last executing test programs: 2m30.126451366s ago: executing program 1 (id=2): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0xb, 0x0, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@fda={0x66646185, 0x5, 0x1, 0x30}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x6, 0x1, 0x2e}}, &(0x7f0000000280)={0x0, 0x20, 0x38}}, 0x10}], 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) 2m29.926062749s ago: executing program 1 (id=7): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fgetxattr(r0, &(0x7f0000000400)=@known='system.sockprotoname\x00', &(0x7f0000000440)=""/4096, 0x1000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000040)=0x8, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000000)="cf", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x397, @empty}, 0x1c) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3) r4 = dup3(r2, r3, 0x80000) bind$bt_rfcomm(r4, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r6, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='@0J'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, &(0x7f0000000a80)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000f80)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x2, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$cgroup_devices(r5, &(0x7f0000000e80)=ANY=[@ANYRESDEC], 0xfffffe57) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x30) prctl$PR_SET_SECUREBITS(0x8, 0x0) 2m26.980421155s ago: executing program 1 (id=44): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) (async, rerun: 64) open(&(0x7f00000000c0)='./file1/file0\x00', 0x80603, 0x1c0) (async, rerun: 64) r0 = open(&(0x7f0000000140)='./file0\x00', 0x68f, 0x58) (async) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x40881, 0x0) (async) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x606c) (async, rerun: 32) r3 = request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='binder\x00', 0xfffffffffffffffc) (async, rerun: 32) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) (async) keyctl$set_timeout(0xf, r3, 0x1) (async, rerun: 32) r7 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) (rerun: 32) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) r8 = fsmount(r7, 0x1, 0x0) fchdir(r8) (async) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000280)={0x6, 0x0, [{0x1, 0x7, 0x7, 0x2, 0x0, 0x401}, {0x80000000, 0x8, 0x5, 0x80000000, 0x1, 0xf4f4, 0x6}, {0x1, 0x5, 0x3, 0x101, 0x0, 0xf, 0xd}, {0xc0000000, 0x7, 0x2, 0x2, 0x238, 0x10, 0x5}, {0x40000001, 0x0, 0x4, 0x5, 0xd, 0x4, 0x320b}, {0x80000007, 0x1, 0x4, 0x9, 0xffff, 0x6, 0x68}]}) (async) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r9, 0x6, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) (async) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x26e1, 0x0) (async) lseek(r10, 0x3, 0x0) getdents(r10, 0x0, 0x0) (async, rerun: 32) r11 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) (rerun: 32) ioctl$ASHMEM_SET_SIZE(r11, 0x40087703, 0xffffeffffffff7fb) 2m18.941163441s ago: executing program 3 (id=155): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x800) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'tunl0\x00', 0x0}) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001daa18c4089612d187301010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000a00)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)={0x40, 0x17, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05030500d3fc030000004788031c09", 0xf, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xaece, 0x1) read(r8, &(0x7f0000000040)=""/8, 0x8) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000f"]) r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f00000001c0)={[0x6, 0x20000006, 0x84, 0x9, 0x10003, 0x0, 0x400200cc1, 0xa, 0x4, 0x0, 0x0, 0x2, 0x2, 0x0, 0x410, 0x8d], 0xffff1000, 0x2011d2}) ioctl$KVM_RUN(r10, 0xae80, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x2, 0x0) 2m15.720194141s ago: executing program 3 (id=192): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x63761469321c3ff0, 