last executing test programs: 3m49.3515545s ago: executing program 3 (id=174): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x3, 0x0, &(0x7f0000000040)=""/32, &(0x7f0000000080)=""/108, &(0x7f0000000100)=""/209, 0x4000}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/reserved_size', 0x4000, 0x32) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000280)={[{0x1, 0x5, 0x6, 0x2, 0x9, 0x3, 0x0, 0x4, 0x5, 0x1, 0x3, 0x1, 0x835b}, {0x401, 0x2, 0x2, 0x7f, 0xd, 0xe, 0x8, 0x7, 0x36, 0xf9, 0x9, 0xd}, {0x2, 0x6, 0x8, 0x2, 0xfd, 0x1, 0x6, 0x5, 0xcc, 0x3, 0x7f, 0x5, 0x3}], 0x6}) r2 = socket$nl_generic(0x10, 0x3, 0x10) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000540)=0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000580)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@remote}}, &(0x7f0000000680)=0xe8) getgroups(0x1, &(0x7f00000006c0)=[0xee01]) sendmsg$netlink(r2, &(0x7f0000000740)={&(0x7f0000000300)=@proc={0x10, 0x0, 0x25dfdbff, 0x800000}, 0xc, &(0x7f0000000500)=[{&(0x7f0000000340)={0x68, 0x25, 0x8, 0x70bd28, 0x25dfdbff, "", [@generic="f665c47ffb30549de3e6fa086c3970ceae7d1af4713defce2f79d876a8f771a59c32448fcdbac305ac4c121e982a8a9c572ff6eff9d9953df932a84ab2713f0fa393d34fd0c39a5d67e41a71fb876430e36fbdab2e"]}, 0x68}, {&(0x7f0000000480)={0x5c, 0x8, 0x8, 0x70bd2d, 0x25dfdbfb, "", [@nested={0x10, 0x137, 0x0, 0x1, [@nested={0x4, 0x1f}, @typed={0x8, 0x4f, 0x0, 0x0, @uid=r3}]}, @generic="43012cbafb6d4db2d1", @generic="56ac01acce235c5158722d1a09bad0c1072ce726649cae41c759b7ee5a6b2a52917db7d532a8696e0d7d16dd9b9aa537df4d55"]}, 0x5c}], 0x2, &(0x7f0000000700)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}], 0x20, 0x20000030}, 0x8801) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r2) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r7, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x8}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xc7}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x9}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1628}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f00000008c0)={{0x4, 0x6}, 0x100, './file0\x00'}) mount$bpf(0x0, &(0x7f0000000a00)='.\x00', &(0x7f0000000a40), 0x200800, &(0x7f0000000a80)={[{@mode={'mode', 0x3d, 0xffffffffffffffff}}], [{@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '[(${!}'}}, {@appraise_type}]}) write$P9_RVERSION(r1, &(0x7f0000000b00)={0x15, 0x65, 0xffff, 0x6, 0x8, '9P2000.L'}, 0x15) r8 = syz_open_procfs(r4, &(0x7f0000000b40)='fdinfo/3\x00') ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f0000000b80)=0x1) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) r9 = socket$key(0xf, 0x3, 0x2) ioctl$KVM_SET_PIT(r8, 0x8048ae66, &(0x7f0000000bc0)={[{0x6, 0x8, 0x81, 0x8c, 0x9, 0x7, 0xf6, 0x40, 0x8, 0x10, 0x7f, 0x3, 0x8000000000000000}, {0x0, 0x2, 0x6, 0x3, 0x80, 0x1e, 0x2, 0x8, 0x5, 0x4, 0x5, 0x2, 0xa5}, {0x3, 0xf, 0x4, 0xfa, 0x80, 0x2, 0xb4, 0x10, 0x3, 0x7, 0x0, 0x83, 0x7}], 0x9}) mount$9p_fd(0x0, &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80), 0x81b244, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '*{%'}}, {@noxattr}, {@cache_mmap}, {@version_u}, {@access_user}], [{@context={'context', 0x3d, 'system_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '9P2000.L'}}, {@fsmagic={'fsmagic', 0x3d, 0xde2}}]}}) ioctl(r1, 0x3, &(0x7f0000000dc0)="8d6e57e99ca2f3378e") getresuid(&(0x7f0000000ec0), &(0x7f0000000f00), &(0x7f0000000f40)=0x0) mount$9p_virtio(&(0x7f0000000e00), &(0x7f0000000e40)='.\x00', &(0x7f0000000e80), 0x2080021, &(0x7f0000000f80)={'trans=virtio,', {[{@cache_loose}, {@noxattr}, {@msize={'msize', 0x3d, 0x9634}}, {@noxattr}], [{@fowner_lt={'fowner<', r5}}, {@smackfshat={'smackfshat', 0x3d, '![@^\\&$'}}, {@uid_lt={'uid<', r10}}, {@obj_role={'obj_role', 0x3d, 'context'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}}) openat(r1, &(0x7f0000001040)='./file0\x00', 0x8800, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001080)={0x0, 0x5, 0x2, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000004, 0x20010, r2, 0xa8890000) faccessat2(r8, &(0x7f00000010c0)='./file0\x00', 0x1, 0x200) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000001100)={0x73622a85, 0x1100, 0x3}) 3m49.313669331s ago: executing program 3 (id=177): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0x33, 0x0, &(0x7f0000000140)=0xffffffffffffffab) (async) getdents64(r0, &(0x7f00000063c0)=""/1024, 0x18) (async) getdents(r0, &(0x7f0000000340)=""/163, 0xa3) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) inotify_rm_watch(r2, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x9, 0x0, &(0x7f0000000140)=[@request_death], 0x0, 0x0, 0x0}) 3m49.257375242s ago: executing program 3 (id=179): syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r0 = gettid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x8000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d00, 0x0, 0x9}]}) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) write$binfmt_misc(r6, &(0x7f0000000980), 0xfdef) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r7, 0xc0046209, &(0x7f0000001340)) 3m48.346772486s ago: executing program 3 (id=190): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) add_key(&(0x7f0000000000)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 3m48.320527576s ago: executing program 3 (id=191): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@local, @mcast2, @mcast2, 0x76, 0x6, 0x0, 0x100, 0x0, 0x87220092}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1010c0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000040)) socket$inet6(0xa, 0x800000000000002, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x1002, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r6 = socket(0x28, 0x4, 0x1f) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000180)={0x1, 'vlan0\x00', {}, 0x5}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1a9a00, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r9 = userfaultfd(0x801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r9, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) ioctl$KVM_CAP_MAX_VCPU_ID(r8, 0x4068aea3, &(0x7f0000000000)={0x80, 0x0, 0x7}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x200) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r10 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x10001) setsockopt$inet6_group_source_req(r6, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffd}}}, 0x108) 3m48.187625298s ago: executing program 3 (id=192): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) getpid() ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000480)=[@increfs], 0x0, 0x0, 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r3 = syz_clone(0x20000011, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = eventfd(0x10000) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000001c0)={0x2, r5}) ptrace(0x4208, r3) wait4(r3, 0x0, 0x80000000, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) dup(0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0800000011ff"], 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r7, 0x0, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x34, r8, 0x303, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10008880}, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) 3m48.172008668s ago: executing program 32 (id=192): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) getpid() ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000480)=[@increfs], 0x0, 0x0, 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r3 = syz_clone(0x20000011, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = eventfd(0x10000) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000001c0)={0x2, r5}) ptrace(0x4208, r3) wait4(r3, 0x0, 0x80000000, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) dup(0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0800000011ff"], 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r7, 0x0, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x34, r8, 0x303, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10008880}, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) 43.229505658s ago: executing program 1 (id=2670): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockname(r0, 0x0, &(0x7f0000000280)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) (async) ioctl$TIOCMGET(r2, 0x5415, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r3, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000004240)={0x2c, r1, 0x1, 0x70bd27, 0x4, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x10, 0x111, 0x0, 0x1, {0xc, 0x5, 0x0, 0x1, [{0x4}, {0x4}]}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r4, 0x2000) 43.228210308s ago: executing program 1 (id=2671): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r1, &(0x7f0000000000), 0x2002) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x7, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000015}, 0x80) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r3, 0x11, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 43.225414508s ago: executing program 1 (id=2672): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000080)=ANY=[@ANYBLOB="7365cb272d82eded31d857ac2797c22fc266d7b9bdc931636c6162656c2c00"]) 43.218666958s ago: executing program 1 (id=2673): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x401c2, 0x0) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r4, r3, 0x0, 0x578410eb) syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000000)=ANY=[@ANYBLOB="12015001000000106b1d010140000102030109029a00030100e0000904000000010100000a24010000000201020c240200000000000e0000000524050000082404030f8bf8ae0c240701050000c80975f9070d24070101000005cf1f0000050924030000000001000904010000010200000904010101010200000905010900000100000725010001000009040200000102000009040201", @ANYRES16], 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000440)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000001e80)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000001c0)={{r6, 0x1, 0x9, 0xa8, 0x7, 0x8d9, 0x101, 0x81, 0x9, 0x2, 0x3ff, 0x0, 0x7, 0x332c, 0x9}, 0x8, [0x0]}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x8, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 41.650228842s ago: executing program 1 (id=2682): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0xc0010001, 0x0, 0x40}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000380)={0x89, 0x4, 0x1, 0x3, 0x0, [@ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r5, 0x4008af04, &(0x7f0000000300)=&(0x7f0000000240)) r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sendmsg$nl_xfrm(r7, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=@getae={0x290, 0x1f, 0x400, 0x70bd26, 0x25dfdbfc, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d5, 0x2, 0x2b}, @in6=@dev={0xfe, 0x80, '\x00', 0x38}, 0x0, 0x3507}, [@sec_ctx={0x12, 0x8, {0xe, 0x8, 0x0, 0x0, 0x6, "d9c2419125d1"}}, @srcaddr={0x14, 0xd, @in=@empty}, @etimer_thresh={0x8, 0xc, 0x9559}, @proto={0x5, 0x19, 0x6c}, @extra_flags={0x8}, @algo_crypt={0x103, 0x2, {{'pcbc-aes-aesni\x00'}, 0x5d8, "d3166c2656a01a5f6fe64c12fc24b97820234d3c96172b3454c84bee689f59dd2859c01709216668062400e3869b7a65e8fce59f22ecaf1a651a69aaf9a5624029a31bd36eaae337df53c4b2448b726e1b88cfe3fc87d64074e4efecdd9a13b04f787014430f1929ff1d3367ec967a8e02bffcb4a445a473bc8fd3a6cde8d44a69631ff05921f3a96aacdb9d9e5cc8b25d5f824a0144eaaba58bd0550851ca2e8ef53b444fe4f6235e03adad6990711ec4a99b48c2d5ee28c245df"}}, @algo_crypt={0xd1, 0x2, {{'pcbc(tea-generic)\x00'}, 0x448, "3b6416b016becae67bdd8fb89bede29177d55d14a7c9415f1d7c2fa0125f6600d1773e66e26e9573b7339043b112f4c28756d6ca44ea5c2963a7cff586bc2ddf27c73ce44ca9aeccbbd382b2cba732f8bc5eb8d586c237351b3fe8531d2297bf8bfe8cafc0d11db9462cb5289656b45fe1c478c0c72e1122423fba4124b13068c932cae76357eed3cd"}}, @offload={0xc, 0x1c, {0x0, 0x2}}, @replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2b, 0x70bd29, 0x70bd27, 0x70bd27, 0xffffffff, [0x9, 0x2, 0x80000001, 0x5]}}]}, 0x290}, 0x1, 0x0, 0x0, 0x4008080}, 0x4000011) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/121, 0x79}, {&(0x7f00000000c0)=""/25, 0x19}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f00000034c0)=""/211, 0xd3}, {&(0x7f00000035c0)=""/65, 0x41}, {&(0x7f0000000100)=""/121, 0x79}, {&(0x7f0000000180)=""/68, 0x44}], 0x9}, 0x2}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x40000000000010b, 0x2100, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0xeeee0000}) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000680)) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) rt_sigqueueinfo(0x0, 0x13, &(0x7f0000000000)={0x2e, 0x1, 0x100}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000340)) 41.506178864s ago: executing program 1 (id=2684): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16], 0x14}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) syz_usb_connect(0x0, 0x1a2, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b6a57e4086805b0bc5e10102030109029001020000000009040000020e0100000a24010022000201020921"], 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x810408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x9, {0xff00000000000002, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x1, 0x8000, 0x0, r4, r5, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$FUSE_LSEEK(r6, &(0x7f0000000400)={0x18, 0x0, r3, {0x91b}}, 0x18) dup2(r6, r1) close_range(r0, 0xffffffffffffffff, 0x0) 25.407236297s ago: executing program 33 (id=2684): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16], 0x14}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) syz_usb_connect(0x0, 0x1a2, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b6a57e4086805b0bc5e10102030109029001020000000009040000020e0100000a24010022000201020921"], 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x810408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x9, {0xff00000000000002, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x1, 0x8000, 0x0, r4, r5, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$FUSE_LSEEK(r6, &(0x7f0000000400)={0x18, 0x0, r3, {0x91b}}, 0x18) dup2(r6, r1) close_range(r0, 0xffffffffffffffff, 0x0) 5.363470039s ago: executing program 5 (id=3064): removexattr(0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_NMI(r1, 0xae9a) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000180)={0x23, 0x14, 0x11, 0xfffe, 0xfffffffffffffed7, 0x820002, 0x0}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) getsockopt$inet6_mreq(r7, 0x29, 0x1c, &(0x7f00000000c0)={@private2, 0x0}, &(0x7f0000000100)=0x14) r9 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0xe, r8, 0x31, r9}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000380)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_trace_dev_match', 0x8000, 0x2) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = eventfd(0x48) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000000)=0x6) ioctl$KVM_IRQFD(r11, 0x4020ae76, &(0x7f0000000280)={r12, 0x6449, 0x2, r12}) ioctl$KVM_SET_IRQCHIP(r11, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0x0, 0x9, 0x80, 0x1, 0x0, [{0xff, 0x2, 0x3, '\x00', 0x4}, {0x4, 0xc0, 0x8, '\x00', 0x4}, {0xd0, 0x7f, 0x1, '\x00', 0x8}, {0x5, 0x5, 0x5, '\x00', 0x8}, {0x6, 0x81, 0x0, '\x00', 0x5}, {0x10, 0x9, 0x0, '\x00', 0x5}, {0x81, 0x3, 0x81, '\x00', 0x4}, {0x8, 0x6, 0xfa, '\x00', 0x20}, {0x8, 0x2, 0xc6, '\x00', 0x81}, {0x2, 0x13, 0x7, '\x00', 0xf}, {0x5, 0x3, 0x2, '\x00', 0xb}, {0x5, 0xeb, 0x0, '\x00', 0x6f}, {0x10, 0x0, 0xa, '\x00', 0x3}, {0xff, 0x81, 0x7, '\x00', 0x5}, {0x8, 0x7d, 0xb, '\x00', 0x2}, {0x80, 0x1, 0xff, '\x00', 0x5}, {0x7, 0x6, 0x9, '\x00', 0xd}, {0x2, 0x6, 0x2, '\x00', 0x2}, {0xb, 0xb3, 0x9, '\x00', 0x2}, {0x0, 0x9, 0x3, '\x00', 0x7}, {0x3, 0x2, 0x7, '\x00', 0x3}, {0x5, 0xa, 0x5e, '\x00', 0x1}, {0xb, 0x9, 0xf0, '\x00', 0x80}, {0xa, 0x4, 0x3, '\x00', 0x8}]}}) 4.933211025s ago: executing program 5 (id=3069): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) (async) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) getpid() (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000008009d000040"]) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000040)={0x80000, 0x0, [0x7, 0xffffffffffffff00, 0x7fffffff, 0x2, 0x4, 0x9, 0x401]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(0xffffffffffffffff, &(0x7f0000001300)={[0x2]}, 0x8) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) r8 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x1, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) (async) sendmmsg(r8, &(0x7f0000000480), 0x2e9, 0x0) (async) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) 4.563710351s ago: executing program 5 (id=3073): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x3, 0x0, 0x600}}, 0x30) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, 0x0) 4.431634293s ago: executing program 5 (id=3076): ioprio_set$uid(0x3, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) ioctl$NS_GET_NSTYPE(r2, 0xb703, 0x0) mount$binderfs(&(0x7f0000000080), &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{}, {@max={'max', 0x3d, 0x6}}, {@stats}, {@max={'max', 0x3d, 0x800}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/rnullb0\x00'}}, {@fowner_lt={'fowner<', r0}}, {@pcr={'pcr', 0x3d, 0x16}}]}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x3a, 0x37, 0x5, 0x20, 0x781, 0x5, 0x5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xe6, 0x2, 0x0, 0x5b, 0xbd, 0x97}}]}}]}}, 0x0) ptrace(0x10, r5) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_setup(0x3b45, &(0x7f0000000000)={0x0, 0xc5f8, 0x1, 0x1, 0xc3}, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x7ffff000) 4.374020824s ago: executing program 4 (id=3078): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @loopback}, r2}, 0x14) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x50, 0x0, &(0x7f0000000700)="93ca2efc9445b68c079d41dcfff066e61c4d8f1021949c8c75c29113ed78c691e4a88534e71804ab594c9c0cea97e979adb05f81276775d60f54e903eb87a57f7cbe1f97039cb9d611ffa16ca4582a68"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) recvmmsg(r5, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) pselect6(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x3, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0) 3.736070144s ago: executing program 5 (id=3096): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000005940), 0x40000, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r1, 0x4e963000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) fstat(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r4) r5 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000140)) lseek(r5, 0x8000003, 0x0) r6 = socket(0xa, 0x801, 0x0) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0xa00, 0x0) r8 = getpgrp(0xffffffffffffffff) fcntl$lock(r7, 0x24, &(0x7f0000000000)={0x2, 0x0, 0x23137caf, 0x7ff, r8}) getsockopt(r6, 0x0, 0x40, 0x0, &(0x7f00000000c0)) socket$nl_sock_diag(0x10, 0x3, 0x4) fcntl$dupfd(r2, 0x0, r2) open(&(0x7f0000000080)='./file0\x00', 0x40000, 0x21) fcntl$getown(r2, 