last executing test programs: 3m59.076471149s ago: executing program 2 (id=627): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x760, 0xd283) ioctl$LOOP_SET_STATUS(r1, 0x1277, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x20000, 0x0, 0xc, 0x0, "4b8b3ea40100dfed0b2f3409000000dd5a96a9fc9549918ae7fd1f0ececfe0f4fcdf997dd52115354d4df15d017a3f000000000000080000000000000300", "0900000010000000af61ca2af6d2e80e17b506b897ccde680cd58d62d4a46cec", [0xfffffffd, 0x9]}) (async) shutdown(0xffffffffffffffff, 0x1) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/255, 0xff, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x9, 0x18, 0x40}}, 0x10}], 0x52, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"}) 3m59.02488728s ago: executing program 2 (id=628): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) 3m59.02477123s ago: executing program 2 (id=629): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) 3m59.02367344s ago: executing program 2 (id=630): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) openat$uinput(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x405c5503, &(0x7f0000000800)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}}) (async) ioctl$UI_END_FF_UPLOAD(r0, 0x405c5503, &(0x7f0000000800)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}}) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) fsopen(&(0x7f0000000080)='exfat\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd700000000000030000005800018044000400200001000a000000000000004012000000000000000000000000000100000000200002000a004e20f4fffffffe8000000000000000000000000000bb000000000d0001"], 0x6c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r6}, 0x10) (async) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r6}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x8000, 0x0) 3m59.02357951s ago: executing program 2 (id=631): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r2, 0x4, 0x42000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x2400) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) (async) fcntl$setstatus(r1, 0x4, 0x42000) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) (async) fcntl$setstatus(r2, 0x4, 0x42000) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) fcntl$setstatus(r3, 0x4, 0x2400) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) 3m58.975922241s ago: executing program 2 (id=632): ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0xc00c6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$9p_unix(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x8000, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e070000006978ff4364fea77f55f7e1d41297534606b4d7525c84204a7599b8d7a5a671232c691435d8836c879ef43488b9c16f2d22d7e32475c26c6ee350eca45506c80400cf0000b216b9eae7f48381d4894cacacdf9261d57e7c6606534845753523ed47da3a7e83c7100ac27f6a519452e7d71384deeb984ecacf889cf5700b104daae31e26f28ac6fde5c8b6afe083e7a60d0f156e0a93c4836eabe5c16398baad99836ef3118919ee6c2943b482ad165020e99ee7749a728178c817c812", @ANYRES32=r1, @ANYRES8=r3, @ANYRES8=r0]) prlimit64(r1, 0xb, &(0x7f0000000000)={0x8, 0xeb}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendfile(r0, r0, 0x0, 0x7ffff000) ioprio_set$uid(0x3, 0x0, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) getpid() (async) syz_pidfd_open(r1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'gretap0\x00'}) (async) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0xc00c6) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$9p_unix(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x8000, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e070000006978ff4364fea77f55f7e1d41297534606b4d7525c84204a7599b8d7a5a671232c691435d8836c879ef43488b9c16f2d22d7e32475c26c6ee350eca45506c80400cf0000b216b9eae7f48381d4894cacacdf9261d57e7c6606534845753523ed47da3a7e83c7100ac27f6a519452e7d71384deeb984ecacf889cf5700b104daae31e26f28ac6fde5c8b6afe083e7a60d0f156e0a93c4836eabe5c16398baad99836ef3118919ee6c2943b482ad165020e99ee7749a728178c817c812", @ANYRES32=r1, @ANYRES8=r3, @ANYRES8=r0]) (async) prlimit64(r1, 0xb, &(0x7f0000000000)={0x8, 0xeb}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async) sendfile(r0, r0, 0x0, 0x7ffff000) (async) 3m58.939950731s ago: executing program 32 (id=632): ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0xc00c6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$9p_unix(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x8000, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e070000006978ff4364fea77f55f7e1d41297534606b4d7525c84204a7599b8d7a5a671232c691435d8836c879ef43488b9c16f2d22d7e32475c26c6ee350eca45506c80400cf0000b216b9eae7f48381d4894cacacdf9261d57e7c6606534845753523ed47da3a7e83c7100ac27f6a519452e7d71384deeb984ecacf889cf5700b104daae31e26f28ac6fde5c8b6afe083e7a60d0f156e0a93c4836eabe5c16398baad99836ef3118919ee6c2943b482ad165020e99ee7749a728178c817c812", @ANYRES32=r1, @ANYRES8=r3, @ANYRES8=r0]) prlimit64(r1, 0xb, &(0x7f0000000000)={0x8, 0xeb}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendfile(r0, r0, 0x0, 0x7ffff000) ioprio_set$uid(0x3, 0x0, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) getpid() (async) syz_pidfd_open(r1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'gretap0\x00'}) (async) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0xc00c6) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$9p_unix(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x8000, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e070000006978ff4364fea77f55f7e1d41297534606b4d7525c84204a7599b8d7a5a671232c691435d8836c879ef43488b9c16f2d22d7e32475c26c6ee350eca45506c80400cf0000b216b9eae7f48381d4894cacacdf9261d57e7c6606534845753523ed47da3a7e83c7100ac27f6a519452e7d71384deeb984ecacf889cf5700b104daae31e26f28ac6fde5c8b6afe083e7a60d0f156e0a93c4836eabe5c16398baad99836ef3118919ee6c2943b482ad165020e99ee7749a728178c817c812", @ANYRES32=r1, @ANYRES8=r3, @ANYRES8=r0]) (async) prlimit64(r1, 0xb, &(0x7f0000000000)={0x8, 0xeb}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async) sendfile(r0, r0, 0x0, 0x7ffff000) (async) 3m50.130076462s ago: executing program 3 (id=873): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) socket$inet6(0xa, 0x80003, 0x3) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r2], 0x20}}, 0x0) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000180)={0x401, 0x7ff, 0x9, 0x58, 0x1, 0x9}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000000)={0x30}, 0x30) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) madvise(&(0x7f000039a000/0x3000)=nil, 0x3000, 0x65) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)={0x2}) 3m50.129379812s ago: executing program 3 (id=875): syz_usb_connect$cdc_ecm(0x0, 0x51, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023f00010100000009040000120206000005240600005c0e0f39de01f3bde3aea843978805240000000d240f010000000000000000010424130609058202"], 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000005500)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000014c0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000007540)={0x2020}, 0x2020) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f00000005c0)={&(0x7f00000004c0)=@can={{0x0, 0x0, 0x0, 0x1}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x10}, 0x1, 0x0, 0x0, 0x48004}, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40600, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r6 = socket(0x1e, 0x805, 0x0) listen(r6, 0xffff) connect$tipc(r6, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x41, 0x1}}}, 0x10) ppoll(&(0x7f0000000040)=[{r5, 0x4001}, {r6, 0x20}], 0x2, 0x0, 0x0, 0x0) bind$packet(r6, &(0x7f00000000c0)={0x11, 0x10, r2, 0x1, 0x81, 0x6, @local}, 0x14) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x4, 0xeeee8000, 0x1, 0xffffffffffffffff, 0x20}) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs2\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000080)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats=', @ANYRES16=r2]) 3m47.110776397s ago: executing program 3 (id=921): fdatasync(0xffffffffffffffff) getpid() r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0), 0x0, 0x88c4) 3m47.090714727s ago: executing program 3 (id=922): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x6) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_INPUT(r2, &(0x7f0000000080)={0x8, {"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", 0x1000}}, 0x1006) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 3m47.078194148s ago: executing program 3 (id=923): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, 0x0) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000000)={0xf800000000000000, 0x2, 0x8100000008, 0x0, 0x2}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x84}, {0x6}]}) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000040)=0x93f) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f00000001c0)=@x86={0x2e, 0x1, 0x6, 0x0, 0x3, 0xbf, 0x7, 0x2, 0xf9, 0x7, 0x0, 0x1, 0x0, 0x8, 0xffffff82, 0x3, 0x6, 0x7, 0x2e, '\x00', 0x9, 0x100000000}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000100)={0x4800000000000000, 0x8000000, 0x5, 0x9, 0x1c}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m46.988475699s ago: executing program 3 (id=925): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xfc00) 3m46.982727399s ago: executing program 33 (id=925): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xfc00) 3m32.972762427s ago: executing program 5 (id=1329): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x0) (async) accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x0) fcntl$getown(r0, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000016c0)={{{@in6=@mcast1, @in6}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f00000017c0)=0xe8) getgid() r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) (async) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000040)={0x0}) (async) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000040)={0x0}) getresuid(&(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880)) (async) getresuid(&(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880)) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020}, 0x2020) (async) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x810408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r6, @ANYRES32, @ANYBLOB], 0x20, 0x4000080}, 0x10004040) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x9, {0xff00000000000002, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x1, 0x8000, 0x0, r4, r5, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x9, {0xff00000000000002, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x1, 0x8000, 0x0, r4, r5, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000001b00)={0x8e1, 0x2}) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$rtc(&(0x7f0000001b40), 0x4, 0x50800) getpid() (async) getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001b80), &(0x7f0000001bc0)=0xc) syz_clone3(&(0x7f0000001e40)={0x10000, &(0x7f0000001c00), &(0x7f0000001c40), &(0x7f0000001c80), {0x1e}, &(0x7f0000001cc0)=""/21, 0x15, &(0x7f0000001d00)=""/193, &(0x7f0000001e00)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000001ec0)='./file0\x00', &(0x7f0000001f00), 0x800) getpid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001f80)={{{@in=@empty, @in=@dev}}, {{}, 0x0, @in6=@private1}}, &(0x7f0000002080)=0xe8) fstat(r0, &(0x7f00000020c0)) 3m32.972584718s ago: executing program 5 (id=1330): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffffff7f00000000) 3m32.972369207s ago: executing program 5 (id=1331): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001"], 0x128}, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffffffe0) 3m32.924550388s ago: executing program 5 (id=1332): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="420400090c00000000000000000000000200010000002000000000000000000000020600000000000a004e21000000052001000000000000000000000000000106000000000000000300050000ac1414aa000000000000000000000000000000c14a0ac8eda126463501ef75d80e94013756c71d75c8616099e7fcb32c63e209deb3b18f0ec040e44509d9f2f7a21a9ba4850e4e6e443e8362996c4d3649ec4c0c6b8722224a6f60b5fc549e1a1899d7a6d8673d5564e624305bada1ea1a439904787f490a8f57376366f7283e2299de249439b991277dec"], 0x60}, 0x1, 0x7}, 0x40) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'nr0\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x8000) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000180)) ioctl$ASHMEM_SET_PROT_MASK(r3, 0x40087705, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000008, 0x12, r3, 0x4d75d000) 3m32.924296588s ago: executing program 5 (id=1333): fdatasync(0xffffffffffffffff) getpid() r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x6d, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d2", 0xa1}], 0x1}}], 0x1, 0x88c4) 3m32.844191769s ago: executing program 5 (id=1339): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x0, 0xf}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 3m32.79364783s ago: executing program 34 (id=1339): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x0, 0xf}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 3m2.435927191s ago: executing program 6 (id=1915): mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)={[{@stats}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000080)='./binderfs2\x00', &(0x7f00000000c0), 0x12008, &(0x7f0000000100)={[{@stats}, {@stats}, {}, {@stats}, {@max={'max', 0x3d, 0x1}}, {@max={'max', 0x3d, 0x25e7}}, {@stats}], [{@dont_hash}]}) 3m2.435715031s ago: executing program 6 (id=1916): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x802, 0x0) 3m2.391380072s ago: executing program 6 (id=1918): mkdir(&(0x7f0000000080)='./file0\x00', 0x80) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='cpuset\x00', 0x200000, &(0x7f00000003c0)='./binderfs/binder0\x00') r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2020) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002400010001000000c2e79f760eb62f8306000300"], 0x1c}}, 0x8004) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0xff06, &(0x7f0000000000)={@fd, @fd, @flat=@binder={0x73622a85, 0x1000, 0x3}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @empty}, 0xc) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}}, 0x3f) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000180), 0x4) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000580)={0x7, 0x0, [{0x80a0000, 0x29, &(0x7f0000000080)=""/41}, {0xddcd1002, 0xa1, &(0x7f0000000140)=""/161}, {0xeeee0000, 0x74, &(0x7f00000002c0)=""/116}, {0xeeef0000, 0x80, &(0x7f0000000340)=""/128}, {0x80a0000, 0xa6, &(0x7f00000003c0)=""/166}, {0x0, 0x35, &(0x7f0000000240)=""/53}, {0xf000, 0x50, &(0x7f0000000480)=""/80}]}) 3m2.335703703s ago: executing program 6 (id=1919): syz_clone3(&(0x7f0000001280)={0x10000, 0x0, 0x0, 0x0, {}, &(0x7f00000011c0), 0x0, 0x0, 0x0}, 0x58) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c2281, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x3, 0x420200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x10200, 0xc, 0xeeee0000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) 3m2.272130194s ago: executing program 6 (id=1920): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4c24, @broadcast}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}, 0x187, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2ff, 0x45, 0xd6}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mkdir(0x0, 0x2) (async) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') (async, rerun: 64) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async, rerun: 32) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (rerun: 32) chdir(&(0x7f0000000140)='./bus\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r4, 0x0, 0x0) (async) listen(0xffffffffffffffff, 0xffff) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0xc6) (async) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40408c1) ioctl$FS_IOC_SETFLAGS(r4, 0xc0189436, &(0x7f0000000140)) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000800)="ba4000b8e6008ed03b940f73da0eccb8f0028ed80f23d80f21f86635800000200f238c66b9800000c00f326635000400000f306c0ffcdf36efddc666b9800000c0c4c249cf9009186635004000000f300f01c4", 0x53}], 0x1, 0x1c, 0x0, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x189) getdents64(r5, &(0x7f0000000100)=""/33, 0x21) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4a) (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={[{@redirect_dir_nofollow}, {@verity_require}]}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 3m1.426501207s ago: executing program 6 (id=1939): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x18d) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) chdir(&(0x7f00000003c0)='./bus\x00') (async) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105042, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) (async) splice(r1, 0x0, r3, 0x0, 0x1fffffffffff, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002240)=@getpolicy={0x5c, 0x15, 0x1, 0x70bd2c, 0x25dfdbfb, {{@in=@broadcast, @in6=@private2, 0x4e24, 0xa87, 0x4e21, 0x9, 0x2, 0x20, 0x80, 0x2f}, 0x0, 0x2}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0xff}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x3000, 0x2}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 2m46.346713351s ago: executing program 35 (id=1939): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x18d) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) chdir(&(0x7f00000003c0)='./bus\x00') (async) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105042, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) (async) splice(r1, 0x0, r3, 0x0, 0x1fffffffffff, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002240)=@getpolicy={0x5c, 0x15, 0x1, 0x70bd2c, 0x25dfdbfb, {{@in=@broadcast, @in6=@private2, 0x4e24, 0xa87, 0x4e21, 0x9, 0x2, 0x20, 0x80, 0x2f}, 0x0, 0x2}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0xff}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x3000, 0x2}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 2m33.079681828s ago: executing program 4 (id=2320): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x60, 0x1, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x9}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_NAT_DST={0x34, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010100}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}]}, @CTA_ZONE={0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x8042}, 0x840) futex(&(0x7f0000000000)=0x2, 0x5, 0x1, 0x0, 0x0, 0x0) syz_clone(0xa61a2100, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000007a80), 0x101000, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff7) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) epoll_create(0x7) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x3b, 0x0, 0x3}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0xa5507b33b3e3f16d, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x0, 0x2}, @fd={0x66642a85, 0x0, r5}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 2m33.035701959s ago: executing program 4 (id=2321): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f00000000c0)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) sendmsg$inet6(r1, &(0x7f0000000100)={&(0x7f0000000200)={0xa, 0x4e22, 0x6, @local, 0x3}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x40}, 0x6048090) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x7, 0x0, 0x16}, @fda={0x66646185, 0x4, 0x0, 0x34}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 2m32.99047995s ago: executing program 4 (id=2323): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000980)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000097}]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1181}) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x2, r5, 0x8) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000002a00)={0x1c, 0x76, 0x31f, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x4, 0xd}]}, 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) close_range(r6, r0, 0x2) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) clock_gettime(0x6, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000e00)=[@request_death={0x400c6313}, @clear_death={0x400c6313}], 0x0, 0x0, 0x0}) 2m32.30008675s ago: executing program 4 (id=2339): r0 = socket$nl_audit(0x10, 0x3, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x7, 0x12) close(r2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x12, 0x0, 0x101}}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r5, 