20, 0x1}}, 0x7c, 0x1) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') sendfile(r2, r16, 0x0, 0x80000000) 2.643932138s ago: executing program 0 (id=2617): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, 0x0, 0x43) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x26052, r0, 0xfffff000) 2.629863578s ago: executing program 0 (id=2618): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r0, 0xf648a000) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) ptrace$poke(0x4, 0xffffffffffffffff, &(0x7f0000000080), 0xfffffffffffffff8) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x43, 0x0, 0x0) syz_clone(0x400e0500, &(0x7f0000001180)="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", 0x1000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)="a2f1379ca2c03051f0fbd9") renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='.\x02\x00', 0x4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) io_setup(0x9, &(0x7f00000003c0)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000140), &(0x7f00000004c0)={0x0, 0xfb, 0x10f, 0x5, 0x2, "031e7bb7d307408182a2406e50947ef4", "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"}, 0x10f, 0x0) io_submit(r2, 0x1, &(0x7f0000002940)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x7fff, r3, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0xccf73530754b2b5a}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@index_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x23f) mlock(&(0x7f0000a4f000/0x2000)=nil, 0x2000) 2.54780794s ago: executing program 0 (id=2619): mount(&(0x7f0000000000)=@rnullb, 0x0, 0x0, 0x220000, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kheaders.tar.xz', 0x141a82, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) 2.54721205s ago: executing program 0 (id=2620): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000102505a1a440000000014baf54cb32b332e80004090400001002060000042406000005240000000d240f0100040000000000000109058202008200000009050302fffaff0000"], 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x80) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) 1.030598914s ago: executing program 2 (id=2644): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r2) pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) splice(r5, 0x0, r4, 0x0, 0x1, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$FUSE_BMAP(r6, &(0x7f0000000180)={0x18}, 0x18) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x13, r1, 0x8159e000) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000002a80)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@ignoreqv}, {@noxattr}, {@cache_mmap}, {@access_client}]}}) r7 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r7, r0, 0x0, 0x80000000) 986.358035ms ago: executing program 2 (id=2645): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109023b000101000004090400001002060000042406000005240000000d240f0100040000000000000109058202000200000009050302ff03010000"], 0x0) (async) sendmsg$key(0xffffffffffffffff, 0x0, 0x80) (async) close_range(r0, r1, 0x0) (async) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) (async) ptrace$getregset(0x4204, r2, 0x1, &(0x7f0000000040)={0x0}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x0, 0xe7) fcntl$getownex(r3, 0x10, &(0x7f0000003640)) (async) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) 923.013325ms ago: executing program 1 (id=2647): symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$netlink(0x10, 0x3, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_MOVE(r1, 0xc028aa05, &(0x7f0000000240)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000072000/0x4000)=nil, 0x3000, 0x3}) read$FUSE(r0, &(0x7f00000102c0)={0x2020, 0x0, 0x0}, 0xfffffe5d) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x2f, r3, {0x7, 0x2b, 0x0, 0x1000, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}}, 0x50) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) 547.559241ms ago: executing program 5 (id=2652): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x300, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) timer_create(0x4, 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x8, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 544.212831ms ago: executing program 5 (id=2653): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = socket(0x1e, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x9, 0x0, &(0x7f0000000040)) (async) connect$tipc(r1, &(0x7f0000000040)=@id, 0x10) (async) recvmmsg(r1, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/102, 0x66}], 0x1, &(0x7f0000000600)=""/214, 0xd6}, 0x4}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000580)=""/59, 0x3b}], 0x1}, 0x7}], 0x2, 0x0, 0x0) (async) shutdown(r1, 0x2) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/205, 0xcd, 0x1, 0x22}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x10b, 0x3}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}}], 0x50, 0x0, &(0x7f00000001c0)="de547e22bade76f1a03b79e954ee200001000047218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x101301) r4 = userfaultfd(0x80001) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r5, 0x29, 0x3d, 0x0, &(0x7f00000000c0)) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x458}) (async) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) (async) ioctl$UFFDIO_COPY(r4, 0xc028aa05, 0x0) (async) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x91) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x3ef, 0x0) (async) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f0000000000)=0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 495.716192ms ago: executing program 5 (id=2654): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0}) 495.031242ms ago: executing program 5 (id=2655): unshare(0x2040400) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000000000000141000000030017"], 0x34}}, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000a40)={'erspan0\x00', 0x0}) (rerun: 32) sendto$packet(r7, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'wg0\x00', 0x0}) bind$packet(r9, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x6, 0x6, @remote}, 0x14) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r11, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @private0={0xfc, 0x0, '\x00', 0x3}, 0x1, 0x6, 0x0, 0x100, 0x6, 0x580107, r13}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) r15 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r16, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched_retired(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r17, {0x10}, {0x6, 0xfff1}, {0xfff1, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r5, @ANYBLOB="00022cbd7000ffdbdf251300000060000180080003000100000008000300030000000800033fba93ed000800030002000000080001007fe8ea4e2429300e96a71106fc1ee7e65fb20c0e47a4c11f8c318a9ec49f97be47ad7856a5accc2d8174a364c0b641c9e326ef075d06c45fcfc0a1acf8ce10fcecce642689a4601bdf2a5ef2261bd032262325ade750c49c9d349004f6592c300c51ca4816abc87fe1", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="080003000200000014000200626f6e645f736c6176655f310000000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="1c0001800800030002000000080003000300000008000100", @ANYRES32=r14, @ANYBLOB="44000180080003000200000008000100", @ANYRES32=r17, @ANYBLOB="080003000100000008000300000000000800030002000000080003000200000008000300010000000800030000000000"], 0xd4}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 493.034902ms ago: executing program 5 (id=2656): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffe63}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x6, 0x29c081) ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f0000000100)) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x24a, 0xfff, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1f9) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) dup(r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) fcntl$notify(r2, 0x402, 0x80000010) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x2}) 488.622092ms ago: executing program 5 (id=2657): fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2179, 0x53, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x8}}}}}]}}]}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6(0xa, 0x4, 0xa) r1 = socket$netlink(0x10, 0x3, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x3c) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x805, 0x0, 0x0) setresuid(0xee00, 0x0, 0x0) keyctl$session_to_parent(0x12) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001200)={0x28, 0x10, 0x1, 0x2, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x10, 0x0, 0x0, @fd=r1}]}, 0x28}], 0x1}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000001300)={0x0, 0x22, 0x5, {[@global=@item_012={0x2, 0x1, 0x3, "8daf"}, @global=@item_012={0x1, 0x1, 0x4, ','}]}}, 0x0}, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 474.004023ms ago: executing program 2 (id=2658): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x2, r3}, 0x10) recvmmsg(r1, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}, 0x80000001}], 0x1, 0x2041, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x80, 0x0, &(0x7f0000000140)=[@request_death={0x400c630e, 0x2}, @increfs_done={0x40106308, 0x2}, @decrefs={0x40046307, 0x2}, @clear_death, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0xa, 0x1, 0x10}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000100)={0x0, 0x18, 0x38}}}], 0x1e, 0x0, &(0x7f00000001c0)="95183ee8485eb5bd7adafa6011beb3a8cb21b1c54b6383812aea4d4b1c00"}) 417.452753ms ago: executing program 2 (id=2659): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000080)={0x3, 'vlan1\x00', {0x200}, 0xfff}) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000340)="baf80c66b8608bb68466efbafc0c66ed0f9d5a0d440f20c066350f000000440f22c0640f381eb514000f01c2650f932b66b9c70900000f32640f320f0865360f30", 0x41}], 0x1, 0x12, &(0x7f0000000240), 0x0) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000140)={0x5, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000340000/0x1000)=nil, &(0x7f0000152000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ec1000/0x3000)=nil, &(0x7f0000ff0000/0x3000)=nil, 0x0}, 0x68) syz_io_uring_setup(0x37e2, &(0x7f0000000040)={0x0, 0xf527, 0x4000, 0x1, 0x323}, 0x0, 0x0) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000200)=0x0) r9 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000040)={0x800000, r9}) close_range(r0, 0xffffffffffffffff, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000100)={[0x7, 0x31d, 0x9, 0x5, 0x97, 0x4, 0xffffffff00000001, 0x7, 0x9, 0x6aa7, 0xa, 0x956, 0x1ff, 0xfffffffffffffffd, 0x0, 0x8], 0xffffc000, 0x880}) 416.807034ms ago: executing program 2 (id=2660): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xea200, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000003c0)="66b9800000c00f326635004000000f300f00d636808a0d0001ba4300b80b00ef66b88c5000000f23d00f21f866352000000e0f23f80f01c30f789deb32660f3a21cf220f2bb00058660f1bde", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0xa09ab000) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x18, &(0x7f0000000100)=0xc, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="0b0368002e0064000200475400f6a13bb1000000086086dd6558", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r7}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x4, 0x9, 0x6a, 0x7, 0x1a, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x10, 0x1000, 0x8}}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) (async) r10 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r12 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c5042, 0x0) ioctl$BLKZEROOUT(r12, 0x127f, &(0x7f0000000040)={0x8000000, 0x8000}) (async) setsockopt$inet6_IPV6_PKTINFO(r10, 0x29, 0x32, &(0x7f0000000080)={@private0, r11}, 0x14) r13 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r13, &(0x7f0000000080)={0x1d, r14}, 0x10) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000002c0)={@private1, 0x0}, &(0x7f0000000300)=0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x9ac956d92870e754}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="ae6a2d05", @ANYRES16=r5, @ANYBLOB="000025bd7000fedbdf25130000004000018008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="140002006970365f76746930000000000000000008000100", @ANYRES32=r14, @ANYBLOB="9c000180140002006261746164763000000000000000000014000200626f6e645f736c6176655f3100000000140002006e7230000000000000000000000000001400020070696d72656700000000000000000000080003000000000008000300030000001400020062726964676530000000000000000000080003000100000008000100", @ANYRES32=r15, @ANYBLOB="14000200766c616e3000"/20], 0xf0}, 0x1, 0x0, 0x0, 0x64845}, 0x14) 415.404643ms ago: executing program 2 (id=2661): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) (async, rerun: 32) r1 = socket(0x10, 0x3, 0x0) (rerun: 32) write(r1, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021d00ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) (async, rerun: 64) pselect6(0x40, &(0x7f0000000200)={0x9, 0x93, 0x80000001, 0x0, 0x6200000000000000, 0x4, 0xb, 0x7fff}, 0x0, 0x0, 0x0, 0x0) (rerun: 64) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @flat=@weak_binder={0x77622a85, 0x10a, 0x80000003}}, 0x0}}], 0x0, 0x0, 0x0}) 71.823699ms ago: executing program 1 (id=2662): r0 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f0000000040)={0x581b49a534dc0228}, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x4, 0xc}) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000001040)=0x2, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f00000000c0)=0x4, 0xd) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='\a\x00\x00\x00\x00\x00\x00t=unconfined_u,\x00\x00']) 71.475599ms ago: executing program 1 (id=2663): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x1) (async) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000022c0), 0xa02, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f0000000140)={0x81, 0x0, 0x2}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) bind$bt_hci(r3, &(0x7f0000000000)={0x27, 0x4, 0x6}, 0x6) 70.646529ms ago: executing program 1 (id=2664): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) r4 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000002a80)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@ignoreqv}, {@noxattr}, {@cache_mmap}, {@access_client}]}}) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x800448d2, &(0x7f0000000140)={0x2, &(0x7f0000000400)=[{}, {}]}) r6 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r6, r0, 0x0, 0x80000000) 34.323029ms ago: executing program 1 (id=2665): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x40343, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x2}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4d27acd9d8", @ANYRES16=0x0, @ANYBLOB="04002dbd7000fcdbdf25050000000c0002000700000000000000"], 0x20}, 0x1, 0x0, 0x0, 0xc800}, 0x20000000) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r2) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), r2) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYRES16=r3], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats\x00') r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r9, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) syz_pidfd_open(0xffffffffffffffff, 0x0) r10 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/rcu_expedited', 0x169a82, 0x109) fsconfig$FSCONFIG_SET_PATH(r11, 0x3, &(0x7f00000023c0)='fscrypt:', &(0x7f0000002400)='./file0\x00', r11) r12 = fsmount(r10, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r12}}, 0x58) r13 = fsopen(&(0x7f0000000040)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r13, 0x6, 0x0, 0x0, 0x0) r14 = fsmount(r13, 0x1, 0x1) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r4, @ANYBLOB="00022cbd7000fcdbdf25010000000c00020002aa0000000000007c0007800c00018008000100", @ANYRES32=r5, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="0c00018008000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32=r8, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32=r9, @ANYBLOB="0c00018008000100", @ANYRES32=r12, @ANYBLOB="0c00018008000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32=r11, @ANYBLOB="0c00018008000100", @ANYRES32=r14, @ANYBLOB="0c0008000700000000000000100007800c00018008000100", @ANYRES32=r1, @ANYBLOB="0c000300cb36000000000000"], 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0xbdc2689c0bfdd851) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) sched_setscheduler(0x0, 0x2, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/power/pm_async', 0x0, 0x18) 0s ago: executing program 1 (id=2666): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mkdir(0x0, 0x3) socket$netlink(0x10, 0x3, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xfc) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2, 0x24, 0x3}, 0x18) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f00000010c0)={{0x12, 0x1, 0x310, 0x17, 0x95, 0xb5, 0x40, 0xca6, 0xa050, 0x6f49, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x2, 0x40, 0x3, 0x0, 0x9, [{{0x9, 0x4, 0x13, 0x0, 0x0, 0xa9, 0x68, 0x3f, 0x6}}, {{0x9, 0x4, 0x52, 0x3, 0x0, 0xe, 0x1, 0x0, 0xb3, [@uac_as, @uac_as={[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xf801, 