last executing test programs: 3m32.562102477s ago: executing program 1 (id=1044): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000180)) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0xe7) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000140)={0x4, 0x6000, 0x9, 0xf, 0x7fff}) sendto$inet(r2, &(0x7f0000000080)='\x00'/10, 0xa, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r1, &(0x7f0000000100)=""/10, 0xa, 0x0, 0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r5, 0x11, 0x66, &(0x7f00000000c0)=0x4, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}}], 0x1, 0x2, 0x0) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r8, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x2, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) setsockopt$inet6_group_source_req(r8, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x4e21, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}}}, 0x108) close(r7) r9 = creat(&(0x7f0000000280)='./file0\x00', 0x184) close(r9) socket(0x18, 0x0, 0x2) 3m31.607077731s ago: executing program 1 (id=1092): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x277, 0x0, 0x7}]}) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) 3m31.489433923s ago: executing program 1 (id=1101): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x11a) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0xc000, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 3m31.486807863s ago: executing program 1 (id=1103): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x45, &(0x7f0000000180)={0x200000000000001}, 0x8) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='huge=always']) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f00000002c0), 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x1000, 0x200, 0xa, 0x20}, {}, {0x0, 0x0, 0x9, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000bc0)={0x2020}, 0x2020) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x12b) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r5, &(0x7f0000000580)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0/file0\x00', 0x100) r6 = socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000009) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000480), 0x18044, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1d0) ioctl$sock_inet_SIOCGIFPFLAGS(r6, 0x8935, &(0x7f0000000400)={'bridge0\x00'}) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) 3m31.355250545s ago: executing program 1 (id=1107): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000040)='/dev/audio#\x00') (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/150, 0x0}) (async, rerun: 32) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) (async, rerun: 32) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) (async, rerun: 32) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f0000000300)) (async, rerun: 32) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x0, 0x200000000000000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 3m31.314210866s ago: executing program 1 (id=1109): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x20400, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') getdents(r1, 0x0, 0x0) readahead(r0, 0x1, 0x79844e1c) 3m31.264208836s ago: executing program 32 (id=1109): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x20400, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') getdents(r1, 0x0, 0x0) readahead(r0, 0x1, 0x79844e1c) 2m43.884633249s ago: executing program 4 (id=1929): r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$can_raw(0x1d, 0x3, 0x1) syz_genetlink_get_family_id$devlink(&(0x7f0000002fc0), r1) keyctl$read(0x2, r0, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r0, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f00000005c0)={r3, 0x1, 0x6, @broadcast}, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000001200)={{0x2, 0x4e23, @remote}, {0x1, @multicast}, 0x14, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}, 'bond0\x00'}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) r6 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000010c0), 0xa801, 0x0) ioctl$TUNSETVNETLE(r7, 0x400454dc, &(0x7f0000001100)=0x1) syz_usb_control_io$hid(r6, &(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x7c, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x2, 0x1, 0xf0, 0x50, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x2b9b}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x4966, 0x1ff, 0x1}, {0x6, 0x24, 0x1a, 0x200, 0x26}, [@network_terminal={0x7, 0x24, 0xa, 0x1, 0x2, 0x8, 0x10}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x1, 0x9, 0x7f}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x51, 0xa, 0xe}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xd9, 0x1, 0x92}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x4, 0x3, 0x1}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x1, 0x6, 0x7, 0x0, 0x3}, 0x136, &(0x7f0000001340)={0x5, 0xf, 0x136, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "1332fcb74e2ccb8eedfe0aeac744fd6e"}, @generic={0x45, 0x10, 0xb, "a664e8492f90e700d5d073cb589eab6dfbd2e94f46ce7151bf2e6f74a351b5ce91eb080d20f7b323c01e34a137f66b1342a762d57948931a1dcbfdd2679b070dcf12"}, @generic={0xb9, 0x10, 0x4, "2beabc8dad3d1f926e8ecae91a6c2a1f9e97672b3d0b0a8a31683e08a4bfbe8f539861ee85f9e8a03f4fa129adcf579566474a32b8b40447b46f6a501c693b1ff2c1451f2440b6cccd4e8f3d7b910cfcce40bf9bdc92871389327cc68e027533896842740603c3c777d976d10f142c9be87a15cf4f28d880c9e8701595cefaa543cc5c4c6c43b14d40b165317d6d62f31ab26ab43ec8565a705267e68a97ca89e431eb2f9224ccec0e50783d382f4985b364786f7aa7"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "d34ffa289ce81ad5de62196d4625fe1e"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x91, 0x1, 0x4, 0x9}]}, 0x3, [{0x0, 0x0}, {0xbf, &(0x7f0000001140)=@string={0xbf, 0x3, "b47264ef1c7d01266e68d85cdec7027013f18ecfd3011b7f42d8efc06b4dd691b231e1d2adca84644bdcd5f5e49280a85b10e7dd44bde3757d0c145cf0d2a64f18f9b29bbce7c45c27773f2bb9374276caae76bbc8693d17588ceaadb638b5099bb1508da7d1e73136ac0fcef5c70fbd98018196c8c1b0a58504dbd76b4a9929ccde65f5e7b71e3fb7590a5163db7c654973a7206f8d61a4b0ce3680458870cb8229d635733c143aae614507f66881c302f767ae48ee8e0c2a3cc38908"}}, {0x0, 0x0}]}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1101, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x10}, @fda={0x66646185, 0x8, 0x1, 0x40}}, &(0x7f0000000280)={0x0, 0x18}}, 0x10}], 0x0, 0x0, 0x0}) 2m41.639214253s ago: executing program 0 (id=1967): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfea7) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x81, 0x8304) read$usbmon(r2, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r4 = mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086303, r4}], 0xfffffffffffffeec, 0x0, &(0x7f0000000140)="f3"}) close(r3) copy_file_range(r1, &(0x7f00000001c0), r0, 0x0, 0xffffffffa003e45b, 0x700000000000000) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext']) 2m41.512802135s ago: executing program 0 (id=1968): ioprio_set$uid(0x3, 0x0, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x11) (async) read(r0, 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) getpgrp(0xffffffffffffffff) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) prlimit64(r2, 0x7, &(0x7f0000000180)={0x1, 0x10007fff}, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) (async) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) (async) mount$incfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100862, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mount$cgroup2(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x200040, 0x0) (async) r3 = open(&(0x7f0000000280)='.\x00', 0x10002, 0x140) getdents(r3, &(0x7f0000000580)=""/176, 0xb0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) r4 = syz_io_uring_setup(0x7542, &(0x7f0000000000)={0x0, 0xc5f8, 0x1, 0x1001, 0xc3}, 0x0, 0x0) sendfile(r4, r4, 0x0, 0x7ffff200) (async) r5 = userfaultfd(0x800) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, &(0x7f0000000140)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) getpeername$netlink(r3, &(0x7f00000001c0), &(0x7f0000000200)=0xc) 2m41.371809477s ago: executing program 0 (id=1969): r0 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000001580)={0x0, "e5cf9087c0bc4eecd575619bf7fe717b09a75040d67944bdf74658aa573ec7ec5fd9ecb3bf2ad2cceb6d2f7879709ab2db2fcfa073f7ab9055774346282c82cc", 0x17}, 0x48, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000001600)='a`h', 0x3) ioprio_set$uid(0x3, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) read(r1, &(0x7f0000000040)=""/141, 0x8d) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) read$FUSE(r2, &(0x7f0000001640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r3, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) getpid() syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r4) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4) sendfile(r1, r1, 0x0, 0x7ffff000) 2m40.885197284s ago: executing program 4 (id=1975): syz_io_uring_setup(0x500, &(0x7f0000000080)={0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4602, 0x0) socket$inet6(0x2d, 0x2, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 2m40.685226827s ago: executing program 4 (id=1979): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000000)={{}, {}, 0x0, 0xa}) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) read(r1, &(0x7f0000000440)=""/255, 0xff) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000fd00001a0a0000000000000800000000000000000000000000000006000000000000737fea9700000000000000000000000000b2090000000000000700000000000000950a0000000000000900000000000000"]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x10}], 0x5b, 0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000080), 0xc, 0x40) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x10000042, 0x0, 0x2}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x2, 0x1}, 0x10) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000300)={{0x6000, 0x8080000, 0xf, 0x1, 0xe6, 0x9, 0x4, 0xd, 0x3, 0xeb, 0x7, 0x3}, {0x11101000, 0x4000, 0x0, 0xcb, 0xf, 0xfe, 0x5, 0x7, 0x4, 0x6, 0x0, 0x2}, {0x8000000, 0x4, 0x10, 0xf7, 0xff, 0x1, 0x8, 0x9, 0x8, 0x90, 0x6, 0xff}, {0xdddd1000, 0x2, 0xb, 0x3, 0x6, 0x2, 0x7, 0x5, 0x1, 0x8, 0x6, 0x4}, {0x1, 0xd000, 0xb, 0xca, 0x5, 0x9, 0xb6, 0x9, 0x9, 0x0, 0x6, 0xe}, {0xdddd1000, 0x6000, 0xc, 0x1, 0x3, 0x3a, 0x8, 0xd, 0x7, 0xff, 0x80}, {0xb000, 0xeeee0000, 0x9, 0xe, 0x7, 0x7, 0xfe, 0x80, 0x0, 0x7, 0x3, 0x1}, {0xf000, 0x6000, 0x3, 0x9, 0x45, 0x9, 0x7, 0x2, 0x3, 0xe, 0x81, 0xa0}, {0x4000, 0x7}, {0xeeee0000, 0x108}, 0x10000, 0x0, 0xe6f60000, 0x100000, 0x5, 0xe000, 0x4, [0x100000001, 0x2, 0x7f, 0xa5]}) 2m40.617434469s ago: executing program 4 (id=1983): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x80000, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) close(0x3) 2m40.590144079s ago: executing program 4 (id=1985): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) (async) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000c40)="9b216cf5", 0x4, r0) r1 = socket$packet(0x11, 0x98a66cb8eb1ab85, 0x300) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'xfrm0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async) sendto$packet(r2, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f007fdd1327c9167c643c4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000040), 0x4) (async) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x3, &(0x7f0000000000)=[{0x4, 0x6, 0x0, 0x4}, {0x64}, {0x401, 0x4}]}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="18000000760001"], 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) (async) close_range(r5, 0xffffffffffffffff, 0x0) 2m40.490977711s ago: executing program 4 (id=1986): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[]) truncate(&(0x7f0000000000)='./file0\x00', 0x101) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x810408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r5, r2) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0xfffffffffffffff9, 0x12) fcntl$lock(r2, 0x24, &(0x7f0000000240)={0x0, 0x3, 0xc9, 0x4, r4}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) recvmmsg(r6, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/22, 0x16}], 0x1}, 0xfffffffb}], 0x1, 0x40000142, 0x0) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r7, 0x0) read(r7, &(0x7f0000000000)=""/188, 0xbc) 2m40.439067872s ago: executing program 33 (id=1986): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[]) truncate(&(0x7f0000000000)='./file0\x00', 0x101) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x810408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r5, r2) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0xfffffffffffffff9, 0x12) fcntl$lock(r2, 0x24, &(0x7f0000000240)={0x0, 0x3, 0xc9, 0x4, r4}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) recvmmsg(r6, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/22, 0x16}], 0x1}, 0xfffffffb}], 0x1, 0x40000142, 0x0) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r7, 0x0) read(r7, &(0x7f0000000000)=""/188, 0xbc) 2m40.436552372s ago: executing program 0 (id=1988): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r2) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$invalidate(0x15, r3) (async) keyctl$invalidate(0x15, r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) close(0xffffffffffffffff) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f0000000040)}, 0x10) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@handle={0x73682a85, 0x10b, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000380)="ec5879bcae4ebf1dcf85134d8b5e05505209abff506d2f73957fa39fbdbc84a722e85b7aa2dd37976eaa5b831df72f213796242fbd571621cc5d7cdf0257b01ea7a5119e8f9d6ed2b82920a14886fc0c"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000380)="ec5879bcae4ebf1dcf85134d8b5e05505209abff506d2f73957fa39fbdbc84a722e85b7aa2dd37976eaa5b831df72f213796242fbd571621cc5d7cdf0257b01ea7a5119e8f9d6ed2b82920a14886fc0c"}) 2m38.285721774s ago: executing program 0 (id=2029): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4a051) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000040)) (async) socket$inet_icmp(0x2, 0x2, 0x1) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x183000, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000080)={{0x2e, @rand_addr=0x64010101, 0x4e23, 0x2, 'lc\x00', 0x4, 0x1000, 0xa}, {@rand_addr=0x64010102, 0x4e22, 0x2000, 0x0, 0x800, 0x4}}, 0x44) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000002b00)={&(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000002900)=ANY=[@ANYBLOB="037607f60000000000000000070000008608000000030102"], 0x18}, 0x400c0) (async) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m38.231166595s ago: executing program 0 (id=2030): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) read$FUSE(r1, &(0x7f0000001f40)={0x2020}, 0x2020) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000f00)={'binder0\x00'}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async) read$FUSE(r1, &(0x7f0000001f40)={0x2020}, 0x2020) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) (async) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000f00)={'binder0\x00'}) (async) 2m14.798836797s ago: executing program 34 (id=2030): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) read$FUSE(r1, &(0x7f0000001f40)={0x2020}, 0x2020) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000f00)={'binder0\x00'}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async) read$FUSE(r1, &(0x7f0000001f40)={0x2020}, 0x2020) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) (async) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000f00)={'binder0\x00'}) (async) 35.417839152s ago: executing program 2 (id=4025): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) syz_usb_connect$uac1(0x4, 0xf9, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe7, 0x3, 0x1, 0x0, 0x0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x5}, [@mixer_unit={0xa, 0x24, 0x4, 0x6, 0x5, "ea608f6e41"}, @mixer_unit={0x9, 0x24, 0x4, 0x5, 0xb, "b19714cd"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x100, 0x0, 0x7, "0bfec758a1"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x3, 0x2, 0x3, 0xb, "df0f"}, @as_header={0x7, 0x24, 0x1, 0xd, 0x77, 0x5}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x4, 0x6, 0x2, "ccd9"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x8, 0x81, 0x4}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x3c, 0x1, 0x1, 0x1b, "b2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x9, 0x8, 0x81, {0x7, 0x25, 0x1, 0x0, 0xd7, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x401, 0x8, 0x72, "7a3011b1bec3e278"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x8, 0x3, 0xfa, 0x80, "", "0b568d"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x1, 0x5, 0x1, "b8"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1, 0x2, 0xd2, 0xa, "ef", "f8"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x3, 0x4, 0xc0, 0x0, "6dec"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x9, 0x8, 0x9, {0x7, 0x25, 0x1, 0x80, 0x7, 0x81}}}}}}}]}}, &(0x7f0000000080)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x1, 0x5, 0x4, 0x8, 0x1}, 0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="050f2c000503100b14100406d82a0080417d3bdfae20a2116ac40a6a0a1003008b740d08330800000003100b"]}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0) 34.90180651s ago: executing program 2 (id=4038): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x300000c, 0x4f832, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r2, 0x4018aee3, &(0x7f0000000040)=@attr_irq_timer={0x0, 0x1, 0x1, 0x0}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x3}, @decrefs, @register_looper, @register_looper], 0x8b, 0x0, &(0x7f0000000140)="54a443f106cbb262368c506528b5d0b425aa02a86d96cbb077c8e223d62f8f468be83003669fe8e14ef15ef0eb29c6cdf300ebd9a93ac7b217202e3993738bcaaefdf6860708e4dae65af06d1f3fc8707002333b64acb9ad27b77161203267bf6020f48a4736782e7d351c5472748045a3cefb1ced963722985d619fcc8905fa72057eebad16b20c9f83b5"}) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, &(0x7f0000000200)=@attr_pmu_filter={0x0, 0x1, 0x1, &(0x7f0000000080)={0x5, 0x40}}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x2705ca3409e73b94, 0x2f, 0x1, 0x4, 0xc}}, 0x50) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) syz_fuse_handle_req(r5, &(0x7f00000062c0)="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", 0x2000, &(0x7f0000000c40)={0x0, &(0x7f0000000000)={0x18, 0x0, 0x1, {0x5f40cb2d}}, &(0x7f0000000140)={0x18, 0xffffffffffffffda, 0x2, {0xff}}, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x7}}, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0x0, 0x8, {0x5}}, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, &(0x7f0000000480)={0x78, 0x0, 0xfffffffffffffffe, {0xfc9, 0x6, 0x0, {0x5, 0x4, 0x6, 0x8, 0x0, 0x1, 0x4, 0x8, 0x7fff, 0xa000, 0x2, r7, 0x0, 0x40, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 34.88975064s ago: executing program 2 (id=4039): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000540)=0x80, 0x4) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) get_robust_list(0x0, 0x0, 0x0) (async) fdatasync(r0) (async) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 34.835241201s ago: executing program 2 (id=4040): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80146, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000240)={0xf0003, 0x0, [0x5, 0x10000, 0x7, 0x10000000000000b, 0x0, 0x4, 0x18000000000, 0x40000000]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendmsg$tipc(r0, &(0x7f0000000680)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x2, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20004010}, 0x20000005) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone3(0x0, 0x0) syz_io_uring_setup(0xf00, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x87) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b00"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000100)={'wg2\x00'}) 34.643635414s ago: executing program 2 (id=4041): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x2000) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="05000000dc080000fbffffff00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="02000080010000000000008009000136e0fcff3093f915f07970adc229dfcc9750dab52f87d52a84520a3e3228116b26908b51eaff369d605f0052fc07a11711759a8dc82728568df514e32f7f06"], 0x80}, 0x1, 0x0, 0x0, 0x200000c0}, 0xc000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000100)=0x23, 0x4) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f00000003c0)) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x102}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6b}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x64}, 0x1, 0x0, 0x0, 0x20080000}, 0x0) ioctl$KVM_CAP_X86_GUEST_MODE(r7, 0x4068aea3, &(0x7f00000001c0)) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000000000000064d564b", @ANYBLOB="6103332529d83c"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_clone3(&(0x7f0000000b40)={0x2000000, &(0x7f0000000880)=0xffffffffffffffff, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) write(r11, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYRESOCT]) ioctl$KVM_GET_EMULATED_CPUID(r10, 0xc008ae09, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x1) getsockopt(r6, 0x1, 0x10001, &(0x7f0000000040)=""/57, &(0x7f00000000c0)=0x39) 34.624868594s ago: executing program 2 (id=4042): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900), 0x0) (async) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000022c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c6e6fa6000000722c6b"]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000022c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c6e6fa6000000722c6b"]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x15) ioctl$TCFLSH(r4, 0x800455c9, 0x0) (async) ioctl$TCFLSH(r4, 0x800455c9, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x1ce, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a43167614409ee4aa2a40d2feb04bb54137ca025e367e2eee1e8b4f78b741aac17c55ab77d0fd2b7318207e91fd536b9fb7c994a9ad0769020b45bc05965f6dffb15fd462bb2e49632c788cfeb74472be3d9eaf3284719df7187a354b3915df2661363052a24baf8cc101728d302f75878515b436d1fbdb3fc5fc88e8745c56b1bd79dc2cc7e7b5be814275a3edfc67e923d199c97fd6a8b2d11d2923b688471fe8c1e771545d17bad44fc5f7a91cf43ba91b4627c9554a333b6e8ee1c457b54c30bccbbabdfed6158fed6e548cd54ad7409e0a03fb2f685f8987e98ee687a09a730c2a757d3b1595a1146d57230e178284ef3fed5553bbd1e82bd418a13c03f944421d013d96182302122d01c432e24c43a9dff19658a3680167297367a1ee7f70e0968ce28ca2bc8b8525c41f8d4f9cdcaaa25b2d0fea854626eba2e86e"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x1ce, 0x0, &(0x7f0000000580)="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"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) r6 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x0, 0x80) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) utimensat(r6, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0)={{}, {r7, r8/1000+10000}}, 0x100) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0xac, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}, @reply={0x40406301, {0x6, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs={0x40046307, 0x3}, @acquire_done], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0xac, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}, @reply={0x40406301, {0x6, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs={0x40046307, 0x3}, @acquire_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000780)='net/tcp6\x00') writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1) (async) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x222040, 0x0) recvmsg(r10, 0x0, 0x0) read$FUSE(r9, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r3) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r3) sendmsg$BATADV_CMD_TP_METER(r9, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) openat$kvm(0xffffffffffffff9c, 0x0, 0x220ac2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x4000, 0x0) 27.093044216s ago: executing program 5 (id=4160): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @flat=@handle={0x73682a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x3a}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x50, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f61"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x101}) 27.092652306s ago: executing program 5 (id=4161): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"]) 27.092355846s ago: executing program 5 (id=4162): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="6cf8b8e7", 0x4, 0xfffffffffffffffb) keyctl$reject(0x13, r0, 0x1, 0xc27, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$negate(0xd, r0, 0xa, r1) keyctl$search(0xa, r1, &(0x7f0000000140)='trusted\x00', &(0x7f0000000180)={'syz', 0x1}, r1) r2 = request_key(&(0x7f00000001c0)='.dead\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)='.