0xff, 0x1, 0x0, &(0x7f0000000040)=0xfffffe7c) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000280)=0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fda={0x66646185, 0x4, 0x1, 0x2c}, @flat=@weak_binder={0x77622a85, 0x1001, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x39}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}], 0x50, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x12, 0x0, &(0x7f0000000140)=[@acquire_done={0x40106309, 0x3}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000480)={@flat=@weak_handle={0x77682a85, 0x80a, 0x3}, @fd={0x66642a85, 0x0, r3}, @flat=@binder={0x73622a85, 0x110a, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 2m32.28470617s ago: executing program 4 (id=2340): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0xa, 0x4e20, 0x7fff, @local, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@rthdr={{0x28, 0x29, 0x39, {0x0, 0x2, 0x2, 0xb, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0x28}, 0x8000) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000040)='./file0\x00', 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x10}], 0x5b, 0x0, 0x0}) 2m32.189225761s ago: executing program 4 (id=2345): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000018c0)='/sys/kernel/fscaps', 0x40, 0x40) connect$bt_sco(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12) 2m32.145607482s ago: executing program 36 (id=2345): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000018c0)='/sys/kernel/fscaps', 0x40, 0x40) connect$bt_sco(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12) 1m39.673532685s ago: executing program 8 (id=3060): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x40881, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000400)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x60, &(0x7f0000000300), 0x0, 0xc, 0x0, 0x0, 0x5, 0x5f8480, 0x0}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x606c) write(r0, &(0x7f0000000480)="532e2eac770767f7429748", 0xb) r4 = syz_open_procfs(0x0, &(0x7f0000000540)='clear_refs\x00') setitimer(0x0, &(0x7f0000000180)={{0x0, 0xea60}, {0x77359400}}, &(0x7f00000001c0)) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x10) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) geteuid() mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x8000, &(0x7f0000000580)={[{@mode={'mode', 0x3d, 0x5}}]}) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvfrom(r5, &(0x7f0000000240)=""/185, 0xb9, 0x40002050, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r6, &(0x7f0000000980)={0x2020}, 0x2020) 1m39.556625516s ago: executing program 8 (id=3062): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0xcc, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x1, 0xe, 0x9, 0xa, 0x2, 0xd, 0x5}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x7, 0xfffffffffffffffe, 0x40, 0x0, 0x7, 0x2000000000044, 0x0, 0x8000000000000, 0x5, 0x0, 0x9, 0x0, 0x0, 0x7, 0x1], 0x6000, 0x3c2a10}) (async, rerun: 64) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 64) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) 1m39.548199307s ago: executing program 8 (id=3066): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) socket$netlink(0x10, 0x3, 0x7) close(0x3) r1 = syz_clone(0x28000, &(0x7f0000000200)="c17c63be6336db53c770923ea9e12f042e5a3a9b0bb991e0b2da012373572154d84d2e68cb67be0d8f785b41ea3fa0d2eb35706d9fe8e25c5820603b9f74a102cd594f52680db69699d58a1c7f5b7474a63ea8b77d3c8455a5f100cc35420cd16a9442f9ca38318789385c3e5cef617bf62c65b8b67ff7cbe813d3", 0x7b, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="216d2e26c6e1cc5515ca4c405e24dca12cf049e14d133d96ba1c61d8301daf612072c1ec82397b7dbd1673a838ba9246eec49a1cc85dbfa0c1c123e0f1dceeed74f7de1c17aa8c7f2e456fe3807c765ccf59ffe5c18ac926a848a73b665485b6bf62da3de858870eff61c1cfa50dc57a66c50454937bb8de91f1f885eb7e9d41c35165e69207b3533706486235894d8a73008c959b2aeb431126cc52f975b9f8d703e609206b506f6e95d31e12495e1763293cb2e76787386d2c7bd58215c147f335ecaf59a58134aba34ad1f1d5") prlimit64(r1, 0xa, &(0x7f0000000440)={0x40, 0xff43}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x490267a0}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614", 0x19, 0x840, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x86dd, r4}, 0x14) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x120020, &(0x7f0000000000)=ANY=[@ANYBLOB='defcontext', @ANYRESOCT]) 1m39.420694988s ago: executing program 8 (id=3068): prctl$PR_SET_NAME(0xf, &(0x7f0000000340)='/selinux/policy\x00') (async) prctl$PR_SET_NAME(0xf, &(0x7f0000000340)='/selinux/policy\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)=ANY=[]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x4, 0x0, [{0xa6b, 0x0, 0xfffffffffffffffb}, {0xb44, 0x0, 0x7a1b}, {0x9e7, 0x0, 0x3}, {0x490, 0x0, 0x1}]}) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x4, 0x0, [{0xa6b, 0x0, 0xfffffffffffffffb}, {0xb44, 0x0, 0x7a1b}, {0x9e7, 0x0, 0x3}, {0x490, 0x0, 0x1}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xeeef0000, 0xf000, 0xf, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x13}, {0x1, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x65, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x10000, 0xd000, 0xe, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x0, 0x8, 0x8, 0xff, 0x4, 0x81, 0xe, 0x0, 0x3c, 0x7d}, {0x0, 0x80a0000, 0xd, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0xdddd0000, 0xa, 0x6, 0x5, 0x0, 0x78, 0x0, 0x1, 0xff}, {0x0, 0xdddd0000, 0x8, 0x0, 0xfc, 0x1, 0x0, 0xa, 0x26, 0x0, 0x10, 0x45}, {0xf000}, {0xeeee8000}, 0xfdfcffdb, 0x0, 0xdddd0000, 0x101b8, 0x8000000000b, 0xf801, 0x10000, [0x0, 0x0, 0xffffffffffffffff, 0x7]}) (async) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xeeef0000, 0xf000, 0xf, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x13}, {0x1, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x65, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x10000, 0xd000, 0xe, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x0, 0x8, 0x8, 0xff, 0x4, 0x81, 0xe, 0x0, 0x3c, 0x7d}, {0x0, 0x80a0000, 0xd, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0xdddd0000, 0xa, 0x6, 0x5, 0x0, 0x78, 0x0, 0x1, 0xff}, {0x0, 0xdddd0000, 0x8, 0x0, 0xfc, 0x1, 0x0, 0xa, 0x26, 0x0, 0x10, 0x45}, {0xf000}, {0xeeee8000}, 0xfdfcffdb, 0x0, 0xdddd0000, 0x101b8, 0x8000000000b, 0xf801, 0x10000, [0x0, 0x0, 0xffffffffffffffff, 0x7]}) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, 0x0) 1m39.402195549s ago: executing program 8 (id=3070): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000080)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x10010, r0, 0x2000) (async) pselect6(0x40, &(0x7f0000000000)={0x1, 0x8, 0x401, 0x10001, 0x8, 0x1bf, 0x6e4e, 0x6}, &(0x7f0000000040)={0x200, 0xf97f, 0x9, 0x7a09, 0x80, 0x2, 0x6}, 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0) 1m39.263229951s ago: executing program 8 (id=3073): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) r3 = socket(0x10, 0x803, 0x0) (rerun: 64) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) (async, rerun: 32) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x50) (async, rerun: 64) recvmmsg(r3, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f0000003240)=""/106, 0x6a}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000034c0)=""/211, 0xd3}], 0x5}, 0x81}], 0x3, 0x2100, 0x0) (async, rerun: 64) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 1m39.199907732s ago: executing program 37 (id=3073): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) r3 = socket(0x10, 0x803, 0x0) (rerun: 64) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) (async, rerun: 32) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, 0x0, 0x50) (async, rerun: 64) recvmmsg(r3, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f0000003240)=""/106, 0x6a}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000034c0)=""/211, 0xd3}], 0x5}, 0x81}], 0x3, 0x2100, 0x0) (async, rerun: 64) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 6.772771306s ago: executing program 9 (id=4000): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x0, 0xfffffffbffffffff}) timer_create(0x3, 0x0, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001640)={0x10, 0x2e, 0x503}, 0x10}], 0x1, 0x0, 0x0, 0x20000010}, 0x8000) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) madvise(&(0x7f00009bc000/0x3000)=nil, 0x3000, 0x4) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) listen(r3, 0x4008000) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x524}) 4.372680072s ago: executing program 9 (id=4026): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$TUNGETDEVNETNS(r1, 0xff05, 0x0) ioctl$NS_GET_USERNS(r2, 0x8004b706, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f0000000000)={0xb, 0x7}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) socket(0x1d, 0x3, 0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000082312073f0076bb48740109022400010000102009040000020300030009210700000122050009050103000206005c"], 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="070002000000fddbdf2505000000180001801400020073797a5f74756e0000000201000000000c0003800400038004000100080005"], 0x40}}, 0x40) 2.533374961s ago: executing program 9 (id=4036): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0xfffffffffffff800) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=@newsa={0xfc, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x16}, {@in6=@loopback, 0x4d2, 0x3c}, @in6=@loopback, {0x0, 0x3, 0x0, 0x1000000000000001, 0x0, 0x0, 0x10000}, {}, {0x20000000}, 0x0, 0x10000, 0xa, 0x1, 0x0, 0x20}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x7}}]}, 0xfc}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000100)=[@acquire={0x40046305, 0x1}, @register_looper], 0x51, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b9a"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 1.577055395s ago: executing program 9 (id=4045): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) flock(r2, 0x2) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x8, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.538190816s ago: executing program 1 (id=4046): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x400000b1, 0x0, 0x5e}]}) mount(&(0x7f00000000c0)=@sg0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200080, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r4, &(0x7f0000005d80)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000080)="7957d404736da65f9d132319c6a502980bd709", 0x13}, {&(0x7f00000005c0)="ada3468ff5b811c75a5cb675c4e3a6039748de9cec396af613112c8a76ac7f2775adf431950c7875533d03723007f5d3048e7342927fadcd292c94e099305229d1", 0x41}], 0x2, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)="232587dc8edf7d68eff2d4d58151f9a1d027584728be94210baec609cfb9f4f12dc648d926728d17383da79c2a5286ccde8fc25f99045cdf42bb5a277659158c0f2d08fa4b785ad6dafab3c007c062ca0fdc9fd408e048b6eccc5db6b3bc34796bf1f6f53742350da7e683b87e83e586bc1a9e9960f7b301518b5fa1090374b581581d9e33165a77670bef205469869c144f6ebca178beb677aed821c711cd9335a06d8e8bc195e80009c0b041c841ba4d6351f6af0e", 0xb6}, {&(0x7f0000000640)="8c5237b9242a595e6dcd24d0f983641e34262fd5a1ed9f83e06970b6ba3f29fba7f20f9c6beab82305c1e918fea4693064a366a80f0c9fcee7fd4585ae3889e062b0569d6c10f660233df18f19964bcc9ad4ab638962b49496f90b17565b9237eb6227a1f202218adc1accb163c9305a216acf5bae57e2912e6929daf74f43a1cb2b447a56c0672f30b7cf45e069037d0b661530d7e926f74bd6f439a2b12d5523d7323e", 0xa4}, {&(0x7f00000009c0)="8b73faccb49c333264de748dfed20749da939f576c9fde9c94a284061e5144d031f04148d1098015a8932a5b397b90abe8a4def993408e90dd20e7821663a30d6a7e21061784a6f182613ac8ffbe3fda338e6b2381d70f0631e6ba99049d8ea04c1ba77ad505bfbce3b8f88dead4eaa7f95eff994ec23beb4a625a2d31d9c2cd7962f4ec730eb0d75a12ebfaa004a0d66e5757f0b33a966cdac9c2889d178ca618b73f0b4c40a03708d340710ac900913e5c3a9590003e9e2e0b16c4af8c0d12491888b9fb45cab7a42f29c5", 0xcc}, {&(0x7f0000000ac0)="ef0f823b1a4602d4da04579b36fdf6684a5afc44ecad23e308bfb731674c0f9ffef203e281c110e53f742a2665c95c8d0c4c7f2864d4b70ba02029f85884385550f4e3bb228a49bd3fe02ae74446f2c33410236cc6c9fab616d93b3eae59a41d2260f44fdb4d2de9c2d102baa1b44f089fd8f09f2a71ed17688a91e0ef43782db2e90a5329e6603a93bedf17ed843438aacc2a83a265b6e4b6edb49e381de9244bbaeab5077289071148425a02905f8a6c0016fc33afa83aa2f73983ae96b875d61de7", 0xc3}, {&(0x7f00000003c0)="32c528853233b20c6d98d577dce5e3b2482397769a790451ded2d90969aeef191e9d44c35b0bf99634225ffe0c810b8e14655dd2553bec659c2b91f3b2893e733a6ec55f963ec53184a5e7f5d16c5418eb6b053fa7be43460a9536315842ca9be6adc46b70", 0x65}, {&(0x7f0000000bc0)="5c06ff212ff4729a575cb2d949d68aef2b1022a3458a3fba2f49428c82519a4b8759e02d0eb06c86547918614af942f39ed45562794c47bd193d58e10480b9041a0c4d5318c395bcb73166cd3718eb789d75ffebaee5d8cc231a6c8b62c31fa3c345b826e3d608c51a929e71336d16c08b7d123d6b81f0424452795872bbbd8961ba553bfc338611f29eafa5729e937e200a7211de108f743d3917c2dfbc99113ac5e0553eed351a0b23478ac0fb33714b48cb63e2ff67bac14f547d30337ea1df7e1ef5b1e483f4d9da80fdbce8f6ce81dc1c", 0xd3}, {&(0x7f0000000700)="cfcdc9ffb0c02c826cc52869a4f3e89ffc4c2412c8d84a91dfcad15b133e4cc21f8eaf5845ce02305b5bd2b0adee70638e0a3b1eb698abe11899d4ee445c5bc48573d9f68abdf00d8517fc3e593a2cfe868484e6ee72b648eb860e7669626928f76f5b2f7e70fc81f7385be82f51a666fa6aa121fd10136bccc9a418fe50369984a6a1f6a691f49de14806aac27f1313b98fd7c33a9684bb4857f913399be1066151835972", 0xa5}], 0x7}}, {{0x0, 0x0, &(0x7f0000005a40)=[{&(0x7f0000000900)="0f91a6a1fe7a1f68c3637f321238359b9df6", 0x12}], 0x1}}], 0x3, 0x8008801) sendmmsg$inet6(r4, &(0x7f0000019880)=[{{0x0, 0x0, &(0x7f0000019740)=[{&(0x7f0000019940)='i', 0x1}], 0x1}}], 0x1, 0x2604082c) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r5, 0x11, 0x1, &(0x7f0000000040), 0x4) r6 = socket(0x2c, 0x6, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x0, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0xfffd, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010121, @rand_addr=0x64010100}}}}) r7 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$unix(r7, 0x0, 0x0, 0x40000100, 0x0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/oops_count', 0x12040, 0x1c1) mknodat$loop(r8, &(0x7f0000000180)='./cgroup\x00', 0x100, 0x1) 1.360759239s ago: executing program 9 (id=4047): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}]}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r1, &(0x7f0000000980)={0x2020}, 0x2020) 1.356133269s ago: executing program 9 (id=4048): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[], 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x66) 1.342257269s ago: executing program 1 (id=4049): r0 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000001580)={0x0, "e5cf9087c0bc4eecd575619bf7fe717b09a75040d67944bdf74658aa573ec7ec5fd9ecb3bf2ad2cceb6d2f7879709ab2db2fcfa073f7ab9055774346282c82cc", 0x17}, 0x48, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000001600)='a`h', 0x3) ioprio_set$uid(0x3, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) read(r1, &(0x7f0000000040)=""/141, 0x8d) read$FUSE(0xffffffffffffffff, &(0x7f0000001640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r3, &(0x7f00000000c0), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) prlimit64(r2, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) getpid() syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r4) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x34, 0x0, &(0x7f00000000c0)) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4) sendfile(r1, r1, 0x0, 0x7ffff000) 1.224932191s ago: executing program 0 (id=4050): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x54402, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x12, r0, 0x4d75d000) 1.224318721s ago: executing program 1 (id=4051): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cgroup.kill\x00', 0x275a, 0x0) fchmod(r1, 0x80) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x10b, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0xfffffffffffffe55, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cgroup.kill\x00', 0x275a, 0x0) (async) fchmod(r1, 0x80) (async) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) (async) fcntl$setlease(r2, 0x400, 0x0) (async) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x10b, 0x2}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0xfffffffffffffe55, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) (async) 1.205336062s ago: executing program 0 (id=4052): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) userfaultfd(0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x29, 0x4a, 0x0, &(0x7f0000000180)) (async) getsockopt$inet6_int(r2, 0x29, 0x4a, 0x0, &(0x7f0000000180)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x10d000, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000200)) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x7f) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009d02"]) (async) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009d02"]) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000240)="221094411ece9a37c0fb001f95548ca7", 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2c8580, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2c8580, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000001f002a000040000000000400000000000000"]) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000002c0)={0x2, 0xfffffffc, 0x0, &(0x7f0000000580)=""/77, 0x0, 0x8000000}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92, 0x80a0000}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000440)={[0x0, 0xfffffffffffffffd, 0x0, 0x81, 0xffffc, 0x166, 0x2, 0x100000000005, 0xfffffffffffffffe, 0x7, 0xfffffffffffffffe, 0x1, 0x3ff800, 0x3, 0x2, 0xfffffffffffffffe], 0x0, 0xa3c0}) (async) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000440)={[0x0, 0xfffffffffffffffd, 0x0, 0x81, 0xffffc, 0x166, 0x2, 0x100000000005, 0xfffffffffffffffe, 0x7, 0xfffffffffffffffe, 0x1, 0x3ff800, 0x3, 0x2, 0xfffffffffffffffe], 0x0, 0xa3c0}) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000640)={[0x202a4, 0xfffffffffffffffd, 0x88000, 0x800000000005, 0x2, 0x5, 0xefffffffffffffff, 0x3ff, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x1, 0x7fff, 0xff], 0xeeee0000, 0x41845}) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB="f0000000100013070000000000000000ffffffff000000000000000000000000ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000033000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000020000006a00000000000000"], 0xf0}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1.119953443s ago: executing program 1 (id=4053): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x11, r0) sched_getparam(r0, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0x40087707, 0x2) 838.726787ms ago: executing program 1 (id=4054): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "93a6e232ca86d318", "f945e0ae8dfa6ea264031278b10a7f26", "aeaf8a5d", "64492e1964fe7a28"}, 0x28) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) (async) recvfrom$inet6(r0, &(0x7f0000000080)=""/66, 0x34, 0x3, &(0x7f0000000100)={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) 837.144657ms ago: executing program 0 (id=4056): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x4000042, 0x83f}, 0x10) socket$tipc(0x1e, 0x5, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"]) chdir(0x0) unlink(&(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x28001, 0x0) poll(&(0x7f0000000040)=[{r6, 0x200}], 0x1, 0x138) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000086"]) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x84, 0x8, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) 836.502287ms ago: executing program 1 (id=4057): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$TUNGETDEVNETNS(r1, 0xff05, 0x0) ioctl$NS_GET_USERNS(r2, 0x8004b706, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) socket(0x1d, 0x3, 0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000082312073f0076bb48740109022400010000102009040000020300030009210700000122050009050103000206005c"], 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="070002000000fddbdf2505000000180001801400020073797a5f74756e0000000201000000000c0003800400038004000100080005"], 0x40}}, 0x40) 834.919587ms ago: executing program 7 (id=4059): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e", 0xab}], 0x2}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f3c028c27ba00"/84, 0x54}, {&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d", 0xd6}, {&(0x7f0000000e80)="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", 0x1be}], 