last executing test programs: 4m52.095380249s ago: executing program 3 (id=168): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r1, &(0x7f0000000000), 0x2002) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x7, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x40}], 0x0, 0x0, 0x0}) 4m52.06393155s ago: executing program 3 (id=171): ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x97c}, 0x0) socket$tipc(0x1e, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, 0x0) r4 = getpid() r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) read(0xffffffffffffffff, &(0x7f0000000000), 0x2002) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000080)={0x1, 0x0, 0x100801f9, 0x1, 0xb94}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setaffinity(r4, 0x8, &(0x7f0000000100)=0xa400000000000000) sched_setscheduler(r4, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_io_uring_setup(0x3b45, &(0x7f0000000000)={0x0, 0xc5f8, 0x1, 0x1, 0xc3}, 0x0, &(0x7f0000000180)) sendfile(r0, r0, 0x0, 0x7ffff000) 4m49.002335168s ago: executing program 3 (id=190): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x5, &(0x7f0000000640)=0x0) eventfd(0x6) (async) r2 = eventfd(0x6) r3 = accept(r0, 0x0, &(0x7f00000001c0)) io_submit(r1, 0x2, &(0x7f0000000280)=[&(0x7f0000000700)={0x0, 0x0, 0x0, 0x3, 0x8004, r0, 0x0, 0x0, 0x9, 0x0, 0x1, r2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xc, 0x2, r3, &(0x7f0000000200)="12e44b8fef0ba29f3ec2080e", 0xc, 0x2, 0x0, 0x1, r2}]) lsm_get_self_attr(0x68, &(0x7f0000000080)={0x0, 0x0, 0xe1, 0xc1, ""/193}, &(0x7f0000000380)=0xe1, 0x0) (async) lsm_get_self_attr(0x68, &(0x7f0000000080)={0x0, 0x0, 0xe1, 0xc1, ""/193}, &(0x7f0000000380)=0xe1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) mkdir(&(0x7f0000001f40)='./file0\x00', 0x84) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000001000/0x3000)=nil, 0x3000}, 0x7}) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x8, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[]) (async) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[]) madvise(&(0x7f00001d7000/0x4000)=nil, 0x4000, 0x12) 4m48.814103191s ago: executing program 3 (id=191): syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x8, 0xe1, 0x9, 0x14, @empty, @empty, 0x70, 0x40, 0x5, 0x8}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000400)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000400)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x20a6, &(0x7f0000003700)={0x77359400}) (async) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x20a6, &(0x7f0000003700)={0x77359400}) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000e7810061050000000000009003000000000000"]) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x410401, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x410401, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x28001, 0x0) poll(&(0x7f0000000040)=[{r6, 0x4080}], 0x1, 0x8) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) (async) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000000)={{0xffffffffffffffff, 0x2, 0x9, 0x3, 0x1000}}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000000)={{0xffffffffffffffff, 0x2, 0x9, 0x3, 0x1000}}) setsockopt$inet_tcp_int(r3, 0x6, 0x6, &(0x7f00000002c0)=0x9, 0x4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002540), r8) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r9, &(0x7f0000002600)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002580)={0x14, r10, 0xf01, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x88d1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x901) move_mount(r11, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) link(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0/../file0\x00') (async) link(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0/../file0\x00') chroot(&(0x7f0000000300)='./file0\x00') r12 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r12, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') (async) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') 4m48.707645372s ago: executing program 3 (id=192): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async, rerun: 32) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (rerun: 32) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0xfd}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) (async, rerun: 32) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="080005000700ff"], 0x24}}, 0x0) (async, rerun: 32) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, 0x0, 0x0) (async, rerun: 64) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x2150860, &(0x7f0000000000)=ANY=[@ANYRESDEC=r3, @ANYRESHEX=r3, @ANYRES16=r3, @ANYRES16=r3]) (rerun: 64) 4m48.603366454s ago: executing program 3 (id=193): prctl$PR_SET_TIMERSLACK(0x1d, 0x5ce) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10003300, @in6=@mcast2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x20, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0xffff, @private}}]}, 0x80}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000040), 0x4) r2 = inotify_init() inotify_add_watch(r2, 0x0, 0xa4000000) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) clock_adjtime(0x0, &(0x7f0000000000)={0x0, 0x4, 0xc, 0x4, 0xffffffffffffffff, 0x3, 0x8, 0x1, 0x9, 0xffffffff, 0x3, 0xfffffffffffffffd, 0x8000, 0x58cc, 0x4, 0x1, 0x4, 0x0, 0xa, 0x2, 0x7, 0x268, 0x1, 0x4, 0x280, 0x2}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1100) openat$rnullb(0xffffffffffffff9c, &(0x7f00000011c0), 0x65101, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e23, @multicast2}, 0x10) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="73746174730100000062616c2c00"]) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000140)={0x2, 0x0, {0x0, 0x0, 0x0, 0x18, 0x0, 0x60}}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x5ce) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10003300, @in6=@mcast2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x20, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0xffff, @private}}]}, 0x80}}, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) (async) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000040), 0x4) (async) inotify_init() (async) inotify_add_watch(r2, 0x0, 0xa4000000) (async) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) (async) clock_adjtime(0x0, &(0x7f0000000000)={0x0, 0x4, 0xc, 0x4, 0xffffffffffffffff, 0x3, 0x8, 0x1, 0x9, 0xffffffff, 0x3, 0xfffffffffffffffd, 0x8000, 0x58cc, 0x4, 0x1, 0x4, 0x0, 0xa, 0x2, 0x7, 0x268, 0x1, 0x4, 0x280, 0x2}) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1100) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f00000011c0), 0x65101, 0x0) (async) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e23, @multicast2}, 0x10) (async) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="73746174730100000062616c2c00"]) (async) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000140)={0x2, 0x0, {0x0, 0x0, 0x0, 0x18, 0x0, 0x60}}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0) (async) 4m48.583324614s ago: executing program 32 (id=193): prctl$PR_SET_TIMERSLACK(0x1d, 0x5ce) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10003300, @in6=@mcast2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x20, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0xffff, @private}}]}, 0x80}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000040), 0x4) r2 = inotify_init() inotify_add_watch(r2, 0x0, 0xa4000000) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) clock_adjtime(0x0, &(0x7f0000000000)={0x0, 0x4, 0xc, 0x4, 0xffffffffffffffff, 0x3, 0x8, 0x1, 0x9, 0xffffffff, 0x3, 0xfffffffffffffffd, 0x8000, 0x58cc, 0x4, 0x1, 0x4, 0x0, 0xa, 0x2, 0x7, 0x268, 0x1, 0x4, 0x280, 0x2}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1100) openat$rnullb(0xffffffffffffff9c, &(0x7f00000011c0), 0x65101, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e23, @multicast2}, 0x10) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="73746174730100000062616c2c00"]) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000140)={0x2, 0x0, {0x0, 0x0, 0x0, 0x18, 0x0, 0x60}}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x5ce) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10003300, @in6=@mcast2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x20, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0xffff, @private}}]}, 0x80}}, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) (async) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000040), 0x4) (async) inotify_init() (async) inotify_add_watch(r2, 0x0, 0xa4000000) (async) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) (async) clock_adjtime(0x0, &(0x7f0000000000)={0x0, 0x4, 0xc, 0x4, 0xffffffffffffffff, 0x3, 0x8, 0x1, 0x9, 0xffffffff, 0x3, 0xfffffffffffffffd, 0x8000, 0x58cc, 0x4, 0x1, 0x4, 0x0, 0xa, 0x2, 0x7, 0x268, 0x1, 0x4, 0x280, 0x2}) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1100) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f00000011c0), 0x65101, 0x0) (async) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e23, @multicast2}, 0x10) (async) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="73746174730100000062616c2c00"]) (async) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000140)={0x2, 0x0, {0x0, 0x0, 0x0, 0x18, 0x0, 0x60}}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0) (async) 2m59.003024659s ago: executing program 0 (id=1946): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20102, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) syz_clone3(&(0x7f0000000200)={0x200000400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) (async) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) (async) clock_nanosleep(0xa, 0x1, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0xd2859f99480e5041}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r3, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(r3, 0x0, &(0x7f0000000a80)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000f80)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async, rerun: 64) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) (rerun: 64) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000100)={{0x27bea3cb3b1acef8, 0x2, 0xffffff71, 0x1, 0x3bb3}}) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000ac1e5108c0d0e00be35410203010902240001000020000904fd02020306000009050402100000fa00090582024000000000"], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async, rerun: 64) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000001c0)={0x3, 0x0, [{0x40000090, 0x0, 0x9}, {0x39f, 0x0, 0xd8}, {0x977, 0x0, 0x8}]}) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) 2m58.858755271s ago: executing program 0 (id=1949): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0xa, 0x0, 0x16}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x3f7, 0x0, &(0x7f0000000e00)="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"}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @remote, 0x7}, 0x1c) sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) r2 = socket$inet6(0xa, 0x1, 0x3) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0x9, @mcast1, 0x5}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000080), 0x4) r3 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002140), 0x101000, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r5, 0x802c550a, &(0x7f0000000280)=@urb_type_bulk={0x3, {0x1, 0x1}, 0xef94, 0x24, 0x0, 0x0, 0x0, 0x200, 0xe, 0x8, 0x7, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000dc0)=[@free_buffer={0x40086303, r3}, @dead_binder_done, @dead_binder_done], 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x20, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000802, r6, &(0x7f0000000400)={0x4, 0x10, 0x4, 0x6d6, 0x6, 0x2, 0x4, 0x9, 0x6}) socket$nl_netfilter(0x10, 0x3, 0xc) 2m58.849260082s ago: executing program 0 (id=1951): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) setpgid(0xffffffffffffffff, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r2, &(0x7f0000000240)=ANY=[], 0x40000) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000007c0)=""/240, 0xf0}], 0x1}, 0x1ff}], 0x2, 0x20022, 0x0) recvfrom$unix(r3, &(0x7f00000004c0)=""/249, 0xf9, 0x40, 0x0, 0x0) recvmsg(r3, &(0x7f0000000480)={&(0x7f00000000c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000000)=""/6, 0x6}], 0x1, &(0x7f0000000280)=""/11, 0xb}, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ftruncate(r4, 0xc17a) lseek(r4, 0x2000, 0x4) getsockopt$TIPC_NODE_RECVQ_DEPTH(r4, 0x10f, 0x83, &(0x7f00000001c0), &(0x7f0000000200)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x8000, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=unix']) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000e00)=[@request_death, @clear_death], 0xff3b, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x50, 0x0, &(0x7f0000002040)="7797f473010e3c6f412193d01ca46e5d1fd37e1ff088862e47734ac7eb2e436321311317afe07822a299d63328f5c10a5f99166b47868f357ba1edd6b402c7022a1fe37f5f729dd812db18dad930f670"}) 2m57.994654895s ago: executing program 0 (id=1967): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x12b) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0xffffdfffffffffff, 0x800, 0x3, 0x1}, 0x20) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000580)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0/file0\x00', 0x100) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, 0x0}) 2m57.975580465s ago: executing program 0 (id=1968): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x20102, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000080)=0x800) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r5, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000200)=""/145, &(0x7f0000695ffc)=0x91) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0xd1383000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000007, 0x13, r3, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r3, 0x0) timer_create(0x2, 0x0, &(0x7f0000000100)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(r8, 0x0, &(0x7f0000000140)={{}, {0x0, 0x989680}}, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@increfs={0x40046304, 0x1}], 0x4e, 0x0, 0x0}) ioctl$ASHMEM_PURGE_ALL_CACHES(r4, 0x770a, 0x0) 2m57.748282629s ago: executing program 0 (id=1975): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair(0x25, 0x3, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4008744b, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) preadv(r4, &(0x7f00000010c0), 0x0, 0x40000004, 0x6) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e20, @local}, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000040)={r8, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000001c0)={r8, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f0000000080)={r8, 0x1, 0x6, @multicast}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000100)=0x7, 0x4) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r9, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}}}, 0x10) close(r9) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f00000000c0)=0x2, 0x4) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e22, 0x80, @loopback, 0x7ff}, 0x1c) listen(r5, 0x0) listen(r10, 0x0) 2m57.688299999s ago: executing program 33 (id=1975): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair(0x25, 0x3, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4008744b, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) preadv(r4, &(0x7f00000010c0), 0x0, 0x40000004, 0x6) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e20, @local}, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000040)={r8, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000001c0)={r8, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f0000000080)={r8, 0x1, 0x6, @multicast}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000100)=0x7, 0x4) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r9, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}}}, 0x10) close(r9) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f00000000c0)=0x2, 0x4) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e22, 0x80, @loopback, 0x7ff}, 