@\x00', r1) keyctl$search(0xa, r2, &(0x7f0000000280)='.request_key_auth\x00', &(0x7f00000002c0)={'syz', 0x2}, r1) keyctl$negate(0xd, r2, 0x4, r2) r3 = add_key(&(0x7f00000003c0)='asymmetric\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000440)="f2917f120c119998634bc427649fbf7cef976a7c8204f2b604ec77ad3f5edd52739deaf8a635fbabfb65eca51212d3e4a1b3cc1336c38a22d5ac0705b4c19b4ad7ef2e8c66ba91e800246f87bdc4b37bb248494ba75ed69baaf16f1e7e33e56124b0713ab83d76d0bf871f0124ba8318504a34dff295c3dde62d94875686f7ee25c20052dd273b79b0b76ef14719d1886a474d14780cc1901401e8c75034af4e9e9b51c54c0aed8b7c4cdec0286a1aa2e3c41acf284aa1ed21f7291196d83feb30b4599e8aa36bf7f4cc9c5de5e65365852572f3b588f0559ae861dec3c2142f69", 0xe1, r1) request_key(&(0x7f0000000300)='cifs.idmap\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)='-#,(\x9f\x00', r3) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000540)='asymmetric\x00') r4 = add_key$user(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000600)="e318ba805f3f9eaeba1ed6a77e27dee1258685cd4d92e42d617accb4234e9c2ad89082d1e32196856273001677f6593c8c77e58e8d8e3a720d3f5dceb70238ca11fbb2f65f626f4ef30095cfec8d657a0d714735aefc4a0615334f8226437bae1678cacf3f5d8fb0404595dda64defc90ece017c1b5f31e1e3da544e2414f1abeb271473a600c0986bfe7e", 0x8b, 0xfffffffffffffff8) r5 = add_key$keyring(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$clear(0x7, r5) keyctl$KEYCTL_MOVE(0x1e, r4, r5, r1, 0x0) r6 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, r5) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) keyctl$get_keyring_id(0x0, r4, 0x2) keyctl$KEYCTL_MOVE(0x1e, r0, r5, r5, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000800)='blacklist\x00', &(0x7f0000000840)=@secondary) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000880)=0x0) read$FUSE(r7, &(0x7f00000008c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, r5, r8, r9) add_key$fscrypt_provisioning(&(0x7f0000002900), &(0x7f0000002940)={'syz', 0x3}, &(0x7f0000002980)={0x2, 0x0, @c}, 0x29, r3) add_key(&(0x7f00000029c0)='rxrpc\x00', &(0x7f0000002a00)={'syz', 0x1}, &(0x7f0000002a40)="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", 0x1000, r3) keyctl$KEYCTL_MOVE(0x1e, r3, r2, r3, 0x0) r10 = add_key$keyring(&(0x7f0000003b00), &(0x7f0000003b40)={'syz', 0x0}, 0x0, 0x0, r6) add_key$user(&(0x7f0000003a40), &(0x7f0000003a80)={'syz', 0x2}, &(0x7f0000003ac0)="8712010eca0146ad18081d68642a810f41485834808a19fbb9d1e401e24ac0632bf6a5e2bb273a904669047a2ad7f883de3c1bfd9721576c", 0x38, r10) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000003b80)=0x3) 27.092061286s ago: executing program 5 (id=4163): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000001) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0xe) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x48) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x17) mmap(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x200000a, 0x12, r0, 0x2546c000) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000b80)='\x00\x00\x03\x06\x00\x00\x00\x05\x00V\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb\xfb\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\vH\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbf]\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e<\xa4\x89\xd9L\xad\xb0V\x8ajo\x9f0\xef\x85\x89\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00TM1\xde\xac\xe3<\xb5\x9c\xec\xd4d\x9eN\xeb\x90d\xce\x9a\x85\xa7\xfa\x9c\'d\x86\xfa\x8e\x00\x12\x1a\xb8\xa8%/\b\xcae\x0003\xae$)\v\xa5\x9a\xe9\xf8\xcc\x84\x88I(\x91\xda\xb4t\vm\xa2)\xad\x9f\xd0E\xc8\xc2\xc5\xad\x87\xb4\xa9\xaa\xdf\xb6\xc6\xce\xdb\xe5\xe5\xdb0(#\xef\x03Rbu\xf9\xdc\r\x85\x18\xec\xb5\xf1x\xa6\xa7\x86.\xa8\xbc\xa8i\xc4\x12\xabW.\xa2\xde@1\x1b\x84\xb3m\x8e\x9e4\x9d+\x12\xe7\x80V\x13\x17@z\xa2\xcd\xa5\x1e\x1a\x85\x11M\xf5[\nZQ\x88\x04~\xa7\x82f\xb6\x8fzci\xd8@\x1a?nK\xbd \xc8AL\xebmD\xee\xc3\"|\xcb\xeb_S\xd9\xe3P\xed8\'X)M\tU\xdcm\x12\xba\x7f\xfej\x04\b\xd4\x8c\xe7\xcc\x12$\xa3\x11y\x06\xa3\x8a\x7f\xc7\xff\xa9F\x132\xe3\x00\xb9\x87\"\xc7\x94g)\xc6\xc7f\xb9\'\'\x85~\x14\xa3\x14\x99j\xe6\x01l\\\x15\xe44\xcc\x17\x1a\xce(\xbf4Us2\xd5RK\x05\x8dh\x01x\xaf\xc7\xa1\x90`\xc9n0v\x7f\x92\xf8\n8R\'\x02{\xc1\xa0\xd0\xf6\x15\xf4\\\xc6\x92\xda)wB\x80\xc3\t\xe6i\'\xe4\xb0\xa0a\t`\xa8]\xd9\xd8\xa8L\']\xe0\xfd-m\xb9|g\xcb^\xc4\xbc\x0e\a\x88s|\xdb4H\x01\xa9\xcb\xc4\xed5!\x8c\xb3e\x13\xe3\xec\xcbhr\x00\xdc=*\x11\x96+\xab2N\x02\xe6!\xbc\xe3\x99Tl\xd9tR\xab$') ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x80086601, &(0x7f0000000040)={'lo\x00', @remote}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f0000000000)) close_range(r0, r0, 0x0) 27.039198067s ago: executing program 5 (id=4164): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000240)={'binder1\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = getpid() sendmsg$netlink(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)={0x10, 0x21, 0x4, 0x70bd28, 0x25dfdbfd}, 0x10}], 0x1, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r5, r2, r3}}}], 0x20, 0x4}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x503dc2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000014d564b00000000af", @ANYRES32]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x255) prctl$PR_SET_MM(0x23, 0x4, &(0x7f00002d5000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000951000/0x1000)=nil) fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x1) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r11) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r11, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@migrate={0x50, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x50}}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) 26.981698668s ago: executing program 5 (id=4165): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fstat(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r3) (async) setuid(0xee00) (async) recvmmsg(r1, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000007c0)=""/280, 0x118}, {&(0x7f0000004c40)=""/4097, 0x1001}, {&(0x7f0000000380)=""/169, 0xa9}, {&(0x7f0000002300)=""/194, 0xc2}], 0x4}, 0x401}, {{0x0, 0x0, 0x0}, 0x3ff}], 0x2, 0x0, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) read(r4, &(0x7f0000000080)=""/93, 0xffffff6c) 26.896779369s ago: executing program 35 (id=4165): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fstat(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r3) (async) setuid(0xee00) (async) recvmmsg(r1, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000007c0)=""/280, 0x118}, {&(0x7f0000004c40)=""/4097, 0x1001}, {&(0x7f0000000380)=""/169, 0xa9}, {&(0x7f0000002300)=""/194, 0xc2}], 0x4}, 0x401}, {{0x0, 0x0, 0x0}, 0x3ff}], 0x2, 0x0, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) read(r4, &(0x7f0000000080)=""/93, 0xffffff6c) 19.46410476s ago: executing program 36 (id=4042): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900), 0x0) (async) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000022c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c6e6fa6000000722c6b"]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000022c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c6e6fa6000000722c6b"]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x15) ioctl$TCFLSH(r4, 0x800455c9, 0x0) (async) ioctl$TCFLSH(r4, 0x800455c9, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x1ce, 0x0, &(0x7f0000000580)="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"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x1ce, 0x0, &(0x7f0000000580)="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"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) r6 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x0, 0x80) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) utimensat(r6, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0)={{}, {r7, r8/1000+10000}}, 0x100) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0xac, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}, @reply={0x40406301, {0x6, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs={0x40046307, 0x3}, @acquire_done], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0xac, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}, @reply={0x40406301, {0x6, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs={0x40046307, 0x3}, @acquire_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000780)='net/tcp6\x00') writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1) (async) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x222040, 0x0) recvmsg(r10, 0x0, 0x0) read$FUSE(r9, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r3) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r3) sendmsg$BATADV_CMD_TP_METER(r9, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) openat$kvm(0xffffffffffffff9c, 0x0, 0x220ac2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x4000, 0x0) 3.305097081s ago: executing program 3 (id=4531): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000040)={0x1000, 0xfffffff9}) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000000c0)='/dev/ttynull\x00', 0x0, r3) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r4, &(0x7f0000000180)={0x18, 0x1, 0x0, {0x7e9b}}, 0x18) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) write$FUSE_IOCTL(r4, &(0x7f0000000200)={0x20, 0xffffffffffffffda, 0x0, {0x4, 0x0, 0x4000000, 0x48}}, 0x20) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000240)) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000280)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000300)={0x0, 0x2f, 0x2, @tid=r6}, &(0x7f0000000340)) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000380)={0x0, 0x83, 0xd66, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={r7, 0x0, 0x1, [0xc42, 0x0, 0xb, 0x10000, 0x8], [0x1, 0x4, 0x2, 0x80000000, 0x300, 0x40, 0x8000000000000001, 0x5, 0xfffffffffffffffa, 0xfffffffffffffff7, 0x6, 0x2, 0x6, 0x5d9, 0x0, 0x8, 0x4, 0x7, 0x1, 0x3, 0x7ff, 0x2, 0xfe, 0xe76, 0x8000, 0x5e8, 0x0, 0x9, 0x3ec5, 0xfffffffffffffffc, 0x9fc0, 0x7, 0xffffffffffffffff, 0x1, 0xc1d5a7d, 0x7fffffff, 0x5, 0x7, 0x40, 0x9, 0x3, 0x3, 0x9, 0x2, 0x80000000, 0x0, 0x3dd, 0x0, 0xfff, 0x3, 0x6, 0x6, 0x7, 0x9, 0x8000, 0x7, 0x7, 0xf, 0x1c, 0x6, 0x2, 0x38d, 0xb2, 0x0, 0x4, 0xfffffffffffffff9, 0x4, 0xfffffffffffffff9, 0x4, 0x2, 0x0, 0x6, 0x8cf, 0xfffffffffffffffb, 0xfffffffffffff09f, 0xe, 0x5, 0x401, 0x8000000000000001, 0x6, 0x2, 0x6, 0x5, 0x200, 0x3, 0x9, 0x7, 0x8d, 0x8a, 0x6e7c, 0x4, 0x2, 0x0, 0x2, 0x6, 0x1, 0xfffffffffffffffc, 0x8001, 0x4, 0x400, 0xa17, 0x0, 0x5, 0x0, 0x0, 0x200, 0x8000, 0xa7e, 0x18, 0x2, 0xffffffff80000000, 0x8ae, 0x8, 0x8f, 0x8, 0x200, 0x4, 0x2, 0x9, 0xfffffffffffffffb, 0x800]}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000bc0)={0x1000, 0x7, 0xdb, 0x1, 0x71, "658dba9ee43eede9bb9dcf9945d975c8ff2236", 0x1, 0xb5}) r8 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000c00), 0x80000, 0x0) r9 = pidfd_getfd(r8, r0, 0x0) sendto$inet_nvme_of_msg(r2, &(0x7f0000000cc0)={@icresp={{0x1, 0x0, 0x80, 0x1, 0x2}, 0x0, 0x0, 0x1, 0x1}, @val=&(0x7f0000000c40)="548481f6a34366053f6a8dd4050c474e4bb30fd4f533707c3744d5c14220c9684235787ecd6b422b3a129d585cd89051adfae28853a098af58acc0574d6610c060ba5b8c64159dc2c06dd0866bcfb0df14b049c6ea8ac9f9e84df9929dac2f8c0056c243260cc9"}, 0x88, 0x0, 0x0, 0x0) dup(r1) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d80), 0x2, 0x0) write$FUSE_OPEN(r10, &(0x7f0000000dc0)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x20) syz_open_dev$tty1(0xc, 0x4, 0x2) unlinkat(r9, &(0x7f0000000e00)='./file0\x00', 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000e40), r11) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000e80)='./binderfs/custom1\x00', 0x802, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r12, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4000) 3.289405272s ago: executing program 3 (id=4532): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x60501, 0x0) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000080)) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r2, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 3.274168681s ago: executing program 3 (id=4533): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x6) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x54, 0x0, &(0x7f0000000300)=[@increfs, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) sendfile(0xffffffffffffffff, r3, 0x0, 0x6) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r2) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x54, 0x0, &(0x7f0000000300)=[@increfs, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (async) 3.219253752s ago: executing program 3 (id=4534): mount$binderfs(0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext']) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00']) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0x525a8c3b, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[]) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) close_range(r1, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x0, 0x0) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x221}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000100)={[0x6, 0x7a, 0x1000, 0x5, 0x1, 0x4, 0x0, 0x8000000000000001, 0x7, 0x0, 0x3, 0x3, 0x5d3, 0x8, 0x1, 0x6], 0x1000, 0x8400}) 3.218880953s ago: executing program 3 (id=4535): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/psched\x00') lseek(r1, 0x14, 0x1) openat(r1, &(0x7f0000000240)='./file0\x00', 0x5a1a8bed95d2e8d3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000780)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x1020001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0xcff52e2f31c8ba9e, {0x42, 0x2, 0x4}}, 0x10) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) fcntl$lock(r4, 0x5, &(0x7f0000000200)={0x1, 0x0, 0x8000000000, 0x100000000007}) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000001540)={{}, {0xffffffffffffffff}, 0x4, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000012c0)="81fed9a746afd98f3f036ccfc767bb78bb4401f3972ccf0022cde32fc7c2206e7eced0022cf3476b599293c10c4d836d2c90e787cf291761fe651306236187196d92bb0880dd5ce654f520b5f88f2eb757ea13087d5513418f9e46d40b7368d78fb18313d421edb0a71239ce2f81f4ce6a873c9a39d7813cc126921fdaf7b88c4872091c9ff1924be48f330b4a67951f80ae06f9860a60267856917afa7b2fea9d1674c4", 0xa4, 0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0200000075010000010000000c6a000000a4e4f2d8eda8567aa103649c1d5af59660721624ba2045642c5c69032f70ac602c33225e661bd6cbbb2b0334982aa75af864a51da3ea8b10d0694ed99cb6b795f6d818e77e7ed1433c48bc08609615804695516064188cb849bacec4c56094dcbcbdac536671b19f543afe0000008322292e5f9e4e7f787a878bacf51e16f102d87b32c14756974d34aa6a63022eb8081db66e82494a615f1b52fbd8cba29ae0345ff12c8ab1bbe19ffecd150c6126731b7e31f9cf15f26f5215fb8e1ff034707c8ee1df357b90761cd532a98ab8078e407dae214a8c283618965c92ea743a4ca7f65d48796e8a0c4e29d8ac19aa171959609b5af3bccb3b0213f72c1f9ef09985de488716a69e25a0bd10bc6b903aa7b7a308eafcb53c11a9e5179e565a0d7f1d2c400a92dd8fd47ff54eb4a63cad940f9bb702cc878864defc01aad9a7d5887ff6cbf461a45e175fc69a4471f46bc00457881d763d9f8bbfc8c956ea3f106f23000000cc52a58dab200cecefec65cc3038613a649dab9eecd469c80e6915bbb682d000"/416], 0x1a4}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) r7 = syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x80}, &(0x7f0000000100), &(0x7f0000000080)) recvmmsg(r6, &(0x7f000000a900)=[{{0x0, 0x0, 0x0}, 0xe}], 0x1, 0x40002100, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000015c0)={0xaa, 0x508}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @flat=@handle={0x73682a85, 0x1100}, @ptr={0x70742a85, 0x1, &(0x7f00000002c0)=""/4096, 0x1000, 0x0, 0x40}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2) 2.787263159s ago: executing program 6 (id=4538): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder-control\x00', 0x2, 0x0) r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) splice(r1, &(0x7f0000000040)=0x7, r2, 0x0, 0x3, 0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000000c0)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000002c0)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000180)=0x1) close(0x3) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) fgetxattr(r4, &(0x7f0000000400)=@known='system.sockprotoname\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff}, &(0x7f0000000540)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) syz_open_dev$hiddev(&(0x7f0000000040), 0xa87, 0x2100) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.786223669s ago: executing program 6 (id=4539): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0xfffffffffffffffd, 0x2, 0x36}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x1100, 0x1}}, &(0x7f0000000280)={0x0, 0x20, 0x48}}, 0x10}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xf, 0x3}) 2.785062828s ago: executing program 6 (id=4540): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000040)) (async) syz_usb_connect(0x3, 0x3d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010002a91d21402577a8b046070102030109022b00010400000009045f00020103df000905050008000200e509050102080001000007"], 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x3}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='schedstat\x00') (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4b, 0x0, 0x0) (async) pread64(r3, &(0x7f0000000480)=""/14, 0xd, 0x8000) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (async, rerun: 64) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_NMI(r8, 0xae9a) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f00000001c0)=@x86={0x1, 0x5, 0xb, 0x0, 0x2, 0x6, 0x6, 0x9, 0x8, 0x8, 0x6, 0x2, 0x0, 0x6, 0x6, 0xe2, 0x1, 0x29, 0x0, '\x00', 0x10, 0x6}) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) (async, rerun: 64) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') (async, rerun: 64) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2.01736501s ago: executing program 6 (id=4547): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000011000001000000000000000000000000000000000056fcffff000000000000040006000000000000000000"]) (async) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000011000001000000000000000000000000000000000056fcffff000000000000040006000000000000000000"]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000b, 0x12, r4, 0x20000000) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x11, &(0x7f0000000040)=0x2, 0x4) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="81002d355740c42cff147c0300000000000091040c000000"]) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="81002d355740c42cff147c0300000000000091040c000000"]) r6 = socket(0x2a, 0x803, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r8 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) (async) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x81, @any, 0x0, 0x2}, 0xe) listen(r7, 0x5) ioctl$sock_SIOCINQ(r7, 0x541b, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x8982, &(0x7f0000000000)={0x1, '\x00', {}, 