0x1, 0x5a}]}]}}]}}]}}, &(0x7f0000001b00)={0xa, &(0x7f0000001880)={0xa, 0x6, 0x200, 0xa7, 0x5, 0xe9, 0x8, 0x8}, 0x19, &(0x7f00000018c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "1109b719c41fcc7e8fdc3e3561643c03"}]}, 0x5, [{0x4, &(0x7f0000001900)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f0000001940)=@lang_id={0x4, 0x3, 0xc07}}, {0x2, &(0x7f0000001980)=@string={0x2}}, {0x4, &(0x7f00000019c0)=@lang_id={0x4, 0x3, 0x416}}, {0x0, 0x0}]}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002800)={0xaa, 0x26}) syz_usb_connect$cdc_ncm(0x4, 0x70, &(0x7f0000002840)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x1, 0xa, 0x40, 0xc, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "e5d2"}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xd2e, 0x6, 0xc}, {0x6, 0x24, 0x1a, 0x3, 0x20}}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x6, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x1, 0x4, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0x5, 0xff}}}}}}}]}}, &(0x7f0000002c80)={0xa, &(0x7f0000002900)={0xa, 0x6, 0x1, 0xfe, 0x80, 0x6, 0xff}, 0x27, &(0x7f0000002940)={0x5, 0xf, 0x27, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x6, 0x4, 0x1, 0xc, 0x53}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "1dcd0bddf34c6f4f59cf59add342a33c"}]}, 0x5, [{0x0, 0x0}, {0x4, &(0x7f0000002ac0)=@lang_id={0x4, 0x3, 0x401}}, {0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000002c00)=@lang_id={0x4, 0x3, 0x421}}]}) splice(0xffffffffffffffff, &(0x7f0000003100)=0xffffffffffff8000, r2, &(0x7f0000003140)=0xfffffffffffff000, 0xd5d, 0xd) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000200)="ac", 0xfffffdef}], 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): for pid=3913 comm="syz.4.1075" name="file2" dev="tmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 108.054908][ T3914] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 108.062693][ T36] audit: type=1400 audit(1753801260.300:64387): avc: denied { open } for pid=3913 comm="syz.4.1075" path="/31/file2" dev="tmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 108.096934][ T3914] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 108.117395][ T3914] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:94 [ 108.118113][ T36] audit: type=1400 audit(1753801260.300:64388): avc: denied { ioctl } for pid=3913 comm="syz.4.1075" path="/31/file2" dev="tmpfs" ino=177 ioctlcmd=0x127b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 108.134473][ T3917] incfs_lookup_dentry err:-13 [ 108.166800][ T3917] incfs: Can't find or create .index dir in ./bus [ 108.174248][ T3917] incfs: mount failed -13 [ 108.185302][ T31] rust_binder: 3913: removing orphan mapping 0:1048 [ 108.200921][ T3924] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:97 [ 108.229837][ T3931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=3931 comm=syz.1.1081 [ 108.251920][ T3931] netlink: 'syz.1.1081': attribute type 15 has an invalid length. [ 108.261882][ T3931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1081'. [ 108.402663][ T3938] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 108.402681][ T3938] rust_binder: Error while translating object. [ 108.411393][ T3938] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 108.417597][ T3938] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:106 [ 108.470901][ T422] usb 1-1: USB disconnect, device number 25 [ 108.482422][ T3945] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1086'. [ 108.496979][ T3945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1086'. [ 108.570295][ T3950] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.571966][ T3950] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch [ 108.587313][ T3950] rust_binder: Write failure EFAULT in pid:611 [ 108.594777][ T3953] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.617834][ T3955] 9pnet: Could not find request transport: fjp+0x0000000000000048 [ 108.691259][ T914] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 108.747290][ T3969] 9pnet_fd: Insufficient options for proto=fd [ 108.806908][ T3978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1096'. [ 108.821258][ T914] usb 5-1: device descriptor read/64, error -71 [ 108.991222][ T422] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 109.071265][ T914] usb 5-1: device descriptor read/64, error -71 [ 109.141291][ T422] usb 1-1: Using ep0 maxpacket: 8 [ 109.147631][ T422] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.157646][ T422] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 109.166824][ T422] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.175688][ T422] usb 1-1: config 0 descriptor?? [ 109.311384][ T914] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 109.441250][ T914] usb 5-1: device descriptor read/64, error -71 [ 109.583142][ T422] hid-multitouch 0003:0EEF:72C4.000C: unknown main item tag 0x0 [ 109.592318][ T422] hid-multitouch 0003:0EEF:72C4.000C: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.0-1/input0 [ 109.681271][ T914] usb 5-1: device descriptor read/64, error -71 [ 109.791387][ T914] usb usb5-port1: attempt power cycle [ 109.881962][ T31] usb 1-1: USB disconnect, device number 26 [ 110.131291][ T914] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 110.152290][ T914] usb 5-1: device descriptor read/8, error -71 [ 110.285820][ T914] usb 5-1: device descriptor read/8, error -71 [ 110.291543][ T4023] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 110.292466][ T4024] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 110.531344][ T914] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 110.552669][ T914] usb 5-1: device descriptor read/8, error -71 [ 110.629629][ T4051] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 110.630367][ T4051] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:641 [ 110.682295][ T914] usb 5-1: device descriptor read/8, error -71 [ 110.801367][ T914] usb usb5-port1: unable to enumerate USB device [ 110.821053][ T4053] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 110.829913][ T4053] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 110.897747][ T4069] overlayfs: failed to clone upperpath [ 110.952946][ T4079] x_tables: unsorted entry at hook 1 [ 110.960142][ T36] audit: type=1400 audit(1753801263.190:64389): avc: denied { setopt } for pid=4078 comm="syz.2.1131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 110.995054][ T4084] netlink: 'syz.2.1133': attribute type 4 has an invalid length. [ 111.002865][ T4084] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1133'. [ 111.024370][ T4086] overlay: ./file1 is not a directory [ 111.064933][ T4100] batadv_slave_0: mtu less than device minimum [ 111.419978][ T4102] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 111.534427][ T4109] rust_binder: 116: no such ref 0 [ 111.546375][ T4109] rust_binder: Write failure EINVAL in pid:116 [ 111.606735][ T4130] rust_binder: 4111 RLIMIT_NICE not set [ 111.630294][ T4129] !@: renamed from xfrm0 (while UP) [ 111.638616][ T4136] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:125 [ 111.703721][ T36] audit: type=1326 audit(1753801263.940:64390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4137 comm="syz.4.1152" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f302538e9a9 code=0x0 [ 112.001244][ T31] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 112.152269][ T31] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 112.163446][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 112.170068][ T31] usb 5-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice=20.00 [ 112.179382][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.188007][ T31] usb 5-1: config 0 descriptor?? [ 112.253070][ T36] audit: type=1400 audit(1753801264.490:64391): avc: denied { read } for pid=4178 comm="syz.1.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 112.353303][ T4184] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.353325][ T4185] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.373792][ T4188] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.373817][ T4189] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.380574][ T4188] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 112.387086][ T4188] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:654 [ 113.083701][ T4236] __vm_enough_memory: pid: 4236, comm: syz.1.1183, bytes: 21199850430464 not enough memory for the allocation [ 113.098294][ T4237] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 113.120019][ T4239] overlayfs: cannot append lower layer [ 113.127324][ T36] audit: type=1400 audit(1753801265.360:64392): avc: denied { accept } for pid=4238 comm="syz.1.1184" path="socket:[23618]" dev="sockfs" ino=23618 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 113.241258][ T31] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 113.294761][ T36] audit: type=1400 audit(1753801265.530:64393): avc: denied { bind } for pid=4250 comm="syz.2.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 113.371539][ T31] usb 1-1: device descriptor read/64, error -71 [ 113.474090][ T4276] 9pnet_fd: Insufficient options for proto=fd [ 113.518235][ T36] audit: type=1400 audit(1753801265.750:64394): avc: denied { read } for pid=4293 comm="syz.2.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.518342][ T4294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1202'. [ 113.621302][ T31] usb 1-1: device descriptor read/64, error -71 [ 113.682245][ T36] audit: type=1400 audit(1753801265.920:64395): avc: denied { listen } for pid=4309 comm="syz.1.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 113.871264][ T31] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 114.001256][ T31] usb 1-1: device descriptor read/64, error -71 [ 114.241240][ T31] usb 1-1: device descriptor read/64, error -71 [ 114.351311][ T31] usb usb1-port1: attempt power cycle [ 114.691232][ T31] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 114.712413][ T31] usb 1-1: device descriptor read/8, error -71 [ 114.765548][ T45] usb 5-1: USB disconnect, device number 6 [ 114.850351][ T31] usb 1-1: device descriptor read/8, error -71 [ 115.091280][ T31] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 115.132212][ T31] usb 1-1: device descriptor read/8, error -71 [ 115.144378][ T36] audit: type=1400 audit(1753801267.380:64396): avc: denied { ioctl } for pid=4352 comm="syz.1.1223" path="socket:[23740]" dev="sockfs" ino=23740 ioctlcmd=0x5419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 115.176032][ T4358] overlayfs: failed to clone upperpath [ 115.262341][ T31] usb 1-1: device descriptor read/8, error -71 [ 115.284087][ T4373] netlink: 'syz.2.1229': attribute type 3 has an invalid length. [ 115.291936][ T4373] netlink: 944 bytes leftover after parsing attributes in process `syz.2.1229'. [ 115.371318][ T31] usb usb1-port1: unable to enumerate USB device [ 115.624216][ T4377] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=4377 comm=syz.4.1231 [ 115.639588][ T4377] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1231'. [ 115.650864][ T4377] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1231'. [ 115.711781][ T36] audit: type=1326 audit(1753801267.950:64397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4378 comm="syz.4.1232" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f302538e9a9 code=0x0 [ 115.782798][ T4380] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 115.853660][ T4391] netlink: 'syz.2.1237': attribute type 6 has an invalid length. [ 115.861491][ T4391] netlink: 'syz.2.1237': attribute type 4 has an invalid length. [ 115.869243][ T4391] netlink: 'syz.2.1237': attribute type 6 has an invalid length. [ 115.877027][ T4391] netlink: 'syz.2.1237': attribute type 13 has an invalid length. [ 115.884907][ T4391] netlink: 'syz.2.1237': attribute type 15 has an invalid length. [ 115.892786][ T4391] netlink: 'syz.2.1237': attribute type 19 has an invalid length. [ 115.900670][ T4391] netlink: 3684 bytes leftover after parsing attributes in process `syz.2.1237'. [ 115.959919][ T4398] netlink: 'syz.2.1240': attribute type 29 has an invalid length. [ 115.967876][ T4398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1240'. [ 116.096922][ T4415] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 116.256182][ T36] audit: type=1400 audit(1753801268.490:64398): avc: denied { append } for pid=4432 comm="syz.0.1251" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 116.404194][ T4445] random: crng reseeded on system resumption [ 116.423306][ T4445] /dev/loop0: Can't lookup blockdev [ 116.448651][ T4449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 116.448740][ T4449] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:699 [ 116.532767][ T4471] overlayfs: failed to resolve './file1': -2 [ 116.609672][ T4479] rust_binder: Write failure EFAULT in pid:145 [ 116.948975][ T4505] overlayfs: failed to resolve './file1': -2 [ 117.001213][ T361] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 117.161199][ T361] usb 1-1: Using ep0 maxpacket: 16 [ 117.167571][ T361] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 117.179092][ T361] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.192203][ T361] usb 1-1: New USB device found, idVendor=056a, idProduct=0090, bcdDevice= 0.00 [ 117.201459][ T361] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.211887][ T361] usb 1-1: config 0 descriptor?? [ 117.623408][ T361] wacom 0003:056A:0090.000D: item fetching failed at offset 3/5 [ 117.635583][ T361] wacom 0003:056A:0090.000D: parse failed [ 117.642621][ T361] wacom 0003:056A:0090.000D: probe with driver wacom failed with error -22 [ 117.820847][ T361] usb 1-1: USB disconnect, device number 31 [ 118.556145][ T4556] rust_binder: validate_parent_fixup: fixup_min_offset=50, parent_offset=36 [ 118.556174][ T4556] rust_binder: Error while translating object. [ 118.567570][ T4556] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 118.574207][ T4556] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:726 [ 118.584074][ T4558] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 118.604933][ T4563] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 118.641248][ T4558] overlayfs: missing 'lowerdir' [ 118.763079][ T4580] 9pnet_fd: Insufficient options for proto=fd [ 118.783763][ T4578] overlayfs: failed to clone upperpath [ 118.845654][ T36] audit: type=1400 audit(1753801271.080:64399): avc: denied { create } for pid=4593 comm="syz.2.1307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 118.882905][ T36] audit: type=1400 audit(1753801271.120:64400): avc: denied { getopt } for pid=4596 comm="syz.2.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 118.938679][ T4606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1311'. [ 119.120677][ T36] audit: type=1400 audit(1753801271.350:64401): avc: denied { add_name } for pid=4607 comm="syz.1.1312" name="file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 119.120895][ T36] audit: type=1400 audit(1753801271.350:64402): avc: denied { create } for pid=4607 comm="syz.1.1312" name="file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 119.608172][ T4622] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.700117][ T4623] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:739 [ 119.757724][ T4626] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.775421][ T4630] IPv6: NLM_F_CREATE should be specified when creating new route [ 119.841587][ T36] audit: type=1400 audit(1753801272.080:64403): avc: denied { create } for pid=4648 comm="syz.2.1325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 119.936955][ T4665] 9pnet_fd: Insufficient options for proto=fd [ 119.964490][ T4670] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8208 sclass=netlink_xfrm_socket pid=4670 comm=syz.2.1325 [ 120.045970][ T4681] overlayfs: failed to clone upperpath [ 120.231239][ T422] usb 1-1: new low-speed USB device number 32 using dummy_hcd [ 120.236792][ T4712] netlink: 'syz.1.1347': attribute type 4 has an invalid length. [ 120.238780][ T36] audit: type=1400 audit(1753801272.470:64404): avc: denied { shutdown } for pid=4711 comm="syz.1.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 120.246662][ T4712] netlink: 'syz.1.1347': attribute type 21 has an invalid length. [ 120.274876][ T4712] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1347'. [ 120.412642][ T422] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 120.420292][ T422] usb 1-1: can't read configurations, error -61 [ 120.551239][ T422] usb 1-1: new low-speed USB device number 33 using dummy_hcd [ 120.602506][ T36] audit: type=1400 audit(1753801272.840:64405): avc: denied { create } for pid=4723 comm="syz.4.