last executing test programs: 7.29466011s ago: executing program 3 (id=195): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x56a, 0x59, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xc, 0xa0, 0xff, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x2, 0x9, {0x9, 0x21, 0x8, 0xf4, 0x1, {0x22, 0x827}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x80, 0x4, 0x2}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x5, 0x5, 0x5, 0x20, 0x6}, 0x5f, &(0x7f0000000140)={0x5, 0xf, 0x5f, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x1, 0x6, 0x9, 0x7b}, @generic={0x2a, 0x10, 0xa, "075720d6d290dc6da38d554cf7714f1fc9dc68b40085935426e34c895a1f36913d57040c9786d0"}, @ss_container_id={0x14, 0x10, 0x4, 0xd, "626bc8aa8e244a796c0ad915047672d3"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x9, 0x2}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x1, 0x9, 0x8}]}, 0x4, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2801}}, {0x4d, &(0x7f0000000240)=@string={0x4d, 0x3, "3d47fed427b1fbaf444bdb11e16104de3de3e33b305e42c383e556dbe29771b1eb013ef7f642c3f73cb4ad2e7903b761ad4bf76ab3a0704771ef52e912397e6ddeddadd95724e5120abcc2"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x427}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000640), 0x20000, 0x0) fcntl$lock(r1, 0x7, &(0x7f00000006c0)={0x1, 0x1, 0x3, 0x8}) r2 = dup(0xffffffffffffffff) write$FUSE_DIRENTPLUS(r2, 0x0, 0xb0) read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) 4.316898184s ago: executing program 3 (id=214): r0 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') symlinkat(&(0x7f00000008c0)='./bus\x00', r1, &(0x7f0000010b40)='./file1\x00') r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r3, 0x6, 0xb, 0x0, &(0x7f0000000080)) 4.284214915s ago: executing program 3 (id=215): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x88) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000002240)={&(0x7f0000001d00)={0xa, 0x4e24, 0x21f, @empty, 0x3}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="1400000000000000290000003e00"], 0x18}, 0x4080) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000c00)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x1, 0x3ff, 0x2, 0x0, 0x0, 0x2f}, {0x0, 0x1fffffffe, 0x40000000007, 0x20000a0de, 0x40000000000004, 0x2, 0x200000003, 0x400}, {0x5, 0x0, 0x0, 0x5}, 0x4, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x6c}, 0x0, @in6=@private2, 0x3502, 0x1, 0x0, 0x0, 0x9075, 0x0, 0x9945}}, 0xe8) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="a99c383d", 0x4, 0x0, &(0x7f0000000000)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000002a40)=0xffff, 0x4) sendmsg$inet(r6, &(0x7f0000003180)={&(0x7f0000002c80)={0x2, 0x4e20, @empty}, 0x10, 0x0}, 0x48800) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x3, 0x9}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000401080008001d000000", 0x24) socket$nl_xfrm(0x10, 0x3, 0x6) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, 0x0) socket(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x3, 0x88) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$inet6(r2, &(0x7f0000002240)={&(0x7f0000001d00)={0xa, 0x4e24, 0x21f, @empty, 0x3}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="1400000000000000290000003e00"], 0x18}, 0x4080) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000c00)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x1, 0x3ff, 0x2, 0x0, 0x0, 0x2f}, {0x0, 0x1fffffffe, 0x40000000007, 0x20000a0de, 0x40000000000004, 0x2, 0x200000003, 0x400}, {0x5, 0x0, 0x0, 0x5}, 0x4, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x6c}, 0x0, @in6=@private2, 0x3502, 0x1, 0x0, 0x0, 0x9075, 0x0, 0x9945}}, 0xe8) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'gre0\x00'}) (async) sendto$packet(r4, &(0x7f0000000080)="a99c383d", 0x4, 0x0, &(0x7f0000000000)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000002a40)=0xffff, 0x4) (async) sendmsg$inet(r6, &(0x7f0000003180)={&(0x7f0000002c80)={0x2, 0x4e20, @empty}, 0x10, 0x0}, 0x48800) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x3, 0x9}, 0x10) (async) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000401080008001d000000", 0x24) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, 0x0) (async) 4.205273266s ago: executing program 3 (id=216): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') write$selinux_load(0xffffffffffffffff, 0x0, 0x2046) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) 4.203362856s ago: executing program 3 (id=217): ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) socket(0x1a, 0x800, 0x9) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x1, 0x231, 0x7, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x2}, 0x3, 0x3, 0x0, 0x0, "ae771958a0cb06cc"}}, 0x48}, 0x1, 0x0, 0x0, 0x400c0850}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x12140, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r4, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r5, &(0x7f0000000040)=""/60, 0x3c, 0x102, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.137052987s ago: executing program 3 (id=218): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) connect$pptp(r1, &(0x7f00000000c0)={0x18, 0x2, {0x3, @broadcast}}, 0x1e) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x6, 0x7, 0x5, 0x3}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x1e1983, 0x0) r3 = dup(r2) ioctl$PTP_EXTTS_REQUEST2(r3, 0xc0603d06, &(0x7f0000000000)={0x0, 0x4}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper], 0x51, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b9a"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/144, 0x90, 0x1, 0x7}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x9, 0x0, 0x2d}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 4.077191028s ago: executing program 32 (id=218): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) connect$pptp(r1, &(0x7f00000000c0)={0x18, 0x2, {0x3, @broadcast}}, 0x1e) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x6, 0x7, 0x5, 0x3}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x1e1983, 0x0) r3 = dup(r2) ioctl$PTP_EXTTS_REQUEST2(r3, 0xc0603d06, &(0x7f0000000000)={0x0, 0x4}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper], 0x51, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b9a"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/144, 0x90, 0x1, 0x7}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x9, 0x0, 0x2d}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 3.175550022s ago: executing program 1 (id=221): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0xa) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, 0x0, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="ff977080ff7c58308d947ebe068b75f887f5", @ANYRES16=r2, @ANYBLOB="040029bd7000ffdbdf2517000000080001007063690011000200303030303a30303a31302e3000000000080003000300000008000b00ffffffff060016000500000005001200000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000008000b0038bd00000600160016f100000500120001000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b00050000000600160051a300000500120001000000"], 0xcc}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000004) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/udp\x00') read$FUSE(r3, &(0x7f0000001680)={0x2020}, 0x2020) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newtaction={0x1ac, 0x32, 0xc20bc6c7745b97d7, 0x70bd29, 0x25dfdbfc, {}, [{0x198, 0x1, [@m_ipt={0x194, 0x1, 0x0, 0x0, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3f1457b3e44f863a}, @TCA_IPT_TARG={0x48, 0x6, {0xba15, 'security\x00', 0xdb, 0xffff, "7235abc3ea74ebfe13207f3546e4fab4397e89d456e50ff5de907536ebdc"}}, @TCA_IPT_TARG={0xec, 0x6, {0x4, 'mangle\x00', 0x0, 0x1, "f623723bf3c36dea82eee2bf4c8eb8f9cba78b148197a11513604676455a6015846892496443718e98087a189e43c3679e0939a084875837c711d1352eb6dc998d2168887b05cecc66e523dc7af1a0d01bce6b5e17712ca127f1abdcc0a2d1d48061f9be6198e2d83e5087248a37e30dae69fd1ecd4f6d3a62b2202114ee0380eb3ca5552f6f82839b1bfa7076ca7847b5dc4575f9f9b82a99a563a3918ab807e7aa3a91f9fd327a911c59422a53d4c67a8772ca2d18cf167019c50440f1b3ffd235"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x6400c041}, 0x9080) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 3.137020722s ago: executing program 1 (id=222): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mprotect(&(0x7f0000883000/0x3000)=nil, 0x3000, 0x2000005) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1000000, &(0x7f0000002140)=ANY=[]) syz_fuse_handle_req(r1, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r5, 0x6, 0x4002) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x11) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x4800, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000002140)) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000200)={0xa0, 0xfffffffffffffff5, r2, {{0x1, 0x1, 0x5, 0x38, 0x1, 0x741, {0x2, 0x1, 0x2, 0x7, 0x8, 0x58, 0x1, 0x9f8, 0xfff00000, 0x1000, 0x2, r3, r4, 0x6, 0x4}}, {0x0, 0x18}}}, 0xa0) syz_fuse_handle_req(r1, &(0x7f00000067c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0}) getdents(r6, &(0x7f0000000700)=""/90, 0x5a) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0), 0x831040, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e23,cachetag=/dev/fuse\x00,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',afid=0x0000000000000001,cache=mmap,cache=readahead,dfltgid=', @ANYRESHEX=r4, @ANYBLOB=',ignoreqv,cache=loose,dont_hash,audit,do.t_appraise,smackfsdef=/dEv/fuse\x00,\x00']) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000001040)=ANY=[@ANYBLOB="0100000a0100000000000000000e00000000000000005600268544fcd78af138697a72e2233e66fc4bad93330f5c6b20ec228ca1930a5a27574bf4f4d590c368b670043d81c6cad92615fa37664fe3b899a517b80acbd4c12beea62a"]) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r8, 0x8010661b, &(0x7f0000001000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r9, 0x2000) 2.573221531s ago: executing program 2 (id=228): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x2b, 0xe, 0xa, 0x0, 0xad, 0x3, 0x2, 0x1}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 2.572430101s ago: executing program 2 (id=229): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder-control\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2ec37000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x110, r0, 0xee6b3000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x6, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="4401000010003306000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000004000fffe80040a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414010000000000000000000000000000000032000000ffffffff00000000000000000000000026030000000000000000000000000000000000000000000000000000000000000010000000000000f9ffffffffffffff0000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000100000000008000fcffffff25bd7000033500000a0004f7000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0008"], 0x144}, 0x1, 0x0, 0x0, 0x8000}, 0x48014) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r1, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=""/211, 0xd3}, 0x1ff}], 0x1, 0x2162, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x7ff, 0x80080) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000040)=""/47) write$char_usb(0xffffffffffffffff, &(0x7f0000000240)="3091535b140c42838375ebe454cef526fbe6b1172a0f9093d7cc3b887956fb8d5447856246b649027b4792b40a120c4aeacd44ddf21623270b2738718b1d4d5f2669a4e3b70cfea7c15676", 0x4b) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50010000", @ANYRES16=r5, @ANYBLOB="010028bd7000000000000c000000180001801400020076657468305f746f5f626f6e6400000024010380040001001c01038090000180840002000091507b350537973af1a09f6a0a22f8cf5cc62fede9e35a9c8b4b280b7cc021fe04a329c2b4e06a9e6a2907837e0e13aa46000000000000006ffa6ffe18e2bf1551e8572a854e8009d26e87f17c252e94ea5e5bf337ab9af020d39448051a0a38e93577073c7933707fe9bce142b8971a5f2be0a4b035a87c58f573ded724070800010002000000"], 0x150}}, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000540)={'binder1\x00'}) 2.561468181s ago: executing program 2 (id=230): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) recvmmsg(r1, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x22, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f000028a000/0x4000)=nil, 0x4000}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@local, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x6, 0x1, 0x0, 0x8, 0x81, 0xfff9}, 0x20) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x111a41, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, r5, 0x200, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x88c1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x5c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x32}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x20000000029}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}, 0x1000}, @request_death={0x400c630e, 0x3}], 0x0, 0x0, 0x0}) 2.393119274s ago: executing program 1 (id=233): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x5, &(0x7f0000000000)=0x100000001, 0x4) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer], 0x0, 0x0, 0x0}) 2.304384585s ago: executing program 1 (id=235): unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) utime(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)={0x1, 0xffffffffffffffff}) ioctl$TCSBRKP(r0, 0x5425, 0x100000000) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001d0001160000f356fc1de90007"], 0x14}, 0x1, 0x0, 0x0, 0x80000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000280)={'wg2\x00'}) ioctl$RTC_ALM_READ(r3, 0x40187014, &(0x7f0000000180)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="0209ef050200566261a501473def7fdd2f988517beac5bd0"], 0x10}}, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f00000012c0)={0x3, 0x3, 0xfffffffd, 0x101, 0x5, 0x41000000}) setrlimit(0x40000000000008, &(0x7f0000000000)={0x20, 