0x9) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newsa={0xf0, 0x10, 0x713, 0x70bd26, 0x0, {{@in=@empty, @in=@multicast2, 0x4e22, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x2f}, {@in6=@private2, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x8000000000000000}, {0x10000000}, 0xfffffffc, 0x0, 0x2, 0x4, 0x0, 0xb}}, 0xf0}, 0x1, 0x0, 0x0, 0x24000804}, 0x0) mmap$binder(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 3.689580194s ago: executing program 5 (id=3097): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2000000000, 0x4}, 0x0) r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) ftruncate(0xffffffffffffffff, 0x6) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41f}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x20, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x82, 0x2, "c9a7"}, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0xfffffcf3, &(0x7f0000000440)={0x40, 0x0, 0x2, "3aec"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000002c0)={0x0, 0xf, 0x2, "e911"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000780)={0x40, 0xf, 0x5, "2862c275a8"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x310) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xc, 0x8b}, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40}, {0x0, 0x0, 0x4, 0x6db1, 0x0, 0x0, 0x401}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x10}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) ioprio_set$pid(0x2, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) preadv(r4, &(0x7f0000000800)=[{&(0x7f00000007c0)=""/63, 0x3f}], 0x1, 0x2, 0xa00) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000008, 0x12, r1, 0x2b09d000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 3.511341607s ago: executing program 4 (id=3098): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x0, 0x0) (async) mkdir(0x0, 0x0) (async) prlimit64(0x0, 0x2, &(0x7f0000000140)={0x41200a, 0x10004}, 0x0) (async) epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYRESOCT=0x0, @ANYRESHEX, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe32000000fe80000000000000000000000000001b000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000043050000000000000400000000000000ffffffffffffff7f0000000000000000000000000000000000000000000000000000000028bd7000003500000a00040000000000000000004c001200726663343130362867636d286165732929000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000001c00040002004e244e240000fe80000000000000000000000000002e"], 0x158}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x3f}, 0x78, r1}) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000000101010300000000000000200a0000000c00198008000100ad0400003c0001802c000180140003"], 0x5c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) getdents(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) (async) brk(0x689d80000000) r10 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000080)=ANY=[]) 3.427493538s ago: executing program 4 (id=3100): epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x6, &(0x7f0000000040)={[0x3ff]}, 0x7) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_tcp(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x10001, &(0x7f0000000100)={'trans=tcp,', {'port', 0x3d, 0x200000000004e22}}) keyctl$chown(0x4, r0, 0x0, 0xffffffffffffffff) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r1, 0x0) 3.375698479s ago: executing program 4 (id=3102): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b41"], 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r1, &(0x7f0000002280)='ceph\x00', &(0x7f00000022c0)={'syz', 0x2}, r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x53, 0x0, &(0x7f0000000400)="892a7863af87409b1b8fe4e183cc4e2c2eddca324f8c2a61fb078c81d7272d92b902bf051aacb6decd83ec368991a0d7599c3ce3f7bed9d8078ba649896475d964ddb0c6d4d498b0ef80a3f6170b75654851be"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x53, 0x0, &(0x7f0000000400)="892a7863af87409b1b8fe4e183cc4e2c2eddca324f8c2a61fb078c81d7272d92b902bf051aacb6decd83ec368991a0d7599c3ce3f7bed9d8078ba649896475d964ddb0c6d4d498b0ef80a3f6170b75654851be"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000340)=[@increfs], 0x0, 0x0, 0x0}) 2.817764447s ago: executing program 0 (id=3113): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r2}, 0xffffffffffffffd1) splice(r0, &(0x7f0000000000)=0x8, 0xffffffffffffffff, &(0x7f00000007c0)=0x3, 0x800, 0x5) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000080)={0x80000002}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000180), 0x301201, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="02050003120000000000000000000000030005000000000002004e22e0000002000000000000000008001900000000000a004e22000007cbff020000000000000000000000000001050000000a004e2200000009ff0200000000000000000000000000010800000005000600320d46020a00000000000002ff020000000058ca74d37a41a5e06fc198927b0b3d00000059c03e19eee74bb7a4f173ea33b762ffe05a1201e6cccb279e3384bc4ed0645988949a235f120a7466c35fe5cde7df34"], 0x90}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002340)=ANY=[@ANYBLOB="d0040000", @ANYRES16=r8, @ANYBLOB="050000000080000000000f0000008a040e001c"], 0x4d0}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="026bfdd91c376132c9290027000300f0d5d1c929b2780fd5dfdf0b7787e5a330887ff1bbff495430c85315ec4e53d7d9292a7d8fe8f65ba30f6c8c40c226b1f68b27b5ab9f45d0c14c0cec62cd739979f908cdb8010fef505e1416636ab44ee95e3bcdf1e1217bcbfad36b13fd6ac2e09c4b9afc5792b9d5addb2695b6123869052a9ac2b225911376cb838e6d61b5fc82d8d595e3999e6be77e06c083b54386e21ca7896d3268687ebc828a05fd2589bd8ffa522085064d3f5675eb72452f06d98219ce1ea56fc3f9", @ANYRES32=r10, @ANYBLOB="08006b003700000008006b00b400000008006b001c02000008006b0093010000"], 0x3c}}, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r6, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x120a0000}, 0xc, &(0x7f0000000440)={&(0x7f0000000800)={0x2cc, r8, 0x600, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IE={0xf, 0x2a, [@cf={0x4, 0x6, {0x7, 0x0, 0x7, 0x2}}, @challenge={0x10, 0x1, 0x6b}, @random={0x10, 0x0, "3ccdf6048edf8b5d34c05ddc2c24aeaf8cf16410de09cc2ca21546ff44577cdbf9c7010573b190f4506c22d87b05034c80bd"}]}, @NL80211_ATTR_IE={0x133, 0x2a, [@chsw_timing={0x68, 0x4, {0x153, 0x8}}, @ht={0x2d, 0x1a, {0xc, 0x0, 0x0, 0x0, {0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x300, 0x6ea4, 0x6}}, @perr={0x84, 0xe3, {0x4, 0xf, [{{}, @device_b, 0x0, @void, 0x17}, {{}, @broadcast, 0x7, @void, 0x2d}, {{0x0, 0x1}, @device_a, 0x1, @value=@device_b, 0x18}, {{}, @device_b, 0x7, @void, 0x11}, {{}, @device_b, 0x1, @void, 0x23}, {{0x0, 0x1}, @device_a, 0x6, @value, 0xb}, {{0x0, 0x1}, @device_b, 0x8, @value=@device_b, 0x29}, {{0x0, 0x1}, @device_a, 0xc, @value=@device_b, 0x1f}, {{}, @device_a, 0x4, @void, 0x16}, {{}, @broadcast, 0x3, @void, 0x16}, {{0x0, 0x1}, @device_b, 0xa, @value=@device_b, 0x1f}, {{}, @broadcast, 0x5, @void, 0x40}, {{}, @device_b, 0xd, @void, 0xa}, {{}, @broadcast, 0xa4e, @void, 0x6}, {{}, @broadcast, 0x2, @void, 0xa}]}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xf9, 0x88, 0xf}}, @channel_switch={0x25, 0x3, {0x1, 0xb1, 0x3}}, @mic={0x8c, 0x10, {0x218, "adb2b298c1d1", @short="26d0949e587ecf07"}}, @sec_chan_ofs={0x3e, 0x1}, @supported_rates={0x1, 0x6, [{0x36, 0x1}, {0x6}, {0x30}, {0x18, 0x1}, {0x3}, {0xb}]}]}, @NL80211_ATTR_IE={0x43, 0x2a, [@challenge={0x10, 0x1, 0x44}, @erp={0x2a, 0x1, {0x1, 0x1}}, @mic={0x8c, 0x18, {0xb16, "02f740360cf5", @long="1a25e21289671de130466b7c64703758"}}, @rann={0x7e, 0x15, {{0x0, 0x12}, 0x0, 0x2e, @broadcast, 0x5, 0xfffffffa, 0xf6a}}, @gcr_ga={0xbd, 0xfffffce6}]}, @NL80211_ATTR_IE={0x11d, 0x2a, [@link_id={0x65, 0x12, {@initial, @device_b, @broadcast}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @mesh_chsw={0x76, 0x6, {0xb, 0xfa, 0x7, 0x33}}, @link_id={0x65, 0x12, {@from_mac, @device_b}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, 0x6, 0x20}}, @tim={0x5, 0xd3, {0xc0, 0xa5, 0x4, "086e0a76e65e4e32aa3ecb0c9fff4e38801f718c1760f31f601bf73ed13c45071ba3fed1e454e06f6f76b56b6f851d3563e1abee24fc021c10dd51fb4463cf13f9b2876e544313fc271e99723d85e40c37bb20c36ddfbe3ccd79f61df34c37cd6c7fbcd08660ecc8f5826295c015a95413f57ac30cef053b98fb545ef9d7713a81f6fd9b3fd1786b32e2b25c949f1e6511ddec771c644cc2c05e239712161ee8560e8b7c7f531c975e076e95a11344953f8da83be5aaea1abdff4c353d4d3fce4ae705322be671ff1c35f476b313faa9"}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xe}]}, 0x2cc}}, 0x81) ioctl$BLKBSZSET(r4, 0x40081271, &(0x7f00000001c0)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x8202, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r11, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r12, 0x107, 0x13, &(0x7f0000000000)=0x3, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x4, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@remote, @in=@remote, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc0, 0xc, 0x0, 0xee01}, 0x6e6bb7}}, 0x50}}, 0x0) r13 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r13, &(0x7f00000005c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) 2.63106441s ago: executing program 0 (id=3114): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100000140000021000054"], 0x14}}, 0x4004800) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x400, 0x0) (async, rerun: 32) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="180000005600010000000000000080000700000040"], 0x18}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100001000000000020000000000080bc49ad6600004a1fcb1a71ddf55bc1fe919f9535f186891f45c3e48bb369195d732930d536d2230fecc91f20b27a8a74c93c3565"], 0x24, 0x3) (async) getxattr(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r4, 0x0) (async) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') r8 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) write(r8, 0x0, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wmdno=', @ANYRESHEX=r6, @ANYBLOB=',\x00']) r9 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r9, 0x11, 0x8, 0x0, &(0x7f0000000680)) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) 2.571985401s ago: executing program 0 (id=3115): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0x8008770b, 0x2) 2.516420612s ago: executing program 0 (id=3117): syz_usb_connect$uac1(0x6, 0x11b, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x109, 0x3, 0x1, 0x8, 0x0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x40, 0x2}, [@feature_unit={0xf, 0x24, 0x6, 0x5, 0x3, 0x4, [0x8, 0x7, 0x9, 0x8]}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x204, 0x2, 0x3, 0x2, 0x1, 0x5}, @feature_unit={0xb, 0x24, 0x6, 0x2, 0x3, 0x2, [0x1, 0x7], 0x73}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x307, 0x5, 0x3, 0x5e}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x67, 0x4, 0x14, 0x10, "9a1fcd12"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x4, 0x1, 0x8, 0x7, "70f78a70"}, @as_header={0x7, 0x24, 0x1, 0x7, 0x81, 0x3}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x3ff, 0x3, 0x4, "eb0179ba06a0"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x1, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x5f, 0x1, 0x2, {0x7, 0x25, 0x1, 0x1, 0x8, 0xfeff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x7, 0x1, 0x5, 0x6, "1c85930bd7f9"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xff, 0x3, 0x6, 0x1, "6cc4"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x200, 0x3, 0x2, "f05df46710d9f3"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x6, 0x434e, 0x9, "ee443d"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x5, 0x4, 0xd, 0xc, "041ed7"}, @as_header={0x7, 0x24, 0x1, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0x3, 0x3, {0x7, 0x25, 0x1, 0x80, 0x7, 0x1}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x2, 0x4, 0x8, 0xdf, 0x2}, 0x8c, &(0x7f0000000380)={0x5, 0xf, 0x8c, 0x3, [@generic={0x60, 0x10, 0xb, "dd0856a449cec1a028614dfb3c162660d40288ff692a0943236c323ce66545dbc7268ae2ee48e0233133e7b2026023a17343b7f9c0f2942ad5e94b1489dd9f339fe8ebb60e16e1f00a761bb7e4b9d18b48f2d55c038a5b9c480206b6f0"}, @ssp_cap={0x1c, 0x10, 0xa, 0x3, 0x4, 0x0, 0xf00, 0x5cc, [0x7f7f0f, 0xff6000, 0xffc0c0, 0xff3fcf]}, @wireless={0xb, 0x10, 0x1, 0x2, 0xc0, 0xff, 0x4, 0x4c, 0x5}]}, 0x7, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x40c}}, {0xab, &(0x7f0000000600)=@string={0xab, 0x3, "4ae995046db75677368686a2144bd3155d218fcc25233f5e2a375c15e1acd6a5013ad4265828e7dfffe267b26e9b177fac0f0d138cda8041f16fc62c693872484c723bcb9f300a28a410757fa574800c355aded3c85adb1575a9d29ae63928acd85317e2cd15394d4bbb9024a224c758cc74e902704bbe33c00e7dade6ba6e3c0a639d8cc35d108937f82e714eabc3ff1c993d321fef9b9aa9ec0d02388aa3f33a2e82bcbf186ad48d"}}, {0xfc, &(0x7f00000006c0)=@string={0xfc, 0x3, "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"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x424}}, {0x90, &(0x7f00000007c0)=@string={0x90, 0x3, "38ad610528e89498585eb2651110f89445c89e5608235d2a0afefb1d0aeba7f37b4f8da212343a0cd15bbba9d0a93a49508afa6762219d23da87fe4477d77ae3ae0d9c3fbcf6069ae773f858c005309aa8f9201d5c061239713f727aee593749074ceb5eab104ae77e56ca65b3a6a7846868cea0cccd5ccfde7f39e2a68ddb590e3e03922a32476355267d2d6663"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x3810}}, {0xe0, &(0x7f0000000880)=@string={0xe0, 0x3, "ed8d507c649c889443c462cefd4f3cab74458d137edab744a5a36bde7cb0135af77c23b40d2a6ab1fb9613e976851260cf6c302faee0219c0a4ebf4ee221caa1549e9f88590071c20ee9667d50f2ed35d0b536a8a32e6ebe93521f024de6af51e379b93a7c260b3286f9fb049187d11617a00a10c46c38286d8833b7d96016da0b62ab5a7c1ebbc669e76c693f2595104f2f9f5b642bf17fa65a36a3c77771cdc75582d0b4f85d4f00df1a775c9e962f4037b286a054474d6ad2125290810dacfd41b99c31e01c31eaeba152d702b18ddfd0500f1c01810063715e512cb3"}}]}) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x7, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x16, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 1.927665701s ago: executing program 0 (id=3121): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000300)={0x0, 0x9c}, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) prlimit64(0x0, 0x0, &(0x7f0000000300)={0x0, 0x9c}, 0x0) (async) prlimit64(0x0, 0xc, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) (async) 1.927089371s ago: executing program 0 (id=3122): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) r2 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40010102) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f00000002c0)={0xfffffffa}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x43, 0xda1, 0x8, 0x2004cb, 0x0, 0x100001000000, 0xfffffffffffffffe, 0x1, 0x8000, 0x3], 0x3000, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000202505a8a4720b1c25030109021f000101ff8008090400fd01070101010905010220"], 0x0) syz_usb_control_io$printer(r6, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003620000000003"]}, 0x0) syz_usb_control_io(r6, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000003d00)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)={0x20, 0x0, 0x4, {0x2, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, &(0x7f00000002c0)={0x2c, &(0x7f0000000140)={0x40, 0xc, 0xb4, {0xb4, 0xc, "398b043a844fb0275610a9e9137da0a6943536069d07f6492116fecb7891424d6807b094e04d652dc116380fb053599c9f0527ba00b8b5982ed80b1fe06e879f1096ba291176239e2febcbd305c4e100ea6749b14ebbcacc6d80e7f9b9dee4ee760851ae55e95659730628dad7de23655c3d36034856fb5b7f5ad1aee06ce0ef8cef09cacf74226c86bc8afcf6a8439b2c79498121b53a02f4d02f4546e9a7e53c88f28ee46176a202e4d04941f6a07c7fd4"}}, &(0x7f0000000980)=ANY=[@ANYBLOB="0003042004000403093045b7256a87f35a47b6c014ec3b832686c7db970c9340b769c708532ed25335582b923f1d53f195874d8146498fe2544703bdcf76d65972db1260c21bc7d403c7b379000ab0a4a624fa51304fa7d07ebfa665c73aaa29ffaa535b5dea086d"], &(0x7f0000000200)={0x0, 0xf, 0x24, {0x5, 0xf, 0x24, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x6, 0x5, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x12, 0x4, 0xea, 0x6, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x3, 0x20, 0xffff}]}}, &(0x7f00000006c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x6, 0x5, "4096f473", "15c3c3e1"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x60, 0x9, 0x4, 0x6, 0x1000, 0x1000}}}, &(0x7f0000000840)={0x84, &(0x7f0000000300)={0x40, 0xa, 0x57, "1177c60b77b7f5eff9823d316cb34a462849456c878a022254ee85c4a10bb5ab35d089081963e439b5beebe5f513ead34419b4a4bfd1962506e78a27e358646b4eec88528c86943cc6501f75a4e5931be98e55af80802d"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x1a}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000480)={0x20, 0x0, 0x7, {0x0, 0x20, [0xf00]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000540)={0x40, 0xb, 0x2, "421f"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x6}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @link_local}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "f06b"}, &(0x7f0000000740)={0x40, 0x1a, 0x2}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x8}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x4}}) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) 1.233839921s ago: executing program 2 (id=3125): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) unshare(0x24020400) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x80000) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000001340)={0x0, 0x0, 0x2, r4, 0x3}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x18}, 0xc804) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000140)={0x203, 0x0, 0x2, r4, 0xf}) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000300)=&(0x7f0000000240)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0xeeee0000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 1.208374502s ago: executing program 2 (id=3126): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @local}, @local, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x800000, 0xa, 0x0, 0x0, 0x7ffffffe, 0x140192, r1}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = getpid() r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r6, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000200)={{}, {0x0, 0x989680}}, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x30, r8, 0xc4fc9e906872338b, 0x20, 0x200, {{0x15}, {@void, @val={0xc, 0x99, {0x40, 0x52}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$P9_RGETLOCK(r10, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r9, r12, 0xfffffffffffffc01, 0x0) tee(r9, r12, 0x60000000000, 0x0) read$msr(r11, &(0x7f0000002140)=""/102400, 0x19000) keyctl$set_reqkey_keyring(0xe, 0x1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313, 0x3}], 0x0, 0x1000000, 0x0}) 1.179750802s ago: executing program 2 (id=3127): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x1a, 0x0, &(0x7f0000000080)) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0xd, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) 1.074832024s ago: executing program 2 (id=3128): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @loopback}, r2}, 0x14) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x50, 