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 120.712632][ T422] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 120.720288][ T422] usb 1-1: can't read configurations, error -61 [ 120.726711][ T422] usb usb1-port1: attempt power cycle [ 120.961228][ T914] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 121.071250][ T422] usb 1-1: new low-speed USB device number 34 using dummy_hcd [ 121.092910][ T422] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 121.100565][ T422] usb 1-1: can't read configurations, error -61 [ 121.112297][ T914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.122210][ T914] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 121.135213][ T914] usb 5-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 121.144286][ T914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.153367][ T914] usb 5-1: config 0 descriptor?? [ 121.231262][ T422] usb 1-1: new low-speed USB device number 35 using dummy_hcd [ 121.253074][ T422] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 121.260694][ T422] usb 1-1: can't read configurations, error -61 [ 121.267097][ T422] usb usb1-port1: unable to enumerate USB device [ 121.560391][ T914] uclogic 0003:2179:0053.000E: interface is invalid, ignoring [ 121.858457][ T4753] netlink: 'syz.1.1361': attribute type 4 has an invalid length. [ 121.866402][ T4753] netlink: 'syz.1.1361': attribute type 6 has an invalid length. [ 121.874292][ T4753] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1361'. [ 121.885585][ T4753] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 123.093423][ T4795] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.093881][ T4795] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:768 [ 123.711541][ T914] usb 5-1: USB disconnect, device number 7 [ 123.732904][ T4799] overlayfs: failed to clone upperpath [ 123.862286][ T4818] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.1384'. [ 123.948229][ T36] audit: type=1400 audit(1753801276.180:64406): avc: denied { validate_trans } for pid=4823 comm="syz.0.1386" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 124.843474][ T4853] fuse: Bad value for 'fd' [ 124.951205][ T914] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 125.101194][ T914] usb 1-1: Using ep0 maxpacket: 16 [ 125.107473][ T914] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.117968][ T914] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 125.131943][ T914] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 125.141538][ T914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 125.149565][ T914] usb 1-1: SerialNumber: syz [ 125.156369][ T914] usb 1-1: bad CDC descriptors [ 125.357750][ T10] usb 1-1: USB disconnect, device number 36 [ 125.876636][ T4880] fuse: Bad value for 'fd' [ 125.939014][ T4884] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 125.947143][ T4884] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 125.955714][ T4884] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 125.963845][ T4884] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 126.739392][ T4910] rust_binder: Write failure EINVAL in pid:779 [ 126.755020][ T4914] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 126.864881][ T4914] rust_binder: 783: no such ref 2 [ 127.360847][ T4920] 9pnet_fd: Insufficient options for proto=fd [ 127.742825][ T4929] fuse: Bad value for 'fd' [ 127.804042][ T4930] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 127.812115][ T4930] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 127.820549][ T4930] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 127.828745][ T4930] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 128.049192][ T4948] 9pnet_fd: p9_fd_create_unix (4948): problem connecting socket: ./file0: -111 [ 128.810092][ T4961] block device autoloading is deprecated and will be removed. [ 128.818334][ T36] audit: type=1400 audit(1753801281.050:64407): avc: denied { map } for pid=4960 comm="syz.0.1439" path="/257/file2" dev="tmpfs" ino=1450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 128.841656][ T36] audit: type=1400 audit(1753801281.050:64408): avc: denied { read execute } for pid=4960 comm="syz.0.1439" path="/257/file2" dev="tmpfs" ino=1450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 129.201210][ T914] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 129.331214][ T914] usb 1-1: device descriptor read/64, error -71 [ 129.571213][ T914] usb 1-1: device descriptor read/64, error -71 [ 129.624825][ T4971] 9pnet_fd: Insufficient options for proto=fd [ 129.811248][ T914] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 129.941239][ T914] usb 1-1: device descriptor read/64, error -71 [ 130.181218][ T914] usb 1-1: device descriptor read/64, error -71 [ 130.291342][ T914] usb usb1-port1: attempt power cycle [ 130.641222][ T914] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 130.662279][ T914] usb 1-1: device descriptor read/8, error -71 [ 130.792250][ T914] usb 1-1: device descriptor read/8, error -71 [ 131.031244][ T914] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 131.052226][ T914] usb 1-1: device descriptor read/8, error -71 [ 131.136561][ T4987] 9pnet_fd: Insufficient options for proto=fd [ 131.182263][ T914] usb 1-1: device descriptor read/8, error -71 [ 131.291292][ T914] usb usb1-port1: unable to enumerate USB device [ 132.150964][ T5018] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370 [ 132.308092][ T5028] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 132.308707][ T5028] rust_binder: Error while translating object. [ 132.315697][ T5028] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 132.322623][ T5028] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:820 [ 132.554695][ T5042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=5042 comm=syz.1.1469 [ 132.577513][ T5042] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1469'. [ 132.597354][ T36] audit: type=1400 audit(1753801284.830:64409): avc: denied { ioctl } for pid=5046 comm="syz.0.1470" path="socket:[26908]" dev="sockfs" ino=26908 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 132.601551][ T5049] overlayfs: failed to clone upperpath [ 133.189827][ T5060] fuse: Bad value for 'fd' [ 133.194766][ T36] audit: type=1400 audit(1753801285.440:64410): avc: denied { relabelfrom } for pid=5061 comm="syz.1.1476" name="" dev="pipefs" ino=26929 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 133.195016][ T5060] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1474'. [ 133.352015][ T5067] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 133.360103][ T5067] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 133.368526][ T5067] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 133.376541][ T5067] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 133.741458][ T5069] veth0_vlan: entered allmulticast mode [ 134.125165][ T5092] 9pnet_fd: Insufficient options for proto=fd [ 134.170222][ T5095] 9pnet_fd: Insufficient options for proto=fd [ 134.396703][ T5127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1501'. [ 134.406030][ T5127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1501'. [ 134.501245][ T914] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 134.652304][ T914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.662241][ T914] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 134.675480][ T914] usb 1-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 134.684766][ T914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.695235][ T914] usb 1-1: config 0 descriptor?? [ 135.107524][ T914] uclogic 0003:2179:0053.000F: interface is invalid, ignoring [ 135.140811][ T5137] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1505'. [ 135.246672][ T5152] 9pnet_fd: Insufficient options for proto=fd [ 135.686926][ T5157] overlayfs: failed to clone upperpath [ 135.694069][ T5157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1512'. [ 135.729027][ T5161] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1514'. [ 136.428685][ T36] audit: type=1400 audit(1753801288.660:64411): avc: denied { create } for pid=5186 comm="syz.2.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 137.200280][ T914] usb 1-1: USB disconnect, device number 41 [ 137.212399][ T5210] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 137.319646][ T5212] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 137.326227][ T5212] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 137.334303][ T5212] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:852 [ 137.675062][ T5215] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1533'. [ 137.682784][ T36] audit: type=1400 audit(1753801289.920:64412): avc: denied { bind } for pid=5216 comm="syz.1.1534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 137.759276][ T5221] netlink: 'syz.1.1536': attribute type 6 has an invalid length. [ 137.767217][ T5221] IPv6: NLM_F_CREATE should be specified when creating new route [ 138.311200][ T422] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 138.413449][ T5260] 9pnet_fd: Insufficient options for proto=fd [ 138.472212][ T422] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.491252][ T422] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 138.511295][ T422] usb 1-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 138.530704][ T422] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.540792][ T36] audit: type=1400 audit(2000000000.200:64413): avc: denied { connect } for pid=5264 comm="syz.2.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 138.571617][ T422] usb 1-1: config 0 descriptor?? [ 138.582793][ T36] audit: type=1326 audit(2000000000.230:64414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5267 comm="syz.2.1548" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f464498e9a9 code=0x0 [ 138.699456][ T5275] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1551'. [ 138.823837][ T36] audit: type=1400 audit(2000000000.490:64415): avc: denied { setopt } for pid=5274 comm="syz.2.1551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 138.964567][ T5287] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.972972][ T5287] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.980236][ T5287] bridge_slave_0: entered allmulticast mode [ 138.981215][ T422] uclogic 0003:2179:0053.0010: interface is invalid, ignoring [ 138.998159][ T5287] bridge_slave_0: entered promiscuous mode [ 139.006836][ T5287] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.016209][ T5287] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.025547][ T5287] bridge_slave_1: entered allmulticast mode [ 139.032087][ T5287] bridge_slave_1: entered promiscuous mode [ 139.112530][ T5287] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.119716][ T5287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.127010][ T5287] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.134146][ T5287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.158125][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.165732][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.175831][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.182908][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.183722][ T422] usb 1-1: USB disconnect, device number 42 [ 139.199211][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.206322][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.237787][ T5287] veth0_vlan: entered promiscuous mode [ 139.253012][ T5287] veth1_macvtap: entered promiscuous mode [ 139.285764][ T36] audit: type=1400 audit(2000000000.950:64416): avc: denied { append } for pid=5314 comm="syz.5.1554" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 139.325206][ T5318] 9pnet_fd: p9_fd_create_unix (5318): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 139.429108][ T5333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1567'. [ 139.467050][ T5338] netlink: 'syz.1.1569': attribute type 64 has an invalid length. [ 139.489183][ T36] audit: type=1326 audit(2000000001.150:64417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5342 comm="syz.1.1570" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b5ed8e9a9 code=0x0 [ 139.635813][ T5353] 9pnet_fd: Insufficient options for proto=fd [ 139.655462][ T5355] overlayfs: failed to resolve './file1': -2 [ 139.682948][ T5359] fuse: Unknown parameter '' [ 139.682948][ T36] audit: type=1400 audit(2000000001.350:64418): avc: denied { mounton } for pid=5358 comm="syz.5.1576" path="/8/file0" dev="ramfs" ino=28066 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 139.770233][ T36] audit: type=1400 audit(2000000001.430:64419): avc: denied { remount } for pid=5372 comm="syz.5.1580" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 139.770725][ T5374] option changes via remount are deprecated (pid=5372 comm=syz.5.1580) [ 139.810788][ T5374] cgroup: option or name mismatch, new: 0x0 "none", old: 0x0 "" [ 139.835263][ T5381] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.835402][ T5381] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 139.842059][ T5381] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 139.855352][ T5381] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:873 [ 139.902260][ T5387] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 139.913470][ T5387] rust_binder: Read failure Err(EFAULT) in pid:33 [ 140.131235][ T361] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 140.292338][ T361] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.302173][ T361] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 140.315111][ T361] usb 1-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 140.324202][ T361] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.332981][ T361] usb 1-1: config 0 descriptor?? [ 140.432663][ T5395] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 140.455865][ T36] audit: type=1400 audit(2000000002.120:64420): avc: denied { mounton } for pid=5396 comm="syz.2.1590" path="/442/file0" dev="tmpfs" ino=2464 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 140.481094][ T5401] netlink: 'syz.2.1592': attribute type 12 has an invalid length. [ 140.673133][ T5417] syz.5.1595 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 140.745560][ T361] uclogic 0003:2179:0053.0011: interface is invalid, ignoring [ 140.942505][ T914] usb 1-1: USB disconnect, device number 43 [ 141.383629][ T5420] x_tables: unsorted underflow at hook 4 [ 141.407947][ T5429] overlayfs: failed to clone upperpath [ 141.426039][ T5435] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1602'. [ 141.430990][ T5432] rust_binder: Failed to allocate buffer. len:4256, is_oneway:true [ 141.435082][ T5432] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 141.443088][ T5432] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:46 [ 141.721217][ T361] usb 1-1: new low-speed USB device number 44 using dummy_hcd [ 141.861252][ T361] usb 1-1: device descriptor read/64, error -71 [ 141.891266][ T31] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 142.031277][ T31] usb 6-1: device descriptor read/64, error -71 [ 142.111263][ T361] usb 1-1: device descriptor read/64, error -71 [ 142.281192][ T31] usb 6-1: device descriptor read/64, error -71 [ 142.371255][ T361] usb 1-1: new low-speed USB device number 45 using dummy_hcd [ 142.500672][ T36] audit: type=1400 audit(2000000004.160:64421): avc: denied { listen } for pid=5468 comm="syz.1.1613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 142.521469][ T361] usb 1-1: device descriptor read/64, error -71 [ 142.521542][ T31] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 142.557169][ T5477] syz.1.1616 (5477): attempted to duplicate a private mapping with mremap. This is not supported. [ 142.586045][ T5483] netlink: 'syz.1.1618': attribute type 16 has an invalid length. [ 142.594143][ T5483] netlink: 'syz.1.1618': attribute type 3 has an invalid length. [ 142.602028][ T5483] netlink: 64058 bytes leftover after parsing attributes in process `syz.1.1618'. [ 142.671318][ T31] usb 6-1: device descriptor read/64, error -71 [ 142.761256][ T361] usb 1-1: device descriptor read/64, error -71 [ 142.871425][ T361] usb usb1-port1: attempt power cycle [ 142.911259][ T31] usb 6-1: device descriptor read/64, error -71 [ 143.021348][ T31] usb usb6-port1: attempt power cycle [ 143.145551][ T36] audit: type=1326 audit(2000000004.810:64422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5493 comm="syz.1.1622" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4b5ed8e9a9 code=0x0 [ 143.221229][ T361] usb 1-1: new low-speed USB device number 46 using dummy_hcd [ 143.242246][ T361] usb 1-1: device descriptor read/8, error -71 [ 143.371184][ T31] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 143.372276][ T361] usb 1-1: device descriptor read/8, error -71 [ 143.392343][ T31] usb 6-1: device descriptor read/8, error -71 [ 143.522214][ T31] usb 6-1: device descriptor read/8, error -71 [ 143.621222][ T361] usb 1-1: new low-speed USB device number 47 using dummy_hcd [ 143.642604][ T361] usb 1-1: device descriptor read/8, error -71 [ 143.772278][ T361] usb 1-1: device descriptor read/8, error -71 [ 143.781247][ T31] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 143.802376][ T31] usb 6-1: device descriptor read/8, error -71 [ 143.881311][ T361] usb usb1-port1: unable to enumerate USB device [ 143.932393][ T31] usb 6-1: device descriptor read/8, error -71 [ 144.041444][ T31] usb usb6-port1: unable to enumerate USB device [ 144.354033][ T5525] overlayfs: failed to clone upperpath [ 144.544909][ T5544] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 144.545089][ T5544] netlink: 'syz.0.1643': attribute type 12 has an invalid length. [ 144.612052][ T5545] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 144.612090][ T5545] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 144.620345][ T5545] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:886 [ 144.666924][ T5547] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 144.676586][ T5547] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:64 [ 144.891500][ T5571] 9pnet_fd: Insufficient options for proto=fd [ 144.900777][ T5573] rust_binder: Write failure EINVAL in pid:82 [ 144.971646][ T5586] fuse: Bad value for 'fd' [ 145.250811][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.257994][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.265382][ T5597] bridge_slave_0: entered allmulticast mode [ 145.272069][ T5597] bridge_slave_0: entered promiscuous mode [ 145.278804][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.286431][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.293818][ T5597] bridge_slave_1: entered allmulticast mode [ 145.300290][ T5597] bridge_slave_1: entered promiscuous mode [ 145.376975][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.384083][ T5597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.391389][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.398500][ T5597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.428807][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.438436][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.450655][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.457764][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.467274][ T5610] input: syz0 as /devices/virtual/input/input16 [ 145.476267][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.483353][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.518293][ T5612] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 145.518358][ T5612] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:893 [ 145.537130][ T5597] veth0_vlan: entered promiscuous mode [ 145.559740][ T5597] veth1_macvtap: entered promiscuous mode [ 145.618828][ T5621] block device autoloading is deprecated and will be removed. [ 146.041224][ T45] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 146.202612][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.212565][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 146.226319][ T45] usb 1-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 146.235751][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.246201][ T45] usb 1-1: config 0 descriptor?? [ 146.355252][ T5646] overlayfs: failed to clone lowerpath [ 146.450962][ T5650] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.1677'. [ 146.512378][ T5652] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 146.566854][ T31] rust_binder: 5649: removing orphan mapping 0:112 [ 146.573723][ T31] rust_binder: 0: removing orphan mapping 112:1048 [ 146.580589][ T5654] fuse: Bad value for 'fd' [ 146.641994][ T5655] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 146.650225][ T5655] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 146.659048][ T5655] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 146.667700][ T5655] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 146.668725][ T45] uclogic 0003:2179:0053.0012: interface is invalid, ignoring [ 146.871647][ T45] usb 1-1: USB disconnect, device number 48 [ 147.792850][ T5726] fuse: Bad value for 'fd' [ 148.166340][ T5740] fuse: Unknown parameter 'fd0x0000000000000004' [ 148.431199][ T31] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 148.581863][ T5759] netlink: 516 bytes leftover after parsing attributes in process `syz.0.1715'. [ 148.611192][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 148.628979][ T31] usb 6-1: unable to get BOS descriptor or descriptor too short [ 148.641602][ T31] usb 6-1: config 2 has an invalid interface number: 34 but max is 0 [ 148.658220][ T31] usb 6-1: config 2 has no interface number 0 [ 148.664576][ T31] usb 6-1: config 2 interface 34 has no altsetting 0 [ 148.673769][ T31] usb 6-1: string descriptor 0 read error: -22 [ 148.683790][ T31] usb 6-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=ed.9a [ 148.693107][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.711924][ T31] usb 6-1: Found UVC 0.05 device (045e:0721) [ 148.719345][ T31] usb 6-1: No valid video chain found. [ 148.840343][ T36] audit: type=1400 audit(2000000010.495:64423): avc: denied { create } for pid=5781 comm="syz.1.1724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 148.861812][ T5782] overlayfs: failed to clone upperpath [ 148.910526][ T31] usb 6-1: USB disconnect, device number 6 [ 150.290585][ T5821] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1738'. [ 151.076796][ T36] audit: type=1326 audit(2000000012.735:64424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5851 comm="syz.2.1749" exe="/root/syz-executor" sig=31 arch=c000003e syscall=157 compat=0 ip=0x7f464498e9a9 code=0x0 [ 151.332997][ T5879] rust_binder: Write failure EFAULT in pid:146 [ 151.388525][ T5883] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 151.394805][ T5884] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 151.530912][ T36] audit: type=1400 audit(2000000013.185:64425): avc: denied { mounton } for pid=5886 comm="syz.5.1760" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 151.704425][ T5899] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5899 comm=syz.1.1765 [ 151.716972][ T5899] netlink: 1603 bytes leftover after parsing attributes in process `syz.1.1765'. [ 152.073969][ T5935] 9pnet_fd: Insufficient options for proto=fd [ 152.092599][ T5938] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 152.101201][ T31] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 152.143843][ T5939] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 152.143876][ T5939] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 152.152043][ T5939] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:965 [ 152.164428][ T36] audit: type=1400 audit(2000000013.825:64426): avc: denied { create } for pid=5937 comm="syz.0.1782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 152.272085][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.282024][ T31] usb 6-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 152.291061][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.321888][ T31] usb 6-1: config 0 descriptor?? [ 152.448246][ T5953] overlayfs: failed to clone upperpath [ 152.676523][ T36] audit: type=1400 audit(2000000014.335:64427): avc: denied { associate } for pid=5979 comm="syz.2.1794" name="rnullb0" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 152.729721][ T31] uclogic 0003:2179:0053.0013: interface is invalid, ignoring [ 152.763749][ T5992] netlink: 'syz.2.1800': attribute type 58 has an invalid length. [ 152.816321][ T5994] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1801'. [ 152.930469][ T31] usb 6-1: USB disconnect, device number 7 [ 152.989903][ T6004] SELinux: Context ϧ-):E2٭ؾ)đ is not valid (left unmapped). [ 153.006775][ T6004] rust_binder: Write failure EFAULT in pid:970 [ 153.006949][ T36] audit: type=1400 audit(2000000014.665:64428): avc: denied { create } for pid=6003 comm="syz.0.1805" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CFA7AE2DB729E73A45D832A1D9ADEC16D8BE08F229C491 [ 153.039307][ T36] audit: type=1400 audit(2000000014.665:64429): avc: denied { associate } for pid=6003 comm="syz.0.1805" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=CFA7AE2DB729E73A45D832A1D9ADEC16D8BE08F229C491 [ 153.066029][ T36] audit: type=1400 audit(2000000014.665:64430): avc: denied { mounton } for pid=6003 comm="syz.0.1805" path="/317/bus" dev="tmpfs" ino=1803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CFA7AE2DB729E73A45D832A1D9ADEC16D8BE08F229C491 [ 153.095462][ T36] audit: type=1400 audit(2000000014.665:64431): avc: denied { write } for pid=6003 comm="syz.0.1805" name="bus" dev="tmpfs" ino=1803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CFA7AE2DB729E73A45D832A1D9ADEC16D8BE08F229C491 [ 153.122916][ T36] audit: type=1400 audit(2000000014.665:64432): avc: denied { add_name } for pid=6003 comm="syz.0.1805" name="work" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CFA7AE2DB729E73A45D832A1D9ADEC16D8BE08F229C491 [ 153.707619][ T6046] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 153.790070][ T6065] binder: Unknown parameter '00000' [ 153.853285][ T6072] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.878407][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 153.878426][ T36] audit: type=1400 audit(2000000015.535:64442): avc: denied { lock } for pid=6073 comm="syz.5.1825" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 153.916686][ T6075] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1007 [ 153.917104][ T36] audit: type=1400 audit(2000000015.575:64443): avc: denied { map } for pid=6071 comm="syz.0.1826" path="/proc/sys/net/ipv4/tcp_rmem" dev="proc" ino=31240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 154.196633][ T6095] bpf: Bad value for 'mode' [ 154.697168][ T36] audit: type=1400 audit(2000000016.355:64444): avc: denied { name_bind } for pid=6109 comm="syz.0.1837" src=24097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 154.991278][ T31] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 155.141208][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 155.141215][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 155.155835][ T31] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 155.166083][ T31] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 155.179211][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 155.188323][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.196333][ T31] usb 1-1: Product: Л [ 155.200407][ T31] usb 1-1: Manufacturer: ࠠ [ 155.205015][ T31] usb 1-1: SerialNumber: syz [ 155.292291][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.302183][ T10] usb 6-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 155.311586][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.320277][ T10] usb 6-1: config 0 descriptor?? [ 155.413002][ T31] cdc_ncm 1-1:1.0: bind() failure [ 155.418871][ T31] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 155.425838][ T31] cdc_ncm 1-1:1.1: bind() failure [ 155.432137][ T31] usb 1-1: USB disconnect, device number 49 [ 155.732373][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 155.740779][ T6148] overlayfs: missing 'lowerdir' [ 155.745867][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 155.762555][ T10] usb 6-1: USB disconnect, device number 8 [ 156.004869][ T6158] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.005036][ T6158] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1021 [ 156.262889][ T6167] overlay: Unknown parameter 'euid' [ 156.294051][ T36] audit: type=1400 audit(2000000017.955:64445): avc: denied { connect } for pid=6168 comm="syz.5.1861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 156.373348][ T6183] rust_binder: Error in use_page_slow: ESRCH [ 156.373362][ T6183] rust_binder: use_range failure ESRCH [ 156.379412][ T6183] rust_binder: Failed to allocate buffer. len:4320, is_oneway:false [ 156.395042][ T6183] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 156.399269][ T6183] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:218 [ 156.421414][ T6174] netlink: 328 bytes leftover after parsing attributes in process `syz.2.1862'. [ 156.542415][ T6209] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1873'. [ 156.701187][ T422] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 156.852286][ T422] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.867498][ T422] usb 6-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 156.885545][ T422] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.902808][ T422] usb 6-1: config 0 descriptor?? [ 157.321622][ T422] usbhid 6-1:0.0: can't add hid device: -71 [ 157.327604][ T422] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 157.338521][ T422] usb 6-1: USB disconnect, device number 9 [ 157.813697][ T6250] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 157.813993][ T6250] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1038 [ 157.835794][ T6252] netpci0: tun_chr_ioctl cmd 1074025676 [ 157.853577][ T6252] netpci0: owner set to 0 [ 157.976761][ T36] audit: type=1400 audit(2000000019.635:64446): avc: denied { mounton } for pid=6256 comm="syz.0.1889" path="/dev/ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 158.072233][ T6281] rust_binder: Write failure EFAULT in pid:1044 [ 158.141231][ T6296] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 158.157718][ T6296] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1047 [ 158.187850][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1897'. [ 158.327095][ T36] audit: type=1400 audit(2000000019.985:64447): avc: denied { name_bind } for pid=6309 comm="syz.0.1899" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 158.378740][ T6311] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1055 [ 159.022505][ T6328] random: crng reseeded on system resumption [ 159.153669][ T6343] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 159.186922][ T6349] netlink: 'syz.1.1914': attribute type 27 has an invalid length. [ 159.205552][ T6351] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 159.206851][ T6351] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:237 [ 159.219441][ T6351] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 160.021252][ T6377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.021277][ T6378] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.180330][ T36] audit: type=1326 audit(2000000021.835:64448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6376 comm="syz.5.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565e18e9a9 code=0x7fc00000 [ 160.210680][ T36] audit: type=1326 audit(2000000021.835:64449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6376 comm="syz.5.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565e18e9a9 code=0x7fc00000 [ 160.241194][ T45] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 160.296383][ T6403] netlink: 'syz.5.1933': attribute type 15 has an invalid length. [ 160.371199][ T45] usb 1-1: device descriptor read/64, error -71 [ 160.519814][ T6418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.523307][ T6418] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:265 [ 160.546310][ T6422] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.556026][ T6422] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 160.562591][ T6422] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:269 [ 160.611293][ T45] usb 1-1: device descriptor read/64, error -71 [ 160.707064][ T6431] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1942'. [ 160.861214][ T45] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 160.991233][ T45] usb 1-1: device descriptor read/64, error -71 [ 161.231235][ T45] usb 1-1: device descriptor read/64, error -71 [ 161.341381][ T45] usb usb1-port1: attempt power cycle [ 161.422277][ T6433] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.430512][ T6436] rust_binder: Error while translating object. [ 161.437027][ T6436] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 161.443241][ T6436] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:278 [ 161.464330][ T6436] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 161.464330][ T6437] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 161.464354][ T6436] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 161.472969][ T6437] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 161.480479][ T6436] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:278 [ 161.499392][ T6437] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:278 [ 161.509157][ T36] audit: type=1400 audit(2000000023.165:64450): avc: denied { mount } for pid=6435 comm="syz.5.1944" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 161.515802][ T6437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.521194][ T36] audit: type=1400 audit(2000000023.165:64451): avc: denied { remount } for pid=6435 comm="syz.5.1944" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 161.541260][ T6437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.654767][ T6460] overlayfs: failed to clone upperpath [ 161.681256][ T45] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 161.702211][ T45] usb 1-1: device descriptor read/8, error -71 [ 161.729573][ T6470] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1957'. [ 161.771238][ T914] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 161.796476][ T6479] 9pnet_fd: Insufficient options for proto=fd [ 161.842443][ T45] usb 1-1: device descriptor read/8, error -71 [ 161.901204][ T914] usb 6-1: device descriptor read/64, error -71 [ 162.091213][ T45] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 162.112346][ T45] usb 1-1: device descriptor read/8, error -71 [ 162.141233][ T914] usb 6-1: device descriptor read/64, error -71 [ 162.243033][ T45] usb 1-1: device descriptor read/8, error -71 [ 162.351637][ T45] usb usb1-port1: unable