0x1}) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0xdd86, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x5bc}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) (async) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0xdd86, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x5bc}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d000000000001"], 0x38}}, 0x2040) r6 = userfaultfd(0x80801) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x3000, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xaa, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a43167614409ee4aa2a40d2feb04bb54137ca025e367e2eee1e8b"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 2m15.677274552s ago: executing program 3 (id=195): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x8000000018, 0x0, 0x0, 0x1, 0x1a, 0xc, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "91be8b09511245406c7f306003d8a7f4af004ab3fde500", [0x9, 0x9]}}) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000000)={'veth0_to_bridge\x00', {0x2, 0x4e23, @empty}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) shutdown(r4, 0x1000000) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'dvmrp0\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x1, 0x2, 0x97, 0x1, 0x3, 0x54, 0x8, 0x61, 0xed, [0x400, 0x1, 0x8, 0x1, 0xfffffff7, 0x9, 0x4, 0x1000], [0x7, 0x2, 0x7, 0x7fffffff, 0x0, 0x0]}}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r5, 0xff01, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000083c0)={{0x1}}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40}, 0x1c) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x100) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r9, 0x40045402, &(0x7f00000007c0)=0x1) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000100)={'team_slave_0\x00', {0x2, 0x4e21, @empty}}) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 2m15.552434864s ago: executing program 3 (id=198): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0x0, 0x101, 0x3, 0x1], 0x8000000, 0x141200}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x0, 0xc98f, 0x3, 0x0, 0x0, 0xc07}}, 0x120) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x0, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x8000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) ioctl$ASHMEM_SET_PROT_MASK(r3, 0x40087705, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x12, r3, 0x4d75d000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_open_procfs(0x0, &(0x7f0000001580)='setgroups\x00') chdir(&(0x7f0000000140)='./bus\x00') r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d0", 0x1}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) write$selinux_attr(r4, &(0x7f00000000c0)='system_u:object_r:printer_device_t:s0\x00', 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) 2m15.081169581s ago: executing program 3 (id=202): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x80702, 0x0) fallocate(r1, 0x1, 0x100000000000c, 0xe7d) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) (async) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x2, 0x0, 0x10}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000140)}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200), 0xed, 0x0, &(0x7f0000000300)="5db145acab0467f61f77ac47f6646617e9db797470e7a3f40b271e55151b66cf53778d7456fcbd27a2b49664ac31967876b7fd15d0df5c7a45a2706c452da1e8f110b8c03fb3fd8cbccbb109f26b1eb7c9e62b2fc695b4e7689db86d5395bf1469cb93a8658dc0c2fbc04bf11a9a78ade0c3d1e37f02da3f9e30210edbc4e6220850fcd6dbebbdda421e04f34c8f556c2a0974410ab4ce747b60f2807e47dc192c3650de95bd7014311666989541967ce55797ebb24bd61fc8dbb6ae0d67970e6798cd4e794dc97fd5f431563c691512190ec5104f8f2607aa47d83332ad7fb51afefa4c785ebbe7cb9f2daafe"}) r2 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000400)=[{&(0x7f0000000580)=""/249, 0xf9}, {&(0x7f0000000040)=""/32, 0x20}, {&(0x7f0000000500)=""/85, 0x55}, {&(0x7f0000000280)=""/223, 0xdf}, {&(0x7f0000000000)=""/20, 0x14}, {&(0x7f0000000380)=""/32, 