0x0, &(0x7f0000000700)="93ca2efc9445b68c079d41dcfff066e61c4d8f1021949c8c75c29113ed78c691e4a88534e71804ab594c9c0cea97e979adb05f81276775d60f54e903eb87a57f7cbe1f97039cb9d611ffa16ca4582a68"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) pselect6(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x3, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0) 1.025832604s ago: executing program 2 (id=3129): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) rt_sigqueueinfo(0xffffffffffffffff, 0x3b, &(0x7f00000000c0)={0x5, 0x9, 0xfffffff8}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1c, 0x0, 0x12, 0xfe}, {0x6}]}) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x0) r3 = epoll_create(0x10000e9) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r5 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000480)) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000100)={r5, 0x0, 0x0, 0x1000}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000080)={0x2025}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x98, 0x0, &(0x7f0000000300)=[@increfs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x101, 0x1}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@fd, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/163, 0xa3, 0x2, 0x3a}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x400}], 0x4, 0x0, 0x0}) 119.903898ms ago: executing program 4 (id=3130): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) (async) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) (async) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r2, 0x330f, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) socket$igmp6(0xa, 0x3, 0x2) (async) r3 = socket$igmp6(0xa, 0x3, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$packet(0x11, 0x1, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0xdd86, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x5b0}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000040)={0x77359400}, 0x10) (async) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000040)={0x77359400}, 0x10) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x3) (async) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) write$uinput_user_dev(r7, &(0x7f0000000240)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000003], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x800], [0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper], 0x51, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b9a"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper], 0x51, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b9a"}) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x804, 0x0) syz_clone(0x1222080, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r8, &(0x7f0000003d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r9) (async) fchdir(r9) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 55.675439ms ago: executing program 2 (id=3131): ioprio_set$uid(0x3, 0x0, 0x64) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40400d1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r2, 0x10001, 0x0) 0s ago: executing program 4 (id=3132): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffffffffffa) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) lseek(r0, 0xfbb6, 0x1) kernel console output (not intermixed with test programs): A: unknown main item tag 0x0 [ 176.877260][ T540] apple 0003:05AC:0245.000A: unknown main item tag 0x0 [ 176.884153][ T540] apple 0003:05AC:0245.000A: unknown main item tag 0x0 [ 176.891061][ T540] apple 0003:05AC:0245.000A: unknown main item tag 0x0 [ 176.897957][ T540] apple 0003:05AC:0245.000A: unknown main item tag 0x7 [ 176.905984][ T540] apple 0003:05AC:0245.000A: unknown main item tag 0x0 [ 176.913055][ T540] apple 0003:05AC:0245.000A: unknown main item tag 0x0 [ 176.920010][ T540] apple 0003:05AC:0245.000A: unknown main item tag 0x0 [ 176.926975][ T540] apple 0003:05AC:0245.000A: unknown main item tag 0x6 [ 176.933910][ T540] apple 0003:05AC:0245.000A: unknown main item tag 0x0 [ 176.940985][ T540] apple 0003:05AC:0245.000A: unknown main item tag 0x0 [ 176.949975][ T540] apple 0003:05AC:0245.000A: unknown main item tag 0x0 [ 176.957195][ T540] apple 0003:05AC:0245.000A: item fetching failed at offset 37/41 [ 176.965298][ T540] apple 0003:05AC:0245.000A: parse failed [ 176.971177][ T540] apple 0003:05AC:0245.000A: probe with driver apple failed with error -22 [ 177.066537][ T6894] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:90 [ 177.396085][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 177.433195][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 177.455527][ T31] usb 3-1: USB disconnect, device number 16 [ 178.377164][ T312] usb 5-1: USB disconnect, device number 38 [ 179.275151][ T312] usb 1-1: USB disconnect, device number 14 [ 179.341152][ T6959] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 179.341189][ T6959] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:94 [ 179.432306][ T897] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 179.624743][ T897] usb 3-1: Using ep0 maxpacket: 16 [ 179.630908][ T897] usb 3-1: too many configurations: 255, using maximum allowed: 8 [ 179.643333][ T897] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 179.652217][ T897] usb 3-1: can't read configurations, error -61 [ 179.795827][ T897] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 179.871233][ T36] kauditd_printk_skb: 795 callbacks suppressed [ 179.871259][ T36] audit: type=1400 audit(1750652476.083:9872): avc: denied { ioctl } for pid=6953 comm="syz.2.2275" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 179.956169][ T897] usb 3-1: Using ep0 maxpacket: 16 [ 179.968699][ T897] usb 3-1: too many configurations: 255, using maximum allowed: 8 [ 179.969703][ T36] audit: type=1400 audit(1750652476.168:9873): avc: denied { ioctl } for pid=6953 comm="syz.2.2275" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 179.982195][ T897] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 180.003949][ T36] audit: type=1400 audit(1750652476.177:9874): avc: denied { ioctl } for pid=6953 comm="syz.2.2275" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 180.047504][ T897] usb 3-1: can't read configurations, error -61 [ 180.056461][ T897] usb usb3-port1: attempt power cycle [ 180.063261][ T36] audit: type=1400 audit(1750652476.177:9875): avc: denied { ioctl } for pid=6953 comm="syz.2.2275" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 180.089316][ T36] audit: type=1400 audit(1750652476.177:9876): avc: denied { ioctl } for pid=6953 comm="syz.2.2275" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 180.115957][ T36] audit: type=1400 audit(1750652476.177:9877): avc: denied { ioctl } for pid=6953 comm="syz.2.2275" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 180.144998][ T36] audit: type=1400 audit(1750652476.177:9878): avc: denied { ioctl } for pid=6953 comm="syz.2.2275" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 180.170913][ T36] audit: type=1400 audit(1750652476.177:9879): avc: denied { ioctl } for pid=6953 comm="syz.2.2275" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 180.195917][ T36] audit: type=1400 audit(1750652476.214:9880): avc: denied { ioctl } for pid=6953 comm="syz.2.2275" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 180.241397][ T36] audit: type=1400 audit(1750652476.252:9881): avc: denied { ioctl } for pid=6953 comm="syz.2.2275" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 180.426555][ T897] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 180.449116][ T897] usb 3-1: Using ep0 maxpacket: 16 [ 180.455576][ T897] usb 3-1: too many configurations: 255, using maximum allowed: 8 [ 180.493590][ T897] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 180.508972][ T897] usb 3-1: can't read configurations, error -61 [ 180.590277][ T6989] overlayfs: failed to clone upperpath [ 180.661754][ T897] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 180.705269][ T897] usb 3-1: Using ep0 maxpacket: 16 [ 180.714784][ T897] usb 3-1: too many configurations: 255, using maximum allowed: 8 [ 180.732410][ T897] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 180.747344][ T897] usb 3-1: can't read configurations, error -61 [ 180.758756][ T897] usb usb3-port1: unable to enumerate USB device [ 181.873604][ T7009] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1054 [ 182.735329][ T7036] overlayfs: failed to clone upperpath [ 183.265053][ T7068] SELinux: security_context_str_to_sid () failed with errno=-22 [ 183.284425][ T7071] SELinux: security_context_str_to_sid () failed with errno=-22 [ 183.633735][ T897] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 183.676519][ T31] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 183.801353][ T7085] rust_binder: Read failure Err(EAGAIN) in pid:1066 [ 183.801689][ T7085] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1066 [ 183.808574][ T897] usb 1-1: Using ep0 maxpacket: 16 [ 183.829895][ T897] usb 1-1: config 1 has an invalid interface number: 4 but max is 2 [ 183.847413][ T897] usb 1-1: config 1 has an invalid interface descriptor of length 8, skipping [ 183.857288][ T897] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.868344][ T897] usb 1-1: config 1 has no interface number 1 [ 183.874538][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.885874][ T897] usb 1-1: too many endpoints for config 1 interface 4 altsetting 0: 102, using maximum allowed: 30 [ 183.897081][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 183.918623][ T897] usb 1-1: config 1 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 102 [ 183.933777][ T31] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 183.942984][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 183.951668][ T31] usb 3-1: SerialNumber: syz [ 183.957350][ T897] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 183.966761][ T897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.975071][ T897] usb 1-1: Product: syz [ 183.980553][ T897] usb 1-1: Manufacturer: syz [ 183.985528][ T897] usb 1-1: SerialNumber: syz [ 184.016755][ T7090] binder: Unknown parameter './file0' [ 184.201316][ T31] usb 3-1: MIDIStreaming interface descriptor not found [ 184.265049][ T31] usb 3-1: USB disconnect, device number 21 [ 184.297180][ T897] usb 1-1: USB disconnect, device number 15 [ 184.393683][ T7101] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 184.479023][ T5593] udevd[5593]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 184.549126][ T7099] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.556443][ T7099] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.563548][ T7099] bridge_slave_0: entered allmulticast mode [ 184.570139][ T7099] bridge_slave_0: entered promiscuous mode [ 184.578271][ T7099] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.585442][ T7099] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.592710][ T7099] bridge_slave_1: entered allmulticast mode [ 184.599276][ T7099] bridge_slave_1: entered promiscuous mode [ 184.624308][ T5593] udevd[5593]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 184.634864][ T7106] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 184.971483][ T7120] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1087 [ 184.981078][ T7122] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 185.081350][ T7099] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.095116][ T7099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.102496][ T7099] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.109601][ T7099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.193420][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.202592][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.222653][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.229773][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.238926][ T36] kauditd_printk_skb: 593 callbacks suppressed [ 185.238942][ T36] audit: type=1400 audit(1750652481.097:10475): avc: denied { ioctl } for pid=7114 comm="syz.0.2323" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 185.243420][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.277122][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.301523][ T897] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 185.318209][ T36] audit: type=1400 audit(1750652481.172:10476): avc: denied { ioctl } for pid=7114 comm="syz.0.2323" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 185.343007][ T7130] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2326'. [ 185.380766][ T36] audit: type=1400 audit(1750652481.172:10477): avc: denied { ioctl } for pid=7114 comm="syz.0.2323" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 185.412056][ T36] audit: type=1400 audit(1750652481.181:10478): avc: denied { ioctl } for pid=7114 comm="syz.0.2323" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 185.438123][ T36] audit: type=1400 audit(1750652481.191:10479): avc: denied { create } for pid=7127 comm="syz.4.2326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 185.460389][ T36] audit: type=1400 audit(1750652481.191:10480): avc: denied { connect } for pid=7127 comm="syz.4.2326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 185.480550][ T36] audit: type=1400 audit(1750652481.191:10481): avc: denied { ioctl } for pid=7127 comm="syz.4.2326" path="socket:[32991]" dev="sockfs" ino=32991 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 185.509544][ T36] audit: type=1400 audit(1750652481.209:10482): avc: denied { read write } for pid=7127 comm="syz.4.2326" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 185.515265][ T897] usb 1-1: Using ep0 maxpacket: 16 [ 185.592474][ T7099] veth0_vlan: entered promiscuous mode [ 185.598241][ T36] audit: type=1400 audit(1750652481.209:10483): avc: denied { read open } for pid=7127 comm="syz.4.2326" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 185.611815][ T897] usb 1-1: config 0 has an invalid interface number: 191 but max is 0 [ 185.706183][ T897] usb 1-1: config 0 has no interface number 0 [ 185.720044][ T36] audit: type=1400 audit(1750652481.209:10484): avc: denied { ioctl } for pid=7127 comm="syz.4.2326" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 185.739797][ T897] usb 1-1: config 0 interface 191 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 185.813366][ T897] usb 1-1: config 0 interface 191 altsetting 8 bulk endpoint 0x9 has invalid maxpacket 64 [ 185.862039][ T7099] veth1_macvtap: entered promiscuous mode [ 185.896760][ T897] usb 1-1: config 0 interface 191 has no altsetting 0 [ 185.971192][ T897] usb 1-1: New USB device found, idVendor=19d2, idProduct=0037, bcdDevice=27.86 [ 185.991129][ T897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.043661][ T897] usb 1-1: Product: syz [ 186.049307][ T897] usb 1-1: Manufacturer: syz [ 186.056717][ T897] usb 1-1: SerialNumber: syz [ 186.063958][ T897] usb 1-1: config 0 descriptor?? [ 186.070892][ T7125] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 186.145373][ T7135] rust_binder: Write failure EFAULT in pid:1096 [ 186.222863][ T7138] binder: Unknown parameter 'context' [ 186.394574][ T897] rndis_host 1-1:0.191: skipping garbage [ 186.400284][ T897] rndis_host 1-1:0.191: skipping garbage [ 186.410312][ T897] usb 1-1: bad CDC descriptors [ 186.422226][ T897] usb 1-1: USB disconnect, device number 16 [ 186.830210][ T31] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 186.990658][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 187.013451][ T31] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 187.030587][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.054226][ T31] usb 2-1: config 0 descriptor?? [ 187.190101][ T7163] rust_binder: Write failure EINVAL in pid:276 [ 187.256147][ T7165] netlink: 'syz.0.2339': attribute type 32 has an invalid length. [ 187.283811][ T31] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 187.299670][ T7168] rust_binder: Error in use_page_slow: ESRCH [ 187.299692][ T7168] rust_binder: use_range failure ESRCH [ 187.306807][ T31] asix 2-1:0.0: probe with driver asix failed with error -32 [ 187.321852][ T7168] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 187.321882][ T7168] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 187.329828][ T7168] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:279 [ 187.348616][ T7168] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.348911][ T7165] binder: Unknown parameter 'fscontext?