0x200000}) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000002040), 0x410281, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r8, 0x84009422, &(0x7f00000005c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, &(0x7f00000009c0)={r9, 0x8, 0x4}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000140)=[@sack_perm], 0x1) ioctl$HIDIOCGREPORT(r8, 0x400c4807, &(0x7f0000000080)={0x2, 0x1, 0x9}) 2.293045925s ago: executing program 2 (id=236): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async, rerun: 64) r0 = socket$netlink(0x10, 0x3, 0x10) (rerun: 64) sync_file_range(r0, 0x8, 0x4ff, 0xe) (async, rerun: 32) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='devpts\x00', 0x4, 0x0) (rerun: 32) mount$bpf(0x0, &(0x7f0000001080)='./file0\x00', 0x0, 0x1964874, &(0x7f0000000300)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0]) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) (async) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r2, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000034c0)=""/211, 0xd3}, {&(0x7f00000035c0)=""/76, 0x4c}, {&(0x7f0000000400)=""/241, 0xf1}, {&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000000780)=""/83, 0x53}, {&(0x7f0000000800)=""/127, 0x7f}], 0x9}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x2100, 0x0) (async) clock_settime(0x0, &(0x7f0000000000)={0x77359400}) (async) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@ng={0x4, 0x11, 'R'}, 0x3, 0x0) (async, rerun: 32) lseek(r1, 0x10001, 0x0) (rerun: 32) 2.133993677s ago: executing program 1 (id=237): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x60, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) mknod(&(0x7f0000000040)='./file0\x00', 0x20, 0x0) setxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180), &(0x7f0000000140)='system_u:object_r:public_content_t:s0\x00', 0x26, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdc01, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x80, 0x2b, 0x0, 0xee01}, {}, {}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) io_setup(0x4, &(0x7f0000000100)) 2.120901908s ago: executing program 2 (id=238): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x802, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r2, &(0x7f0000000080), 0x8) getpid() ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x0, 0x0, 0x0}) 2.037086229s ago: executing program 1 (id=239): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) close(r2) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r1, &(0x7f00000001c0)={[], 0x1f}, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120141014813442024040075ee69e30103010902240001000010000904b8070296d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000001580)={0x44, &(0x7f0000001280)={0x40, 0xf, 0x4, "6496c0a4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000001100)={0x84, &(0x7f0000000c00)={0x20, 0x30, 0x4, "aa8208d2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0xfffffff7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x48, 0x0, &(0x7f0000000380)=[@register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000400)="f5f8bc844de1c02a7c9f049ef2cbefdd6ccc05c5c279cfffe3b1ae9eaf03bbac8fdf87c9ea45d4faace03589d639c417b54053f9f0950a9720cef8afcc1a6f9124bf7bcc5c3a6ae57145f63c85dfd263"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x0, 0x0, 0x0}) 2.036457749s ago: executing program 2 (id=240): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x20, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x82, 0x2, "c9a7"}, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x84, 0x2, "078d"}, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000500)={0x40, 0x1, 0x2, "3aec"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="4005bf000000d87bec8f0b2f99e1c320fc15dec9d72400a7002e962046bf88cea0056f84720807fb00f8c8d74727aa9ea8fffd6881", @ANYRESOCT, @ANYRES8=r0, @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) mmap(&(0x7f000009e000/0x2000)=nil, 0x2000, 0x1, 0x12, r5, 0x836f1000) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) bind$packet(r6, &(0x7f0000000140)={0x11, 0x3, r7, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x14) sendmmsg$sock(r6, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004874) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000027000/0x2000)=nil, 0x2000, 0x1, 0x30, r1, 0x3f7fc000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_RUN(r10, 0xae80, 0x0) 1.096048253s ago: executing program 4 (id=260): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) (async) ioprio_set$pid(0x2, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) (async, rerun: 64) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) openat(r1, &(0x7f0000000140)='./file0\x00', 0x101080, 0x21) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) (async) syz_clone(0x200, &(0x7f0000000180)="19056e27fe80c02b1e00e0804539deefb85a131e0933938fa85faca0884641ace497a920e159b894762a8cfa2684a0f62523b6d6888969703d5b466fb8ea1794898b0a4f9f71a8d1605020bf3875eb1b4f85223b37a47a0ba8fe3086411655dae8bab0c9458a7859715c0ea17a8e376587ef0dbe46cafb8c032132768e3e179f358880edb87a880ca0a54dd0c1634e52401cd14cbcf7f586b135f380108c7a93cdc4693d74d8bf9f1d99b739907f64c3947e25452bba8570f77316b261693e2c", 0xc0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="61c018df294cfb1b98edc9cb767c600e75e89af481c562c6667aebb9a594d65c638ecb79fe4b00bc2f54816a7c31909ca5d02e64ec453a63e32fb63da855ce6a402bbac558c08c8f800728fff9b93696e26a5b544d039010fc1e62cf11f8e031c8b4965712e5f9d711047ae9ee937ae98281a4e82647c21990a935da72d179e796bc4829") read(r2, &(0x7f0000000040)=""/104, 0x68) 1.036851054s ago: executing program 4 (id=262): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) setresuid(0xee01, 0x0, 0x0) keyctl$session_to_parent(0x12) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000000000), 0x84000) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x84000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x10001, 0x5, 0xeeee8000, 0x2000, &(0x7f0000a0e000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x10001, 0x5, 0xeeee8000, 0x2000, &(0x7f0000a0e000/0x2000)=nil}) sendfile(r1, r3, &(0x7f0000000080)=0xfffffffffffffff8, 0x3) splice(r0, 0x0, r0, 0x0, 0xaf4, 0xd) (async) splice(r0, 0x0, r0, 0x0, 0xaf4, 0xd) 448.879073ms ago: executing program 4 (id=264): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5414, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x4b, 0x40, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xb, &(0x7f0000000b40)=0xc, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) 392.739444ms ago: executing program 0 (id=265): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) memfd_create(&(0x7f0000000740)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c\xfa\xb4q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-\x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca', 0x8) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x9cc6d000) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000000)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\xadP\x1c2\xb8H\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&`<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6#M\"\x87\x05W\f0b(p\xb4;\x0e\x18\xf7/A\xfd8\\\x99\xc7Dp\x98\xa4o\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12KL\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\xfe\x8c\x87\x0f\x99\xc3E\xcfc\x8cX\xa3\xf5&}\a\xbf\xf8N\"C!\x1f\x96\xd7\xe9\xa5tw\'\x8f,_\xa0\xea\x90\"\x19i\f\xd5\x02\xe2+\xc1\x8e\xfb@\xc56\xb5\xe4\x91\xbc\xbf\xf7\xea\x01]\xd8\xf8.\x99\x82\x89\x9a\x97\x8b\xdd\xcf\xe6\xb4\xad\xda\x7f\xc8\xd0(Q\x8dP\xd9\xd8(){\xca\x84\xd3(\xb6\xd5\xd4\x94\xdf\xde\x05B\"\xa3L\xc9t\xd4]\x95.\x02\x97\xb5\xc5E\xc7H\x84d\xe6I\xd8\\&\xc6\x81t\xa38u\xc0\xa3\x9b\b,4-\x8a\x9fo:\x86J?\xac\xd1\xa8\x02\xb6\xc5m\x85,\x97\xbe\xba\x0eWnW\xdd,\x1eT\x9c\xde\x9e{;\xb2X\x89\xdc\xcfO6\xba\xcbK\xb5\xfbD\xc9\xc4D\x04BT\xe1\xe9]s\x18$F\x9b\xe9<\xdb\x03\b\xfc\xe9\x19E\x8b\x83\xa6\x84Y\xab\x85\xea\x1f^K\xd6I\x10G<@n\x9e\x81\xc6\x1d\xbc\x1a\xc1G') openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$TCSETSW2(r2, 0x5453, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'veth0_to_bond\x00', &(0x7f0000000000)=@ethtool_cmd={0x47, 0x2, 0x20000004, 0x3ff, 0x3f, 0x7, 0x1, 0x3, 0x6, 0x3, 0x101, 0x142f, 0x8, 0x3, 0x0, 0xa, [0x4000000, 0xff]}}) r6 = epoll_create1(0x80000) epoll_pwait2(r6, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f00000003c0)={0xc0000008}) epoll_wait(r6, &(0x7f0000000340)=[{}], 0x1, 0xe) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x2}}]}}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000400)=0x11) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001200), r7) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="afa227bd7000fcdbdf250e"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) 372.290914ms ago: executing program 4 (id=266): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xa0, 0x0, &(0x7f0000000000)=[@acquire_done, @increfs, @release, @acquire_done={0x40106309, 0x2}, @request_death={0x400c630e, 0x2}, @increfs_done={0x40106308, 0x3}, @release={0x40046306, 0x1}, @increfs_done={0x40106308, 0x1}, @acquire, @exit_looper, @acquire_done={0x40106309, 0x1}, @increfs={0x40046304, 0x3}], 0x9e, 0x0, &(0x7f0000000240)="eecc86dbb0abfd4ab4dbd44163a2eb5fb844c42a169cbef02db74109889d3e9c22409eb5837be2949bb9c26f4b4aa77165226c5535d386c0bdc21cc8f44a8e8228979eb08060f0b1fbcecafa56cdd80ff7506a386e3d296b820e29d59fcc6b3b22bc99a499d9a1f7bbae5234d00c3f97096627cc80131c8924534bcd178a2f86844a1ff26305c2861c1294b76288d1fb710e8eead0eb5999ce3af89817f5"}) (async) r1 = dup2(r0, r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x10, 0x0, &(0x7f0000000e00)=[@clear_death={0x400c6313}], 0x0, 0x0, 0x0}) (async) r2 = openat2(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x680080, 0x0, 0x18}, 0x18) dup3(r2, r0, 0x0) 288.930925ms ago: executing program 4 (id=267): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x13, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x2, &(0x7f0000000000)=0x6, 0x4) (async, rerun: 32) bind$inet6(r4, &(0x7f0000000400)={0xa, 0x2, 0xac3, @loopback, 0x9}, 0x1c) (async, rerun: 32) sendto$inet6(r4, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x9, 0x5, 0x0, 0x20005, 0x0, 0x0, 0x7a6e, 0x4, 0xfe, 0x0, 0x4, 0xc0, 0x2, 0x10000, 0x200000], 0x100000, 0x3d9346}) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x1, 0x0}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 32) r8 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r8}, @decrefs={0x40046307, 0x1}], 0x50, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcbc67fb9fee3c8ee9a9ec8d1dc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9072a8dd210e45df98d795a63"}) 182.155897ms ago: executing program 0 (id=268): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, r1, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x20000055) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x9, 0x74}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x404c810}, 0x20000051) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) read$FUSE(r3, &(0x7f00000002c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r3, &(0x7f0000002300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$msr(0xffffffffffffffff, &(0x7f0000004340)=""/200, 0xc8) r10 = socket$unix(0x1, 0x2, 0x0) read$FUSE(r3, &(0x7f00000067c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r12 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000008800), 0x2, 0x0) r13 = pidfd_getfd(r3, r3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000009000)={0x0, 0x0}, &(0x7f0000009040)=0xc) r15 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000009080), &(0x7f0000009100)=0x60, 0x80800) r16 = getpgrp(r9) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000009140)={{{@in6=@mcast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@initdev}}, &(0x7f0000009240)=0xe8) r18 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000009280)={r3, 0x1, 0xfffffffffffffeff, 0xfffffffffffffffc}) r20 = syz_open_dev$hiddev(&(0x7f00000092c0), 0x3, 0x400000) r21 = fcntl$getown(0xffffffffffffffff, 0x9) fstat(0xffffffffffffffff, &(0x7f0000009300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r23 = fspick(0xffffffffffffffff, &(0x7f0000009380)='./file0\x00', 0x0) r24 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r25 = epoll_create1(0x80000) r26 = userfaultfd(0x1) statx(0xffffffffffffff9c, &(0x7f00000093c0)='./file0\x00', 0x800, 0x800, &(0x7f0000009400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r10, &(0x7f0000009680)=[{{&(0x7f0000004440)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000006740)=[{&(0x7f00000044c0)="45447e063e83f82718a500bb12d69b9f127a7e0a9e8aafd12bc8f6ad82f86ea1", 0x20}, {&(0x7f0000004500)="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", 0x1000}, {&(0x7f0000005500)="852371fe91f14e2087bdcf6217325ff1973d62911648b2ea145e6793be6e9c17037585e11e2b15c9b1dcb2c8de503135b89a3374708a556f567a3049d0df4428a38080373ac962d3066199f89d791dce19446c90d84ce4e6fb90afdd657c6f63e7625cb9872b4dfe8c68539194d1ee9248db9b43b888369d717738e42cd15b5a643b60735098d4b64fa216d0a2ade507feda6b0324c9be309d87305549146cc5883a1a8f453f", 0xa6}, {&(0x7f00000055c0)="207085976da74b0504eeca435dd2ebd7", 0x10}, {&(0x7f0000005600)="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", 0x1000}, {&(0x7f0000006600)="4833d89fe14f096a020c6a856e7d011d76e86208c70c54ee16e1ee", 0x1b}, {&(0x7f0000006640)="3f2072a5979bf77c2ac36619f2ac18ad3a5867eda26bb13804798415281ea67fb3d759dba97fa3f58686fb72ed19e726b418d5c3380a2e485b6c029c5fdba6214e69d50e13da527a2fe41b57f15d4dd198bacdab25846aa96acb1a92951abbcd5c557d2e3d8cb62b277b387940ef132198fee72f5d8f9d5c915e6dd0bde23e0aa01f64174778a25f1e73b0203be7330bc6999a08f50398cca9e65ad52f48d842f897ccc768bb1cfeb83cb12b6a07cb8c028c029833eee04b18af1d584ce5aef2b83843f8c99354643fbcb5ec0d37f90321c3c8d862d0c75a654cb0983d73", 0xde}], 