0x3}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) syz_clone(0x4000000, &(0x7f0000000540)="eb8f537e42c77bc67f3df5994a78db6e80e378dd314dbbdef25713dea667f2f515667bb12a6bfd320f5c59131e8e902072d3c2dd2270fb94e6ec1c2a99902862370e1e90aa870dc478d7e37eac9f6a34850328af4e2ac0ab714f8dbc0d643bfd450e7599703feeb9416971a380d0001d2a017b46d448010ebcca16e2a6f7a3c900b91c02071d7178755bb981bbaf3d4ac542f581556f4c424ad22aac356953b2a53d1be30828cf6bdbed7cba0731f4b5bf36604b5f1c104722768f783ccdfec975288895", 0xc4, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000640)="5f3520efdd201b78205a67a0c8d6573d23b9b01888ebda102eff398b3c3870d2c050257431876c129c4a72c0ad04c15084f4aa680e9c680396054656e24cfd14da8007137bff446af141e5f4c17c2e3dbd1795d5821fb2f5d35881d9c5cf1e33228d6d125ba456bd70cc0a6179054e8eb87febcf7a27b96c63131042d5c0ab3e8201d140ea5162e9c502e774797a271ac6ba0794272e50e9c4860ce5c623d9779ef1936a378731839fecc43b7d4e85c4dd356053f4be9b7944b464b5027b984396e722240f7afbde7b2866527e4016") r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$TIOCSISO7816(r2, 0xc0285443, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001200050100000000f00000009db21a000047000000000000000000000000000000000000060000000000000000000001020001ff"], 0x38}, 0x1, 0x0, 0x0, 0x24020800}, 0x20040810) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="120100009880a420d00622065a3f0102030109022400010900"], 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f00000000c0)={0x7f, 0x0, 0x0, 0xb9ff}) write$binfmt_aout(r5, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)) r6 = syz_open_pts(r5, 0x101000) r7 = dup3(r6, r5, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x17) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000200)=0xfc) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x12) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x98, 0x0, &(0x7f0000000480)=[@decrefs={0x40046307, 0x3}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0x8, 0x1, 0x4000016}, @flat=@handle={0x73682a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/12, 0xc, 0x1, 0x8}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}, 0x40}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x1, &(0x7f0000000380)=""/246, 0xf6, 0x1, 0x25}, @flat=@weak_binder={0x77622a85, 0x1101, 0x2}, @flat=@weak_handle={0x77682a85, 0x110b, 0x3}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000002c0)) 344.754504ms ago: executing program 0 (id=4060): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0x20}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_buf(r2, 0x29, 0x20, 0x0, 0x0) r3 = add_key$keyring(&(0x7f00000012c0), &(0x7f0000001280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000080)='rxrpc\x00', &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000002d000100000000000000000008000c00", @ANYRES32, @ANYBLOB="0b000080976b6408686030000800018004"], 0x2c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0/file0\x00', 0x4) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x400, &(0x7f00000000c0)=ANY=[@ANYBLOB='context']) 255.298736ms ago: executing program 0 (id=4061): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ftruncate(r0, 0x2) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5de00987f70e06d038e7ff7fc6e5539b0d650e8b089b3f353b68090890e0878f0e1ac6e7049b3b43959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07410936cd3b78130daa61d8e8041800005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffe}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x44}}, 0x44014) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext=']) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000000)={0x6, 0x6, 0x100, 0x1, 0x5}, 0x14) 209.335767ms ago: executing program 7 (id=4062): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000380), 0x2, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000080)=""/175) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) io_setup(0x4, &(0x7f0000000100)) 148.441037ms ago: executing program 0 (id=4063): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x15, 0x0, &(0x7f0000000100)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x65, 0x0, &(0x7f0000000140)="6efa86ba44c4dcef07b59db7e9a27f48a6e930da91c08c993e71a416eb2235d1314cf41411de9aa874429c871656ff38656d42c237a569b22dc9923150d6eb5b381125c2173cdb022eb5d8fc7a7df730ad34e08a536eaca88d851d6505f7b2b6831911631a"}) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000480)={0x10, 0x0, 0xffff, 0x1}, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0x9) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open$dir(0x0, 0x101000, 0x1e8) read$FUSE(0xffffffffffffffff, &(0x7f0000004280)={0x2020}, 0x2020) r5 = dup(r2) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="1e030cc03c5c980128876360864668f82ffdd569d2f630b5e033ff11edf1c5ffc733d2acb165fe588cd568cd"], 0xffdd) ioctl$USBDEVFS_ALLOC_STREAMS(r5, 0x8008551c, &(0x7f0000000140)=ANY=[]) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x1000, 0x200, 0xa, 0x20}, {}, {0x0, 0x0, 0x9, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x7fffffffffffffff, 0x100) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) ioprio_get$pid(0x2, 0x0) mmap(&(0x7f0000b19000/0x3000)=nil, 0x3000, 0x2000000, 0x28011, r9, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r9, 0x8004551a, &(0x7f0000000040)) 134.024988ms ago: executing program 7 (id=4064): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101101) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000040)=ANY=[@ANYBLOB="62da00000b"]) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x88240, 0x0) preadv2(r1, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000840)=""/56, 0x38}], 0x2, 0xa67, 0x2, 0xf) 108.742838ms ago: executing program 7 (id=4065): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000002cc0)=""/2, 0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) setrlimit(0xf, &(0x7f0000000000)={0x0, 0xfffffffbffffffff}) timer_create(0x3, 0x0, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001640)={0x30, 0x2e, 0x503, 0x0, 0x0, "", [@typed={0x0, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x30}], 0x1}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc9a, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0xfffffffffffffce6}}, 0x10}], 0x0, 0x0, 0x0}) 850.48µs ago: executing program 7 (id=4066): arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x0) (async) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x7) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x1000000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000040)=0x1e) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000080)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0xa) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000000c0)={0x3b, 0x3, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x19}}]}, 0x28) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) (async) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x6) (async) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x2) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x8000000000000000) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0xffffffff) (async) r2 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000140)={0x7, 0x9, 0x9, 0x9, 0x80}) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000180)) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f00000001c0)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) signalfd(r0, &(0x7f0000000200)={[0xc2]}, 0x8) (async) r3 = signalfd(r1, &(0x7f0000000240)={[0x3]}, 0x8) setsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000280)=0x7, 0x4) (async) r4 = socket$pptp(0x18, 0x1, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000380)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000002c0)="caec2a34ca2b40381e0dac99bb11d4cd83f4f4dd0401247dce2ae09a74b693856b883e8edbcf2b87ed61cd1d568ca1074fd46b466ff11e0455f81d869ce796e764f111438fadf70f7bbc3b0d00b6b6e20289227721958c3465f0e627a22247eadc41e14b94e77fc0d12618eb62061fc250acc8b886c82b6066a4529b7b65a59bad3c4b67ab63", 0x86, r4}, 0x68) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x8) (async) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5) (async) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x97b) (async) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x401) (async) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x4) (async) bind$pptp(r4, &(0x7f0000000400)={0x18, 0x2, {0x3, @loopback}}, 0x1e) 0s ago: executing program 7 (id=4067): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x8032, r0, 0x4000) kernel console output (not intermixed with test programs): SerialNumber=3 [ 181.692094][ T45] usb 2-1: SerialNumber: syz [ 181.927343][ T45] usb 2-1: 0:2 : does not exist [ 181.949324][ T45] usb 2-1: unit 5: unexpected type 0x0a [ 181.969435][ T45] usb 2-1: USB disconnect, device number 17 [ 181.993070][ T5646] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 182.074741][ T5912] udevd[5912]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 182.163049][ T5646] usb 9-1: Using ep0 maxpacket: 8 [ 182.171642][ T5646] usb 9-1: config 5 has an invalid interface number: 143 but max is 2 [ 182.195101][ T5646] usb 9-1: config 5 has an invalid interface number: 6 but max is 2 [ 182.213249][ T5646] usb 9-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 182.230463][ T5646] usb 9-1: config 5 has 2 interfaces, different from the descriptor's value: 3 [ 182.241456][ T5646] usb 9-1: config 5 has no interface number 0 [ 182.248125][ T5646] usb 9-1: config 5 has no interface number 1 [ 182.259071][ T5646] usb 9-1: config 5 interface 143 altsetting 30 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 182.278268][ T5646] usb 9-1: too many endpoints for config 5 interface 6 altsetting 7: 122, using maximum allowed: 30 [ 182.297048][ T5646] usb 9-1: config 5 interface 6 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 122 [ 182.311152][ T5646] usb 9-1: config 5 interface 143 has no altsetting 0 [ 182.318817][ T5646] usb 9-1: config 5 interface 6 has no altsetting 0 [ 182.335407][ T5646] usb 9-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=fc.f3 [ 182.344830][ T5646] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.353388][ T5646] usb 9-1: Product: syz [ 182.359700][ T5646] usb 9-1: Manufacturer: syz [ 182.365181][ T5646] usb 9-1: SerialNumber: syz [ 182.629138][ T5646] usb 9-1: USB disconnect, device number 25 [ 182.645858][ T5912] udevd[5912]: setting mode of /dev/bus/usb/009/025 to 020664 failed: No such file or directory [ 182.667920][ T5912] udevd[5912]: setting owner of /dev/bus/usb/009/025 to uid=0, gid=0 failed: No such file or directory [ 182.691027][ T8149] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2804'. [ 182.810608][ T8152] >: renamed from veth0_vlan (while UP) [ 182.923297][ T36] kauditd_printk_skb: 967 callbacks suppressed [ 182.923316][ T36] audit: type=1400 audit(1750675573.512:4618): avc: denied { create } for pid=8156 comm="syz.7.2807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 182.950321][ T36] audit: type=1400 audit(1750675573.512:4619): avc: denied { connect } for pid=8156 comm="syz.7.2807" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 182.973100][ T36] audit: type=1400 audit(1750675573.512:4620): avc: denied { write } for pid=8156 comm="syz.7.2807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 183.059476][ T36] audit: type=1400 audit(1750675573.642:4621): avc: denied { create } for pid=8163 comm="syz.7.2809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 183.143072][ T36] audit: type=1400 audit(1750675573.722:4622): avc: denied { create } for pid=8168 comm="syz.7.2811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 183.162877][ T36] audit: type=1400 audit(1750675573.732:4623): avc: denied { setopt } for pid=8168 comm="syz.7.2811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 183.213265][ T36] audit: type=1400 audit(1750675573.802:4624): avc: denied { read write } for pid=6739 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 183.247678][ T36] audit: type=1400 audit(1750675573.802:4625): avc: denied { read write open } for pid=6739 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 183.273077][ T36] audit: type=1400 audit(1750675573.802:4626): avc: denied { ioctl } for pid=6739 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 183.305450][ T8173] rust_binder: Write failure EFAULT in pid:234 [ 183.306409][ T36] audit: type=1400 audit(1750675573.822:4627): avc: denied { create } for pid=8172 comm="syz.8.2813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 183.605429][ T8199] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2822'. [ 183.620394][ T8199] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 183.620428][ T8199] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 183.630793][ T8199] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:245 [ 183.737412][ T8211] overlayfs: failed to clone upperpath [ 183.996804][ T8240] netlink: 'syz.0.2834': attribute type 8 has an invalid length. [ 184.748063][ T8269] overlayfs: failed to clone upperpath [ 184.826087][ T8282] tipc: Enabling of bearer rejected, failed to enable media [ 184.845812][ T8285] rust_binder: Write failure EINVAL in pid:246 [ 184.891427][ T8289] binder: Unknown parameter 'stats ' [ 184.958117][ T8296] sock: sock_timestamping_bind_phc: sock not bind to device [ 184.993513][ T8296] input: syz1 as /devices/virtual/input/input14 [ 185.234165][ T8305] SELinux: policydb version -394168029 does not match my version range 15-33 [ 185.243202][ T8305] SELinux: failed to load policy [ 185.288546][ T8308] rust_binder: Write failure EFAULT in pid:261 [ 186.533079][ T5646] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 186.695464][ T5646] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.705990][ T5646] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 186.718410][ T5646] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 186.727913][ T5646] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.735960][ T5646] usb 2-1: Product: syz [ 186.740677][ T5646] usb 2-1: Manufacturer: syz [ 186.745479][ T5646] usb 2-1: SerialNumber: syz [ 186.958866][ T8357] rust_binder: Write failure EINVAL in pid:273 [ 186.963303][ T5646] usb 2-1: 0:2 : does not exist [ 187.005149][ T5646] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 187.028359][ T5646] usb 2-1: USB disconnect, device number 18 [ 187.106459][ T5912] udevd[5912]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 187.155247][ T8381] tipc: Enabling of bearer rejected, failed to enable media [ 187.733084][ T5646] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 187.883060][ T5646] usb 2-1: Using ep0 maxpacket: 32 [ 187.890646][ T5646] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 187.899932][ T5646] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 187.908597][ T5646] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 187.917597][ T5646] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 187.927263][ T5646] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 187.936947][ T5646] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 187.951444][ T5646] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 187.961338][ T5646] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.972866][ T5646] usb 2-1: config 0 descriptor?? [ 187.981901][ T36] kauditd_printk_skb: 530 callbacks suppressed [ 187.981919][ T36] audit: type=1400 audit(1750675578.572:5158): avc: denied { create } for pid=8410 comm="syz.0.2892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 188.014297][ T36] audit: type=1400 audit(1750675578.572:5159): avc: denied { create } for pid=8410 comm="syz.0.2892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 188.035492][ T36] audit: type=1400 audit(1750675578.572:5160): avc: denied { create } for pid=8410 comm="syz.0.2892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 188.056997][ T36] audit: type=1400 audit(1750675578.572:5161): avc: denied { create } for pid=8410 comm="syz.0.2892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 188.078307][ T36] audit: type=1400 audit(1750675578.572:5162): avc: denied { create } for pid=8410 comm="syz.0.2892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 188.099398][ T36] audit: type=1400 audit(1750675578.572:5163): avc: denied { create } for pid=8410 comm="syz.0.2892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 188.120629][ T36] audit: type=1400 audit(1750675578.572:5164): avc: denied { create } for pid=8410 comm="syz.0.2892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 188.141707][ T36] audit: type=1400 audit(1750675578.572:5165): avc: denied { create } for pid=8410 comm="syz.0.2892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 188.162855][ T36] audit: type=1400 audit(1750675578.572:5166): avc: denied { create } for pid=8410 comm="syz.0.2892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 188.183948][ T36] audit: type=1400 audit(1750675578.572:5167): avc: denied { create } for pid=8410 comm="syz.0.2892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 188.233106][ T5646] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 188.282405][ T8429] overlayfs: failed to clone upperpath [ 188.458863][ T5646] usb 2-1: USB disconnect, device number 19 [ 188.468764][ T5646] usblp0: removed [ 188.950238][ T8445] overlayfs: failed to clone upperpath [ 189.097701][ T8456] overlayfs: failed to clone upperpath [ 189.383077][ T5648] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 189.523095][ T5648] usb 2-1: device descriptor read/64, error -71 [ 189.763088][ T5648] usb 2-1: device descriptor read/64, error -71 [ 189.857134][ T8483] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2920'. [ 189.921495][ T8490] /dev/rnullb0: Can't lookup blockdev [ 189.928428][ T8491] overlayfs: failed to clone upperpath [ 190.003170][ T5648] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 190.143100][ T5648] usb 2-1: device descriptor read/64, error -71 [ 190.383066][ T5648] usb 2-1: device descriptor read/64, error -71 [ 190.493596][ T5648] usb usb2-port1: attempt power cycle [ 190.833073][ T5648] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 190.855983][ T5648] usb 2-1: device descriptor read/8, error -71 [ 190.997105][ T5648] usb 2-1: device descriptor read/8, error -71 [ 191.243076][ T5648] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 191.265559][ T5648] usb 2-1: device descriptor read/8, error -71 [ 191.395793][ T5648] usb 2-1: device descriptor read/8, error -71 [ 191.639079][ T8569] overlay: Unknown parameter 'mounts' [ 191.967368][ T5648] usb usb2-port1: unable to enumerate USB device [ 192.068985][ T8588] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 192.077423][ T8588] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 192.087464][ T8588] overlayfs: missing 'lowerdir' [ 192.450762][ T8617] rust_binder: Error while translating object. [ 192.450817][ T8617] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 192.465204][ T8617] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:290 [ 192.538734][ T8624] netlink: 5308 bytes leftover after parsing attributes in process `syz.1.2967'. [ 192.580883][ T8624] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 192.580916][ T8624] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:292 [ 192.919928][ T45] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 193.030850][ T8653] netlink: 5308 bytes leftover after parsing attributes in process `syz.8.2977'. [ 193.071959][ T36] kauditd_printk_skb: 481 callbacks suppressed [ 193.071980][ T36] audit: type=1400 audit(1750675583.575:5649): avc: denied { create } for pid=8656 comm="syz.0.2979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 193.099762][ T8657] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2979'. [ 193.135220][ T36] audit: type=1400 audit(1750675583.641:5650): avc: denied { ioctl } for pid=8629 comm="syz.1.2969" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 193.145663][ T45] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 193.161907][ T36] audit: type=1400 audit(1750675583.641:5651): avc: denied { ioctl } for pid=8629 comm="syz.1.2969" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 193.187213][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 193.211850][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 193.223778][ T36] audit: type=1400 audit(1750675583.641:5652): avc: denied { ioctl } for pid=8629 comm="syz.1.2969" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 