}' [ 187.383168][ T9] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 187.546517][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 187.565049][ T9] usb 5-1: config 0 has no interfaces? [ 187.574560][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=817a, bcdDevice=eb.19 [ 187.599912][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.607986][ T9] usb 5-1: Product: syz [ 187.616620][ T9] usb 5-1: Manufacturer: syz [ 187.621975][ T9] usb 5-1: SerialNumber: syz [ 187.633938][ T9] usb 5-1: config 0 descriptor?? [ 187.668191][ T897] usb 2-1: USB disconnect, device number 19 [ 187.803050][ T31] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 187.876213][ T7158] rust_binder: Write failure EFAULT in pid:1103 [ 187.987075][ T31] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 188.005175][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 188.016138][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 188.026214][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 188.039249][ T31] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 188.048317][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.058082][ T31] usb 3-1: config 0 descriptor?? [ 188.134497][ T897] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 188.294826][ T897] usb 2-1: Using ep0 maxpacket: 8 [ 188.302251][ T897] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 188.310692][ T897] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 188.319179][ T897] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 188.328250][ T897] usb 2-1: config 250 has no interface number 0 [ 188.334536][ T897] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 188.346137][ T897] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 188.356715][ T897] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 15571, setting to 1024 [ 188.368476][ T897] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 188.379372][ T897] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 188.392916][ T897] usb 2-1: config 250 interface 228 has no altsetting 0 [ 188.402378][ T897] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 188.411483][ T897] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 188.419685][ T9] usb 5-1: USB disconnect, device number 39 [ 188.423093][ T897] usb 2-1: Product: syz [ 188.441553][ T897] usb 2-1: SerialNumber: syz [ 188.457281][ T897] hub 2-1:250.228: bad descriptor, ignoring hub [ 188.474453][ T897] hub 2-1:250.228: probe with driver hub failed with error -5 [ 188.507141][ T7177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.519522][ T7177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.540849][ T31] plantronics 0003:047F:FFFF.000B: ignoring exceeding usage max [ 188.568181][ T31] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 188.599986][ T31] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 188.710190][ T897] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 20 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 188.756919][ T897] usb 2-1: USB disconnect, device number 20 [ 188.829722][ T897] usblp0: removed [ 188.835758][ T5593] udevd[5593]: setting owner of /dev/bus/usb/002/020 to uid=0, gid=0 failed: No such file or directory [ 188.883499][ T7204] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 188.974376][ T7208] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 188.974412][ T7208] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:154 [ 189.292293][ T7216] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 189.292367][ T7216] rust_binder: Error while translating object. [ 189.309657][ T7216] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 189.334271][ T7216] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1117 [ 189.951859][ T897] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 190.033966][ T7236] rust_binder: Error while translating object. [ 190.034003][ T7236] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 190.040900][ T7236] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:163 [ 190.153396][ T7243] rust_binder: Write failure EFAULT in pid:166 [ 190.181061][ T897] usb 2-1: unable to get BOS descriptor or descriptor too short [ 190.187069][ T9] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 190.200242][ T897] usb 2-1: config 16 has an invalid interface number: 195 but max is 0 [ 190.220266][ T897] usb 2-1: config 16 has no interface number 0 [ 190.233732][ T897] usb 2-1: config 16 interface 195 altsetting 128 bulk endpoint 0xC has invalid maxpacket 1023 [ 190.244978][ T897] usb 2-1: config 16 interface 195 altsetting 128 bulk endpoint 0x1 has invalid maxpacket 1024 [ 190.256126][ T897] usb 2-1: config 16 interface 195 altsetting 128 endpoint 0xB has an invalid bInterval 251, changing to 11 [ 190.268512][ T897] usb 2-1: config 16 interface 195 has no altsetting 0 [ 190.281318][ T897] usb 2-1: New USB device found, idVendor=0421, idProduct=044d, bcdDevice=e6.ce [ 190.291234][ T897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.300111][ T897] usb 2-1: Product: syz [ 190.304367][ T897] usb 2-1: Manufacturer: syz [ 190.309931][ T897] usb 2-1: SerialNumber: syz [ 190.329279][ T7234] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 190.338144][ T7234] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 190.358108][ T9] usb 5-1: device descriptor read/64, error -71 [ 190.573665][ T897] usb 2-1: bad CDC descriptors [ 190.582765][ T897] usb 2-1: USB disconnect, device number 21 [ 190.614710][ T9] usb 5-1: device descriptor read/64, error -71 [ 190.732860][ T36] kauditd_printk_skb: 873 callbacks suppressed [ 190.732877][ T36] audit: type=1400 audit(1750652486.242:11358): avc: denied { ioctl } for pid=7238 comm="syz.4.2363" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 190.765298][ T36] audit: type=1400 audit(1750652486.242:11359): avc: denied { ioctl } for pid=7238 comm="syz.4.2363" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 190.790595][ T36] audit: type=1400 audit(1750652486.270:11360): avc: denied { ioctl } for pid=7255 comm="syz.2.2367" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 190.815645][ T36] audit: type=1400 audit(1750652486.307:11361): avc: denied { ioctl } for pid=7238 comm="syz.4.2363" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 190.871319][ T9] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 190.879615][ T36] audit: type=1400 audit(1750652486.373:11362): avc: denied { ioctl } for pid=7238 comm="syz.4.2363" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 190.904720][ T36] audit: type=1400 audit(1750652486.373:11363): avc: denied { ioctl } for pid=7238 comm="syz.4.2363" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 190.929808][ T36] audit: type=1400 audit(1750652486.373:11364): avc: denied { ioctl } for pid=7238 comm="syz.4.2363" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 190.954829][ T36] audit: type=1400 audit(1750652486.373:11365): avc: denied { ioctl } for pid=7238 comm="syz.4.2363" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 190.979815][ T36] audit: type=1400 audit(1750652486.373:11366): avc: denied { ioctl } for pid=7238 comm="syz.4.2363" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 191.004951][ T36] audit: type=1400 audit(1750652486.382:11367): avc: denied { ioctl } for pid=7238 comm="syz.4.2363" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 191.042325][ T9] usb 5-1: device descriptor read/64, error -71 [ 191.063699][ T31] usb 3-1: reset high-speed USB device number 22 using dummy_hcd [ 191.072263][ T31] usb 3-1: device reset changed ep0 maxpacket size! [ 191.079168][ T66] usb 3-1: USB disconnect, device number 22 [ 191.163320][ T7260] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:29 [ 191.224208][ T66] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 191.299272][ T9] usb 5-1: device descriptor read/64, error -71 [ 191.400502][ T7270] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 191.400530][ T7270] rust_binder: Error while translating object. [ 191.410134][ T7270] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 191.419844][ T7270] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:180 [ 191.437878][ T66] usb 3-1: Using ep0 maxpacket: 16 [ 191.449151][ T9] usb usb5-port1: attempt power cycle [ 191.467015][ T66] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.501990][ T66] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 191.529598][ T66] usb 3-1: New USB device found, idVendor=1fd2, idProduct=5ff0, bcdDevice= 0.00 [ 191.563811][ T66] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.600010][ T66] usb 3-1: config 0 descriptor?? [ 191.822723][ T9] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 191.912172][ T7283] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 191.918032][ T7283] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:38 [ 191.934362][ T66] usb 3-1: string descriptor 0 read error: -71 [ 191.953913][ T9] usb 5-1: device descriptor read/8, error -71 [ 191.967096][ T66] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 191.985943][ T66] usb 3-1: USB disconnect, device number 23 [ 192.092451][ T9] usb 5-1: device descriptor read/8, error -71 [ 192.305466][ T7287] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 192.312659][ T7287] rust_binder: Write failure EINVAL in pid:191 [ 192.314682][ T7288] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 192.357271][ T9] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 192.381636][ T7292] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 192.413746][ T9] usb 5-1: device descriptor read/8, error -71 [ 192.552498][ T9] usb 5-1: device descriptor read/8, error -71 [ 192.571646][ T7302] SELinux: ebitmap: truncated map [ 192.576859][ T7302] SELinux: failed to load policy [ 192.679141][ T9] usb usb5-port1: unable to enumerate USB device [ 192.701770][ T7307] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 192.744324][ T7310] rust_binder: Failed to allocate buffer. len:144, is_oneway:true [ 192.831598][ T7316] kvm: kvm [7315]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x187) = 0xfff [ 193.109041][ T7334] rust_binder: Write failure EINVAL in pid:224 [ 193.331016][ T7341] binder: Bad value for 'defcontext' [ 193.566662][ T7354] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 193.593274][ T7359] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2397'. [ 193.606818][ T7354] binder: Bad value for 'stats' [ 193.629452][ T7359] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2397'. [ 193.640723][ T7359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2397'. [ 193.768134][ T7372] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 193.801443][ T7374] netlink: 'syz.1.2401': attribute type 3 has an invalid length. [ 193.817287][ T31] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 193.860754][ T7374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2401'. [ 193.993548][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 194.008230][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 194.016376][ T31] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 194.027891][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.044521][ T31] usb 5-1: config 0 descriptor?? [ 194.281030][ T7356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.300126][ T7356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.317567][ T7394] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 194.317607][ T7394] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:59 [ 194.327186][ T7394] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 194.336624][ T7394] rust_binder: Read failure Err(EFAULT) in pid:59 [ 194.385764][ T7396] binder: Bad value for 'max' [ 194.398559][ T7396] binder: Bad value for 'max' [ 194.406799][ T7396] binder: Bad value for 'max' [ 194.457448][ T7402] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:66 [ 194.543034][ T31] hid (null): global environment stack underflow [ 194.570681][ T31] hid (null): invalid report_size 41201 [ 194.576347][ T31] hid (null): unknown global tag 0xe [ 194.583228][ T31] hid (null): unknown global tag 0xe [ 194.584630][ T7409] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 194.588779][ T31] hid (null): bogus close delimiter [ 194.757278][ T7413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.766773][ T7413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.782313][ T9] usb 5-1: USB disconnect, device number 44 [ 195.171710][ T13] Bluetooth: hci1: Frame reassembly failed (-84) [ 195.243773][ T31] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 195.404096][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 195.411911][ T31] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 195.420414][ T31] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 195.429064][ T31] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 195.438242][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 195.448049][ T31] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 195.457721][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 195.470715][ T31] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 195.479772][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.489307][ T31] usb 5-1: config 0 descriptor?? [ 195.715041][ T31] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 45 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 195.742402][ T31] usb 5-1: USB disconnect, device number 45 [ 195.778469][ T31] usblp0: removed [ 195.904773][ T7442] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 195.916011][ T7442] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 195.916038][ T7442] rust_binder: Error while translating object. [ 195.926697][ T7442] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 195.933093][ T7442] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1154 [ 196.725665][ T36] kauditd_printk_skb: 1996 callbacks suppressed [ 196.725685][ T36] audit: type=1400 audit(1750652491.835:13364): avc: denied { read write } for pid=850 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 196.776726][ T36] audit: type=1400 audit(1750652491.835:13365): avc: denied { read write open } for pid=850 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 196.787842][ T7444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2423'. [ 196.801933][ T36] audit: type=1400 audit(1750652491.835:13366): avc: denied { ioctl } for pid=850 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 196.827390][ T7444] rust_binder: inc_ref_done called when no active inc_refs [ 196.836898][ T36] audit: type=1400 audit(1750652491.892:13367): avc: denied { read } for pid=7443 comm="syz.4.2423" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 196.868022][ T36] audit: type=1400 audit(1750652491.892:13368): avc: denied { read open } for pid=7443 comm="syz.4.2423" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 196.894849][ T36] audit: type=1400 audit(1750652491.892:13369): avc: denied { create } for pid=7443 comm="syz.4.2423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 196.922160][ T36] audit: type=1400 audit(1750652491.892:13370): avc: denied { create } for pid=7443 comm="syz.4.2423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 196.943942][ T36] audit: type=1400 audit(1750652491.892:13371): avc: denied { write } for pid=7443 comm="syz.4.2423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 196.965812][ T36] audit: type=1400 audit(1750652491.892:13372): avc: denied { read } for pid=7443 comm="syz.4.2423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 196.987653][ T36] audit: type=1400 audit(1750652491.892:13373): avc: denied { read } for pid=7443 comm="syz.4.2423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 197.339101][ T1491] Bluetooth: hci1: command 0x1003 tx timeout [ 197.345330][ T54] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 197.468790][ T7469] rust_binder: Got transaction with invalid offset. [ 197.468840][ T7469] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 197.475664][ T7469] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:252 [ 197.499453][ T31] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 197.684065][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.706313][ T31] usb 5-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 197.716395][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.729696][ T31] usb 5-1: config 0 descriptor?? [ 197.959168][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 198.134730][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 198.150436][ T7478] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 198.150471][ T7478] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:82 [ 198.160069][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.191787][ T31] logitech 0003:046D:C295.000D: unknown main item tag 0x0 [ 198.197370][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.210667][ T31] logitech 0003:046D:C295.000D: unknown main item tag 0x0 [ 198.212189][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 198.233566][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 198.239639][ T31] logitech 0003:046D:C295.000D: unknown main item tag 0x0 [ 198.258450][ T9] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 198.266695][ T31] logitech 0003:046D:C295.000D: unknown main item tag 0x0 [ 198.278257][ T9] usb 1-1: Manufacturer: syz [ 198.290536][ T31] logitech 0003:046D:C295.000D: unknown main item tag 0x0 [ 198.298712][ T9] usb 1-1: config 0 descriptor?? [ 198.309763][ T7484] cgroup: Need name or subsystem set [ 198.322615][ T31] logitech 0003:046D:C295.000D: unknown main item tag 0x0 [ 198.342419][ T7484] netlink: 'syz.4.2436': attribute type 4 has an invalid length. [ 198.350543][ T31] logitech 0003:046D:C295.000D: unknown main item tag 0x0 [ 198.361781][ T31] logitech 0003:046D:C295.000D: hidraw0: USB HID v0.00 Device [HID 046d:c295] on usb-dummy_hcd.4-1/input0 [ 198.374922][ T7484] netlink: 'syz.4.2436': attribute type 5 has an invalid length. [ 198.382857][ T31] logitech 0003:046D:C295.000D: no inputs found [ 198.395203][ T7484] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2436'. [ 198.407137][ T31] usb 5-1: USB disconnect, device number 46 [ 198.500521][ T7491] rust_binder: Error while translating object. [ 198.500609][ T7491] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 198.507068][ T7491] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:86 [ 198.640140][ T7495] fido_id[7495]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 198.746064][ T9] appleir 0003:05AC:8243.000E: unknown main item tag 0x0 [ 198.759972][ T9] appleir 0003:05AC:8243.000E: No inputs registered, leaving [ 198.782935][ T9] appleir 0003:05AC:8243.000E: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 199.467461][ T7507] binder: Unknown parameter 'coyBLV"i5ntext' [ 199.646448][ T7510] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 199.646482][ T7510] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:92 [ 199.814752][ T7520] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:96 [ 199.870598][ T7521] rust_binder: Write failure EFAULT in pid:1185 [ 200.439373][ T305] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 200.612699][ T305] usb 2-1: config 0 has an invalid interface number: 253 but max is 0 [ 200.620945][ T305] usb 2-1: config 0 has no interface number 0 [ 200.631112][ T305] usb 2-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=fa.63 [ 200.642469][ T305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.651505][ T305] usb 2-1: Product: syz [ 200.655792][ T305] usb 2-1: Manufacturer: syz [ 200.660414][ T305] usb 2-1: SerialNumber: syz [ 200.680329][ T305] usb 2-1: config 0 descriptor?? [ 200.690186][ T305] hub 2-1:0.253: bad descriptor, ignoring hub [ 200.700554][ T305] hub 2-1:0.253: probe with driver hub failed with error -5 [ 200.717738][ T305] ums-datafab 2-1:0.253: USB Mass Storage device detected [ 200.772586][ T305] ums-sddr55 2-1:0.253: USB Mass Storage device detected [ 201.102209][ T31] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 201.262539][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 201.267850][ T897] usb 1-1: USB disconnect, device number 17 [ 201.276574][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.288683][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.299345][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 201.305350][ T305] usb 2-1: reset high-speed USB device number 22 using dummy_hcd [ 201.312261][ T31] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 201.329459][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.339613][ T31] usb 5-1: config 0 descriptor?? [ 201.433579][ T897] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 201.487125][ T305] usb 2-1: device descriptor read/64, error -71 [ 201.596285][ T897] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 201.604440][ T897] usb 1-1: config 0 has no interface number 0 [ 201.610697][ T897] usb 1-1: config 0 interface 41 has no altsetting 0 [ 201.620620][ T897] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 201.629956][ T897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.638031][ T897] usb 1-1: Product: syz [ 201.642284][ T897] usb 1-1: Manufacturer: syz [ 201.646887][ T897] usb 1-1: SerialNumber: syz [ 201.653547][ T897] usb 1-1: config 0 descriptor?? [ 201.743655][ T305] usb 2-1: device descriptor read/64, error -71 [ 201.780371][ T7586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.795559][ T7586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.812463][ T7586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.828749][ T7586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.845667][ T31] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 201.854559][ T31] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 201.862892][ T31] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 201.870276][ T31] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 201.880171][ T31] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 201.888885][ T31] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 201.897143][ T31] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 201.905268][ T31] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 201.912620][ T31] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 201.920191][ T31] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 201.927772][ T31] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 201.935093][ T31] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 201.942390][ T31] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 201.949871][ T31] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 201.957191][ T31] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 201.971457][ T31] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000F/input/input10 [ 201.986399][ T31] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 202.000199][ T305] usb 2-1: reset high-speed USB device number 22 using dummy_hcd [ 202.066345][ T7586] SELinux: security_context_str_to_sid (DL3V) failed with errno=-22 [ 202.078496][ T540] usb 5-1: USB disconnect, device number 47 [ 202.091086][ T36] kauditd_printk_skb: 581 callbacks suppressed [ 202.091106][ T36] audit: type=1400 audit(1750652496.859:13955): avc: denied { ioctl } for pid=7590 comm="syz.1.2468" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 202.126192][ T36] audit: type=1400 audit(1750652496.877:13956): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=611 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 202.160044][ T305] usb 2-1: device descriptor read/64, error -71 [ 202.180105][ T36] audit: type=1400 audit(1750652496.877:13957): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=611 ioctlcmd=0x4521 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 202.180168][ T7608] fido_id[7608]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 202.206512][ T36] audit: type=1400 audit(1750652496.877:13958): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=611 ioctlcmd=0x4523 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 202.244397][ T36] audit: type=1400 audit(1750652496.877:13959): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=611 ioctlcmd=0x4524 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 202.269368][ T36] audit: type=1400 audit(1750652496.887:13960): avc: denied { ioctl } for pid=7587 comm="syz.0.2467" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 202.294701][ T36] audit: type=1400 audit(1750652496.887:13961): avc: denied { ioctl } for pid=7587 comm="syz.0.2467" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 202.320526][ T36] audit: type=1400 audit(1750652497.074:13962): avc: denied { ioctl } for pid=7590 comm="syz.1.2468" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 202.347392][ T36] audit: type=1400 audit(1750652497.083:13963): avc: denied { ioctl } for pid=7590 comm="syz.1.2468" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 202.372892][ T36] audit: type=1400 audit(1750652497.083:13964): avc: denied { ioctl } for pid=7590 comm="syz.1.2468" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 202.459886][ T305] usb 2-1: device descriptor read/64, error -71 [ 202.562541][ T897] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 202.639780][ T7617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2478'. [ 202.808710][ T305] usb 2-1: reset high-speed USB device number 22 using dummy_hcd [ 202.834442][ T7623] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2481'. [ 202.868814][ T305] usb 2-1: device descriptor read/8, error -71 [ 203.012842][ T305] usb 2-1: device descriptor read/8, error -71 [ 203.019969][ T7588] rust_binder: Write failure EINVAL in pid:262 [ 203.020518][ T897] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 203.063470][ T897] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 203.074912][ T897] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 203.086374][ T897] usb 1-1: USB disconnect, device number 18 [ 203.272419][ T305] usb 2-1: reset high-speed USB device number 22 using dummy_hcd [ 203.296356][ T305] usb 2-1: device descriptor read/8, error -71 [ 203.435205][ T305] usb 2-1: device descriptor read/8, error -71 [ 203.559329][ T305] usb 2-1: USB disconnect, device number 22 [ 203.881725][ T305] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 204.030897][ T7660] rust_binder: Error while translating object. [ 204.030929][ T7660] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 204.037238][ T305] usb 2-1: device descriptor read/64, error -71 [ 204.046828][ T7660] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:270 [ 204.253759][ T7679] bpf: Bad value for 'uid' [ 204.320047][ T305] usb 2-1: device descriptor read/64, error -71 [ 204.766579][ T7702] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1214 [ 205.019792][ T7721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.046906][ T7721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.106680][ T7721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.138298][ T7721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.282226][ T540] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 205.645399][ T7747] rust_binder: inc_ref_done called when no active inc_refs [ 205.870415][ T305] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 205.992799][ T7766] tipc: Enabling of bearer rejected, media not registered [ 206.005690][ T7766] rust_binder: Write failure EINVAL in pid:131 [ 206.006199][ T7766] rust_binder: Read failure Err(EAGAIN) in pid:131 [ 206.073376][ T305] usb 5-1: device descriptor read/64, error -71 [ 206.289587][ T7786] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2532'. [ 206.351341][ T305] usb 5-1: device descriptor read/64, error -71 [ 206.400921][ T7793] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2534'. [ 206.436613][ T7795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2535'. [ 206.446201][ T7795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2535'. [ 206.456201][ T7795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2535'. [ 206.466040][ T7795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2535'. [ 206.476418][ T7795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2535'. [ 206.486112][ T7795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2535'. [ 206.588611][ T7800] rust_binder: Error while translating object. [ 206.588662][ T7800] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 206.595079][ T7800] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:306 [ 206.607836][ T305] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 206.768203][ T305] usb 5-1: device descriptor read/64, error -71 [ 206.957672][ T7813] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:149 [ 206.963453][ T7813] rust_binder: Read failure Err(EFAULT) in pid:149 [ 207.024840][ T305] usb 5-1: device descriptor read/64, error -71 [ 207.093588][ T7817] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.103700][ T7817] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.110827][ T7817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.164141][ T305] usb usb5-port1: attempt power cycle [ 207.463557][ T36] kauditd_printk_skb: 840 callbacks suppressed [ 207.463575][ T36] audit: type=1400 audit(1750652501.891:14805): avc: denied { ioctl } for pid=7739 comm="syz.4.2518" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 207.527272][ T305] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 207.549244][ T36] audit: type=1400 audit(1750652501.966:14806): avc: denied { ioctl } for pid=7739 comm="syz.4.2518" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 207.592002][ T305] usb 5-1: device descriptor read/8, error -71 [ 207.602055][ T36] audit: type=1400 audit(1750652501.966:14807): avc: denied { read write } for pid=6286 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 207.647718][ T36] audit: type=1400 audit(1750652501.966:14808): avc: denied { read write open } for pid=6286 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 207.675928][ T36] audit: type=1400 audit(1750652501.966:14809): avc: denied { ioctl } for pid=6286 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 207.706901][ T36] audit: type=1400 audit(1750652501.994:14810): avc: denied { ioctl } for pid=7739 comm="syz.4.2518" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 207.732147][ T36] audit: type=1400 audit(1750652502.003:14811): avc: denied { ioctl } for pid=7739 comm="syz.4.2518" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 207.757204][ T36] audit: type=1400 audit(1750652502.003:14812): avc: denied { ioctl } for pid=7739 comm="syz.4.2518" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 207.782436][ T36] audit: type=1400 audit(1750652502.003:14813): avc: denied { read } for pid=7818 comm="syz.0.2544" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 207.805244][ T36] audit: type=1400 audit(1750652502.003:14814): avc: denied { read open } for pid=7818 comm="syz.0.2544" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 207.828928][ T305] usb 5-1: device descriptor read/8, error -71 [ 207.912090][ T66] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 208.072456][ T66] usb 1-1: Using ep0 maxpacket: 32 [ 208.080110][ T66] usb 1-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 20 [ 208.090924][ T66] usb 1-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 208.093868][ T305] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 208.103879][ T66] usb 1-1: config 1 interface 0 has no altsetting 0 [ 208.110798][ T66] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 208.127240][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.135248][ T66] usb 1-1: Product: ࠉ [ 208.139471][ T66] usb 1-1: Manufacturer: 懎艓ᕞ故鏍똄쎛쇿쏥ᐒᰮ㤓랲졩棨럅婉큅靏ꊝ䶲㎈蠜ﱡ왘빾据⨈涃싰䵐윛熿휯䱦⒤䝂鲘某臔ᕞ똼譱䷥⼥⭇龛塴㞗侢䕼邍ﾺ̗ಌꮪ潲悐旎谥名㬰ᑪ삫릘ﵼ뺥聯绮쪉掜틽筦蛻殫ﾍࡿ䋢ꆛ쨕觶ꯡ빈蚧娉衂֯㥺ћ⛱섇땟鲯㦈氮ᯚ‖ⶽ嫘액ᛑ⣿째鞊桍 [ 208.142550][ T305] usb 5-1: device descriptor read/8, error -71 [ 208.174632][ T66] usb 1-1: SerialNumber: 㠁 [ 208.187262][ T7821] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 208.194900][ T7821] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 208.342468][ T305] usb 5-1: device descriptor read/8, error -71 [ 208.458583][ T305] usb usb5-port1: unable to enumerate USB device [ 208.633923][ T7821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.642909][ T7821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.654538][ T7822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.663286][ T7822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.674252][ T66] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 208.692575][ T66] usb 1-1: USB disconnect, device number 20 [ 208.816829][ T7825] binder: Unknown parameter '' [ 208.822838][ T7826] binder: Unknown parameter '' [ 208.948055][ T7830] rust_binder: Error while translating object. [ 208.948105][ T7830] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 208.954504][ T7830] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1234 [ 209.124081][ T7838] rust_binder: Error in use_page_slow: ESRCH [ 209.124121][ T7838] rust_binder: use_range failure ESRCH [ 209.130170][ T7838] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 209.137108][ T7838] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 209.146380][ T7838] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1241 [ 209.312540][ T54] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 209.312560][ T1491] Bluetooth: hci1: command 0x1003 tx timeout [ 210.005070][ T7872] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1254 [ 210.051322][ T7872] rust_binder: Error while translating object. [ 210.072437][ T7872] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 210.078734][ T7872] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1254 [ 210.227918][ T7879] overlayfs: failed to resolve './file0': -2 [ 210.438096][ T7891] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 210.438122][ T7891] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 210.460120][ T7891] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1260 [ 211.000838][ T7925] kvm: kvm [7923]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x8000000000000003 [ 211.076533][ T897] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 211.152093][ T7927] rust_binder: Error while translating object. [ 211.152150][ T7927] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 211.158414][ T7927] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1277 [ 211.236872][ T897] usb 2-1: Using ep0 maxpacket: 16 [ 211.253820][ T897] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.256740][ T7931] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 211.267527][ T897] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.272084][ T7931] rust_binder: Write failure EINVAL in pid:1281 [ 211.282635][ T897] usb 2-1: config 0 interface 0 has no altsetting 0 [ 211.295721][ T897] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 211.304831][ T897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.315532][ T897] usb 2-1: config 0 descriptor?? [ 211.427210][ T7934] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 211.427260][ T7934] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:1284 [ 211.565931][ T7943] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1286 [ 211.758830][ T7913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.784075][ T7913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.808563][ T897] usbhid 2-1:0.0: can't add hid device: -71 [ 211.824113][ T897] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 211.843574][ T897] usb 2-1: USB disconnect, device number 25 [ 212.544513][ T7962] __nla_validate_parse: 27 callbacks suppressed [ 212.544537][ T7962] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2592'. [ 212.730418][ T7973] fuse: Unknown parameter 'Ed' [ 212.744245][ T897] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 212.819157][ T36] kauditd_printk_skb: 778 callbacks suppressed [ 212.819176][ T36] audit: type=1400 audit(1750652506.886:15593): avc: denied { read write open } for pid=7976 comm="syz.4.2595" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 212.841390][ T7979] fuse: Bad value for 'fd' [ 212.854771][ T36] audit: type=1400 audit(1750652506.895:15594): avc: denied { read write } for pid=7976 comm="syz.4.2595" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 212.878846][ T36] audit: type=1400 audit(1750652506.895:15595): avc: denied { read write open } for pid=7976 comm="syz.4.2595" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 212.908230][ T36] audit: type=1400 audit(1750652506.895:15596): avc: denied { read write } for pid=7976 comm="syz.4.2595" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 212.936692][ T897] usb 2-1: Using ep0 maxpacket: 16 [ 212.949040][ T36] audit: type=1400 audit(1750652506.895:15597): avc: denied { read write open } for pid=7976 comm="syz.4.2595" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 212.965246][ T7982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.973510][ T36] audit: type=1400 audit(1750652506.895:15598): avc: denied { read write } for pid=7976 comm="syz.4.2595" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 212.983697][ T7982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 213.003561][ T897] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 213.007718][ T7982] rust_binder: Write failure EINVAL in pid:1308 [ 213.010016][ T897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.029398][ T36] audit: type=1400 audit(1750652506.895:15599): avc: denied { read write open } for pid=7976 comm="syz.4.2595" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 213.055634][ T897] usb 2-1: config 0 descriptor?? [ 213.074708][ T897] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 213.094426][ T36] audit: type=1400 audit(1750652506.895:15600): avc: denied { read write } for pid=7976 comm="syz.4.2595" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 213.106143][ T7984] audit: audit_backlog=65 > audit_backlog_limit=64 [ 213.125507][ T7984] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 213.297117][ T897] usb 2-1: Detected FT232B [ 213.304209][ T7988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 213.436160][ T7995] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 213.452253][ T7995] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 213.458833][ T7995] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:336 [ 213.514038][ T31] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 213.606207][ T8001] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 213.674390][ T8001] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 213.680910][ T8001] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:338 [ 213.692019][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 213.723331][ T31] usb 5-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 64 [ 213.746828][ T31] usb 5-1: config 1 interface 0 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 8 [ 213.774835][ T31] usb 5-1: config 1 interface 0 has no altsetting 0 [ 213.801581][ T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 213.812202][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.830115][ T31] usb 5-1: Product: syz [ 213.834458][ T31] usb 5-1: Manufacturer: ౸ [ 213.840496][ T31] usb 5-1: SerialNumber: syz [ 213.855640][ T7986] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 213.873031][ T7986] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 214.155015][ T897] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 214.181104][ T897] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 214.210025][ T897] usb 2-1: USB disconnect, device number 26 [ 214.230562][ T897] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 214.240220][ T897] ftdi_sio 2-1:0.0: device disconnected [ 214.312846][ T8057] overlayfs: failed to clone upperpath [ 214.337371][ T31] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 214.369271][ T31] usb 5-1: USB disconnect, device number 52 [ 214.548956][ T8074] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 214.731802][ T8085] fuse: Bad value for 'rootmode' [ 215.124714][ T8105] rust_binder: Error while translating object. [ 215.124749][ T8105] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 215.143217][ T8105] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:171 [ 215.394468][ T8117] overlayfs: failed to clone upperpath [ 215.470169][ T8128] rust_binder: Write failure EFAULT in pid:1321 [ 215.634441][ T8132] 9pnet_fd: Insufficient options for proto=fd [ 215.752047][ T46] Bluetooth: hci1: Frame reassembly failed (-84) [ 215.922945][ T8149] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 215.928563][ T8149] rust_binder: Error while translating object. [ 215.938109][ T8149] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 215.949541][ T8149] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:406 [ 216.173995][ T8165] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 216.199244][ T8165] rust_binder: Error while translating object. [ 216.214316][ T8165] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 216.225242][ T8165] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:415 [ 216.314908][ T9] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 216.384416][ T8180] SELinux: Context system_u: is not valid (left unmapped). [ 216.427894][ T8182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2648'. [ 216.525871][ T8189] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2650'. [ 216.914100][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 216.942257][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 216.956941][ T9] usb 2-1: can't read configurations, error -71 [ 216.983758][ T8212] binder: Bad value for 'max' [ 217.028178][ T8212] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 217.114055][ T540] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 217.180707][ T8222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2659'. [ 217.298427][ T540] usb 1-1: Invalid ep0 maxpacket: 32 [ 217.437434][ T540] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 217.608459][ T540] usb 1-1: Invalid ep0 maxpacket: 32 [ 217.619238][ T540] usb usb1-port1: attempt power cycle [ 217.948388][ T8233] overlayfs: conflicting options: nfs_export=on,index=off [ 217.956384][ T54] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 217.962297][ T1491] Bluetooth: hci1: command 0x1003 tx timeout [ 217.993345][ T540] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 218.026118][ T8239] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 218.026152][ T8239] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1333 [ 218.036149][ T540] usb 1-1: Invalid ep0 maxpacket: 32 [ 218.041096][ T8239] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.050717][ T8239] rust_binder: Read failure Err(EFAULT) in pid:1333 [ 218.175102][ T540] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 218.207822][ T36] kauditd_printk_skb: 816 callbacks suppressed [ 218.207840][ T36] audit: type=1400 audit(1750652511.937:16410): avc: denied { ioctl } for pid=8208 comm="syz.0.2655" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 218.240687][ T540] usb 1-1: Invalid ep0 maxpacket: 32 [ 218.246621][ T540] usb usb1-port1: unable to enumerate USB device [ 218.254633][ T36] audit: type=1400 audit(1750652511.937:16411): avc: denied { write } for pid=8240 comm="syz.4.2663" name="snmp6" dev="proc" ino=4026532870 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 218.278398][ T36] audit: type=1400 audit(1750652511.937:16412): avc: denied { write } for pid=8240 comm="syz.4.2663" path="/proc/1337/net/snmp6" dev="proc" ino=4026532870 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 218.303557][ T36] audit: type=1400 audit(1750652511.965:16413): avc: denied { ioctl } for pid=8208 comm="syz.0.2655" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 218.336069][ T36] audit: type=1400 audit(1750652511.965:16414): avc: denied { ioctl } for pid=8208 comm="syz.0.2655" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 218.362167][ T36] audit: type=1400 audit(1750652512.003:16415): avc: denied { read write } for pid=850 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 218.387296][ T36] audit: type=1400 audit(1750652512.003:16416): avc: denied { read write open } for pid=850 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 218.413251][ T36] audit: type=1400 audit(1750652512.003:16417): avc: denied { ioctl } for pid=850 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 218.445090][ T36] audit: type=1400 audit(1750652512.049:16418): avc: denied { create } for pid=8243 comm="syz.4.2664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 218.468155][ T36] audit: type=1400 audit(1750652512.059:16419): avc: denied { write } for pid=8243 comm="syz.4.2664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 218.478236][ T8246] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 136, size: 224) [ 218.488848][ T8246] rust_binder: Error while translating object. [ 218.499422][ T8246] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 218.505619][ T8246] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1342 [ 218.673657][ T8255] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.697418][ T8255] rust_binder: Read failure Err(EFAULT) in pid:215 [ 218.856895][ T8260] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 218.863574][ T9] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 219.077291][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 219.110372][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 219.134180][ T8266] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 219.148542][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 219.201350][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.232926][ T9] usb 5-1: config 0 descriptor?? [ 219.254654][ T8253] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 219.264508][ T9] hub 5-1:0.0: USB hub found [ 219.270645][ T8268] binder: Unknown parameter 'se'-1W'/f׹1clabel' [ 219.486565][ T9] hub 5-1:0.0: 2 ports detected [ 219.714533][ T540] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 219.874871][ T540] usb 2-1: Using ep0 maxpacket: 16 [ 219.882527][ T540] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 219.892193][ T540] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.902424][ T540] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 219.912159][ T540] usb 2-1: too many endpoints for config 1 interface 2 altsetting 1: 255, using maximum allowed: 30 [ 219.923091][ T540] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 219.939719][ T540] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 219.948839][ T540] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.957979][ T540] usb 2-1: Product: syz [ 219.962949][ T540] usb 2-1: Manufacturer: syz [ 219.967709][ T540] usb 2-1: SerialNumber: syz [ 220.156203][ T8279] tipc: Started in network mode [ 220.161294][ T8279] tipc: Node identity ac14142f, cluster identity 4711 [ 220.169293][ T8279] tipc: New replicast peer: 0.0.0.0 [ 220.175768][ T8279] tipc: Enabled bearer , priority 10 [ 220.188873][ T8279] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 220.190776][ T8279] rust_binder: Error in use_page_slow: ESRCH [ 220.197365][ T8279] rust_binder: use_range failure ESRCH [ 220.203484][ T8279] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 220.209065][ T8279] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 220.217151][ T8279] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:431 [ 220.254041][ T540] usb 2-1: USB disconnect, device number 29 [ 220.328555][ T8284] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 220.433525][ T8288] overlay: Unknown parameter 'subj_role' [ 220.464041][ T5593] udevd[5593]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 220.734024][ T8292] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 221.371776][ T9] tipc: Node number set to 2886997039 [ 221.412310][ T8314] fuse: Bad value for 'user_id' [ 221.417486][ T8314] fuse: Bad value for 'user_id' [ 221.569973][ T8316] netlink: 'syz.0.2688': attribute type 2 has an invalid length. [ 221.580811][ T8316] fuse: Unknown parameter '184467440737095516150x0000000000000004' [ 221.591560][ T540] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 221.598614][ T9] usb 5-1: USB disconnect, device number 53 [ 221.604678][ T540] hub 5-1:0.0: set hub depth failed [ 222.363167][ T8334] rust_binder: Error while translating object. [ 222.363211][ T8334] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 222.371884][ T8334] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1357 [ 222.591853][ T8342] kvm: emulating exchange as write [ 222.769323][ T8349] binder: Bad value for 'defcontext' [ 223.058377][ T8355] binder: Bad value for 'max' [ 223.564142][ T36] kauditd_printk_skb: 2503 callbacks suppressed [ 223.564161][ T36] audit: type=1400 audit(1750652516.951:18923): avc: denied { setattr } for pid=7099 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 223.648663][ T36] audit: type=1400 audit(1750652516.979:18924): avc: denied { setattr } for pid=7099 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 223.689609][ T7099] audit: audit_backlog=65 > audit_backlog_limit=64 [ 223.697441][ T36] audit: type=1400 audit(1750652516.979:18925): avc: denied { setattr } for pid=7099 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 223.707015][ T7099] audit: audit_lost=7 audit_rate_limit=0 audit_backlog_limit=64 [ 223.730243][ T8376] audit: audit_backlog=65 > audit_backlog_limit=64 [ 223.737007][ T36] audit: type=1400 audit(1750652516.979:18926): avc: denied { setattr } for pid=7099 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 223.744942][ T540] usb 5-1: new low-speed USB device number 54 using dummy_hcd [ 223.767871][ T8376] audit: audit_lost=8 audit_rate_limit=0 audit_backlog_limit=64 [ 223.775669][ T36] audit: type=1400 audit(1750652516.979:18927): avc: denied { setattr } for pid=7099 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 223.787634][ T7099] audit: backlog limit exceeded [ 223.937317][ T540] usb 5-1: device descriptor read/64, error -71 [ 224.056683][ T8386] @: renamed from vlan0 (while UP) [ 224.204603][ T540] usb 5-1: device descriptor read/64, error -71 [ 224.461152][ T540] usb 5-1: new low-speed USB device number 55 using dummy_hcd [ 224.610837][ T540] usb 5-1: device descriptor read/64, error -71 [ 224.736545][ T8433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2729'. [ 224.780892][ T8436] binder: Bad value for 'stats' [ 224.878131][ T540] usb 5-1: device descriptor read/64, error -71 [ 224.902855][ T8442] binder: Unknown parameter 'stas' [ 224.996157][ T540] usb usb5-port1: attempt power cycle [ 225.380544][ T540] usb 5-1: new low-speed USB device number 56 using dummy_hcd [ 225.416140][ T540] usb 5-1: device descriptor read/8, error -71 [ 225.565221][ T540] usb 5-1: device descriptor read/8, error -71 [ 225.829554][ T540] usb 5-1: new low-speed USB device number 57 using dummy_hcd [ 225.875220][ T540] usb 5-1: device descriptor read/8, error -71 [ 226.022379][ T540] usb 5-1: device descriptor read/8, error -71 [ 226.140243][ T540] usb usb5-port1: unable to enumerate USB device [ 226.693312][ T8467] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1379 [ 226.884259][ T8472] fuse: Bad value for 'group_id' [ 226.907783][ T8472] fuse: Bad value for 'group_id' [ 226.931285][ T8474] IPv6: syztnl1: Disabled Multicast RS [ 227.057695][ T8476] /dev/loop0: Can't lookup blockdev [ 227.635897][ T8484] overlay: Unknown parameter 'subj_user' [ 228.311082][ T31] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 228.480819][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 228.490524][ T31] usb 5-1: config 6 has an invalid interface number: 204 but max is 0 [ 228.506038][ T31] usb 5-1: config 6 has no interface number 0 [ 228.514613][ T31] usb 5-1: config 6 interface 204 altsetting 7 endpoint 0x9 has invalid maxpacket 20154, setting to 1024 [ 228.526799][ T31] usb 5-1: config 6 interface 204 altsetting 7 bulk endpoint 0x9 has invalid maxpacket 1024 [ 228.538026][ T31] usb 5-1: config 6 interface 204 has no altsetting 0 [ 228.549304][ T31] usb 5-1: New USB device found, idVendor=0403, idProduct=ee18, bcdDevice=d0.44 [ 228.569633][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.580402][ T31] usb 5-1: Product: syz [ 228.584646][ T31] usb 5-1: Manufacturer: syz [ 228.590451][ T31] usb 5-1: SerialNumber: syz [ 228.606328][ T8502] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 228.919349][ T36] kauditd_printk_skb: 3929 callbacks suppressed [ 228.919367][ T36] audit: type=1400 audit(1750652521.955:22751): avc: denied { setattr } for pid=7099 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 228.937371][ T31] ftdi_sio 5-1:6.204: FTDI USB Serial Device converter detected [ 228.982153][ T36] audit: type=1400 audit(1750652521.955:22752): avc: denied { setattr } for pid=7099 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 228.991287][ T31] ftdi_sio ttyUSB0: unknown device type: 0xd044 [ 229.030279][ T31] usb 5-1: USB disconnect, device number 58 [ 229.030716][ T36] audit: type=1400 audit(1750652521.955:22753): avc: denied { setattr } for pid=7099 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 229.047323][ T31] ftdi_sio 5-1:6.204: device disconnected [ 229.068662][ T36] audit: type=1400 audit(1750652521.955:22754): avc: denied { setattr } for pid=7099 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 229.094254][ T36] audit: type=1400 audit(1750652521.955:22755): avc: denied { setattr } for pid=7099 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 229.111142][ T7099] audit: audit_backlog=65 > audit_backlog_limit=64 [ 229.118970][ T36] audit: type=1400 audit(1750652521.955:22756): avc: denied { setattr } for pid=7099 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 229.148261][ T7099] audit: audit_lost=44 audit_rate_limit=0 audit_backlog_limit=64 [ 229.152455][ T36] audit: type=1400 audit(1750652521.955:22757): avc: denied { setattr } for pid=7099 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 229.175703][ T7099] audit: backlog limit exceeded [ 230.159822][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.160150][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.168189][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.176862][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.202457][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.202803][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.209724][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.236169][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.236469][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.257339][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.257636][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.280571][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.280874][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.303120][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.303447][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.326557][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.326943][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.351380][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.355850][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.382847][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.383151][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.419925][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.420239][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.449950][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.451944][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.479391][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.479770][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.490860][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.497822][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.505596][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.513135][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.520047][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.527856][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.535351][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.542261][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.550012][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.557439][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.564264][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.571954][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.579382][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.586230][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.593942][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.601413][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.608930][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.615772][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.623446][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.630899][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.637738][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.645446][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.652880][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.659742][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.667460][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.674917][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.681856][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.689581][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.698237][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.705698][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.712554][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.720253][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.727657][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.734511][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.742230][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.749694][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.756500][ T8587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 231.048384][ T8610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2786'. [ 231.544216][ T8641] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2800'. [ 231.899772][ T8651] Invalid ELF header type: 3 != 1 [ 231.905254][ T8652] Invalid ELF header type: 3 != 1 [ 231.912026][ T8652] Invalid ELF header type: 2 != 1 [ 231.919644][ T8651] Invalid ELF header type: 3 != 1 [ 231.926789][ T8652] Invalid ELF header type: 2 != 1 [ 231.933651][ T8651] Invalid ELF header type: 2 != 1 [ 231.939914][ T8652] Invalid ELF header type: 2 != 1 [ 231.947379][ T8651] Invalid ELF header type: 3 != 1 [ 231.952513][ T8652] Invalid ELF header type: 3 != 1 [ 232.038372][ T8654] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 232.038703][ T8654] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 232.054141][ T8654] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 232.054490][ T8654] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 232.061345][ T8654] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 232.069795][ T8654] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 232.084938][ T8654] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 232.085293][ T8654] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 232.092162][ T8654] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 