0x20}, {&(0x7f00000000c0)=""/49, 0x31}], 0x7, &(0x7f00000004c0)=[{0x0, 0xa}], 0x1, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x7f) mkdir(&(0x7f0000000040)='./file0\x00', 0x2b) 2m14.972542483s ago: executing program 3 (id=205): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x2000, &(0x7f0000006300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000063c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m14.865561755s ago: executing program 32 (id=205): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x2000, &(0x7f0000006300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000063c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m11.96032957s ago: executing program 33 (id=44): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) (async, rerun: 64) open(&(0x7f00000000c0)='./file1/file0\x00', 0x80603, 0x1c0) (async, rerun: 64) r0 = open(&(0x7f0000000140)='./file0\x00', 0x68f, 0x58) (async) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x40881, 0x0) (async) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x606c) (async, rerun: 32) r3 = request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='binder\x00', 0xfffffffffffffffc) (async, rerun: 32) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) (async) keyctl$set_timeout(0xf, r3, 0x1) (async, rerun: 32) r7 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) (rerun: 32) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) r8 = fsmount(r7, 0x1, 0x0) fchdir(r8) (async) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000280)={0x6, 0x0, [{0x1, 0x7, 0x7, 0x2, 0x0, 0x401}, {0x80000000, 0x8, 0x5, 0x80000000, 0x1, 0xf4f4, 0x6}, {0x1, 0x5, 0x3, 0x101, 0x0, 0xf, 0xd}, {0xc0000000, 0x7, 0x2, 0x2, 0x238, 0x10, 0x5}, {0x40000001, 0x0, 0x4, 0x5, 0xd, 0x4, 0x320b}, {0x80000007, 0x1, 0x4, 0x9, 0xffff, 0x6, 0x68}]}) (async) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r9, 0x6, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) (async) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x26e1, 0x0) (async) lseek(r10, 0x3, 0x0) getdents(r10, 0x0, 0x0) (async, rerun: 32) r11 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) (rerun: 32) ioctl$ASHMEM_SET_SIZE(r11, 0x40087703, 0xffffeffffffff7fb) 1m54.871777237s ago: executing program 2 (id=397): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000140)=0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x51, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7"}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r3, 0x0) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757812"], 0x65) syz_clone3(&(0x7f0000000280)={0x243012400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m54.564393471s ago: executing program 2 (id=399): prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 1m54.560663821s ago: executing program 2 (id=400): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) getegid() (rerun: 64) write$uinput_user_dev(r2, &(0x7f0000000080)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) (async, rerun: 64) ioctl$UI_SET_PROPBIT(r2, 0x5501, 0x0) (async, rerun: 64) ioctl$UI_SET_RELBIT(r2, 0x8000552c, 0x0) (async) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_RELBIT(r3, 0x40045566, 0x9) (async) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x10000003) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x30, r1, 0x0) 1m54.480260283s ago: executing program 2 (id=402): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x4d) lseek(r0, 0x100, 0x4) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) unshare(0x24060400) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$peek(0x1, r3, &(0x7f0000000000)) setsockopt$packet_fanout_data(r2, 0x107, 0x16, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) r4 = userfaultfd(0x80001) msync(&(0x7f000060d000/0x4000)=nil, 0x4000, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) io_submit(0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x74) setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f0000000000)=0x60, 