193.248943][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 193.263103][ T45] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 193.272194][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.281406][ T36] audit: type=1400 audit(1750675583.650:5653): avc: denied { ioctl } for pid=8629 comm="syz.1.2969" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 193.310759][ T45] usb 2-1: config 0 descriptor?? [ 193.322478][ T36] audit: type=1400 audit(1750675583.650:5654): avc: denied { ioctl } for pid=8629 comm="syz.1.2969" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 193.349481][ T36] audit: type=1400 audit(1750675583.669:5655): avc: denied { ioctl } for pid=8629 comm="syz.1.2969" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 193.375862][ T36] audit: type=1400 audit(1750675583.706:5656): avc: denied { create } for pid=8660 comm="syz.7.2980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 193.415443][ T36] audit: type=1400 audit(1750675583.706:5657): avc: denied { mounton } for pid=8662 comm="syz.8.2981" path="/154/file0" dev="tmpfs" ino=900 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 193.439426][ T36] audit: type=1400 audit(1750675583.706:5658): avc: denied { create } for pid=8660 comm="syz.7.2980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 193.485382][ T8674] overlayfs: failed to clone upperpath [ 193.753097][ T45] plantronics 0003:047F:FFFF.000D: ignoring exceeding usage max [ 193.764310][ T45] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 193.779208][ T45] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 194.092970][ T8689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.111633][ T8689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.129350][ T8689] rust_binder: Error in use_page_slow: ESRCH [ 194.129376][ T8689] rust_binder: use_range failure ESRCH [ 194.135490][ T8689] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 194.141029][ T8689] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 194.149368][ T8689] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:294 [ 194.161827][ T8693] netlink: 5308 bytes leftover after parsing attributes in process `syz.0.2990'. [ 194.383698][ T8709] /dev/rnullb0: Can't lookup blockdev [ 194.463846][ T8713] overlayfs: failed to clone upperpath [ 194.635017][ T8720] netlink: 5308 bytes leftover after parsing attributes in process `syz.7.3000'. [ 195.512100][ T8752] overlayfs: failed to clone upperpath [ 195.582698][ T8761] fuse: Unknown parameter ' c' [ 195.797541][ T8786] overlayfs: failed to resolve './file0': -2 [ 195.871504][ T8797] overlayfs: failed to clone upperpath [ 195.967156][ T45] usb 2-1: USB disconnect, device number 24 [ 196.458521][ T45] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 196.618905][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 196.630473][ T45] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 196.638878][ T45] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 196.647731][ T45] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 196.656844][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 196.666578][ T45] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 196.676301][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 196.690033][ T45] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 196.699198][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.709021][ T45] usb 2-1: config 0 descriptor?? [ 196.937235][ T45] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 197.041520][ T8846] overlayfs: failed to clone upperpath [ 197.151558][ T5648] usb 2-1: USB disconnect, device number 25 [ 197.162568][ T5648] usblp0: removed [ 197.613737][ T8889] overlayfs: failed to clone upperpath [ 197.829162][ T8914] IPv6: syztnl1: Disabled Multicast RS [ 197.872723][ T8917] overlayfs: failed to clone upperpath [ 197.955460][ T8927] overlay: Unknown parameter 'audit' [ 198.027099][ T8929] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3071'. [ 198.331426][ T13] bridge_slave_1: left allmulticast mode [ 198.337125][ T13] bridge_slave_1: left promiscuous mode [ 198.344880][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.353830][ T13] bridge_slave_0: left allmulticast mode [ 198.359567][ T13] bridge_slave_0: left promiscuous mode [ 198.365865][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.469053][ T36] kauditd_printk_skb: 547 callbacks suppressed [ 198.469071][ T36] audit: type=1400 audit(1750675588.627:6206): avc: denied { mounton } for pid=8945 comm="syz.0.3077" path="/269/file0" dev="tmpfs" ino=1550 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 198.501052][ T8941] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.513484][ T8941] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.520664][ T8941] bridge_slave_0: entered allmulticast mode [ 198.529747][ T8941] bridge_slave_0: entered promiscuous mode [ 198.537115][ T13] veth1_macvtap: left promiscuous mode [ 198.542693][ T13] veth0_vlan: left promiscuous mode [ 198.595451][ T36] audit: type=1400 audit(1750675588.739:6207): avc: denied { create } for pid=8945 comm="syz.0.3077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 198.631587][ T36] audit: type=1400 audit(1750675588.748:6208): avc: denied { create } for pid=8945 comm="syz.0.3077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 198.633683][ T8941] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.651762][ T36] audit: type=1400 audit(1750675588.748:6209): avc: denied { setopt } for pid=8945 comm="syz.0.3077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 198.696256][ T8941] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.703384][ T8941] bridge_slave_1: entered allmulticast mode [ 198.704711][ T36] audit: type=1400 audit(1750675588.758:6210): avc: denied { map } for pid=8945 comm="syz.0.3077" path="socket:[34539]" dev="sockfs" ino=34539 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 198.740539][ T8941] bridge_slave_1: entered promiscuous mode [ 198.748177][ T36] audit: type=1400 audit(1750675588.758:6211): avc: denied { read write } for pid=8945 comm="syz.0.3077" path="socket:[34539]" dev="sockfs" ino=34539 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 198.792883][ T36] audit: type=1400 audit(1750675588.870:6212): avc: denied { execmem } for pid=8945 comm="syz.0.3077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 198.832818][ T36] audit: type=1400 audit(1750675588.888:6213): avc: denied { read write } for pid=6813 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 198.869911][ T36] audit: type=1400 audit(1750675588.888:6214): avc: denied { read write open } for pid=6813 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 198.899759][ T36] audit: type=1400 audit(1750675588.888:6215): avc: denied { ioctl } for pid=6813 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 199.095252][ T8941] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.102376][ T8941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.109697][ T8941] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.116792][ T8941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.161549][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.168956][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.349320][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.356429][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.381339][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.388491][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.464131][ T8968] raw_sendmsg: syz.7.3086 forgot to set AF_INET. Fix it! [ 199.570617][ T8941] veth0_vlan: entered promiscuous mode [ 199.662067][ T8941] veth1_macvtap: entered promiscuous mode [ 199.789210][ T8981] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3092'. [ 199.903568][ T8985] binder: Bad value for 'stats' [ 200.499632][ T309] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 200.701710][ T309] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.727392][ T309] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.749107][ T309] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 200.777669][ T309] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 200.797485][ T309] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.821060][ T309] usb 10-1: config 0 descriptor?? [ 201.305813][ T9009] fuse: Bad value for 'group_id' [ 201.321776][ T309] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 201.330230][ T9009] fuse: Bad value for 'group_id' [ 201.351778][ T309] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 201.364561][ T309] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 201.373126][ T309] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 201.380648][ T309] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 201.391429][ T309] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 201.412003][ T309] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 201.425340][ T9015] overlayfs: failed to clone upperpath [ 201.430407][ T309] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 201.441189][ T309] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 201.448627][ T309] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 201.472003][ T309] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 201.479546][ T309] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 201.490312][ T309] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 201.499244][ T309] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 201.506814][ T309] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 201.514445][ T309] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 201.529981][ T309] plantronics 0003:047F:FFFF.000E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 201.619809][ T9003] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 201.619839][ T9003] rust_binder: Error while translating object. [ 201.639154][ T9003] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 201.648044][ T9003] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:9 [ 201.673452][ T309] usb 10-1: USB disconnect, device number 2 [ 201.720852][ T5646] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 201.769565][ T9028] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3109'. [ 201.900041][ T5646] usb 2-1: Using ep0 maxpacket: 32 [ 201.908341][ T5646] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.920963][ T5646] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 201.931900][ T5646] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.943021][ T5646] usb 2-1: config 0 descriptor?? [ 202.385093][ T5646] arvo 0003:1E7D:30D4.000F: unknown main item tag 0x0 [ 202.405891][ T5646] arvo 0003:1E7D:30D4.000F: unknown main item tag 0x0 [ 202.412933][ T5646] arvo 0003:1E7D:30D4.000F: item fetching failed at offset 2/5 [ 202.445427][ T5646] arvo 0003:1E7D:30D4.000F: parse failed [ 202.451184][ T5646] arvo 0003:1E7D:30D4.000F: probe with driver arvo failed with error -22 [ 202.542964][ T9059] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3121'. [ 202.605042][ T5644] usb 2-1: USB disconnect, device number 26 [ 202.812234][ T9079] rust_binder: Write failure EFAULT in pid:22 [ 202.817908][ T9079] netlink: 220 bytes leftover after parsing attributes in process `syz.9.3128'. [ 203.844443][ T36] kauditd_printk_skb: 485 callbacks suppressed [ 203.844464][ T36] audit: type=1400 audit(1750675593.645:6701): avc: denied { create } for pid=9094 comm="syz.9.3134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 203.883321][ T36] audit: type=1400 audit(1750675593.645:6702): avc: denied { wake_alarm } for pid=9101 comm="syz.7.3137" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 203.920552][ T36] audit: type=1400 audit(1750675593.719:6703): avc: denied { create } for pid=9103 comm="syz.7.3138" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 203.969854][ T36] audit: type=1400 audit(1750675593.729:6704): avc: denied { ioctl } for pid=9103 comm="syz.7.3138" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=36919 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 204.029322][ T36] audit: type=1400 audit(1750675593.729:6705): avc: denied { execmem } for pid=9103 comm="syz.7.3138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 204.059618][ T36] audit: type=1400 audit(1750675593.729:6706): avc: denied { ioctl } for pid=9103 comm="syz.7.3138" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=36919 ioctlcmd=0xaa03 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 204.196595][ T36] audit: type=1400 audit(1750675593.757:6707): avc: denied { read write } for pid=8941 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 204.267080][ T36] audit: type=1400 audit(1750675593.757:6708): avc: denied { read write open } for pid=8941 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 204.335131][ T36] audit: type=1400 audit(1750675593.757:6709): avc: denied { ioctl } for pid=8941 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 204.401631][ T36] audit: type=1400 audit(1750675593.916:6710): avc: denied { read } for pid=9113 comm="syz.9.3139" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 204.424235][ T9139] tmpfs: Bad value for 'nr_inodes' [ 204.441706][ T9140] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65498 sclass=netlink_route_socket pid=9140 comm=syz.0.3145 [ 204.797206][ T45] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 204.968235][ T45] usb 10-1: Using ep0 maxpacket: 16 [ 204.978662][ T45] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.995426][ T45] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.006893][ T45] usb 10-1: config 0 interface 0 has no altsetting 0 [ 205.014653][ T45] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 205.024694][ T45] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.044318][ T45] usb 10-1: config 0 descriptor?? [ 205.284750][ T9191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.310911][ T9191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.356009][ T45] usbhid 10-1:0.0: can't add hid device: -71 [ 205.382581][ T45] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 205.417833][ T45] usb 10-1: USB disconnect, device number 3 [ 205.509973][ T9199] rust_binder: Error while translating object. [ 205.510022][ T9199] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 205.527101][ T9199] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:350 [ 205.558773][ T9187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3162'. [ 206.099473][ T9238] binder: Unknown parameter 'Fscontext' [ 206.154914][ T5646] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 206.341625][ T5646] usb 2-1: not running at top speed; connect to a high speed hub [ 206.352012][ T5646] usb 2-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 206.368701][ T5646] usb 2-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 206.390440][ T5646] usb 2-1: config 1 interface 0 has no altsetting 0 [ 206.405064][ T5646] usb 2-1: New USB device found, idVendor=046d, idProduct=c30a, bcdDevice= 0.40 [ 206.415998][ T5646] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.425357][ T5646] usb 2-1: Product: Ѵ矹襢ᵓ厼尟é«áŸ£åŽŽî›žîŽ¨ê©µí—£ï·Œè¨¬â‡¦á±å…„è·³å´“ê–¤ê´Žìƒ³ìŸ’ë° ê³æ‰¶ï²¬ç¡ƒÝ³à¥«í€¡æŠ€â©”蜖薼㋞䬶㨫ᚕ稵朗蔸츪í»ä¸á¥‡îíšé¢¿å“æ•ﳸ俵榮ᦓ˕ꞹㆽä²è­å££çŒ‡ã³¸à¤Ÿê³—â˜ëƒ­áˆ„芀⃺僤듸㵹厚豷àµãª¸ê‘†è­’뢫ꮢî®í–©à¤Šà¸·Þå¯äŽ½á›¼è–ì‚䟭ᒢ쵀ꆶ튊屚᥌îŠá·»é¤æ¡ã°ë‘šì¾‚æ¶·äª [ 206.458440][ T5646] usb 2-1: Manufacturer: å–‹îŸä¡¿äƒê«Žè»®ä¸­æ­ç½·ì»ä€³â¸µã™²ë ½î«¦ì¤…䂽씵ώ盠绞貜sìŠíŸæžŠë­—굪闙ﵗè–䣾飽憼)ê‚ë€æ—²á¡¬é®¡å–¢ä®»îœ•ì†‹î±¬ï’·æ¹æ°‹ì©šæ¢©èª¿î³îš‰ê£’è ˜ïœèŽµäž¤ï¸šá†¬ï‡¾ï¸»ê±‚íƒµä®‚ä¾±ð‘¾£ä¥¾ìƒ„ê—›î”€èŽ…ä”ªì‘†é²‚î§¼Þ¸æƒ‘Ï¤à©“é„ä•€ì’褴è£ë“™î£ì¿ƒè²·æ‰‡ï½ì섭ᇕ⒅鳴 [ 206.489263][ T5648] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 206.497016][ T5646] usb 2-1: SerialNumber: syz [ 206.513555][ T9223] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 206.529535][ T9223] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 206.636007][ T5648] usb 10-1: device descriptor read/64, error -71 [ 206.892546][ T5648] usb 10-1: device descriptor read/64, error -71 [ 206.917755][ T9263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3191'. [ 206.975275][ T5646] usbhid 2-1:1.0: can't add hid device: -71 [ 206.988951][ T5646] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 207.008619][ T5646] usb 2-1: USB disconnect, device number 27 [ 207.149140][ T5648] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 207.298795][ T5648] usb 10-1: device descriptor read/64, error -71 [ 207.555377][ T5648] usb 10-1: device descriptor read/64, error -71 [ 207.652974][ T9297] overlayfs: failed to clone upperpath [ 207.680160][ T5648] usb usb10-port1: attempt power cycle [ 208.047136][ T5648] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 208.071151][ T5648] usb 10-1: device descriptor read/8, error -71 [ 208.223372][ T5648] usb 10-1: device descriptor read/8, error -71 [ 208.485486][ T5648] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 208.509540][ T5648] usb 10-1: device descriptor read/8, error -71 [ 208.648217][ T5648] usb 10-1: device descriptor read/8, error -71 [ 208.738574][ T9322] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3213'. [ 208.763524][ T5648] usb usb10-port1: unable to enumerate USB device [ 209.028155][ T9339] netlink: 'syz.0.3216': attribute type 11 has an invalid length. [ 209.036028][ T9339] netlink: 'syz.0.3216': attribute type 1 has an invalid length. [ 209.043790][ T9339] netlink: 3593 bytes leftover after parsing attributes in process `syz.0.3216'. [ 209.196540][ T36] kauditd_printk_skb: 630 callbacks suppressed [ 209.196561][ T36] audit: type=1400 audit(1750675600.652:7341): avc: denied { create } for pid=9346 comm="syz.7.3221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 209.226198][ T45] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 209.234684][ T36] audit: type=1400 audit(1750675600.652:7342): avc: denied { ioctl } for pid=9346 comm="syz.7.3221" path="socket:[38058]" dev="sockfs" ino=38058 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 209.261005][ T36] audit: type=1400 audit(1750675600.652:7343): avc: denied { ioctl } for pid=9346 comm="syz.7.3221" path="socket:[38058]" dev="sockfs" ino=38058 ioctlcmd=0xf503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 209.286943][ T36] audit: type=1400 audit(1750675600.652:7344): avc: denied { create } for pid=9346 comm="syz.7.3221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 209.307432][ T36] audit: type=1400 audit(1750675600.671:7345): avc: denied { create } for pid=9346 comm="syz.7.3221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 209.328014][ T36] audit: type=1400 audit(1750675600.671:7346): avc: denied { write } for pid=9346 comm="syz.7.3221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 209.348570][ T36] audit: type=1400 audit(1750675600.671:7347): avc: denied { read } for pid=9346 comm="syz.7.3221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 209.368946][ T36] audit: type=1400 audit(1750675600.671:7348): avc: denied { read } for pid=9346 comm="syz.7.3221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 209.389338][ T36] audit: type=1400 audit(1750675600.671:7349): avc: denied { write } for pid=9346 comm="syz.7.3221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 209.409743][ T36] audit: type=1400 audit(1750675600.708:7350): avc: denied { create } for pid=9349 comm="syz.7.3222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 209.415573][ T45] usb 2-1: device descriptor read/64, error -71 [ 209.682840][ T45] usb 2-1: device descriptor read/64, error -71 [ 209.885935][ T31] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 209.950096][ T45] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 210.057111][ T31] usb 10-1: Using ep0 maxpacket: 16 [ 210.077152][ T31] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 210.090235][ T45] usb 2-1: device descriptor read/64, error -71 [ 210.097575][ T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.110100][ T31] usb 10-1: config 0 descriptor?? [ 210.120740][ T31] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 210.342793][ T31] usb 10-1: Detected FT232A [ 210.347740][ T45] usb 2-1: device descriptor read/64, error -71 [ 210.355369][ T31] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 210.374307][ T31] usb 10-1: USB disconnect, device number 8 [ 210.389713][ T31] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 210.410344][ T31] ftdi_sio 10-1:0.0: device disconnected [ 210.461120][ T9376] overlayfs: failed to resolve './file0': -2 [ 210.463401][ T45] usb usb2-port1: attempt