to enumerate USB device [ 162.381217][ T914] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 162.511237][ T914] usb 6-1: device descriptor read/64, error -71 [ 162.670540][ T6500] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6500 comm=syz.2.1966 [ 162.694395][ T6505] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1970'. [ 162.726424][ T6515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1793 sclass=netlink_route_socket pid=6515 comm=syz.1.1973 [ 162.746691][ T6517] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1974'. [ 162.751204][ T914] usb 6-1: device descriptor read/64, error -71 [ 162.766162][ T6519] overlayfs: failed to clone upperpath [ 162.871361][ T914] usb usb6-port1: attempt power cycle [ 163.008187][ T6526] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 163.018702][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 163.054469][ T6526] rust_binder: Write failure EFAULT in pid:1062 [ 163.211203][ T914] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 163.242226][ T914] usb 6-1: device descriptor read/8, error -71 [ 163.372498][ T914] usb 6-1: device descriptor read/8, error -71 [ 163.459336][ T6535] bpf: Bad value for 'mode' [ 163.621216][ T914] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 163.642316][ T914] usb 6-1: device descriptor read/8, error -71 [ 163.772268][ T914] usb 6-1: device descriptor read/8, error -71 [ 163.880434][ T36] audit: type=1400 audit(2000000025.535:64452): avc: denied { map } for pid=6542 comm="syz.1.1983" path="socket:[33039]" dev="sockfs" ino=33039 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 163.881307][ T914] usb usb6-port1: unable to enumerate USB device [ 163.930574][ T6548] fuse: Bad value for 'group_id' [ 163.935625][ T6548] fuse: Bad value for 'group_id' [ 163.952114][ T6550] 9pnet_fd: Insufficient options for proto=fd [ 164.300486][ T6552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1987'. [ 164.311035][ T6552] overlayfs: failed to clone upperpath [ 164.436469][ T36] audit: type=1400 audit(2000000026.095:64453): avc: denied { unmount } for pid=5287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 164.458709][ T6567] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 164.477002][ T6572] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1995'. [ 164.508259][ T6579] overlayfs: conflicting options: userxattr,redirect_dir=on [ 164.522981][ T36] audit: type=1400 audit(2000000026.185:64454): avc: denied { read append } for pid=6580 comm="syz.1.1998" path="/134/cpu.stat" dev="tmpfs" ino=769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=CFA7AE2DB729E73A45D832A1D9ADEC16D8BE08F229C491 [ 164.551957][ T36] audit: type=1400 audit(2000000026.185:64455): avc: denied { map } for pid=6580 comm="syz.1.1998" path="/134/cpu.stat" dev="tmpfs" ino=769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=CFA7AE2DB729E73A45D832A1D9ADEC16D8BE08F229C491 [ 164.828421][ T6593] overlay: Unknown parameter 'hash' [ 164.861198][ T31] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 165.032274][ T31] usb 6-1: No LPM exit latency info found, disabling LPM. [ 165.040148][ T31] usb 6-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 165.053056][ T31] usb 6-1: config 1 interface 0 has no altsetting 0 [ 165.071197][ T777] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 165.071238][ T778] Bluetooth: hci0: command 0x1003 tx timeout [ 165.138825][ T6620] overlayfs: overlapping lowerdir path [ 165.145071][ T36] audit: type=1400 audit(2000000026.805:64456): avc: denied { bind } for pid=6619 comm="syz.0.2010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 165.686857][ T6626] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.2013'. [ 165.690567][ T6630] rust_binder: Write failure EINVAL in pid:1071 [ 165.699071][ T6626] netlink: 'syz.2.2013': attribute type 4 has an invalid length. [ 165.713381][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.713409][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.719852][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.724651][ T6632] 9pnet_fd: Insufficient options for proto=fd [ 165.728122][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.740785][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.741987][ T6626] netlink: 'syz.2.2013': attribute type 4 has an invalid length. [ 165.747599][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.761688][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.768184][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.774876][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.781720][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.788263][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.794956][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.801579][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.808020][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.814700][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.821217][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.821445][ T6640] 9pnet_fd: Insufficient options for proto=fd [ 165.827991][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.840854][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.847545][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.854375][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.861198][ T36] audit: type=1400 audit(2000000027.515:64457): avc: denied { create } for pid=6644 comm="syz.1.2021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 165.865242][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.887397][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.894137][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.900579][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.907230][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.913900][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.920343][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.927189][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.933840][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.940456][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.947129][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.953891][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.960471][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.967575][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.974668][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.981381][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.988146][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.995188][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.001980][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.008444][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.015287][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.022039][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.028586][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.035499][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.042731][ T6662] netlink: 'syz.1.2028': attribute type 4 has an invalid length. [ 166.045829][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.057035][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.064315][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.080900][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.087495][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.094092][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.094520][ T6671] 9pnet_fd: Insufficient options for proto=fd [ 166.107059][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.113527][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.120126][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.131182][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.141200][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.147676][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.161178][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.171192][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.177822][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.187890][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.197977][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.204900][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.211496][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.218011][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.224563][ T6629] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.253805][ T6683] fuse: Unknown parameter '0xffffffffffffffff' [ 166.267399][ T6688] 9pnet_fd: Insufficient options for proto=fd [ 166.541215][ T914] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 166.702235][ T914] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 166.721174][ T914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.740178][ T914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.760147][ T914] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 166.781864][ T914] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 166.791046][ T914] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 166.799187][ T914] usb 1-1: Manufacturer: syz [ 166.808196][ T914] usb 1-1: config 0 descriptor?? [ 166.831080][ T36] audit: type=1400 audit(2000000028.485:64458): avc: denied { shutdown } for pid=6693 comm="syz.2.2040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 167.216329][ T6690] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.274085][ T914] usbhid 1-1:0.0: can't add hid device: -71 [ 167.287558][ T914] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 167.299273][ T914] usb 1-1: USB disconnect, device number 54 [ 167.367622][ T6707] overlay: Unknown parameter 'appraise' [ 167.463644][ T31] usb 6-1: New USB device found, idVendor=04da, idProduct=1044, bcdDevice= 0.40 [ 167.474584][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.483618][ T31] usb 6-1: can't set config #1, error -71 [ 167.489903][ T31] usb 6-1: USB disconnect, device number 14 [ 167.814511][ T6725] 9pnet_fd: Insufficient options for proto=fd [ 167.861282][ T31] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 167.888149][ T6732] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 167.888897][ T6730] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 167.904703][ T6732] overlayfs: missing 'lowerdir' [ 167.911550][ T6730] overlayfs: missing 'lowerdir' [ 167.922471][ T6730] netlink: 316 bytes leftover after parsing attributes in process `syz.1.2054'. [ 167.931932][ T6730] netlink: 316 bytes leftover after parsing attributes in process `syz.1.2054'. [ 168.011206][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 168.017419][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 168.028682][ T31] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.041584][ T31] usb 6-1: New USB device found, idVendor=056a, idProduct=0090, bcdDevice= 0.00 [ 168.050630][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.059344][ T31] usb 6-1: config 0 descriptor?? [ 168.255913][ T6744] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 168.255946][ T6744] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 168.264149][ T6744] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1091 [ 168.285066][ T6747] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 168.294435][ T6748] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 168.300903][ T6748] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 168.309097][ T6748] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1096 [ 168.327972][ T6751] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 168.398413][ T6756] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 168.475763][ T31] wacom 0003:056A:0090.0014: item fetching failed at offset 3/5 [ 168.490250][ T31] wacom 0003:056A:0090.0014: parse failed [ 168.496454][ T31] wacom 0003:056A:0090.0014: probe with driver wacom failed with error -22 [ 168.508412][ T6766] fuse: Bad value for 'group_id' [ 168.513455][ T6766] fuse: Bad value for 'group_id' [ 168.685876][ T31] usb 6-1: USB disconnect, device number 15 [ 168.751601][ T914] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 168.902277][ T914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.913474][ T914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.923569][ T914] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 168.936798][ T914] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 168.945959][ T914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.955415][ T914] usb 1-1: config 0 descriptor?? [ 169.369913][ T914] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 169.396923][ T914] plantronics 0003:047F:FFFF.0015: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 169.423593][ T36] audit: type=1326 audit(2000000037.085:64459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6807 comm="syz.2.2080" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f464498e9a9 code=0x0 [ 169.723611][ T6822] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 169.723642][ T6822] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 169.731814][ T6822] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1105 [ 170.300248][ T6836] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2087'. [ 170.320560][ T6836] overlayfs: failed to clone upperpath [ 170.326886][ T6836] overlayfs: failed to clone upperpath [ 170.369952][ T6840] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2089'. [ 170.535455][ T6856] tmpfs: Bad value for 'huge' [ 170.558562][ T6861] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2098'. [ 170.568825][ T6861] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2098'. [ 170.578018][ T6861] tipc: Invalid UDP bearer configuration [ 170.578042][ T6861] tipc: Enabling of bearer rejected, failed to enable media [ 170.604208][ T36] audit: type=1400 audit(2000000038.265:64460): avc: denied { setattr } for pid=6862 comm="syz.1.2099" name="NETLINK" dev="sockfs" ino=34603 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 170.791267][ T361] usb 1-1: reset high-speed USB device number 55 using dummy_hcd [ 170.951203][ T914] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 171.102295][ T914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.112273][ T914] usb 6-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 171.121616][ T914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.130572][ T914] usb 6-1: config 0 descriptor?? [ 171.541490][ T914] usbhid 6-1:0.0: can't add hid device: -71 [ 171.547508][ T914] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 171.560563][ T914] usb 6-1: USB disconnect, device number 16 [ 171.627436][ T6897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2112'. [ 172.031233][ T361] usb 1-1: device descriptor read/64, error -71 [ 172.081877][ T6922] overlayfs: missing 'lowerdir' [ 172.293130][ T361] usb 1-1: device firmware changed [ 172.300649][ T422] usb 1-1: USB disconnect, device number 55 [ 172.327549][ T6933] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.329256][ T6933] rust_binder: Error while translating object. [ 172.335846][ T6933] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 172.342035][ T6933] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:309 [ 172.353673][ T6933] tap0: tun_chr_ioctl cmd 1074025677 [ 172.368266][ T6933] tap0: linktype set to 802 [ 172.441916][ T422] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 172.602958][ T422] usb 1-1: config 1 interface 0 has no altsetting 0 [ 172.611108][ T422] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 172.621170][ T914] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 172.624910][ T422] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.637484][ T422] usb 1-1: Product: syz [ 172.641818][ T422] usb 1-1: Manufacturer: syz [ 172.655064][ T422] usb 1-1: SerialNumber: syz [ 172.729731][ T36] audit: type=1326 audit(2000000040.385:64461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6944 comm="syz.2.2129" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f464498e9a9 code=0x0 [ 172.782167][ T914] usb 6-1: unable to get BOS descriptor set [ 172.789156][ T914] usb 6-1: config 1 interface 0 has no altsetting 0 [ 172.800784][ T914] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 172.810896][ T914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.819255][ T914] usb 6-1: Product: syz [ 172.823704][ T914] usb 6-1: Manufacturer: syz [ 172.823720][ T6950] netlink: 'syz.2.2130': attribute type 6 has an invalid length. [ 172.828291][ T914] usb 6-1: SerialNumber: syz [ 172.877128][ T422] usb 1-1: USB disconnect, device number 56 [ 173.047463][ T914] usb 6-1: USB disconnect, device number 17 [ 173.498893][ T6990] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 173.507636][ T6990] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 173.516208][ T6990] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 173.524236][ T6990] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 173.901871][ T7001] overlayfs: failed to clone upperpath [ 174.385132][ T7007] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.385729][ T7008] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 174.394809][ T7008] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 