0x2) mkdir(&(0x7f0000001f40)='./file0\x00', 0x84) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x17) clock_adjtime(0x0, &(0x7f0000000200)={0x1000000000d1, 0x8000000000000001, 0x80000001, 0xd6, 0x9c7, 0xff, 0x100, 0xd5e3, 0x7, 0x8000, 0x3, 0x7, 0xf2e8, 0x8000000000000001, 0x6, 0x8, 0x9, 0x1fc00000000, 0x81, 0x6, 0x2, 0x4d8, 0x8, 0x200, 0x8001, 0x4}) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[]) 1m54.224696807s ago: executing program 2 (id=404): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = syz_clone(0x20820000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) 1m54.039952379s ago: executing program 2 (id=405): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) mount$binderfs(0x0, &(0x7f0000000300)='./binderfs\x00', 0x0, 0x84000, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet(r3, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000840)="082eecfef6926729482e7c34b999305f45f43dd13b0b05f01cdd7543dcb37d24ea6959cb4c34eecc309db90d0ce8a03496fa894c08597ba5816458a5e37aab79c8", 0x41}, {&(0x7f0000000240)="69dc94d1a45d4921d4d03c3480f3fe76c0316a1859f47c1f896dba58fba00bd197d4f36ead3b50", 0x27}, {&(0x7f00000008c0)="7f5e2c11071de5787db3b44a043c807af0e316207c0b38468df05afcdf1c9cfe2595a7eba983860dda8267c0de85f5ea9598782b85554ca0405ceb845e344b839f56e49f325750058953e413d3b3861bfbb39334b2c830ca00db68958d6771cf0231591e93ebe26269923daf24ea", 0x6e}, {&(0x7f0000000940)="1575dfcf370ee921db3dfe9e80cb7c6efed4c90973ec33502557338f76a57241d3e6bdb19fa52f23b6ece0513a8a02fb7140fd8e9c010085701dfa060c041e3db4dcd4d9469d10d04f8b7077fed4761e9d1229bb4c1e87dfcbef60ee7fe043a951fb468b61f7b500215677fdf2be7b6f37d0b2ff285b71a1d5544092b6ecff7bd4d67f55fe6ad0ff46ffff34120ee0e3da2513cfc0615b5c456d8abffddb7e6d76b2a62b90098280412db25ee4dcac6c29404a411023340db94d", 0xba}], 0x4, &(0x7f0000000a40)=[@ip_ttl={{0x14, 0x0, 0x2, 0xe}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffff8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x60}, 0x20004800) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000580)=0x7) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d80), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, 0x0) r7 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) sendto(r3, &(0x7f0000000b40)="e48138c2e7eeeb8a75d18a344e5bf44481c370905edbffce7f10db140f88fc", 0x1f, 0x40, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0x0, 0x32, {0x32, 0xb, "22a56686aafed176f6568802da390353af6ba48497af624ba57621b6083d10ae6fbb8df44ddb35119c9ff4b52ae1c513"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000140)={0x0, 0x16, 0xb0, "b53c68e8e45499b5bb0a09ce9c406d53551a359706b7b64d58c7acb75093a6777623502f78cc097ac556f81e11b1538ad059466df5c5f07f198c09df151a9de4104b1212224a15bf26760c20246d19528e4d0f697811791e72d1cd5f6393ef0bfcbc9c7fbce28690559698e08353128dad70ab1c52d48d57e03526c73f91d8b0d4a950a2373fe0df6adbce2bc92f9dd4be8a74bf58c6e0adedb5e2b414e9dc1224b7968c9b05670253e42f325bababf8"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xf7}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x7ff, 0x7, 0x7, 0xfc4, 0xa01c, 0x7, 0x0, 0xd, 0x40, 0x2bed, 0xfff8, 0x6}}, &(0x7f0000000300)={0x20, 0x85, 0x4}, &(0x7f00000003c0)={0x20, 0x83, 0x2}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000000440)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ncm(r7, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000440)={"db4c1421593cb4d3f8fe6094dc821bbbe06520701fc6de7b0349f34b0f8c556a9e9aff1355aab8d6da26d74608530f150f127f9e3f0a2f1fff0be9774c95d6c007c91903f78616596487bf50017c56b15385ab264cba5b168c62d971e67e6f3e73d60b5a8adbaaf2af8610c6a91c0a116f619adce4aa91d5a68faf8ee98693d32d8d8244381b5720ef596600e39491d216c22d0725904bab7d90fa8afb8fa04b707410aa300ef098609b4fa6dd77b1b7c321b1fc6356564ce3f90826be3a9a5be186ffc48eb13824e9dae77ed212a0f802074ff4f1725c4ad88cf5bbd36e3406bc59d96e82047631d8be9462ee7e54e5b2897c3fff38eabf67e1e160c2b5e18be06457844d89c9a606b7d25fbde713f4759da0bee1fabe3f71dcca63540f113a2b5edc4b327d1f9610377b97265d4aa875b4bc3c44bf8110d5df1beb1fe54794a0aa52dfc80df1caf7d812b4f1cdba1a6836b45ea2180d08439d411ce8e0755868cc839eaeac73e5d28f9f1990584038cf5fa6bee0c4095a27cc8c7b59519bf2a9bf1fedf54cc2dc6aea6c42c32de40c291e5f422f5c7792a08926af160fb379576dd81bac746232fb246817fc3248097914b75e83cc5eb518ce8fb643b34ca69c3b61f0d94e7db62dd480198d41e0862f1ec4429ab637569884a5ba446a0b09edfd986a2b3e15ee35bbd18610dad6271681ed240b0ffab9199b541013c0aadc36484da57511896c14776a41602aa1426edfbb828897d9c218b7936a0572840ebbc796e888a439b24e640324b511deb6ed0b2ce2f7567447826944b4f34101e492e8d20a2deda950e96e78f86d6d4c976f0c99041c94944309e6ce08d84a7c96677d570d9a57ec0506a4321d9e049b55be883ca3648c27772fc5dbaea5e6c2ded2ce72fb68989ae381fe1394cf6966ab04285d5ff8256bc2e85462b8d89aeeebd5432157c945b5dc1960d9282c6cc007fe029325d6078aef94d4954f956c71bcdf846f41392ebe0d3b289438d24ec4bc073617459a6b232445dd636a9f21140e14b162fd5ef1d626b0ff84884fd63d22cc1b05befb77ea937f3045cc15b125479b262c1e32fca75a5468423288c5776efee744b1fccb5e6d661d9d287cfa8582c96ea34a33c1bbc29c0035657da66a87150bbb885be5ee123e431fd793ea179a0fc77aaee66d874c0616cb32324826b36d0e27d14217ad1131cace3bae4ef82dfbc790e78de53a9bfbdb468bf0eb3ff134073b380858965de2d108862daf3fc6b49ad46f20832238aeaa5d010cf08e37938f0bb7bbeaa970c39ce9327a16fe07565708266ce9ef639bfa08538693b456228aa1c370d64ef9795b7cc208a2c528d381a042d149ed5c7f34ed26a7d5a4401b86434f054389e5dac7a4ee896e406d7b27240d925d478e0eb2202797832d3e2c74f4925ad58377b0d6ae9b97034f94"}) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000d40)={0x5, 0x1}, 0x10) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640100004a00010200000000000000000a"], 0x164}}, 0x0) setsockopt$inet6_int(r3, 0x29, 0x12, &(0x7f0000000280)=0x57, 0xae) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000b80)={{0x12, 0x1, 0x150, 0x0, 0x0, 0x0, 0x10, 0x1b96, 0xf, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xd4, 0xb0, 0x0, [{{0x9, 0x4, 0x0, 0x40, 0x1, 0x3, 0x1, 0x2, 0xa, {0x9, 0x21, 0x36, 0x1, 0x1, {0x22, 0xd3f}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x6, 0x8, 0xb}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x5, 0x9, 0x3}}]}}}]}}]}}, &(0x7f0000000d00)={0xa, &(0x7f0000000bc0)={0xa, 0x6, 0x300, 0x4d, 0xc0, 0x8, 0x10, 0xf}, 0x1f, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1f0002131002d6b53ac0c47bbc80fffffffffffffffa07100218a30d00"], 0x2, [{0xa2, &(0x7f0000000c40)=@string={0xa2, 0x3, "6562a3e7afe189216324aec895a3f7d5f654dd07031beaa6f26059fa4373a3961c911ed2f10435dd00aa86d2efcaf9b7a2fa14e57615c8f021788cb84482ad7cd49ec3638ff7817edb5f04f68348f4240e4e8b32bba2c3c54eb9c3fa8652d9edfd75f459b3f54033b9e40adc796a8cd13a94a15aeda1dabf4c8c9b741786e42917f7ffcbfea4d41b17eed2a6780e8fcdae49fc9deaeae9a57f79a37716bdcdbf"}}, {0xd8, &(0x7f0000000dc0)=@string={0xd8, 0x3, "1c8e8d5af2a84c350af09d80f75eede623c4609d5fba41c4b8e7e8a4d0b73d41c785037559271486282baaedf912a11cfc2dff32294aba92e62ceebc17c11db713c71eb67ae4ae4db171c2c660f8aeaef85fd0c665eaf02e1b81d1286b8112e1cdb159add42c3a1d760569a55bf7d72701a42af3dcdef39c2d5a57677ffa50de7c149ccf9800d58284271d07997e6a35836a115a56a95cc60fae7bf064e203d0008b9a7b56c6e8ac890370ed64fd9e635e769159f06e8cf2a6ab154f4d21dc1c862c8f91e08b689aeb154c78e3859625fdb83c96a0c1"}}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x2, 0x40}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$INCFS_IOC_CREATE_FILE(r8, 0xc058671e, &(0x7f00000003c0)={{'\x00', 0x2}, {0xea61}, 0x6, 0x0, 0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000b00)='./file0/file0\x00', &(0x7f00000002c0)="77d309607129ceb27fedfb1ef8547d9c065fb4836c836b6239fd7abfa54334cf3486d40b75065d8326f4ef96e06f96489f8fd17c5aadde8f95c3ea9fb2687b43ffee0b52146b960c01819a33873582b971d5ce0db015ea2939d7381f5212ed75dc20f556b079b28638af765a774849c44095f62ef7f5225162c6c16e1c862ab471877e648af2f944975ff7ff982a921ae2219542ee4012f65cf4cb01109dd86677b189185cd92b4f353eebd55b8adcabdf42ffe2f8acf5e8fcb70fd102f002dc84bf060fa80f58d8f396b67e9ff8c987629f6c74a5c4a3487d39e5ea6ed92fc74e64", 0xe2, 0x0, &(0x7f00000019c0)=ANY=[@ANYBLOB="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"], 