0x1c) listen(r5, 0x0) listen(r10, 0x0) 2m31.555357389s ago: executing program 1 (id=2557): stat(0x0, 0x0) r0 = getpid() prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x9, &(0x7f0000000080)=[{0x8, 0x3c, 0x8c, 0x5}, {0x1, 0xff, 0xb6, 0x67c}, {0x0, 0x6, 0x15, 0x8}, {0x2, 0x40, 0x0, 0x4}, {0x9, 0x1, 0x2f, 0x1}, {0x5c9b, 0x8, 0x80, 0x18}, {0x101, 0x40, 0x9, 0x4d04f1eb}, {0x8, 0xd, 0x11, 0xdce}, {0x9, 0x4b, 0x22, 0xffff}]}) (async, rerun: 64) r1 = syz_pidfd_open(r0, 0x0) (rerun: 64) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xbc, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@loopback, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x64010100, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e24, 0x4e23, @in6=@private1}}]}, 0xbc}}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) (async) fcntl$setlease(r4, 0x400, 0x1) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r5) (async, rerun: 32) mount$bind(&(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x2125099, 0x0) (rerun: 32) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630e}, @release], 0x0, 0x0, 0x0}) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x101c82, 0x0) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x1090c2, 0x0) (async, rerun: 32) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0xd2200, 0x0) (async, rerun: 32) socket$unix(0x1, 0x2, 0x0) 2m31.553822529s ago: executing program 1 (id=2558): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x80000005, @empty, 0x5}, 0x1c) (async) r1 = socket$netlink(0x10, 0x3, 0x8000000004) (async) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, &(0x7f0000000140)) (async, rerun: 64) r3 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) getsockopt$inet_udp_int(r3, 0x11, 0xa, 0x0, &(0x7f0000000100)) (async) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) (async, rerun: 32) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async, rerun: 32) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) ppoll(&(0x7f0000000000)=[{r5}], 0x1, 0x0, 0x0, 0x0) (async) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000000), 0x4) (async, rerun: 64) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (rerun: 64) ioctl$BLKPG(r7, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x98, &(0x7f0000000000)={0x8000, 0x8000, 0x13}}) 2m31.550953839s ago: executing program 1 (id=2559): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000000)=0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mount$binderfs(&(0x7f0000000080), &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000100), 0x80a040, &(0x7f0000000140)={[{@max={'max', 0x3d, 0xca}}, {@stats}, {@stats}], [{@smackfsroot={'smackfsroot', 0x3d, '%+.'}}]}) shutdown(r2, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x8010, r1, 0xe2b79000) fremovexattr(r0, &(0x7f0000000200)=@random={'security.', '!+:\x00'}) read(r2, &(0x7f0000000240)=""/17, 0x11) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000740)={0x0, &(0x7f0000000280)=[@code={0x1, 0x89, {"66ba200066edb9840000c0b8c0000000ba000000000f30c7442400e7000000c744240291000000ff2c2464f3420f1efb66baf80cb8e15fcb83ef66bafc0cb000eec46291b86c4700664b0f6e83b0ba941c66ba6100ecc744240003000000c744240237d30000c7442406000000000f011424c4a291aa7b45"}}, @code={0x1, 0x67, {"c42235cfd467260f2014410f01ca66b828010f00d866baf80cb857358083ef66bafc0cb0d1ee66ba410066b8030066efc4a220f705600000008f292099f1c744240023000000c744240251000000ff1c24c4c2153621"}}, @uexit={0x0, 0x18, 0x9}, @cpuid={0x2, 0x18, {0x3, 0x800}}, @code={0x1, 0x61, {"40f426439cb8010000000f01c148b820220000000000000f23d80f21f835c00000b00f23f836650f01d1b805000000b9a4a700000f01c166420f3882342466bad00466b8f00066ef3e400f01f80f1c2b"}}, @uexit={0x0, 0x18, 0x3}, @code={0x1, 0x78, {"0f01744c0066baf80cb86292508fef66bafc0c66ed460f30440f20c0350c000000440f22c0660f3882890000c0feb9e90b0000b8e1000000ba000000000f30da6fd5b9301001c00f326665f3440f0948b8fc6b0000000000000f23d00f21f835000000060f23f8"}}, @uexit={0x0, 0x18, 0xff}, @uexit={0x0, 0x18, 0x400040000000000}, @cpuid={0x2, 0x18, {0x722f37bb, 0xf8a}}, @cpuid={0x2, 0x18, {0x800, 0xd80}}, @cpuid={0x2, 0x18, {0x4, 0x475}}, @cpuid={0x2, 0x18, {0x1, 0x5}}, @cpuid={0x2, 0x18, {0x8, 0xa1d}}, @cpuid={0x2, 0x18, {0x7ff, 0xffffffff}}, @cpuid={0x2, 0x18, {0x1ba, 0xc6}}, @uexit={0x0, 0x18, 0xb7}, @uexit={0x0, 0x18, 0x6}, @cpuid={0x2, 0x18, {0x1, 0xfa}}, @code={0x1, 0x62, {"c74424000d010000c7442402c5000000ff2c240f092e660fc7343436460f2355410fc7a8834d0000b9800000c00f3235008000000f30470f07c4a151f2183ef3460fc7b000000100c4627979960e000000"}}, @uexit={0x0, 0x18, 0x2}, @cpuid={0x2, 0x18, {0xc, 0x1}}, @code={0x1, 0x4b, {"f30f09420f79b4deb42c000066baf80cb8160d9d8eef66bafc0cecc4a3b57c939f758bd6e70fa9400f01cac422f930d066ba6100ec0f00100f32"}}, @uexit={0x0, 0x18, 0x9}, @code={0x1, 0x4a, {"450f06f4c481b55ed40f01f8b9800000c00f3235008000000f3066b88d000f00d0c4417a7ee4c461bb5d910b000000420f01c266ba420066ed"}}, @cpuid={0x2, 0x18, {0xc3, 0xfffffffc}}, @cpuid={0x2, 0x18, {0x0, 0xb1}}], 0x4a0}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000780)={[0x1, 0x7, 0xa606, 0x5, 0x6, 0xfffffffffffffff5, 0xff, 0x6, 0x400, 0x9, 0x1, 0x1, 0x8a4, 0xfffffffffffffff8, 0x36c5], 0x5000, 0x80000}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$setlease(r4, 0x400, 0x2) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000880)) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f00000008c0), 0x509001, 0x0) ioctl$RNDADDTOENTCNT(r6, 0x40045201, &(0x7f0000000900)=0x9) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000940)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000980)={0x10000, 0x100000}) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f00000009c0), &(0x7f0000000a00)=0x40) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) prctl$PR_GET_SECCOMP(0x15) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000a80)='veno\x00', 0x5) ioctl$KDSKBLED(r5, 0x4b65, 0x7fff) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000ac0), 0x3f6a76fd8946d0c0, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000b00)={'hsr0\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000b40)={0x5, 0x2, 0xffff1000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) 2m30.706306612s ago: executing program 1 (id=2577): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030", @ANYRES32=r3, @ANYRESHEX=0x0], 0xb8}, 0x1, 0x0, 0x0, 0x24048015}, 0x22008050) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x17, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socket$packet(0x11, 0x2, 0x300) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(r6, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x1c, r7, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x891) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, 0xffffffffffffffff, 0x7405e000) 2m30.622474743s ago: executing program 1 (id=2581): madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x0) sendfile(r1, r1, 0x0, 0x800000009) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000245000/0x4000)=nil, &(0x7f0000871000/0x4000)=nil, 0x2, &(0x7f0000000000)=[{0x5, 0x10, 0x4}, {0x6, 0x800, 0x6}, {0x6, 0xf0d4, 0x900000}, {0x111, 0x9c8, 0x3}], 0x4, 0x6, 0x4, 0x50, 0x4}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[]) 2m30.544268884s ago: executing program 1 (id=2584): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) umount2(&(0x7f00000000c0)='./file0\x00', 0x6) r2 = eventfd(0x4) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x8008770b, &(0x7f0000000cc0)='\x00\x00\x03\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642@\xb8\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc3\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5U\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x13\xc8\xdc\x00\x00\x00\x00\x00\x00\x00\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5h/41\x99\'\xd0\x1e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xaf\x03\x9bWwh\xca\xf5d\x8di\xe7\xc4\xdbx\xbc\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6NR\x13\x84~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaa\x868hB+\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99v.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\x02\x7f\xc4T\xa5\xc1,*\x8d\xf6\x1f\xbe\x10\x04\x97\x9d+\x81\xbb8|\xf3\x8bo\xa5\xf9\xab[-t\xdf6H\xc1\xb1\b\b\xcc\xbf\xb0c\xe8S\xea6\xf5\xd0\xda/\xbf\xe5p\x82\xb8V\xe9g[\x8d\x14e;\x11o\v\xb8\xb6\x0f\xd3\x16\x82\xc5$\xce\xe2\xab\a\x1c\x8c\x843\xf4\xbb\xc8\xd3\xf5R\xb5\x8dZ\xb7Jql\x05+i{\xc5w\xfcD\x1fE\xcc]\xb7~\xd3\x99\xde\x1dX\xdc}C,|\bf\x80&WeT\x98X\xeb\xef(\x1c9\x00'/623) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000840)={0x0, 0x0, @pic={0x6, 0xc, 0x7, 0x7, 0x6, 0x7b, 0x7, 0x9, 0x7, 0xbe, 0x1, 0x8, 0x9, 0x97, 0x9, 0x5}}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @pic={0x0, 0xfe, 0x0, 0x8}}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x0, 0x2}) r6 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1, 0x200) read(r6, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r7) sendmsg$IEEE802154_LLSEC_GETPARAMS(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r8, 0x200, 0x70bd2a, 0x25dfdbfa, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008014}, 0x14) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0xbc, 0x2}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="080005000700ff"], 0x24}}, 0x0) r11 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r12, 0x112, 0xa, &(0x7f0000000000)=0x5, &(0x7f0000000040)=0x4) ioctl$ASHMEM_SET_SIZE(r11, 0x40087703, 0x8000) r13 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040ef17476000000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r13, 0x0, 0x0) 2m30.468621016s ago: executing program 34 (id=2584): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) umount2(&(0x7f00000000c0)='./file0\x00', 0x6) r2 = eventfd(0x4) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x8008770b, &(0x7f0000000cc0)='\x00\x00\x03\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642@\xb8\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc3\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5U\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x13\xc8\xdc\x00\x00\x00\x00\x00\x00\x00\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5h/41\x99\'\xd0\x1e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xaf\x03\x9bWwh\xca\xf5d\x8di\xe7\xc4\xdbx\xbc\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6NR\x13\x84~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaa\x868hB+\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99v.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\x02\x7f\xc4T\xa5\xc1,*\x8d\xf6\x1f\xbe\x10\x04\x97\x9d+\x81\xbb8|\xf3\x8bo\xa5\xf9\xab[-t\xdf6H\xc1\xb1\b\b\xcc\xbf\xb0c\xe8S\xea6\xf5\xd0\xda/\xbf\xe5p\x82\xb8V\xe9g[\x8d\x14e;\x11o\v\xb8\xb6\x0f\xd3\x16\x82\xc5$\xce\xe2\xab\a\x1c\x8c\x843\xf4\xbb\xc8\xd3\xf5R\xb5\x8dZ\xb7Jql\x05+i{\xc5w\xfcD\x1fE\xcc]\xb7~\xd3\x99\xde\x1dX\xdc}C,|\bf\x80&WeT\x98X\xeb\xef(\x1c9\x00'/623) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000840)={0x0, 0x0, @pic={0x6, 0xc, 0x7, 0x7, 0x6, 0x7b, 0x7, 0x9, 0x7, 0xbe, 0x1, 0x8, 0x9, 0x97, 0x9, 0x5}}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @pic={0x0, 0xfe, 0x0, 0x8}}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x0, 0x2}) r6 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1, 0x200) read(r6, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r7) sendmsg$IEEE802154_LLSEC_GETPARAMS(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r8, 0x200, 0x70bd2a, 0x25dfdbfa, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008014}, 0x14) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0xbc, 0x2}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="080005000700ff"], 0x24}}, 0x0) r11 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r12, 0x112, 0xa, &(0x7f0000000000)=0x5, &(0x7f0000000040)=0x4) ioctl$ASHMEM_SET_SIZE(r11, 0x40087703, 0x8000) r13 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040ef17476000000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r13, 0x0, 0x0) 9.730080468s ago: executing program 6 (id=4481): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$packet_buf(r1, 0x107, 0xd, &(0x7f0000000000)="29e93f2890011146422789c138cc8a7865be2180e3bbc5e8918336b79506d5e6d4ada10752eae1aee7876a197d73002133af46e2bf321d1ec4dee4f7938763df0c1a63ab82118e6c2324fbece88bd91cd9d0c5bb376e6ab9bed4e14fc204202e564228ded44f4b2ce7", 0x69) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0) 9.693118829s ago: executing program 6 (id=4482): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="440f20c03507000000440f22c067420f8f04000000c443ad68b60080000095c4828947b600000000b99d090000b82f624a48baf4e055500f30263636f3430fc73636f2360fa5a10050aa37f39066b817018ec8c4c1795a5100", 0x59}], 0x1, 0x11, 0x0, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/pids.max\x00', 0x17842, 0x1ff) close(0x3) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) close(r7) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x4018, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="321a365d1618c2572d6a175ed92c"]) ioprio_set$uid(0x3, 0x0, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) getsockopt$sock_int(r8, 0x1, 0x2f, 0x0, &(0x7f0000000040)) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r10, 0x0) syz_io_uring_setup(0x3b45, &(0x7f0000000000)={0x0, 0xc5f8, 0x1, 0x1, 0x2dd, 0x0, r3}, 0x0, 0x0) sendfile(r9, r9, 0x0, 0x7ffff000) 6.287497752s ago: executing program 6 (id=4516): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) mount$binderfs(&(0x7f0000000040), &(0x7f0000002200)='./binderfs\x00', 0x0, 0x3327c0e, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000000)='/dev/audio#\x00') r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) r5 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0xfffffffffffffffe) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYRESOCT=r2, @ANYRES64=r2, @ANYRES8=r6, @ANYRES64=r5, @ANYRES64=r3, @ANYRES64=r3, @ANYRESDEC=r0, @ANYRESOCT=r4], 0x8) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r6, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 6.248511933s ago: executing program 6 (id=4517): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) tkill(r1, 0x37) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/255, 0xff, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x50, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f61"}) 6.206395223s ago: executing program 6 (id=4518): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x561, 0x0, 0x9}]}) (async) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000440)=ANY=[@ANYBLOB="01000002000000009e00000000040800000000000014197f11f4ee4c3d23cbe246fe36bcb3e0b526c09afb81929e562c9ee0196c61e2eaf50e17d7967d9bc41e4d73f958975672fe8ce769fa12331a0168d3cc6ac3bcb0b40600437c844f4918a45f18a24f6202a9dcb40314e1dba3cba28b342c6c8b65d6db476d21123a0ff3ded41534aabc1768b569f8e80b18196fbd49a20f1cfbf89d0dbbc50099a3a85370c803b712827e8faef36d"]) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4f2, 0x1236, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000000c0)={0xfffffffffffffe7d, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, 'McE7'}]}}, 0x0}, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0) 4.619381878s ago: executing program 2 (id=4538): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000480)={@flat=@weak_binder={0x77622a85, 0x80e, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/255, 0xff, 0x0, 0x33}, @fda={0x66646185, 0xa, 0x1, 0x22}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x50, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f61"}) (async, rerun: 32) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/zoneinfo\x00', 0x0, 0x0) (rerun: 32) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000400)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, {0x306, @link_local}, 0x0, {0x2, 0x6, @remote}, 'veth1_to_bond\x00'}) 4.619003648s ago: executing program 2 (id=4539): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) dup3(r0, r1, 0x80000) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000, 0x4, &(0x7f0000ffc000/0x1000)=nil) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.572886249s ago: executing program 2 (id=4540): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xdddd1000, 0x10, 0x0, 0x8, 0x2, 0x1, 0x4, 0x0, 0x4, 0x9, 0x10}, {0xcccff001, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2, 0x1, 0x7, 0x4}, {0x2000, 0xdddd0000, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xffff1000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4, 0x8}, {0xeeee8000, 0x3000, 0xb, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x5000, 0xd000, 0x0, 0x7, 0xc, 0x0, 0x2, 0x0, 0x4, 0x10, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x2, 0x4, 0x10}, {0x8080000, 0x3000, 0x0, 0x1, 0x7f, 0x4, 0x0, 0x1a, 0x26, 0x0, 0xff}, {0x80ac000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x1, 0x70, 0x0, 0xdd00, 0x5000, [0xfffffffffffffffc, 0x0, 0x1, 0xfffffffffffffffc]}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x87000}) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x120020, &(0x7f0000000000)=ANY=[@ANYBLOB='defcontext', @ANYRESOCT]) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xdddd1000, 0x10, 0x0, 0x8, 0x2, 0x1, 0x4, 0x0, 0x4, 0x9, 0x10}, {0xcccff001, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2, 0x1, 0x7, 0x4}, {0x2000, 0xdddd0000, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xffff1000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4, 0x8}, {0xeeee8000, 0x3000, 0xb, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x5000, 0xd000, 0x0, 0x7, 0xc, 0x0, 0x2, 0x0, 0x4, 0x10, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x2, 0x4, 0x10}, {0x8080000, 0x3000, 0x0, 0x1, 0x7f, 0x4, 0x0, 0x1a, 0x26, 0x0, 0xff}, {0x80ac000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x1, 0x70, 0x0, 0xdd00, 0x5000, [0xfffffffffffffffc, 0x0, 0x1, 0xfffffffffffffffc]}) (async) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x87000}) (async) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x120020, &(0x7f0000000000)=ANY=[@ANYBLOB='defcontext', @ANYRESOCT]) (async) 4.442594421s ago: executing program 2 (id=4541): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @empty}, 0xc) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @local, @empty}, 0xc) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="0f322e0f35660f3a225a4e250f01c30f2291640f320f23d60f01cf642ed92936640f38ca6601", 0x26}], 0x1, 0x50, &(0x7f0000000100)=[@flags={0x3, 0x212043}, @flags={0x3, 0x8000}], 0x2) 4.371390562s ago: executing program 2 (id=4542): ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008aec1, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x6004, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x43, 0x3, 0x0, 0x5, 0x0, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0xa0, 0x84}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x1}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x100, @string={0x100, 0x3, "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"}}, 0x0, 0x0, 0x0}, 0x0) r4 = epoll_create(0x3) ioctl$BTRFS_IOC_QGROUP_CREATE(r4, 0x80088a02, 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r5, 0x0, 0x8, &(0x7f0000000040)=0x7, 0x4) sendmsg$inet(r2, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x1c, 0x3, 0x4, [{@multicast2, 0x986a}, {@private=0xa010102, 0x1}, {@loopback, 0xa224}]}]}}}], 0x30}, 0x800) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="400f29"], 0x0, 0x0, 0x0, 0x0}, 0x0) io_setup(0x8, &(0x7f0000000340)=0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = eventfd(0x6) io_submit(r6, 0x1, &(0x7f0000003440)=[&(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x2, r7, 0x0, 0x0, 0x400000002, 0x0, 0x1, r8}]) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2.931933915s ago: executing program 6 (id=4559): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000000), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=\"']) (async) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000011c0)=ANY=[@ANYRESDEC, @ANYRES64], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1e0308003c5c980128876360864668f82ffdd569d2f630b5e033ff11edf1c5ffc733d2acb165fe588cd568cd1f31b87b68b00ad84305"], 0xffdd) (async) kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000080)={0xdc}) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0x27, 0xc0, 0xde, 0x20, 0x86a, 0x3, 0xf03f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x2, 0x2, 0x0, 0xf3, 0xbf, 0xf5}}]}}]}}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) 2.685028228s ago: executing program 2 (id=4560): ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) socketpair(0x15, 0x2, 0x1000, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x97c}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x97c}, 0x0) socket$tipc(0x1e, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) read(0xffffffffffffffff, &(0x7f0000000000), 0x2002) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000080)={0x1, 0x0, 0x100801f9, 0x1, 0xb94}) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000080)={0x1, 0x0, 0x100801f9, 0x1, 0xb94}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0xa400000000000000) sched_setscheduler(r3, 0x2, 0x0) (async) sched_setscheduler(r3, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_io_uring_setup(0x3b45, &(0x7f0000000000)={0x0, 0xc5f8, 0x1, 0x1, 0xc3}, 0x0, &(0x7f0000000180)) sendfile(r0, r0, 0x0, 0x7ffff000) 2.426387222s ago: executing program 4 (id=4565): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, 0x4}, 0x1c) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES16=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, 0x0, 0x0, 0x10008a4, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2ec37000) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r4, 0x29, 0x1d, &(0x7f00000001c0)="ec003ab9", 0x4) r5 = socket(0x10, 0x803, 0x0) r6 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x204) write$binfmt_register(r6, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xfe, 0x3a, '/_', 0x3a, ':$@K-^{', 0x3a, './file0'}, 0x30) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f0000000180)=""/250, 0xfa}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f00000035c0)=""/76, 0x4c}, {&(0x7f0000000400)=""/241, 0xf1}, {&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000000780)=""/83, 0x53}, {&(0x7f0000000800)=""/127, 0x7f}], 0x9}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x2100, 0x0) r7 = socket$inet6(0xa, 0x3, 0x88) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x7, 0x2, 0x6, 0x7}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000c00)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x1, 0x0, 0x2}, {0x0, 0x1fffffffe, 0x40000000007, 0x20000a0de, 0x40000000000004, 0x2, 0x200000003, 0x400}, {0x40000000000005, 0x0, 0x0, 0x5}, 0x4, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x6c}, 0x2, @in6=@local, 0x3502, 0x1, 0x8, 0x0, 0x9075, 0x0, 0x9945}}, 0xe8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) read$FUSE(r2, &(0x7f0000000980)={0x2020}, 0x160e) 2.425370112s ago: executing program 4 (id=4566): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="01000000000000000000000000910000", @ANYRES64=r0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRESDEC=r1, @ANYBLOB="18aa98291a79248336"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x1, 0x0, 0x7, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x2}, 0x3, 0x3, 0x0, 0x0, "ae771958a0cb06cc"}}, 0x48}}, 0x20000000) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000040)=ANY=[@ANYBLOB="6d61783d30303030303030303030303030300500303030303030322c4f03a173936174733d676c6f62616c2c73746174733d"]) 2.420696142s ago: executing program 4 (id=4567): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000040)={0x3, 0xe0ffff, 0x0, 0x0, 0x0, 0x3}) 2.409516413s ago: executing program 4 (id=4568): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8100, 0xa0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) rename(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)='./file1\x00') setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES32=r0, @ANYRES64=r0, @ANYRES64=0x0, @ANYRESOCT=r0, @ANYBLOB="86"], 0xd0060) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000440)=0xc00) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) 2.375890043s ago: executing program 4 (id=4569): ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008aec1, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000100010ef170460000000000001090224000100000000090400004703000500092100000401220b0009058103000006a084"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) unshare(0x44040200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000000)={'filter\x00', 0x0, [0xb, 0x4, 0x4, 0x1fa, 0x7]}, &(0x7f0000000080)=0x54) add_key(&(0x7f0000000000)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002100)='./binderfs2/custom1\x00', 0x2, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x6) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x26e1, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r6, 0x8b0f, &(0x7f0000000000)={'wg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) prctl$PR_SET_PTRACER(0x59616d61, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="400f29"], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x119402, 0x0) write$ppp(r7, &(0x7f0000000180)="b4704be47bb7445088ef9f8bcf2c75d79395ba56edeacb4eac0cd28f4a9be1ebee3223fb2a9d415e59bc4172256ec5e7bc5db65214abc6e8b82452fb1fae222e8221addb2ea5519add70057dc01e1c6b36acd0c67c15aeec2d44b2e6d55f98960ce3620d5225ccde448e4940e7ad326db4732341a2bcd29af7e4df9d0df0769683879eb3abeae48a90fb8d008926b94a47beaedffbe0f1637f3fcfcacb700f697dbc1f07cfc0a01910148ecffb9a0bdcaad9a2e6860f5cb199108ba1d3424bd989467e910ee9eb422648a240b26497355411c37a4112d74fa8e92935c2dc032f6da5ccb7a4eb61f9", 0xe8) openat$kvm(0xffffffffffffff9c, 0x0, 0x51bf00, 0x0) 533.155582ms ago: executing program 4 (id=4570): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, 0x0) syz_clone3(0x0, 0x0) r1 = add_key$keyring(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$unlink(0x9, r1, r1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "17321748"}]}}, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3445}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f00000009c0)={0xffffffffffffff9b, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2001}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0xc, @string={0xc, 0x3, "00f5dd9b8af4f9e13b61"}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f0000000300)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x414}}, 0x0, 0x0, 0x0}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3) write$uinput_user_dev(r5, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000040)={0x2020}, 0x2020) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 233.876467ms ago: executing program 5 (id=4571): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x101542, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fstat(r2, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r3) fcntl$setlease(r1, 0x400, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x1ce, 0x0, &(0x7f0000000580)="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"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0xac, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}, @reply={0x40406301, {0x6, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs={0x40046307, 0x3}, @acquire_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setresgid(0xee00, 0x0, r4) lstat(&(0x7f00000002c0)='./file0/file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYRESHEX]) chmod(&(0x7f0000000180)='./file0\x00', 0x1d0) creat(&(0x7f0000000300)='./file0\x00', 0x0) 218.457197ms ago: executing program 5 (id=4572): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) preadv2(r0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/74, 0x4a}, {&(0x7f0000000080)=""/255, 0xff}, {&(0x7f0000000180)=""/244, 0xf4}, {&(0x7f0000000280)=""/72, 0x48}, {&(0x7f0000000300)=""/233, 0xe9}], 0x5, 0x9, 0x3, 0x8) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000480)={0x2, 0x4, 0x9, 0x0, 0xc}) r1 = syz_open_procfs(0x0, &(0x7f0000000500)='net/nfsfs\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000017c0)={0x60, 0x0, &(0x7f0000001700)=[@increfs_done, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001640)={@ptr={0x70742a85, 0x0, &(0x7f0000000540)=""/120, 0x78, 0x2, 0x1e}, @ptr={0x70742a85, 0x0, &(0x7f00000005c0)=""/122, 0x7a, 0x0, 0x28}, @ptr={0x70742a85, 0x1, &(0x7f0000000640)=""/4096, 0x1000, 0x1, 0x39}}, &(0x7f00000016c0)={0x0, 0x28, 0x50}}, 0x400}], 0xa, 0x0, &(0x7f0000001780)="f36e4638c61e99c5ce00"}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = getpgrp(0xffffffffffffffff) read$FUSE(r1, &(0x7f0000002ac0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = syz_clone(0x80000, &(0x7f0000004b00)="4fb98cc24374f5312d28f9bfd2c3cede3864056fd099df316a2b8c7a713dd244b2ea884b59892c7e6a4ab1284131d98dc813f989825298cd0ddbe2d1dae625a09648f5d406092ca938ae1ef973576179c40636c49535ff2256160d5629d24aab6cd09428758c2b0ed22feb9e", 0x6c, &(0x7f0000004b80), &(0x7f0000004bc0), &(0x7f0000004c00)="97a1c4c2cedad5841099f4") getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000004c40)={0x0, 0x0}, &(0x7f0000004c80)=0xc) r9 = gettid() stat(&(0x7f0000004cc0)='./file0\x00', &(0x7f0000004d00)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000004d80)='./file0\x00', &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgid(0xffffffffffffffff) read$FUSE(r1, &(0x7f0000004e40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) stat(&(0x7f0000006e80)='.\x00', &(0x7f0000006ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000006f40)={0x0}, &(0x7f0000006f80)=0xc) r16 = geteuid() r17 = getgid() r18 = getpid() newfstatat(0xffffffffffffff9c, &(0x7f0000009340)='./file0\x00', &(0x7f0000009380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) stat(&(0x7f0000009400)='./file0\x00', &(0x7f0000009440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000009500)=[{{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000001800)="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", 0x1000}, {&(0x7f0000002800)="0d0058c7b0ca09d4299270fe65", 0xd}, {&(0x7f0000002840)="7f58082edfc5f1bf78bfd6324449303474c4cdc24524cd775a9fafe2e5a9aa3bf5a81313c6242543f379d7eedbd4d8fad618415e9795a708c8f53ce7eff225c0b87cd9c3ad987ce039f7e5195696512914edb082a5882d407d4e8ea1e7c2dbfa661e152657ca76f4e44e2f131f953da139a0300f6ec66e150df7ada559086e3a24f4ebd04d39dab94d73b53648d54d055e6c535ad66e", 0x96}, {&(0x7f0000002900)="e8cda61a4e68ec835b0f1814d093f9", 0xf}, {&(0x7f0000002940)="35110ffba055aeebf368fc449540939f3ac05a721f2e04b42f3866d969728adcdb1685c1f5cfc20aacdad4eb5cd566bdf08b782285ee5d17faaf0e89302a4ff5f8446b1e1510498c48a4be3d8e681eedde18afe209bb6d51d00a079691c8e265b8be224124a35e0dc218088e537b8b8561756942033250eb26adbfad8fd3eca305368a9c043555e7ddc65b0711acf4241aadf21455bd45a55fc87582d95f95c3fdd2948e7a27bcbe741ad72904ec9c968b54dc252ffc9b8aa49c0ed2ad45dad54bd1fc01257e7957c35dfbfc80bf816e376867ef6f925ef03c0e38b2003ef795c61e7c945d8ef8ed080240cd7a5bdb1b0fb69a04e0dc9988ea", 0xf9}], 0x5, &(0x7f0000006fc0)=[@rights={{0x38, 0x1, 0x1, [r1, r1, r0, r1, r1, r1, r1, r2, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r3, r5, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}], 0xe8, 0x1}}, {{&(0x7f00000070c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000009300)=[{&(0x7f0000007140)="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", 0x1000}, {&(0x7f0000008140)="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", 0xfe}, {&(0x7f0000008240)="56ba0d89ec50d725bdc1bde5702e628d62ef87debb68d3a37bc12b74b5fa1108cb039e246108e4261eb88cf3a343e9894005ad0d4d3aaea1c6671351edfdb30bf10ff2e3cec7cd2c0c96458eda88836842306792f6d96ed00297f3f9920990bdb49b6135ac7852d6af49174b148b264337dfc69245be97c5f2597c8a7e296f6a9c39", 