0x7, &(0x7f0000008840)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @rights={{0x20, 0x1, 0x1, [r0, r3, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r9, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r11}}}, @rights={{0x34, 0x1, 0x1, [r0, r12, r3, r0, r0, r3, r3, r13, r3]}}], 0xb0, 0x20000010}}, {{&(0x7f0000008900)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000008a40)=[{&(0x7f0000008980)="7b4582ba4469369857ecb8cf4de69b045c6e66e23fd33ebf2d80fcfd0ea73df7f87ffaa6edcde3cc63d65a3244d4f8f8eb47", 0x32}, {&(0x7f00000089c0)="3d20077dd3dd75ebe93dbdceaeb1b1ba437dabaf41624f92781c548f4e0c37ed4f54f394e8c80df4a4c880425f9406be3a4ee42f534e7d0af65b7b84583b23ecf094073bc6b1c31066fc85b3b1eadf653a", 0x51}], 0x2, 0x0, 0x0, 0x20040840}}, {{&(0x7f0000008a80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000008f80)=[{&(0x7f0000008b00)="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", 0xfe}, {&(0x7f0000008c00)="492ee035524c7df595ed06027d371fb09886fbce5595f7843065ddf0421413f3aa78b5acedb5a33e751d2d1bd13268eb1ea24241f778a69e240b711cbff9695a10e73345520fd8e86b67579d07a2b8614779c607777001502b2b30ee9ba8533be04182c8ef224d1a153d42772c3173eafb1f168a5ae604be58fea5d85b8252f05af6cf84fa", 0x85}, {&(0x7f0000008cc0)="26fd1445de6f4f7424c9526cda08775e4fc39dabb4e3d6ca7814d8411c52b43c051aff5213f5e4242e18a061eddefdc749d08a0c14f5a7eaebcf5844caa7f908f0207069644718b9a5466844f6352cffd8aa7f74eb6e24b16300f506bbfd6f269b201507fab76f7ccead41d0889057beb92bacf4533af7949369a431f7d9450bf3b6e6c17cd1aa2878dd17a94346f14675d74c9a093b726d95c7d9494b5f8c5200b5bd18142e04a8fae53f", 0xab}, {&(0x7f0000008d80)="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", 0xfd}, {&(0x7f0000008e80)="02c0210235234970f53315edf9e4d5f1f9799e06cb4ecb111f2764a4d395572300f109c08e4012b67a5ab70bb624aee23831d24a33f6ddcdb69d220ce4e943abb05f69c39e4ea2daded7881ad540b2c2a5743a7c87c3a188ba435d32f6a6c377b079485ee9c069ed49fa437eb5c143172aab844c737f9c6a8b", 0x79}, {&(0x7f0000008f00)="4c698f5e92f59a9dac1258396c0d7f5a2d0056363dcbfa48242b4a9c62d689a384117320540220fd68c8e9dfa6c36480a67ee746b4eb9a9b7765ee3f1fc3fcc273ad0f2c", 0x44}], 0x6, &(0x7f0000009500)=[@cred={{0x1c, 0x1, 0x2, {r6, r14, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, 0xffffffffffffffff, r5}}}, @rights={{0x30, 0x1, 0x1, [r3, r0, r3, r3, r3, r0, r0, r15]}}, @cred={{0x1c, 0x1, 0x2, {r9, r4, r5}}}, @rights={{0x1c, 0x1, 0x1, [r0, r3, r3]}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, r5}}}, @rights={{0x2c, 0x1, 0x1, [r18, r3, r19, r0, r20, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r21, 0xee00, r22}}}, @rights={{0x38, 0x1, 0x1, [r0, r0, r0, r23, r0, r0, r24, r0, r25, r26]}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xffffffffffffffff, r27}}}], 0x178, 0x4000000}}], 0x3, 0x20000000) socket$inet_udp(0x2, 0x2, 0x0) timerfd_gettime(r19, &(0x7f0000009740)) 146.404948ms ago: executing program 0 (id=269): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) pipe(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) sendfile(r1, r2, 0x0, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000300)='\x00\x00\x03\v\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\x00\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r\xba\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00'/468) 61.158519ms ago: executing program 0 (id=270): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f00000000c0), 0x10) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, 0x0) 59.445189ms ago: executing program 0 (id=271): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0x0, 0x7}) (async) r1 = signalfd(r0, &(0x7f0000000080), 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x3, 0x3, 0xffff1000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) (async) r2 = signalfd(r0, &(0x7f0000000100)={[0x64]}, 0x8) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0x7) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r3, &(0x7f0000000140)={0x24, @long={0x3, 0xffff, {0xffffffffffff0283}}}, 0x14) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x4, 0x70bd2b, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}}, 0x24000801) (async) sendmsg$802154_dgram(r1, &(0x7f0000000340)={&(0x7f0000000280), 0x14, &(0x7f0000000300)={&(0x7f00000002c0)="711bb26ef6ddd133d19fd6d1a95927e77aa7d92ee2c1dadddf1413ac92e5ec2eee8fd850b4106ab27a9932538d4c182c80d65624ff18afcf", 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x24000040) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000380)=[@acquire_done={0x40106309, 0x2}, @acquire={0x40046305, 0x1}, @register_looper], 0xbb, 0x0, &(0x7f00000003c0)="d9f5c2b5b87667059de33827605e1f8009c7c6db3af451ee04539ec5bb56ab83cc6e5e7563d7aea6d134997367402d155f2011b8feca39ff453d3accbdce6f5fe82edff1bc36f2994bccd2b2ee46bb40391fa96ed42e03bc7708f7243c2295e9a907cd0825d7699c185b67feb8a65102bf0994911918fd64fd497490c3dab4ecb8eb638ea29e5f041c9a603ae489e401e20811d5547aa1f877a3fe659ccb1a5e48b837c3a0233721728774c378d92b0c6bfc02c72aefd7687b5b02"}) (async) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000004c0)=0x4000) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)="9534837be8f5a28f561d08d00ea1cbf3fd0b67f64cff77d2127c638a4f5f01e2a0830b48d0692f8a9e49700ac8f69e2cb8c2", 0x32}, 0x1, 0x0, 0x0, 0x8001}, 0x4810) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f00000005c0)="660f38dc5e04660f388283ffff6766c1e22cc4e3f5cf1a08baf80c66b83c32b98a66efbafc0ced66b8000000800f23d80f21f86635400000c00f23f8dc05f20f7c4b0d3e0f01cb0f01c8", 0x4a}], 0x1, 0x2a, &(0x7f0000000680)=[@cstype3={0x5, 0x9}, @vmwrite={0x8, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000700)={0x5, &(0x7f00000006c0)=[{0x9, 0x63, 0x8b, 0x3}, {0x1, 0x7, 0x9, 0x1}, {0x7, 0x1, 0x8, 0x60}, {0xfff, 0x3, 0x2, 0x9}, {0xc, 0x7, 0xf, 0xf4}]}) (async) mount$bind(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x4000, 0x0) bind$inet(r1, &(0x7f0000000800)={0x2, 0x4e21, @empty}, 0x10) recvmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000840)=@tipc=@id, 0x80, &(0x7f0000000940)=[{&(0x7f00000008c0)=""/68, 0x44}], 0x1, &(0x7f0000000980)=""/167, 0xa7}, 0xfffffbff}, {{&(0x7f0000000a40)=@rc={0x1f, @none}, 0x80, &(0x7f0000000ac0), 0x0, &(0x7f0000000b00)=""/141, 0x8d}, 0x2}, {{&(0x7f0000000bc0)=@tipc=@name, 0x80, &(0x7f0000001f80)=[{&(0x7f0000000c40)=""/159, 0x9f}, {&(0x7f0000000d00)=""/179, 0xb3}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/196, 0xc4}, {&(0x7f0000001ec0)=""/163, 0xa3}], 0x5, &(0x7f0000002000)=""/74, 0x4a}, 0x7}, {{&(0x7f0000002080)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000002100)}, 0x80}], 0x4, 0x40, &(0x7f0000002240)={0x0, 0x989680}) (async, rerun: 32) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000002280)={0x8, 0xff}, 0x2) (async, rerun: 32) mount$tmpfs(0x0, &(0x7f00000022c0)='./file1\x00', &(0x7f0000002300), 0x800, &(0x7f0000002340)={[{@inode64}, {@nr_inodes={'nr_inodes', 0x3d, [0x67, 0x36]}}, {@grpquota}, {@huge_always}, {@size={'size', 0x3d, [0x32, 0x74, 0x36]}}], [{@uid_eq}, {@subj_type}, {@seclabel}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@seclabel}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x35, 0x37, 0x37, 0x35, 0x62, 0x66, 0x61], 0x2d, [0x63, 0x30, 0x63, 0x37], 0x2d, [0x66, 0x37, 0x35, 0x30], 0x2d, [0x35, 0x36, 0x35, 0x61], 0x2d, [0x0, 0x37, 0x38, 0xc7ccd5040805da19, 0x33, 0x37, 0x62, 0x65]}}}, {@hash}, {@fowner_lt}]}) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000002440)={0xc1, 0x0, 0x1}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002600)={0x10, 0x0, &(0x7f00000024c0)=[@register_looper, @release={0x40046306, 0x2}, @register_looper], 0xf4, 0x0, &(0x7f0000002500)="6d78ef258706c5dc6424c0cbcea78a480bd0dd68426b8c59a03d0b54d43c7daa6c93fc0691e4e954fccc18cf842bc4410721eb525a46b1d84e99f732fe33e71fc751597f9983518d1c11cef1ee39e5d09e6a3663330b92ae162b1171538cdc6f2252ab9cf1cb1f27a19e949365130f761fb228bc4ae1afba517a68929d6273d756095d17168b3435a8f58f6b4947ee5ffe39f0b60011082eeba128c9001256e99258d2b915939ffb480d84bd52d494b0fe2f5427c410ca5350e9d3aa50d0501ef13076fae2b2cb3d1b78a10b65c82d311ef4c37152c5ab25d830e606045f743ab35a7029d929f8690ca94a2153459d5e0dfadb45"}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000002640), 0x212500, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r4, &(0x7f00000026c0)=@file={0x1, './file0\x00'}, 0x6e) (async) sendmsg$802154_dgram(r2, &(0x7f0000002800)={&(0x7f0000002740)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f00000027c0)={&(0x7f0000002780)="2e2c5cbb783d977a0ac797e90843aade898e87b2dbd220e551f370d72a17634a8b3821f7cc", 0x25}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) (async) r5 = openat2(0xffffffffffffff9c, &(0x7f0000002840)='.\x00', &(0x7f0000002880)={0x202000, 0x80}, 0x18) recvmmsg(r5, &(0x7f0000002dc0)=[{{&(0x7f00000028c0)=@generic, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002940)=""/241, 0xf1}, {&(0x7f0000002a40)=""/48, 0x30}, {&(0x7f0000002a80)=""/206, 0xce}, {&(0x7f0000002b80)=""/67, 0x43}, {&(0x7f0000002c00)=""/103, 0x67}, {&(0x7f0000002c80)=""/16, 0x10}], 0x6, &(0x7f0000002d40)=""/90, 0x5a}, 0x5}], 0x1, 0x2000, &(0x7f0000002e00)={0x0, 0x989680}) (async) link(&(0x7f0000002e40)='./file1\x00', &(0x7f0000002e80)='./file1\x00') ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000002f00)='syz1\x00') 58.758069ms ago: executing program 4 (id=272): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000580)={0x0, 0x800, 0x7fff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000004640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000004600)={&(0x7f00000001c0)={0x2c, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x12}}}}, [@NL80211_ATTR_NAN_FUNC={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c000) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000dc0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000480)={0x24, r4, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x5}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x4040004) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000980)={r2, 0x3, 0xffffffff, 0x1}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r8, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0xdd86, r10}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) r11 = dup3(r6, r5, 0x0) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r12, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r9, 0x111, 0x2, 0x1, 0x4) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000740)=[@decrefs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000c00)={0xc0, 0x0, &(0x7f0000001580)=[@decrefs, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001280)={@fda={0x66646185, 0x9, 0x1, 0x30}, @fda={0x66646185, 0x4, 0x0, 0x37}, @fd={0x66642a85, 0x0, r7}}, &(0x7f0000001240)={0x0, 0x20, 0x40}}}, @clear_death={0x400c630f, 0x2}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000013c0)={@fd={0x66642a85, 0x0, r7}, @fd={0x66642a85, 0x0, r11}, @ptr={0x70742a85, 0x0, &(0x7f0000001340)=""/101, 0x65, 0x0, 0xf}}, &(0x7f0000001440)={0x0, 0x18, 0x30}}, 0x40}, @exit_looper, @exit_looper, @free_buffer={0x40086303, r1}, @register_looper], 0x0, 0x0, 0x0}) execveat(r11, &(0x7f0000000e00)='./file0\x00', &(0x7f0000001000)={[&(0x7f0000000e40)='\x00', &(0x7f0000000e80)='\x00', &(0x7f0000000ec0)='\x00', &(0x7f0000000f00)=':\')\x00', &(0x7f0000000f40)='\x00', &(0x7f0000000f80)='^}*-#{\x00', &(0x7f0000000fc0)='\\:\x00']}, &(0x7f0000001180)={[&(0x7f0000001040)=')/\x00', &(0x7f0000001080)='}\x00', &(0x7f00000010c0)='\x00', &(0x7f0000001100)='nl80211\x00', &(0x7f0000001140)='s&)\x00']}, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x9c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}, @free_buffer={0x40086303, r1}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/221, 0xdd, 0x1, 0x1c}, @fda={0x66646185, 0xa, 0x1, 0x8}, @fda={0x66646185, 0x7, 0x2, 0x39}}, 0x0}}], 0x0, 0x0, 0x0}) 0s ago: executing program 0 (id=273): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score_adj\x00') lseek(r0, 0x10001, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18000000f72e6d07cde1ce44e0f00357119518a02dec948b4c8b53c11c2a9de7ec4ee6153c1a7aac9cf5ea2c2695142acb0153160b01a438de46ba426d11c305", @ANYRES16=r0, @ANYBLOB="010000000000000000001c000000"], 0x14}, 0x1, 0x0, 0x0, 0x40084}, 0x24000080) gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x8021, 0x800000000004, @thr={&(0x7f0000000100)="ac2f9d96db5e20b8dba348c73a7e79d87f805e574bdee8000d6e6cde3d4f6a082ad4ef2be4c50294429e44831b1750ae7124648c216ed36b920000f5e64585f07efa44d7a799804a8b6fb4f06d839c74df633d8a6c8bb2a9726f51321b6f0773958d562c5b8896ec85bf17c516d7c892b585ac9195afb3c9c0f4589ac9df3522a760140ceb", &(0x7f00000001c0)="6c419aae43c4717cc6c267672ce33afb56c1cc781e80a4b12d5c9d6d5ef850892575b5824ce11ff0bf086d26be4c6d96bd9964a09278386351195c4668f4691d053d78d774e10a252ac6c2b959c95032d2a30a21e74327c7d10db489fb8cf6e7b44869d6377827c3f28ab3a58f7ad9c8aa81c63a67d6ba602ac969"}}, &(0x7f0000bbdffc)) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff010000000000000000000000000001140004"], 0xe4}}, 0x2004c084) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRESDEC=0x0], 0x10}}, 0x80) r4 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r4}, &(0x7f0000044000)=0x0) timer_settime(r5, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[@ANYBLOB="9e3d74cced87f788a800454801633e0000", @ANYRES16=r6, @ANYBLOB="00012abd7000fedbdf2501000000080002000200000008000200030000007c000c8014000b8008000a0024b8000008000900634d15052c000b8008000900f68b781a080009002ff83e0708000a0097ef000008000900700a6b7c08000900a758121f0c000b8008000900f197704e2c000b8008000a008624000008000900be7a6e2a080009003188f27e08000a00a4760000080009004bdf2a660800020002000000"], 0xa8}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) timer_settime(r5, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000e00)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000400)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x50, 