power cycle [ 210.478985][ T9376] overlayfs: failed to resolve './file0': -2 [ 210.682172][ T9391] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=9391 comm=syz.7.3238 [ 210.837419][ T45] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 210.861198][ T45] usb 2-1: device descriptor read/8, error -71 [ 211.013663][ T45] usb 2-1: device descriptor read/8, error -71 [ 211.057416][ T9408] can: request_module (can-proto-0) failed. [ 211.292276][ T45] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 211.340530][ T45] usb 2-1: device descriptor read/8, error -71 [ 211.456038][ T9432] futex_wake_op: syz.0.3252 tries to shift op by -1; fix this program [ 211.482483][ T45] usb 2-1: device descriptor read/8, error -71 [ 211.596922][ T45] usb usb2-port1: unable to enumerate USB device [ 212.295813][ T9446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3257'. [ 212.392116][ T9452] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 213.477969][ T5648] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 213.638334][ T5648] usb 2-1: Using ep0 maxpacket: 16 [ 213.645885][ T5648] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 213.655010][ T5648] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.664659][ T5648] usb 2-1: config 0 descriptor?? [ 213.673685][ T5648] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 213.892390][ T5648] usb 2-1: Detected FT232A [ 213.900993][ T5648] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 213.915336][ T5648] usb 2-1: USB disconnect, device number 32 [ 213.925029][ T5648] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 213.938474][ T5648] ftdi_sio 2-1:0.0: device disconnected [ 214.158115][ T9480] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 214.158144][ T9480] rust_binder: Error while translating object. [ 214.167788][ T9480] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 214.175318][ T9480] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:82 [ 214.394147][ T9498] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 214.447903][ T9501] overlay: ./bus is not a directory [ 214.548992][ T36] kauditd_printk_skb: 495 callbacks suppressed [ 214.549013][ T36] audit: type=1400 audit(1750675605.666:7846): avc: denied { read } for pid=9510 comm="syz.1.3280" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 214.591480][ T36] audit: type=1400 audit(1750675605.666:7847): avc: denied { read open } for pid=9510 comm="syz.1.3280" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 214.617793][ T36] audit: type=1400 audit(1750675605.666:7848): avc: denied { read } for pid=9510 comm="syz.1.3280" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 214.641812][ T36] audit: type=1400 audit(1750675605.666:7849): avc: denied { read open } for pid=9510 comm="syz.1.3280" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 214.666138][ T36] audit: type=1400 audit(1750675605.666:7850): avc: denied { read } for pid=9510 comm="syz.1.3280" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 214.690396][ T36] audit: type=1400 audit(1750675605.666:7851): avc: denied { read open } for pid=9510 comm="syz.1.3280" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 214.715526][ T36] audit: type=1400 audit(1750675605.666:7852): avc: denied { ioctl } for pid=9510 comm="syz.1.3280" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 214.742179][ T36] audit: type=1400 audit(1750675605.666:7853): avc: denied { create } for pid=9510 comm="syz.1.3280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 214.762492][ T36] audit: type=1400 audit(1750675605.675:7854): avc: denied { write } for pid=9510 comm="syz.1.3280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 214.783507][ T36] audit: type=1400 audit(1750675605.675:7855): avc: denied { nlmsg_write } for pid=9510 comm="syz.1.3280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 215.102954][ T5644] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 215.265261][ T5644] usb 2-1: Using ep0 maxpacket: 16 [ 215.288446][ T5644] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 215.306134][ T5644] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.330183][ T5644] usb 2-1: config 0 has no interface number 0 [ 215.340419][ T5644] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 215.349854][ T5644] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.357855][ T5644] usb 2-1: Product: syz [ 215.362050][ T5644] usb 2-1: Manufacturer: syz [ 215.366839][ T5644] usb 2-1: SerialNumber: syz [ 215.375241][ T5644] usb 2-1: config 0 descriptor?? [ 215.562659][ T309] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 215.608905][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 215.615438][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 215.722989][ T309] usb 10-1: Using ep0 maxpacket: 16 [ 215.730812][ T309] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 215.740026][ T309] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.749725][ T309] usb 10-1: config 0 descriptor?? [ 215.757131][ T309] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 215.861590][ T9534] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3288'. [ 215.973858][ T309] usb 10-1: Detected FT232A [ 215.988378][ T309] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 216.010266][ T309] usb 10-1: USB disconnect, device number 9 [ 216.018370][ T309] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 216.028530][ T309] ftdi_sio 10-1:0.0: device disconnected [ 216.813800][ T9576] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:102 [ 216.914181][ T9581] tmpfs: Unknown parameter 'quota' [ 217.091824][ T9591] netlink: 264 bytes leftover after parsing attributes in process `syz.9.3306'. [ 217.786280][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 217.792463][ T9530] Bluetooth: hci0: command 0x1003 tx timeout [ 217.827498][ T9613] overlayfs: failed to clone upperpath [ 217.835562][ T9613] /dev/rnullb0: Can't lookup blockdev [ 218.073158][ T309] usb 2-1: USB disconnect, device number 33 [ 218.420454][ T9641] rust_binder: Error while translating object. [ 218.420496][ T9641] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 218.438590][ T9641] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:128 [ 218.556037][ T309] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 218.748426][ T309] usb 2-1: Using ep0 maxpacket: 16 [ 218.761379][ T309] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 218.787242][ T309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.825701][ T309] usb 2-1: config 0 descriptor?? [ 218.846000][ T309] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 219.068724][ T309] usb 2-1: Detected FT232A [ 219.086917][ T309] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 219.111141][ T309] usb 2-1: USB disconnect, device number 34 [ 219.158942][ T309] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 219.165457][ T9691] rust_binder: Error while translating object. [ 219.168320][ T9691] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 219.180622][ T309] ftdi_sio 2-1:0.0: device disconnected [ 219.202061][ T9691] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:142 [ 219.716625][ T9708] tmpfs: Bad value for 'nr_inodes' [ 219.745095][ T9713] rust_binder: Write failure EINVAL in pid:403 [ 219.745971][ T9714] rust_binder: Read failure Err(EAGAIN) in pid:403 [ 219.773136][ T9716] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3350'. [ 219.888790][ T9718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3351'. [ 219.903313][ T36] kauditd_printk_skb: 483 callbacks suppressed [ 219.903331][ T36] audit: type=1400 audit(1750675610.672:8339): avc: denied { create } for pid=9726 comm="syz.0.3354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 219.951527][ T36] audit: type=1400 audit(1750675610.719:8340): avc: denied { read write } for pid=6813 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 219.983680][ T9729] overlayfs: missing 'workdir' [ 219.986850][ T36] audit: type=1400 audit(1750675610.719:8341): avc: denied { read write open } for pid=6813 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 220.013545][ T36] audit: type=1400 audit(1750675610.719:8342): avc: denied { ioctl } for pid=6813 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 220.020380][ T9729] rust_binder: Got transaction with invalid offset. [ 220.039218][ T36] audit: type=1400 audit(1750675610.738:8343): avc: denied { read } for pid=9728 comm="syz.1.3356" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 220.040784][ T9729] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 220.045889][ T36] audit: type=1400 audit(1750675610.747:8344): avc: denied { read open } for pid=9728 comm="syz.1.3356" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 220.102217][ T9729] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:409 [ 220.103078][ T36] audit: type=1400 audit(1750675610.747:8345): avc: denied { ioctl } for pid=9728 comm="syz.1.3356" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 220.138978][ T36] audit: type=1400 audit(1750675610.747:8346): avc: denied { set_context_mgr } for pid=9728 comm="syz.1.3356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 220.169166][ T36] audit: type=1400 audit(1750675610.747:8347): avc: denied { mounton } for pid=9728 comm="syz.1.3356" path="/126/bus" dev="tmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 220.231824][ T36] audit: type=1400 audit(1750675610.775:8348): avc: denied { name_bind } for pid=9728 comm="syz.1.3356" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 220.297854][ T9740] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:413 [ 220.405111][ T9740] rust_binder: Write failure EINVAL in pid:413 [ 220.662597][ T9750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3363'. [ 220.859054][ T9758] 9pnet_fd: Insufficient options for proto=fd [ 220.868964][ T9758] netlink: 220 bytes leftover after parsing attributes in process `syz.9.3365'. [ 221.088327][ T9764] new mount options do not match the existing superblock, will be ignored [ 221.098182][ T9764] rust_binder: Write failure EFAULT in pid:154 [ 221.267187][ T9772] overlayfs: failed to clone upperpath [ 221.349245][ T9780] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3375'. [ 221.410398][ T5644] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 221.593157][ T5644] usb 10-1: Using ep0 maxpacket: 16 [ 221.605817][ T5644] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 221.629725][ T5644] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.649103][ T5644] usb 10-1: config 0 descriptor?? [ 221.658553][ T5644] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 221.876512][ T5644] usb 10-1: Detected FT232A [ 221.889220][ T5644] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 221.923470][ T5644] usb 10-1: USB disconnect, device number 10 [ 221.940415][ T5644] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 221.953560][ T5644] ftdi_sio 10-1:0.0: device disconnected [ 222.236024][ T304] tipc: Subscription rejected, illegal request [ 222.468601][ T5644] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 222.644870][ T9849] 9p: Unknown uid 00000000004294967295 [ 222.650501][ T5644] usb 2-1: Using ep0 maxpacket: 32 [ 222.659239][ T5644] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 222.667495][ T5644] usb 2-1: config 0 has no interface number 0 [ 222.679719][ T9847] F2FS-fs (loop18): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 222.687736][ T9847] F2FS-fs (loop18): Can't find valid F2FS filesystem in 1th superblock [ 222.695269][ T5644] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 222.696081][ T9847] F2FS-fs (loop18): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 222.707190][ T5644] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.712893][ T9847] F2FS-fs (loop18): Can't find valid F2FS filesystem in 2th superblock [ 222.722545][ T5644] usb 2-1: Product: syz [ 222.749607][ T5644] usb 2-1: Manufacturer: syz [ 222.749630][ T9847] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.756412][ T5644] usb 2-1: SerialNumber: syz [ 222.778854][ T5644] usb 2-1: config 0 descriptor?? [ 222.787991][ T5644] smsc95xx v2.0.0 [ 223.459523][ T9860] binder: Bad value for 'max' [ 223.796753][ T9873] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2305 sclass=netlink_route_socket pid=9873 comm=syz.0.3406 [ 223.976173][ T45] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 224.003223][ T5644] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 224.018031][ T5644] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 224.031233][ T5644] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 224.042315][ T5644] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 224.058398][ T5644] usb 2-1: USB disconnect, device number 35 [ 224.136520][ T45] usb 10-1: Using ep0 maxpacket: 16 [ 224.144378][ T45] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 224.153783][ T45] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.164586][ T45] usb 10-1: config 0 descriptor?? [ 224.175008][ T45] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 224.389196][ T45] usb 10-1: Detected FT232A [ 224.403919][ T45] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 224.425130][ T45] usb 10-1: USB disconnect, device number 11 [ 224.444913][ T45] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 224.467983][ T45] ftdi_sio 10-1:0.0: device disconnected [ 224.657810][ T9911] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=46 sclass=netlink_audit_socket pid=9911 comm=syz.7.3419 [ 224.788368][ T9916] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 225.272362][ T36] kauditd_printk_skb: 682 callbacks suppressed [ 225.272384][ T36] audit: type=1400 audit(1750675615.695:9031): avc: denied { read write } for pid=6813 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 225.319593][ T36] audit: type=1400 audit(1750675615.714:9032): avc: denied { create } for pid=9932 comm="syz.7.3428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 225.339216][ T36] audit: type=1400 audit(1750675615.714:9033): avc: denied { create } for pid=9932 comm="syz.7.3428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 225.369666][ T36] audit: type=1400 audit(1750675615.723:9034): avc: denied { setopt } for pid=9932 comm="syz.7.3428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 225.464989][ T36] audit: type=1400 audit(1750675615.723:9035): avc: denied { create } for pid=9932 comm="syz.7.3428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 225.484727][ T36] audit: type=1400 audit(1750675615.723:9036): avc: denied { read write open } for pid=6813 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 225.512620][ T36] audit: type=1400 audit(1750675615.723:9037): avc: denied { ioctl } for pid=6813 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 225.540217][ T36] audit: type=1400 audit(1750675615.733:9038): avc: denied { create } for pid=9933 comm="syz.9.3436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 225.561792][ T36] audit: type=1400 audit(1750675615.733:9039): avc: denied { write } for pid=9933 comm="syz.9.3436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 225.587984][ T36] audit: type=1400 audit(1750675615.733:9040): avc: denied { read append } for pid=9933 comm="syz.9.3436" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 225.615328][ T9939] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 225.623160][ T9939] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 225.631417][ T9939] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 225.639237][ T9939] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 225.701419][ T9943] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 225.715513][ T9944] rust_binder: 9939 RLIMIT_NICE not set [ 226.195695][ T9957] overlayfs: failed to clone upperpath [ 226.562900][ T9978] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3446'. [ 226.606051][ T5648] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 226.766465][ T5648] usb 10-1: Using ep0 maxpacket: 8 [ 226.774415][ T5648] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.790936][ T5648] usb 10-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice=76.00 [ 226.800200][ T5648] usb 10-1: New USB device strings: Mfr=187, Product=72, SerialNumber=116 [ 226.808726][ T5648] usb 10-1: Product: syz [ 226.813075][ T5648] usb 10-1: Manufacturer: syz [ 226.817784][ T5648] usb 10-1: SerialNumber: syz [ 226.824340][ T5648] usb 10-1: config 0 descriptor?? [ 226.837531][ T5648] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 227.151267][ T5648] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 227.314596][ T5648] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.326131][ T5648] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.337022][ T5648] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 227.347419][ T5648] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.359210][ T5648] usb 2-1: config 0 descriptor?? [ 227.593388][ T5648] usbhid 2-1:0.0: can't add hid device: -71 [ 227.599594][ T5648] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 227.638695][ T5648] usb 2-1: USB disconnect, device number 36 [ 227.807806][T10037] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=46 sclass=netlink_audit_socket pid=10037 comm=syz.9.3437 [ 227.850378][T10037] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 227.850409][T10037] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 227.859144][T10037] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:192 [ 227.966145][T10045] overlayfs: failed to clone upperpath [ 228.091438][T10054] xt_NFQUEUE: number of total queues is 0 [ 228.332849][T10067] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 228.340728][T10067] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 228.349010][T10067] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 228.356779][T10067] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 228.427641][T10074] rust_binder: 10067 RLIMIT_NICE not set [ 229.403070][ T5648] usb 10-1: USB disconnect, device number 12 [ 229.620847][ T45] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 229.781158][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 229.788583][ T45] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 229.797230][ T45] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 229.805464][ T45] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 229.813746][ T45] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 229.821954][ T45] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 229.830926][ T45] usb 2-1: config 0 has no interface number 0 [ 229.837056][ T45] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 229.848578][ T45] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 229.858498][ T45] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 229.868386][ T45] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 229.881469][ T45] usb 2-1: config 0 interface 125 has no altsetting 0 [ 229.888286][ T45] usb 2-1: config 0 interface 125 has no altsetting 2 [ 229.898160][ T45] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 229.907418][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.915536][ T45] usb 2-1: Product: syz [ 229.919703][ T45] usb 2-1: Manufacturer: syz [ 229.924404][ T45] usb 2-1: SerialNumber: syz [ 229.930620][ T45] usb 2-1: config 0 descriptor?? [ 230.537624][ T5648] usb 2-1: USB disconnect, device number 37 [ 230.734932][ T36] kauditd_printk_skb: 504 callbacks suppressed [ 230.734953][ T36] audit: type=1400 audit(1750675620.803:9545): avc: denied { read write } for pid=8941 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 230.833408][ T36] audit: type=1400 audit(1750675620.803:9546): avc: denied { read write open } for pid=8941 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 230.859130][ T36] audit: type=1400 audit(1750675620.803:9547): avc: denied { ioctl } for pid=8941 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 230.885250][ T36] audit: type=1400 audit(1750675620.831:9548): avc: denied { read write } for pid=10100 comm="syz.9.3490" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 230.910111][ T36] audit: type=1400 audit(1750675620.831:9549): avc: denied { read write open } for pid=10100 comm="syz.9.3490" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 230.925087][ T5648] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 230.936780][ T36] audit: type=1400 audit(1750675620.840:9550): avc: denied { execmem } for pid=10100 