0x6}) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0xe08c2, 0x12a) (async) openat(0xffffffffffffff9c, 0x0, 0xe08c2, 0x12a) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r9, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) setsockopt$inet6_tcp_int(r9, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r9, &(0x7f0000000640)='\x00', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011101000000086a058400000000000001090224000100fcff0b090400f4000300020009210600be012207000905810320000000ff"], 0x0) shutdown(r9, 0x1) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') close_range(r0, 0xffffffffffffffff, 0x0) 1.935648991s ago: executing program 7 (id=4548): ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x9, 0xdc1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'ip_vti0\x00', 0x3}, 0x18) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'ip_vti0\x00', 0x3}, 0x18) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) (async) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) syz_io_uring_setup(0x3b45, &(0x7f0000000000)={0x0, 0xc5f8, 0x8, 0x1, 0xc3}, 0x0, 0x0) (async) r4 = syz_io_uring_setup(0x3b45, &(0x7f0000000000)={0x0, 0xc5f8, 0x8, 0x1, 0xc3}, 0x0, 0x0) sendfile(r1, r4, 0x0, 0xa) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket$inet6(0xa, 0xa, 0x26) socket(0x80000000000000a, 0x2, 0x0) (async) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) (async) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffd}}}, 0x108) close_range(r5, 0xffffffffffffffff, 0x0) (async) close_range(r5, 0xffffffffffffffff, 0x0) r7 = syz_create_resource$binfmt(&(0x7f0000000100)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r7, 0x41, 0x1ff) 1.420574609s ago: executing program 7 (id=4551): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x120020, &(0x7f0000000000)=ANY=[@ANYBLOB='defcontext', @ANYRESOCT]) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x9, 0x0) fadvise64(r0, 0xffff, 0x8, 0x4) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x120020, &(0x7f0000000000)=ANY=[@ANYBLOB='defcontext', @ANYRESOCT]) (async) syz_open_dev$MSR(&(0x7f0000000040), 0x9, 0x0) (async) fadvise64(r0, 0xffff, 0x8, 0x4) (async) 1.36732052s ago: executing program 7 (id=4552): socket$inet6_udp(0xa, 0x2, 0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, 0x0, &(0x7f0000000180)) getsockopt$inet6_buf(r0, 0x29, 0x2c, &(0x7f0000000340)=""/25, &(0x7f0000000380)=0x19) socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) write(r0, &(0x7f0000000240)="00c9a797c656250be5b7b7533d391fb8f66f512559f7cc75d0f83e1f6125384e44162a32fff7e7ad059908182eee5ae865fed7ec052f9871383ee8a99a4eb18f51b6436f8cd14be14befaa6c39d64df41fd370c6dba870d233820f3e692577256779b944e118282ea802789b42b68563840318c2028ffd228ccc2d1b7830fa9e05cb3fcf29ff77b0a9511b016ba56472fe5a6c4d524c49f25c0b8cb5e4e546bdb16ba7c3f5263d5abce3eef130d0bcbe24014f73c49cf9709fad96cbe902614f0e2e3458eda2b46452f72d206eccdc0cf347031cf5f5fde07e47348caf", 0xdd) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000003c0)={'syzkaller1\x00'}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0107000000000000000067000000080008000c"], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x0) (async) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0107000000000000000067000000080008000c"], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000000), 0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x7, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x7, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 1.36700273s ago: executing program 7 (id=4553): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0400000000"], 0x14}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) faccessat(0xffffffffffffffff, 0x0, 0x3) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="b901010040b8e0e7265eba000000000f30b93f0300000f32c4e1ffe669fe0f01c2360f225bc4e2112c17b9ef0b00000f320f015b46b9800000c00f3235004000000f30c4e219cf97f9000000", 0x4c}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r1) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r1) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x54, r5, 0x819, 0x70bda6, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\x05\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}]}, 0x54}, 0x1, 0x0, 0x0, 0x1013}, 0x840) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xffffffffffffff7e, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xda}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r8, 0x10000002) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000440)={0x9}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r10, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40840) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r11}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) r12 = inotify_init() poll(&(0x7f0000000000)=[{r12, 0xd408}], 0x1, 0x1) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000100)={0x18, 0x0, &(0x7f0000000180)=[@decrefs, @clear_death], 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) 1.35582274s ago: executing program 7 (id=4555): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r1, 0x29, 0x12, 0x0, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0xf}, @ipv4={'\x00', '\xff\xff', @loopback}, @local, 0x5, 0xda69, 0x5, 0x0, 0x3, 0x800000}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x3) socket$netlink(0x10, 0x3, 0x6) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r3, 0x107, 0x6, 0x0, &(0x7f0000000040)) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r4, 0x45809000) r5 = socket$packet(0x11, 0x2, 0x300) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, &(0x7f0000000080)={0x2, 0x0, [{0x80000007, 0xac, 0xfffffffb, 0xedb, 0x200}, {0x40000001, 0x5, 0x3, 0x140, 0x400003}]}) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$printer(r9, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000140)={0x0, 0x0, 0x4, 'v\x00-q'}, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x2200, 0xe0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r12 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r12, &(0x7f00000002c0)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\t'], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r12, 0x0, 0x0) syz_usb_control_io$hid(r12, &(0x7f0000001c40)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r13 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r13, 0xc018aec0, &(0x7f00000000c0)={0xfe7f}) ioctl$FS_IOC_RESVSP(r10, 0x4030582b, &(0x7f0000000300)={0x1100, 0x2, 0x75, 0x2a40}) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0)=0x3cd6, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) 834.185138ms ago: executing program 7 (id=4559): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x0, 0x2, 0x1b9, 0x7fffffff}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r2, 0x28, 0x0, 0x0, 0x0) fcntl$lock(r1, 0x5, &(0x7f0000000140)={0x0, 0x1, 0x4, 0x7}) getdents(r1, &(0x7f0000000300)=""/223, 0xdf) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x10}], 0x5b, 0x0, 0x0}) r3 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read$msr(r3, &(0x7f00000002c0)=""/195, 0xc3) openat$cgroup_ro(r3, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0) 734.344769ms ago: executing program 6 (id=4560): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) (async) pidfd_getfd(r0, r0, 0x0) 675.27358ms ago: executing program 6 (id=4561): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0xa, 0x2}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000011c0)={0x3, 0x100, 0x0, 0x8000005, 0x590f, 0x9}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x14, r5, 0x5, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r6 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r6, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x24000048, &(0x7f00000001c0)={0xa, 0x4e20, 0xfffffffd, @remote, 0x9}, 0x1c) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x52, 0x0, &(0x7f0000000200)="1920ff09471b1099c796a80bc405843aed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f61294800000000"}) 342.595235ms ago: executing program 8 (id=4565): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000340)=0x5, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x401c5820, &(0x7f0000000080)={'bridge_slave_1\x00', @remote}) close(r2) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x4000, 0xa8, 0x7}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000000580)=""/176, 0xb0) getdents(r3, &(0x7f0000000080)=""/102, 0x66) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x27}}, 0x1c, 0x0}}], 0x1, 0xc040) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) getsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, &(0x7f0000000040)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) r8 = fcntl$dupfd(r7, 0x0, r7) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$WG_CMD_GET_DEVICE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000340)=ANY=[], 0x2b08}}, 0x4004006) recvmmsg(r7, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/106, 0x6a}], 0x1}, 0x4}], 0x1, 0x40000002, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) 274.415926ms ago: executing program 8 (id=4566): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r1) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x11) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xfff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x40084) 226.489127ms ago: executing program 8 (id=4567): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) prctl$PR_SET_VMA(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil, 0xbcaaf1788315a778, &(0x7f0000000140)='\x9a\xb5\xbe1\x9cMP\xae\x93\x10\xb0\xcfv\xac\xdd\"\xd65\x01 \xef\x10\xd6%\xf4`cq\x1ddG\xd4BN\x15\xdaX\x03\xdc\xe9;hxX\xa1\xe7\xa3\rZ,\xbb\n\x92K\xd6\xc8\xf2\x97F&\xe0\xd3\xd3\x11 Y\x04\x82\x1a\xe5\x8d\xf4\xf1\xc7\x8eL\x03O\x9b\xf4\xa7\x04\n\xbc&\x1b\x88?\\~n*\x02\xef\xce\xe4\x9a|\xe1n\x86\x93\x92\xed\xc1\x1bv1\xbd\x85\xd1\xdbv>\x99\x82\x19\xf3\xe6\x17\'\xfc\x17\x8b\xf2\xba\xd8\xb2c\xeb\xffK\x9b\x1b\x0f\xf1\xa7[G\x89\xb7\x9dp#F1\x16\x8b\x11`\xcd[\x9c\xac\t)\xd8R\xc7\xac\xc8I?\xe4u\x8b\x81\xa3\xe4 \xfbt\xd5\\\x02\xab\x00E#o-v*\xff\xf0yTG\xca\'\xed.\x878\xc4\x81\x06\xe9\x7fL\xf6\xf0X\r\x1f\xaaq\xa5/\x91\xec\xc0,\x01Z\x91\xc3\x95\x14<\v>P\xe1\xff\x1d\x14\x9c\'\x95\x00\x00\x00\x00\xe6Jg\x8b\x85pT\x87\x89r\xd2\xafei\x84\x82O\xae\x80\xe2\xad\xac\xfa\xd8\xa4\xf6\x03\xb5\x18,\xc2\xae}\x11>\xce\xba\x8a0\a\x85g\xde\xde\xafT.\xa9V>o\xed\xca\xd6\xf0\x19\x90\xb4l\xff\x13\x14\xea;\x8f\x93wUoFE') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) (async) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) io_setup(0x9, &(0x7f0000000280)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x0, 0xf}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x0, 0xf}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x1f}, 0x71, r7}) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x1f}, 0x71, r7}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f00000002c0)={'gretap0\x00', r7, 0x80, 0x8000, 0x1ff, 0x4, {{0x29, 0x4, 0x1, 0x8, 0xa4, 0x66, 0x0, 0xcf, 0x29, 0x0, @rand_addr=0x64010102, @local, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x2c, 0x95, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast1, 0x8}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x7}, {@multicast1, 0x7}, {@multicast2, 0x4}]}, @timestamp_prespec={0x44, 0x1c, 0x22, 0x3, 0x4, [{@broadcast, 0xffff591f}, {@local, 0x1}, {@loopback, 0x4}]}, @end, @cipso={0x86, 0x41, 0x1, [{0x0, 0x4, "f3ed"}, {0x0, 0x9, "0751aae75c0daf"}, {0x5, 0x2}, {0x5, 0x5, "1dcd75"}, {0x2, 0x11, "858eb1b7cf083b9bcc25e1d0f8f754"}, {0x1, 0x7, "b0a87e306b"}, {0x2, 0xf, "6e2100ad90ffe44ce50b8c6b49"}]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f00000002c0)={'gretap0\x00', r7, 0x80, 0x8000, 0x1ff, 0x4, {{0x29, 0x4, 0x1, 0x8, 0xa4, 0x66, 0x0, 0xcf, 0x29, 0x0, @rand_addr=0x64010102, @local, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x2c, 0x95, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast1, 0x8}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x7}, {@multicast1, 0x7}, {@multicast2, 0x4}]}, @timestamp_prespec={0x44, 0x1c, 0x22, 0x3, 0x4, [{@broadcast, 0xffff591f}, {@local, 0x1}, {@loopback, 0x4}]}, @end, @cipso={0x86, 0x41, 0x1, [{0x0, 0x4, "f3ed"}, {0x0, 0x9, "0751aae75c0daf"}, {0x5, 0x2}, {0x5, 0x5, "1dcd75"}, {0x2, 0x11, "858eb1b7cf083b9bcc25e1d0f8f754"}, {0x1, 0x7, "b0a87e306b"}, {0x2, 0xf, "6e2100ad90ffe44ce50b8c6b49"}]}]}}}}}) writev(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)='\x00', 0x1}, {&(0x7f0000000400)="f48a64f6e3713c89dac69813ff5450bb295a23477536941e4ef1d840b51b92cd0c1524a6dba3b626261f590e1407ab377b5ebc25f825fcc4bf4efb5c3595a5de8fd1", 0x42}], 0x2) 63.17281ms ago: executing program 8 (id=4568): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000140)=0x100000001, 0x4) socket$inet6(0xa, 0x2, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x33, 0x0, 0x0) (async) setsockopt$inet6_int(r3, 0x29, 0x33, 0x0, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) ioctl$BLKBSZGET(r4, 0x80081270, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x1010, r4, 0x12000) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x9, @private2, 0x8}, 0x1c) 54.48469ms ago: executing program 3 (id=4569): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0xa, 0xfffffffc) getdents64(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x2a) syz_usb_connect$uac1(0x1, 0xa4, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYRES64=r3, @ANYRES32=0x0, @ANYRESDEC], 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000800)="ba4000b8e6008ed03b940f73da0eccb8f0028ed80f23d80f21f86635800000200f238c66b9800000c00f326635000400000f306c0ffcdf36efddc666b9800000c0c4c249cf9009186635004000000f300f01c4", 0x53}], 0x1, 0x1a, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000280)={0x1, 0x1f000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="4d000000700a68d4f2e683cbad90b82073b79284091b6ff7bdf46c8cce86aeb99d5362d39a2987e921756ec38db812530842805d4cf862eb7195595855b5705e9d7009da3dcff1ac51532e4f3a5e3738cf3f01e02829a3bd3d0d7ce525bd1a2d5b4eead515e50ba6ebbcf2", @ANYRES16=r7, @ANYBLOB="000129bd7000fbdbdf251200000008000800060000000800070002000000080008000a65ffff08000700080000000800090005000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20040014}, 0x4845) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r8, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) 14.7272ms ago: executing program 8 (id=4570): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000000)=[@increfs_done={0x40106308, 0x3}, @acquire={0x40046305, 0x2}, @exit_looper, @exit_looper], 0x0, 0x0, 0x0}) 0s ago: executing program 8 (id=4571): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000240)={0x4a4, 0xdddd0000, 0x6}) (async) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000240)={0x4a4, 0xdddd0000, 0x6}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r4, &(0x7f0000000840)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x3], [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x3, 0x0, 0x4, 0x0, 0xffeffffe, 0x0, 0x5], [0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5b2bb47c], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x239]}, 0x45c) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc040}, 0x0) sendmmsg$unix(r6, &(0x7f00000000c0), 0x3f, 0x0) (async) sendmmsg$unix(r6, &(0x7f00000000c0), 0x3f, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000780)="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", 0x2000, 0x0) (async) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000780)="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", 0x2000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r9, 0x4048ae9b, &(0x7f0000000200)={0x40001, 0x0, [0x2, 0x8, 0x1, 0xfd7, 0x7ff, 0x10, 0x5, 0x7]}) (async) ioctl$KVM_SET_GUEST_DEBUG(r9, 0x4048ae9b, &(0x7f0000000200)={0x40001, 0x0, [0x2, 0x8, 0x1, 0xfd7, 0x7ff, 0x10, 0x5, 0x7]}) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r10, 0x0, 0x1, &(0x7f0000000000)=0x7, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000300)={[0x5836, 0x8, 0x8, 0x4000000000000e51, 0x1, 0x5479, 0x103d, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x8000000000004, 0xa73], 0x2000, 0x180d54}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000100)=[@release={0x40046306, 0x1}], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000100)=[@release={0x40046306, 0x1}], 0x0, 0x1000000000000, 0x0}) kernel console output (not intermixed with test programs): 5.081580][ T36] audit: type=1326 audit(1750606667.365:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7885 comm="syz.3.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140898e929 code=0x7ffc0000 [ 195.105458][ T36] audit: type=1326 audit(1750606667.365:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7885 comm="syz.3.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f140898e929 code=0x7ffc0000 [ 195.252005][ T7898] @: renamed from vlan0 (while UP) [ 196.383672][ T7950] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 197.014108][ T7965] netlink: 'syz.2.2707': attribute type 4 has an invalid length. [ 197.046873][ T6931] usb 7-1: USB disconnect, device number 18 [ 197.065742][ T7970] overlayfs: failed to clone upperpath [ 197.072299][ T7970] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 197.081235][ T7970] overlayfs: missing 'lowerdir' [ 197.246522][ T7983] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 197.256667][ T7983] Bluetooth: hci0: Frame reassembly failed (-84) [ 197.294909][ T7983] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 197.295163][ T5687] Bluetooth: hci0: Frame reassembly failed (-84) [ 197.772960][ T6931] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 197.922981][ T6931] usb 7-1: Using ep0 maxpacket: 16 [ 197.929225][ T6931] usb 7-1: config 0 has an invalid interface number: 253 but max is 0 [ 197.937496][ T6931] usb 7-1: config 0 has no interface number 0 [ 197.943691][ T6931] usb 7-1: config 0 interface 253 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 197.953657][ T6931] usb 7-1: config 0 interface 253 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 197.963701][ T6931] usb 7-1: config 0 interface 253 has no altsetting 0 [ 197.972691][ T6931] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=35.be [ 197.981895][ T6931] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.989923][ T6931] usb 7-1: Product: syz [ 197.994458][ T6931] usb 7-1: Manufacturer: syz [ 197.999070][ T6931] usb 7-1: SerialNumber: syz [ 198.004498][ T6931] usb 7-1: config 0 descriptor?? [ 198.009810][ T8004] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 198.017054][ T8004] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 198.025118][ T6931] usbhid 7-1:0.253: couldn't find an input interrupt endpoint [ 198.225854][ T45] usb 7-1: USB disconnect, device number 19 [ 198.329093][ T8034] netlink: 'syz.2.2732': attribute type 11 has an invalid length. [ 198.337023][ T8034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2732'. [ 198.946588][ T8069] fuse: Bad value for 'user_id' [ 198.951470][ T8069] fuse: Bad value for 'user_id' [ 198.982966][ T62] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 199.134158][ T62] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.144340][ T62] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 199.154752][ T62] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 199.163857][ T62] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.171879][ T62] usb 7-1: Product: syz [ 199.176270][ T62] usb 7-1: Manufacturer: syz [ 199.181170][ T62] usb 7-1: SerialNumber: syz [ 199.273398][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 199.334766][ T8098] overlayfs: failed to resolve './file1/file0': -20 [ 199.391861][ T62] usb 7-1: 0:2 : does not exist [ 199.403614][ T62] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 199.414299][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 199.414315][ T36] audit: type=1400 audit(1750606671.835:853): avc: denied { bpf } for pid=8117 comm="syz.5.2763" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 199.442297][ T62] usb 7-1: USB disconnect, device number 20 [ 199.488014][ T8124] binder: Unknown parameter 'selabelֻ#Q1whE' [ 199.578924][ T8143] overlayfs: failed to clone upperpath [ 199.622656][ T7578] udevd[7578]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 199.670864][ T8157] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 199.724826][ T8162] fuse: Bad value for 'fd' [ 199.973149][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 200.125541][ T10] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 200.135928][ T10] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 200.148022][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 200.157370][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.165777][ T10] usb 4-1: Product: syz [ 200.170267][ T10] usb 4-1: Manufacturer: syz [ 200.175207][ T10] usb 4-1: SerialNumber: syz [ 200.509517][ T36] audit: type=1326 audit(1750606672.925:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8189 comm="syz.6.2790" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1809f8e929 code=0x0 [ 200.559741][ T8201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8201 comm=syz.2.2794 [ 200.572346][ T8201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8201 comm=syz.2.2794 [ 200.585123][ T8201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8201 comm=syz.2.2794 [ 200.597797][ T8201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8201 comm=syz.2.2794 [ 200.602117][ T8161] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 200.611201][ T8201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8201 comm=syz.2.2794 [ 200.619432][ T8161] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 200.630624][ T8201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8201 comm=syz.2.2794 [ 201.082241][ T8209] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2796'. [ 201.293748][ T8216] rust_binder: Error while translating