174.419300][ T7008] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1134 [ 174.478146][ T7019] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 174.481322][ T422] usb 3-1: USB disconnect, device number 6 [ 174.501169][ T7019] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 174.501210][ T7019] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1139 [ 174.584343][ T7022] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.600999][ T7022] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.608546][ T7022] bridge_slave_0: entered allmulticast mode [ 174.615692][ T7022] bridge_slave_0: entered promiscuous mode [ 174.622475][ T7022] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.629601][ T7022] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.637400][ T7022] bridge_slave_1: entered allmulticast mode [ 174.643902][ T7022] bridge_slave_1: entered promiscuous mode [ 174.650621][ T329] bridge_slave_1: left allmulticast mode [ 174.656541][ T329] bridge_slave_1: left promiscuous mode [ 174.662295][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.671731][ T329] bridge_slave_0: left allmulticast mode [ 174.677482][ T329] bridge_slave_0: left promiscuous mode [ 174.683340][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.762653][ T10] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 174.812710][ T329] veth1_macvtap: left promiscuous mode [ 174.818545][ T329] veth0_vlan: left promiscuous mode [ 174.888467][ T7022] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.895562][ T7022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.902852][ T7022] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.910050][ T7022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.936098][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.944047][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 174.950773][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.973170][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.980246][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.991580][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 175.006269][ T10] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 175.017575][ T7022] veth0_vlan: entered promiscuous mode [ 175.023877][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.041304][ T10] usb 1-1: config 0 descriptor?? [ 175.043250][ T7022] veth1_macvtap: entered promiscuous mode [ 175.455585][ T10] nintendo 0003:057E:2019.0016: item fetching failed at offset 2/5 [ 175.464325][ T10] nintendo 0003:057E:2019.0016: HID parse failed [ 175.470841][ T10] nintendo 0003:057E:2019.0016: probe - fail = -22 [ 175.477855][ T10] nintendo 0003:057E:2019.0016: probe with driver nintendo failed with error -22 [ 175.606386][ T7056] binder: Bad value for 'max' [ 175.703794][ T7059] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 175.703830][ T7059] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 175.705701][ T7058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.712165][ T7059] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1139 [ 175.722099][ T7058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.751655][ T10] usb 1-1: USB disconnect, device number 57 [ 176.094063][ T10] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 176.129169][ T7098] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 176.137517][ T7098] rust_binder: Write failure EINVAL in pid:23 [ 176.137728][ T7098] rust_binder: 23: no such ref 3 [ 176.149087][ T7098] rust_binder: 23: no such ref 1 [ 176.154191][ T7098] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:23 [ 176.252237][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.271262][ T10] usb 1-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 176.281395][ T36] audit: type=1400 audit(2000000043.935:64462): avc: denied { write } for pid=7099 comm="syz.2.2175" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 176.281437][ T7100] binder: Unknown parameter 'defcontext01777777777777777777777' [ 176.312542][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.321449][ T10] usb 1-1: config 0 descriptor?? [ 176.557320][ T7112] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 176.557726][ T7112] rust_binder: Error while translating object. [ 176.564422][ T7112] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 176.570665][ T7112] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:336 [ 176.851179][ T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 176.930043][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 176.936656][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 176.948418][ T10] usb 1-1: USB disconnect, device number 58 [ 177.001267][ T9] usb 6-1: device descriptor read/64, error -71 [ 177.017877][ T36] audit: type=1400 audit(2000000044.675:64463): avc: denied { connect } for pid=7133 comm="syz.1.2186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 177.075829][ T7142] fuse: Unknown parameter 'grou00000000000000000000' [ 177.138028][ T7143] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 177.146125][ T7143] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 177.154547][ T7143] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 177.162621][ T7143] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 177.241196][ T9] usb 6-1: device descriptor read/64, error -71 [ 177.491254][ T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 177.621976][ T9] usb 6-1: device descriptor read/64, error -71 [ 177.881179][ T9] usb 6-1: device descriptor read/64, error -71 [ 177.991337][ T9] usb usb6-port1: attempt power cycle [ 178.167061][ T7172] rust_binder: 1148: no such ref 2 [ 178.197907][ T7176] sock: sock_timestamping_bind_phc: sock not bind to device [ 178.213346][ T7178] overlayfs: failed to clone upperpath [ 178.242718][ T7174] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 178.296151][ T7191] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 178.331232][ T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 178.362274][ T9] usb 6-1: device descriptor read/8, error -71 [ 178.493140][ T9] usb 6-1: device descriptor read/8, error -71 [ 178.731197][ T9] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 178.752675][ T9] usb 6-1: device descriptor read/8, error -71 [ 178.833527][ T7202] option changes via remount are deprecated (pid=7201 comm=syz.2.2215) [ 178.841885][ T7202] cgroup: option or name mismatch, new: 0x0 "none", old: 0x0 "" [ 178.900867][ T9] usb 6-1: device descriptor read/8, error -71 [ 179.011368][ T9] usb usb6-port1: unable to enumerate USB device [ 179.231398][ T422] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 179.319789][ T7222] cgroup: noprefix used incorrectly [ 179.382253][ T422] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 179.390517][ T422] usb 3-1: config 0 has no interface number 0 [ 179.396632][ T422] usb 3-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 179.407650][ T9] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 179.416630][ T422] usb 3-1: config 0 interface 214 has no altsetting 0 [ 179.424893][ T422] usb 3-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 179.433980][ T422] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.441973][ T422] usb 3-1: Product: syz [ 179.446215][ T422] usb 3-1: Manufacturer: syz [ 179.450789][ T422] usb 3-1: SerialNumber: syz [ 179.455976][ T422] usb 3-1: config 0 descriptor?? [ 179.461247][ T7209] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 179.551206][ T9] usb 1-1: device descriptor read/64, error -71 [ 179.672954][ T7208] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 179.697448][ T7232] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 179.698004][ T7234] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 179.801677][ T9] usb 1-1: device descriptor read/64, error -71 [ 179.856683][ T7247] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 179.856756][ T7247] rust_binder: 364: no such ref 4294967294 [ 180.051236][ T9] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 180.151254][ T361] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 180.181215][ T9] usb 1-1: device descriptor read/64, error -71 [ 180.202927][ T7270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2238'. [ 180.211891][ T7270] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2238'. [ 180.302817][ T361] usb 6-1: unable to get BOS descriptor or descriptor too short [ 180.311269][ T361] usb 6-1: config 3 has an invalid interface number: 19 but max is 0 [ 180.319385][ T361] usb 6-1: config 3 has an invalid interface number: 4 but max is 0 [ 180.327403][ T361] usb 6-1: config 3 has 2 interfaces, different from the descriptor's value: 1 [ 180.336392][ T361] usb 6-1: config 3 has no interface number 0 [ 180.342478][ T361] usb 6-1: config 3 has no interface number 1 [ 180.348556][ T361] usb 6-1: config 3 interface 19 altsetting 9 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 180.361812][ T361] usb 6-1: too many endpoints for config 3 interface 4 altsetting 131: 175, using maximum allowed: 30 [ 180.372927][ T361] usb 6-1: config 3 interface 4 altsetting 131 bulk endpoint 0x8E has invalid maxpacket 32 [ 180.382964][ T361] usb 6-1: config 3 interface 4 altsetting 131 endpoint 0xC has invalid wMaxPacketSize 0 [ 180.392836][ T361] usb 6-1: config 3 interface 4 altsetting 131 bulk endpoint 0xC has invalid maxpacket 0 [ 180.402660][ T361] usb 6-1: config 3 interface 4 altsetting 131 has 2 endpoint descriptors, different from the interface descriptor's value: 175 [ 180.415891][ T361] usb 6-1: config 3 interface 19 has no altsetting 0 [ 180.422580][ T361] usb 6-1: config 3 interface 4 has no altsetting 0 [ 180.430542][ T361] usb 6-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=53.f5 [ 180.439768][ T9] usb 1-1: device descriptor read/64, error -71 [ 180.446091][ T361] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.454244][ T361] usb 6-1: Product: syz [ 180.458400][ T361] usb 6-1: Manufacturer: syz [ 180.463007][ T361] usb 6-1: SerialNumber: syz [ 180.551277][ T9] usb usb1-port1: attempt power cycle [ 180.671595][ T361] pl2303 6-1:3.19: required endpoints missing [ 180.679028][ T361] pl2303 6-1:3.4: required interrupt-in endpoint missing [ 180.687629][ T361] usb 6-1: USB disconnect, device number 22 [ 180.801721][ T422] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 180.813093][ T422] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 180.824298][ T422] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 180.891243][ T9] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 180.912480][ T9] usb 1-1: device descriptor read/8, error -71 [ 181.042152][ T9] usb 1-1: device descriptor read/8, error -71 [ 181.181183][ T36] audit: type=1400 audit(2000000048.835:64464): avc: denied { read } for pid=7283 comm="syz.5.2242" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 181.205047][ T36] audit: type=1400 audit(2000000048.845:64465): avc: denied { open } for pid=7283 comm="syz.5.2242" path="/131/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 181.229923][ T36] audit: type=1400 audit(2000000048.845:64466): avc: denied { ioctl } for pid=7283 comm="syz.5.2242" path="/131/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 181.263219][ T7286] netlink: 'syz.5.2243': attribute type 4 has an invalid length. [ 181.271207][ T7286] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.2243'. [ 181.311238][ T9] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 181.341585][ T9] usb 1-1: device descriptor read/8, error -71 [ 181.350782][ T36] audit: type=1400 audit(2000000049.001:64467): avc: denied { mount } for pid=7207 comm="syz.2.2217" name="/" dev="pstore" ino=2508 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 181.472260][ T9] usb 1-1: device descriptor read/8, error -71 [ 181.493813][ T7290] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2244'. [ 181.504180][ T7290] 9pnet_fd: Insufficient options for proto=fd [ 181.521395][ T914] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 181.533259][ T7292] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 181.585076][ T9] usb usb1-port1: unable to enumerate USB device [ 181.692279][ T914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 181.703679][ T914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.713494][ T914] usb 6-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 181.722586][ T914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.734026][ T914] usb 6-1: config 0 descriptor?? [ 182.142475][ T914] uclogic 0003:28BD:0055.0017: interface is invalid, ignoring [ 182.343447][ T914] usb 6-1: USB disconnect, device number 23 [ 182.415357][ T422] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 182.420427][ T36] audit: type=1400 audit(2000000050.071:64468): avc: denied { unmount } for pid=7022 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 182.427193][ T422] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 182.459750][ T422] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 182.472376][ T422] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 182.485045][ T422] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 182.498854][ T422] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 182.511768][ T422] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 182.523735][ T422] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 182.536323][ T422] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 182.548925][ T422] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 182.561813][ T422] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 182.573944][ T422] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 182.586787][ T422] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 182.600122][ T422] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 182.622789][ T422] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 182.633476][ T914] rust_binder: 7310: removing orphan mapping 0:1048 [ 182.634243][ T422] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 182.656142][ T422] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 182.667938][ T422] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 182.679579][ T422] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 182.694670][ T422] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 182.708892][ T422] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 182.721155][ T7326] 9pnet_fd: Insufficient options for proto=fd [ 182.725678][ T422] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 182.740108][ T422] ax88179_178a 3-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.2-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, f2:74:a1:39:f4:19 [ 182.759417][ T422] usb 3-1: USB disconnect, device number 7 [ 182.765871][ T422] ax88179_178a 3-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.2-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 182.826041][ T7338] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2260'. [ 182.835832][ T7338] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2260'. [ 182.847008][ T7338] netlink: 'syz.2.2260': attribute type 6 has an invalid length. [ 182.859506][ T7338] netlink: 'syz.2.2260': attribute type 5 has an invalid length. [ 182.867791][ T7338] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2260'. [ 182.881885][ T7338] netlink: 'syz.2.2260': attribute type 46 has an invalid length. [ 182.932968][ T7352] can0: slcan on ttyS3. [ 182.950834][ T7359] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2261'. [ 182.962500][ T7359] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2261'. [ 183.015134][ T7352] can0 (unregistered): slcan off ttyS3. [ 183.050865][ T7376] binder: Unknown parameter 'stats-global' [ 183.751934][ T328] Bluetooth: hci0: Frame reassembly failed (-84) [ 184.173384][ T7419] rust_binder: 92: no such ref 3 [ 184.178485][ T7419] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 184.178507][ T7419] rust_binder: Read failure Err(EFAULT) in pid:92 [ 184.211640][ T7419] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 184.245206][ T7419] rust_binder: 92: no such ref 0 [ 184.821172][ T422] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 184.982215][ T422] usb 3-1: config 0 has an invalid descriptor of length 123, skipping remainder of the config [ 185.002286][ T422] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 185.020070][ T422] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 185.039256][ T422] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.058253][ T422] usb 3-1: config 0 descriptor?? [ 185.516911][ T36] audit: type=1400 audit(2000000309.172:64469): avc: denied { create } for pid=7470 comm="syz.1.2296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 185.791239][ T778] Bluetooth: hci0: command 0x1003 tx timeout [ 185.791239][ T777] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 186.051248][ T422] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 186.201207][ T422] usb 1-1: Using ep0 maxpacket: 16 [ 186.208764][ T422] usb 1-1: config 1 has an invalid descriptor of length 161, skipping remainder of the config [ 186.219097][ T422] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 186.228002][ T422] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 186.242414][ T422] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 186.251489][ T422] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.259461][ T422] usb 1-1: Product: syz [ 186.263640][ T422] usb 1-1: Manufacturer: syz [ 186.268228][ T422] usb 1-1: SerialNumber: syz [ 186.274476][ T422] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 186.281354][ T422] cdc_ncm 1-1:1.0: bind() failure [ 186.322574][ T7502] IPv6: NLM_F_CREATE should be specified when creating new route [ 187.522423][ T914] usb 3-1: USB disconnect, device number 8 [ 187.544494][ T7516] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2310'. [ 187.588699][ T36] audit: type=1400 audit(2000000311.242:64470): avc: denied { mount } for pid=7525 comm="syz.2.2315" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 187.624651][ T36] audit: type=1400 audit(2000000311.252:64471): avc: denied { setattr } for pid=7525 comm="syz.2.2315" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 187.648900][ T36] audit: type=1400 audit(2000000311.272:64472): avc: denied { unmount } for pid=7022 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 187.747237][ T7543] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 187.881178][ T9] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 188.042252][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.052182][ T9] usb 6-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 188.061269][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.070032][ T9] usb 6-1: config 0 descriptor?? [ 188.514422][ T7549] exFAT-fs (rnullb0): invalid boot record signature [ 188.521074][ T7549] exFAT-fs (rnullb0): failed to read boot sector [ 188.527483][ T7549] exFAT-fs (rnullb0): failed to recognize exfat type [ 188.541489][ T7551] IPv6: NLM_F_CREATE should be specified when creating new route [ 188.566930][ T7558] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2325'. [ 188.576597][ T7555] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2325'. [ 188.632159][ T7564] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2329'. [ 188.830384][ T914] usb 1-1: USB disconnect, device number 63 [ 189.142025][ T914] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 189.204081][ T7574] netlink: 'syz.5.2333': attribute type 40 has an invalid length. [ 189.251484][ T7579] 9pnet_fd: Insufficient options for proto=fd [ 189.259503][ T7581] overlayfs: failed to clone upperpath [ 189.291179][ T914] usb 1-1: device descriptor read/64, error -71 [ 189.411576][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 189.417571][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 189.439349][ T9] usb 6-1: USB disconnect, device number 24 [ 189.453962][ T7593] 9pnet_fd: Insufficient options for proto=fd [ 189.482691][ T7597] rust_binder: Write failure EFAULT in pid:129 [ 189.488837][ T7599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 189.503009][ T7599] rust_binder: Got transaction with invalid offset. [ 189.505691][ T7602] netlink: 'syz.2.2344': attribute type 32 has an invalid length. [ 189.509766][ T7599] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 189.524306][ T7599] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:412 [ 189.561185][ T914] usb 1-1: device descriptor read/64, error -71 [ 189.593280][ T36] audit: type=1400 audit(2000000313.252:64473): avc: denied { associate } for pid=7612 comm="syz.5.2348" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 189.614512][ T36] audit: type=1400 audit(2000000313.252:64474): avc: denied { append } for pid=7612 comm="syz.5.2348" name="pfkey" dev="proc" ino=4026533037 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 189.645912][ T36] audit: type=1400 audit(2000000313.302:64475): avc: denied { append } for pid=7626 comm="syz.5.2351" name="event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 189.821231][ T914] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 189.961245][ T914] usb 1-1: device descriptor read/64, error -71 [ 190.201207][ T914] usb 1-1: device descriptor read/64, error -71 [ 190.311356][ T914] usb usb1-port1: attempt power cycle [ 190.368587][ T7657] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2363'. [ 190.394267][ T7659] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2364'. [ 190.661233][ T914] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 190.682342][ T914] usb 1-1: device descriptor read/8, error -71 [ 190.812335][ T914] usb 1-1: device descriptor read/8, error -71 [ 191.021232][ T9] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 191.051265][ T914] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 191.072243][ T914] usb 1-1: device descriptor read/8, error -71 [ 191.103663][ T7689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2373'. [ 191.112739][ T7689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2373'. [ 191.121833][ T7689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2373'. [ 191.132164][ T7691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2373'. [ 191.152234][ T9] usb 6-1: device descriptor read/64, error -71 [ 191.203239][ T914] usb 1-1: device descriptor read/8, error -71 [ 191.253213][ T7710] overlayfs: failed to clone upperpath [ 191.311339][ T914] usb usb1-port1: unable to enumerate USB device [ 191.401191][ T9] usb 6-1: device descriptor read/64, error -71 [ 191.641208][ T9] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 191.771218][ T9] usb 6-1: device descriptor read/64, error -71 [ 191.812950][ T36] audit: type=1400 audit(2000000315.472:64476): avc: denied { create } for pid=7723 comm="syz.2.2384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 191.834004][ T36] audit: type=1400 audit(2000000315.472:64477): avc: denied { write } for pid=7723 comm="syz.2.2384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 191.879400][ T7733] fuse: Bad value for 'fd' [ 191.894637][ T7735] binder: Unknown parameter 'defcontext01777777777777777777777' [ 191.953282][ T7748] SELinux: Context system_u:object_r:syslogd_var_run_t:s0 is not valid (left unmapped). [ 191.963398][ T36] audit: type=1400 audit(2000000315.612:64478): avc: denied { relabelfrom } for pid=7744 comm="syz.0.2392" name="TIPC" dev="sockfs" ino=38493 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 191.990607][ T36] audit: type=1400 audit(2000000315.642:64479): avc: denied { relabelto } for pid=7744 comm="syz.0.2392" name="TIPC" dev="sockfs" ino=38493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=tipc_socket permissive=1 trawcon="system_u:object_r:syslogd_var_run_t:s0" [ 192.041184][ T9] usb 6-1: device descriptor read/64, error -71 [ 192.123247][ T7775] netlink: 'syz.1.2402': attribute type 64 has an invalid length. [ 192.151278][ T9] usb usb6-port1: attempt power cycle [ 192.221188][ T7281] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 192.381223][ T7281] usb 1-1: Using ep0 maxpacket: 16 [ 192.388242][ T7281] usb 1-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 192.401266][ T7281] usb 1-1: config 1 interface 0 has no altsetting 0 [ 192.409122][ T7281] usb 1-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.40 [ 192.418236][ T7281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.426302][ T7281] usb 1-1: Product: 蒑ᮅ㛚⮋퍲涪ퟰ못঱賫䦲菖煽煔术꺥测잜䞰뉴▴ꝯꋜ솷ᙹ堨裩饁왅菲縞闂⯇㪮耈ⰱ馕ႎ茧␤퓍䙟趡꣮㭲갂દᵯ俿鯯 [ 192.446484][ T7281] usb 1-1: Manufacturer: 鵀燎࿃럐䶜模嶱뙴箱ヸ腠퀷叞굵醼蒑폽ﳃ帽㈺쫇ⷞ弘爵䔜靂奭럮崅ퟳ㘉퍗㻕✲˓쪈᧨顬⻏ང噙蚶붉랅ḫᦻꦊ㭡웨퐌③꒓鷅㲽龁中浶ಐ좾㶶鵏鐋吗饉χ⣛䊸촍떆儒ꁝ園ㅼ [ 192.471865][ T7281] usb 1-1: SerialNumber: syz [ 192.501200][ T9] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 192.522254][ T9] usb 6-1: device descriptor read/8, error -71 [ 192.652198][ T9] usb 6-1: device descriptor read/8, error -71 [ 192.860705][ T7819] overlayfs: failed to clone upperpath [ 192.885709][ T7281] usbhid 1-1:1.0: can't add hid device: -71 [ 192.891767][ T9] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 192.899800][ T7281] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 192.908965][ T7281] usb 1-1: USB disconnect, device number 68 [ 192.922272][ T9] usb 6-1: device descriptor read/8, error -71 [ 192.956187][ T7840] 9pnet_fd: Insufficient options for proto=fd [ 192.972318][ T7843] netlink: 'syz.1.2428': attribute type 46 has an invalid length. [ 193.052252][ T9] usb 6-1: device descriptor read/8, error -71 [ 193.161301][ T9] usb usb6-port1: unable to enumerate USB device [ 193.274932][ T36] audit: type=1400 audit(2000000316.932:64480): avc: denied { accept } for pid=7852 comm="syz.1.2432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 193.307560][ T7857] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=18 sclass=netlink_audit_socket pid=7857 comm=syz.1.2434 [ 193.335068][ T7859] netlink: 'syz.1.2435': attribute type 12 has an invalid length. [ 193.346459][ T7859] __nla_validate_parse: 3 callbacks suppressed [ 193.346475][ T7859] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2435'. [ 193.406137][ T7875] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 193.426565][ T7880] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.480238][ T7889] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 193.490687][ T7889] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 193.504437][ T7889] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1245 [ 193.951061][ T7940] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.062766][ T7942] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 194.069215][ T7942] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 194.077246][ T7942] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:468 [ 194.212211][ T7944] overlayfs: failed to clone upperpath [ 194.237274][ T7949] overlayfs: failed to clone upperpath [ 194.266817][ T36] audit: type=1400 audit(2000000317.922:64481): avc: denied { create } for pid=7950 comm="syz.0.2465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 194.582695][ T7970] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.583117][ T7970] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1257 [ 194.743481][ T7980] fuse: Bad value for 'user_id' [ 194.757864][ T7980] fuse: Bad value for 'user_id' [ 194.921247][ T7281] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 195.082275][ T7281] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.093975][ T7281] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 195.103350][ T7281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.111501][ T7281] usb 1-1: Product: syz [ 195.115970][ T7281] usb 1-1: Manufacturer: syz [ 195.120677][ T7281] usb 1-1: SerialNumber: syz [ 195.253424][ T8004] bridge0: entered promiscuous mode [ 195.258663][ T8004] bridge0: entered allmulticast mode [ 195.751981][ T8036] fuse: Bad value for 'user_id' [ 195.756934][ T8036] fuse: Bad value for 'user_id' [ 195.802582][ T8047] 9pnet_fd: Insufficient options for proto=fd [ 195.811544][ T8049] overlay: ./file1 is not a directory [ 196.135708][ T7281] cdc_ncm 1-1:1.0: bind() failure [ 196.144907][ T7281] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 196.158210][ T7281] cdc_ncm 1-1:1.1: bind() failure [ 196.233046][ T8055] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.233806][ T8055] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.240660][ T8057] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:485 [ 196.247208][ T8055] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 196.263567][ T8055] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:485 [ 196.338098][ T7281] usb 1-1: USB disconnect, device number 69 [ 196.562757][ T8078] batadv_slave_0: entered promiscuous mode [ 196.570146][ T8077] batadv_slave_0: left promiscuous mode [ 196.594857][ T8083] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.617053][ T8094] netlink: 'syz.1.2509': attribute type 27 has an invalid length. [ 196.668521][ T8112] fuse: Bad value for 'user_id' [ 196.677959][ T8112] fuse: Bad value for 'user_id' [ 196.985935][ T8124] loop9: detected capacity change from 0 to 7 [ 197.011581][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 197.020737][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 197.037820][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 197.047257][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 197.056435][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 197.071160][ T8124] loop9: unable to read partition table [ 197.080366][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 197.081449][ T8124] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 197.089772][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 197.121504][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 197.130765][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 197.139948][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 197.149121][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 197.158344][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 197.167521][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 197.175597][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 197.184770][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 197.282804][ T8131] overlayfs: failed to clone upperpath [ 197.571948][ T8135] rust_binder: Failed to allocate buffer. len:69368, is_oneway:false [ 197.571978][ T8135] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 197.580191][ T8135] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:511 [ 197.617588][ T8139] overlayfs: failed to clone upperpath [ 197.661216][ T7281] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 197.811179][ T7281] usb 1-1: Using ep0 maxpacket: 16 [ 197.817669][ T7281] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.819532][ T8152] netlink: 'syz.2.2528': attribute type 4 has an invalid length. [ 197.828922][ T7281] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.846181][ T7281] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 197.855278][ T7281] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.863942][ T7281] usb 1-1: config 0 descriptor?? [ 198.271822][ T7281] hid-multitouch 0003:1FD2:6007.0018: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 198.361666][ T8160] fuse: Bad value for 'fd' [ 198.480176][ T8171] batadv_slave_1: entered promiscuous mode [ 198.487041][ T8170] batadv_slave_1: left promiscuous mode [ 198.519752][ T36] audit: type=1400 audit(2000000322.172:64482): avc: denied { connect } for pid=8176 comm="syz.2.2537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 198.556958][ T36] audit: type=1326 audit(2000000322.212:64483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8180 comm="syz.2.2539" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f508db8e9a9 code=0x0 [ 198.937540][ T8200] overlayfs: failed to clone upperpath [ 199.276020][ T8224] overlayfs: failed to clone upperpath [ 199.309920][ T8228] input: syz1 as /devices/virtual/input/input18 [ 199.375152][ T8228] input: syz1 as /devices/virtual/input/input19 [ 199.407657][ T8236] rust_binder: Write failure EINVAL in pid:531 [ 199.436699][ T8240] fuse: Bad value for 'fd' [ 199.651163][ T422] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 199.812176][ T422] usb 6-1: config 195 has an invalid interface number: 1 but max is 0 [ 199.820387][ T422] usb 6-1: config 195 has no interface number 0 [ 199.826901][ T422] usb 6-1: config 195 interface 1 has no altsetting 0 [ 199.835330][ T422] usb 6-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=60.f9 [ 199.844618][ T422] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.852814][ T422] usb 6-1: Product: syz [ 199.857083][ T422] usb 6-1: Manufacturer: syz [ 199.861960][ T422] usb 6-1: SerialNumber: syz [ 199.929703][ T8243] 9pnet_fd: Insufficient options for proto=fd [ 200.077669][ T8261] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 200.081416][ T8238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.087635][ T8263] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 200.101298][ T8238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.120809][ T422] snd-usb-audio 6-1:195.1: probe with driver snd-usb-audio failed with error -2 [ 200.134032][ T422] usb 6-1: USB disconnect, device number 29 [ 200.151617][ T3943] udevd[3943]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:195.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 200.213821][ T914] usb 1-1: USB disconnect, device number 70 [ 200.248820][ T8274] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 200.286335][ T8287] wireguard: wg2: Could not create IPv4 socket [ 200.291363][ T329] Bluetooth: hci0: Frame reassembly failed (-84) [ 200.305634][ T329] Bluetooth: hci0: Frame reassembly failed (-84) [ 200.830257][ T8306] fuse: Bad value for 'fd' [ 201.032525][ T8315] netlink: 'syz.2.2584': attribute type 3 has an invalid length. [ 201.041303][ T8316] 9pnet_fd: Insufficient options for proto=fd [ 201.606191][ T8357] 9pnet_fd: Insufficient options for proto=fd [ 201.667476][ T8365] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.679121][ T8370] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 201.701670][ T8375] 9pnet_fd: Insufficient options for proto=fd [ 201.941176][ T339] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 202.092262][ T339] usb 6-1: config index 0 descriptor too short (expected 28196, got 36) [ 202.100689][ T339] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 202.111694][ T339] usb 6-1: config 0 interface 0 has no altsetting 0 [ 202.118297][ T339] usb 6-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 202.127387][ T339] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.135945][ T339] usb 6-1: config 0 descriptor?? [ 202.226342][ T8387] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 202.258647][ T8392] fuse: Bad value for 'fd' [ 202.351197][ T778] Bluetooth: hci0: command 0x1003 tx timeout [ 202.351201][ T777] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 202.458034][ T36] audit: type=1326 audit(2000000326.112:64484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8361 comm="syz.2.