0x82}, {&(0x7f0000008300)="a654cbe252bb3e1c53f3e52a75c1f13932599ab0ae174f474c681f6f6fb0b1470022cdc243286d7d7322e9695ffa38e80349bee7357eec4704d0af3d7f6172da1e2b17075b5dd0e7ba6c4ab3a0f142eae6f99c0415dca0e576024199b0cd742d0a3eb098bc4a329bfb83e160f6f815243632d915e54d5257da4618dbebfda69700df4ce835dff18f65f3f75fff08712abe469a30a9590d2ce04a81e8890cc513b8a8245af1d2900bd516a2b8e012f2f02fc5f5cf015bb166937482634f63900555e6b2d74a98c82dc90b0fa5687a4ea8e049e2f93c79634ad98f172420eff5e355585eaf28cd8f5d1161b31450cc2f557ceaec9a470f77674d07d0cd82165f1743b35a04ac14ce30c2310359719ad1bd92d32d2ff88ade5e1a9e8043d4daed6c5455302f57d2d21248d9df511ae2e96e6569a64ff48bc44cf1ac4d298ad77fb9bfee6b6056db2ddca39593fa7b89a5459886eb60271bb89266118db28df6c1b780a5bf728320632a6134a8dd94a1407d75df5dbbf78cb052bd429b2cc9bdea6230e96d2d2589261ab8482d5815de67fd96200b7e94d1e6efb83447a4891d9210e48f5a2ed107f652a4324d6b62b39d83e5636696f5a400e69cb89bdbbceb9fd4c3ebc476dfa54f7c4fad7c7af9f3128ba079e4df6d979ceb6f4c62cab2f1679e7f0607a4b721ea92ac66f206acffab5db6f8d31fdb9c838a6e192db6b2752e3739a209a5263ab2ba50d648d67a90649ac5e579c218fd02cbe4cd23134c5468988abedfc375876566e182e0b0ab66d0c6db2557c8235165dba3058d7ab3508f62c03c19ef663f9f507335e42def1c1d3e5084e1c4dce05a564c0e31cd71f64d4c9a64693e1b66380c854c3c02747e30f4111b556d89d368af9280a3188e46e9419f43a2a0e4650a2374a6acfa2601a5edabefd1a2ac12d12beb6885adb987b98528ad2766db65b8a15c03e8e796cc08780a80936f0b71ed6d55e5ccfe39d7e0a7c196fb22e02740fb697e1991d3d210d6079d01aac331fc29c267896877a08a126bed6119be5e2602df66ab62d2231c25e41a37b0fdc44ecbdc2d4f7b1372126305db52c4f26ba859a011d10dc9a5655efd2f720b00d7a0462fd33998390a95b98177bdc45be12bcbd6f3728b8d9afd49e26cb81b3dd8d23ff5f8a701a0a049251e39d47f96b2ae763d561ade47e2a60b4dadd760fedea6ed57440267444f3460f1ab898dd9aa111c874f68a26743b3df20c79362c9fac452aa058f11dc62eb8549424aad405ce6b08971d1befa77b44fab4692962ba9b2fbd0c2d037d2a6ba65dc1650277ed9ef75c07e6200365fcd520c130d4f8294f71fb3e9b575de5883881dc9f317906f9b4ea1fdc361a0795456861e51f3af9179fd3e05aae24ebe3440bf75ca2734e94bb572f0bf9e47df9d2033766bf6eba44ede36260b347f643400b43e4908b7f417f2fe2998b22fb0f5f8c66c714869f25245113bec8ef96879294ac2a651b04f54eff4ac4d338b4c95363265572a5bf7cd9a1739bd247cf4397d50ea106f3d276b7ea5e7ff53004bfd001ef258b01c193c1d906a0dcd53751ae0ae5652fd9ab199f7c39f1a7df7a8e9f9456b6da18bdb76f5e9aa62b5f7d0dc3d9eff8a08ea2e60a6d58bb63a78ad28c6aaa00a6dfea53889b617ec850f8ada758bc435f9d5cbf92630b5f0bf54efe40aeabedb2d08d82f3b84f14cd4f684ac67b6765129b6baa07c6befec2af40e4c94a373367deaf91f2ecf451551a789bbf49a29be3659b9b5eea4ebffd1e4f4ace0309117763a0614371df79d79260165c6ce5add475ba446aae11e0da10188dc3e8147ae547aa4626cd8ca28d1891057b78ec28e526fa9eebbc32bcdc061093e80c64b6d6982ad7916567d14c5d4165f0023937f158882f9ac00c39b904899191d97879a0e338bf347acf56312c512ae03db70b74a1cc472dd2e6278d672b8d3170f206152d53af7c8cafd3754878c626a71022fc883b6a74de95c36f050f519bfaa571bc7e1bc6e569e7d8c56dbc2d347ff7f1fa120ad1c75e0d0f53367b5952723622533d77cb8506a331c350e884fd6b5734bb4d81af5b78bed94b418aa63cc2e4ad81a237a0d4a82fb01c98cdf9495d7ee2076d9d0a9a8a0a10410c95cd8663a2cbfeadf0cb585b17422d1779e5988f680b8964f297bd5b580f7d4d9f35372dadbaa5fdb53c3f9949793ebf98410f907755f3fc416f304699b2bc84bde66ded6e0b53ee4e9a72dc06d0e1b7e954afef59173a153ce62eb07161c5ca4723692778f8a6abad76030d30bf71af47c99cd5ce09052034a7ef17145a792c2bb0a756f4db9213d6e0984191af1723febe21ddab57211a2292aec751831c3a11dc294d0c82d8bc05051bf86a781b2e4897269a9bac659ef4c3b133e9ed08ca2d9c2f13a582f3bba5dcaacdfed9e48a98195447d7560bfe470747cf085b013def88195412315d68f4e0fde62eea38c84f4e702cbb952c2498420e3d639367976b5a53e35e25c1f1c125a60c08c26139aa3d2642b6f2595b6d832e63ba23476c05ca94346d2adc16f7f6500c60255ee58855b0ae82c04601a7cd02fe981c288fa4619b46c3ef24938e345c34a7fecd35207d2000795160ff799d84b19c03ef2102a767b8f0d08ada7680580e2a590435d0a3805ec54d6e50e0081424fe1adf9a3d1bb1a150b350bf766b756bc9a1730a21a729937fea028cb2c2acdb0e6db527c7e6ca869471ff5bf1b4080698add05d9001ee6284fddb60db9fd51822137ca4cfea709f143c9fae5e294e808a2b0969f50dd9e62f1a34b002d3af80f57c410017c99a465dec836fadc393e7a28da38a04062f39870eb988d379bf93b98def3819eb49159e781347fb8dabf606390113b49fca5bd54837ccc38873a31b5bf8ec830caf5c750a3fd126f299c1957d842fe10325fb7928685db6436f0ee5ab66d98bc518a54c14727db28c7532aea4a4e678edbf0a28db5cc1ae28ce5644e8fb62f2b6d0d2dc77ff61bac1e8ac03b92b69169b36cfb48a458d7233dbb00da7a6936b17c13e097b4b238d2fa16d9e3cca77db3cbc28f744af921eb6a20f2e862630e09f94979ed3c8412725aeb3abf0259e7c67c623adde872c32107489786e682770f929575b2ba988d6dead05d7a3c2c46e5cc04ea8296cc4563d4052db0357352aac64cec1b12e1ba09b2531300c903fbe49a745ad7f06b6024c8af57aceb7b5663d532bbc5fcabe9def622a0bd4bc37df3075d4c20407081bbcc195d31f032ebfe3a36fded903eda96e56727cffe69105d75486b270f886d86ec1a22ca6bb63a80a57382cc6916d4eb4399de91e63a6280bf1d43a78491acfc0b9d8c6164c1030dcd10d2ffacd1de74424c718a612a590190997c525d36ce4d92592cf4b252133aadfa3fa90a13d73c2303bd56c9d3ee91bb643fe5f7ce2f0902e3979b6bc7ed9768370182be83dd66aeb4a0debbb56ae10a01de90fc341deabe73ab79b112845d420c70428a90dbc9a1eaed27c9448cb0147fea4c98c8980fb039b10b73e0fd0100e20f1f8d8d32fcba919f45e0d78ec543fd4b8c43dd0de4d66339ee524582688d04bb7acdaf87a0a4323934b2c47b7449fd82997b0965e6307844d88797c225fdf9a0151a255315a3d5bb0ec88f83c89d9c28a139906c148ef4bfecdf00e5a902da27335e0a65a7c56642fc020cf79d733de46e65f74d6fe57e31bd8568d816121904c4dc034986bc6c001d73a00a00b28b65567b780966ae73023119295b24f757e9204f6fa6f8eaacb10437b163459a648dc52ee6770e2d115e74c36190401c1025870dd2f6f65c2ccee1ead256c9880bc5b64fd9656a4b12023095ebe1d8ee37c85e8617e13c747eaf3d2f437b38ca3d55149a62b31885a2c4689100f508c4f5169effd19b92258a1d7eb3f193c8c490575a19af799d1dac7902a9efe1870ebcea8811565068cf11223c483a0cfecbc7e1a4ec90d18ee93cb820b729d40d0abfb03c3108774fb68ef38104cd7c8e29e77b37e25f88281bd185f0811a39491589b83b82f39a1e68a2f488f0dbe4801e5db2179fbe2e2d561c132d78586fcccf2f02e11a4fd64492863c7c80025be0735e3944355dbe15a0199df0505e9e4537b078f694560fefcdd642019a2987d06c627ff9a8bdf592120d761dbb713208b91d31f6dc03d1bba70ca345ae26e24f5d5fb8aa18b9cf0294e88e32a2eee023d95b0a71872d4da7b6bd9d635aefed71716a8a259455657495a1726190427e293309e75f28729ed71c43f88d3b8092b16d03da0d6c2eda9d76bd268845a088fc00c51315ddf7152751bd8b35b813d0ec88ec4ce7bc2e400edb7b8ad44ecc974f0b3b0a6c34c85a7378d664826443dae98df40b4804c9172889679a666102cf7d70390708c4145b42b9bb1665c80fe07c476116fb1990d77182a29047ce72437285d9d77fc7265ed3609050c5f2f4cdb8ca51c87eea803506bcd65ec313422759d914745369897261ea5c286580d3273be25f51b286006a9ee48cc3220180d389ab9396dd030d65baf955097929b20fa5469e8b97ee2972b63ad8c928ad873df469612494ad61408b6e940601d2adee92af3fb186ea9194fc1bb9efb68db613e4c85b8bda953a4d502047a6a913f388188dc0cf1645a081cbe97bb7bcefcbc0aec2938ae8e0632436ca449e105b9c691007c57b62ee4361613a54ed202199ecbe23514ad3ff9d6bb58c8ab8ba17ca05628d6050a4cee8e0df153d3ef582594c9edea3930b1aa05c3db2a6e64d57f5ca940dc89421b83db179ef33bdbf54aa97ef3932e9275269f8a782a4ded881db710e39677dc41098b4470f19b007eec602d7777a8df98662cfeb95b058639190d15141554b56b3f2b18d336f4da980b91d3cc59a9ad3a5211fd240d915b3fde601f1e75eab359b323bbbd60c8382d2987eded5497fa6e6c46d053c76554a2b0967b153a2a659f16c76e0a40c85566071f32542273645dcf98062d35eba89e014877f46475533988acd605d9764611b45fc4135bfb7ab19175b28d88cc165e3d11b1d0d7a3da2a1af65b91f587741fe3bc0436b113703903cea181fd8b8480f0e0a5e29ae77df2864110157ffec49fc95f3386c74bf78176dbffd220ecb7a75140bbaa2b9b00039f43dd2fad82f2cede0f1cb5921dd7218cd6503367a6976d325961fdb8619a5569277d4220d782ca5192a7c4a43d4b28c6b0c2d1e739b144bc9af8fcc83c392c39e8a59532f16b965600d428b485e106b0f356b4849d416b96136659ddb96b3647d92a175d120e425405886cabede725bfa059b4c27d175769f5048309dc76a261bcb2adc9b39688d536341c6c8f60fe364ce603ccc71062a87add58594d9bd45479765ee9680bc0ab39e3313dc255941fd45c6b667108d132aea42e0c156a5d58ccd9501a1b46fec20c6847f320feb04e13ad44d255a4aefedce6f831c982194243906d10e8f45fe23f3d3bab4890c1a75b43248fda9ff3c85ad81f83c8a05189839a979dacabb4636c2cd4e2da291635e2a081798e88bc857f1f891d583ccb5792f9f57249a8a10bfe4ba7126591842c148045fdbc790f7aa7bb7dc9ae8a39a6d4a216b5d691d6e98688e32608edd3320db3c003a7c6eaf30f51b0a1f69164e1c88249f060929c0505070978603e81c5c24144553a9a1c0964f92ee4882ee0b104214b5fc2fc03c7877c8c3be974ecdf60760da34ffcaf95ea4a496121faa0294f201cf8976f2c048c3726f1f687fde641ad73e044a7da30ba48591be", 0x1000}], 0x4, &(0x7f00000094c0)=[@cred={{0x1c, 0x1, 0x2, {r18, r19, r20}}}], 0x20, 0x40}}], 0x2, 0x20040010) connect$inet(r1, &(0x7f0000009580)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) ptrace(0x11, r6) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000095c0)=0x1ff, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) r21 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000009980)={0x0, &(0x7f0000009600)=[@cpuid={0x2, 0x18, {0x35, 0x8}}, @code={0x1, 0x64, {"66bad10466b8b30066ef3665400f01ba00200000b8010000000f01c1f2420faef7400f0966baf80cb8134c7b87ef66bafc0cb05bee0ff6ab00800000f73366baf80cb8b47c9f86ef66bafc0ced66ba420066ed"}}, @uexit={0x0, 0x18, 0x7}, @cpuid={0x2, 0x18, {0x40, 0x10000}}, @uexit={0x0, 0x18, 0xfffffffffffffffd}, @cpuid={0x2, 0x18, {0xfffffff4}}, @cpuid={0x2, 0x18, {0x34f4}}, @code={0x1, 0x61, {"410f019900100000660f38819c1209000000b9800000c00f3235000400000f30c4a2fd901ce665430f32430fc77b570f3048b8f8000000000000000f23c00f21f835010005000f23f8420f01d1460f06"}}, @cpuid={0x2, 0x18, {0x2, 0x4}}, @uexit={0x0, 0x18, 0x81}, @code={0x1, 0x67, {"66b89b008ed06667656567470f0094350a000000b9800000c00f3235000400000f30480fc79e137a0000b9800000c00f3235000400000f3066baa00066b8056066ef660fc7b2afc92f8a470f2244650f0736440f01c5"}}, @cpuid={0x2, 0x18, {0x3, 0xdf}}, @code={0x1, 0x4f, {"c48290f31f66400f3881b41619f60216c4227d19c7440f01cbc42175da859700000066baf80cb85c28a289ef66bafc0ced660f103cfb0f090f01c40f01ca"}}, @cpuid={0x2, 0x18, {0x6, 0xfffffff7}}, @code={0x1, 0x5e, {"66440f388201c402b0f30b450f22810f20e035000200000f22e0b9201001c0b88eab0000ba000000000f3026440220643666470f383c860080000066b858000f00d8b8010000000f01c1f2221a"}}, @code={0x1, 0x4c, {"2e0f06660f3a607c353e000fc79dbc147ca164660fae7208c4810e597f480f189e050000000f01c9f30fc773af66baa100b008eec4c2053f6c0c00"}}, @uexit={0x0, 0x18, 0x80000001}, @cpuid={0x2, 0x18, {0x7310, 0xfff}}, @cpuid={0x2, 0x18, {0xe0e, 0x6}}], 0x35d}) ioctl$KVM_SET_MSRS(r21, 0x4008ae89, &(0x7f00000099c0)={0x2, 0x0, [{0xbbf, 0x0, 0x2}, {0x210, 0x0, 0x3}]}) write$FUSE_ENTRY(r1, &(0x7f000000ba40)={0x90, 0x0, r4, {0x3, 0x3, 0xf, 0x2, 0x7, 0x3ae, {0x6, 0xfffffffffffffffc, 0x8, 0x2, 0x1fa4b321, 0x7fffffffffffffff, 0x4, 0x9, 0x200, 0xa000, 0x9, 0x0, 0x0, 0xd7}}}, 0x90) 149.297768ms ago: executing program 5 (id=4573): ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20010, r0, 0x45809000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 147.891128ms ago: executing program 5 (id=4574): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @remote}, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="30c40a0e2a7ca9f6c038f2324fa9fb32", @ANYBLOB="b8363c22b1fb3a1ab04b6ab111acc677ed089a7efef4c6ca", @ANYBLOB="01002abd7000fbdbdf2508000000100004800900010073797a3100000000"], 0x24}, 0x1, 0x0, 0x0, 0x4040890}, 0x44080) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0xd3a, 0x8, 0x8000000000000000, 0x8000000000000000, 0x5, 0xffffffffffffffff, 0x5, 0xfffffffffffffff1, 0x7, 0x4, 0x9, 0x3ff, 0xddfa, 0x3, 0xfffffffffffffffa, 0x101], 0xf000, 0x41000}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000280)=[{&(0x7f0000001340)="ff", 0x1}], 0x1, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x881}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, r5, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x6}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0xd}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x24004880}, 0xbb86f48b0a208e5f) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x8982, &(0x7f0000000100)={0x1, 'vlan1\x00', {}, 0x9}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f00000003c0)=ANY=[@ANYBLOB="00fb730608d13d2c32df6870677a9d2eb50a1f259530e8d5325bbf8f4ed5b2bbef4d85894253ddfd5ab2e34ae4f3a71ad4664ca03c4088249ea651828322f6b098f4c8141335f68841b3b67ddcd890d8fb73d5a7105b37a7c10c58cacd99498de3dc18d4f700"/115], 0x73, 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000100)=[@increfs_done={0x40106308, 0x3}], 0x0, 0x0, 0x0}) 14.25491ms ago: executing program 5 (id=4575): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x10}], 0x5b, 0x0, 0x0}) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0x4, 0xe0, 0x4000800, 0x1, @loopback, @mcast2, 0x8000, 0x1, 0x2, 0x7}}) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f00000001c0)={0xffffffffffffffff, 0x1, 0x0, r2}, 0xc) 0s ago: executing program 5 (id=4576): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x8, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000100)={[{0x1ff, 0x0, 0x5, 0x3, 0x51, 0x29, 0x7, 0x4, 0x1, 0x1e, 0x0, 0xe, 0x72b0dc41}, {0x6, 0x7, 0x8, 0x40, 0x6, 0x6, 0x5, 0x4c, 0x9, 0xef, 0x6, 0x81, 0x6}, {0x6, 0x6, 0x62, 0x7, 0x9, 0x7, 0x8, 0x9, 0x7, 0x6, 0x1, 0xb, 0x5}], 0x7}) (rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=4577): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffffffffffc) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)=')}%!:\xb9+\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x1000007, 0x12, r0, 0xffffb000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom1\x00', 0x800, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000100)={0x2}) read(r0, &(0x7f0000000040)=""/128, 0x80) kernel console output (not intermixed with test programs): ied { lock } for pid=11995 comm="syz.2.3779" path="socket:[54143]" dev="sockfs" ino=54143 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 266.488919][ T491] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 266.618876][ T491] usb 6-1: device descriptor read/64, error -71 [ 266.858925][ T491] usb 6-1: device descriptor read/64, error -71 [ 267.098900][ T491] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 267.229240][ T491] usb 6-1: device descriptor read/64, error -71 [ 267.468902][ T491] usb 6-1: device descriptor read/64, error -71 [ 267.512143][T12019] /dev/loop0: Can't lookup blockdev [ 267.579878][ T491] usb usb6-port1: attempt power cycle [ 267.628891][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 267.628917][ T639] Bluetooth: hci0: command 0x1003 tx timeout [ 267.658101][T12024] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3790'. [ 267.669755][ T36] audit: type=1400 audit(1750645800.884:1257): avc: denied { setcurrent } for pid=12023 comm="syz.6.3790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 267.706262][T12032] tipc: Enabling of bearer rejected, failed to enable media [ 267.918891][ T491] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 267.939921][ T491] usb 6-1: device descriptor read/8, error -71 [ 268.069990][ T491] usb 6-1: device descriptor read/8, error -71 [ 268.308916][ T491] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 268.330007][ T491] usb 6-1: device descriptor read/8, error -71 [ 268.460035][ T491] usb 6-1: device descriptor read/8, error -71 [ 268.568995][ T491] usb usb6-port1: unable to enumerate USB device [ 268.641768][T12042] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.246460][ T36] audit: type=1326 audit(1750645802.454:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12062 comm="syz.5.3805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333c78e929 code=0x7ffc0000 [ 269.285265][ T36] audit: type=1326 audit(1750645802.454:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12062 comm="syz.5.3805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333c78e929 code=0x7ffc0000 [ 269.328737][ T36] audit: type=1326 audit(1750645802.454:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12062 comm="syz.5.3805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f333c78e929 code=0x7ffc0000 [ 269.368870][ T36] audit: type=1326 audit(1750645802.454:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12062 comm="syz.5.3805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333c78e929 code=0x7ffc0000 [ 269.404847][ T36] audit: type=1326 audit(1750645802.454:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12062 comm="syz.5.3805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f333c78e929 code=0x7ffc0000 [ 269.446030][ T36] audit: type=1326 audit(1750645802.454:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12062 comm="syz.5.3805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333c78e929 code=0x7ffc0000 [ 269.488552][ T36] audit: type=1326 audit(1750645802.454:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12062 comm="syz.5.3805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f333c78e929 code=0x7ffc0000 [ 269.517065][ T36] audit: type=1326 