object. [ 201.293781][ T8216] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 201.300025][ T8216] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:462 [ 201.702972][ T783] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 201.862984][ T783] usb 7-1: Using ep0 maxpacket: 16 [ 201.869256][ T783] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.879513][ T783] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 201.893543][ T783] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 201.902819][ T783] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 201.910885][ T783] usb 7-1: SerialNumber: syz [ 201.917128][ T783] usb 7-1: bad CDC descriptors [ 201.961992][ T36] audit: type=1326 audit(1750606930.372:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8237 comm="syz.2.2806" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb77c58e929 code=0x0 [ 202.119066][ T8236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.127701][ T8236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.139148][ T306] usb 7-1: USB disconnect, device number 21 [ 202.721049][ T10] cdc_ncm 4-1:1.0: SET_CRC_MODE failed [ 202.727401][ T10] cdc_ncm 4-1:1.0: SET_NTB_FORMAT failed [ 202.735316][ T8243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2808'. [ 202.783809][ T10] cdc_ncm 4-1:1.0: bind() failure [ 202.790181][ T10] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 202.791336][ T36] audit: type=1400 audit(1750606931.202:856): avc: denied { setattr } for pid=8242 comm="syz.3.2808" path="socket:[38768]" dev="sockfs" ino=38768 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 202.797098][ T10] cdc_ncm 4-1:1.1: bind() failure [ 202.833001][ T10] usb 4-1: USB disconnect, device number 23 [ 202.885160][ T36] audit: type=1400 audit(1750606931.302:857): avc: denied { setattr } for pid=8251 comm="syz.3.2812" name="HIDP" dev="sockfs" ino=39614 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 202.896571][ T8252] rust_binder: Error while translating object. [ 202.908420][ T8252] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 202.915223][ T8252] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:468 [ 202.927353][ T8252] overlay: ./file0 is not a directory [ 203.073010][ T8260] rust_binder: Write failure EFAULT in pid:470 [ 203.118335][ T8276] netlink: 'syz.2.2820': attribute type 5 has an invalid length. [ 203.132563][ T8276] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.2820'. [ 203.159145][ T8279] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:474 [ 203.176244][ T8284] rust_binder: Error while translating object. [ 203.185505][ T8284] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 203.191709][ T8284] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:476 [ 203.434481][ T8304] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 203.443701][ T8304] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 203.450341][ T8304] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 203.456897][ T8304] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 203.464297][ T8304] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 203.470810][ T8304] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 203.477318][ T8304] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 203.483852][ T8304] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 203.508745][ T8310] binder: Unknown parameter 'fscontext?}' [ 203.521850][ T8310] binder: Unknown parameter 'fscontext?}' [ 203.538748][ T8315] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:498 [ 203.539339][ T8316] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 203.548641][ T8316] rust_binder: Read failure Err(EFAULT) in pid:498 [ 203.609073][ T8323] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 203.625997][ T36] audit: type=1400 audit(1750606932.042:858): avc: denied { setattr } for pid=8322 comm="syz.6.2836" name="UDPLITEv6" dev="sockfs" ino=39973 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 203.663189][ T1461] Bluetooth: hci0: Frame reassembly failed (-84) [ 203.669800][ T8325] Bluetooth: hci0: Frame reassembly failed (-84) [ 204.203996][ T36] audit: type=1326 audit(1750606932.622:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8355 comm="syz.5.2846" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f39ac18e929 code=0x0 [ 204.354550][ T8359] overlayfs: conflicting options: verity=require,redirect_dir=nofollow [ 204.387901][ T36] audit: type=1400 audit(1750606932.802:860): avc: granted { setsecparam } for pid=8361 comm="syz.3.2848" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 204.418171][ T36] audit: type=1326 audit(1750606932.832:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8361 comm="syz.3.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140898e929 code=0x7ffc0000 [ 204.446260][ T36] audit: type=1326 audit(1750606932.832:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8361 comm="syz.3.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140898e929 code=0x7ffc0000 [ 204.471408][ T8367] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 204.499811][ T8374] can0: slcan on ptm1. [ 204.753000][ T783] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 204.904440][ T783] usb 4-1: unable to get BOS descriptor or descriptor too short [ 204.912818][ T783] usb 4-1: config 6 has an invalid interface number: 200 but max is 0 [ 204.921062][ T783] usb 4-1: config 6 has no interface number 0 [ 204.927210][ T783] usb 4-1: config 6 interface 200 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 204.940204][ T783] usb 4-1: config 6 interface 200 has no altsetting 0 [ 204.948572][ T783] usb 4-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 204.957701][ T783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.965741][ T783] usb 4-1: Product: syz [ 204.969925][ T783] usb 4-1: Manufacturer: syz [ 204.974677][ T783] usb 4-1: SerialNumber: syz [ 205.083787][ T8400] overlayfs: failed to clone upperpath [ 205.110366][ T36] audit: type=1326 audit(1750606933.522:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8412 comm="syz.5.2859" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f39ac18e929 code=0x7fbf0000 [ 205.551674][ T8423] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2862'. [ 205.611794][ T8430] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2864'. [ 205.673046][ T326] Bluetooth: hci0: command 0x1003 tx timeout [ 205.679142][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 205.719757][ T8449] binder: Bad value for 'defcontext' [ 205.729006][ T36] audit: type=1400 audit(1750606934.152:864): avc: denied { accept } for pid=8450 comm="syz.2.2871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 205.739842][ T8449] @: renamed from vlan0 (while UP) [ 205.877442][ T8465] overlayfs: failed to clone upperpath [ 206.045668][ T8476] fuse: Bad value for 'fd' [ 206.132950][ T6931] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 206.300318][ T6931] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.313207][ T6931] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.332131][ T6931] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 206.343455][ T6931] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.356229][ T6931] usb 7-1: config 0 descriptor?? [ 206.727016][ T36] audit: type=1400 audit(1750606935.142:865): avc: denied { mount } for pid=8488 comm="syz.2.2884" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 207.070900][ T36] audit: type=1400 audit(1750606935.482:866): avc: denied { audit_write } for pid=8520 comm="syz.2.2894" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 207.165580][ T36] audit: type=1400 audit(1750606935.582:867): avc: denied { append } for pid=8466 comm="syz.6.2877" name="001" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 207.193026][ T6931] uclogic 0003:256C:006D.000E: failed retrieving Huion firmware version: -71 [ 207.203711][ T6931] uclogic 0003:256C:006D.000E: failed probing parameters: -71 [ 207.211352][ T6931] uclogic 0003:256C:006D.000E: probe with driver uclogic failed with error -71 [ 207.220441][ T36] audit: type=1400 audit(1750606935.622:868): avc: denied { map } for pid=8524 comm="syz.2.2896" path="socket:[40218]" dev="sockfs" ino=40218 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 207.245371][ T6931] usb 7-1: USB disconnect, device number 22 [ 207.262525][ T36] audit: type=1400 audit(1750606935.622:869): avc: denied { read } for pid=8524 comm="syz.2.2896" path="socket:[40218]" dev="sockfs" ino=40218 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 207.511786][ T783] usb 4-1: USB disconnect, device number 24 [ 207.543654][ T8371] can0 (unregistered): slcan off ptm1. [ 207.719592][ T8555] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2903'. [ 207.734846][ T36] audit: type=1400 audit(1750606936.152:870): avc: denied { ioctl } for pid=8554 comm="syz.6.2903" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:modules_conf_t:s0" [ 207.807318][ T8560] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:302 [ 207.822304][ T8564] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 207.831643][ T8564] rust_binder: Error while translating object. [ 207.844357][ T8564] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 207.850628][ T8564] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:523 [ 207.950916][ T36] audit: type=1326 audit(1750606936.362:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8583 comm="syz.2.2910" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb77c58e929 code=0x0 [ 208.067540][ T8612] overlayfs: failed to clone upperpath [ 208.073994][ T8612] Invalid ELF header magic: != ELF [ 208.143057][ T783] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 208.252992][ T306] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 208.294179][ T783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.305191][ T783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.316235][ T783] usb 4-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00 [ 208.325350][ T783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.334307][ T783] usb 4-1: config 0 descriptor?? [ 208.340343][ T783] usbhid 4-1:0.0: can't add hid device: -22 [ 208.346416][ T783] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 208.382957][ T306] usb 7-1: device descriptor read/64, error -71 [ 208.623010][ T306] usb 7-1: device descriptor read/64, error -71 [ 208.862972][ T306] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 209.002957][ T306] usb 7-1: device descriptor read/64, error -71 [ 209.243217][ T306] usb 7-1: device descriptor read/64, error -71 [ 209.371944][ T306] usb usb7-port1: attempt power cycle [ 209.480413][ T8695] overlayfs: failed to clone upperpath [ 209.713017][ T306] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 209.734127][ T306] usb 7-1: device descriptor read/8, error -71 [ 209.863997][ T306] usb 7-1: device descriptor read/8, error -71 [ 210.054315][ T36] audit: type=1400 audit(1750606938.472:872): avc: denied { execmod } for pid=8725 comm="syz.2.2953" path="/dev/rnullb0" dev="tmpfs" ino=464 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 210.102959][ T306] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 210.125380][ T306] usb 7-1: device descriptor read/8, error -71 [ 210.254141][ T306] usb 7-1: device descriptor read/8, error -71 [ 210.363171][ T306] usb usb7-port1: unable to enumerate USB device [ 210.913670][ T783] usb 4-1: USB disconnect, device number 25 [ 211.033492][ T8757] rust_binder: Got transaction with invalid offset. [ 211.033541][ T8757] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 211.040577][ T36] audit: type=1326 audit(1750606939.452:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8758 comm="syz.6.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1809f8e929 code=0x7ffc0000 [ 211.060145][ T8757] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:531 [ 211.074554][ T36] audit: type=1326 audit(1750606939.452:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8758 comm="syz.6.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1809f8e929 code=0x7ffc0000 [ 211.107125][ T36] audit: type=1326 audit(1750606939.452:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8758 comm="syz.6.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f1809f8e929 code=0x7ffc0000 [ 211.130543][ T36] audit: type=1326 audit(1750606939.452:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8758 comm="syz.6.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1809f8e963 code=0x7ffc0000 [ 211.154059][ T36] audit: type=1326 audit(1750606939.452:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8758 comm="syz.6.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1809f8e929 code=0x7ffc0000 [ 211.177526][ T36] audit: type=1326 audit(1750606939.452:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8758 comm="syz.6.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f1809f8e929 code=0x7ffc0000 [ 211.201174][ T36] audit: type=1326 audit(1750606939.452:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8758 comm="syz.6.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1809f8e929 code=0x7ffc0000 [ 211.225311][ T36] audit: type=1326 audit(1750606939.452:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8758 comm="syz.6.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f1809f8e929 code=0x7ffc0000 [ 211.248961][ T36] audit: type=1326 audit(1750606939.452:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8758 comm="syz.6.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1809f8e929 code=0x7ffc0000 [ 211.844226][ T8787] input: syz1 as /devices/virtual/input/input25 [ 212.462979][ T6931] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 212.592940][ T6931] usb 7-1: device descriptor read/64, error -71 [ 212.753908][ T8874] input: syz0 as /devices/virtual/input/input26 [ 212.766118][ T8874] input: failed to attach handler leds to device input26, error: -6 [ 212.832961][ T6931] usb 7-1: device descriptor read/64, error -71 [ 212.847748][ T8883] overlayfs: failed to clone upperpath [ 213.072961][ T6931] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 213.202955][ T6931] usb 7-1: device descriptor read/64, error -71 [ 213.442948][ T6931] usb 7-1: device descriptor read/64, error -71 [ 213.553033][ T6931] usb usb7-port1: attempt power cycle [ 213.773437][ T8902] fuse: Bad value for 'fd' [ 213.892961][ T6931] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 213.914029][ T6931] usb 7-1: device descriptor read/8, error -71 [ 214.044084][ T6931] usb 7-1: device descriptor read/8, error -71 [ 214.282941][ T6931] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 214.304251][ T6931] usb 7-1: device descriptor read/8, error -71 [ 214.443953][ T6931] usb 7-1: device descriptor read/8, error -71 [ 214.554743][ T6931] usb usb7-port1: unable to enumerate USB device [ 214.608096][ T8935] overlayfs: failed to clone upperpath [ 215.036868][ T8949] rust_binder: Write failure EFAULT in pid:328 [ 215.422963][ T6931] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 215.581390][ T8990] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3048'. [ 215.592943][ T6931] usb 7-1: Using ep0 maxpacket: 32 [ 215.600599][ T6931] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.611202][ T6931] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 215.623087][ T6931] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 215.632192][ T6931] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.640247][ T6931] usb 7-1: Product: syz [ 215.644566][ T6931] usb 7-1: Manufacturer: syz [ 215.649187][ T6931] usb 7-1: SerialNumber: syz [ 215.857209][ T6931] usb 7-1: 0:2 : does not exist [ 215.866537][ T6931] usb 7-1: USB disconnect, device number 31 [ 215.883949][ T7578] udevd[7578]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 215.933065][ T36] kauditd_printk_skb: 57 callbacks suppressed [ 215.933084][ T36] audit: type=1326 audit(1750606944.352:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9040 comm="syz.5.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ac18e929 code=0x7ffc0000 [ 215.965255][ T36] audit: type=1326 audit(1750606944.352:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9040 comm="syz.5.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ac18e929 code=0x7ffc0000 [ 215.993765][ T36] audit: type=1326 audit(1750606944.352:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9040 comm="syz.5.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f39ac18d290 code=0x7ffc0000 [ 216.020004][ T36] audit: type=1326 audit(1750606944.352:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9040 comm="syz.5.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f39ac18d290 code=0x7ffc0000 [ 216.044018][ T36] audit: type=1326 audit(1750606944.352:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9040 comm="syz.5.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ac18e929 code=0x7ffc0000 [ 216.067789][ T36] audit: type=1326 audit(1750606944.352:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9040 comm="syz.5.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ac18e929 code=0x7ffc0000 [ 216.068081][ T9049] overlayfs: failed to clone upperpath [ 216.091462][ T36] audit: type=1326 audit(1750606944.352:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9040 comm="syz.5.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f39ac18e929 code=0x7ffc0000 [ 216.120504][ T36] audit: type=1326 audit(1750606944.352:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9040 comm="syz.5.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ac18e929 code=0x7ffc0000 [ 216.151339][ T36] audit: type=1326 audit(1750606944.352:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9040 comm="syz.5.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f39ac18e929 code=0x7ffc0000 [ 216.180692][ T36] audit: type=1326 audit(1750606944.352:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9040 comm="syz.5.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ac18e929 code=0x7ffc0000 [ 216.249430][ T9061] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3071'. [ 216.832970][ T9108] xfrm0: mtu less than device minimum [ 216.884253][ T9121] overlayfs: failed to clone upperpath [ 216.902489][ T9123] fuse: Unknown parameter '00000000000000000000fd' [ 217.007330][ T9154] overlayfs: failed to clone upperpath [ 217.033831][ T9157] 9pnet_fd: Insufficient options for proto=fd [ 217.711024][ T9218] SELinux: Context system_u:object_r:public_content_t:s0 is not valid (left unmapped). [ 217.927522][ T9254] SELinux: Context +dev/kvm is not valid (left unmapped). [ 218.013977][ T9258] rust_binder: Error in use_page_slow: ESRCH [ 218.013998][ T9258] rust_binder: use_range failure ESRCH [ 218.028383][ T9258] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 218.028400][ T9258] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 218.036445][ T9258] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:346 [ 