comm="syz.9.3490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 230.962122][ T36] audit: type=1400 audit(1750675620.859:9551): avc: denied { ioctl } for pid=10098 comm="syz.1.3489" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 230.987564][ T36] audit: type=1400 audit(1750675620.924:9552): avc: denied { ioctl } for pid=10098 comm="syz.1.3489" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 231.012728][ T36] audit: type=1400 audit(1750675620.990:9553): avc: denied { create } for pid=10100 comm="syz.9.3490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 231.034175][ T36] audit: type=1400 audit(1750675620.999:9554): avc: denied { ioctl } for pid=10098 comm="syz.1.3489" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 231.069634][T10102] F2FS-fs (loop18): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 231.077544][T10102] F2FS-fs (loop18): Can't find valid F2FS filesystem in 1th superblock [ 231.085909][T10102] F2FS-fs (loop18): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 231.093841][T10102] F2FS-fs (loop18): Can't find valid F2FS filesystem in 2th superblock [ 231.106784][ T5648] usb 2-1: Using ep0 maxpacket: 32 [ 231.114829][ T5648] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 231.124023][ T5648] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 231.132864][ T5648] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 231.141967][ T5648] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 231.151727][ T5648] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 231.161490][ T5648] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 231.174565][ T5648] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 231.183740][ T5648] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.195777][ T5648] usb 2-1: config 0 descriptor?? [ 231.428556][ T5648] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 38 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 231.455468][T10118] overlayfs: failed to resolve './file0': -2 [ 231.652987][ T5648] usb 2-1: USB disconnect, device number 38 [ 231.698951][ T5648] usblp0: removed [ 232.143772][ T5648] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 232.333671][T10168] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 232.341497][T10168] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 232.349769][T10168] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 232.357561][T10168] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 232.392939][ T5648] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.403376][ T5648] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 232.415554][ T5648] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 232.428964][ T5648] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 232.437996][ T5648] usb 10-1: SerialNumber: syz [ 232.676468][ T5648] usb 10-1: 0:2 : does not exist [ 232.696931][ T5648] usb 10-1: USB disconnect, device number 13 [ 232.793984][ T5912] udevd[5912]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 233.165485][T10185] overlayfs: failed to clone upperpath [ 233.415578][T10190] netlink: 'syz.9.3522': attribute type 32 has an invalid length. [ 233.541930][T10194] overlayfs: failed to clone upperpath [ 233.883296][T10208] F2FS-fs (loop14): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 233.891286][T10208] F2FS-fs (loop14): Can't find valid F2FS filesystem in 1th superblock [ 233.899652][T10208] F2FS-fs (loop14): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 233.907505][T10208] F2FS-fs (loop14): Can't find valid F2FS filesystem in 2th superblock [ 234.110880][ T5644] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 234.274571][ T5644] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.285824][ T5644] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 234.303366][ T5644] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 234.312866][ T5644] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.321084][ T5644] usb 10-1: Product: syz [ 234.325396][ T5644] usb 10-1: Manufacturer: syz [ 234.330108][ T5644] usb 10-1: SerialNumber: syz [ 234.342449][ T5644] usb 10-1: selecting invalid altsetting 1 [ 234.560217][ T5644] cdc_ncm 10-1:1.0: bind() failure [ 234.579065][ T5644] cdc_ncm 10-1:1.1: skipping garbage [ 234.594897][ T5644] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 234.634001][ T5644] cdc_ncm 10-1:1.1: bind() failure [ 234.643486][ T5644] usb 10-1: USB disconnect, device number 14 [ 234.655538][ T5912] udevd[5912]: setting mode of /dev/bus/usb/010/014 to 020664 failed: No such file or directory [ 234.672729][ T5912] udevd[5912]: setting owner of /dev/bus/usb/010/014 to uid=0, gid=0 failed: No such file or directory [ 235.216183][T10254] cgroup2: Unknown parameter 'cpuacct' [ 235.472403][T10268] F2FS-fs (loop18): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 235.480320][T10268] F2FS-fs (loop18): Can't find valid F2FS filesystem in 1th superblock [ 235.488670][T10268] F2FS-fs (loop18): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 235.496579][T10268] F2FS-fs (loop18): Can't find valid F2FS filesystem in 2th superblock [ 236.031579][T10323] fuse: Unknown parameter 'ÿÿÿÿ00000000000000000003ÿÿÿÿÿÿÿÿ00000000000000000000' [ 236.114027][ T36] kauditd_printk_skb: 692 callbacks suppressed [ 236.114049][ T36] audit: type=1400 audit(1750675625.835:10247): avc: denied { unmount } for pid=6813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 236.176933][ T36] audit: type=1400 audit(1750675625.844:10248): avc: denied { mounton } for pid=10326 comm="syz.7.3571" path="/445" dev="tmpfs" ino=2471 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 236.223028][ T36] audit: type=1400 audit(1750675625.844:10249): avc: denied { mount } for pid=10326 comm="syz.7.3571" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 236.244970][ T36] audit: type=1400 audit(1750675625.863:10250): avc: denied { read write } for pid=6813 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 236.307870][ T36] audit: type=1400 audit(1750675625.863:10251): avc: denied { read write open } for pid=6813 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 236.377244][ T36] audit: type=1400 audit(1750675625.863:10252): avc: denied { ioctl } for pid=6813 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 236.462143][ T36] audit: type=1400 audit(1750675625.872:10253): avc: denied { create } for pid=10328 comm="syz.7.3573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 236.530810][ T36] audit: type=1400 audit(1750675625.872:10254): avc: denied { create } for pid=10328 comm="syz.7.3573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 236.567855][ T36] audit: type=1400 audit(1750675625.891:10255): avc: denied { ioctl } for pid=10328 comm="syz.7.3573" path="socket:[42270]" dev="sockfs" ino=42270 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 236.599862][ T36] audit: type=1400 audit(1750675625.891:10256): avc: denied { write } for pid=10328 comm="syz.7.3573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 236.626290][T10352] binder: Unknown parameter 'pcr' [ 236.855588][T10366] F2FS-fs (loop14): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 236.863528][T10366] F2FS-fs (loop14): Can't find valid F2FS filesystem in 1th superblock [ 236.871881][T10366] F2FS-fs (loop14): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 236.879807][T10366] F2FS-fs (loop14): Can't find valid F2FS filesystem in 2th superblock [ 237.061460][ T309] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 237.221820][ T309] usb 2-1: Using ep0 maxpacket: 16 [ 237.229574][ T309] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 237.238694][ T309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.248393][ T309] usb 2-1: config 0 descriptor?? [ 237.256366][ T309] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 237.473519][ T309] usb 2-1: Detected FT232A [ 237.479894][ T309] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 237.490189][ T309] usb 2-1: USB disconnect, device number 39 [ 237.500826][ T309] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 237.517008][ T309] ftdi_sio 2-1:0.0: device disconnected [ 237.946714][T10410] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=46 sclass=netlink_audit_socket pid=10410 comm=syz.7.3599 [ 238.323313][T10419] overlay: ./file0 is not a directory [ 238.532108][T10426] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 238.532148][T10426] rust_binder: Error in use_page_slow: EBUSY [ 238.543046][T10426] rust_binder: use_range failure EBUSY [ 238.551463][T10426] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 238.557532][T10426] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 238.565329][T10426] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 238.574847][T10426] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:520 [ 238.669240][T10435] kvm: emulating exchange as write [ 238.996462][ T5648] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 239.155523][T10450] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=46 sclass=netlink_audit_socket pid=10450 comm=syz.7.3613 [ 239.156834][ T5648] usb 10-1: Using ep0 maxpacket: 16 [ 239.176521][ T5648] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 239.185933][ T5648] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.195906][ T5648] usb 10-1: config 0 descriptor?? [ 239.205086][ T5648] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 239.420323][ T5648] usb 10-1: Detected FT232A [ 239.433095][ T5648] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 239.470659][ T5648] usb 10-1: USB disconnect, device number 15 [ 239.487780][ T5648] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 239.498517][ T5648] ftdi_sio 10-1:0.0: device disconnected [ 239.604675][T10459] overlayfs: failed to clone upperpath [ 239.634185][T10459] overlayfs: failed to clone upperpath [ 239.709927][T10464] overlayfs: failed to clone upperpath [ 239.800077][T10473] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3619'. [ 239.954031][T10493] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=46 sclass=netlink_audit_socket pid=10493 comm=syz.0.3628 [ 240.989820][T10536] rust_binder: Write failure EINVAL in pid:544 [ 241.121667][T10545] can: request_module (can-proto-0) failed. [ 241.538260][ T36] kauditd_printk_skb: 501 callbacks suppressed [ 241.538281][ T36] audit: type=1400 audit(1750675630.905:10758): avc: denied { mounton } for pid=10558 comm="syz.0.3652" path="/469/file0" dev="tmpfs" ino=2642 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 241.591246][ T36] audit: type=1400 audit(1750675630.961:10759): avc: denied { create } for pid=10563 comm="syz.0.3653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 241.612739][ T36] audit: type=1400 audit(1750675630.961:10760): avc: denied { create } for pid=10563 comm="syz.0.3653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 241.636033][ T36] audit: type=1400 audit(1750675630.961:10761): avc: denied { write } for pid=10563 comm="syz.0.3653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 241.657838][ T36] audit: type=1400 audit(1750675630.970:10762): avc: denied { read } for pid=10563 comm="syz.0.3653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 241.679444][ T36] audit: type=1400 audit(1750675630.970:10763): avc: denied { read } for pid=10563 comm="syz.0.3653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 241.702363][ T36] audit: type=1400 audit(1750675630.970:10764): avc: denied { ioctl } for pid=10563 comm="syz.0.3653" path="socket:[43118]" dev="sockfs" ino=43118 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 241.729076][ T36] audit: type=1400 audit(1750675631.036:10765): avc: denied { create } for pid=10565 comm="syz.0.3654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 241.750595][ T36] audit: type=1400 audit(1750675631.036:10766): avc: denied { write } for pid=10565 comm="syz.0.3654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 241.767034][T10569] audit: audit_backlog=65 > audit_backlog_limit=64 [ 241.865039][T10572] binder: Bad value for 'stats' [ 242.214378][ T45] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 242.406759][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 242.416318][ T45] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 242.427062][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.438037][ T45] usb 2-1: config 0 descriptor?? [ 242.449091][ T45] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 242.664155][ T45] usb 2-1: Detected FT232A [ 242.670490][ T45] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 242.685137][ T45] usb 2-1: USB disconnect, device number 40 [ 242.704027][ T45] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 242.713693][ T45] ftdi_sio 2-1:0.0: device disconnected [ 243.164289][T10598] binder: Bad value for 'max' [ 243.233804][T10600] fuse: Bad value for 'fd' [ 243.413637][T10605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 243.485625][T10606] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:559 [ 244.088918][T10627] fuse: Bad value for 'fd' [ 244.135185][T10629] can: request_module (can-proto-0) failed. [ 244.224162][ T309] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 244.395212][ T309] usb 10-1: Using ep0 maxpacket: 16 [ 244.402982][ T309] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 244.412173][ T309] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.422014][ T309] usb 10-1: config 0 descriptor?? [ 244.438788][ T309] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 244.565219][T10634] overlay: Unknown parameter 'mounts' [ 244.646323][ T309] usb 10-1: Detected FT232A [ 244.679548][ T309] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 244.689220][ T309] usb 10-1: USB disconnect, device number 16 [ 244.696938][ T309] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 244.706770][ T309] ftdi_sio 10-1:0.0: device disconnected [ 244.751875][T10639] F2FS-fs (loop14): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 244.759799][T10639] F2FS-fs (loop14): Can't find valid F2FS filesystem in 1th superblock [ 244.768160][T10639] F2FS-fs (loop14): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 244.776040][T10639] F2FS-fs (loop14): Can't find valid F2FS filesystem in 2th superblock [ 245.080395][T10653] fuse: Bad value for 'fd' [ 245.485663][ T309] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 245.681641][ T309] usb 10-1: Using ep0 maxpacket: 8 [ 245.693833][ T309] usb 10-1: New USB device found, idVendor=0c45, idProduct=6128, bcdDevice=c4.6d [ 245.703138][ T309] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.711287][ T309] usb 10-1: Product: syz [ 245.715984][ T309] usb 10-1: Manufacturer: syz [ 245.720728][ T309] usb 10-1: SerialNumber: syz [ 245.732634][ T309] usb 10-1: config 0 descriptor?? [ 245.965010][T10659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.983247][T10659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.011718][T10659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.039567][T10659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.064034][T10659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.075133][T10659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.100895][T10659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.120094][T10659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.132810][T10659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.155637][T10659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.384311][T10707] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 246.419434][T10712] tipc: Enabling of bearer rejected, failed to enable media [ 246.560211][T10717] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 246.716230][T10726] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 247.111227][ T36] kauditd_printk_skb: 2059 callbacks suppressed [ 247.111257][ T36] audit: type=1400 audit(1750675636.124:12824): avc: denied { name_bind } for pid=10736 comm="syz.7.3709" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 247.162335][ T36] audit: type=1400 audit(1750675636.152:12825): avc: denied { node_bind } for pid=10736 comm="syz.7.3709" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 247.327107][ T36] audit: type=1400 audit(1750675636.330:12826): avc: denied { create } for pid=10739 comm="syz.0.3711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 247.381429][ T36] audit: type=1400 audit(1750675636.349:12827): avc: denied { write } for pid=10739 comm="syz.0.3711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 247.442250][ T36] audit: type=1400 audit(1750675636.349:12828): avc: denied { read } for pid=10739 comm="syz.0.3711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 247.484374][ T36] audit: type=1400 audit(1750675636.349:12829): avc: denied { read } for pid=10739 comm="syz.0.3711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 247.526464][ T36] audit: type=1400 audit(1750675636.368:12830): avc: denied { write } for pid=10739 comm="syz.0.3711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 247.773422][ T36] audit: type=1400 audit(1750675636.732:12831): avc: denied { read write } for pid=6813 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 247.819911][ T36] audit: type=1400 audit(1750675636.732:12832): avc: denied { read write open } for pid=6813 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 247.889976][ T36] audit: type=1400 audit(1750675636.732:12833): avc: denied { ioctl } for pid=6813 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 248.138096][T10756] overlayfs: failed to clone upperpath [ 248.435220][ T309] usb 10-1: USB disconnect, device number 17 [ 248.733084][T10779] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 248.740900][T10779] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 248.749217][T10779] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 248.757012][T10779] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 249.286522][T10800] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 249.291230][T10800] rust_binder: Read failure Err(EAGAIN) in pid:614 [ 249.747741][T10818] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3743'. [ 250.014442][T10824] F2FS-fs (loop14): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 250.022352][T10824] F2FS-fs (loop14): Can't find valid F2FS filesystem in 1th superblock [ 250.030709][T10824] F2FS-fs (loop14): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 250.038545][T10824] F2FS-fs (loop14): Can't find valid F2FS filesystem in 2th superblock [ 271.069827][ T36] kauditd_printk_skb: 276 callbacks suppressed [ 271.069850][ T36] audit: type=1400 audit(1750675658.537:13110): avc: denied { read write } for pid=10826 comm="syz.1.3747" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 271.153443][ T36] audit: type=1400 audit(1750675658.537:13111): avc: denied { read write open } for pid=10826 comm="syz.1.3747" path="/dev/binderfs/binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 271.207852][T10840] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3751'. [ 271.239263][ T36] audit: type=1400 audit(1750675658.537:13112): avc: denied { create } for pid=10830 comm="syz.7.3749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 271.303159][ T36] audit: type=1400 audit(1750675658.537:13113): avc: denied { create } for pid=10830 comm="syz.7.3749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 271.336614][ T36] audit: type=1400 audit(1750675658.537:13114): avc: denied { write } for pid=10830 comm="syz.7.3749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 271.358154][ T36] audit: type=1400 audit(1750675658.537:13115): avc: denied { read } for pid=10830 comm="syz.7.3749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 271.379662][ T36] audit: type=1400 audit(1750675658.537:13116): avc: denied { read } for pid=10830 comm="syz.7.3749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 271.401004][ T36] audit: type=1400 audit(1750675658.537:13117): avc: denied { ioctl } for pid=10830 comm="syz.7.3749" path="socket:[43843]" dev="sockfs" ino=43843 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 271.429196][ T36] audit: type=1400 audit(1750675658.537:13118): avc: denied { write } for pid=10830 comm="syz.7.3749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 271.463826][ T36] audit: type=1400 audit(1750675658.565:13119): avc: denied { read write } for pid=10828 comm="syz.9.3748" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 271.804093][T10863] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 