audit(1750645802.454:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12062 comm="syz.5.3805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333c78e929 code=0x7ffc0000 [ 269.631283][T12072] binder: Bad value for 'stats' [ 269.748900][ T1128] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 269.900239][ T1128] usb 7-1: unable to get BOS descriptor or descriptor too short [ 269.908655][ T1128] usb 7-1: config 6 has an invalid interface number: 200 but max is 0 [ 269.916908][ T1128] usb 7-1: config 6 has no interface number 0 [ 269.923054][ T1128] usb 7-1: config 6 interface 200 has no altsetting 0 [ 269.931267][ T1128] usb 7-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 269.940360][ T1128] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.948422][ T1128] usb 7-1: Product: syz [ 269.952638][ T1128] usb 7-1: Manufacturer: syz [ 269.957423][ T1128] usb 7-1: SerialNumber: syz [ 269.958914][ T307] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 270.120030][ T307] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 270.130003][ T307] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 270.141305][ T307] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 270.150405][ T307] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.158418][ T307] usb 6-1: Product: syz [ 270.162645][ T307] usb 6-1: Manufacturer: syz [ 270.167274][ T307] usb 6-1: SerialNumber: syz [ 270.183520][ T1128] usb 7-1: USB disconnect, device number 43 [ 270.364999][T12110] fuse: Unknown parameter '' [ 270.502609][T12118] 9pnet_fd: Insufficient options for proto=fd [ 270.575923][T12085] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 270.583321][T12085] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 271.112208][T12156] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 271.139283][T12164] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 271.392835][T12085] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 271.408716][T12085] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 271.616752][ T307] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 271.627177][T12192] tipc: Enabling of bearer rejected, media not registered [ 271.628234][ T307] cdc_ncm 6-1:1.0: setting tx_max = 16384 [ 271.658470][ T307] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 271.750805][T12203] overlayfs: failed to clone upperpath [ 271.828780][T12085] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 271.828851][T12085] rust_binder: Read failure Err(EFAULT) in pid:121 [ 271.856281][ T1128] usb 6-1: USB disconnect, device number 11 [ 271.875953][ T1128] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 272.298088][ T36] kauditd_printk_skb: 40 callbacks suppressed [ 272.298108][ T36] audit: type=1326 audit(1750646034.503:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12262 comm="syz.2.3868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db218e929 code=0x7ffc0000 [ 272.328084][ T36] audit: type=1326 audit(1750646034.503:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12262 comm="syz.2.3868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db218e929 code=0x7ffc0000 [ 272.351892][ T36] audit: type=1326 audit(1750646034.533:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12262 comm="syz.2.3868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f5db218e929 code=0x7ffc0000 [ 272.381958][ T36] audit: type=1326 audit(1750646034.533:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12262 comm="syz.2.3868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db218e929 code=0x7ffc0000 [ 272.405650][ T36] audit: type=1326 audit(1750646034.533:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12262 comm="syz.2.3868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5db218e929 code=0x7ffc0000 [ 272.429221][ T36] audit: type=1326 audit(1750646034.533:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12262 comm="syz.2.3868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db218e929 code=0x7ffc0000 [ 272.453134][ T1128] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 272.461449][ T36] audit: type=1326 audit(1750646034.533:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12262 comm="syz.2.3868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5db218e929 code=0x7ffc0000 [ 272.485222][ T36] audit: type=1326 audit(1750646034.533:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12262 comm="syz.2.3868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db218e929 code=0x7ffc0000 [ 272.509068][ T36] audit: type=1326 audit(1750646034.533:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12262 comm="syz.2.3868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5db218e929 code=0x7ffc0000 [ 272.532451][ T36] audit: type=1326 audit(1750646034.533:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12262 comm="syz.2.3868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db218e929 code=0x7ffc0000 [ 272.628859][ T1128] usb 7-1: Using ep0 maxpacket: 16 [ 272.635185][ T1128] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 67, using maximum allowed: 30 [ 272.645947][ T1128] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.655717][ T1128] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 67 [ 272.668617][ T1128] usb 7-1: New USB device found, idVendor=17ef, idProduct=6004, bcdDevice= 0.00 [ 272.677692][ T1128] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.686678][ T1128] usb 7-1: config 0 descriptor?? [ 273.295122][ T1128] usbhid 7-1:0.0: can't add hid device: -71 [ 273.301551][ T1128] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 273.310503][ T1128] usb 7-1: USB disconnect, device number 44 [ 273.458915][ T307] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 273.608864][ T307] usb 6-1: Using ep0 maxpacket: 16 [ 273.619819][ T307] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.627672][T12297] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3879'. [ 273.632939][ T307] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 273.649442][ T307] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.659344][ T307] usb 6-1: config 0 descriptor?? [ 273.867491][T12281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.876129][T12281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.884252][T12281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.892764][T12281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.901388][T12281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.910002][T12281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.918049][T12281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.926619][T12281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.935009][T12281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.943576][T12281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.058886][ T9] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 274.160258][ T307] kye 0003:0458:5016.0019: control desc unexpectedly large [ 274.175956][ T307] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.0019/input/input47 [ 274.191557][ T307] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.0019/input/input48 [ 274.208852][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 274.214760][ T307] kye 0003:0458:5016.0019: input,hiddev96,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.5-1/input0 [ 274.232103][ T9] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 274.249058][ T307] usb 6-1: USB disconnect, device number 12 [ 274.275611][ T9] usb 7-1: config 0 has no interface number 0 [ 274.279692][T12323] fido_id[12323]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 274.296632][ T9] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 274.318929][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.326980][ T9] usb 7-1: Product: syz [ 274.333918][ T9] usb 7-1: Manufacturer: syz [ 274.338563][ T9] usb 7-1: SerialNumber: syz [ 274.346031][ T9] usb 7-1: config 0 descriptor?? [ 274.353874][ T9] smsc95xx v2.0.0 [ 274.357580][ T9] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 274.367737][ T9] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -22 [ 274.531949][T12331] overlayfs: failed to clone upperpath [ 274.555346][ T9] usb 7-1: USB disconnect, device number 45 [ 274.668899][ T307] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 274.829112][ T307] usb 6-1: Using ep0 maxpacket: 16 [ 274.835482][ T307] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 67, using maximum allowed: 30 [ 274.846368][ T307] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.856150][ T307] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 67 [ 274.869117][ T307] usb 6-1: New USB device found, idVendor=17ef, idProduct=6004, bcdDevice= 0.00 [ 274.878190][ T307] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.887237][ T307] usb 6-1: config 0 descriptor?? [ 275.496234][ T307] usbhid 6-1:0.0: can't add hid device: -71 [ 275.502763][ T307] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 275.511856][ T307] usb 6-1: USB disconnect, device number 13 [ 275.978511][T12368] binder: Binderfs stats mode cannot be changed during a remount [ 276.045200][T12376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3908'. [ 276.066573][T12378] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3909'. [ 276.098359][T12384] virtio-fs: tag <(null)> not found [ 276.238908][ T307] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 276.438869][ T307] usb 7-1: Using ep0 maxpacket: 32 [ 276.445223][ T307] usb 7-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 276.456181][ T307] usb 7-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.467207][ T307] usb 7-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 276.480374][ T307] usb 7-1: config 0 interface 0 has no altsetting 0 [ 276.487165][ T307] usb 7-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 276.496230][ T307] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.504902][ T307] usb 7-1: config 0 descriptor?? [ 276.912529][ T307] zeroplus 0003:0C12:0030.001A: hidraw0: USB HID v0.03 Device [HID 0c12:0030] on usb-dummy_hcd.6-1/input0 [ 276.923973][ T307] zeroplus 0003:0C12:0030.001A: no inputs found [ 277.136713][ T9] usb 7-1: USB disconnect, device number 46 [ 277.938893][ T307] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 278.031554][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 278.031574][ T36] audit: type=1326 audit(1750646040.243:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.2.3921" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5db218e929 code=0x0 [ 278.060729][ T36] audit: type=1326 audit(1750646040.243:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.2.3921" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5db218e929 code=0x0 [ 278.083758][ T307] usb 7-1: device descriptor read/64, error -71 [ 278.328886][ T307] usb 7-1: device descriptor read/64, error -71 [ 278.578935][ T307] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 278.708881][ T307] usb 7-1: device descriptor read/64, error -71 [ 278.948952][ T307] usb 7-1: device descriptor read/64, error -71 [ 279.059068][ T307] usb usb7-port1: attempt power cycle [ 279.312886][T12479] SELinux: security_context_str_to_sid () failed with errno=-22 [ 279.398871][ T307] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 279.431216][ T307] usb 7-1: device descriptor read/8, error -71 [ 279.570147][ T307] usb 7-1: device descriptor read/8, error -71 [ 279.718718][ T490] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 279.825737][ T307] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 279.848067][ T307] usb 7-1: device descriptor read/8, error -71 [ 279.879085][ T490] usb 6-1: Using ep0 maxpacket: 32 [ 279.885436][ T490] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 279.893886][ T490] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 279.902703][ T490] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 279.911740][ T490] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 279.921406][ T490] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 279.931094][ T490] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 279.944124][ T490] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 279.953190][ T490] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.961951][ T490] usb 6-1: config 0 descriptor?? [ 279.987345][ T307] usb 7-1: device descriptor read/8, error -71 [ 280.103691][ T307] usb usb7-port1: unable to enumerate USB device [ 280.182504][ T490] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 280.195840][ T490] usb 6-1: USB disconnect, device number 14 [ 280.205988][ T490] usblp0: removed [ 280.232307][T12509] incfs: Options parsing error. -22 [ 280.237684][T12509] incfs: mount failed -22 [ 280.648803][ T490] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 280.819839][ T490] usb 6-1: Using ep0 maxpacket: 32 [ 280.826303][ T490] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 280.834762][ T490] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 280.843956][ T490] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 280.864881][ T490] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 280.876198][ T490] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 280.887524][ T490] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 280.900659][ T490] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 280.909957][ T490] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.922272][ T490] usb 6-1: config 0 descriptor?? [ 280.972529][T12581] overlayfs: failed to clone upperpath [ 281.015510][T12590] geneve1: tun_chr_ioctl cmd 1074025672 [ 281.021140][T12590] geneve1: ignored: set checksum enabled [ 281.028387][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 281.357043][ T490] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 281.571998][ T1388] usb 6-1: USB disconnect, device number 15 [ 281.578730][ T1388] usblp0: removed [ 282.211768][ T36] audit: type=1400 audit(1750646300.248:1339): avc: denied { lock } for pid=12618 comm="syz.5.3979" path="socket:[56130]" dev="sockfs" ino=56130 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 282.487619][ T1388] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 282.659914][ T1388] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 282.670307][ T1388] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 282.682654][ T1388] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 282.691982][ T1388] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.700022][ T1388] usb 6-1: Product: syz [ 282.704285][ T1388] usb 6-1: Manufacturer: syz [ 282.708906][ T1388] usb 6-1: SerialNumber: syz [ 282.714257][ T1388] usb 6-1: config 0 descriptor?? [ 282.719595][T12619] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 282.726927][T12619] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 282.948867][T12619] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 282.956209][T12619] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 283.235993][ T639] Bluetooth: hci0: command 0x1003 tx timeout [ 283.235999][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 283.556715][ T1128] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 283.606402][ T1388] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 283.616467][ T1388] usb 6-1: USB disconnect, device number 16 [ 283.717541][ T1128] usb 7-1: Using ep0 maxpacket: 16 [ 283.723897][ T1128] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 67, using maximum allowed: 30 [ 283.734841][ T1128] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.744637][ T1128] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 67 [ 283.757714][ T1128] usb 7-1: New USB device found, idVendor=17ef, idProduct=6004, bcdDevice= 0.00 [ 283.766887][ T1128] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.775620][ T1128] usb 7-1: config 0 descriptor?? [ 284.033142][T12641] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3986'. [ 284.221133][ T1128] wacom 0003:17EF:6004.001B: unknown main item tag 0x1 [ 284.228172][ T1128] wacom 0003:17EF:6004.001B: unknown main item tag 0x0 [ 284.235926][ T1128] wacom 0003:17EF:6004.001B: unknown main item tag 0x0 [ 284.243135][ T1128] wacom 0003:17EF:6004.001B: unknown main item