218.045809][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.055147][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.063283][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.069868][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.077957][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.084527][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.092560][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.099098][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.107162][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.113701][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.121729][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.128273][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.136330][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.142831][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.150892][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.157447][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.165498][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.172004][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.180050][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.186579][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.194617][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.201215][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.209276][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.215818][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.223873][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.230380][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.238631][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.245192][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.253231][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.259729][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.267777][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.274315][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.282321][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.288867][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.297011][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.303730][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.311997][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.318571][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.326646][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.333210][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.341446][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.348191][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.357781][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.372060][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.380432][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.387185][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.395475][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.405833][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.422957][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.429689][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.441994][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.448602][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.456934][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.463950][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.471998][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.480386][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.490113][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.496715][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.504827][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.511352][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.519795][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.526626][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.536371][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.543636][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.551840][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.569753][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.584645][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.592927][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.600991][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.607757][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.615994][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.622627][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.630841][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.637661][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.645872][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.652456][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.660771][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.667394][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.675528][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.682114][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.690219][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.696783][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.704994][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.711640][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.721082][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.727673][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.735732][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.742257][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.750352][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.756909][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.764986][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.771508][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.779593][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.786163][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.794247][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.800779][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.808883][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.815475][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.823709][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.830241][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 218.838472][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.845238][ T9258] rust_binder: Read failure Err(EFAULT) in pid:346 [ 219.017675][ T9301] bridge0: port 3(gretap0) entered blocking state [ 219.033244][ T9301] bridge0: port 3(gretap0) entered disabled state [ 219.039773][ T9301] gretap0: entered allmulticast mode [ 219.047400][ T9301] gretap0: entered promiscuous mode [ 219.052757][ T9301] bridge0: port 3(gretap0) entered blocking state [ 219.059234][ T9301] bridge0: port 3(gretap0) entered forwarding state [ 219.250072][ T9321] overlayfs: unescaped trailing colons in lowerdir mount option. [ 219.498168][ T9348] binder: Bad value for 'max' [ 219.653227][ T9362] 9pnet_fd: Insufficient options for proto=fd [ 220.365855][ T9431] netlink: 'syz.5.3200': attribute type 12 has an invalid length. [ 220.534034][ T9453] SELinux: failed to load policy [ 220.955738][ T9509] 9pnet_fd: Insufficient options for proto=fd [ 221.398179][ T36] kauditd_printk_skb: 59 callbacks suppressed [ 221.398199][ T36] audit: type=1326 audit(1750606949.812:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9520 comm="syz.5.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ac18e929 code=0x7ffc0000 [ 221.434650][ T36] audit: type=1326 audit(1750606949.852:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9520 comm="syz.5.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f39ac1907bc code=0x7ffc0000 [ 221.458165][ T36] audit: type=1326 audit(1750606949.852:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9520 comm="syz.5.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f39ac1906f4 code=0x7ffc0000 [ 221.481749][ T36] audit: type=1326 audit(1750606949.852:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9520 comm="syz.5.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f39ac1906f4 code=0x7ffc0000 [ 221.505218][ T36] audit: type=1326 audit(1750606949.852:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9520 comm="syz.5.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ac18e929 code=0x7ffc0000 [ 221.529066][ T36] audit: type=1326 audit(1750606949.852:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9520 comm="syz.5.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ac18e929 code=0x7ffc0000 [ 221.553263][ T36] audit: type=1326 audit(1750606949.852:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9520 comm="syz.5.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f39ac18e929 code=0x7ffc0000 [ 221.578189][ T36] audit: type=1326 audit(1750606949.852:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9520 comm="syz.5.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ac18e929 code=0x7ffc0000 [ 221.601892][ T36] audit: type=1326 audit(1750606949.852:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9520 comm="syz.5.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f39ac18e929 code=0x7ffc0000 [ 221.625397][ T36] audit: type=1326 audit(1750606949.852:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9520 comm="syz.5.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ac18e929 code=0x7ffc0000 [ 222.420306][ T9605] netlink: 'syz.3.3265': attribute type 4 has an invalid length. [ 222.491177][ T9617] tipc: Enabling of bearer rejected, failed to enable media [ 223.027940][ T9634] rust_binder: Write failure EFAULT in pid:410 [ 223.771333][ T9703] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3299'. [ 223.798000][ T9705] overlayfs: failed to clone upperpath [ 223.842965][ T45] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 224.003827][ T45] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 224.018145][ T45] usb 7-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 224.031321][ T45] usb 7-1: config 0 interface 0 has no altsetting 0 [ 224.038510][ T45] usb 7-1: New USB device found, idVendor=056a, idProduct=037a, bcdDevice= 0.00 [ 224.048018][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.063222][ T45] usb 7-1: config 0 descriptor?? [ 224.072071][ T45] usbhid 7-1:0.0: can't add hid device: -22 [ 224.078896][ T45] usbhid 7-1:0.0: probe with driver usbhid failed with error -22 [ 224.324678][ T9719] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:435 [ 225.995674][ T9853] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3353'. [ 226.033811][ T9857] /dev/loop0: Can't lookup blockdev [ 226.039540][ T9857] binder: Unknown parameter 'stat_' [ 226.610879][ T36] kauditd_printk_skb: 4166 callbacks suppressed [ 226.610898][ T36] audit: type=1400 audit(1750606955.022:5184): avc: denied { create } for pid=9901 comm="syz.3.3369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 226.624889][ T45] usb 7-1: USB disconnect, device number 32 [ 226.666497][ T9905] /dev/rnullb0: Can't lookup blockdev [ 226.685204][ T36] audit: type=1400 audit(1750606955.102:5185): avc: denied { connect } for pid=9908 comm="syz.3.3371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 226.835566][ T9933] rust_binder: Write failure EFAULT in pid:442 [ 226.868330][ T9944] tipc: Can't bind to reserved service type 2 [ 226.970889][ T9969] overlayfs: failed to clone upperpath [ 227.016894][ T9983] overlayfs: failed to clone upperpath [ 227.107915][ T9989] binder: Unknown parameter 'defcontext01777777777777777777777' [ 227.362962][ T6931] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 227.428480][T10005] 9pnet: p9_errstr2errno: server reported unknown error pA;KZ44/@q [ 227.507315][T10016] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3413'. [ 227.514273][ T6931] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 227.516363][T10016] 0{X: renamed from gretap0 (while UP) [ 227.527771][ T6931] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 227.545318][T10016] 0{X: entered allmulticast mode [ 227.550948][T10016] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 227.551821][ T6931] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 227.576015][T10017] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3413'. [ 227.584926][ T6931] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.584989][T10017] 1{X: renamed from 30{X (while UP) [ 227.598422][ T6931] usb 7-1: config 0 descriptor?? [ 227.604948][T10017] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 227.605234][ T9993] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 227.630283][ T6931] hub 7-1:0.0: USB hub found [ 227.674211][ T36] audit: type=1326 audit(1750606956.092:5186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10030 comm="syz.3.3418" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f140898e929 code=0x0 [ 227.829975][ T6931] hub 7-1:0.0: 2 ports detected [ 227.837172][ T6931] hub 7-1:0.0: hub_hub_status failed (err = -71) [ 227.843883][ T6931] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 227.853322][ T6931] usbhid 7-1:0.0: can't add hid device: -71 [ 227.860946][ T6931] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 227.894144][ T6931] usb 7-1: USB disconnect, device number 33 [ 228.091172][ T36] audit: type=1400 audit(1750606956.502:5187): avc: denied { validate_trans } for pid=10048 comm="syz.6.3423" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 228.121300][ T36] audit: type=1400 audit(1750606956.532:5188): avc: denied { lock } for pid=10048 comm="syz.6.3423" path="socket:[46306]" dev="sockfs" ino=46306 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 228.238186][ T36] audit: type=1400 audit(1750606956.652:5189): avc: denied { append } for pid=10057 comm="syz.6.3426" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 228.239244][T10058] loop9: detected capacity change from 0 to 7 [ 228.268394][T10058] Buffer I/O error on dev loop9, logical block 0, async page read [ 228.276727][T10058] Buffer I/O error on dev loop9, logical block 0, async page read [ 228.284813][T10058] loop9: unable to read partition table [ 228.290538][T10058] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 228.290538][T10058] U) failed (rc=-5) [ 228.370015][T10062] tipc: Enabling of bearer rejected, failed to enable media [ 228.436511][T10064] fuse: Unknown parameter 'rootmod00g' [ 228.596576][ T36] audit: type=1400 audit(1750606957.012:5190): avc: denied { append } for pid=10084 comm="syz.6.3437" name="pfkey" dev="proc" ino=4026533026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 228.664153][ T36] audit: type=1326 audit(1750606957.082:5191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10086 comm="syz.6.3438" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1809f8e929 code=0x0 [ 229.337650][ T36] audit: type=1326 audit(1750606957.752:5192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10124 comm="syz.5.3451" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f39ac18e929 code=0x0 [ 229.437940][ T36] audit: type=1400 audit(1750606957.852:5193): avc: denied { name_bind } for pid=10138 comm="syz.3.3456" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 229.581224][T10156] cgroup: No subsys list or none specified [ 229.686158][T10171] overlayfs: failed to clone upperpath [ 230.035672][T10201] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3480'. [ 230.080580][T10207] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3483'. [ 231.440397][T10329] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=20480 sclass=netlink_route_socket pid=10329 comm=syz.2.3524 [ 231.699918][T10349] overlayfs: failed to resolve './file0': -2 [ 231.770692][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 231.770710][ T36] audit: type=1400 audit(1750606960.182:5200): avc: denied { setattr } for pid=10363 comm="syz.3.3536" name="PACKET" dev="sockfs" ino=47171 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 232.080738][T10379] fuse: Unknown parameter '0x0000000000000003' [ 233.200968][ T36] audit: type=1107 audit(1750606961.612:5201): pid=10432 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='4`' [ 233.342641][T10460] 9pnet_fd: Insufficient options for proto=fd [ 233.486762][T10463] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3569'. [ 233.497366][ T36] audit: type=1326 audit(1750606961.912:5202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10462 comm="syz.6.3569" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1809f8e929 code=0x0 [ 233.673663][T10471] can: request_module (can-proto-0) failed. [ 233.770860][ T36] audit: type=1326 audit(1750606962.182:5203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10481 comm="syz.2.3575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77c58e929 code=0x7ffc0000 [ 233.796256][ T36] audit: type=1326 audit(1750606962.182:5204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10481 comm="syz.2.3575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb77c58e929 code=0x7ffc0000 [ 233.819894][ T36] audit: type=1326 audit(1750606962.182:5205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10481 comm=BF exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77c58e929 code=0x7ffc0000 [ 233.843125][ T36] audit: type=1326 audit(1750606962.182:5206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10481 comm=BF exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77c58e929 code=0x7ffc0000 [ 233.865794][ T36] audit: type=1326 audit(1750606962.182:5207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10481 comm=BF exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb77c58e929 code=0x7ffc0000 [ 233.888484][ T36] audit: type=1326 audit(1750606962.182:5208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10481 comm="$,@.-,$!" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77c58e929 code=0x7ffc0000 [ 233.912053][ T36] audit: type=1326 audit(1750606962.182:5209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10481 comm="$,@.-,$!" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77c58e929 code=0x7ffc0000 [ 234.628191][T10554] overlayfs: failed to clone upperpath [ 234.704375][T10566] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3606'. [ 234.756352][T10566] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3606'. [ 235.524797][T10618] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.534157][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.541243][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.652016][T10623] overlayfs: failed to clone upperpath [ 235.739645][T10635] 9pnet_fd: Insufficient options for proto=fd [ 236.587244][T10680] overlayfs: failed to clone upperpath [ 236.649480][T10697] cgroup: Unknown parameter './binderfs/binder0' [ 236.765236][T10707] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3659'. [ 236.834004][ T36] kauditd_printk_skb: 35 callbacks suppressed [ 236.834024][ T36] audit: type=1326 audit(1750606965.252:5245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10714 comm="syz.5.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ac18e929 code=0x7ffc0000 [ 236.893038][ T36] audit: type=1326 audit(1750606965.252:5246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10714 comm="syz.5.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ac18e929 code=0x7ffc0000 [ 236.916795][T10727] netlink: 'syz.2.3666': attribute type 4 has an invalid length. [ 236.926307][ T36] audit: type=1326 audit(1750606965.282:5247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10714 comm="syz.5.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f39ac18e929 code=0x7ffc0000 [ 236.955318][ T36] audit: type=1326 audit(1750606965.292:5248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10714 comm="syz.5.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f39ac18e963 code=0x7ffc0000 [ 236.978767][ T36] audit: type=1326 audit(1750606965.292:5249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10714 comm="syz.5.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ac18e929 code=0x7ffc0000 [ 237.003034][ T36] audit: type=1326 audit(1750606965.292:5250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10714 comm="syz.5.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f39ac18e929 code=0x7ffc0000 [ 237.027154][ T36] audit: type=1326 audit(1750606965.292:5251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10714 comm="syz.5.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ac18e929 code=0x7ffc0000 [ 237.051281][ T36] audit: type=1326 audit(1750606965.292:5252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10714 comm="syz.5.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ac18e929 code=0x7ffc0000 [ 237.074880][ T36] audit: type=1326 audit(1750606965.292:5253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10714 comm="syz.5.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ac18e929 code=0x7ffc0000 [ 237.098618][ T36] audit: type=1326 audit(1750606965.292:5254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10714 comm="syz.5.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f39ac18e929 code=0x7ffc0000 [ 237.471706][T10771] ip6_vti0: entered promiscuous mode [ 237.608270][T10799] tmpfs: Bad value for 'nr_blocks' [ 237.632773][T10805] devpts: called with bogus options [ 237.639027][T10809] fuse: Unknown parameter '0xffffffffffffffff0x0000000000000003' [ 237.712467][T10829] 9pnet_fd: Insufficient options for proto=fd [ 238.772956][ T45] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 238.902971][ T45] usb 7-1: device descriptor read/64, error -71 [ 239.142979][ T45] usb 7-1: device descriptor read/64, error -71 [ 239.148788][T10854] netlink: 'syz.5.3709': attribute type 4 has an invalid length. [ 239.157049][T10854] netlink: 17 bytes leftover after parsing attributes in process `syz.5.3709'. [ 239.180891][T10858] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=10858 comm=syz.5.3710 [ 239.193971][T10858] bridge0: port 4(syz_tun) entered blocking state [ 239.200514][T10858] bridge0: port 4(syz_tun) entered disabled state [ 239.207098][T10858] syz_tun: entered allmulticast mode [ 239.212943][T10858] syz_tun: entered promiscuous mode [ 239.218321][T10858] bridge0: port 4(syz_tun) entered blocking state [ 239.224794][T10858] bridge0: port 4(syz_tun) entered forwarding state [ 239.382947][ T45] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 239.513893][ T45] usb 7-1: device descriptor read/64, error -71 [ 239.752942][ T45] usb 7-1: device descriptor read/64, error -71 [ 239.768970][T10865] overlayfs: failed to clone upperpath [ 239.863060][ T45] usb usb7-port1: attempt power cycle [ 239.896501][T10896] tipc: Enabling of bearer rejected, failed to enable media [ 240.202949][ T45] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 240.224021][ T45] usb 7-1: device descriptor read/8, error -71 [ 240.354040][ T45] usb 7-1: device descriptor read/8, error -71 [ 240.592957][ T45] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 240.613914][ T45] usb 7-1: device descriptor read/8, error -71 [ 240.744871][ T45] usb 7-1: device descriptor read/8, error -71 [ 240.854567][ T45] usb usb7-port1: unable to enumerate USB device [ 240.890696][T10944] fuse: Bad value for 'user_id' [ 240.899703][T10944] fuse: Bad value for 'user_id' [ 241.456545][T10969] netlink: 'syz.2.3748': attribute type 4 has an invalid length. [ 242.426705][T11023] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 242.426735][T11023] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:584 [ 242.436314][T11023] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 242.445593][T11023] rust_binder: Read failure Err(EFAULT) in pid:584 [ 242.752980][ T45] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 242.914071][ T45] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 242.922349][ T45] usb 7-1: config 0 has an invalid descriptor of length 90, skipping remainder of the config [ 242.932624][ T45] usb 7-1: config 0 has no interface number 0 [ 242.940302][ T45] usb 7-1: New USB device found, idVendor=056d, idProduct=0000, bcdDevice=39.00 [ 242.949563][ T45] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.957588][ T45] usb 7-1: Product: syz [ 242.961780][ T45] usb 7-1: Manufacturer: syz [ 242.966418][ T45] usb 7-1: SerialNumber: syz [ 242.971720][ T45] usb 7-1: config 0 descriptor?? [ 243.085877][T11047] wg2: entered promiscuous mode [ 243.090949][T11047] wg2: entered allmulticast mode [ 243.151025][T11051] wg2: left promiscuous mode [ 243.155767][T11051] wg2: left allmulticast mode [ 243.181061][ T45] usb 7-1: Found UVC 0.00 device syz (056d:0000) [ 243.187501][ T45] usb 7-1: No valid video chain found. [ 243.194047][ T45] usb 7-1: USB disconnect, device number 38 [ 243.373116][T11086] overlayfs: failed to clone upperpath [ 243.407104][T11093] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3786'. [ 243.709113][T11121] SELinux: Context system_u:object_r:tpm_device_t:s0 is not valid (left unmapped). [ 243.723845][ T36] kauditd_printk_skb: 66 callbacks suppressed [ 243.723864][ T36] audit: type=1400 audit(1750606972.142:5321): avc: denied { relabelto } for pid=11120 comm="syz.6.3797" name="udmabuf" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:tpm_device_t:s0" [ 243.757894][ T36] audit: type=1400 audit(1750606972.182:5322): avc: denied { associate } for pid=11120 comm="syz.6.3797" name="udmabuf" dev="devtmpfs" ino=83 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:tpm_device_t:s0" [ 244.202927][ T783] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 244.362925][ T783] usb 7-1: Using ep0 maxpacket: 8 [ 244.369816][ T783] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.383498][ T783] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 244.404097][ T783] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 244.413349][ T783] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.427272][ T783] usb 7-1: Product: syz [ 244.433332][ T783] usb 7-1: Manufacturer: syz [ 244.437674][ T36] audit: type=1326 audit(1750606972.852:5323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11187 comm="syz.2.3821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77c58e929 code=0x7ffc0000 [ 244.438058][ T783] usb 7-1: SerialNumber: syz [ 244.469257][ T36] audit: type=1326 audit(1750606972.882:5324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11187 comm="syz.2.3821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb77c58e929 code=0x7ffc0000 [ 244.493036][ T36] audit: type=1326 audit(1750606972.882:5325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11187 comm="syz.2.3821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb77c58e929 code=0x7ffc0000 [ 244.728076][T11141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.744378][ T36] audit: type=1326 audit(1750607202.153:5326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11240 comm="syz.5.