232.101727][ T8656] rust_binder: Error in use_page_slow: ESRCH [ 232.108321][ T8656] rust_binder: use_range failure ESRCH [ 232.114389][ T8656] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 232.119991][ T8656] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 232.128029][ T8656] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1430 [ 232.224090][ T8659] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 232.233354][ T8659] rust_binder: Read failure Err(EFAULT) in pid:1435 [ 232.533659][ T8664] overlayfs: missing 'lowerdir' [ 233.614228][ T8719] binder: Bad value for 'max' [ 233.989272][ T8736] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 234.010905][ T8736] SELinux: failed to load policy [ 234.275544][ T36] kauditd_printk_skb: 4493 callbacks suppressed [ 234.275562][ T36] audit: type=1400 audit(1750652526.967:27251): avc: denied { setattr } for pid=7099 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.311302][ T36] audit: type=1400 audit(1750652526.985:27252): avc: denied { setattr } for pid=7099 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.335231][ T36] audit: type=1400 audit(1750652526.985:27253): avc: denied { setattr } for pid=7099 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.362878][ T36] audit: type=1400 audit(1750652527.004:27254): avc: denied { setattr } for pid=7099 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.372244][ T8739] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1457 [ 234.413967][ T36] audit: type=1400 audit(1750652527.004:27255): avc: denied { setattr } for pid=7099 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.421460][ T8742] overlayfs: failed to clone upperpath [ 234.431742][ T7099] audit: audit_backlog=65 > audit_backlog_limit=64 [ 234.454633][ T850] audit: audit_backlog=65 > audit_backlog_limit=64 [ 234.458650][ T36] audit: type=1400 audit(1750652527.004:27256): avc: denied { setattr } for pid=7099 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.466380][ T850] audit: audit_lost=45 audit_rate_limit=0 audit_backlog_limit=64 [ 234.491114][ T7099] audit: audit_lost=46 audit_rate_limit=0 audit_backlog_limit=64 [ 234.535642][ T8746] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 234.535668][ T8746] rust_binder: Error while translating object. [ 234.572873][ T8746] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 234.590814][ T8746] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1460 [ 234.741628][ T8755] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1464 [ 234.862646][ T8762] netlink: 57 bytes leftover after parsing attributes in process `syz.0.2845'. [ 235.170196][ T8774] fuse: Bad value for 'user_id' [ 235.175318][ T8774] fuse: Bad value for 'user_id' [ 236.857777][ T8832] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1475 [ 236.908283][ T8832] rust_binder: Read failure Err(EFAULT) in pid:1475 [ 237.215676][ T8842] rust_binder: Read failure Err(EAGAIN) in pid:1477 [ 237.268645][ T8839] rust_binder: Write failure EINVAL in pid:1477 [ 237.271123][ T13] tipc: Left network mode [ 237.311485][ T8839] rust_binder: Write failure EINVAL in pid:1477 [ 237.311841][ T8839] rust_binder: Write failure EINVAL in pid:1477 [ 237.319678][ T13] veth1_macvtap: left promiscuous mode [ 237.333968][ T13] veth0_vlan: left promiscuous mode [ 237.343750][ T8839] rust_binder: Write failure EINVAL in pid:1477 [ 237.344059][ T8839] rust_binder: Write failure EINVAL in pid:1477 [ 237.371440][ T8839] rust_binder: Write failure EINVAL in pid:1477 [ 237.420614][ T8839] rust_binder: Write failure EINVAL in pid:1477 [ 237.440062][ T8839] rust_binder: Write failure EINVAL in pid:1477 [ 237.480672][ T8839] rust_binder: Write failure EINVAL in pid:1477 [ 237.507955][ T8839] rust_binder: Write failure EINVAL in pid:1477 [ 237.538825][ T8839] rust_binder: Write failure EINVAL in pid:1477 [ 237.545581][ T8839] rust_binder: Write failure EINVAL in pid:1477 [ 237.572530][ T8839] rust_binder: Write failure EINVAL in pid:1477 [ 237.601412][ T8839] rust_binder: Write failure EINVAL in pid:1477 [ 237.608053][ T8839] rust_binder: Write failure EINVAL in pid:1477 [ 237.627223][ T8839] rust_binder: Write failure EINVAL in pid:1477 [ 237.634735][ T8839] rust_binder: Write failure EINVAL in pid:1477 [ 237.641460][ T8839] rust_binder: Write failure EINVAL in pid:1477 [ 237.649162][ T8839] rust_binder: Write failure EINVAL in pid:1477 [ 237.656442][ T8839] rust_binder: Write failure EINVAL in pid:1477 [ 237.663128][ T8839] rust_binder: Write failure EINVAL in pid:1477 [ 237.671334][ T8845] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.691530][ T8839] rust_binder: Write failure EINVAL in pid:1477 [ 237.691935][ T8839] rust_binder: Write failure EINVAL in pid:1477 [ 237.696130][ T8845] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.700313][ T8839] rust_binder: Write failure EINVAL in pid:1477 [ 237.707297][ T8845] bridge_slave_0: entered allmulticast mode [ 237.713248][ T8839] rust_binder: Write failure EINVAL in pid:1477 [ 237.725473][ T8839] rust_binder: Write failure EINVAL in pid:1477 [ 237.732742][ T8839] rust_binder: Write failure EINVAL in pid:1477 [ 237.738484][ T8845] bridge_slave_0: entered promiscuous mode [ 237.751056][ T8839] rust_binder: Write failure EINVAL in pid:1477 [ 237.751403][ T8839] rust_binder: Write failure EINVAL in pid:1477 [ 237.758423][ T8839] rust_binder: Write failure EINVAL in pid:1477 [ 237.770049][ T8845] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.780406][ T8839] rust_binder: Write failure EINVAL in pid:1477 [ 237.783746][ T8845] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.797200][ T8845] bridge_slave_1: entered allmulticast mode [ 237.802717][ T8839] rust_binder: Write failure EINVAL in pid:1477 [ 237.803448][ T8839] rust_binder: Write failure EINVAL in pid:1477 [ 237.811114][ T8845] bridge_slave_1: entered promiscuous mode [ 237.856538][ T13] bridge_slave_1: left allmulticast mode [ 237.877850][ T13] bridge_slave_1: left promiscuous mode [ 237.883545][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.921561][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.942146][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 237.942454][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 237.949089][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 237.987145][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 237.996405][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 238.017197][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 238.037120][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 238.055834][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 238.064075][ T13] veth1_macvtap: left promiscuous mode [ 238.084320][ T13] veth0_vlan: left promiscuous mode [ 238.089650][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 238.090034][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 238.115707][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 238.122357][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 238.145551][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 238.156266][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 238.173996][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 238.209301][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 238.227369][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 238.237298][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 238.251065][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 238.262024][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 238.270047][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 238.278200][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 238.300925][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 238.316526][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 238.341424][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 238.355248][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 238.371564][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 238.387219][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 238.402116][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 238.412734][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 238.435515][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 238.463162][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 238.484506][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 238.501384][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.514771][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.524544][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 238.524848][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 238.533915][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 238.548982][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.562371][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.580669][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 238.580991][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 238.589143][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 238.623836][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 238.659706][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 238.668795][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 238.712912][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 238.722102][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 238.738966][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 238.752241][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 238.761595][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 238.778466][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 238.792548][ T8863] rust_binder: Write failure EFAULT in pid:1481 [ 238.874095][ T8845] veth0_vlan: entered promiscuous mode [ 238.964908][ T8845] veth1_macvtap: entered promiscuous mode [ 239.182119][ T540] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 239.230235][ T8888] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 239.412761][ T540] usb 5-1: config 1 has an invalid interface number: 229 but max is 1 [ 239.421863][ T540] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.433942][ T540] usb 5-1: config 1 has no interface number 0 [ 239.441856][ T540] usb 5-1: too many endpoints for config 1 interface 229 altsetting 255: 255, using maximum allowed: 30 [ 239.465141][ T540] usb 5-1: config 1 interface 229 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 239.481589][ T540] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 239.498805][ T540] usb 5-1: config 1 interface 229 has no altsetting 0 [ 239.506410][ T540] usb 5-1: config 1 interface 1 has no altsetting 0 [ 239.521239][ T540] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 239.545681][ T540] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.555407][ T540] usb 5-1: Product: syz [ 239.560699][ T540] usb 5-1: Manufacturer: syz [ 239.565351][ T540] usb 5-1: SerialNumber: syz [ 239.642427][ T36] kauditd_printk_skb: 2393 callbacks suppressed [ 239.642458][ T36] audit: type=1400 audit(1750652531.990:29645): avc: denied { ioctl } for pid=8895 comm="syz.5.2888" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 239.717273][ T36] audit: type=1400 audit(1750652532.055:29646): avc: denied { ioctl } for pid=8895 comm="syz.5.2888" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 239.774264][ T36] audit: type=1400 audit(1750652532.111:29647): avc: denied { create } for pid=8906 comm="syz.0.2892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 239.780841][ T31] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 239.794326][ T36] audit: type=1400 audit(1750652532.111:29648): avc: denied { setopt } for pid=8906 comm="syz.0.2892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 239.825236][ T36] audit: type=1400 audit(1750652532.111:29649): avc: denied { create } for pid=8906 comm="syz.0.2892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 239.845034][ T540] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 239.846469][ T36] audit: type=1400 audit(1750652532.111:29650): avc: denied { create } for pid=8906 comm="syz.0.2892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 239.856671][ T540] usb 5-1: USB disconnect, device number 59 [ 239.882089][ T36] audit: type=1400 audit(1750652532.111:29651): avc: denied { write } for pid=8906 comm="syz.0.2892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 239.907518][ T36] audit: type=1400 audit(1750652532.140:29652): avc: denied { create } for pid=8878 comm="syz.4.2884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 239.929690][ T36] audit: type=1400 audit(1750652532.149:29653): avc: denied { ioctl } for pid=8895 comm="syz.5.2888" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 239.954848][ T36] audit: type=1400 audit(1750652532.158:29654): avc: denied { ioctl } for pid=8895 comm="syz.5.2888" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 239.986568][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.997639][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.008138][ T31] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 240.021125][ T31] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 240.030232][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.039985][ T31] usb 6-1: config 0 descriptor?? [ 240.175601][ T8910] binder: Unknown parameter 'st' [ 240.484582][ T31] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 240.510801][ T31] plantronics 0003:047F:FFFF.0010: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 240.617069][ T8936] netlink: 'syz.2.2903': attribute type 11 has an invalid length. [ 240.657668][ T8936] netlink: 'syz.2.2903': attribute type 11 has an invalid length. [ 240.779487][ T8946] 9pnet: p9_errstr2errno: server reported unknown error pA;KZ4 [ 240.895399][ T8954] overlayfs: failed to clone upperpath [ 241.046390][ T306] usb 6-1: USB disconnect, device number 2 [ 241.078534][ T8964] overlayfs: failed to clone upperpath [ 241.236099][ T8967] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 241.236135][ T8967] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:9 [ 242.653332][ T9016] rust_binder: Error while translating object. [ 242.678011][ T9016] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 242.695881][ T9016] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:24 [ 242.902478][ T540] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 243.073533][ T540] usb 5-1: device descriptor read/64, error -71 [ 243.330101][ T540] usb 5-1: device descriptor read/64, error -71 [ 243.586680][ T540] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 243.736361][ T540] usb 5-1: device descriptor read/64, error -71 [ 244.003625][ T540] usb 5-1: device descriptor read/64, error -71 [ 244.121842][ T540] usb usb5-port1: attempt power cycle [ 244.495600][ T540] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 244.518891][ T540] usb 5-1: device descriptor read/8, error -71 [ 244.657710][ T540] usb 5-1: device descriptor read/8, error -71 [ 244.912360][ T540] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 244.935752][ T540] usb 5-1: device descriptor read/8, error -71 [ 245.073362][ T36] kauditd_printk_skb: 529 callbacks suppressed [ 245.073380][ T36] audit: type=1400 audit(1750652537.069:30184): avc: denied { ioctl } for pid=9025 comm="syz.4.2929" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 245.104654][ T36] audit: type=1400 audit(1750652537.069:30185): avc: denied { ioctl } for pid=9025 comm="syz.4.2929" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 245.130204][ T36] audit: type=1400 audit(1750652537.125:30186): avc: denied { ioctl } for pid=9025 comm="syz.4.2929" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 245.155330][ T36] audit: type=1400 audit(1750652537.125:30187): avc: denied { ioctl } for pid=9025 comm="syz.4.2929" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 245.180351][ T540] usb 5-1: device descriptor read/8, error -71 [ 245.180846][ T36] audit: type=1400 audit(1750652537.144:30188): avc: denied { ioctl } for pid=9025 comm="syz.4.2929" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 245.211590][ T36] audit: type=1400 audit(1750652537.172:30189): avc: denied { ioctl } for pid=9025 comm="syz.4.2929" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 245.297258][ T540] usb usb5-port1: unable to enumerate USB device [ 245.297753][ T36] audit: type=1400 audit(1750652537.284:30190): avc: denied { ioctl } for pid=9025 comm="syz.4.2929" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 245.848888][ T36] audit: type=1400 audit(1750652537.789:30191): avc: denied { read write } for pid=850 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 245.873181][ T36] audit: type=1400 audit(1750652537.789:30192): avc: denied { read write open } for pid=850 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 245.899034][ T36] audit: type=1400 audit(1750652537.789:30193): avc: denied { ioctl } for pid=850 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 249.081953][ T9048] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 249.081978][ T9048] rust_binder: Read failure Err(EFAULT) in pid:1501 [ 249.104722][ T13] Bluetooth: hci1: Frame reassembly failed (-84) [ 249.187700][ T9053] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4232, size: 4294966866) [ 249.187726][ T9053] rust_binder: Error while translating object. [ 249.205077][ T9053] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 249.215892][ T9053] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1503 [ 249.229468][ T9053] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 249.388235][ T9074] tmpfs: Unknown parameter 'usrquota' [ 249.574814][ T9085] fuse: Unknown parameter 'W' [ 249.581847][ T9084] FAT-fs (rnullb0): invalid media value (0x00) [ 249.592498][ T9084] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 249.605682][ T9085] futex_wake_op: syz.0.2949 tries to shift op by -1; fix this program [ 249.706252][ T9089] overlayfs: failed to clone upperpath [ 249.909481][ T9101] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1523 [ 250.005139][ T9107] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9107 comm=syz.4.2957 [ 250.163521][ T9115] tipc: Enabled bearer , priority 10 [ 250.472002][ T36] kauditd_printk_skb: 224 callbacks suppressed [ 250.472019][ T36] audit: type=1400 audit(1750652542.120:30418): avc: denied { ioctl } for pid=9120 comm="syz.4.2962" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 250.521910][ T36] audit: type=1400 audit(1750652542.158:30419): avc: denied { execmem } for pid=9122 comm="syz.0.2963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 250.556945][ T36] audit: type=1400 audit(1750652542.186:30420): avc: denied { ioctl } for pid=9120 comm="syz.4.2962" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 250.610513][ T31] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 250.619138][ T36] audit: type=1400 audit(1750652542.251:30421): avc: denied { ioctl } for pid=9120 