271.811904][T10863] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 271.820198][T10863] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 271.827990][T10863] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 272.013836][T10866] fuse: Bad value for 'fd' [ 272.229729][T10881] kvm: Disabled LAPIC found during irq injection [ 272.490142][ T5646] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 272.651494][T10894] fuse: Bad value for 'fd' [ 272.664125][ T5646] usb 2-1: unable to get BOS descriptor set [ 272.693062][ T5646] usb 2-1: not running at top speed; connect to a high speed hub [ 272.712537][ T5646] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 272.732488][ T5646] usb 2-1: New USB device found, idVendor=0525, idProduct=a4b8, bcdDevice= 0.40 [ 272.744385][ T5646] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.757425][ T5646] usb 2-1: Product: syz [ 272.761666][ T5646] usb 2-1: Manufacturer: syz [ 272.771981][ T5646] usb 2-1: SerialNumber: syz [ 272.991145][T10920] tmpfs: Unknown parameter 'subj_role' [ 273.056603][T10881] binder: Bad value for 'stats' [ 273.063907][T10881] netlink: 'syz.1.3765': attribute type 27 has an invalid length. [ 273.086875][T10926] fuse: Bad value for 'fd' [ 273.092711][T10881] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.100088][T10881] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.110643][T10924] F2FS-fs (loop14): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 273.118567][T10924] F2FS-fs (loop14): Can't find valid F2FS filesystem in 1th superblock [ 273.127010][T10924] F2FS-fs (loop14): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 273.134936][T10924] F2FS-fs (loop14): Can't find valid F2FS filesystem in 2th superblock [ 273.288538][ T5646] usb 2-1: USB disconnect, device number 41 [ 273.636306][T10960] fuse: Bad value for 'fd' [ 273.965444][ T309] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 274.125808][ T309] usb 10-1: Using ep0 maxpacket: 8 [ 274.134287][ T309] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 274.154062][ T309] usb 10-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice=76.00 [ 274.164739][ T309] usb 10-1: New USB device strings: Mfr=187, Product=72, SerialNumber=116 [ 274.174258][ T309] usb 10-1: Product: syz [ 274.178648][ T309] usb 10-1: Manufacturer: syz [ 274.184386][ T309] usb 10-1: SerialNumber: syz [ 274.202992][ T309] usb 10-1: config 0 descriptor?? [ 274.212443][ T309] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 274.429896][ T45] usb 10-1: USB disconnect, device number 18 [ 274.709349][T11001] fuse: Bad value for 'fd' [ 274.733672][T10999] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 274.741617][T10999] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 274.750610][T10999] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 274.758426][T10999] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 274.800846][T11003] overlayfs: failed to clone upperpath [ 274.800861][T11004] overlayfs: failed to clone upperpath [ 275.266790][T11039] overlayfs: conflicting options: userxattr,metacopy=on [ 275.462148][ T45] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 275.611834][ T45] usb 10-1: device descriptor read/64, error -71 [ 275.868383][ T45] usb 10-1: device descriptor read/64, error -71 [ 276.124992][ T45] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 276.231872][ T309] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 276.274629][ T45] usb 10-1: device descriptor read/64, error -71 [ 276.392224][ T309] usb 2-1: Using ep0 maxpacket: 16 [ 276.401176][ T309] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 276.410301][ T309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.419999][ T309] usb 2-1: config 0 descriptor?? [ 276.426627][ T36] kauditd_printk_skb: 571 callbacks suppressed [ 276.426648][ T36] audit: type=1400 audit(1750675663.550:13691): avc: denied { ioctl } for pid=11057 comm="syz.1.3828" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 276.459467][ T309] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 276.460500][ T36] audit: type=1400 audit(1750675663.550:13692): avc: denied { ioctl } for pid=11057 comm="syz.1.3828" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 276.493123][ T36] audit: type=1400 audit(1750675663.578:13693): avc: denied { ioctl } for pid=11057 comm="syz.1.3828" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 276.518336][ T36] audit: type=1400 audit(1750675663.588:13694): avc: denied { ioctl } for pid=11035 comm="syz.9.3819" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 276.543506][ T45] usb 10-1: device descriptor read/64, error -71 [ 276.660627][ T45] usb usb10-port1: attempt power cycle [ 276.660627][ T36] audit: type=1400 audit(1750675663.765:13695): avc: denied { ioctl } for pid=11035 comm="syz.9.3819" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 276.687618][ T309] usb 2-1: Detected FT232A [ 276.691654][ T36] audit: type=1400 audit(1750675663.765:13696): avc: denied { ioctl } for pid=11035 comm="syz.9.3819" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 276.722504][ T309] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 276.731587][ T36] audit: type=1400 audit(1750675663.765:13697): avc: denied { ioctl } for pid=11035 comm="syz.9.3819" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 276.757985][ T309] usb 2-1: USB disconnect, device number 42 [ 276.758848][ T36] audit: type=1400 audit(1750675663.859:13698): avc: denied { ioctl } for pid=11035 comm="syz.9.3819" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 276.790177][ T309] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 276.799922][ T36] audit: type=1400 audit(1750675663.859:13699): avc: denied { ioctl } for pid=11035 comm="syz.9.3819" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 276.801797][T10843] udevd[10843]: setting mode of /dev/ttyUSB0 to 020660 failed: No such file or directory [ 276.836028][ T309] ftdi_sio 2-1:0.0: device disconnected [ 276.838859][T10843] udevd[10843]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory [ 276.857823][ T36] audit: type=1400 audit(1750675663.943:13700): avc: denied { create } for pid=11073 comm="syz.0.3833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 277.044577][ T45] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 277.084895][ T45] usb 10-1: device descriptor read/8, error -71 [ 277.228232][ T45] usb 10-1: device descriptor read/8, error -71 [ 277.413417][T11111] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 277.415207][T11111] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 168, size: 255) [ 277.421794][T11111] rust_binder: Error while translating object. [ 277.432434][T11111] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 277.438636][T11111] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:659 [ 277.476844][T11113] binder: Unknown parameter 'fscontext?}' [ 277.482688][ T45] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 277.517104][ T45] usb 10-1: device descriptor read/8, error -71 [ 277.662336][ T45] usb 10-1: device descriptor read/8, error -71 [ 277.670115][T11118] overlay: ./file0 is not a directory [ 277.670199][T11119] overlay: ./file0 is not a directory [ 277.703592][T11122] overlayfs: failed to clone upperpath [ 277.782499][ T45] usb usb10-port1: unable to enumerate USB device [ 278.984947][T11170] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3863'. [ 279.086394][T11175] tmpfs: Unknown parameter 'fuse' [ 279.437178][T11205] overlayfs: failed to clone upperpath [ 279.447225][T11205] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 279.456446][T11205] overlayfs: missing 'lowerdir' [ 279.535260][ T5646] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 279.577999][ T5648] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 279.695611][ T5646] usb 2-1: Using ep0 maxpacket: 8 [ 279.703290][ T5646] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 279.720143][ T5646] usb 2-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice=76.00 [ 279.729845][ T5646] usb 2-1: New USB device strings: Mfr=187, Product=72, SerialNumber=116 [ 279.738290][ T5646] usb 2-1: Product: syz [ 279.742593][ T5646] usb 2-1: Manufacturer: syz [ 279.747341][ T5646] usb 2-1: SerialNumber: syz [ 279.754473][ T5646] usb 2-1: config 0 descriptor?? [ 279.759542][ T5648] usb 10-1: config 4 has an invalid interface number: 95 but max is 0 [ 279.767810][ T5648] usb 10-1: config 4 has no interface number 0 [ 279.774063][ T5648] usb 10-1: config 4 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 279.786890][ T5646] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 279.798225][ T5648] usb 10-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 279.807513][ T5648] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.816541][ T5648] usb 10-1: Product: syz [ 279.820835][ T5648] usb 10-1: Manufacturer: syz [ 279.825614][ T5648] usb 10-1: SerialNumber: syz [ 279.834399][T11196] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 280.004984][ T5646] usb 2-1: USB disconnect, device number 43 [ 280.142486][T11196] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 280.142526][T11196] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:340 [ 280.155353][ T5648] usb 10-1: MIDIStreaming interface descriptor not found [ 280.184580][ T5648] usb 10-1: USB disconnect, device number 23 [ 280.272133][T11216] udevd[11216]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:4.95/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 280.586214][T11236] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 280.586237][T11235] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 280.594084][T11236] rust_binder: Error while translating object. [ 280.600657][T11236] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 280.607049][T11236] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:681 [ 280.617895][T11237] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 280.634825][T11237] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 280.643093][T11237] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 280.650888][T11237] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 280.664369][T11239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 280.668996][T11239] rust_binder: Error while translating object. [ 280.675502][T11239] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 280.681758][T11239] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:684 [ 280.787501][T11247] rust_binder: Write failure EFAULT in pid:690 [ 280.827698][T11249] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 280.834330][T11249] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 280.840722][T11249] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 280.847560][T11249] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 280.854296][T11249] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 280.861447][T11249] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 280.867646][T11249] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 280.874500][T11249] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 280.880904][T11249] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 280.890376][T11249] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 280.894789][T11251] batadv_slave_0: entered promiscuous mode [ 280.901702][T11249] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 280.910727][T11249] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 280.929567][T11250] batadv_slave_0: left promiscuous mode [ 281.213671][ T5648] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 281.393881][ T5648] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 281.403781][ T5648] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.412810][ T5648] usb 2-1: Product: syz [ 281.419167][ T5648] usb 2-1: Manufacturer: syz [ 281.423811][ T5648] usb 2-1: SerialNumber: syz [ 281.596821][T11268] fuse: Unknown parameter '' [ 281.791490][ T36] kauditd_printk_skb: 587 callbacks suppressed [ 281.791524][ T36] audit: type=1400 audit(1750675668.564:14288): avc: denied { ioctl } for pid=11267 comm="syz.9.3899" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 281.823971][ T36] audit: type=1400 audit(1750675668.583:14289): avc: denied { create } for pid=11269 comm="syz.7.3900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 281.846415][ T36] audit: type=1400 audit(1750675668.583:14290): avc: denied { create } for pid=11269 comm="syz.7.3900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 281.855153][ T45] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 281.868961][ T36] audit: type=1400 audit(1750675668.583:14291): avc: denied { write } for pid=11269 comm="syz.7.3900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 281.895433][ T36] audit: type=1400 audit(1750675668.583:14292): avc: denied { read } for pid=11269 comm="syz.7.3900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 281.915986][ T36] audit: type=1400 audit(1750675668.583:14293): avc: denied { read } for pid=11269 comm="syz.7.3900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 281.936562][ T36] audit: type=1400 audit(1750675668.583:14294): avc: denied { ioctl } for pid=11269 comm="syz.7.3900" path="socket:[44851]" dev="sockfs" ino=44851 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 281.962442][ T36] audit: type=1400 audit(1750675668.583:14295): avc: denied { write } for pid=11269 comm="syz.7.3900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 281.983039][ T36] audit: type=1400 audit(1750675668.648:14296): avc: denied { ioctl } for pid=11267 comm="syz.9.3899" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 282.010133][ T36] audit: type=1400 audit(1750675668.648:14297): avc: denied { ioctl } for pid=11267 comm="syz.9.3899" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 282.037937][ T45] usb 10-1: device descriptor read/64, error -71 [ 282.098983][T11281] fuse: Bad value for 'rootmode' [ 282.108744][T11281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3904'. [ 282.293490][ T45] usb 10-1: device descriptor read/64, error -71 [ 282.316662][T11287] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 282.324515][T11287] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 282.332883][T11287] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 282.340892][T11287] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 282.550054][ T45] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 282.699817][ T45] usb 10-1: device descriptor read/64, error -71 [ 282.956293][ T45] usb 10-1: device descriptor read/64, error -71 [ 283.073958][ T45] usb usb10-port1: attempt power cycle [ 283.437342][ T45] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 283.461018][ T45] usb 10-1: device descriptor read/8, error -71 [ 283.600204][ T45] usb 10-1: device descriptor read/8, error -71 [ 283.854278][ T45] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 283.889369][ T45] usb 10-1: device descriptor read/8, error -71 [ 283.985942][T11313] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 283.993789][T11313] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 284.002042][T11313] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 284.009860][T11313] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 284.027801][ T45] usb 10-1: device descriptor read/8, error -71 [ 284.143472][ T45] usb usb10-port1: unable to enumerate USB device [ 284.172869][ T45] usb 2-1: USB disconnect, device number 44 [ 285.114274][T11338] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 285.338553][T11350] FAULT_INJECTION: forcing a failure. [ 285.338553][T11350] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 285.352761][T11350] CPU: 1 UID: 0 PID: 11350 Comm: syz.1.3931 Not tainted 6.12.30-syzkaller-g5bf4b91e3333 #0 38ee2089744292f67dc407ed27f6a777b522fef8 [ 285.352805][T11350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 285.352821][T11350] Call Trace: [ 285.352830][T11350] [ 285.352840][T11350] __dump_stack+0x21/0x30 [ 285.352894][T11350] dump_stack_lvl+0x10c/0x190 [ 285.352922][T11350] ? __cfi_dump_stack_lvl+0x10/0x10 [ 285.352952][T11350] ? kstrtoull+0x13b/0x1e0 [ 285.352978][T11350] dump_stack+0x19/0x20 [ 285.353004][T11350] should_fail_ex+0x3d9/0x530 [ 285.353034][T11350] should_fail+0xf/0x20 [ 285.353060][T11350] should_fail_usercopy+0x1e/0x30 [ 285.353090][T11350] _copy_from_user+0x22/0xb0 [ 285.353123][T11350] ___sys_sendmsg+0x159/0x2a0 [ 285.353149][T11350] ? __sys_sendmsg+0x280/0x280 [ 285.353174][T11350] ? proc_fail_nth_write+0x17e/0x210 [ 285.353200][T11350] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 285.353233][T11350] __x64_sys_sendmsg+0x1eb/0x2c0 [ 285.353258][T11350] ? fput+0x1a5/0x240 [ 285.353281][T11350] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 285.353307][T11350] ? ksys_write+0x1ef/0x250 [ 285.353347][T11350] ? __kasan_check_read+0x15/0x20 [ 285.353378][T11350] x64_sys_call+0x2a4c/0x2ee0 [ 285.353408][T11350] do_syscall_64+0x58/0xf0 [ 285.353442][T11350] ? clear_bhb_loop+0x50/0xa0 [ 285.353468][T11350] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 285.353493][T11350] RIP: 0033:0x7fe40558e929 [ 285.353523][T11350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.353545][T11350] RSP: 002b:00007fe4063c0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.353580][T11350] RAX: ffffffffffffffda RBX: 00007fe4057b5fa0 RCX: 00007fe40558e929 [ 285.353600][T11350] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 285.353618][T11350] RBP: 00007fe4063c0090 R08: 0000000000000000 R09: 0000000000000000 [ 285.353635][T11350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.353651][T11350] R13: 0000000000000000 R14: 00007fe4057b5fa0 R15: 00007ffc45ea18d8 [ 285.353673][T11350] [ 285.421600][T11356] F2FS-fs (loop14): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 285.581207][T11356] F2FS-fs (loop14): Can't find valid F2FS filesystem in 1th superblock [ 285.589573][T11356] F2FS-fs (loop14): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 285.597458][T11356] F2FS-fs (loop14): Can't find valid F2FS filesystem in 2th superblock [ 285.793277][T11364] rust_binder: Write failure EINVAL in pid:356 [ 286.430685][ T5648] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 286.591857][T11409] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 286.599677][T11409] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 286.608058][T11409] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 286.615847][T11409] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 286.624489][ T5648] usb 10-1: Using ep0 maxpacket: 8 [ 286.639371][ T5648] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 286.655796][ T5648] usb 10-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice=76.00 [ 286.665523][ T5648] usb 10-1: New USB device strings: Mfr=187, Product=72, SerialNumber=116 [ 286.674116][ T5648] usb 10-1: Product: syz [ 286.678474][ T5648] usb 10-1: Manufacturer: syz [ 286.683169][ T5648] usb 10-1: SerialNumber: syz [ 286.691216][ T5648] usb 10-1: config 0 descriptor?? [ 286.699360][ T5648] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 286.914971][ T1057] usb 10-1: USB disconnect, device number 28 [ 287.204197][ T36] kauditd_printk_skb: 442 callbacks suppressed [ 287.204219][ T36] audit: type=1400 audit(1750675673.625:14740): avc: denied { mounton } for pid=11415 comm="syz.0.3953" path="/file0" dev="rootfs" ino=8064 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 287.233738][ T36] audit: type=1400 audit(1750675673.625:14741): avc: denied { mounton } for pid=11415 comm="syz.0.3953" path="/file0" dev="rootfs" ino=8064 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 287.256517][ T36] audit: type=1400 audit(1750675673.634:14742): avc: denied { mounton } for pid=11415 comm="syz.0.3953" path="/file0" dev="rootfs" ino=8064 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 287.279297][ T36] audit: type=1400 audit(1750675673.634:14743): avc: denied { create } for pid=11415 comm="syz.0.3953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 287.299291][ T36] audit: type=1400 audit(1750675673.653:14744): avc: denied { sys_admin } for pid=11415 comm="syz.0.3953" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 287.347589][ T36] audit: type=1400 audit(1750675673.756:14745): avc: denied { create } for pid=11417 comm="syz.0.3954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 287.369140][ T36] audit: type=1400 audit(1750675673.756:14746): avc: denied { write } for pid=11417 