tag 0x0 [ 284.252230][ T1128] wacom 0003:17EF:6004.001B: hidraw0: USB HID v0.00 Device [HID 17ef:6004] on usb-dummy_hcd.6-1/input0 [ 284.410053][T12677] overlay: ./file0 is not a directory [ 284.433022][ T1388] usb 7-1: USB disconnect, device number 51 [ 284.441488][T12680] SELinux: Context system_u:object_r:hald_var_run_t:s0 is not valid (left unmapped). [ 284.451610][ T36] audit: type=1400 audit(1750646302.344:1340): avc: denied { relabelto } for pid=12678 comm="syz.5.4002" name="udmabuf" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:hald_var_run_t:s0" [ 284.509306][ T36] audit: type=1400 audit(1750646302.344:1341): avc: denied { associate } for pid=12678 comm="syz.5.4002" name="udmabuf" dev="devtmpfs" ino=83 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_var_run_t:s0" [ 284.622940][T12683] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.630283][T12683] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.637938][T12683] bridge_slave_0: entered allmulticast mode [ 284.644324][T12683] bridge_slave_0: entered promiscuous mode [ 284.651059][T12683] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.658248][T12683] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.665371][T12683] bridge_slave_1: entered allmulticast mode [ 284.671840][T12683] bridge_slave_1: entered promiscuous mode [ 284.737792][T12683] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.744888][T12683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.752196][T12683] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.759290][T12683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.782783][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.790244][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.800372][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.807464][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.816709][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.823819][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.851876][T12683] veth0_vlan: entered promiscuous mode [ 284.864482][T12683] veth1_macvtap: entered promiscuous mode [ 284.902038][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 285.006430][T12696] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:603 [ 285.149642][ T1128] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 285.161866][ T36] audit: type=1400 audit(1750646303.008:1342): avc: denied { read write } for pid=12700 comm="syz.6.4007" name="udmabuf" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:hald_var_run_t:s0" [ 285.169761][T12701] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:606 [ 285.194712][ T36] audit: type=1400 audit(1750646303.008:1343): avc: denied { open } for pid=12700 comm="syz.6.4007" path="/dev/udmabuf" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:hald_var_run_t:s0" [ 285.216712][T12706] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 285.231577][T12706] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:611 [ 285.242264][ T36] audit: type=1326 audit(1750646303.073:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12698 comm="syz.4.4006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa39f8e929 code=0x7fc00000 [ 285.299279][ T1128] usb 3-1: device descriptor read/64, error -71 [ 285.555895][ T1128] usb 3-1: device descriptor read/64, error -71 [ 285.791005][ T1388] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 285.812885][ T1128] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 285.951388][ T1128] usb 3-1: device descriptor read/64, error -71 [ 285.951396][ T1388] usb 7-1: Using ep0 maxpacket: 16 [ 285.952609][ T1388] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 67, using maximum allowed: 30 [ 285.973978][ T1388] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.983794][ T1388] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 67 [ 285.996801][ T36] audit: type=1326 audit(1750646303.775:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12698 comm="syz.4.4006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faa39f2ab19 code=0x7fc00000 [ 286.020314][ T1388] usb 7-1: New USB device found, idVendor=17ef, idProduct=6004, bcdDevice= 0.00 [ 286.029565][ T1388] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.040499][ T1388] usb 7-1: config 0 descriptor?? [ 286.208031][ T1128] usb 3-1: device descriptor read/64, error -71 [ 286.325734][ T1128] usb usb3-port1: attempt power cycle [ 286.477165][ T1388] wacom 0003:17EF:6004.001C: unknown main item tag 0x0 [ 286.484101][ T1388] wacom 0003:17EF:6004.001C: unknown main item tag 0x0 [ 286.491736][ T1388] wacom 0003:17EF:6004.001C: unknown main item tag 0x0 [ 286.498864][ T1388] wacom 0003:17EF:6004.001C: unknown main item tag 0x0 [ 286.505774][ T1388] wacom 0003:17EF:6004.001C: unknown main item tag 0x0 [ 286.512682][ T1388] wacom 0003:17EF:6004.001C: unknown main item tag 0x0 [ 286.519613][ T1388] wacom 0003:17EF:6004.001C: unknown main item tag 0x0 [ 286.526493][ T1388] wacom 0003:17EF:6004.001C: unknown main item tag 0x0 [ 286.533388][ T1388] wacom 0003:17EF:6004.001C: unknown main item tag 0x0 [ 286.540307][ T1388] wacom 0003:17EF:6004.001C: unknown main item tag 0x0 [ 286.547179][ T1388] wacom 0003:17EF:6004.001C: unknown main item tag 0x0 [ 286.555262][ T1388] wacom 0003:17EF:6004.001C: hidraw0: USB HID v0.00 Device [HID 17ef:6004] on usb-dummy_hcd.6-1/input0 [ 286.689138][ T1128] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 286.699197][ T1388] usb 7-1: USB disconnect, device number 52 [ 286.711425][ T1128] usb 3-1: device descriptor read/8, error -71 [ 286.803465][T12757] cgroup: Need name or subsystem set [ 286.851338][ T1128] usb 3-1: device descriptor read/8, error -71 [ 287.095283][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 287.095283][ T639] Bluetooth: hci0: command 0x1003 tx timeout [ 287.107478][ T1128] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 287.128601][ T1128] usb 3-1: device descriptor read/8, error -71 [ 287.253672][T12759] rust_binder: Error while translating object. [ 287.253714][T12759] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 287.260014][T12759] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:625 [ 287.278077][ T1128] usb 3-1: device descriptor read/8, error -71 [ 287.405956][ T1128] usb usb3-port1: unable to enumerate USB device [ 288.549177][ T491] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 288.619938][T12841] overlayfs: failed to clone upperpath [ 288.663241][T12847] overlayfs: failed to clone upperpath [ 288.720213][ T491] usb 3-1: Using ep0 maxpacket: 16 [ 288.726775][ T491] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 67, using maximum allowed: 30 [ 288.737952][ T491] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.748333][ T36] audit: type=1326 audit(1750646306.366:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12848 comm="syz.4.4058" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa39f8e929 code=0x0 [ 288.748606][ T491] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 67 [ 288.785342][ T491] usb 3-1: New USB device found, idVendor=17ef, idProduct=6004, bcdDevice= 0.00 [ 288.794532][ T491] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.804206][ T491] usb 3-1: config 0 descriptor?? [ 289.240482][ T491] wacom 0003:17EF:6004.001D: unknown main item tag 0x0 [ 289.247506][ T491] wacom 0003:17EF:6004.001D: unknown main item tag 0x0 [ 289.254432][ T491] wacom 0003:17EF:6004.001D: unknown main item tag 0x0 [ 289.261470][ T491] wacom 0003:17EF:6004.001D: unknown main item tag 0x0 [ 289.268469][ T491] wacom 0003:17EF:6004.001D: unknown main item tag 0x0 [ 289.275376][ T491] wacom 0003:17EF:6004.001D: unknown main item tag 0x0 [ 289.282382][ T491] wacom 0003:17EF:6004.001D: unknown main item tag 0x0 [ 289.289315][ T491] wacom 0003:17EF:6004.001D: unknown main item tag 0x0 [ 289.296214][ T491] wacom 0003:17EF:6004.001D: unknown main item tag 0x0 [ 289.303137][ T491] wacom 0003:17EF:6004.001D: unknown main item tag 0x0 [ 289.310058][ T491] wacom 0003:17EF:6004.001D: unknown main item tag 0x0 [ 289.317832][ T491] wacom 0003:17EF:6004.001D: hidraw0: USB HID v0.00 Device [HID 17ef:6004] on usb-dummy_hcd.2-1/input0 [ 289.456943][ T491] usb 3-1: USB disconnect, device number 36 [ 289.900316][ T36] audit: type=1326 audit(1750646307.432:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12886 comm="syz.5.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333c78e929 code=0x7ffc0000 [ 289.902010][T12889] binder: Unknown parameter 'co'_Next‹D?䡃çò4<¨ÆϘ:–ðG¾ÅÔ|À“{¢kz±åµ„Ñ׉±¥ïw‘>©ìŸˆ+—ÝÈ“¾¸Ô3·ŠÙ©œR°æyJ_û²ˆ»â}>U~ ]dý[F#ŃÑPVr—™ç¾~+…éɇ›ºýx‡#²åè¢-¢g("X]É©z8<Þ<lñh©ìŸˆ+—ÝÈ“¾¸Ô3·ŠÙ©œR°æyJ_û²ˆ»â}>U~ ]dý[F#ŃÑPVr—™ç¾~+…éɇ›ºýx‡#²åè¢-¢g("X]É©z8<Þ<lñh HID v0.05 Device [syz1] on syz1 [ 317.946006][ T491] usb 6-1: USB disconnect, device number 36 [ 317.997514][T13726] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4360'. [ 318.011543][T13722] fido_id[13722]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 318.068322][T13719] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:844 [ 318.177877][T13755] overlayfs: missing 'workdir' [ 318.192182][T13755] overlayfs: missing 'workdir' [ 318.197357][T13755] overlayfs: missing 'workdir' [ 318.202502][T13755] overlayfs: missing 'workdir' [ 318.207675][T13755] overlayfs: missing 'workdir' [ 318.213254][T13755] overlayfs: missing 'workdir' [ 318.218699][T13755] overlayfs: missing 'workdir' [ 318.223778][T13755] overlayfs: missing 'workdir' [ 318.228932][T13755] overlayfs: missing 'workdir' [ 318.234104][T13755] overlayfs: missing 'workdir' [ 318.239236][T13755] overlayfs: missing 'workdir' [ 318.244342][T13755] overlayfs: missing 'workdir' [ 318.249510][T13755] overlayfs: missing 'workdir' [ 318.252217][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 318.260468][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 318.260776][T13755] overlayfs: missing 'workdir' [ 318.271422][ T10] usb 3-1: USB disconnect, device number 49 [ 318.279295][T13755] overlayfs: missing 'workdir' [ 318.284683][T13755] overlayfs: missing 'workdir' [ 318.289937][T13755] overlayfs: missing 'workdir' [ 318.295129][T13755] overlayfs: missing 'workdir' [ 318.300265][T13755] overlayfs: missing 'workdir' [ 318.305459][T13755] overlayfs: missing 'workdir' [ 318.310548][T13755] overlayfs: missing 'workdir' [ 318.315740][T13755] overlayfs: missing 'workdir' [ 318.320793][T13755] overlayfs: missing 'workdir' [ 318.326018][T13755] overlayfs: missing 'workdir' [ 318.331107][T13755] overlayfs: missing 'workdir' [ 318.335991][ T491] usb 6-1: new low-speed USB device number 37 using dummy_hcd [ 318.344079][T13755] overlayfs: missing 'workdir' [ 318.349276][T13755] overlayfs: missing 'workdir' [ 318.354416][T13755] overlayfs: missing 'workdir' [ 318.359525][T13755] overlayfs: missing 'workdir' [ 318.364712][T13755] overlayfs: missing 'workdir' [ 318.370094][T13755] overlayfs: missing 'workdir' [ 318.375220][T13755] overlayfs: missing 'workdir' [ 318.380319][T13755] overlayfs: missing 'workdir' [ 318.385926][T13755] overlayfs: missing 'workdir' [ 318.391621][T13755] overlayfs: missing 'workdir' [ 318.396729][T13755] overlayfs: missing 'workdir' [ 318.402197][T13755] overlayfs: missing 'workdir' [ 318.407393][T13755] overlayfs: missing 'workdir' [ 318.412493][T13755] overlayfs: missing 'workdir' [ 318.417562][T13755] overlayfs: missing 'workdir' [ 318.422750][T13755] overlayfs: missing 'workdir' [ 318.427821][T13755] overlayfs: missing 'workdir' [ 318.432965][T13755] overlayfs: missing 'workdir' [ 318.437999][T13755] overlayfs: missing 'workdir' [ 318.443217][T13755] overlayfs: missing 'workdir' [ 318.448319][T13755] overlayfs: missing 'workdir' [ 318.453444][T13755] overlayfs: missing 'workdir' [ 318.458550][T13755] overlayfs: missing 'workdir' [ 318.463651][T13755] overlayfs: missing 'workdir' [ 318.468658][T13755] overlayfs: missing 'workdir' [ 318.473746][T13755] overlayfs: missing 'workdir' [ 318.478759][T13755] overlayfs: missing 'workdir' [ 318.483837][T13755] overlayfs: missing 'workdir' [ 318.488825][T13755] overlayfs: missing 'workdir' [ 318.493928][T13755] overlayfs: missing 'workdir' [ 318.498970][T13755] overlayfs: missing 'workdir' [ 318.503971][T13755] overlayfs: missing 'workdir' [ 318.509057][T13755] overlayfs: missing 'workdir' [ 318.514062][T13755] overlayfs: missing 'workdir' [ 318.519139][T13755] overlayfs: missing 'workdir' [ 318.524138][T13755] overlayfs: missing 'workdir' [ 318.525656][ T491] usb 6-1: Invalid ep0 maxpacket: 32 [ 318.534595][T13755] overlayfs: missing 'workdir' [ 318.539672][T13755] overlayfs: missing 'workdir' [ 318.544833][T13755] overlayfs: missing 'workdir' [ 318.549907][T13755] overlayfs: missing 'workdir' [ 318.664588][ T491] usb 6-1: new low-speed USB device number 38 using dummy_hcd [ 318.825017][ T491] usb 6-1: Invalid ep0 maxpacket: 32 [ 318.834083][ T491] usb usb6-port1: attempt power cycle [ 318.848257][T13775] netlink: 'syz.2.4377': attribute type 4 has an invalid length. [ 318.858924][T13775] netlink: 'syz.2.4377': attribute type 17 has an invalid length. [ 319.199203][ T491] usb 6-1: new low-speed USB device number 39 using dummy_hcd [ 319.223392][ T491] usb 6-1: Invalid ep0 maxpacket: 32 [ 319.362644][ T36] audit: type=1326 audit(2000000019.774:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13807 comm="syz.2.4388" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb7218e929 code=0x0 [ 319.391592][ T491] usb 6-1: new low-speed USB device number 40 using dummy_hcd [ 319.413291][ T491] usb 6-1: Invalid ep0 maxpacket: 32 [ 319.418722][ T491] usb usb6-port1: unable to enumerate USB device [ 319.722973][ T491] usb 3-1: new low-speed USB device number 50 using dummy_hcd [ 319.894047][ T491] usb 3-1: Invalid ep0 maxpacket: 64 [ 319.931372][T13823] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 319.931404][T13823] rust_binder: Error in use_page_slow: EBUSY [ 319.941891][T13823] rust_binder: use_range failure EBUSY [ 319.947960][T13823] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 319.953450][T13823] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 319.961156][T13823] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 319.970497][T13823] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:851 [ 320.033138][ T491] usb 3-1: new low-speed USB device number 51 using dummy_hcd [ 320.214731][ T491] usb 3-1: Invalid ep0 maxpacket: 64 [ 320.220200][ T491] usb usb3-port1: attempt power cycle [ 320.431395][T13851] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 320.578245][ T10] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 320.589421][ T491] usb 3-1: new low-speed USB device number 52 using dummy_hcd [ 320.610646][ T491] usb 3-1: Invalid ep0 maxpacket: 64 [ 320.749280][ T491] usb 3-1: new low-speed USB device number 53 using dummy_hcd [ 320.756903][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 320.768769][ T10] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 67, using maximum allowed: 30 [ 320.783696][ T491] usb 3-1: Invalid ep0 maxpacket: 64 [ 320.789129][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.798995][ T491] usb usb3-port1: unable to enumerate USB device [ 320.810082][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 67 [ 320.823154][ T10] usb 7-1: New USB device found, idVendor=17ef, idProduct=6004, bcdDevice= 0.00 [ 320.832330][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.841188][ T10] usb 7-1: config 0 descriptor?? [ 321.283007][ T10] wacom 0003:17EF:6004.0026: unknown main item tag 0x0 [ 321.292978][ T10] wacom 0003:17EF:6004.0026: unknown main item tag 0x0 [ 321.300919][ T10] wacom 0003:17EF:6004.0026: unknown main item tag 0x0 [ 321.308648][ T10] wacom 0003:17EF:6004.0026: unknown main item tag 0x0 [ 321.315646][ T10] wacom 0003:17EF:6004.0026: unknown main item tag 0x0 [ 321.323554][ T10] wacom 0003:17EF:6004.0026: unknown main item tag 0x0 [ 321.331183][ T10] wacom 0003:17EF:6004.0026: unknown main item tag 0x0 [ 321.338763][ T10] wacom 0003:17EF:6004.0026: unknown main item tag 0x0 [ 321.346185][ T10] wacom 0003:17EF:6004.0026: unknown main item tag 0x0 [ 321.354913][ T10] wacom 0003:17EF:6004.0026: unknown main item tag 0x0 [ 