0x0, &(0x7f0000002040)="7797f473010e3c6f412193d01ca46e5d1fd37e1ff088862e47734ac7eb2e436321311317afe07822a299d63328f5c10a5f99166b47868f357ba1edd6b402c7022a1fe37f5f729dd812db18dad930f670"}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.53' (ED25519) to the list of known hosts. [ 22.914899][ T36] audit: type=1400 audit(1750927851.120:64): avc: denied { mounton } for pid=283 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.916416][ T283] cgroup: Unknown subsys name 'net' [ 22.938046][ T36] audit: type=1400 audit(1750927851.120:65): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.965807][ T36] audit: type=1400 audit(1750927851.150:66): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.966003][ T283] cgroup: Unknown subsys name 'devices' [ 23.127103][ T283] cgroup: Unknown subsys name 'hugetlb' [ 23.132861][ T283] cgroup: Unknown subsys name 'rlimit' [ 23.227716][ T36] audit: type=1400 audit(1750927851.430:67): avc: denied { setattr } for pid=283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.251909][ T36] audit: type=1400 audit(1750927851.430:68): avc: denied { mounton } for pid=283 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.268882][ T285] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.278391][ T36] audit: type=1400 audit(1750927851.430:69): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.317378][ T36] audit: type=1400 audit(1750927851.490:70): avc: denied { relabelto } for pid=285 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.318892][ T283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.347850][ T36] audit: type=1400 audit(1750927851.490:71): avc: denied { write } for pid=285 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.387274][ T36] audit: type=1400 audit(1750927851.520:72): avc: denied { read } for pid=283 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.418822][ T36] audit: type=1400 audit(1750927851.520:73): avc: denied { open } for pid=283 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.503935][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.511833][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.521416][ T290] bridge_slave_0: entered allmulticast mode [ 24.530198][ T290] bridge_slave_0: entered promiscuous mode [ 24.540388][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.549971][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.559665][ T290] bridge_slave_1: entered allmulticast mode [ 24.567966][ T290] bridge_slave_1: entered promiscuous mode [ 24.678832][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.687153][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.696096][ T293] bridge_slave_0: entered allmulticast mode [ 24.704339][ T293] bridge_slave_0: entered promiscuous mode [ 24.714014][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.724041][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.732715][ T293] bridge_slave_1: entered allmulticast mode [ 24.740271][ T293] bridge_slave_1: entered promiscuous mode [ 24.845178][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.854997][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.863342][ T295] bridge_slave_0: entered allmulticast mode [ 24.871966][ T295] bridge_slave_0: entered promiscuous mode [ 24.890254][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.898957][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.907516][ T295] bridge_slave_1: entered allmulticast mode [ 24.916289][ T295] bridge_slave_1: entered promiscuous mode [ 24.926981][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.935611][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.945397][ T296] bridge_slave_0: entered allmulticast mode [ 24.953968][ T296] bridge_slave_0: entered promiscuous mode [ 24.963844][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.972208][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.981646][ T296] bridge_slave_1: entered allmulticast mode [ 24.989405][ T296] bridge_slave_1: entered promiscuous mode [ 25.044684][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.053578][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.063359][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.072568][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.122986][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.131865][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.140741][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.148810][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.216114][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.225814][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.234918][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.243784][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.256881][ T208] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.266623][ T208] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.276121][ T208] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.285513][ T208] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.294726][ T208] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.304659][ T208] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.334696][ T208] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.343485][ T208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.358841][ T208] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.368011][ T208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.377974][ T208] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.386637][ T208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.399706][ T208] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.408219][ T208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.457077][ T208] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.465386][ T208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.475486][ T208] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.484867][ T208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.517891][ T208] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.525700][ T208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.535871][ T208] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.544374][ T208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.564566][ T295] veth0_vlan: entered promiscuous mode [ 25.575911][ T293] veth0_vlan: entered promiscuous mode [ 25.592595][ T290] veth0_vlan: entered promiscuous mode [ 25.614932][ T295] veth1_macvtap: entered promiscuous mode [ 25.624049][ T293] veth1_macvtap: entered promiscuous mode [ 25.637479][ T290] veth1_macvtap: entered promiscuous mode [ 25.687314][ T296] veth0_vlan: entered promiscuous mode [ 25.699849][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.735335][ T296] veth1_macvtap: entered promiscuous mode [ 25.794895][ T314] tmpfs: Unknown parameter '*ŸAñPÖ' [ 25.844817][ T320] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.860579][ T322] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 218) [ 25.865080][ T322] rust_binder: Error while translating object. [ 25.879680][ T322] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 25.887876][ T322] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:6 [ 26.063965][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.084005][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.108752][ T327] binder: Unknown parameter 'fscontext?}' [ 26.119942][ T327] input: syz0 as /devices/virtual/input/input4 [ 26.164003][ T306] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 26.235468][ T45] usb 2-1: config 1 has an invalid descriptor of length 68, skipping remainder of the config [ 26.250069][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 26.262531][ T45] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 26.281096][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.282924][ T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 26.296119][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.306524][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.319255][ T9] usb 1-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 26.341730][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.347879][ T45] usb 2-1: Product: syz [ 26.354488][ T9] usb 1-1: config 0 descriptor?? [ 26.360876][ T45] usb 2-1: Manufacturer: syz [ 26.370654][ T45] usb 2-1: SerialNumber: syz [ 26.380109][ T306] usb 4-1: config 0 has an invalid interface number: 151 but max is 0 [ 26.391992][ T306] usb 4-1: config 0 has no interface number 0 [ 26.399345][ T306] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 26.413881][ T306] usb 4-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 26.425324][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.437983][ T306] usb 4-1: Product: syz [ 26.443248][ T306] usb 4-1: Manufacturer: syz [ 26.450002][ T306] usb 4-1: SerialNumber: syz [ 26.457638][ T306] usb 4-1: config 0 descriptor?? [ 26.484165][ T31] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 26.573053][ T313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.582165][ T313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.623930][ T31] usb 3-1: device descriptor read/64, error -71 [ 26.679524][ T306] usb 4-1: USB disconnect, device number 2 [ 26.698341][ T45] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 26.706003][ T45] cdc_ncm 2-1:1.0: bind() failure [ 26.706954][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.151/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 26.714183][ T45] usb 2-1: USB disconnect, device number 2 [ 26.795235][ T9] elo 0003:04E7:0030.0001: unknown main item tag 0x0 [ 26.804233][ T9] elo 0003:04E7:0030.0001: unknown main item tag 0x0 [ 26.812176][ T9] elo 0003:04E7:0030.0001: unknown main item tag 0x0 [ 26.820828][ T9] elo 0003:04E7:0030.0001: unknown main item tag 0x0 [ 26.829526][ T9] elo 0003:04E7:0030.0001: unknown main item tag 0x0 [ 26.839360][ T9] elo 0003:04E7:0030.0001: unknown main item tag 0x0 [ 26.848303][ T9] elo 0003:04E7:0030.0001: unknown main item tag 0x0 [ 26.858221][ T9] elo 0003:04E7:0030.0001: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.0-1/input0 [ 26.874055][ T31] usb 3-1: device descriptor read/64, error -71 [ 27.067321][ T337] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 27.123989][ T31] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 27.266576][ T345] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 27.273934][ T31] usb 3-1: device descriptor read/64, error -71 [ 27.533941][ T31] usb 3-1: device descriptor read/64, error -71 [ 27.533963][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 27.654040][ T31] usb usb3-port1: attempt power cycle [ 27.694138][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 27.704007][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 27.711639][ T9] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 27.720453][ T9] usb 2-1: config 0 has no interface number 0 [ 27.729147][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 27.740088][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.750990][ T9] usb 2-1: Product: syz [ 27.756077][ T9] usb 2-1: Manufacturer: syz [ 27.761399][ T9] usb 2-1: SerialNumber: syz [ 27.768529][ T9] usb 2-1: config 0 descriptor?? [ 27.775778][ T9] smsc95xx v2.0.0 [ 27.855063][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.866515][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 27.877829][ T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 27.888815][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 27.898493][ T10] usb 4-1: SerialNumber: syz [ 27.993915][ T31] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 28.025767][ T31] usb 3-1: device descriptor read/8, error -71 [ 28.107274][ T36] kauditd_printk_skb: 77 callbacks suppressed [ 28.107294][ T36] audit: type=1400 audit(1750927856.310:151): avc: denied { getopt } for pid=352 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 28.109216][ T10] usb 4-1: 0:2 : does not exist [ 28.156700][ T10] usb 4-1: USB disconnect, device number 3 [ 28.173083][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.175223][ T31] usb 3-1: device descriptor read/8, error -71 [ 28.194668][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 28.214517][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 28.433946][ T31] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 28.465786][ T31] usb 3-1: device descriptor read/8, error -71 [ 28.595453][ T31] usb 3-1: device descriptor read/8, error -71 [ 28.704032][ T31] usb usb3-port1: unable to enumerate USB device [ 28.793089][ T36] audit: type=1400 audit(1750927856.990:152): avc: denied { setopt } for pid=358 comm="syz.3.18" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.819662][ T36] audit: type=1400 audit(1750927857.020:153): avc: denied { getopt } for pid=358 comm="syz.3.18" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.841807][ T36] audit: type=1400 audit(1750927857.050:154): avc: denied { write } for pid=358 comm="syz.3.18" name="001" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 28.868008][ T36] audit: type=1400 audit(1750927857.050:155): avc: denied { setattr } for pid=358 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 28.890998][ T354] usb 1-1: USB disconnect, device number 2 [ 28.903736][ T363] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 28.933218][ T36] audit: type=1400 audit(1750927857.130:156): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 29.000838][ T36] audit: type=1400 audit(1750927857.200:157): avc: denied { ioctl } for pid=374 comm="syz.0.23" path="socket:[4382]" dev="sockfs" ino=4382 ioctlcmd=0x9416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 29.044452][ T36] audit: type=1400 audit(1750927857.230:158): avc: denied { read write } for pid=376 comm="syz.0.24" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 29.076304][ T36] audit: type=1400 audit(1750927857.230:159): avc: denied { open } for pid=376 comm="syz.0.24" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 29.104462][ T36] audit: type=1400 audit(1750927857.240:160): avc: denied { read } for pid=376 comm="syz.0.24" name="usbmon8" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 29.179805][ T383] binder: Unknown parameter 'defcontext01777777777777777777777' [ 29.317192][ T387] kvm: kvm [386]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x3 [ 29.333413][ T387] 9pnet: Could not find request transport: fk [ 29.410042][ T389] Zero length message leads to an empty skb [ 29.546515][ T394] ======================================================= [ 29.546515][ T394] WARNING: The mand mount option has been deprecated and [ 29.546515][ T394] and is ignored by this kernel. Remove the mand [ 29.546515][ T394] option from the mount to silence this warning. [ 29.546515][ T394] ======================================================= [ 29.586858][ T394] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 29.586968][ T45] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 29.753962][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 29.761852][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.774879][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 29.788412][ T45] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 29.799853][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.810530][ T45] usb 3-1: Product: syz [ 29.816017][ T45] usb 3-1: Manufacturer: syz [ 29.822203][ T45] usb 3-1: SerialNumber: syz [ 29.846704][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 29.873954][ T9] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 29.895501][ T9] usb 2-1: USB disconnect, device number 3 [ 30.158682][ T406] can: request_module (can-proto-0) failed. [ 30.166667][ T406] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742) [ 30.166695][ T406] rust_binder: Error while translating object. [ 30.183140][ T406] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 30.191300][ T406] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:12 [ 30.434839][ T410] netlink: 24 bytes leftover after parsing attributes in process `syz.0.33'. [ 30.499034][ T413] rust_binder: Error while translating object. [ 30.499082][ T413] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 30.514181][ T413] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:38 [ 30.529245][ T414] netlink: 36 bytes leftover after parsing attributes in process `syz.0.36'. [ 30.551871][ T416] rust_binder: Write failure EINVAL in pid:40 [ 30.585533][ T420] binder: Bad value for 'stats' [ 30.623883][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 30.670525][ T424] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388857856 i:0 err:EBUSY [ 30.670568][ T424] rust_binder: Error in use_page_slow: EBUSY [ 30.684344][ T424] rust_binder: use_range failure EBUSY [ 30.692281][ T424] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 30.701031][ T424] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 30.710264][ T424] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:41 [ 30.785132][ T429] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 30.795176][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 30.825305][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 30.841828][ T9] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 30.844004][ T431] tipc: Started in network mode [ 30.858951][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.871383][ T431] tipc: Node identity fe965487ccbb, cluster identity 4711 [ 30.881194][ T9] usb 2-1: config 0 descriptor?? [ 30.889789][ T431] tipc: Enabled bearer , priority 0 [ 30.969044][ T416] rust_binder: Write failure EINVAL in pid:40 [ 31.134460][ T306] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 31.296391][ T408] : renamed from bond_slave_0 [ 31.303468][ T208] Bluetooth: hci0: Frame reassembly failed (-84) [ 31.305445][ T306] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 31.323928][ T208] Bluetooth: hci0: Frame reassembly failed (-84) [ 31.331235][ T408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.351092][ T408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.362222][ T306] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 31.374576][ T306] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 31.394895][ T306] usb 1-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 31.407351][ T306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.418619][ T306] usb 1-1: Product: syz [ 31.423111][ T306] usb 1-1: Manufacturer: syz [ 31.430056][ T306] usb 1-1: SerialNumber: syz [ 31.437750][ T306] usb 1-1: config 0 descriptor?? [ 31.445420][ T306] usb 1-1: Found UVC 34.00 device syz (8086:0b5b) [ 31.453523][ T306] usb 1-1: No valid video chain found. [ 31.655527][ T354] usb 1-1: USB disconnect, device number 3 [ 31.667237][ T431] tipc: Disabling bearer [ 32.251448][ T45] usb 3-1: USB disconnect, device number 6 [ 32.290462][ T459] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:15 [ 32.388013][ T467] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.472731][ T477] binder: Bad value for 'max' [ 32.513930][ T480] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000700000000 not found [ 32.522799][ T480] rust_binder: Write failure EINVAL in pid:23 [ 33.333910][ T448] Bluetooth: hci0: command 0x1003 tx timeout [ 33.333946][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 33.441693][ T517] overlayfs: missing 'lowerdir' [ 33.447626][ T9] usb 2-1: string descriptor 0 read error: -71 [ 33.455763][ T9] usb 2-1: USB disconnect, device number 4 [ 33.492450][ T522] binder: Bad value for 'max' [ 33.526776][ T36] kauditd_printk_skb: 53 callbacks suppressed [ 33.526794][ T36] audit: type=1400 audit(1750927861.730:214): avc: denied { bind } for pid=526 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 33.563522][ T36] audit: type=1400 audit(1750927861.730:215): avc: denied { name_bind } for pid=526 comm="syz.1.75" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 33.590756][ T36] audit: type=1400 audit(1750927861.730:216): avc: denied { node_bind } for pid=526 comm="syz.1.75" saddr=fe80::aa src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 33.624976][ T531] input: syz0 as /devices/virtual/input/input7 [ 33.633259][ T36] audit: type=1400 audit(1750927861.830:217): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=464 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.664266][ T36] audit: type=1400 audit(1750927861.830:218): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=464 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.699983][ T36] audit: type=1400 audit(1750927861.830:219): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=464 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.735446][ T36] audit: type=1400 audit(1750927861.840:220): avc: denied { setopt } for pid=530 comm="syz.3.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.779160][ T36] audit: type=1400 audit(1750927861.980:221): avc: denied { watch watch_reads } for pid=532 comm="syz.3.77" path="/31" dev="tmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 33.810078][ T36] audit: type=1400 audit(1750927861.990:222): avc: denied { mount } for pid=532 comm="syz.3.77" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 33.865124][ T36] audit: type=1400 audit(1750927862.070:223): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 33.903901][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 33.963531][ T544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'. [ 34.055400][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.066845][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 34.074432][ T9] usb 2-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 34.086496][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.100426][ T9] usb 2-1: config 0 descriptor?? [ 34.233861][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 34.393968][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 34.407321][ T10] usb 1-1: New USB device found, idVendor=227d, idProduct=0a19, bcdDevice= 0.00 [ 34.419252][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.422624][ T551] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=551 comm=syz.2.83 [ 34.431284][ T10] usb 1-1: config 0 descriptor?? [ 34.474581][ T554] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:36 [ 34.712549][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 34.769666][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 34.783361][ T9] usb 2-1: USB disconnect, device number 5 [ 34.854763][ T10] hid-generic 0003:227D:0A19.0002: item fetching failed at offset 3/5 [ 34.867579][ T10] hid-generic 0003:227D:0A19.0002: probe with driver hid-generic failed with error -22 [ 34.882092][ T571] fuse: Unknown parameter '0x000000000000000a' [ 35.056787][ T9] usb 1-1: USB disconnect, device number 4 [ 35.123998][ T76] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 35.292103][ T76] usb 3-1: config 1 interface 0 has no altsetting 0 [ 35.305349][ T76] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 35.324076][ T76] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.333724][ T76] usb 3-1: Product: syz [ 35.338700][ T76] usb 3-1: Manufacturer: syz [ 35.346084][ T76] usb 3-1: SerialNumber: syz [ 35.411756][ T577] 9pnet_fd: p9_fd_create_tcp (577): problem connecting socket to 127.0.0.1 [ 35.508242][ T580] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:104 [ 35.511227][ T580] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:104 [ 35.567188][ T9] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 35.618391][ T587] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:109 [ 35.621076][ T585] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 35.633941][ T585] rust_binder: Error while translating object. [ 35.645647][ T585] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 35.652832][ T585] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:90 [ 35.723869][ T9] usb 2-1: device descriptor read/64, error -71 [ 35.756559][ T590] rust_binder: Error in use_page_slow: ESRCH [ 35.756583][ T590] rust_binder: use_range failure ESRCH [ 35.765683][ T590] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 35.774401][ T590] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 35.784583][ T590] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:92 [ 35.841229][ T594] rust_binder: Error while translating object. [ 35.853816][ T594] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 35.860991][ T594] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:96 [ 35.959277][ T76] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 36.004965][ T9] usb 2-1: device descriptor read/64, error -71 [ 36.015129][ T596] FAT-fs (rnullb0): bogus number of reserved sectors [ 36.023869][ T596] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 36.102696][ T599] fuse: Unknown parameter 'ro8ãíZW¶Wú²¯£½caVotmode' [ 36.243914][ T9] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 36.312898][ T355] usb 3-1: USB disconnect, device number 7 [ 36.320781][ T355] usblp0: removed [ 36.383953][ T9] usb 2-1: device descriptor read/64, error -71 [ 36.623941][ T9] usb 2-1: device descriptor read/64, error -71 [ 36.734069][ T9] usb usb2-port1: attempt power cycle [ 36.753971][ T76] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 36.901058][ T611] fuse: Unknown parameter '0x0000000000000004' [ 36.905483][ T76] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 36.919391][ T76] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.935485][ T76] usb 4-1: config 0 descriptor?? [ 37.041431][ T624] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:65 [ 37.083971][ T9] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 37.129142][ T9] usb 2-1: device descriptor read/8, error -71 [ 37.273927][ T633] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 37.273959][ T633] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:74 [ 37.289203][ T9] usb 2-1: device descriptor read/8, error -71 [ 37.290124][ T633] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.320401][ T635] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 37.320431][ T635] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:74 [ 37.371843][ T640] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.396641][ T640] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.405828][ T640] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 37.417589][ T640] rust_binder: Read failure Err(EFAULT) in pid:81 [ 37.428846][ T640] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:81 [ 37.473272][ T642] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 37.549477][ T76] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 37.554166][ T9] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 37.564095][ T76] asix 4-1:0.0: probe with driver asix failed with error -61 [ 37.588356][ T9] usb 2-1: device descriptor read/8, error -71 [ 37.725410][ T9] usb 2-1: device descriptor read/8, error -71 [ 37.834059][ T9] usb usb2-port1: unable to enumerate USB device [ 38.156291][ T664] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:99 [ 38.318761][ T679] rust_binder: Write failure EINVAL in pid:20 [ 38.366857][ T681] netlink: 188 bytes leftover after parsing attributes in process `syz.1.129'. [ 38.417786][ T684] binder: Binderfs stats mode cannot be changed during a remount [ 38.505262][ T689] fuse: Bad value for 'fd' [ 38.638614][ T691] loop7: detected capacity change from 0 to 16384 [ 38.705784][ T693] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:120 [ 38.814520][ T702] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:112 [ 38.826770][ T36] kauditd_printk_skb: 35 callbacks suppressed [ 38.826791][ T36] audit: type=1400 audit(1750927867.030:259): avc: denied { remount } for pid=700 comm="syz.2.137" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 38.877647][ T702] sit0: entered promiscuous mode [ 38.906161][ T702] netlink: 'syz.3.102': attribute type 1 has an