comm="syz.0.3954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 287.390767][ T36] audit: type=1400 audit(1750675673.756:14747): avc: denied { read } for pid=11417 comm="syz.0.3954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 287.417821][ T36] audit: type=1400 audit(1750675673.756:14748): avc: denied { read } for pid=11417 comm="syz.0.3954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 287.439463][ T36] audit: type=1400 audit(1750675673.765:14749): avc: denied { create } for pid=11417 comm="syz.0.3954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 288.383753][ T45] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 288.399562][ T45] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 288.568574][T11441] fido_id[11441]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 288.701430][T11451] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 288.757030][T11455] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:734 [ 288.826371][T11458] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3966'. [ 288.844584][T11458] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3966'. [ 288.853568][T11458] netlink: 'syz.1.3966': attribute type 6 has an invalid length. [ 288.861393][T11458] netlink: 'syz.1.3966': attribute type 5 has an invalid length. [ 288.869272][T11458] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3966'. [ 289.049914][ T45] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 289.210296][ T45] usb 10-1: Using ep0 maxpacket: 8 [ 289.218559][ T45] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 289.236730][ T45] usb 10-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice=76.00 [ 289.246002][ T45] usb 10-1: New USB device strings: Mfr=187, Product=72, SerialNumber=116 [ 289.254578][ T45] usb 10-1: Product: syz [ 289.258962][ T45] usb 10-1: Manufacturer: syz [ 289.263700][ T45] usb 10-1: SerialNumber: syz [ 289.271964][ T45] usb 10-1: config 0 descriptor?? [ 289.283675][ T45] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 289.496238][ T45] usb 10-1: USB disconnect, device number 29 [ 289.624340][T11462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 289.870231][T11485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 289.969798][T11495] batadv_slave_0: entered promiscuous mode [ 289.984724][T11495] batadv_slave_0: left promiscuous mode [ 290.126382][T11511] rust_binder: Write failure EINVAL in pid:390 [ 290.345921][T11529] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 290.379463][T11529] rust_binder: inc_ref_done called when no active inc_refs [ 290.476457][T11538] binder: Bad value for 'stats' [ 290.669914][T11544] binder: Unknown parameter '0xffffffffffffffff000000000000000000000040x0000000000000004000000000000000000000x0000000000000000' [ 290.877982][ T5648] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 290.960455][T11554] input: syz0 as /devices/virtual/input/input16 [ 290.995892][T11554] input: failed to attach handler leds to device input16, error: -6 [ 291.061820][ T5648] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 291.080874][ T5648] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.102739][ T5648] usb 10-1: config 0 descriptor?? [ 291.168559][T11561] vlan1: entered promiscuous mode [ 291.175404][T11561] netlink: 288 bytes leftover after parsing attributes in process `syz.1.4008'. [ 291.306604][T11568] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4011'. [ 291.317464][T11568] binder: Bad value for 'defcontext' [ 291.361804][T11570] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 292.265804][ T5648] usb 10-1: Cannot set autoneg [ 292.277213][ T5648] MOSCHIP usb-ethernet driver 10-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 292.296423][ T5648] usb 10-1: USB disconnect, device number 30 [ 292.805758][ T36] kauditd_printk_skb: 663 callbacks suppressed [ 292.805779][ T36] audit: type=1400 audit(1750675678.863:15413): avc: denied { create } for pid=11605 comm="syz.7.4024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 292.833127][ T36] audit: type=1400 audit(1750675678.863:15414): avc: denied { ioctl } for pid=11605 comm="syz.7.4024" path="socket:[46389]" dev="sockfs" ino=46389 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 292.865015][ T36] audit: type=1400 audit(1750675678.863:15415): avc: denied { setopt } for pid=11605 comm="syz.7.4024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 292.885781][ T36] audit: type=1400 audit(1750675678.863:15416): avc: denied { write } for pid=11605 comm="syz.7.4024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 292.906481][ T36] audit: type=1400 audit(1750675678.863:15417): avc: denied { create } for pid=11605 comm="syz.7.4024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 292.940724][ T36] audit: type=1400 audit(1750675678.984:15418): avc: denied { read write } for pid=8941 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 292.979627][ T36] audit: type=1400 audit(1750675678.984:15419): avc: denied { read write open } for pid=8941 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 293.017337][ T36] audit: type=1400 audit(1750675678.984:15420): avc: denied { ioctl } for pid=8941 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 293.071339][ T36] audit: type=1400 audit(1750675679.059:15421): avc: denied { read } for pid=11609 comm="syz.9.4026" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 293.094833][ T36] audit: type=1400 audit(1750675679.059:15422): avc: denied { read open } for pid=11609 comm="syz.9.4026" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 293.379602][ T5648] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 293.585158][ T5648] usb 10-1: Using ep0 maxpacket: 8 [ 293.593743][ T5648] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 293.652333][ T5648] usb 10-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice=76.00 [ 293.672559][ T5648] usb 10-1: New USB device strings: Mfr=187, Product=72, SerialNumber=116 [ 293.693187][ T5648] usb 10-1: Product: syz [ 293.697643][ T5648] usb 10-1: Manufacturer: syz [ 293.732373][ T5648] usb 10-1: SerialNumber: syz [ 293.753882][ T5648] usb 10-1: config 0 descriptor?? [ 293.792914][ T5648] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 293.829321][ T13] bridge_slave_1: left allmulticast mode [ 293.835029][ T13] bridge_slave_1: left promiscuous mode [ 293.850486][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.882196][ T13] bridge_slave_0: left allmulticast mode [ 293.888031][ T13] bridge_slave_0: left promiscuous mode [ 293.912194][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.033365][ T1057] usb 10-1: USB disconnect, device number 31 [ 294.069831][T11620] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.089257][T11620] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.108237][T11620] bridge_slave_0: entered allmulticast mode [ 294.115004][T11620] bridge_slave_0: entered promiscuous mode [ 294.136568][T11620] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.162166][T11620] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.169696][T11620] bridge_slave_1: entered allmulticast mode [ 294.181702][T11620] bridge_slave_1: entered promiscuous mode [ 294.201335][ T13] veth1_macvtap: left promiscuous mode [ 294.208780][ T13] >: left promiscuous mode [ 294.357790][T11629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4032'. [ 294.556576][T11620] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.563818][T11620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.571289][T11620] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.578570][T11620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.615808][T11633] overlayfs: failed to clone upperpath [ 294.629416][T11634] overlayfs: failed to clone upperpath [ 294.654491][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.662137][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.682441][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.689707][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.700950][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.708254][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.737396][ T5649] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 294.797249][T11620] veth0_vlan: entered promiscuous mode [ 294.847567][T11620] veth1_macvtap: entered promiscuous mode [ 294.888507][T11640] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 294.906671][ T5649] usb 2-1: unable to get BOS descriptor or descriptor too short [ 294.937223][ T5649] usb 2-1: not running at top speed; connect to a high speed hub [ 294.950553][ T5649] usb 2-1: config 1 interface 0 has no altsetting 0 [ 294.959468][T11641] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 294.966460][ T5649] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 294.983999][ T5649] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.992043][ T5649] usb 2-1: Product: syz [ 294.996889][ T5649] usb 2-1: Manufacturer: syz [ 295.001930][ T5649] usb 2-1: SerialNumber: syz [ 295.250871][ T5649] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 295.282445][ T5649] usb 2-1: USB disconnect, device number 45 [ 295.887196][T11671] /dev/sg0: Can't lookup blockdev [ 296.181072][T11683] rust_binder: Error while translating object. [ 296.181127][T11683] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 296.187404][T11683] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:816 [ 296.287421][ T309] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 296.458493][ T309] usb 10-1: device descriptor read/64, error -71 [ 296.564314][T11706] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4059'. [ 296.725761][ T309] usb 10-1: device descriptor read/64, error -71 [ 296.779218][ T5649] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 296.939618][ T5649] usb 2-1: Using ep0 maxpacket: 8 [ 296.948085][ T5649] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 296.965997][ T5649] usb 2-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice=76.00 [ 296.975254][ T5649] usb 2-1: New USB device strings: Mfr=187, Product=72, SerialNumber=116 [ 296.982584][ T309] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 296.983981][ T5649] usb 2-1: Product: syz [ 296.998629][ T5649] usb 2-1: Manufacturer: syz [ 297.004501][ T5649] usb 2-1: SerialNumber: syz [ 297.011514][ T5649] usb 2-1: config 0 descriptor?? [ 297.028219][ T5649] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 297.130204][T11712] SELinux: security_context_str_to_sid () failed with errno=-22 [ 297.139267][ T309] usb 10-1: device descriptor read/64, error -71 [ 297.246523][ T1057] usb 2-1: USB disconnect, device number 46 [ 297.283510][T11722] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4065'. [ 297.409946][ T309] usb 10-1: device descriptor read/64, error -71 [ 297.524866][ T304] bridge_slave_1: left allmulticast mode [ 297.530771][ T309] usb usb10-port1: attempt power cycle [ 297.539786][ T304] bridge_slave_1: left promiscuous mode [ 297.546405][ T304] @: port 2(bridge_slave_1) entered disabled state [ 297.554872][ T304] bridge_slave_0: left allmulticast mode [ 297.560749][ T304] bridge_slave_0: left promiscuous mode [ 297.566418][ T304] @: port 1(bridge_slave_0) entered disabled state [ 297.582338][ T5648] ================================================================== [ 297.590534][ T5648] BUG: KASAN: null-ptr-deref in down_write+0x83/0x2a0 [ 297.597448][ T5648] Write of size 8 at addr 0000000000000098 by task kworker/0:14/5648 [ 297.605553][ T5648] [ 297.607905][ T5648] CPU: 0 UID: 0 PID: 5648 Comm: kworker/0:14 Not tainted 6.12.30-syzkaller-g5bf4b91e3333 #0 38ee2089744292f67dc407ed27f6a777b522fef8 [ 297.607944][ T5648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 297.607962][ T5648] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ [ 297.608031][ T5648] Call Trace: [ 297.608040][ T5648] [ 297.608051][ T5648] __dump_stack+0x21/0x30 [ 297.608085][ T5648] dump_stack_lvl+0x10c/0x190 [ 297.608116][ T5648] ? __cfi_dump_stack_lvl+0x10/0x10 [ 297.608147][ T5648] ? _RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x3aa/0x810 [ 297.608184][ T5648] print_report+0x3d/0x70 [ 297.608208][ T5648] kasan_report+0x163/0x1a0 [ 297.608244][ T5648] ? down_write+0x83/0x2a0 [ 297.608276][ T5648] ? down_write+0x83/0x2a0 [ 297.608307][ T5648] kasan_check_range+0x299/0x2a0 [ 297.608345][ T5648] __kasan_check_write+0x18/0x20 [ 297.608375][ T5648] down_write+0x83/0x2a0 [ 297.608404][ T5648] ? __cfi_down_write+0x10/0x10 [ 297.608434][ T5648] ? _raw_spin_lock+0x8c/0x120 [ 297.608476][ T5648] ? __cfi__raw_spin_lock+0x10/0x10 [ 297.608512][ T5648] ? mutex_unlock+0x8b/0x240 [ 297.608541][ T5648] ? __cfi_mutex_unlock+0x10/0x10 [ 297.608569][ T5648] rust_binderfs_remove_file+0x6c/0x110 [ 297.608599][ T5648] _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860 [ 297.608645][ T5648] ? ret_from_fork_asm+0x1a/0x30 [ 297.608683][ T5648] ? kasan_save_track+0x4f/0x80 [ 297.608716][ T5648] ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10 [ 297.608761][ T5648] ? kmem_cache_free+0x1c1/0x4c0 [ 297.608792][ T5648] ? reclaim_list_global+0x13c4/0x1460 [ 297.608825][ T5648] ? decay_va_pool_node+0xe5d/0xec0 [ 297.608854][ T5648] ? __purge_vmap_area_lazy+0xf7/0x8d0 [ 297.608886][ T5648] ? drain_vmap_area_work+0x29/0x50 [ 297.608917][ T5648] ? process_scheduled_works+0x7d2/0x1020 [ 297.608951][ T5648] ? worker_thread+0xc58/0x1250 [ 297.608983][ T5648] ? kthread+0x2ca/0x370 [ 297.609019][ T5648] ? ret_from_fork+0x64/0xa0 [ 297.609050][ T5648] ? ret_from_fork_asm+0x1a/0x30 [ 297.609090][ T5648] ? __kasan_slab_free+0x6a/0x80 [ 297.609127][ T5648] ? __cfi_native_flush_tlb_one_user+0x10/0x10 [ 297.609154][ T5648] ? llist_add_batch+0x109/0x1e0 [ 297.609182][ T5648] ? __cfi_call_function_single_prep_ipi+0x10/0x10 [ 297.609220][ T5648] ? reclaim_list_global+0x1436/0x1460 [ 297.609253][ T5648] ? __kasan_check_write+0x18/0x20 [ 297.609283][ T5648] ? reclaim_list_global+0x1423/0x1460 [ 297.609315][ T5648] ? smp_call_function_many_cond+0xa9f/0xf30 [ 297.609347][ T5648] ? __cfi_do_kernel_range_flush+0x10/0x10 [ 297.609375][ T5648] ? purge_vmap_node+0x822/0x880 [ 297.609409][ T5648] ? __cfi_purge_vmap_node+0x10/0x10 [ 297.609447][ T5648] ? __kasan_check_write+0x18/0x20 [ 297.609477][ T5648] ? pwq_dec_nr_in_flight+0x6c7/0xc60 [ 297.609510][ T5648] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 297.609547][ T5648] ? kick_pool+0xad/0x550 [ 297.609570][ T5648] process_scheduled_works+0x7d2/0x1020 [ 297.609626][ T5648] worker_thread+0xc58/0x1250 [ 297.609664][ T5648] kthread+0x2ca/0x370 [ 297.609697][ T5648] ? __cfi_worker_thread+0x10/0x10 SYZFAIL: failed to recv rpc [ 297.609729][ T5648] ? __cfi_kthread+0x10/0x10 [ 297.609765][ T5648] ret_from_fork+0x64/0xa0 [ 297.609793][ T5648] ? __cfi_kthread+0x10/0x10 [ 297.609828][ T5648] ret_from_fork_asm+0x1a/0x30 [ 297.609863][ T5648] [ 297.609873][ T5648] ================================================================== [ 297.959566][ T5648] Disabling lock debugging due to kernel taint [ 297.966069][ T5648] BUG: kernel NULL pointer dereference, address: 0000000000000098 [ 297.973894][ T5648] #PF: supervisor write access in kernel mode fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 297.979987][ T5648] #PF: error_code(0x0002) - not-present page [ 297.985995][ T5648] PGD 800000011cef2067 P4D 800000011cef2067 PUD 0 [ 297.992548][ T5648] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 297.998660][ T5648] CPU: 0 UID: 0 PID: 5648 Comm: kworker/0:14 Tainted: G B 6.12.30-syzkaller-g5bf4b91e3333 #0 38ee2089744292f67dc407ed27f6a777b522fef8 [ 298.013810][ T5648] Tainted: [B]=BAD_PAGE [ 298.017971][ T5648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 298.028067][ T5648] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ [ 298.044871][ T5648] RIP: 0010:down_write+0x9a/0x2a0 [ 298.049918][ T5648] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 6d 2b 55 fc 4c 89 f7 be 08 00 00 00 e8 60 2b 55 fc 48 8b 44 24 20 b9 01 00 00 00 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03 [ 298.069637][ T5648] RSP: 0018:ffffc9000d5e7500 EFLAGS: 00010256 [ 298.075720][ T5648] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001 [ 298.083704][ T5648] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc9000d5e7520 [ 298.091690][ T5648] RBP: ffffc9000d5e7598 R08: ffffc9000d5e7527 R09: 1ffff92001abcea4 [ 298.099674][ T5648] R10: dffffc0000000000 R11: fffff52001abcea5 R12: dffffc0000000000 [ 298.107661][ T5648] R13: 1ffff92001abcea0 R14: ffffc9000d5e7520 R15: 0000000000000000 [ 298.115643][ T5648] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 298.124584][ T5648] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 298.131175][ T5648] CR2: 0000000000000098 CR3: 0000000128994000 CR4: 00000000003526b0 [ 298.139597][ T5648] Call Trace: [ 298.142883][ T5648] [ 298.145820][ T5648] ? __cfi_down_write+0x10/0x10 [ 298.150687][ T5648] ? _raw_spin_lock+0x8c/0x120 [ 298.155471][ T5648] ? __cfi__raw_spin_lock+0x10/0x10 [ 298.160693][ T5648] ? mutex_unlock+0x8b/0x240 [ 298.165291][ T5648] ? __cfi_mutex_unlock+0x10/0x10 [ 298.170328][ T5648] rust_binderfs_remove_file+0x6c/0x110 [ 298.175893][ T5648] _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860 [ 298.188697][ T5648] ? ret_from_fork_asm+0x1a/0x30 [ 298.193663][ T5648] ? kasan_save_track+0x4f/0x80 [ 298.198531][ T5648] ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10 [ 298.211740][ T5648] ? kmem_cache_free+0x1c1/0x4c0 [ 298.216701][ T5648] ? reclaim_list_global+0x13c4/0x1460 [ 298.222176][ T5648] ? decay_va_pool_node+0xe5d/0xec0 [ 298.227394][ T5648] ? __purge_vmap_area_lazy+0xf7/0x8d0 [ 298.232871][ T5648] ? drain_vmap_area_work+0x29/0x50 [ 298.238087][ T5648] ? process_scheduled_works+0x7d2/0x1020 [ 298.243830][ T5648] ? worker_thread+0xc58/0x1250 [ 298.248696][ T5648] ? kthread+0x2ca/0x370 [ 298.252956][ T5648] ? ret_from_fork+0x64/0xa0 [ 298.257562][ T5648] ? ret_from_fork_asm+0x1a/0x30 [ 298.262526][ T5648] ? __kasan_slab_free+0x6a/0x80 [ 298.267488][ T5648] ? __cfi_native_flush_tlb_one_user+0x10/0x10 [ 298.273661][ T5648] ? llist_add_batch+0x109/0x1e0 [ 298.278618][ T5648] ? __cfi_call_function_single_prep_ipi+0x10/0x10 [ 298.285158][ T5648] ? reclaim_list_global+0x1436/0x1460 [ 298.290640][ T5648] ? __kasan_check_write+0x18/0x20 [ 298.295771][ T5648] ? reclaim_list_global+0x1423/0x1460 [ 298.301258][ T5648] ? smp_call_function_many_cond+0xa9f/0xf30 [ 298.307296][ T5648] ? __cfi_do_kernel_range_flush+0x10/0x10 [ 298.313140][ T5648] ? purge_vmap_node+0x822/0x880 [ 298.318134][ T5648] ? __cfi_purge_vmap_node+0x10/0x10 [ 298.323445][ T5648] ? __kasan_check_write+0x18/0x20 [ 298.328575][ T5648] ? pwq_dec_nr_in_flight+0x6c7/0xc60 [ 298.333975][ T5648] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 298.339546][ T5648] ? kick_pool+0xad/0x550 [ 298.343929][ T5648] process_scheduled_works+0x7d2/0x1020 [ 298.349511][ T5648] worker_thread+0xc58/0x1250 [ 298.354215][ T5648] kthread+0x2ca/0x370 [ 298.358302][ T5648] ? __cfi_worker_thread+0x10/0x10 [ 298.363431][ T5648] ? __cfi_kthread+0x10/0x10 [ 298.368048][ T5648] ret_from_fork+0x64/0xa0 [ 298.372501][ T5648] ? __cfi_kthread+0x10/0x10 [ 298.377116][ T5648] ret_from_fork_asm+0x1a/0x30 [ 298.382081][ T5648] [ 298.385109][ T5648] Modules linked in: [ 298.389034][ T5648] CR2: 0000000000000098 [ 298.393199][ T5648] ---[ end trace 0000000000000000 ]--- [ 298.398701][ T5648] RIP: 0010:down_write+0x9a/0x2a0 [ 298.403816][ T5648] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 6d 2b 55 fc 4c 89 f7 be 08 00 00 00 e8 60 2b 55 fc 48 8b 44 24 20 b9 01 00 00 00 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03 [ 298.423659][ T5648] RSP: 0018:ffffc9000d5e7500 EFLAGS: 00010256 [ 298.429837][ T5648] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001 [ 298.437910][ T5648] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc9000d5e7520 [ 298.445891][ T5648] RBP: ffffc9000d5e7598 R08: ffffc9000d5e7527 R09: 1ffff92001abcea4 [ 298.453877][ T5648] R10: dffffc0000000000 R11: fffff52001abcea5 R12: dffffc0000000000 [ 298.461866][ T5648] R13: 1ffff92001abcea0 R14: ffffc9000d5e7520 R15: 0000000000000000 [ 298.469849][ T5648] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 298.479320][ T5648] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 298.486016][ T5648] CR2: 0000000000000098 CR3: 0000000128994000 CR4: 00000000003526b0 [ 298.494013][ T5648] Kernel panic - not syncing: Fatal exception [ 298.500519][ T5648] Kernel Offset: disabled [ 298.505034][ T5648] Rebooting in 86400 seconds..