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ac18e929 code=0x7ffc0000 [ 244.771387][T11141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.794971][ T36] audit: type=1326 audit(1750607202.153:5327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11240 comm="syz.5.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ac18e929 code=0x7ffc0000 [ 244.819236][ T36] audit: type=1326 audit(1750607202.163:5328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11240 comm="syz.5.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f39ac18e929 code=0x7ffc0000 [ 244.843059][ T36] audit: type=1326 audit(1750607202.163:5329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11240 comm="syz.5.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ac18e929 code=0x7ffc0000 [ 244.867052][ T36] audit: type=1326 audit(1750607202.163:5330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11240 comm="syz.5.3839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ac18e929 code=0x7ffc0000 [ 245.277543][T11279] fuse: Unknown parameter 'fc' [ 245.307192][ T783] usb 7-1: 0:2 : does not exist [ 245.334076][ T783] usb 7-1: USB disconnect, device number 39 [ 245.336411][T11287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11287 comm=syz.3.3856 [ 245.766385][T11335] 9pnet_fd: Insufficient options for proto=fd [ 246.022163][T11359] netlink: 172 bytes leftover after parsing attributes in process `syz.5.3881'. [ 246.067408][T11365] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3884'. [ 246.131164][T11373] overlayfs: missing 'lowerdir' [ 246.262078][T11390] input: syz0 as /devices/virtual/input/input28 [ 246.268464][T11390] input: failed to attach handler leds to device input28, error: -6 [ 246.277705][T11388] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:607 [ 246.384943][T11400] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 246.500166][T11400] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 247.180151][T11418] overlayfs: failed to clone upperpath [ 247.372356][T11438] binder: Unknown parameter '(' [ 247.377407][T11438] binder: Unknown parameter '(' [ 247.382330][T11438] binder: Unknown parameter '(' [ 247.387346][T11438] binder: Unknown parameter '(' [ 247.392276][T11438] binder: Unknown parameter '(' [ 247.397257][T11438] binder: Unknown parameter '(' [ 247.402259][T11438] binder: Unknown parameter '(' [ 247.407248][T11438] binder: Unknown parameter '(' [ 247.412167][T11438] binder: Unknown parameter '(' [ 247.417253][T11438] binder: Unknown parameter '(' [ 247.422184][T11438] binder: Unknown parameter '(' [ 247.427150][T11438] binder: Unknown parameter '(' [ 247.432062][T11438] binder: Unknown parameter '(' [ 247.437043][T11438] binder: Unknown parameter '(' [ 247.442004][T11438] binder: Unknown parameter '(' [ 247.447079][T11438] binder: Unknown parameter '(' [ 247.452005][T11438] binder: Unknown parameter '(' [ 247.457146][T11438] binder: Unknown parameter '(' [ 247.463232][T11438] binder: Unknown parameter '(' [ 247.468151][T11438] binder: Unknown parameter '(' [ 247.473802][T11438] binder: Unknown parameter '(' [ 247.478726][T11438] binder: Unknown parameter '(' [ 247.483680][T11438] binder: Unknown parameter '(' [ 247.488615][T11438] binder: Unknown parameter '(' [ 247.493583][T11438] binder: Unknown parameter '(' [ 247.498509][T11438] binder: Unknown parameter '(' [ 247.503454][T11438] binder: Unknown parameter '(' [ 247.508377][T11438] binder: Unknown parameter '(' [ 247.513378][T11438] binder: Unknown parameter '(' [ 247.518299][T11438] binder: Unknown parameter '(' [ 247.523253][T11438] binder: Unknown parameter '(' [ 247.528164][T11438] binder: Unknown parameter '(' [ 247.533155][T11438] binder: Unknown parameter '(' [ 247.538067][T11438] binder: Unknown parameter '(' [ 247.543016][T11438] binder: Unknown parameter '(' [ 247.547929][T11438] binder: Unknown parameter '(' [ 247.552851][T11438] binder: Unknown parameter '(' [ 247.557825][T11438] binder: Unknown parameter '(' [ 247.562754][T11438] binder: Unknown parameter '(' [ 247.567740][T11438] binder: Unknown parameter '(' [ 247.572715][T11438] binder: Unknown parameter '(' [ 247.577694][T11438] binder: Unknown parameter '(' [ 247.582914][T11438] binder: Unknown parameter '(' [ 247.587852][T11438] binder: Unknown parameter '(' [ 247.592803][T11438] binder: Unknown parameter '(' [ 247.597905][T11438] binder: Unknown parameter '(' [ 247.602857][T11438] binder: Unknown parameter '(' [ 247.607826][T11438] binder: Unknown parameter '(' [ 247.612758][T11438] binder: Unknown parameter '(' [ 247.617706][T11438] binder: Unknown parameter '(' [ 247.622621][T11438] binder: Unknown parameter '(' [ 247.627698][T11438] binder: Unknown parameter '(' [ 247.645441][T11450] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 247.892955][ T306] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 248.052973][ T306] usb 7-1: Using ep0 maxpacket: 32 [ 248.059494][ T306] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 248.068061][ T306] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 248.076728][ T306] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 248.085768][ T306] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 248.095450][ T306] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 248.105143][ T306] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 248.118155][ T306] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 248.127264][ T306] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.136303][ T306] usb 7-1: config 0 descriptor?? [ 248.227384][T11475] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3924'. [ 248.330981][T11485] fuse: Bad value for 'fd' [ 248.345816][ T306] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 40 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 248.363605][ T306] usb 7-1: USB disconnect, device number 40 [ 248.381509][ T306] usblp0: removed [ 248.507238][T11498] incfs: Error accessing: ./file0/file0. [ 248.513063][T11498] incfs: mount failed -2 [ 248.600372][T11508] overlayfs: failed to clone upperpath [ 248.682954][ T306] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 249.002930][ T306] usb 7-1: Using ep0 maxpacket: 32 [ 249.009361][ T306] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 249.017865][ T306] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 249.026780][ T306] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 249.036028][ T306] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 249.045952][ T306] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 249.055888][ T306] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 249.069189][ T306] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 249.078426][ T306] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.093199][ T306] usb 7-1: config 0 descriptor?? [ 249.303148][ T306] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 41 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 249.359333][ T36] kauditd_printk_skb: 44 callbacks suppressed [ 249.359351][ T36] audit: type=1326 audit(1750607206.773:5375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11528 comm="syz.2.3943" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb77c58e929 code=0x0 [ 249.461361][T11544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3946'. [ 249.487692][T11549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=537 sclass=netlink_route_socket pid=11549 comm=syz.3.3948 [ 249.501451][ T36] audit: type=1400 audit(1750607206.913:5376): avc: denied { read write } for pid=11451 comm="syz.6.3915" name="lp0" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 249.542364][ T36] audit: type=1400 audit(1750607206.913:5377): avc: denied { open } for pid=11451 comm="syz.6.3915" path="/dev/usb/lp0" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 249.994469][ T306] usb 7-1: USB disconnect, device number 41 [ 250.001460][ T306] usblp0: removed [ 250.148666][T11568] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3956'. [ 250.508866][T11586] overlayfs: failed to clone lowerpath [ 250.839634][T11610] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3972'. [ 251.159575][T11662] overlayfs: conflicting lowerdir path [ 251.182411][T11664] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 251.190948][T11664] rust_binder: Write failure EINVAL in pid:641 [ 251.226925][T11669] incfs: Error accessing: ./file0/file0. [ 251.238898][T11669] incfs: mount failed -2 [ 251.244322][T11669] fuse: Bad value for 'fd' [ 251.250129][T11669] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3989'. [ 251.260052][T11669] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 251.260071][T11669] rust_binder: Error while translating object. [ 251.268905][T11669] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 251.275212][T11669] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:646 [ 251.419264][T11684] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 251.428518][T11684] rust_binder: Read failure Err(EFAULT) in pid:654 [ 251.677803][T11688] tipc: Cannot configure node identity twice [ 251.758005][ T36] audit: type=1326 audit(1750607209.173:5378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11702 comm="syz.2.4001" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb77c58e929 code=0x0 [ 253.512941][ T326] Bluetooth: hci0: command 0x1003 tx timeout [ 253.519103][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 253.544862][T11843] overlayfs: conflicting lowerdir path [ 253.743543][T11887] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11887 comm=syz.5.4062 [ 253.902932][ T9] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 254.064286][ T9] usb 7-1: config index 0 descriptor too short (expected 9, got 0) [ 254.074678][ T9] usb 7-1: can't read configurations, error -22 [ 254.153966][T11920] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4077'. [ 254.163094][T11920] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4077'. [ 254.212927][ T9] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 254.232661][T11931] /dev/loop0: Can't lookup blockdev [ 254.374474][ T9] usb 7-1: config index 0 descriptor too short (expected 9, got 0) [ 254.382529][ T9] usb 7-1: can't read configurations, error -22 [ 254.388989][ T9] usb usb7-port1: attempt power cycle [ 254.707713][ T36] audit: type=1400 audit(1750607212.123:5379): avc: denied { map } for pid=11941 comm="syz.3.4084" path="socket:[52437]" dev="sockfs" ino=52437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 254.732937][ T9] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 254.764657][ T9] usb 7-1: config index 0 descriptor too short (expected 9, got 0) [ 254.772632][ T9] usb 7-1: can't read configurations, error -22 [ 254.922960][ T9] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 254.962303][ T9] usb 7-1: config index 0 descriptor too short (expected 9, got 0) [ 254.970554][ T9] usb 7-1: can't read configurations, error -22 [ 254.982858][ T9] usb usb7-port1: unable to enumerate USB device [ 254.999013][T11957] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.016038][T11957] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.032966][T11957] bridge_slave_0: entered allmulticast mode [ 255.039528][T11957] bridge_slave_0: entered promiscuous mode [ 255.047390][ T7485] bridge0: port 4(syz_tun) entered disabled state [ 255.062588][ T7485] syz_tun (unregistering): left allmulticast mode [ 255.069713][ T7485] syz_tun (unregistering): left promiscuous mode [ 255.079117][ T7485] bridge0: port 4(syz_tun) entered disabled state [ 255.087690][T11957] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.094803][T11957] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.101972][T11957] bridge_slave_1: entered allmulticast mode [ 255.108840][T11957] bridge_slave_1: entered promiscuous mode [ 255.215423][T11957] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.222512][T11957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.229858][T11957] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.236942][T11957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.254191][ T36] audit: type=1400 audit(1750607212.673:5380): avc: denied { create } for pid=11964 comm="syz.3.4090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 255.316602][T11957] veth0_vlan: entered promiscuous mode [ 255.331018][T11957] veth1_macvtap: entered promiscuous mode [ 255.759036][T11978] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 255.759055][T11978] rust_binder: Read failure Err(EFAULT) in pid:13 [ 256.122960][ T783] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 256.283950][ T783] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.295054][ T783] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.304948][ T783] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 256.314126][ T783] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.322798][ T783] usb 6-1: config 0 descriptor?? [ 256.730197][ T783] isku 0003:1E7D:319C.000F: unknown main item tag 0x4 [ 256.737265][ T783] isku 0003:1E7D:319C.000F: item fetching failed at offset 3/7 [ 256.745125][ T783] isku 0003:1E7D:319C.000F: parse failed [ 256.750798][ T783] isku 0003:1E7D:319C.000F: probe with driver isku failed with error -22 [ 256.835721][T12009] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 256.932203][T11990] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 256.940131][T11990] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:18 [ 256.954029][ T9] usb 6-1: USB disconnect, device number 15 [ 257.517766][T12047] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 257.633101][ T36] audit: type=1326 audit(1750607215.053:5381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12051 comm="syz.6.4122" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1809f8e929 code=0x0 [ 257.913030][ T31] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 258.062970][ T31] usb 7-1: Using ep0 maxpacket: 16 [ 258.069267][ T31] usb 7-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.080360][ T31] usb 7-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 258.090337][ T31] usb 7-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 258.100122][ T31] usb 7-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 258.113203][ T31] usb 7-1: config 1 interface 0 has no altsetting 0 [ 258.120504][ T31] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 258.129605][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 258.137637][ T31] usb 7-1: SerialNumber: syz [ 258.143380][T12052] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 258.150606][T12052] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 258.211450][T12071] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 258.220284][T12071] overlayfs: missing 'lowerdir' [ 258.230408][T12071] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 258.359319][T12052] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 258.374489][T12052] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 258.582975][T12076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.591545][T12076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.606271][ T31] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 258.619386][ T31] usb 7-1: USB disconnect, device number 46 [ 258.713747][T12081] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:680 [ 259.503403][T12105] fuse: Bad value for 'fd' [ 259.530744][T12108] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4142'. [ 259.767425][T12145] netlink: 'syz.3.4154': attribute type 3 has an invalid length. [ 259.839965][T12148] overlayfs: failed to clone upperpath [ 260.156439][T12154] binder: Unknown parameter 'stat_' [ 260.171041][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 260.177784][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 260.192083][ T36] audit: type=1400 audit(1750607217.603:5382): avc: denied { mounton } for pid=12149 comm="syz.5.4156" path="/13/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 261.007770][T12164] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 261.186411][ T13] bridge_slave_1: left allmulticast mode [ 261.192197][ T13] bridge_slave_1: left promiscuous mode [ 261.198055][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.211810][ T13] bridge_slave_0: left allmulticast mode [ 261.222216][ T13] bridge_slave_0: left promiscuous mode [ 261.228309][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.297811][T12180] overlayfs: failed to clone upperpath [ 261.342360][ T13] veth1_macvtap: left promiscuous mode [ 261.348168][ T13] veth0_vlan: left promiscuous mode [ 261.402237][T12176] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.409841][T12176] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.417080][T12176] bridge_slave_0: entered allmulticast mode [ 261.423716][T12176] bridge_slave_0: entered promiscuous mode [ 261.430134][T12176] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.437242][T12176] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.444340][T12176] bridge_slave_1: entered allmulticast mode [ 261.450603][T12176] bridge_slave_1: entered promiscuous mode [ 261.465555][T12194] netlink: 'syz.3.4174': attribute type 7 has an invalid length. [ 261.473478][T12194] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4174'. [ 261.535828][T12176] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.543030][T12176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.550337][T12176] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.557426][T12176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.585365][ T1461] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.592740][ T1461] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.602850][ T5681] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.609938][ T5681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.619046][ T1461] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.626125][ T1461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.654234][T12176] veth0_vlan: entered promiscuous mode [ 261.665647][T12176] veth1_macvtap: entered promiscuous mode [ 261.703226][ T36] audit: type=1326 audit(1750607219.113:5383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12208 comm="syz.3.4181" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f140898e929 code=0x0 [ 261.850201][T12231] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:19 [ 261.998922][ T31] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 262.015560][ T31] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 262.023028][ T31] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 262.030443][ T31] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 262.037911][ T31] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 262.046123][ T31] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz0 [ 262.075755][T12238] fido_id[12238]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 262.232941][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 262.232956][ T326] Bluetooth: hci0: command 0x1003 tx timeout [ 262.345837][T12248] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4192'. [ 262.355209][T12248] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:703 [ 262.495935][T12252] rust_binder: Error while translating object. [ 262.505184][T12252] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 262.511543][T12252] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:707 [ 262.546050][T12255] overlayfs: failed to resolve './bus': -2 [ 262.608831][ T36] audit: type=1400 audit(1750607220.023:5384): avc: denied { compute_member } for pid=12259 comm="syz.6.4197" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 263.542954][ T6931] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 263.694801][ T6931] usb 8-1: unable to get BOS descriptor or descriptor too short [ 263.703129][ T6931] usb 8-1: too many configurations: 115, using maximum allowed: 8 [ 263.711498][ T6931] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 263.719157][ T6931] usb 8-1: can't read configurations, error -71 [ 264.210930][T12343] binder: Bad value for 'defcontext' [ 264.335824][ T36] audit: type=1400 audit(1750607221.753:5385): avc: denied { setattr } for pid=12344 comm="syz.7.4226" path="socket:[54080]" dev="sockfs" ino=54080 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 265.132057][T12369] incfs: Error