321.362041][ T10] wacom 0003:17EF:6004.0026: unknown main item tag 0x0 [ 321.370532][ T10] wacom 0003:17EF:6004.0026: hidraw0: USB HID v0.00 Device [HID 17ef:6004] on usb-dummy_hcd.6-1/input0 [ 322.479395][ T36] audit: type=1400 audit(2000000022.683:1371): avc: denied { map } for pid=13944 comm="syz.5.4433" path="/dev/bsg" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 322.613625][T13962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4439'. [ 322.940849][ T10] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 323.101738][ T10] usb 6-1: device descriptor read/64, error -71 [ 323.368473][ T10] usb 6-1: device descriptor read/64, error -71 [ 323.627123][ T491] usb 7-1: USB disconnect, device number 63 [ 323.652765][T14002] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:870 [ 323.657142][ T10] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 323.796104][ T307] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 323.817560][ T10] usb 6-1: device descriptor read/64, error -71 [ 323.831954][T14014] overlayfs: missing 'lowerdir' [ 323.850301][T14018] fuse: Bad value for 'rootmode' [ 323.893594][T14023] rust_binder: Write failure EINVAL in pid:877 [ 323.894363][T14025] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 323.901281][T14024] rust_binder: Write failure EINVAL in pid:877 [ 323.935075][ T307] usb 3-1: device descriptor read/64, error -71 [ 324.074093][ T10] usb 6-1: device descriptor read/64, error -71 [ 324.191731][ T10] usb usb6-port1: attempt power cycle [ 324.202377][ T45] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 324.210014][ T307] usb 3-1: device descriptor read/64, error -71 [ 324.373400][ T45] usb 7-1: Using ep0 maxpacket: 16 [ 324.379709][ T45] usb 7-1: config 0 descriptor has 1 excess byte, ignoring [ 324.387122][ T45] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 67, using maximum allowed: 30 [ 324.397877][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.407799][ T45] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 67 [ 324.420701][ T45] usb 7-1: New USB device found, idVendor=17ef, idProduct=6004, bcdDevice= 0.00 [ 324.429775][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.438508][ T45] usb 7-1: config 0 descriptor?? [ 324.444693][ T45] usbhid 7-1:0.0: can't add hid device: -22 [ 324.450691][ T45] usbhid 7-1:0.0: probe with driver usbhid failed with error -22 [ 324.469604][ T307] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 324.555150][ T10] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 324.577544][ T10] usb 6-1: device descriptor read/8, error -71 [ 324.608675][ T307] usb 3-1: device descriptor read/64, error -71 [ 324.717412][ T10] usb 6-1: device descriptor read/8, error -71 [ 324.865165][ T307] usb 3-1: device descriptor read/64, error -71 [ 324.972085][ T10] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 324.982826][ T307] usb usb3-port1: attempt power cycle [ 324.994568][ T10] usb 6-1: device descriptor read/8, error -71 [ 325.133500][ T10] usb 6-1: device descriptor read/8, error -71 [ 325.250120][ T10] usb usb6-port1: unable to enumerate USB device [ 325.346246][ T307] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 325.368725][ T307] usb 3-1: device descriptor read/8, error -71 [ 325.507691][ T307] usb 3-1: device descriptor read/8, error -71 [ 325.763185][ T307] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 325.785571][ T307] usb 3-1: device descriptor read/8, error -71 [ 325.924578][ T307] usb 3-1: device descriptor read/8, error -71 [ 326.041237][ T307] usb usb3-port1: unable to enumerate USB device [ 326.265629][ T9] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 326.426172][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 326.432526][ T9] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 326.440703][ T9] usb 6-1: config 0 has no interface number 0 [ 326.448270][ T9] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 326.457347][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.465399][ T9] usb 6-1: Product: syz [ 326.469612][ T9] usb 6-1: Manufacturer: syz [ 326.474214][ T9] usb 6-1: SerialNumber: syz [ 326.479502][ T9] usb 6-1: config 0 descriptor?? [ 326.485248][ T9] smsc95xx v2.0.0 [ 326.488927][ T9] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 326.499019][ T9] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -22 [ 326.709228][ T307] usb 6-1: USB disconnect, device number 45 [ 326.804076][ T36] audit: type=1400 audit(2000000026.733:1372): avc: denied { ioctl } for pid=14059 comm="syz.2.4468" path="/dev/udmabuf" dev="devtmpfs" ino=83 ioctlcmd=0x7542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:hald_var_run_t:s0" [ 326.845152][T14062] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 326.867957][T14064] /dev/rnullb0: Can't open blockdev [ 326.874136][T14065] /dev/rnullb0: Can't open blockdev [ 327.024674][ T307] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 327.080590][T14071] 9pnet_fd: Insufficient options for proto=fd [ 327.169920][ T1388] usb 7-1: USB disconnect, device number 64 [ 327.185021][ T307] usb 6-1: Using ep0 maxpacket: 8 [ 327.191489][ T307] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 327.201727][ T307] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 327.212974][ T307] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 327.222190][ T307] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.230712][ T307] usb 6-1: Product: Д [ 327.234824][ T307] usb 6-1: Manufacturer: 倚 [ 327.239600][ T307] usb 6-1: SerialNumber: í± [ 327.247643][T14082] binder: Bad value for 'max' [ 327.278835][ T36] audit: type=1326 audit(2000000027.173:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14086 comm="syz.2.4477" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb7218e929 code=0x0 [ 327.449443][T14105] 9pnet_fd: Insufficient options for proto=fd [ 327.461080][T14054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.474598][T14054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.486271][T14054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.495816][T14054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.937498][ T307] cdc_ncm 6-1:1.0: bind() failure [ 327.945877][ T307] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 327.952901][ T307] cdc_ncm 6-1:1.1: bind() failure [ 327.961142][ T307] usb 6-1: USB disconnect, device number 46 [ 328.025519][ T36] audit: type=1326 audit(2000000027.874:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14075 comm="syz.4.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa39f8e929 code=0x7fc00000 [ 328.072340][ T36] audit: type=1326 audit(2000000027.874:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14075 comm="syz.4.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faa39f8e929 code=0x7fc00000 [ 328.125798][ T36] audit: type=1326 audit(2000000027.874:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14075 comm="syz.4.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa39f8e929 code=0x7fc00000 [ 328.164318][ T36] audit: type=1326 audit(2000000027.874:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14075 comm="syz.4.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa39f8e929 code=0x7fc00000 [ 328.190841][ T36] audit: type=1326 audit(2000000027.874:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14075 comm="syz.4.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa39f8e929 code=0x7fc00000 [ 328.233760][ T36] audit: type=1326 audit(2000000027.874:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14075 comm="syz.4.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa39f8e929 code=0x7fc00000 [ 328.275141][ T36] audit: type=1326 audit(2000000027.874:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14075 comm="syz.4.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa39f8e929 code=0x7fc00000 [ 328.318269][ T36] audit: type=1326 audit(2000000027.874:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14075 comm="syz.4.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa39f8e929 code=0x7fc00000 [ 328.356979][ T36] audit: type=1326 audit(2000000027.874:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14075 comm="syz.4.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa39f8e929 code=0x7fc00000 [ 328.384948][ T36] audit: type=1326 audit(2000000027.874:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14075 comm="syz.4.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa39f8e929 code=0x7fc00000 [ 328.512307][ T10] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 328.698800][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 328.706946][ T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 67, using maximum allowed: 30 [ 328.718157][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.729324][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 67 [ 328.742622][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=6004, bcdDevice= 0.00 [ 328.752013][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.766143][ T10] usb 3-1: config 0 descriptor?? [ 329.066574][ T307] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 329.202835][ T10] wacom 0003:17EF:6004.0027: unknown main item tag 0x0 [ 329.216316][ T10] wacom 0003:17EF:6004.0027: unknown main item tag 0x0 [ 329.226495][ T10] wacom 0003:17EF:6004.0027: unknown main item tag 0x0 [ 329.234524][ T10] wacom 0003:17EF:6004.0027: unknown main item tag 0x0 [ 329.244319][ T10] wacom 0003:17EF:6004.0027: unknown main item tag 0x0 [ 329.244977][ T307] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 329.252614][ T10] wacom 0003:17EF:6004.0027: unknown main item tag 0x0 [ 329.268949][ T10] wacom 0003:17EF:6004.0027: unknown main item tag 0x0 [ 329.276088][ T10] wacom 0003:17EF:6004.0027: unknown main item tag 0x0 [ 329.283374][ T10] wacom 0003:17EF:6004.0027: unknown main item tag 0x0 [ 329.290364][ T10] wacom 0003:17EF:6004.0027: unknown main item tag 0x0 [ 329.291076][ T307] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 329.297924][ T10] wacom 0003:17EF:6004.0027: unknown main item tag 0x0 [ 329.314966][ T10] wacom 0003:17EF:6004.0027: hidraw0: USB HID v0.00 Device [HID 17ef:6004] on usb-dummy_hcd.2-1/input0 [ 329.331074][ T307] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 329.347022][ T307] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.355090][ T307] usb 6-1: Product: syz [ 329.360960][ T307] usb 6-1: Manufacturer: syz [ 329.365927][ T307] usb 6-1: SerialNumber: syz [ 329.419990][ T9] usb 3-1: USB disconnect, device number 58 [ 329.490583][T14137] sit0: entered promiscuous mode [ 329.498001][T14137] netlink: 'syz.4.4495': attribute type 1 has an invalid length. [ 329.505893][T14137] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4495'. [ 329.594485][T14122] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 330.154364][ T307] usb 6-1: 0:2 : does not exist [ 330.171676][ T307] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 330.194976][ T307] usb 6-1: USB disconnect, device number 47 [ 330.411553][T14194] fuse: Bad value for 'fd' [ 330.517963][T14197] __vm_enough_memory: pid: 14197, comm: syz.4.4512, bytes: 21200102232064 not enough memory for the allocation [ 330.820346][T14208] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 330.820369][T14208] rust_binder: Error while translating object. [ 330.831070][T14208] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 330.837353][T14208] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:913 [ 331.183336][ T307] usb 7-1: new full-speed USB device number 65 using dummy_hcd [ 331.276586][T14220] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=14220 comm=syz.2.4521 [ 331.332998][ T307] usb 7-1: device descriptor read/64, error -71 [ 331.589579][ T307] usb 7-1: device descriptor read/64, error -71 [ 331.760625][ T45] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 331.846146][ T307] usb 7-1: new full-speed USB device number 66 using dummy_hcd [ 331.920962][ T45] usb 6-1: Using ep0 maxpacket: 8 [ 331.928055][ T45] usb 6-1: config 1 has an invalid interface number: 167 but max is 2 [ 331.936420][ T45] usb 6-1: config 1 has an invalid interface number: 4 but max is 2 [ 331.944472][ T45] usb 6-1: config 1 has an invalid interface number: 193 but max is 2 [ 331.952653][ T45] usb 6-1: config 1 has an invalid interface number: 150 but max is 2 [ 331.960846][ T45] usb 6-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 331.969838][ T45] usb 6-1: config 1 has no interface number 0 [ 331.975951][ T45] usb 6-1: config 1 has no interface number 1 [ 331.982054][ T45] usb 6-1: config 1 has no interface number 2 [ 331.988229][ T307] usb 7-1: device descriptor read/64, error -71 [ 331.994529][ T45] usb 6-1: config 1 has no interface number 3 [ 332.000694][ T45] usb 6-1: config 1 interface 167 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 332.011799][ T45] usb 6-1: config 1 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 332.024745][ T45] usb 6-1: too many endpoints for config 1 interface 193 altsetting 127: 33, using maximum allowed: 30 [ 332.035839][ T45] usb 6-1: config 1 interface 193 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 332.046908][ T45] usb 6-1: config 1 interface 193 altsetting 127 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 332.057996][ T45] usb 6-1: config 1 interface 193 altsetting 127 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 332.069164][ T45] usb 6-1: config 1 interface 193 altsetting 127 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 332.080394][ T45] usb 6-1: config 1 interface 193 altsetting 127 has a duplicate endpoint with address 0xE, skipping [ 332.091544][ T45] usb 6-1: config 1 interface 193 altsetting 127 has a duplicate endpoint with address 0xA, skipping [ 332.102707][ T45] usb 6-1: config 1 interface 193 altsetting 127 has a duplicate endpoint with address 0x9, skipping [ 332.124101][ T45] usb 6-1: config 1 interface 193 altsetting 127 has 11 endpoint descriptors, different from the interface descriptor's value: 33 [ 332.137650][ T45] usb 6-1: config 1 interface 150 altsetting 4 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 332.148906][ T45] usb 6-1: config 1 interface 150 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 332.160016][ T45] usb 6-1: config 1 interface 150 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 332.171279][ T45] usb 6-1: config 1 interface 150 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 332.182173][ T45] usb 6-1: config 1 interface 150 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 332.193073][ T45] usb 6-1: config 1 interface 150 altsetting 4 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 332.204199][ T45] usb 6-1: config 1 interface 150 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 332.215054][ T45] usb 6-1: config 1 interface 150 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 332.225908][ T45] usb 6-1: config 1 interface 150 altsetting 4 has a duplicate endpoint with address 0x2, skipping [ 332.236812][ T45] usb 6-1: config 1 interface 167 has no altsetting 0 [ 332.243996][ T45] usb 6-1: config 1 interface 193 has no altsetting 0 [ 332.250798][ T45] usb 6-1: config 1 interface 150 has no altsetting 0 [ 332.264192][ T45] usb 6-1: New USB device found, idVendor=19d2, idProduct=0162, bcdDevice=c6.e1 [ 332.273335][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.281443][ T45] usb 6-1: Product: syz [ 332.285687][ T45] usb 6-1: Manufacturer: syz [ 332.290346][ T45] usb 6-1: SerialNumber: syz [ 332.305834][ T307] usb 7-1: device descriptor read/64, error -71 [ 332.313046][T14255] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 332.423514][ T307] usb usb7-port1: attempt power cycle [ 332.508438][T14279] binder: Unknown parameter 'defcontext01777777777777777777777' [ 332.540097][T14255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.552706][T14255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.563177][T14255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.572682][T14255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.608796][ T45] usb 6-1: USB disconnect, device number 48 [ 332.808372][ T307] usb 7-1: new full-speed USB device