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508db8e9a9 code=0x7fc00000 [ 202.482282][ T36] audit: type=1326 audit(2000000326.112:64485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8361 comm="syz.2.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f508db8e9a9 code=0x7fc00000 [ 202.505837][ T36] audit: type=1326 audit(2000000326.112:64486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8361 comm="syz.2.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508db8e9a9 code=0x7fc00000 [ 202.529546][ T36] audit: type=1326 audit(2000000326.112:64487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8361 comm="syz.2.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508db8e9a9 code=0x7fc00000 [ 202.553413][ T36] audit: type=1326 audit(2000000326.112:64488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8361 comm="syz.2.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508db8e9a9 code=0x7fc00000 [ 202.577009][ T36] audit: type=1326 audit(2000000326.112:64489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8361 comm="syz.2.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508db8e9a9 code=0x7fc00000 [ 202.605852][ T36] audit: type=1326 audit(2000000326.112:64490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8361 comm="syz.2.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508db8e9a9 code=0x7fc00000 [ 202.630994][ T36] audit: type=1326 audit(2000000326.112:64491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8361 comm="syz.2.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508db8e9a9 code=0x7fc00000 [ 202.657937][ T8396] fuse: Bad value for 'rootmode' [ 202.756890][ T339] usbhid 6-1:0.0: can't add hid device: -71 [ 202.762912][ T339] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 202.775389][ T339] usb 6-1: USB disconnect, device number 30 [ 202.894826][ T8415] fuse: Unknown parameter '' [ 203.221297][ T339] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 203.299119][ T8448] overlay: Unknown parameter 'fowner>18446744073709551615' [ 203.323942][ T8454] fuse: Bad value for 'fd' [ 203.371189][ T339] usb 1-1: Using ep0 maxpacket: 16 [ 203.385576][ T339] usb 1-1: too many configurations: 75, using maximum allowed: 8 [ 203.402212][ T339] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 203.409893][ T339] usb 1-1: can't read configurations, error -61 [ 203.551166][ T914] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 203.561188][ T339] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 203.645749][ T8457] fuse: Invalid rootmode [ 203.702397][ T914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.712243][ T339] usb 1-1: Using ep0 maxpacket: 16 [ 203.721357][ T339] usb 1-1: too many configurations: 75, using maximum allowed: 8 [ 203.722057][ T36] kauditd_printk_skb: 60 callbacks suppressed [ 203.722070][ T36] audit: type=1326 audit(2000000327.382:64552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8474 comm="syz.1.2637" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f533b98e9a9 code=0x0 [ 203.729176][ T914] usb 6-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 203.767874][ T914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.776804][ T339] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 203.784441][ T339] usb 1-1: can't read configurations, error -61 [ 203.790972][ T339] usb usb1-port1: attempt power cycle [ 203.796699][ T914] usb 6-1: config 0 descriptor?? [ 204.141189][ T339] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 204.171707][ T339] usb 1-1: Using ep0 maxpacket: 16 [ 204.177268][ T339] usb 1-1: too many configurations: 75, using maximum allowed: 8 [ 204.186394][ T339] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 204.194200][ T339] usb 1-1: can't read configurations, error -61 [ 204.207171][ T914] uclogic 0003:2179:0053.0019: interface is invalid, ignoring [ 204.248471][ T8488] bridge0: entered allmulticast mode [ 204.254216][ T8488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2640'. [ 204.263207][ T8488] bridge_slave_1: left allmulticast mode [ 204.268946][ T8488] bridge_slave_1: left promiscuous mode [ 204.274665][ T8488] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.282123][ T8488] bridge_slave_0: left allmulticast mode [ 204.287802][ T8488] bridge_slave_0: left promiscuous mode [ 204.293524][ T8488] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.302496][ T8488] bridge0 (unregistering): left allmulticast mode [ 204.321227][ T339] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 204.342444][ T339] usb 1-1: Using ep0 maxpacket: 16 [ 204.348239][ T339] usb 1-1: too many configurations: 75, using maximum allowed: 8 [ 204.348758][ T8489] overlayfs: failed to clone upperpath [ 204.357276][ T339] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 204.369184][ T339] usb 1-1: can't read configurations, error -61 [ 204.375880][ T339] usb usb1-port1: unable to enumerate USB device [ 204.418271][ T7281] usb 6-1: USB disconnect, device number 31 [ 204.418596][ T8493] fuse: Bad value for 'fd' [ 204.447221][ T36] audit: type=1326 audit(2000000328.102:64553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8499 comm="syz.2.2643" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f508db8e9a9 code=0x0 [ 204.498657][ T36] audit: type=1326 audit(2000000328.152:64554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8499 comm="syz.2.2643" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f508db8e9a9 code=0x0 [ 204.527581][ T36] audit: type=1400 audit(2000000328.182:64555): avc: denied { map } for pid=8504 comm="syz.2.2644" path="pipe:[39860]" dev="pipefs" ino=39860 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 204.594781][ T8515] fuse: Bad value for 'fd' [ 204.950195][ T8520] 9pnet: Could not find request transport: xen [ 205.033631][ T8542] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2655'. [ 205.145626][ T8558] netlink: 'syz.2.2661': attribute type 29 has an invalid length. [ 205.160743][ T8558] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.2661'. [ 205.301164][ T7281] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 205.452324][ T7281] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.462393][ T7281] usb 6-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 205.471672][ T7281] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.480280][ T7281] usb 6-1: config 0 descriptor?? [ 205.687658][ T8548] netlink: 'syz.5.2657': attribute type 16 has an invalid length. [ 205.871266][ T37] INFO: task syz.3.827:3164 blocked for more than 122 seconds. [ 205.879034][ T37] Not tainted 6.12.38-syzkaller-g616c12b4d684 #0 [ 205.885999][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 205.894780][ T37] task:syz.3.827 state:D stack:0 pid:3164 tgid:3164 ppid:2316 flags:0x00004006 [ 205.905191][ T37] Call Trace: [ 205.906295][ T7281] uclogic 0003:2179:0053.001A: interface is invalid, ignoring [ 205.908495][ T37] [ 205.918928][ T37] __schedule+0x1322/0x1df0 [ 205.923556][ T37] ? __sched_text_start+0x10/0x10 [ 205.928593][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 205.934105][ T37] ? _raw_spin_unlock+0x45/0x60 [ 205.938966][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 205.944784][ T37] schedule+0xc6/0x240 [ 205.948861][ T37] __fuse_simple_request+0xdb1/0x1980 [ 205.954280][ T37] ? __cfi___fuse_simple_request+0x10/0x10 [ 205.960086][ T37] ? __cfi_autoremove_wake_function+0x10/0x10 [ 205.966213][ T37] ? __kasan_check_write+0x18/0x20 [ 205.971484][ T37] ? _raw_spin_lock+0x8c/0x120 [ 205.976251][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 205.981494][ T37] ? __cfi_autoremove_wake_function+0x10/0x10 [ 205.987630][ T37] ? fuse_lock_owner_id+0x154/0x190 [ 205.992884][ T37] fuse_flush+0x909/0x1d50 [ 205.997313][ T37] ? arch_stack_walk+0x10b/0x170 [ 206.002331][ T37] ? __cfi_fuse_flush+0x10/0x10 [ 206.007212][ T37] ? stack_trace_save+0x9d/0xe0 [ 206.012099][ T37] ? stack_depot_save_flags+0x38/0x800 [ 206.017571][ T37] ? x64_sys_call+0x1686/0x2ee0 [ 206.022435][ T37] ? do_syscall_64+0x58/0xf0 [ 206.027021][ T37] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 206.033136][ T37] ? __kasan_check_write+0x18/0x20 [ 206.038254][ T37] ? task_work_add+0x258/0x3f0 [ 206.043125][ T37] ? __cfi_task_work_add+0x10/0x10 [ 206.048241][ T37] ? __kasan_check_write+0x18/0x20 [ 206.053399][ T37] ? _raw_spin_lock+0x8c/0x120 [ 206.058171][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 206.063383][ T37] ? __cfi_fuse_flush+0x10/0x10 [ 206.068233][ T37] filp_close+0xc0/0x160 [ 206.072512][ T37] __close_range+0x50e/0x6c0 [ 206.077104][ T37] ? __cfi___close_range+0x10/0x10 [ 206.082223][ T37] ? __kasan_check_write+0x18/0x20 [ 206.087331][ T37] ? fpregs_restore_userregs+0x11d/0x260 [ 206.093009][ T37] __x64_sys_close_range+0x7e/0x90 [ 206.098154][ T37] x64_sys_call+0x1686/0x2ee0 [ 206.102858][ T37] do_syscall_64+0x58/0xf0 [ 206.107288][ T37] ? clear_bhb_loop+0x50/0xa0 [ 206.109536][ T422] usb 6-1: USB disconnect, device number 32 [ 206.112018][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 206.123904][ T37] RIP: 0033:0x7f0f4b58e9a9 [ 206.128436][ T37] RSP: 002b:00007ffdcdb49758 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 206.137004][ T37] RAX: ffffffffffffffda RBX: 00007f0f4b7b7ba0 RCX: 00007f0f4b58e9a9 [ 206.145702][ T37] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 206.153747][ T37] RBP: 00007f0f4b7b7ba0 R08: 00000000000000f4 R09: 0000000ecdb49a4f [ 206.162692][ T37] R10: 00007f0f4b7b7ac0 R11: 0000000000000246 R12: 0000000000012ac8 [ 206.170649][ T37] R13: 00007f0f4b7b6080 R14: ffffffffffffffff R15: 00007ffdcdb49870 [ 206.178836][ T37] [ 206.181964][ T37] NMI backtrace for cpu 1 [ 206.181982][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.12.38-syzkaller-g616c12b4d684 #0 00545ee46979a994717fa408b9c555c5aa5888cf [ 206.182005][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 206.182011][ T37] Call Trace: [ 206.182015][ T37] [ 206.182019][ T37] __dump_stack+0x21/0x30 [ 206.182035][ T37] dump_stack_lvl+0x10c/0x190 [ 206.182046][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 206.182057][ T37] dump_stack+0x19/0x20 [ 206.182067][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 206.182079][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 206.182090][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 206.182100][ T37] ? sched_show_task+0x379/0x560 [ 206.182111][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 206.182120][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 206.182131][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 206.182141][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 206.182151][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 206.182162][ T37] watchdog+0xd8f/0xed0 [ 206.182174][ T37] ? __cfi_watchdog+0x10/0x10 [ 206.182183][ T37] ? __kasan_check_read+0x15/0x20 [ 206.182195][ T37] ? __kthread_parkme+0x138/0x180 [ 206.182208][ T37] ? schedule+0xc6/0x240 [ 206.182219][ T37] kthread+0x2ca/0x370 [ 206.182227][ T37] ? __cfi_watchdog+0x10/0x10 [ 206.182237][ T37] ? __cfi_kthread+0x10/0x10 [ 206.182245][ T37] ret_from_fork+0x67/0xa0 [ 206.182256][ T37] ? __cfi_kthread+0x10/0x10 [ 206.182264][ T37] ret_from_fork_asm+0x1a/0x30 [ 206.182276][ T37] [ 206.182280][ T37] Sending NMI from CPU 1 to CPUs 0: [ 206.342282][ C0] NMI backtrace for cpu 0 [ 206.342294][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.12.38-syzkaller-g616c12b4d684 #0 00545ee46979a994717fa408b9c555c5aa5888cf [ 206.342313][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 206.342321][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x62/0x70 [ 206.342342][ C0] Code: 0b 00 00 83 fa 02 75 21 48 8b 91 d0 0b 00 00 48 8b 32 48 8d 7e 01 8b 89 cc 0b 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 5d 49 22 03 04 cc 0f 1f 84 00 00 00 00 00 b8 3e 1d ef 3d 90 90 90 [ 206.342354][ C0] RSP: 0018:ffffc900000078d8 EFLAGS: 00000006 [ 206.342367][ C0] RAX: ffffffff813ba8d0 RBX: dffffc0000000000 RCX: ffffffff87215540 [ 206.342377][ C0] RDX: 0000000000010100 RSI: 0000000000000004 RDI: 0000000000000000 [ 206.342386][ C0] RBP: ffffc900000078f0 R08: 0000000000000003 R09: 0000000000000004 [ 206.342394][ C0] R10: dffffc0000000000 R11: fffff52000000f4c R12: ffff8881f6e4f800 [ 206.342404][ C0] R13: dffffc0000000000 R14: ffffc90000007960 R15: 1ffff92000000f28 [ 206.342414][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 206.342426][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 206.342436][ C0] CR2: 00007f533bb83178 CR3: 000000011d7fe000 CR4: 00000000003526b0 [ 206.342448][ C0] DR0: 0000000000000000 DR1: 000000000000000a DR2: 0000000000000000 [ 206.342456][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 206.342465][ C0] Call Trace: [ 206.342470][ C0] [ 206.342475][ C0] ? sched_clock+0x10/0x60 [ 206.342491][ C0] sched_clock_cpu+0x75/0x400 [ 206.342507][ C0] ? __kasan_check_read+0x15/0x20 [ 206.342523][ C0] ? psi_group_change+0xb44/0x1130 [ 206.342537][ C0] ? __cfi_sched_clock_cpu+0x10/0x10 [ 206.342552][ C0] update_rq_clock+0xbf/0x7c0 [ 206.342568][ C0] ? __kasan_check_write+0x18/0x20 [ 206.342583][ C0] ? _raw_spin_lock+0x8c/0x120 [ 206.342598][ C0] ? __cfi_update_rq_clock+0x10/0x10 [ 206.342612][ C0] ? enqueue_task+0x1133/0x11f0 [ 206.342628][ C0] ? sched_balance_update_blocked_averages+0x1320/0x1320 [ 206.342647][ C0] ? enqueue_task+0x1133/0x11f0 [ 206.342669][ C0] try_to_wake_up+0xd79/0x1b00 [ 206.342681][ C0] ? __kasan_check_write+0x18/0x20 [ 206.342697][ C0] wake_up_process+0x14/0x20 [ 206.342712][ C0] hrtimer_wakeup+0x52/0x70 [ 206.342725][ C0] ? __cfi_hrtimer_wakeup+0x10/0x10 [ 206.342737][ C0] __hrtimer_run_queues+0x3bd/0x9e0 [ 206.342751][ C0] ? hrtimer_interrupt+0xf00/0xf00 [ 206.342763][ C0] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 206.342780][ C0] hrtimer_interrupt+0x37e/0xf00 [ 206.342794][ C0] __sysvec_apic_timer_interrupt+0x8e/0x2b0 [ 206.342812][ C0] sysvec_apic_timer_interrupt+0x3f/0x90 [ 206.342831][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 206.342850][ C0] RIP: 0010:handle_softirqs+0x129/0x630 [ 206.342867][ C0] Code: 49 c1 ef 03 4c 89 7d 90 48 b9 00 00 00 00 00 fc ff df 65 66 89 1d 4f 06 b5 7e 65 44 89 2d 4f a6 b2 7e fb 49 c7 c6 c0 a0 20 87 <44> 89 65 b4 b8 ff ff ff ff 41 0f bc c5 89 c3 ff c3 0f 84 f3 02 00 [ 206.342877][ C0] RSP: 0018:ffffc90000007f38 EFLAGS: 00000a02 [ 206.342888][ C0] RAX: 1ffffffff0e41738 RBX: 0000000000000000 RCX: dffffc0000000000 [ 206.342896][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 206.342905][ C0] RBP: ffffc90000007fc0 R08: ffff8881f6e4f847 R09: 1ffff1103edc9f08 [ 206.342915][ C0] R10: dffffc0000000000 R11: ffffed103edc9f09 R12: 000000000000000a [ 206.342924][ C0] R13: 0000000000000080 R14: ffffffff8720a0c0 R15: 1ffffffff0e42aa8 [ 206.342936][ C0] ? handle_softirqs+0xe6/0x630 [ 206.342952][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 206.342967][ C0] __irq_exit_rcu+0x48/0xc0 [ 206.342982][ C0] irq_exit_rcu+0xd/0x30 [ 206.342998][ C0] sysvec_call_function_single+0x7f/0x90 [ 206.343015][ C0] [ 206.343019][ C0] [ 206.343024][ C0] asm_sysvec_call_function_single+0x1f/0x30 [ 206.343041][ C0] RIP: 0010:pv_native_safe_halt+0x17/0x20 [ 206.343060][ C0] Code: cc cc cc b8 29 41 d7 a6 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 b1 40 00 f3 0f 1e fa 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 90 90 90 90 [ 206.343072][ C0] RSP: 0018:ffffffff87207da0 EFLAGS: 000002c6 [ 206.343082][ C0] RAX: ffff8881f6e00000 RBX: ffffffff87215540 RCX: ffffffff8586a09e [ 206.343092][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 00000000002bd744 [ 206.343102][ C0] RBP: ffffffff87207da0 R08: ffff8881f6e39733 R09: 1ffff1103edc72e6 [ 206.343112][ C0] R10: dffffc0000000000 R11: ffffed103edc72e7 R12: 1ffffffff0e42aa8 [ 206.343122][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff87ca8ba8 [ 206.343132][ C0] ? ct_kernel_exit+0x7e/0xb0 [ 206.343145][ C0] default_idle+0x17/0x30 [ 206.343157][ C0] arch_cpu_idle+0xd/0x20 [ 206.343170][ C0] default_idle_call+0x3f/0x80 [ 206.343183][ C0] do_idle+0x1a0/0x470 [ 206.343194][ C0] ? idle_inject_timer_fn+0x80/0x80 [ 206.343213][ C0] cpu_startup_entry+0x48/0x70 [ 206.343225][ C0] rest_init+0x10b/0x130 [ 206.343238][ C0] ? __cfi_x86_late_time_init+0x10/0x10 [ 206.343255][ C0] start_kernel+0x46a/0x4bb [ 206.343269][ C0] x86_64_start_reservations+0x2e/0x30 [ 206.343284][ C0] x86_64_start_kernel+0x6a/0x7b [ 206.343298][ C0] common_startup_64+0x13b/0x157 [ 206.343315][ C0]