accessing: ./file0. [ 265.133687][ T36] audit: type=1400 audit(1750607222.543:5386): avc: denied { mounton } for pid=12368 comm="syz.7.4234" path="/18/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 265.137364][T12369] incfs: mount failed -20 [ 265.413434][T12388] binder: Binderfs stats mode cannot be changed during a remount [ 266.082950][ T31] usb 7-1: new full-speed USB device number 47 using dummy_hcd [ 266.213008][ T31] usb 7-1: device descriptor read/64, error -71 [ 266.279189][T12420] 9pnet_fd: Insufficient options for proto=fd [ 266.286038][ T36] audit: type=1326 audit(1750607223.713:5387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12419 comm="syz.7.4249" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9d0e18e929 code=0x0 [ 266.394189][T12421] rust_binder: Error while translating object. [ 266.394225][T12421] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 266.400446][T12421] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:93 [ 266.452958][ T31] usb 7-1: device descriptor read/64, error -71 [ 266.712935][ T31] usb 7-1: new full-speed USB device number 48 using dummy_hcd [ 266.852921][ T31] usb 7-1: device descriptor read/64, error -71 [ 267.089451][T12449] /dev/loop0: Can't lookup blockdev [ 267.094920][ T31] usb 7-1: device descriptor read/64, error -71 [ 267.096706][T12449] fuse: Bad value for 'fd' [ 267.139384][T12456] pim6reg1: entered promiscuous mode [ 267.144763][T12456] pim6reg1: entered allmulticast mode [ 267.203122][ T31] usb usb7-port1: attempt power cycle [ 267.318225][T12476] netlink: 277 bytes leftover after parsing attributes in process `syz.7.4268'. [ 267.542963][ T31] usb 7-1: new full-speed USB device number 49 using dummy_hcd [ 267.563950][ T31] usb 7-1: device descriptor read/8, error -71 [ 267.694008][ T31] usb 7-1: device descriptor read/8, error -71 [ 267.933024][ T31] usb 7-1: new full-speed USB device number 50 using dummy_hcd [ 267.954112][ T31] usb 7-1: device descriptor read/8, error -71 [ 268.084109][ T31] usb 7-1: device descriptor read/8, error -71 [ 268.181912][T12480] binder: Unknown parameter '' [ 268.193160][ T31] usb usb7-port1: unable to enumerate USB device [ 268.790164][T12493] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.797252][T12493] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.804357][T12493] bridge_slave_0: entered allmulticast mode [ 268.810631][T12493] bridge_slave_0: entered promiscuous mode [ 268.817122][T12493] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.824215][T12493] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.831325][T12493] bridge_slave_1: entered allmulticast mode [ 268.837659][T12493] bridge_slave_1: entered promiscuous mode [ 268.887961][T12493] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.895057][T12493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.902346][T12493] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.909407][T12493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.933927][ T1461] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.941440][ T1461] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.951185][T12498] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 268.959357][T12498] rust_binder: Write failure EINVAL in pid:123 [ 268.962121][ T5681] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.975410][ T5681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.985206][ T5687] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.992290][ T5687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.019977][T12493] veth0_vlan: entered promiscuous mode [ 269.031888][T12493] veth1_macvtap: entered promiscuous mode [ 269.083510][ T31] usb 7-1: new low-speed USB device number 51 using dummy_hcd [ 269.213000][ T9] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 269.234094][ T31] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 269.243280][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.252127][ T31] usb 7-1: config 0 descriptor?? [ 269.364188][ T9] usb 8-1: config 1 interface 0 has no altsetting 0 [ 269.372456][ T9] usb 8-1: New USB device found, idVendor=056a, idProduct=00d7, bcdDevice= 0.40 [ 269.381616][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.389669][ T9] usb 8-1: Product: и [ 269.393814][ T9] usb 8-1: Manufacturer: Г [ 269.460180][ T31] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 269.474131][ T31] asix 7-1:0.0: probe with driver asix failed with error -71 [ 269.484124][ T31] usb 7-1: USB disconnect, device number 51 [ 269.512956][ T783] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 269.604766][ T9] usbhid 8-1:1.0: can't add hid device: -71 [ 269.610821][ T9] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 269.619628][ T9] usb 8-1: USB disconnect, device number 4 [ 269.664241][ T783] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 269.674103][ T783] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 269.688509][ T783] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 269.697630][ T783] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.706393][ T783] usb 9-1: config 0 descriptor?? [ 269.712295][ T783] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 269.913245][T12513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.921840][T12513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.038545][ T36] audit: type=1400 audit(1750607227.453:5388): avc: denied { shutdown } for pid=12515 comm="syz.6.4279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 270.143116][ T36] audit: type=1400 audit(1750607227.563:5389): avc: denied { read } for pid=12525 comm="syz.6.4282" name=".log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 270.188425][T12535] rust_binder: Write failure EINVAL in pid:133 [ 270.264786][T12544] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 270.296484][T12548] rust_binder: Write failure EFAULT in pid:140 [ 270.372920][ T783] usb 7-1: new low-speed USB device number 52 using dummy_hcd [ 270.532980][ T783] usb 7-1: device descriptor read/64, error -71 [ 270.575379][T12568] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.582463][T12568] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.589817][T12568] bridge_slave_0: entered allmulticast mode [ 270.596261][T12568] bridge_slave_0: entered promiscuous mode [ 270.603219][T12568] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.610410][T12568] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.617576][T12568] bridge_slave_1: entered allmulticast mode [ 270.623979][T12568] bridge_slave_1: entered promiscuous mode [ 270.630193][ T5687] bridge_slave_1: left allmulticast mode [ 270.636646][ T5687] bridge_slave_1: left promiscuous mode [ 270.642356][ T5687] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.643866][T12566] /dev/loop0: Can't lookup blockdev [ 270.655225][ T5687] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.659583][T12566] binder: Unknown parameter 'sta' [ 270.729581][T12572] @: renamed from vlan0 (while UP) [ 270.767632][ T5687] veth1_macvtap: left promiscuous mode [ 270.773298][ T5687] veth0_vlan: left promiscuous mode [ 270.782966][ T783] usb 7-1: device descriptor read/64, error -71 [ 270.838071][T12568] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.845215][T12568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.852510][T12568] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.859577][T12568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.868910][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.876461][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.904925][ T1461] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.911991][ T1461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.921284][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.928360][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.955025][T12568] veth0_vlan: entered promiscuous mode [ 270.966622][T12568] veth1_macvtap: entered promiscuous mode [ 271.029167][T12587] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 271.033217][ T783] usb 7-1: new low-speed USB device number 53 using dummy_hcd [ 271.039503][T12587] SELinux: failed to load policy [ 271.066323][T12589] rust_binder: Error while translating object. [ 271.066364][T12589] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 271.072630][T12589] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:16 [ 271.149796][T12591] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 271.158980][T12591] rust_binder: Error in use_page_slow: EBUSY [ 271.169482][T12591] rust_binder: use_range failure EBUSY [ 271.172994][ T783] usb 7-1: device descriptor read/64, error -71 [ 271.176046][T12591] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 271.187289][T12591] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 271.195130][T12591] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 271.205910][T12591] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:18 [ 271.281744][T12610] overlayfs: failed to clone upperpath [ 271.422972][ T783] usb 7-1: device descriptor read/64, error -71 [ 271.472958][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 271.533120][ T783] usb usb7-port1: attempt power cycle [ 271.634009][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 271.644106][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 271.657851][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 271.666975][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 271.675294][ T9] usb 4-1: SerialNumber: syz [ 271.680808][T12599] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 271.872949][ T783] usb 7-1: new low-speed USB device number 54 using dummy_hcd [ 271.889127][T12599] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 271.897415][ T783] usb 7-1: device descriptor read/8, error -71 [ 272.034024][ T783] usb 7-1: device descriptor read/8, error -71 [ 272.272950][ T783] usb 7-1: new low-speed USB device number 55 using dummy_hcd [ 272.287063][ T6931] usb 9-1: USB disconnect, device number 2 [ 272.303270][T12616] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 272.303307][T12616] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:18 [ 272.303389][ T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 272.330869][ T783] usb 7-1: device descriptor read/8, error -71 [ 272.447618][T12627] rust_binder: Error in use_page_slow: ESRCH [ 272.447641][T12627] rust_binder: use_range failure ESRCH [ 272.453749][T12627] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 272.460047][T12627] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 272.468242][T12627] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:25 [ 272.469985][ T783] usb 7-1: device descriptor read/8, error -71 [ 272.502326][T12599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 272.507016][T12599] rust_binder: Error while translating object. [ 272.513935][T12599] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 272.520235][T12599] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:22 [ 272.530886][ T31] usb 4-1: USB disconnect, device number 26 [ 272.564303][T12632] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12632 comm=syz.8.4317 [ 272.577069][T12632] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12632 comm=syz.8.4317 [ 272.591113][T12632] rust_binder: Error while translating object. [ 272.591144][T12632] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 272.597571][T12632] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:30 [ 272.603151][ T783] usb usb7-port1: unable to enumerate USB device [ 272.644206][T12638] rust_binder: Error while translating object. [ 272.644250][T12638] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 272.650597][T12638] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:36 [ 272.805133][T12645] rust_binder: Failed copying remainder into alloc: EFAULT [ 272.814364][T12645] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 272.821602][T12645] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 272.830029][T12645] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:43 [ 272.970567][T12661] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=12661 comm=syz.7.4326 [ 273.170727][T12677] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 273.181303][T12677] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 273.484433][T12706] devpts: called with bogus options [ 273.672993][ T6931] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 273.822922][ T6931] usb 9-1: Using ep0 maxpacket: 16 [ 273.829999][ T6931] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 273.841911][ T6931] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 273.847869][T12746] overlayfs: failed to resolve './file0': -2 [ 273.856402][ T6931] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 273.872832][ T6931] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 273.882005][ T6931] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.890069][ T6931] usb 9-1: Product: syz [ 273.894498][ T6931] usb 9-1: Manufacturer: ࠝ [ 273.899130][ T6931] usb 9-1: SerialNumber: syz [ 273.902936][ T783] usb 7-1: new full-speed USB device number 56 using dummy_hcd [ 274.045710][ T36] audit: type=1400 audit(2000000000.470:5390): avc: denied { name_bind } for pid=12757 comm="syz.7.4359" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 274.073873][ T783] usb 7-1: not running at top speed; connect to a high speed hub [ 274.084000][ T783] usb 7-1: config 1 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.093968][ T783] usb 7-1: config 1 interface 0 altsetting 15 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 274.107062][ T783] usb 7-1: config 1 interface 0 has no altsetting 0 [ 274.111896][ T6931] usb 9-1: 0:2 : does not exist [ 274.115224][ T783] usb 7-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.40 [ 274.123076][ T6931] usb 9-1: USB disconnect, device number 3 [ 274.128435][ T783] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.141600][ T783] usb 7-1: Product: syz [ 274.148348][ T783] usb 7-1: Manufacturer: syz [ 274.153543][ T783] usb 7-1: SerialNumber: syz [ 274.232811][T12760] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 274.240073][T12760] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:35 [ 274.276719][T12764] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 274.286714][T12764] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 274.303537][T11487] udevd[11487]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 274.359628][T12719] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:754 [ 274.363099][ T783] usbhid 7-1:1.0: can't add hid device: -71 [ 274.378231][ T783] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 274.387754][ T783] usb 7-1: USB disconnect, device number 56 [ 274.649248][T12776] rust_binder: Write failure EFAULT in pid:66 [ 274.719742][T12788] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4370'. [ 274.751726][ T36] audit: type=1400 audit(2000000001.170:5391): avc: denied { accept } for pid=12787 comm="syz.8.4370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 274.802236][T12792] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 274.814204][T12792] rust_binder: Write failure EFAULT in pid:50 [ 274.847713][T12797] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 275.122914][ T31] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 275.155265][T12845] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 275.162134][T12845] rust_binder: Error in use_page_slow: ESRCH [ 275.162159][T12845] rust_binder: use_range failure ESRCH [ 275.168610][T12845] rust_binder: Failed to allocate buffer. len:4264, is_oneway:false [ 275.174354][T12845] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 275.182394][T12845] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:64 [ 275.206264][T12848] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 275.221246][T12850] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 275.256287][T12854] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 275.302909][ T31] usb 7-1: Using ep0 maxpacket: 8 [ 275.310070][ T31] usb 7-1: unable to get BOS descriptor or descriptor too short [ 275.320144][ T31] usb 7-1: config 241 has an invalid interface number: 149 but max is 0 [ 275.328573][ T31] usb 7-1: config 241 has no interface number 0 [ 275.334911][ T31] usb 7-1: config 241 interface 149 has no altsetting 0 [ 275.346224][ T31] usb 7-1: string descriptor 0 read error: -22 [ 275.351617][T12863] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 275.352562][ T31] usb 7-1: New USB device found, idVendor=08dd, idProduct=0114, bcdDevice=79.dc [ 275.368307][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.582933][ T31] asix 7-1:241.149 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 275.583306][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 275.594042][ T31] asix 7-1:241.149: probe with driver asix failed with error -71 [ 275.610044][ T31] usb 7-1: USB disconnect, device number 57 [ 275.638185][T12867] fuse: Bad value for 'fd' [ 275.744087][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.754485][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.765417][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 235, setting to 64 [ 275.776285][ T9] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 275.790600][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 275.799722][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.807755][ T9] usb 4-1: Product: syz [ 275.811935][ T9] usb 4-1: Manufacturer: syz [ 275.816567][ T9] usb 4-1: SerialNumber: syz [ 276.452949][ T31] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 276.604081][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.615032][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.624831][ T31] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 276.637753][ T31] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 276.646900][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.647277][ T9] cdc_ncm 4-1:1.0: bind() failure [ 276.660646][ T31] usb 7-1: config 0 descriptor?? [ 276.661276][ T9] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 276.672481][ T9] cdc_ncm 4-1:1.1: bind() failure [ 276.857138][T12863] IPv6: syztnl1: Disabled Multicast RS [ 276.863658][ T62] usb 4-1: USB disconnect, device number 27 [ 277.074258][ T31] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 277.081983][ T31] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 277.089496][ T31] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 277.097252][ T31] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 277.104887][ T31] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 277.112587][ T31] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 277.120439][ T31] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 277.127948][ T31] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 277.135467][ T31] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 277.142968][ T31] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 277.150390][ T31] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 277.158107][ T31] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 277.165923][ T31] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 277.173443][ T31] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 277.181214][ T31] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 277.189349][ T31] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 277.199443][ T31] plantronics 0003:047F:FFFF.0011: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 277.353851][ T31] usb 7-1: USB disconnect, device number 58 [ 277.394289][ T36] audit: type=1400 audit(2000000003.820:5392): avc: denied { read write } for pid=12940 comm="syz.3.4416" name="udmabuf" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:tpm_device_t:s0" [ 277.421750][ T36] audit: type=1400 audit(2000000003.820:5393): avc: denied { open } for pid=12940 comm="syz.3.4416" path="/dev/udmabuf" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:tpm_device_t:s0" [ 277.449151][ T36] audit: type=1400 audit(2000000003.820:5394): avc: denied { ioctl } for pid=12940 comm="syz.3.4416" path="/dev/udmabuf" dev="devtmpfs" ino=83 ioctlcmd=0x7542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:tpm_device_t:s0" [ 277.549704][T12943] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 277.550813][T12943] rust_binder: Error in use_page_slow: ESRCH [ 277.557326][T12943] rust_binder: use_range failure ESRCH [ 277.563543][T12943] rust_binder: Failed to allocate buffer. len:4264, is_oneway:false [ 277.569231][T12943] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 277.577368][T12943] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:87 [ 277.673723][T12955] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 277.686416][T12956] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 277.748478][T12966] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 277.758514][T12966] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 277.765028][T12966] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:110 [ 277.886591][T12976] rust_binder: Error while translating object. [ 277.898947][T12976] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 277.917487][T12976] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:78 [ 277.951962][ T36] audit: type=1400 audit(2000000004.370:5395): avc: denied { read } for pid=12978 comm="syz.3.4429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 278.036680][ T36] audit: type=1400 audit(2000000004.460:5396): avc: denied { setopt } for pid=12978 comm="syz.3.4429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 278.682750][ T36] audit: type=1326 audit(2000000005.100:5397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12996 comm="syz.7.4434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0e18e929 code=0x7ffc0000 [ 278.730829][ T36] audit: type=1326 audit(2000000005.130:5398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12996 comm="syz.7.4434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9d0e18e929 code=0x7ffc0000 [ 278.770058][ T36] audit: type=1326 audit(2000000005.130:5399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12996 comm="syz.7.4434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0e18e929 code=0x7ffc0000 [ 278.812350][T13006] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 278.813822][T13006] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:117 [ 279.155200][T13029] binder: Bad value for 'stats' [ 279.234456][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 279.329731][T13036] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:134 [ 279.329775][T13036] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 279.338991][T13036] rust_binder: Read failure Err(EFAULT) in pid:134 [ 279.347658][T13036] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 279.354407][T13036] rust_binder: Read failure Err(EFAULT) in pid:134 [ 279.412930][T13049] fuse: Unknown parameter 'fd( ix2nT.