comm="syz.4.2962" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 250.659926][ T36] audit: type=1400 audit(1750652542.251:30422): avc: denied { ioctl } for pid=9120 comm="syz.4.2962" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 250.695892][ T36] audit: type=1400 audit(1750652542.251:30423): avc: denied { ioctl } for pid=9120 comm="syz.4.2962" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 250.738751][ T36] audit: type=1400 audit(1750652542.251:30424): avc: denied { write } for pid=9125 comm="syz.0.2964" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 250.760366][ T36] audit: type=1400 audit(1750652542.251:30425): avc: denied { write } for pid=9125 comm="syz.0.2964" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 250.781589][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 250.793813][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.804990][ T36] audit: type=1400 audit(1750652542.279:30426): avc: denied { name_bind } for pid=9125 comm="syz.0.2964" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 250.829674][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.839604][ T31] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 250.848761][ T36] audit: type=1400 audit(1750652542.279:30427): avc: denied { node_bind } for pid=9125 comm="syz.0.2964" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 250.871364][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.881518][ T31] usb 5-1: config 0 descriptor?? [ 251.121049][ T31] usbhid 5-1:0.0: can't add hid device: -71 [ 251.144937][ T31] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 251.180626][ T31] usb 5-1: USB disconnect, device number 64 [ 251.289371][ T9147] rust_binder: Error in use_page_slow: ESRCH [ 251.289399][ T9147] rust_binder: use_range failure ESRCH [ 251.300292][ T9147] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 251.305291][ T1491] Bluetooth: hci1: command 0x1003 tx timeout [ 251.310751][ T9147] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 251.313621][ T54] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 251.325569][ T9147] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1542 [ 251.358737][ T306] tipc: Node number set to 4075389782 [ 251.520308][ T9153] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2974'. [ 251.648053][ T9156] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 251.648093][ T9156] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1544 [ 252.484121][ T9180] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 252.484252][ T9183] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:44 [ 252.505635][ T9184] overlayfs: failed to resolve './file0': -2 [ 252.550265][ T9180] rust_binder: Error while translating object. [ 252.550299][ T9180] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 252.566751][ T9180] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1547 [ 252.887496][ T31] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 253.058522][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 253.067349][ T31] usb 5-1: config 4 has an invalid interface number: 1 but max is 0 [ 253.075399][ T31] usb 5-1: config 4 has no interface number 0 [ 253.081543][ T31] usb 5-1: config 4 interface 1 has no altsetting 0 [ 253.092615][ T31] usb 5-1: language id specifier not provided by device, defaulting to English [ 253.103849][ T31] usb 5-1: New USB device found, idVendor=12d1, idProduct=14ac, bcdDevice=f5.00 [ 253.112975][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.120978][ T31] usb 5-1: Product: syz [ 253.125165][ T31] usb 5-1: Manufacturer: syz [ 253.129774][ T31] usb 5-1: SerialNumber: syz [ 253.311312][ T9216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2993'. [ 253.584227][ T31] usb 5-1: USB disconnect, device number 65 [ 253.953179][ T9256] fuse: Unknown parameter '' [ 253.975526][ T9261] 8021q: VLANs not supported on ip_vti0 [ 254.523134][ T897] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 254.672831][ T897] usb 5-1: device descriptor read/64, error -71 [ 254.751265][ T9292] syz.0.3018 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 254.929387][ T897] usb 5-1: device descriptor read/64, error -71 [ 255.185984][ T897] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 255.324752][ T9315] wg2: entered promiscuous mode [ 255.330555][ T897] usb 5-1: device descriptor read/64, error -71 [ 255.339036][ T9315] wg2: entered allmulticast mode [ 255.417984][ T9323] binder: Bad value for 'max' [ 255.592237][ T897] usb 5-1: device descriptor read/64, error -71 [ 255.710375][ T897] usb usb5-port1: attempt power cycle [ 255.745855][ T9350] fuse: Bad value for 'group_id' [ 255.750936][ T9350] fuse: Bad value for 'group_id' [ 255.847926][ T36] kauditd_printk_skb: 1078 callbacks suppressed [ 255.847946][ T36] audit: type=1400 audit(1750652547.143:31506): avc: denied { execmem } for pid=9359 comm="syz.0.3040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 255.897764][ T36] audit: type=1400 audit(1750652547.190:31507): avc: denied { create } for pid=9364 comm="syz.0.3041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 255.927055][ T36] audit: type=1400 audit(1750652547.190:31508): avc: denied { create } for pid=9364 comm="syz.0.3041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 255.948589][ T36] audit: type=1400 audit(1750652547.190:31509): avc: denied { create } for pid=9364 comm="syz.0.3041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 255.969869][ T36] audit: type=1400 audit(1750652547.190:31510): avc: denied { bind } for pid=9364 comm="syz.0.3041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 255.992038][ T36] audit: type=1400 audit(1750652547.190:31511): avc: denied { setopt } for pid=9364 comm="syz.0.3041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 256.020570][ T36] audit: type=1400 audit(1750652547.199:31512): avc: denied { write } for pid=9364 comm="syz.0.3041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 256.050627][ T36] audit: type=1400 audit(1750652547.199:31513): avc: denied { write } for pid=9364 comm="syz.0.3041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 256.073845][ T897] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 256.083588][ T36] audit: type=1400 audit(1750652547.228:31514): avc: denied { create } for pid=9368 comm="syz.0.3042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 256.114318][ T897] usb 5-1: device descriptor read/8, error -71 [ 256.120616][ T36] audit: type=1400 audit(1750652547.228:31515): avc: denied { create } for pid=9368 comm="syz.0.3042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 256.257787][ T897] usb 5-1: device descriptor read/8, error -71 [ 256.287552][ T9380] tipc: Enabling of bearer rejected, failed to enable media [ 256.522285][ T897] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 256.536870][ T9395] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:62 [ 256.539137][ T9395] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 256.558780][ T897] usb 5-1: device descriptor read/8, error -71 [ 256.576711][ T9395] rust_binder: Error while translating object. [ 256.576737][ T9395] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 256.583062][ T9395] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:62 [ 256.665539][ T9402] netlink: 'syz.2.3054': attribute type 4 has an invalid length. [ 256.689325][ T9401] netlink: 'syz.2.3054': attribute type 4 has an invalid length. [ 256.701507][ T9402] netlink: 'syz.2.3054': attribute type 4 has an invalid length. [ 256.702182][ T9403] rust_binder: 9399 RLIMIT_NICE not set [ 256.726329][ T897] usb 5-1: device descriptor read/8, error -71 [ 256.832327][ T9407] rust_binder: Error while translating object. [ 256.832361][ T9407] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 256.838683][ T9407] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:68 [ 256.854263][ T897] usb usb5-port1: unable to enumerate USB device [ 257.014496][ T9415] binder: Bad value for 'stats' [ 257.202769][ T9424] fuse: Bad value for 'user_id' [ 257.216960][ T9424] fuse: Bad value for 'user_id' [ 257.289672][ T9428] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 257.289709][ T9428] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1571 [ 257.538317][ T9434] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3067'. [ 257.557638][ T9434] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8213 sclass=netlink_xfrm_socket pid=9434 comm=syz.2.3067 [ 257.831117][ T9444] bridge0: port 3(syz_tun) entered blocking state [ 257.865996][ T9444] bridge0: port 3(syz_tun) entered disabled state [ 257.902693][ T9444] syz_tun: entered allmulticast mode [ 257.908555][ T9444] syz_tun: entered promiscuous mode [ 257.965639][ T9444] bridge0: port 3(syz_tun) entered blocking state [ 257.972127][ T9444] bridge0: port 3(syz_tun) entered forwarding state [ 258.161757][ T9463] binder: Unknown parameter 'smackfsfloor' [ 258.245788][ T9470] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1583 [ 259.109441][ T897] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 259.301841][ T897] usb 6-1: Using ep0 maxpacket: 16 [ 259.310349][ T897] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 259.321162][ T897] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.333177][ T897] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 259.357224][ T897] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 259.366929][ T897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.374950][ T897] usb 6-1: Product: syz [ 259.380511][ T897] usb 6-1: Manufacturer: syz [ 259.385149][ T897] usb 6-1: SerialNumber: syz [ 259.430193][ T31] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 259.622634][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 259.638343][ T31] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 259.651633][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.664560][ T31] usb 5-1: config 0 has no interface number 0 [ 259.686370][ T31] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 259.707813][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.731224][ T31] usb 5-1: Product: syz [ 259.743533][ T31] usb 5-1: Manufacturer: syz [ 259.748271][ T31] usb 5-1: SerialNumber: syz [ 259.766969][ T31] usb 5-1: config 0 descriptor?? [ 259.782407][ T31] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 259.788945][ T31] usb 5-1: No valid video chain found. [ 259.861094][ T897] usb 6-1: 0:2 : does not exist [ 259.998407][ T9534] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1592 [ 260.052691][ T9533] rust_binder: Write failure EINVAL in pid:1592 [ 261.083985][ T9601] netlink: 'syz.2.3123': attribute type 12 has an invalid length. [ 261.261892][ T36] kauditd_printk_skb: 580 callbacks suppressed [ 261.261952][ T36] audit: type=1400 audit(1750652552.213:32096): avc: denied { create } for pid=9605 comm="syz.2.3125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 261.288162][ T36] audit: type=1400 audit(1750652552.213:32097): avc: denied { ioctl } for pid=9516 comm="syz.5.3097" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 261.321496][ T36] audit: type=1400 audit(1750652552.260:32098): avc: denied { create } for pid=9608 comm="syz.2.3126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 261.342627][ T36] audit: type=1400 audit(1750652552.260:32099): avc: denied { write } for pid=9608 comm="syz.2.3126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 261.363394][ T36] audit: type=1400 audit(1750652552.269:32100): avc: denied { read } for pid=9608 comm="syz.2.3126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 261.383952][ T36] audit: type=1400 audit(1750652552.269:32101): avc: denied { read } for pid=9608 comm="syz.2.3126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 261.405330][ T36] audit: type=1400 audit(1750652552.269:32102): avc: denied { create } for pid=9608 comm="syz.2.3126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 261.426214][ T36] audit: type=1400 audit(1750652552.269:32103): avc: denied { create } for pid=9608 comm="syz.2.3126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 261.446955][ T36] audit: type=1400 audit(1750652552.269:32104): avc: denied { write } for pid=9608 comm="syz.2.3126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 261.468257][ T36] audit: type=1400 audit(1750652552.269:32105): avc: denied { read } for pid=9608 comm="syz.2.3126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 261.649231][ T9619] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 261.649258][ T9619] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:96 [ 262.386593][ T31] usb 5-1: USB disconnect, device number 70 [ 262.555346][ T9632] rust_kernel: panicked at /syzkaller/managers/ci2-android-6-12-rust/kernel/rust/kernel/page_size_compat.rs:60:5: [ 262.555346][ T9632] attempt to add with overflow [ 262.572458][ T9632] ------------[ cut here ]------------ [ 262.578014][ T9632] kernel BUG at rust/helpers/bug.c:7! [ 262.585786][ T9632] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 262.592812][ T9632] CPU: 0 UID: 0 PID: 9632 Comm: syz.4.3132 Not tainted 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473 [ 262.606298][ T9632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 262.616384][ T9632] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 262.621747][ T9632] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 57 99 82 14 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 1d 5d cb 98 90 90 90 90 90 90 90 90 90 [ 262.641391][ T9632] RSP: 0018:ffffc90004a1f3f0 EFLAGS: 00010246 [ 262.648564][ T9632] RAX: 000000000000008c RBX: 1ffff92000943e80 RCX: d0bd6356c4e90300 [ 262.656577][ T9632] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 262.664572][ T9632] RBP: ffffc90004a1f3f0 R08: ffffc90004a1f0e7 R09: 1ffff92000943e1c [ 262.672601][ T9632] R10: dffffc0000000000 R11: fffff52000943e1d R12: 0000000000000000 [ 262.680603][ T9632] R13: dffffc0000000000 R14: ffffc90004a1f420 R15: ffffc90004a1f450 [ 262.688587][ T9632] FS: 00007f9e0a9356c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 262.697554][ T9632] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 262.704169][ T9632] CR2: 00007f9e0a934f98 CR3: 00000001171e2000 CR4: 00000000003526b0 [ 262.712222][ T9632] DR0: 0000000000000007 DR1: 000000000000009b DR2: 00040000ffffffff [ 262.720225][ T9632] DR3: 0000000000000009 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 262.728232][ T9632] Call Trace: [ 262.731535][ T9632] [ 262.734503][ T9632] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 262.742001][ T9632] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 262.750020][ T9632] ? kernel_text_address+0xa9/0xe0 [ 262.755169][ T9632] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 262.768751][ T9632] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 262.774955][ T9632] ? arch_stack_walk+0x10b/0x170 [ 262.779924][ T9632] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 262.787162][ T9632] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 262.795094][ T9632] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0xb2/0xc0 [ 262.805082][ T9632] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0x10/0x10 [ 262.815692][ T9632] _RNvXs1_CscPPBqWtAqum_11ashmem_rustNtB5_6AshmemNtNtCs43vyB533jt3_6kernel10miscdevice10MiscDevice4mmap+0xe44/0xfb0 [ 262.827960][ T9632] ? mas_wr_store_type+0x8eb/0x1ad0 [ 262.833189][ T9632] ? __cfi__RNvXs1_CscPPBqWtAqum_11ashmem_rustNtB5_6AshmemNtNtCs43vyB533jt3_6kernel10miscdevice10MiscDevice4mmap+0x10/0x10 [ 262.845996][ T9632] ? mas_preallocate+0x56e/0xc60 [ 262.850980][ T9632] ? __cfi_mas_preallocate+0x10/0x10 [ 262.856276][ T9632] ? kasan_save_alloc_info+0x40/0x50 [ 262.861588][ T9632] ? __asan_memset+0x39/0x50 [ 262.866208][ T9632] mmap_region+0x1371/0x1bd0 [ 262.870912][ T9632] ? __cfi_mmap_region+0x10/0x10 [ 262.875879][ T9632] ? __kasan_check_read+0x15/0x20 [ 262.880920][ T9632] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 262.887200][ T9632] ? file_mmap_ok+0x147/0x1a0 [ 262.891905][ T9632] do_mmap+0xb6d/0x13c0 [ 262.896086][ T9632] ? __cfi_do_mmap+0x10/0x10 [ 262.900709][ T9632] ? down_write_killable+0xe9/0x2d0 [ 262.906364][ T9632] ? __cfi_down_write_killable+0x10/0x10 [ 262.912014][ T9632] ? lock_vma_under_rcu+0x49d/0x530 [ 262.917335][ T9632] vm_mmap_pgoff+0x38f/0x4e0 [ 262.921945][ T9632] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 262.927073][ T9632] ? __fget_files+0x2c5/0x340 [ 262.931784][ T9632] ksys_mmap_pgoff+0x166/0x1e0 [ 262.936592][ T9632] __x64_sys_mmap+0x121/0x140 [ 262.941301][ T9632] x64_sys_call+0x13bf/0x2ee0 [ 262.946120][ T9632] do_syscall_64+0x58/0xf0 [ 262.950605][ T9632] ? clear_bhb_loop+0x35/0x90 [ 262.955315][ T9632] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 262.961231][ T9632] RIP: 0033:0x7f9e09b8e929 [ 262.965680][ T9632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.985311][ T9632] RSP: 002b:00007f9e0a935038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 262.993765][ T9632] RAX: ffffffffffffffda RBX: 00007f9e09db6080 RCX: 00007f9e09b8e929 [ 263.001775][ T9632] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000701000 [ 263.009783][ T9632] RBP: 00007f9e09c10b39 R08: 0000000000000003 R09: 0000000000000000 [ 263.017855][ T9632] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 263.025841][ T9632] R13: 0000000000000001 R14: 00007f9e09db6080 R15: 00007ffe59b439c8 [ 263.033841][ T9632] [ 263.036876][ T9632] Modules linked in: [ 263.041283][ T9632] ---[ end trace 0000000000000000 ]--- [ 263.071221][ T9632] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 263.076975][ T9632] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 57 99 82 14 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 1d 5d cb 98 90 90 90 90 90 90 90 90 90 [ 263.112608][ T9632] RSP: 0018:ffffc90004a1f3f0 EFLAGS: 00010246 [ 263.118782][ T897] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 263.128530][ T9632] RAX: 000000000000008c RBX: 1ffff92000943e80 RCX: d0bd6356c4e90300 [ 263.136759][ T9632] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 263.147790][ T897] usb 6-1: USB disconnect, device number 3 [ 263.163903][ T9632] RBP: ffffc90004a1f3f0 R08: ffffc90004a1f0e7 R09: 1ffff92000943e1c [ 263.182950][ T9632] R10: dffffc0000000000 R11: fffff52000943e1d R12: 0000000000000000 [ 263.203934][ T9632] R13: dffffc0000000000 R14: ffffc90004a1f420 R15: ffffc90004a1f450 [ 263.212058][ T9632] FS: 00007f9e0a9356c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 263.221957][ T9632] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 263.229257][ T9632] CR2: 00007facdaf81178 CR3: 00000001171e2000 CR4: 00000000003526b0 [ 263.237953][ T9632] DR0: 0000000000000007 DR1: 000000000000009b DR2: 00040000ffffffff [ 263.246020][ T9632] DR3: 0000000000000009 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 263.254091][ T9632] Kernel panic - not syncing: Fatal exception [ 263.260495][ T9632] Kernel Offset: disabled [ 263.264848][ T9632] Rebooting in 86400 seconds..