number 67 using dummy_hcd [ 332.830817][ T307] usb 7-1: device descriptor read/8, error -71 [ 332.904480][ T31] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 332.969815][ T307] usb 7-1: device descriptor read/8, error -71 [ 333.002664][T14305] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.009728][T14305] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.017080][T14305] bridge_slave_0: entered allmulticast mode [ 333.023740][T14305] bridge_slave_0: entered promiscuous mode [ 333.030385][T14305] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.037503][T14305] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.044847][T14305] bridge_slave_1: entered allmulticast mode [ 333.051382][T14305] bridge_slave_1: entered promiscuous mode [ 333.064860][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 333.072304][ T31] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 67, using maximum allowed: 30 [ 333.083115][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.093081][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 67 [ 333.107104][ T31] usb 3-1: New USB device found, idVendor=17ef, idProduct=6004, bcdDevice= 0.00 [ 333.116359][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.128049][ T31] usb 3-1: config 0 descriptor?? [ 333.179660][T14305] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.186743][T14305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.194058][T14305] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.201111][T14305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.236112][ T307] usb 7-1: new full-speed USB device number 68 using dummy_hcd [ 333.256710][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.264372][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.275039][ T207] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.279864][ T307] usb 7-1: device descriptor read/8, error -71 [ 333.282145][ T207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.298004][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.305106][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.339182][T14305] veth0_vlan: entered promiscuous mode [ 333.353069][T14305] veth1_macvtap: entered promiscuous mode [ 333.378595][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 333.378614][ T36] audit: type=1400 audit(2000000038.886:1395): avc: denied { mounton } for pid=14305 comm="syz-executor" path="/root/syzkaller.TjJh5c/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=65804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 333.449637][ T307] usb 7-1: device descriptor read/8, error -71 [ 333.546849][T14326] fuse: Unknown parameter '0000000000000000000000400000000000000000000006' [ 333.567434][ T307] usb usb7-port1: unable to enumerate USB device [ 333.590777][T14287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.599831][T14287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.825812][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 333.831875][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 333.840744][ T31] usb 3-1: USB disconnect, device number 59 [ 333.909471][ T10] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 334.071661][ T10] usb 6-1: config 1 interface 0 has no altsetting 0 [ 334.080039][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice= 0.40 [ 334.089211][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.097484][ T10] usb 6-1: Product: ό朘䆢蟴퓒LJקä©ä‡¢ï›°ê¢”븴䂎㫒투ëªç°°ë„¬á­¯î­¦æŒ¢ç·›äŠ¼ç°°æ¹¾ïŽˆé¾»íž¯éšˆçš´í†›ã°ªâ–¾é¢—àªê˜´á‡ŸìŽ”𤋮簕嬦≽稀齃䦒뎅嚶≄⣮î†â€œåŸ‚璸ኗꥯï¼ç†˜êˆâ˜¢ë¢ä ™âº±áŽ®î»­á­è¼«Ò좧駦柀紥ꖌⓘ… [ 334.121211][ T10] usb 6-1: Manufacturer: à  [ 334.128745][ T10] usb 6-1: SerialNumber: ä€ [ 334.131178][T14334] SELinux: security_context_str_to_sid () failed with errno=-22 [ 334.134483][ T10] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 334.149832][ T10] usb 6-1: no configuration chosen from 1 choice [ 334.389564][T14339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.398138][T14339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.405669][ T36] audit: type=1400 audit(2000000039.840:1396): avc: denied { unmount } for pid=14305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 334.486762][ T491] usb 7-1: new full-speed USB device number 69 using dummy_hcd [ 334.587098][T14358] fuse: Bad value for 'user_id' [ 334.592101][T14358] fuse: Bad value for 'user_id' [ 334.616251][T14360] binder: Bad value for 'max' [ 334.625799][ T491] usb 7-1: device descriptor read/64, error -71 [ 334.636407][ T10] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 334.655661][ T36] audit: type=1400 audit(2000000040.074:1397): avc: denied { rename } for pid=14363 comm="syz.4.4568" name="file0" dev="incremental-fs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 334.786266][ T10] usb 3-1: device descriptor read/64, error -71 [ 334.882275][ T491] usb 7-1: device descriptor read/64, error -71 [ 334.935767][ T9] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 335.042614][ T10] usb 3-1: device descriptor read/64, error -71 [ 335.096108][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 335.102369][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 71, using maximum allowed: 30 [ 335.113486][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.123267][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 71 [ 335.136203][ T9] usb 5-1: New USB device found, idVendor=17ef, idProduct=6004, bcdDevice= 0.00 [ 335.145435][ T491] usb 7-1: new full-speed USB device number 70 using dummy_hcd [ 335.153038][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.162437][ T9] usb 5-1: config 0 descriptor?? [ 335.299255][ T491] usb 7-1: device descriptor read/64, error -71 [ 335.305599][ T10] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 335.448904][ T10] usb 3-1: device descriptor read/64, error -71 [ 335.493632][ T207] gretap0: left allmulticast mode [ 335.499210][ T207] gretap0: left promiscuous mode [ 335.504535][ T207] bridge0: port 3(gretap0) entered disabled state [ 335.511679][ T207] bridge_slave_1: left allmulticast mode [ 335.517416][ T207] bridge_slave_1: left promiscuous mode [ 335.523178][ T207] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.531113][ T207] bridge_slave_0: left allmulticast mode [ 335.536895][ T207] bridge_slave_0: left promiscuous mode [ 335.542771][ T207] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.566564][ T491] usb 7-1: device descriptor read/64, error -71 [ 335.623124][ T9] wacom 0003:17EF:6004.0028: unknown main item tag 0x0 [ 335.630101][ T9] wacom 0003:17EF:6004.0028: unknown main item tag 0x0 [ 335.637080][ T9] wacom 0003:17EF:6004.0028: unknown main item tag 0x0 [ 335.644170][ T9] wacom 0003:17EF:6004.0028: unknown main item tag 0x0 [ 335.651061][ T9] wacom 0003:17EF:6004.0028: unknown main item tag 0x0 [ 335.658023][ T9] wacom 0003:17EF:6004.0028: unknown main item tag 0x0 [ 335.665024][ T9] wacom 0003:17EF:6004.0028: unknown main item tag 0x0 [ 335.671921][ T9] wacom 0003:17EF:6004.0028: unknown main item tag 0x0 [ 335.680276][ T9] wacom 0003:17EF:6004.0028: unknown main item tag 0x0 [ 335.687321][ T9] wacom 0003:17EF:6004.0028: unknown main item tag 0x0 [ 335.694313][ T491] usb usb7-port1: attempt power cycle [ 335.699835][ T207] veth1_macvtap: left promiscuous mode [ 335.700104][ T9] wacom 0003:17EF:6004.0028: unknown main item tag 0x0 [ 335.705609][ T207] veth0_vlan: left promiscuous mode [ 335.712337][ T10] usb 3-1: device descriptor read/64, error -71 [ 335.725006][ T9] wacom 0003:17EF:6004.0028: hidraw0: USB HID v0.00 Device [HID 17ef:6004] on usb-dummy_hcd.4-1/input0 [ 335.834883][ T10] usb usb3-port1: attempt power cycle [ 335.930945][ T9] usb 5-1: USB disconnect, device number 54 [ 336.058312][ T491] usb 7-1: new full-speed USB device number 71 using dummy_hcd [ 336.080685][ T491] usb 7-1: device descriptor read/8, error -71 [ 336.197253][ T10] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 336.219800][ T10] usb 3-1: device descriptor read/8, error -71 [ 336.226025][ T491] usb 7-1: device descriptor read/8, error -71 [ 336.358711][ T10] usb 3-1: device descriptor read/8, error -71 [ 336.496539][ T491] usb 7-1: new full-speed USB device number 72 using dummy_hcd [ 336.518978][ T491] usb 7-1: device descriptor read/8, error -71 [ 336.614178][ T10] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 336.636508][ T10] usb 3-1: device descriptor read/8, error -71 [ 336.657991][ T491] usb 7-1: device descriptor read/8, error -71 [ 336.742439][ T307] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 336.774578][ T491] usb usb7-port1: unable to enumerate USB device [ 336.786236][ T10] usb 3-1: device descriptor read/8, error -71 [ 336.821401][ T31] usb 6-1: USB disconnect, device number 49 [ 336.902911][ T10] usb usb3-port1: unable to enumerate USB device [ 336.910427][ T307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.921492][ T307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.931299][ T307] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 336.940393][ T307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.956534][ T307] usb 5-1: config 0 descriptor?? [ 337.111519][T14387] rust_kernel: panicked at /syzkaller/managers/ci2-android-6-12-rust/kernel/rust/kernel/page_size_compat.rs:60:5: [ 337.111519][T14387] attempt to add with overflow [ 337.128645][T14387] ------------[ cut here ]------------ [ 337.134134][T14387] kernel BUG at rust/helpers/bug.c:7! [ 337.139991][T14387] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 337.141019][ T36] audit: type=1400 audit(2000000042.403:1398): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 337.146962][T14387] CPU: 0 UID: 0 PID: 14387 Comm: syz.5.4577 Not tainted 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473 [ 337.179830][ T36] audit: type=1400 audit(2000000042.403:1399): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 337.182300][T14387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 337.182319][T14387] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 337.204531][ T36] audit: type=1400 audit(2000000042.403:1400): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 337.213949][T14387] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 05 d9 69 03 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 4f 1d 20 8f 90 90 90 90 90 90 90 90 90 [ 337.213974][T14387] RSP: 0018:ffffc90008eef3f0 EFLAGS: 00010246 [ 337.213997][T14387] RAX: 000000000000008c RBX: 1ffff920011dde80 RCX: 0c026e03cf0cbe00 [ 337.219854][ T36] audit: type=1400 audit(2000000042.403:1401): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 337.240541][T14387] RDX: ffffc90009b0a000 RSI: 00000000000034fe RDI: 00000000000034ff [ 337.240561][T14387] RBP: ffffc90008eef3f0 R08: ffffc90008eef0e7 R09: 1ffff920011dde1c [ 337.240578][T14387] R10: dffffc0000000000 R11: fffff520011dde1d R12: 0000000000000000 [ 337.240595][T14387] R13: dffffc0000000000 R14: ffffc90008eef420 R15: ffffc90008eef450 [ 337.240625][T14387] FS: 00007f333adf76c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 337.240643][T14387] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 337.260962][ T36] audit: type=1400 audit(2000000042.403:1402): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 337.266327][T14387] CR2: 00007f333adf6f98 CR3: 0000000125478000 CR4: 00000000003526b0 [ 337.266350][T14387] DR0: 0000000000000eb4 DR1: 0000000000000000 DR2: 0000000000000000 [ 337.266366][T14387] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 337.274841][ T36] audit: type=1400 audit(2000000042.403:1403): avc: denied { append open } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 337.294908][T14387] Call Trace: [ 337.294918][T14387] [ 337.294929][T14387] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 337.294968][T14387] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 337.303548][ T36] audit: type=1400 audit(2000000042.403:1404): avc: denied { getattr } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 337.310922][T14387] ? kernel_text_address+0xa9/0xe0 [ 337.310951][T14387] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 337.472825][T14387] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 337.479018][T14387] ? arch_stack_walk+0x10b/0x170 [ 337.483998][T14387] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 337.491239][T14387] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 337.499169][T14387] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0xb2/0xc0 [ 337.509075][T14387] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0x10/0x10 [ 337.519705][T14387] _RNvXs1_CscPPBqWtAqum_11ashmem_rustNtB5_6AshmemNtNtCs43vyB533jt3_6kernel10miscdevice10MiscDevice4mmap+0xe44/0xfb0 [ 337.531971][T14387] ? mas_wr_store_type+0x8eb/0x1ad0 [ 337.537191][T14387] ? __cfi__RNvXs1_CscPPBqWtAqum_11ashmem_rustNtB5_6AshmemNtNtCs43vyB533jt3_6kernel10miscdevice10MiscDevice4mmap+0x10/0x10 [ 337.549992][T14387] ? mas_preallocate+0x56e/0xc60 [ 337.554961][T14387] ? __cfi_mas_preallocate+0x10/0x10 [ 337.560339][T14387] ? kasan_save_alloc_info+0x40/0x50 [ 337.565664][T14387] ? __asan_memset+0x39/0x50 [ 337.570274][T14387] mmap_region+0x1371/0x1bd0 [ 337.574900][T14387] ? __cfi_mmap_region+0x10/0x10 [ 337.579896][T14387] ? __futex_queue+0x19a/0x340 [ 337.584693][T14387] ? __kasan_check_read+0x15/0x20 [ 337.589752][T14387] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 337.596045][T14387] ? file_mmap_ok+0x147/0x1a0 [ 337.600763][T14387] do_mmap+0xb6d/0x13c0 [ 337.604942][T14387] ? __cfi_do_mmap+0x10/0x10 [ 337.609545][T14387] ? down_write_killable+0xe9/0x2d0 [ 337.614761][T14387] ? __cfi_down_write_killable+0x10/0x10 [ 337.620400][T14387] vm_mmap_pgoff+0x38f/0x4e0 [ 337.625010][T14387] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 337.630138][T14387] ? __fget_files+0x2c5/0x340 [ 337.634838][T14387] ksys_mmap_pgoff+0x166/0x1e0 [ 337.639612][T14387] __x64_sys_mmap+0x121/0x140 [ 337.644309][T14387] x64_sys_call+0x13bf/0x2ee0 [ 337.649032][T14387] do_syscall_64+0x58/0xf0 [ 337.653460][T14387] ? clear_bhb_loop+0x35/0x90 [ 337.658239][T14387] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 337.664169][T14387] RIP: 0033:0x7f333c78e929 [ 337.668595][T14387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.688212][T14387] RSP: 002b:00007f333adf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 337.696639][T14387] RAX: ffffffffffffffda RBX: 00007f333c9b5fa0 RCX: 00007f333c78e929 [ 337.704624][T14387] RDX: 0000000001000007 RSI: 0000000000001000 RDI: 0000200000701000 [ 337.712617][T14387] RBP: 00007f333c810b39 R08: 0000000000000003 R09: 00000000ffffb000 [ 337.720686][T14387] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 337.728666][T14387] R13: 0000000000000000 R14: 00007f333c9b5fa0 R15: 00007ffee3f6de78 [ 337.736655][T14387] [ 337.739688][T14387] Modules linked in: [ 337.744536][T14387] ---[ end trace 0000000000000000 ]--- [ 337.754176][T14387] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 337.759661][T14387] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 05 d9 69 03 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 4f 1d 20 8f 90 90 90 90 90 90 90 90 90 [ 337.779713][T14387] RSP: 0018:ffffc90008eef3f0 EFLAGS: 00010246 [ 337.785896][T14387] RAX: 000000000000008c RBX: 1ffff920011dde80 RCX: 0c026e03cf0cbe00 [ 337.793952][T14387] RDX: ffffc90009b0a000 RSI: 00000000000034fe RDI: 00000000000034ff [ 337.802271][T14387] RBP: ffffc90008eef3f0 R08: ffffc90008eef0e7 R09: 1ffff920011dde1c [ 337.810769][T14387] R10: dffffc0000000000 R11: fffff520011dde1d R12: 0000000000000000 [ 337.818888][T14387] R13: dffffc0000000000 R14: ffffc90008eef420 R15: ffffc90008eef450 [ 337.826962][T14387] FS: 00007f333adf76c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 337.835978][T14387] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 337.842609][T14387] CR2: 00007f333adf6f98 CR3: 0000000125478000 CR4: 00000000003526b0 [ 337.850659][T14387] DR0: 0000000000000eb4 DR1: 0000000000000000 DR2: 0000000000000000 [ 337.858729][T14387] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 337.866787][T14387] Kernel panic - not syncing: Fatal exception [ 337.873211][T14387] Kernel Offset: disabled [ 337.877557][T14387] Rebooting in 86400 seconds..