% gH4&8@0x0000000000000003' [ 279.590153][T13054] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 279.591012][T13054] rust_binder: Failed to allocate buffer. len:4248, is_oneway:true [ 279.597578][T13054] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 279.605531][T13054] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:138 [ 280.102960][ T62] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 280.264762][ T62] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 280.275067][ T62] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 280.285016][ T62] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 280.300565][ T62] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 280.310140][ T62] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.318293][ T62] usb 7-1: Product: 鿽ᚣ櫷Ά맹뱡칮ݕ䒛粻꾛磆쉯鮚厳嗧쳀岕㨥ม댘턐靆군娲틶쿠ٽ灸뱅쁦Ⲑ솶ஷᔲ尖色휮渋㍮퍂잰壘쥷➞痻ﳼ掋틼鞯䷁᜛㤉屺㵝㖳텇쇕蝖筟㿫栿림믘啄꺘║㐾엧ண럫듃㵜䓮鈖苓泎틖窳乾骳뎅ꐰ醎胎懾ᡖ㺌㩘ꬔĬ䑻梋獃앀醕쨿辵තፑ䷝䁦ᇾ헄㓡㭲䢡ㇰ鮀䕛ㄱ듿 [ 280.355014][ T62] usb 7-1: Manufacturer: 㠁 [ 280.359281][T13085] rust_binder: Error while translating object. [ 280.359653][T13085] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 280.359763][ T62] usb 7-1: SerialNumber: ᐉ [ 280.366626][T13085] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:102 [ 280.410235][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 280.410258][ T36] audit: type=1400 audit(2000000006.830:5417): avc: denied { create } for pid=13086 comm="syz.8.4464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 280.473766][T13097] fuse: Unknown parameter '00000000000000000000U' [ 280.499678][ T36] audit: type=1400 audit(2000000006.920:5418): avc: denied { mounton } for pid=13095 comm="syz.3.4467" path="/bus" dev="ramfs" ino=61720 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 280.499772][T13098] overlay: ./bus is not a directory [ 280.685004][ T62] cdc_ncm 7-1:1.0: bind() failure [ 280.694370][ T62] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 280.701485][ T62] cdc_ncm 7-1:1.1: bind() failure [ 280.710298][ T62] usb 7-1: USB disconnect, device number 59 [ 281.273940][T13118] serio: Serial port ttynull [ 281.403761][T13136] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.449087][ T36] audit: type=1400 audit(2000000007.870:5419): avc: denied { remount } for pid=13141 comm="syz.3.4485" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 281.458807][T13146] binder: Unknown parameter '00000000000000000000' [ 281.507565][T13151] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13151 comm=syz.3.4488 [ 281.520604][T13151] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13151 comm=syz.3.4488 [ 281.562938][T13158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.573498][T13158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.660194][T13177] rust_binder: Read failure Err(EAGAIN) in pid:788 [ 281.660369][T13177] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:788 [ 281.670113][T13177] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:788 [ 281.726752][T13184] rust_binder: Error while translating object. [ 281.736079][T13184] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 281.742280][T13184] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:790 [ 282.011846][T13198] binder: Unknown parameter 'stats}global' [ 282.039318][T13201] rust_binder: Got transaction with invalid offset. [ 282.039364][T13201] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 282.046709][T13201] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:131 [ 282.122953][ T306] usb 7-1: new low-speed USB device number 60 using dummy_hcd [ 282.319501][ T306] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 282.328653][ T306] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.343179][ T306] usb 7-1: config 0 descriptor?? [ 282.462925][ T62] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 282.463257][T13218] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 282.502518][T13220] fuse: Invalid rootmode [ 282.508015][T13220] overlay: ./file0 is not a directory [ 282.653062][ T62] usb 9-1: Using ep0 maxpacket: 32 [ 282.660329][ T62] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 282.668523][ T62] usb 9-1: config 0 has no interface number 0 [ 282.674734][ T62] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.685751][ T62] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.695766][ T62] usb 9-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 282.704984][ T62] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.716587][ T62] usb 9-1: config 0 descriptor?? [ 282.952449][ T306] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 282.963035][ T306] asix 7-1:0.0: probe with driver asix failed with error -61 [ 283.330565][ T62] uclogic 0003:28BD:0094.0012: failed retrieving string descriptor #100: -71 [ 283.352265][ T62] uclogic 0003:28BD:0094.0012: failed retrieving pen parameters: -71 [ 283.360597][ T62] uclogic 0003:28BD:0094.0012: pen probing failed: -71 [ 283.367694][ T62] uclogic 0003:28BD:0094.0012: failed probing parameters: -71 [ 283.375347][ T62] uclogic 0003:28BD:0094.0012: probe with driver uclogic failed with error -71 [ 283.385728][ T62] usb 9-1: USB disconnect, device number 4 [ 283.443265][T13236] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.443697][T13236] rust_binder: Error in use_page_slow: ESRCH [ 283.450285][T13236] rust_binder: use_range failure ESRCH [ 283.456592][T13236] rust_binder: Failed to allocate buffer. len:4264, is_oneway:false [ 283.462224][T13236] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 283.470565][T13236] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:189 [ 283.712963][T12900] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 283.874002][T12900] usb 4-1: config 0 has an invalid interface number: 176 but max is 0 [ 283.882273][T12900] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 283.895983][T12900] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 283.904755][T12900] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.914886][T12900] usb 4-1: config 0 has no interface number 0 [ 283.921134][T12900] usb 4-1: config 0 interface 176 altsetting 0 endpoint 0x4 has invalid maxpacket 5632, setting to 64 [ 283.932519][T12900] usb 4-1: config 0 interface 176 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 283.947178][T12900] usb 4-1: New USB device found, idVendor=0499, idProduct=1039, bcdDevice= c.76 [ 283.956283][T12900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.964321][T12900] usb 4-1: Product: syz [ 283.968599][T12900] usb 4-1: Manufacturer: syz [ 283.973247][T12900] usb 4-1: SerialNumber: syz [ 283.978744][T12900] usb 4-1: config 0 descriptor?? [ 284.187774][T12900] snd-usb-audio 4-1:0.176: probe with driver snd-usb-audio failed with error -2 [ 284.200300][T12900] usb 4-1: USB disconnect, device number 28 [ 284.204971][T11487] udevd[11487]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.176/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 284.226326][T13259] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 284.292931][ T306] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 284.442924][ T306] usb 9-1: Using ep0 maxpacket: 32 [ 284.449799][ T306] usb 9-1: config 5 has an invalid interface number: 32 but max is 0 [ 284.458170][ T306] usb 9-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 284.466910][ T306] usb 9-1: config 5 has no interface number 0 [ 284.473090][ T306] usb 9-1: config 5 interface 32 altsetting 0 endpoint 0x8F has invalid maxpacket 1023, setting to 64 [ 284.484325][ T306] usb 9-1: config 5 interface 32 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 284.494979][ T306] usb 9-1: config 5 interface 32 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 284.505808][ T306] usb 9-1: config 5 interface 32 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 284.516634][ T306] usb 9-1: config 5 interface 32 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 284.527461][ T306] usb 9-1: config 5 interface 32 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 284.538259][ T306] usb 9-1: config 5 interface 32 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 284.549066][ T306] usb 9-1: config 5 interface 32 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 284.560012][ T306] usb 9-1: config 5 interface 32 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 284.570312][ T306] usb 9-1: config 5 interface 32 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 284.581932][ T306] usb 9-1: config 5 interface 32 altsetting 0 has a duplicate endpoint with address 0x8E, skipping [ 284.592676][ T306] usb 9-1: config 5 interface 32 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 284.602528][ T306] usb 9-1: config 5 interface 32 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 284.613169][ T306] usb 9-1: config 5 interface 32 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 284.624081][ T306] usb 9-1: config 5 interface 32 altsetting 0 endpoint 0x8 has invalid maxpacket 520, setting to 64 [ 284.634898][ T306] usb 9-1: config 5 interface 32 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 284.646489][ T306] usb 9-1: config 5 interface 32 altsetting 0 endpoint 0x8C has invalid maxpacket 19978, setting to 1024 [ 284.657731][ T306] usb 9-1: config 5 interface 32 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 284.667864][ T306] usb 9-1: config 5 interface 32 altsetting 0 has 17 endpoint descriptors, different from the interface descriptor's value: 16 [ 284.682460][ T306] usb 9-1: New USB device found, idVendor=090c, idProduct=3350, bcdDevice=e4.99 [ 284.691580][ T306] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.699670][ T306] usb 9-1: Product: ည [ 284.703927][ T306] usb 9-1: Manufacturer: а [ 284.708555][ T306] usb 9-1: SerialNumber: ᐊ [ 284.720363][T13258] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 284.727614][T13258] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 284.735062][T13258] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 284.746944][T13266] binder: Unknown parameter '' [ 284.856753][T13287] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:213 [ 284.870831][T13292] binder: Bad value for 'stats' [ 285.003228][T13295] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 285.057010][T13296] 9pnet_fd: Insufficient options for proto=fd [ 285.069882][T13296] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:220 [ 285.148173][ T306] usb-storage 9-1:5.32: USB Mass Storage device detected [ 285.165372][ T306] usb-storage 9-1:5.32: Quirks match for vid 090c pid 3350: 20000 [ 285.216939][ T306] usb 9-1: USB disconnect, device number 5 [ 285.259862][ T10] usb 7-1: USB disconnect, device number 60 [ 285.315306][T13307] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 285.315585][T13309] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 285.632960][ T10] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 285.671266][T13320] tmpfs: Unknown parameter 'usrquota_inode_hardlimit' [ 285.680432][T13323] rust_binder: Write failure EFAULT in pid:139 [ 285.804111][ T10] usb 7-1: config 4 has an invalid interface number: 95 but max is 0 [ 285.818538][ T10] usb 7-1: config 4 has no interface number 0 [ 285.824675][ T10] usb 7-1: config 4 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 285.835749][ T10] usb 7-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 285.844840][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.852839][ T10] usb 7-1: Product: syz [ 285.857048][ T10] usb 7-1: Manufacturer: syz [ 285.861636][ T10] usb 7-1: SerialNumber: syz [ 285.867343][T13312] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 286.106448][ T10] usb 7-1: MIDIStreaming interface descriptor not found [ 286.118457][ T10] usb 7-1: USB disconnect, device number 61 [ 286.412921][ T10] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 286.564699][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 286.570711][T13337] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.571072][ T10] usb 7-1: config 0 interface 0 altsetting 244 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 286.584956][T13337] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 286.591086][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 286.598436][T13337] rust_binder: Write failure EINVAL in pid:145 [ 286.604755][ T10] usb 7-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 286.604787][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.605870][ T10] usb 7-1: config 0 descriptor?? [ 286.722941][T13347] netlink: 'syz.7.4552': attribute type 8 has an invalid length. [ 286.730852][T13348] netlink: 'syz.7.4552': attribute type 8 has an invalid length. [ 286.841963][ T10] usb 7-1: string descriptor 0 read error: -71 [ 286.855380][ T10] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 286.864359][ T10] usb 7-1: USB disconnect, device number 62 [ 287.033392][T12514] udevd[12514]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:4.95/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 287.652912][ T306] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 287.733755][T13377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 287.746341][T13382] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 287.756509][T13382] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 287.770352][T13382] rust_binder: Write failure EINVAL in pid:171 [ 287.787947][T13384] incfs: iterate_incfs_dir / -22 [ 287.799169][T13384] incfs: iterate_incfs_dir / -22 [ 287.804930][ T36] audit: type=1400 audit(2000000014.230:5420): avc: denied { add_name } for pid=13383 comm="syz.8.4565" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 287.826556][ T36] audit: type=1400 audit(2000000014.230:5421): avc: denied { create } for pid=13383 comm="syz.8.4565" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 287.847944][ T36] audit: type=1400 audit(2000000014.230:5422): avc: denied { associate } for pid=13383 comm="syz.8.4565" name="memory.events" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 287.870992][ T306] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 287.882635][ T306] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 287.893755][ T306] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 287.903746][ T306] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 287.916310][T13388] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 287.916823][ T306] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 287.932363][ T306] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.941152][ T306] usb 7-1: config 0 descriptor?? [ 287.950275][T13388] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 288.031886][ T36] audit: type=1400 audit(2000000014.450:5423): avc: denied { execute } for pid=13391 comm="syz.8.4568" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:modules_conf_t:s0" [ 288.117039][T13397] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 288.139450][T13399] ------------[ cut here ]------------ [ 288.151518][T13399] WARNING: CPU: 1 PID: 13399 at mm/page_alloc.c:5157 __alloc_pages_noprof+0xe4/0x6c0 [ 288.161093][T13399] Modules linked in: [ 288.165105][T13399] CPU: 1 UID: 0 PID: 13399 Comm: syz.8.4571 Not tainted 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473 [ 288.178738][T13399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 288.188892][T13399] RIP: 0010:__alloc_pages_noprof+0xe4/0x6c0 [ 288.195188][T13399] Code: 0f 1f 44 00 00 41 83 fd 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d a4 78 ee 05 00 0f 85 c4 00 00 00 c6 05 97 78 ee 05 01 <0f> 0b 31 c0 e9 b6 00 00 00 41 83 fd 0a 0f 87 aa 00 00 00 44 89 6c [ 288.215108][T13373] netlink: 80 bytes leftover after parsing attributes in process `syz.6.4561'. [ 288.215108][T13399] RSP: 0018:ffffc9000110f680 EFLAGS: 00010246 [ 288.215144][T13399] RAX: 0000000000000000 RBX: 1ffff92000221ed4 RCX: 0000000000000000 [ 288.238514][T13399] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000110f728 [ 288.246808][T13399] RBP: ffffc9000110f7a8 R08: ffffc9000110f727 R09: 0000000000000000 [ 288.254856][T13399] R10: ffffc9000110f710 R11: fffff52000221ee5 R12: ffffc9000110f6c0 [ 288.262923][T13399] R13: 000000000000000e R14: dffffc0000000000 R15: 0000000000000000 [ 288.270931][T13399] FS: 00007fdc76df76c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 288.279941][T13399] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 288.286580][T13399] CR2: 0000200000001000 CR3: 000000014cc06000 CR4: 00000000003526b0 [ 288.294663][T13399] DR0: 0000000000000007 DR1: 000000000000000b DR2: 0000000000000002 [ 288.302661][T13399] DR3: 0000000000000009 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 288.310699][T13399] Call Trace: [ 288.314037][T13399] [ 288.317004][T13399] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 288.322788][T13399] ? __kasan_slab_alloc+0x73/0x90 [ 288.327911][T13399] ? hashtab_init+0xdb/0x1f0 [ 288.332552][T13399] ___kmalloc_large_node+0x9c/0x1d0 [ 288.337836][T13399] ? ebitmap_read+0x21d/0x990 [ 288.342550][T13399] ? hashtab_init+0xdb/0x1f0 [ 288.347239][T13399] __kmalloc_large_node_noprof+0x1e/0xe0 [ 288.352949][T13399] ? hashtab_init+0xdb/0x1f0 [ 288.357571][T13399] __kmalloc_noprof+0x26d/0x450 [ 288.362455][T13399] hashtab_init+0xdb/0x1f0 [ 288.366918][T13399] ? policydb_read+0x86f/0x28c0 [ 288.371801][T13399] symtab_init+0x44/0x70 [ 288.376122][T13399] policydb_read+0x8fe/0x28c0 [ 288.380844][T13399] ? kasan_save_alloc_info+0x40/0x50 [ 288.386203][T13399] ? __cfi_policydb_read+0x10/0x10 [ 288.391352][T13399] ? security_load_policy+0x128/0x12f0 [ 288.396944][T13399] security_load_policy+0x162/0x12f0 [ 288.402270][T13399] ? irqentry_exit+0x4a/0x60 [ 288.406916][T13399] ? exc_page_fault+0x66/0xc0 [ 288.411621][T13399] ? asm_exc_page_fault+0x2b/0x30 [ 288.416717][T13399] ? __cfi_security_load_policy+0x10/0x10 [ 288.422480][T13399] ? rep_movs_alternative+0x4a/0xa0 [ 288.427752][T13399] sel_write_load+0x298/0x5e0 [ 288.432486][T13399] ? __cfi_sel_write_load+0x10/0x10 [ 288.437790][T13399] ? bpf_lsm_file_permission+0xd/0x20 [ 288.439537][ T306] plantronics 0003:047F:FFFF.0013: ignoring exceeding usage max [ 288.443241][T13399] ? __cfi_sel_write_load+0x10/0x10 [ 288.456113][T13399] vfs_write+0x3c0/0xe80 [ 288.458207][ T306] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 288.460386][T13399] ? __cfi_vfs_write+0x10/0x10 [ 288.470584][ T306] plantronics 0003:047F:FFFF.0013: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 288.472979][T13399] ? __kasan_check_write+0x18/0x20 [ 288.490446][T13399] ? mutex_lock+0x92/0x1c0 [ 288.494943][T13399] ? __cfi_mutex_lock+0x10/0x10 [ 288.499826][T13399] ? __fget_files+0x2c5/0x340 [ 288.504598][T13399] ksys_write+0x141/0x250 [ 288.508967][T13399] ? xfd_validate_state+0x68/0x150 [ 288.514170][T13399] ? __cfi_ksys_write+0x10/0x10 [ 288.519055][T13399] ? __kasan_check_write+0x18/0x20 [ 288.524260][T13399] ? fpregs_restore_userregs+0x11d/0x260 [ 288.529942][T13399] __x64_sys_write+0x7f/0x90 [ 288.534611][T13399] x64_sys_call+0x271c/0x2ee0 [ 288.539324][T13399] do_syscall_64+0x58/0xf0 [ 288.543788][T13399] ? clear_bhb_loop+0x35/0x90 [ 288.548502][T13399] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 288.554439][T13399] RIP: 0033:0x7fdc7878e929 [ 288.558885][T13399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.578536][T13399] RSP: 002b:00007fdc76df7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 288.587014][T13399] RAX: ffffffffffffffda RBX: 00007fdc789b5fa0 RCX: 00007fdc7878e929 [ 288.595090][T13399] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003 [ 288.603116][T13399] RBP: 00007fdc78810b39 R08: 0000000000000000 R09: 0000000000000000 [ 288.611190][T13399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.619233][T13399] R13: 0000000000000000 R14: 00007fdc789b5fa0 R15: 00007ffe98d8c768 [ 288.627276][T13399] [ 288.630309][T13399] ---[ end trace 0000000000000000 ]--- [ 288.635935][T13399] SELinux: failed to load policy [ 288.762956][ T62] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 288.767069][T13415] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 288.771064][T13415] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 288.902996][ T62] usb 4-1: device descriptor read/64, error -71 [ 289.152931][ T62] usb 4-1: device descriptor read/64, error -71 [ 289.392956][ T62] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 289.522930][ T62] usb 4-1: device descriptor read/64, error -71 [ 289.762969][ T62] usb 4-1: device descriptor read/64, error -71 [ 289.873041][ T62] usb usb4-port1: attempt power cycle [ 290.213038][ T62] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 290.234038][ T62] usb 4-1: device descriptor read/8, error -71 [ 290.364124][ T62] usb 4-1: device descriptor read/8, error -71 [ 290.523246][ T783] usb 7-1: USB disconnect, device number 63 [ 290.602957][ T62] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 290.624003][ T62] usb 4-1: device descriptor read/8, error -71 [ 290.754018][ T62] usb 4-1: device descriptor read/8, error -71 [ 290.863024][ T62] usb usb4-port1: unable to enumerate USB device