invalid length. [ 38.938024][ T702] netlink: 1 bytes leftover after parsing attributes in process `syz.3.102'. [ 39.183851][ T9] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 39.307439][ T36] audit: type=1400 audit(1750927867.510:260): avc: denied { create } for pid=709 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 39.346543][ T9] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 39.358578][ T36] audit: type=1400 audit(1750927867.540:261): avc: denied { setopt } for pid=709 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 39.376230][ T9] usb 3-1: config 0 has no interface number 0 [ 39.408703][ T9] usb 3-1: config 0 interface 41 has no altsetting 0 [ 39.430801][ T9] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 39.458144][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.468028][ T9] usb 3-1: Product: syz [ 39.473581][ T9] usb 3-1: Manufacturer: syz [ 39.479629][ T9] usb 3-1: SerialNumber: syz [ 39.494102][ T9] usb 3-1: config 0 descriptor?? [ 39.504701][ T9] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -22 [ 39.605147][ T717] binder: Unknown parameter 'stat' [ 39.611668][ T36] audit: type=1400 audit(1750927867.810:262): avc: denied { ioctl } for pid=716 comm="syz.1.142" path="socket:[6989]" dev="sockfs" ino=6989 ioctlcmd=0x8953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 39.674714][ T36] audit: type=1400 audit(1750927867.880:263): avc: denied { mount } for pid=718 comm="syz.1.143" name="/" dev="configfs" ino=2052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 39.701359][ T36] audit: type=1400 audit(1750927867.880:264): avc: denied { search } for pid=718 comm="syz.1.143" name="/" dev="configfs" ino=2052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 39.708344][ T9] usb 3-1: USB disconnect, device number 8 [ 39.734030][ T36] audit: type=1400 audit(1750927867.880:265): avc: denied { write } for pid=718 comm="syz.1.143" name="/" dev="configfs" ino=2052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 39.972836][ T9] usb 4-1: USB disconnect, device number 4 [ 40.225638][ T728] rust_binder: Error while translating object. [ 40.225672][ T728] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 40.234851][ T728] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:135 [ 40.323942][ T9] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 40.495341][ T9] usb 4-1: config 0 has an invalid descriptor of length 53, skipping remainder of the config [ 40.508118][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 40.527342][ T9] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=d4.ae [ 40.539014][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.548189][ T9] usb 4-1: Product: syz [ 40.553321][ T9] usb 4-1: Manufacturer: syz [ 40.558492][ T9] usb 4-1: SerialNumber: syz [ 40.564937][ T9] usb 4-1: config 0 descriptor?? [ 40.756878][ T747] syz.1.153: vmalloc error: size 16105472, failed to allocated page array size 31456, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 40.763545][ T36] audit: type=1400 audit(1750927868.960:266): avc: denied { bind } for pid=744 comm="syz.0.152" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.781044][ T747] CPU: 0 UID: 0 PID: 747 Comm: syz.1.153 Not tainted 6.12.30-syzkaller-g22d634eb24e3 #0 5aa5a802a358a0169efaadab5c3b9a05fad29399 [ 40.781080][ T747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 40.781106][ T747] Call Trace: [ 40.781115][ T747] [ 40.781124][ T747] __dump_stack+0x21/0x30 [ 40.781165][ T747] dump_stack_lvl+0x10c/0x190 [ 40.781196][ T747] ? __cfi_dump_stack_lvl+0x10/0x10 [ 40.781225][ T747] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 40.781251][ T747] dump_stack+0x19/0x20 [ 40.781278][ T747] warn_alloc+0x1bc/0x2a0 [ 40.781303][ T747] ? kasan_save_free_info+0x4a/0x60 [ 40.781331][ T747] ? __cfi_warn_alloc+0x10/0x10 [ 40.781356][ T747] ? __get_vm_area_node+0x1dc/0x3a0 [ 40.781381][ T747] ? __vcalloc_noprof+0x3a/0x50 [ 40.781413][ T747] __vmalloc_node_range_noprof+0x68e/0x1420 [ 40.781445][ T747] ? __se_sys_ioctl+0x132/0x1b0 [ 40.781480][ T747] ? __x64_sys_ioctl+0x7f/0xa0 [ 40.781515][ T747] ? x64_sys_call+0x1878/0x2ee0 [ 40.781557][ T747] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 40.781589][ T747] ? __vcalloc_noprof+0x3a/0x50 [ 40.781618][ T747] __vmalloc_noprof+0xfe/0x1d0 [ 40.781644][ T747] ? __vcalloc_noprof+0x3a/0x50 [ 40.781675][ T747] ? __cfi___vmalloc_noprof+0x10/0x10 [ 40.781700][ T747] ? mutex_lock+0x92/0x1c0 [ 40.781727][ T747] ? __cfi_mutex_lock+0x10/0x10 [ 40.781756][ T747] __vcalloc_noprof+0x3a/0x50 [ 40.781787][ T747] kvm_set_memslot+0x4c6/0x13f0 [ 40.781818][ T747] ? __kasan_kmalloc+0x96/0xb0 [ 40.781855][ T747] __kvm_set_memory_region+0x87c/0xb80 [ 40.781890][ T747] kvm_set_memory_region+0x2f/0x50 [ 40.781921][ T747] kvm_vm_ioctl+0x9ad/0xb80 [ 40.781950][ T747] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 40.781978][ T747] ? ioctl_has_perm+0x1aa/0x4d0 [ 40.782015][ T747] ? __asan_memcpy+0x5a/0x80 [ 40.782045][ T747] ? ioctl_has_perm+0x3e0/0x4d0 [ 40.782085][ T747] ? __cfi_futex_wait+0x10/0x10 [ 40.782111][ T747] ? selinux_file_ioctl+0x6e0/0x1360 [ 40.782148][ T747] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 40.782185][ T747] ? kfree+0x156/0x400 [ 40.782213][ T747] ? do_futex+0x309/0x500 [ 40.782248][ T747] ? __cfi_do_futex+0x10/0x10 [ 40.782282][ T747] ? anon_inode_getfile+0xfb/0x190 [ 40.782309][ T747] ? __fget_files+0x2c5/0x340 [ 40.782343][ T747] ? bpf_lsm_file_ioctl+0xd/0x20 [ 40.782369][ T747] ? security_file_ioctl+0x34/0xd0 [ 40.782405][ T747] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 40.782471][ T747] __se_sys_ioctl+0x132/0x1b0 [ 40.782508][ T747] __x64_sys_ioctl+0x7f/0xa0 [ 40.782587][ T747] x64_sys_call+0x1878/0x2ee0 [ 40.782621][ T747] do_syscall_64+0x58/0xf0 [ 40.782643][ T747] ? clear_bhb_loop+0x50/0xa0 [ 40.782674][ T747] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.782701][ T747] RIP: 0033:0x7f870898e929 [ 40.782728][ T747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.782749][ T747] RSP: 002b:00007f870977c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 40.782776][ T747] RAX: ffffffffffffffda RBX: 00007f8708bb5fa0 RCX: 00007f870898e929 [ 40.782792][ T747] RDX: 0000200000000080 RSI: 000000004020ae46 RDI: 0000000000000004 [ 40.782805][ T747] RBP: 00007f8708a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 40.782820][ T747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.782834][ T747] R13: 0000000000000000 R14: 00007f8708bb5fa0 R15: 00007ffda75fe548 [ 40.782854][ T747] [ 40.782870][ T747] Mem-Info: [ 40.814163][ T745] SELinux: security_context_str_to_sid ( : 16 [ 40.814163][ T745] walksize : 16 [ 40.814163][ T745] statesize : 0 [ 40.814163][ T745] [ 40.814163][ T745] name : hmac(sha512) [ 40.814163][ T745] driver : hmac(sha512-avx2) [ 40.814163][ T745] module : kernel [ 40.814163][ T745] priority : 170 [ 40.814163][ T745] refcnt : 2 [ 40.814163][ T745] selftest : passed [ 40.814163][ T745] internal : no [ 40.814163][ T745] type : shash [ 40.814163][ T745] blocksize : 128 [ 40.814163][ T745] digestsize : 64 [ 40.814163][ T745] [ 40.814163][ T745] name : seqiv(rfc4309(ccm(aes))) [ 40.814163][ T745] driver : seqiv(rfc4309(ccm_base(ctr-aes-aesni) failed with errno=-22 [ 40.852159][ T36] audit: type=1400 audit(1750927868.960:267): avc: denied { node_bind } for pid=744 comm="syz.0.152" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 40.867031][ T747] active_anon:6042 inactive_anon:0 isolated_anon:0 [ 40.867031][ T747] active_file:17291 inactive_file:12412 isolated_file:0 [ 40.867031][ T747] unevictable:0 dirty:981 writeback:0 [ 40.867031][ T747] slab_reclaimable:5412 slab_unreclaimable:70679 [ 40.867031][ T747] mapped:24339 shmem:165 pagetables:812 [ 40.867031][ T747] sec_pagetables:0 bounce:0 [ 40.867031][ T747] kernel_misc_reclaimable:0 [ 40.867031][ T747] free:1519219 free_pcp:2565 free_cma:0 [ 40.886473][ T208] tipc: Subscription rejected, illegal request [ 40.892133][ T726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.901611][ T747] Node 0 active_anon:24068kB inactive_anon:0kB active_file:69164kB inactive_file:49648kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97356kB dirty:3924kB writeback:0kB shmem:660kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4544kB pagetables:3248kB sec_pagetables:0kB all_unreclaimable? no [ 40.918395][ T726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.942828][ T747] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2966016kB mlocked:0kB bounce:0kB free_pcp:5804kB local_pcp:5804kB free_cma:0kB [ 40.960792][ T726] netlink: 'syz.3.145': attribute type 11 has an invalid length. [ 40.970147][ T747] lowmem_reserve[]: [ 41.007917][ T36] audit: type=1400 audit(1750927869.180:268): avc: denied { read } for pid=95 comm="acpid" name="event4" dev="devtmpfs" ino=485 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 41.015414][ T747] 0 3921 3921 [ 41.470989][ T774] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 41.479460][ T747] Normal free:3112064kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25336kB inactive_anon:0kB active_file:69164kB inactive_file:49652kB unevictable:0kB writepending:520kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:5068kB local_pcp:3488kB free_cma:0kB [ 41.495723][ T774] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:155 [ 41.530003][ T747] lowmem_reserve[]: 0 0 0 [ 41.713175][ T747] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 6*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 41.716356][ T332] usb 4-1: USB disconnect, device number 5 [ 41.742794][ T747] Normal: 326*4kB (UME) 306*8kB (UM) 531*16kB (UME) 379*32kB (UME) 315*64kB (UME) 22*128kB (UME) 15*256kB (UME) 9*512kB (UME) 13*1024kB (UME) 2*2048kB (ME) 743*4096kB (M) = 3116536kB [ 41.766176][ T747] 30377 total pagecache pages [ 41.772798][ T747] 0 pages in swap cache [ 41.779321][ T747] Free swap = 124728kB [ 41.785963][ T747] Total swap = 124996kB [ 41.792749][ T747] 2097051 pages RAM [ 41.799325][ T747] 0 pages HighMem/MovableOnly [ 41.803907][ T45] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 41.805682][ T747] 351517 pages reserved [ 41.824566][ T747] 0 pages cma reserved [ 41.833659][ T747] Memory allocations: [ 41.840747][ T747] 0 B 0 init/main.c:1370 func:do_initcalls [ 41.851344][ T747] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 41.865625][ T747] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 41.875367][ T747] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 41.884846][ T747] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 41.895261][ T747] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 41.907027][ T747] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 41.918400][ T747] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 41.928816][ T747] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 41.939731][ T747] 0 B 0 init/initramfs.c:101 func:find_link [ 41.974220][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 41.987117][ T45] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 41.998538][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.009237][ T45] usb 1-1: Product: syz [ 42.014742][ T45] usb 1-1: Manufacturer: syz [ 42.021504][ T45] usb 1-1: SerialNumber: syz [ 42.030433][ T45] usb 1-1: config 0 descriptor?? [ 42.040989][ T45] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 42.056247][ T45] usb 1-1: Detected FT4233HP [ 42.135717][ T782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.162'. [ 42.147576][ T783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.162'. [ 42.238554][ T788] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.258124][ T45] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 42.280642][ T45] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 42.325151][ T798] tmpfs: Bad value for 'uid' [ 42.333398][ T798] tmpfs: Bad value for 'uid' [ 42.391406][ T804] rust_binder: Error while translating object. [ 42.391441][ T804] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 42.398695][ T804] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:59 [ 42.497496][ T45] usb 1-1: USB disconnect, device number 5 [ 42.522282][ T818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.174'. [ 42.535018][ T45] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 42.558010][ T45] ftdi_sio 1-1:0.0: device disconnected [ 42.573916][ T818] syzkaller0: refused to change device tx_queue_len [ 43.193922][ T45] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 43.284042][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 43.333970][ T45] usb 3-1: device descriptor read/64, error -71 [ 43.446009][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 43.459117][ T10] usb 1-1: config 1 has an invalid interface number: 211 but max is 0 [ 43.470788][ T10] usb 1-1: config 1 has an invalid interface number: 35 but max is 0 [ 43.480445][ T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 43.492309][ T10] usb 1-1: config 1 has no interface number 0 [ 43.499924][ T10] usb 1-1: config 1 has no interface number 1 [ 43.512224][ T10] usb 1-1: config 1 interface 211 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 43.524759][ T10] usb 1-1: config 1 interface 211 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 43.534098][ T76] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 43.535836][ T10] usb 1-1: too many endpoints for config 1 interface 35 altsetting 193: 166, using maximum allowed: 30 [ 43.555957][ T10] usb 1-1: config 1 interface 35 altsetting 193 has 0 endpoint descriptors, different from the interface descriptor's value: 166 [ 43.570455][ T10] usb 1-1: config 1 interface 211 has no altsetting 0 [ 43.579711][ T10] usb 1-1: config 1 interface 35 has no altsetting 0 [ 43.588748][ T10] usb 1-1: New USB device found, idVendor=0bb4, idProduct=0a16, bcdDevice=a3.1e [ 43.593967][ T45] usb 3-1: device descriptor read/64, error -71 [ 43.598429][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.613985][ T848] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 43.621588][ T848] rust_binder: Write failure EINVAL in pid:76 [ 43.621623][ T10] usb 1-1: Product: syz [ 43.632941][ T10] usb 1-1: Manufacturer: syz [ 43.638925][ T10] usb 1-1: SerialNumber: syz [ 43.646214][ T835] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 43.654322][ T835] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 43.705336][ T76] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 43.720108][ T76] usb 4-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51 [ 43.731418][ T76] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.740672][ T76] usb 4-1: Product: syz [ 43.746772][ T76] usb 4-1: Manufacturer: syz [ 43.753059][ T76] usb 4-1: SerialNumber: syz [ 43.761774][ T76] usb 4-1: config 0 descriptor?? [ 43.774555][ T76] usb 4-1: bad CDC descriptors [ 43.781511][ T76] cdc_acm 4-1:0.0: Control and data interfaces are not separated! [ 43.792708][ T76] cdc_acm 4-1:0.0: This needs exactly 3 endpoints [ 43.803129][ T76] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22 [ 43.843928][ T45] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 43.863196][ T835] binder: Unknown parameter 'contex' [ 43.874253][ T10] usb 1-1: USB disconnect, device number 6 [ 43.975862][ T837] fuseblk: Bad value for 'user_id' [ 43.981599][ T837] fuseblk: Bad value for 'user_id' [ 43.989739][ T76] usb 4-1: USB disconnect, device number 6 [ 43.997181][ T45] usb 3-1: device descriptor read/64, error -71 [ 44.243955][ T45] usb 3-1: device descriptor read/64, error -71 [ 44.354057][ T45] usb usb3-port1: attempt power cycle [ 44.407498][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 44.407517][ T36] audit: type=1400 audit(1750927872.610:281): avc: denied { setcheckreqprot } for pid=856 comm="syz.0.190" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 44.431180][ T857] SELinux: syz.0.190 (857) set checkreqprot to 1. This is no longer supported. [ 44.475633][ T857] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 44.476881][ T863] rust_binder: Write failure EFAULT in pid:87 [ 44.500163][ T36] audit: type=1400 audit(1750927872.690:282): avc: denied { listen } for pid=865 comm="syz.0.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.700686][ T878] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.723929][ T45] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 44.755625][ T45] usb 3-1: device descriptor read/8, error -71 [ 44.793980][ T76] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 44.885277][ T45] usb 3-1: device descriptor read/8, error -71 [ 44.933931][ T332] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 44.942830][ T76] usb 4-1: device descriptor read/64, error -71 [ 45.093948][ T332] usb 1-1: Using ep0 maxpacket: 16 [ 45.101785][ T332] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 45.112605][ T332] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 45.125053][ T332] usb 1-1: config 0 has no interface number 0 [ 45.136028][ T332] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 45.151062][ T332] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.163493][ T45] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 45.173622][ T332] usb 1-1: Product: syz [ 45.179389][ T332] usb 1-1: Manufacturer: syz [ 45.186060][ T76] usb 4-1: device descriptor read/64, error -71 [ 45.194079][ T332] usb 1-1: SerialNumber: syz [ 45.201314][ T45] usb 3-1: device descriptor read/8, error -71 [ 45.209003][ T332] usb 1-1: config 0 descriptor?? [ 45.218510][ T332] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 45.228382][ T332] usb 1-1: No valid video chain found. [ 45.345622][ T45] usb 3-1: device descriptor read/8, error -71 [ 45.377778][ T871] overlayfs: statfs failed on './file0' [ 45.408536][ T36] audit: type=1400 audit(1750927873.610:283): avc: denied { relabelfrom } for pid=879 comm="syz.1.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 45.434037][ T76] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 45.439303][ T36] audit: type=1400 audit(1750927873.610:284): avc: denied { relabelto } for pid=879 comm="syz.1.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 45.468971][ T45] usb usb3-port1: unable to enumerate USB device [ 45.518587][ T883] rust_binder: Failed to allocate buffer. len:1136, is_oneway:false [ 45.603978][ T76] usb 4-1: device descriptor read/64, error -71 [ 45.629368][ T10] usb 1-1: USB disconnect, device number 7 [ 45.853935][ T76] usb 4-1: device descriptor read/64, error -71 [ 45.965195][ T76] usb usb4-port1: attempt power cycle [ 45.969687][ T36] audit: type=1400 audit(1750927874.170:285): avc: denied { name_bind } for pid=889 comm="syz.2.200" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 46.008748][ T36] audit: type=1400 audit(1750927874.210:286): avc: denied { write } for pid=891 comm="syz.2.201" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.039746][ T36] audit: type=1400 audit(1750927874.210:287): avc: denied { remove_name } for pid=891 comm="syz.2.201" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.074124][ T36] audit: type=1400 audit(1750927874.210:288): avc: denied { unlink } for pid=891 comm="syz.2.201" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 46.111722][ T36] audit: type=1400 audit(1750927874.310:289): avc: denied { append } for pid=895 comm="syz.2.203" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 46.151808][ T896] syzkaller0: entered allmulticast mode [ 46.162586][ T898] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.165540][ T898] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.178881][ T898] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:148 [ 46.188662][ T898] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:148 [ 46.313913][ T76] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 46.342984][ T36] audit: type=1400 audit(1750927874.540:290): avc: denied { setopt } for pid=903 comm="syz.0.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 46.355405][ T76] usb 4-1: device descriptor read/8, error -71 [ 46.378438][ T904] tmpfs: Bad value for 'uid' [ 46.384089][ T904] tmpfs: Bad value for 'uid' [ 46.416749][ T908] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.417021][ T908] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:155 [ 46.427734][ T909] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.427981][ T910] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:155 [ 46.516184][ T76] usb 4-1: device descriptor read/8, error -71 [ 46.763952][ T76] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 46.774835][ T332] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 46.805467][ T76] usb 4-1: device descriptor read/8, error -71 [ 46.935474][ T332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.951298][ T332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.964037][ T332] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 46.982533][ T332] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 46.983881][ T355] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 46.993354][ T332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.013613][ T76] usb 4-1: device descriptor read/8, error -71 [ 47.022041][ T332] usb 3-1: config 0 descriptor?? [ 47.123991][ T76] usb usb4-port1: unable to enumerate USB device [ 47.163875][ T355] usb 1-1: Using ep0 maxpacket: 32 [ 47.173909][ T355] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.187403][ T355] usb 1-1: New USB device found, idVendor=057e, idProduct=201e, bcdDevice= 0.00 [ 47.200548][ T355] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.213442][ T355] usb 1-1: config 0 descriptor?? [ 47.233649][ T332] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 47.242112][ T332] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 47.251349][ T332] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 47.261676][ T332] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 47.270868][ T332] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 47.280911][ T332] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 47.291139][ T332] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 47.299953][ T332] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 47.310364][ T332] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 47.321288][ T332] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 47.331372][ T332] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 47.341848][ T332] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 47.352039][ T332] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 47.361896][ T332] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 47.372791][ T332] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 47.385995][ T332] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 47.401041][ T332] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 47.603998][ T930] af_packet: tpacket_rcv: packet too big, clamped from 4 to 4294967272. macoff=96 [ 47.634776][ T923] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 47.634811][ T923] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:208 [ 47.931364][ T208] bridge_slave_1: left allmulticast mode [ 47.952387][ T208] bridge_slave_1: left promiscuous mode [ 47.959383][ T208] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.971191][ T208] bridge_slave_0: left allmulticast mode [ 47.979225][ T208] bridge_slave_0: left promiscuous mode [ 47.987792][ T208] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.093063][ T937] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.101892][ T937] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.112950][ T937] bridge_slave_0: entered allmulticast mode [ 48.123751][ T937] bridge_slave_0: entered promiscuous mode [ 48.139417][ T937] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.152879][ T937] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.163870][ T937] bridge_slave_1: entered allmulticast mode [ 48.172076][ T937] bridge_slave_1: entered promiscuous mode [ 48.181558][ T208] veth1_macvtap: left promiscuous mode [ 48.188751][ T208] veth0_vlan: left promiscuous mode [ 48.362115][ T937] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.370800][ T937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.380747][ T937] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.390356][ T937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.422863][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.435476][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.450729][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.460836][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.474952][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.483009][ T330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.534924][ T937] veth0_vlan: entered promiscuous mode [ 48.557350][ T937] veth1_macvtap: entered promiscuous mode [ 48.727058][ T948] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 49.000170][ T959] netlink: 232 bytes leftover after parsing attributes in process `syz.4.226'. [ 49.267510][ T963] /dev/rnullb0: Can't open blockdev [ 49.378454][ T975] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:22 [ 49.378677][ T974] rust_binder: Write failure EINVAL in pid:22 [ 49.456809][ T332] usb 3-1: USB disconnect, device number 13 [ 49.533750][ T355] usbhid 1-1:0.0: can't add hid device: -71 [ 49.553491][ T984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.235'. [ 49.560838][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 49.560863][ T36] audit: type=1400 audit(1750927877.750:302): avc: denied { ioctl } for pid=983 comm="syz.1.235" path="socket:[9106]" dev="sockfs" ino=9106 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 49.567076][ T984] capability: warning: `syz.1.235' uses 32-bit capabilities (legacy support in use) [ 49.604144][ T36] audit: type=1400 audit(1750927877.770:303): avc: denied { connect } for pid=981 comm="syz.4.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 49.604244][ T355] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 49.605696][ T355] usb 1-1: USB disconnect, device number 8 [ 49.669046][ T36] audit: type=1400 audit(1750927877.870:304): avc: denied { mount } for pid=985 comm="syz.2.236" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 49.678327][ T987] capability: warning: `syz.2.236' uses deprecated v2 capabilities in a way that may be insecure [ 49.696195][ T36] audit: type=1400 audit(1750927877.870:305): avc: denied { mounton } for pid=985 comm="syz.2.236" path="/78/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 49.735214][ T992] SELinux: Context system_u:object_r:public_content_t:s0 is not valid (left unmapped). [ 49.758965][ T36] audit: type=1400 audit(1750927877.880:306): avc: denied { remount } for pid=985 comm="syz.2.236" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 49.804955][ T36] audit: type=1400 audit(1750927877.940:307): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 49.834731][ T36] audit: type=1400 audit(1750927877.960:308): avc: denied { relabelto } for pid=991 comm="syz.1.237" name="file0" dev="tmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:public_content_t:s0" [ 49.874618][ T36] audit: type=1400 audit(1750927877.960:309): avc: denied { associate } for pid=991 comm="syz.1.237" name="file0" dev="tmpfs" ino=242 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:public_content_t:s0" [ 49.912266][ T36] audit: type=1400 audit(1750927878.000:310): avc: denied { unlink } for pid=290 comm="syz-executor" name="file0" dev="tmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:public_content_t:s0" [ 49.960114][ T36] audit: type=1400 audit(1750927878.160:311): avc: denied { create } for pid=999 comm="syz.0.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 50.054051][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 50.093916][ T332] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 50.105349][ T1004] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.105379][ T1004] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.115468][ T1004] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.125223][ T1004] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.162095][ T1011] input: syz1 as /devices/virtual/input/input10 [ 50.221580][ T1025] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.221930][ T1025] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 50.230989][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 50.253367][ T9] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 50.263891][ T332] usb 3-1: Using ep0 maxpacket: 16 [ 50.263910][ T9] usb 2-1: config 0 has no interface number 0 [ 50.279509][ T332] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 50.290812][ T9] usb 2-1: config 0 interface 184 has no altsetting 0 [ 50.302635][ T332] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.303455][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 50.329237][ T332] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 50.333667][ T9] usb 2-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 50.346555][ T332] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 50.356362][ T1029] exFAT-fs (rnullb0): invalid boot record signature [ 50.367537][ T332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.376884][ T9] usb 2-1: Product: syz [ 50.387246][ T332] usb 3-1: Product: syz [ 50.392142][ T1029] exFAT-fs (rnullb0): failed to read boot sector [ 50.398224][ T332] usb 3-1: Manufacturer: syz [ 50.412335][ T9] usb 2-1: Manufacturer: syz [ 50.419853][ T9] usb 2-1: SerialNumber: syz [ 50.427019][ T1029] exFAT-fs (rnullb0): failed to recognize exfat type [ 50.437480][ T9] usb 2-1: config 0 descriptor?? [ 50.444998][ T332] usb 3-1: SerialNumber: syz [ 50.446627][ T9] smsc75xx v1.0.0 [ 50.695354][ T1059] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.703920][ T1059] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 50.788388][ T1061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.799350][ T1061] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 50.815823][ T1061] rust_binder: Write failure EINVAL in pid:187 [ 50.860079][ T332] usb 3-1: 0:2 : does not exist [ 50.948260][ T1074] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.046907][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 51.072187][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 51.518973][ T1080] rust_binder: Write failure EINVAL in pid:77 [ 51.519344][ T1080] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 51.538480][ T1080] rust_binder: Write failure EINVAL in pid:77 [ 51.577808][ T1082] can0: slcan on ttyS3. [ 51.595641][ T1082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.265'. [ 51.633231][ T1088] rust_binder: Write failure EINVAL in pid:80 [ 51.654581][ T1082] can0 (unregistered): slcan off ttyS3. [ 51.824013][ T1110] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.827581][ T1110] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.853142][ T1110] rust_kernel: panicked at drivers/android/binder/node.rs:893:13: [ 51.853142][ T1110] attempt to subtract with overflow [ 51.906193][ T1110] ------------[ cut here ]------------ [ 51.912896][ T1110] kernel BUG at rust/helpers/bug.c:7! [ 51.934583][ T1127] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:85 [ 51.935101][ T1110] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 51.955962][ T1110] CPU: 0 UID: 0 PID: 1110 Comm: syz.4.272 Not tainted 6.12.30-syzkaller-g22d634eb24e3 #0 5aa5a802a358a0169efaadab5c3b9a05fad29399 [ 51.973765][ T1110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 51.985953][ T1110] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 51.992773][ T1110] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 cd f3 78 43 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 87 37 31 cf 90 90 90 90 90 90 90 90 90 [ 52.021095][ T1110] RSP: 0018:ffffc90010125a90 EFLAGS: 00010246 [ 52.027739][ T1110] RAX: 0000000000000061 RBX: 1ffff92002024b54 RCX: 89d34d7bc97ca200 [ 52.037003][ T1110] RDX: ffffc90001281000 RSI: 000000000000415c RDI: 000000000000415d [ 52.045701][ T1110] RBP: ffffc90010125a90 R08: ffffc90010125787 R09: 1ffff92002024af0 [ 52.054090][ T1110] R10: dffffc0000000000 R11: fffff52002024af1 R12: 0000000000000000 [ 52.064011][ T1110] R13: dffffc0000000000 R14: ffffc90010125ac0 R15: ffffc90010125af0 [ 52.072467][ T1110] FS: 00007f285d8116c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 52.083882][ T1110] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.087692][ T996] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:112 [ 52.091668][ T1110] CR2: 00007f285d7f0d58 CR3: 000000011bf58000 CR4: 00000000003526b0 [ 52.091703][ T1110] Call Trace: [ 52.091713][ T1110] [ 52.091724][ T1110] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 52.131095][ T1110] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 52.140798][ T1110] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 52.158102][ T1110] ? __cfi__RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x10/0x10 [ 52.171793][ T1110] ? __kasan_check_write+0x18/0x20 [ 52.178707][ T1110] ? _raw_spin_lock+0x8c/0x120 [ 52.184411][ T1110] ? __cfi__raw_spin_lock+0x10/0x10 [ 52.190214][ T1110] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 52.203380][ T1110] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 52.216005][ T1110] ? _RNvXs19_NtCs9jEwPDbx20M_4core3fmtRuNtB6_5Debug3fmtCshgDM7dBCdno_11rust_binder+0x1/0x30 [ 52.229069][ T1110] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0xb2/0xc0 [ 52.242400][ T1110] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0x10/0x10 [ 52.255581][ T1110] _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x17e5/0x1860 [ 52.268720][ T1110] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x10/0x10 [ 52.283025][ T1110] ? __kasan_check_write+0x18/0x20 [ 52.289336][ T1110] ? _raw_spin_lock+0x8c/0x120 [ 52.295636][ T1110] ? __cfi__raw_spin_lock+0x10/0x10 [ 52.302077][ T1110] ? __kasan_check_write+0x18/0x20 [ 52.308330][ T1110] _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x278d/0x9d20 [ 52.320457][ T1110] ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10 [ 52.332246][ T1110] ? is_bpf_text_address+0x17b/0x1a0 [ 52.338291][ T1110] ? kernel_text_address+0xa9/0xe0 [ 52.345574][ T1110] ? __kernel_text_address+0x11/0x40 [ 52.352497][ T1110] ? unwind_get_return_address+0x51/0x90 [ 52.360494][ T1110] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 52.369601][ T1110] ? arch_stack_walk+0x10b/0x170 [ 52.376143][ T1110] ? put_dec_trunc8+0x229/0x380 [ 52.382554][ T1110] ? put_dec+0xd7/0xf0 [ 52.387617][ T1110] ? __asan_memset+0x39/0x50 [ 52.394233][ T1110] ? update_cfs_group+0x260/0x260 [ 52.400135][ T1110] ? format_decode+0x1bb/0x1600 [ 52.406215][ T1110] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 52.415628][ T1110] ? update_curr+0x949/0xc60 [ 52.421035][ T1110] ? __dequeue_entity+0x59/0xd00 [ 52.427317][ T1110] ? update_load_avg+0x1258/0x19a0 [ 52.433367][ T1110] ? dequeue_entity+0xa9c/0x1750 [ 52.440272][ T1110] ? update_cfs_group+0x260/0x260 [ 52.448323][ T1110] ? prb_first_seq+0xfe/0x1b0 [ 52.456665][ T1110] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 52.464551][ T1110] ? kvm_sched_clock_read+0x15/0x30 [ 52.471218][ T1110] ? sched_clock_noinstr+0xd/0x30 [ 52.478571][ T1110] ? sched_clock+0x44/0x60 [ 52.485683][ T1110] ? sched_clock_cpu+0x75/0x400 [ 52.492843][ T1110] ? __cfi_sched_clock_cpu+0x10/0x10 [ 52.501985][ T1110] ? dl_server_update_idle_time+0x184/0x3d0 [ 52.511792][ T1110] ? __kasan_check_read+0x15/0x20 [ 52.520446][ T1110] ? psi_group_change+0xb44/0x1130 [ 52.530343][ T1110] ? __kasan_check_write+0x18/0x20 [ 52.536925][ T1110] ? resched_curr+0x113/0x430 [ 52.543136][ T1110] ? __cfi_resched_curr+0x10/0x10 [ 52.550550][ T1110] ? detach_entity_load_avg+0x7b0/0x7b0 [ 52.560675][ T1110] ? enqueue_task+0x1133/0x11f0 [ 52.567754][ T1110] ? check_preempt_wakeup_fair+0x694/0xae0 [ 52.575826][ T1110] ? __cfi_check_preempt_wakeup_fair+0x10/0x10 [ 52.584060][ T1110] ? __cfi_update_rq_clock+0x10/0x10 [ 52.591053][ T1110] ? __schedule+0x1463/0x1f10 [ 52.597691][ T1110] ? wakeup_preempt+0xe7/0x1c0 [ 52.605879][ T1110] ? _raw_spin_unlock+0x45/0x60 [ 52.611823][ T1110] ? raw_spin_rq_unlock+0xd/0x20 [ 52.618046][ T1110] ? sched_balance_rq+0x37aa/0x5060 [ 52.624061][ T1110] ? cgroup_rstat_updated+0x132/0x7f0 [ 52.629842][ T1110] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 52.637943][ T1110] ? arch_scale_cpu_capacity+0x1c/0xb0 [ 52.647128][ T1110] ? update_cfs_group+0x260/0x260 [ 52.653853][ T1110] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 52.661188][ T1110] ? update_curr+0x949/0xc60 [ 52.667047][ T1110] ? __kasan_check_write+0x18/0x20 [ 52.672971][ T1110] ? _raw_spin_lock+0x8c/0x120 [ 52.678879][ T1110] ? __cfi__raw_spin_lock+0x10/0x10 [ 52.686190][ T1110] ? _raw_spin_unlock+0x45/0x60 [ 52.691706][ T1110] ? rust_helper_spin_unlock+0x19/0x30 [ 52.697982][ T1110] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x934/0x1440 [ 52.711493][ T1110] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 52.725863][ T1110] ? xfd_validate_state+0x68/0x150 [ 52.731364][ T1110] ? save_fpregs_to_fpstate+0x196/0x230 [ 52.737343][ T1110] ? __kasan_check_write+0x18/0x20 [ 52.743280][ T1110] ? __switch_to+0xc7b/0x1310 [ 52.751050][ T1110] ? pick_next_task_fair+0x870/0x900 [ 52.758988][ T1110] ? _raw_spin_lock+0x8c/0x120 [ 52.766191][ T1110] ? _raw_spin_unlock+0x45/0x60 [ 52.773425][ T1110] ? finish_task_switch+0x13a/0x780 [ 52.782638][ T1110] _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x409/0x2cd0 [ 52.797033][ T1110] ? avc_has_extended_perms+0x7c7/0xdd0 [ 52.804672][ T1110] ? __asan_memcpy+0x5a/0x80 [ 52.810777][ T1110] ? avc_has_extended_perms+0x921/0xdd0 [ 52.818133][ T1110] ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10 [ 52.830142][ T1110] ? do_vfs_ioctl+0xeda/0x1e30 [ 52.837139][ T1110] ? preempt_schedule_common+0x2d/0x60 [ 52.844497][ T1110] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 52.854595][ T1110] ? __cfi_preempt_schedule+0x10/0x10 [ 52.861860][ T1110] ? __cfi_check_preempt_wakeup_fair+0x10/0x10 [ 52.868621][ T1110] ? preempt_schedule_thunk+0x1a/0x40 [ 52.875221][ T1110] ? try_to_wake_up+0xe17/0x1aa0 [ 52.881844][ T1110] ? ioctl_has_perm+0x384/0x4d0 [ 52.888468][ T1110] ? has_cap_mac_admin+0xd0/0xd0 [ 52.894433][ T1110] ? futex_wake+0x63a/0x900 [ 52.899484][ T1110] ? __cfi_futex_wake+0x10/0x10 [ 52.905485][ T1110] ? selinux_socket_setsockopt+0x2ea/0x390 [ 52.912032][ T1110] ? selinux_file_ioctl+0x6e0/0x1360 [ 52.918449][ T1110] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 52.925000][ T1110] ? do_futex+0x356/0x500 [ 52.930051][ T1110] ? __cfi_do_futex+0x10/0x10 [ 52.937065][ T1110] ? __fget_files+0x2c5/0x340 [ 52.942799][ T1110] _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 52.953089][ T1110] ? __se_sys_ioctl+0x114/0x1b0 [ 52.958904][ T1110] ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10 [ 52.973654][ T1110] __se_sys_ioctl+0x132/0x1b0 [ 52.979193][ T1110] __x64_sys_ioctl+0x7f/0xa0 [ 52.983950][ T1110] x64_sys_call+0x1878/0x2ee0 [ 52.989549][ T1110] do_syscall_64+0x58/0xf0 [ 52.994113][ T1110] ? clear_bhb_loop+0x50/0xa0 [ 52.999838][ T1110] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 53.006692][ T1110] RIP: 0033:0x7f285c98e929 [ 53.011450][ T1110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.035048][ T1110] RSP: 002b:00007f285d811038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 53.044721][ T1110] RAX: ffffffffffffffda RBX: 00007f285cbb5fa0 RCX: 00007f285c98e929 [ 53.053102][ T1110] RDX: 0000200000000c00 RSI: 00000000c0306201 RDI: 0000000000000006 [ 53.063558][ T1110] RBP: 00007f285ca10b39 R08: 0000000000000000 R09: 0000000000000000 [ 53.072098][ T1110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.082114][ T1110] R13: 0000000000000000 R14: 00007f285cbb5fa0 R15: 00007ffc999440c8 [ 53.090133][ T1110] [ 53.093538][ T1110] Modules linked in: [ 53.098746][ T1110] ---[ end trace 0000000000000000 ]--- [ 53.106681][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 53.118384][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71 [ 53.119362][ T1110] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 53.128960][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 53.145214][ T9] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 53.158420][ T9] usb 2-1: USB disconnect, device number 10 [ 53.159941][ T332] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 53.175453][ T1121] netlink: 128 bytes leftover after parsing attributes in process `syz.0.273'. [ 53.188797][ T1110] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 cd f3 78 43 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 87 37 31 cf 90 90 90 90 90 90 90 90 90 [ 53.210736][ T1110] RSP: 0018:ffffc90010125a90 EFLAGS: 00010246 [ 53.217388][ T1110] RAX: 0000000000000061 RBX: 1ffff92002024b54 RCX: 89d34d7bc97ca200 [ 53.225869][ T1110] RDX: ffffc90001281000 RSI: 000000000000415c RDI: 000000000000415d [ 53.234079][ T332] usb 3-1: USB disconnect, device number 14 [ 53.238459][ T1110] RBP: ffffc90010125a90 R08: ffffc90010125787 R09: 1ffff92002024af0 [ 53.254998][ T1110] R10: dffffc0000000000 R11: fffff52002024af1 R12: 0000000000000000 [ 53.264731][ T1110] R13: dffffc0000000000 R14: ffffc90010125ac0 R15: ffffc90010125af0 [ 53.276640][ T1110] FS: 00007f285d8116c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 53.290448][ T1110] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.299068][ T1110] CR2: 0000200000000000 CR3: 000000011bf58000 CR4: 00000000003526b0 [ 53.308608][ T1110] Kernel panic - not syncing: Fatal exception [ 53.315379][ T1110] Kernel Offset: disabled [ 53.320795][ T1110] Rebooting in 86400 seconds..