0x1147}) 1m53.913231882s ago: executing program 34 (id=405): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) mount$binderfs(0x0, &(0x7f0000000300)='./binderfs\x00', 0x0, 0x84000, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet(r3, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000840)="082eecfef6926729482e7c34b999305f45f43dd13b0b05f01cdd7543dcb37d24ea6959cb4c34eecc309db90d0ce8a03496fa894c08597ba5816458a5e37aab79c8", 0x41}, {&(0x7f0000000240)="69dc94d1a45d4921d4d03c3480f3fe76c0316a1859f47c1f896dba58fba00bd197d4f36ead3b50", 0x27}, {&(0x7f00000008c0)="7f5e2c11071de5787db3b44a043c807af0e316207c0b38468df05afcdf1c9cfe2595a7eba983860dda8267c0de85f5ea9598782b85554ca0405ceb845e344b839f56e49f325750058953e413d3b3861bfbb39334b2c830ca00db68958d6771cf0231591e93ebe26269923daf24ea", 0x6e}, {&(0x7f0000000940)="1575dfcf370ee921db3dfe9e80cb7c6efed4c90973ec33502557338f76a57241d3e6bdb19fa52f23b6ece0513a8a02fb7140fd8e9c010085701dfa060c041e3db4dcd4d9469d10d04f8b7077fed4761e9d1229bb4c1e87dfcbef60ee7fe043a951fb468b61f7b500215677fdf2be7b6f37d0b2ff285b71a1d5544092b6ecff7bd4d67f55fe6ad0ff46ffff34120ee0e3da2513cfc0615b5c456d8abffddb7e6d76b2a62b90098280412db25ee4dcac6c29404a411023340db94d", 0xba}], 0x4, &(0x7f0000000a40)=[@ip_ttl={{0x14, 0x0, 0x2, 0xe}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffff8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x60}, 0x20004800) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000580)=0x7) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d80), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, 0x0) r7 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) sendto(r3, &(0x7f0000000b40)="e48138c2e7eeeb8a75d18a344e5bf44481c370905edbffce7f10db140f88fc", 0x1f, 0x40, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0x0, 0x32, {0x32, 0xb, "22a56686aafed176f6568802da390353af6ba48497af624ba57621b6083d10ae6fbb8df44ddb35119c9ff4b52ae1c513"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000140)={0x0, 0x16, 0xb0, "b53c68e8e45499b5bb0a09ce9c406d53551a359706b7b64d58c7acb75093a6777623502f78cc097ac556f81e11b1538ad059466df5c5f07f198c09df151a9de4104b1212224a15bf26760c20246d19528e4d0f697811791e72d1cd5f6393ef0bfcbc9c7fbce28690559698e08353128dad70ab1c52d48d57e03526c73f91d8b0d4a950a2373fe0df6adbce2bc92f9dd4be8a74bf58c6e0adedb5e2b414e9dc1224b7968c9b05670253e42f325bababf8"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xf7}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x7ff, 0x7, 0x7, 0xfc4, 0xa01c, 0x7, 0x0, 0xd, 0x40, 0x2bed, 0xfff8, 0x6}}, &(0x7f0000000300)={0x20, 0x85, 0x4}, &(0x7f00000003c0)={0x20, 0x83, 0x2}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000000440)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$cdc_ncm(r7, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000440)={"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"}) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000d40)={0x5, 0x1}, 0x10) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640100004a00010200000000000000000a"], 0x164}}, 0x0) setsockopt$inet6_int(r3, 0x29, 0x12, &(0x7f0000000280)=0x57, 0xae) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000b80)={{0x12, 0x1, 0x150, 0x0, 0x0, 0x0, 0x10, 0x1b96, 0xf, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xd4, 0xb0, 0x0, [{{0x9, 0x4, 0x0, 0x40, 0x1, 0x3, 0x1, 0x2, 0xa, {0x9, 0x21, 0x36, 0x1, 0x1, {0x22, 0xd3f}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x6, 0x8, 0xb}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x5, 0x9, 0x3}}]}}}]}}]}}, &(0x7f0000000d00)={0xa, &(0x7f0000000bc0)={0xa, 0x6, 0x300, 0x4d, 0xc0, 0x8, 0x10, 0xf}, 0x1f, &(0x7f0000000c00)=ANY=[@ANYBLOB="050f1f0002131002d6b53ac0c47bbc80fffffffffffffffa07100218a30d00"], 0x2, [{0xa2, &(0x7f0000000c40)=@string={0xa2, 0x3, "6562a3e7afe189216324aec895a3f7d5f654dd07031beaa6f26059fa4373a3961c911ed2f10435dd00aa86d2efcaf9b7a2fa14e57615c8f021788cb84482ad7cd49ec3638ff7817edb5f04f68348f4240e4e8b32bba2c3c54eb9c3fa8652d9edfd75f459b3f54033b9e40adc796a8cd13a94a15aeda1dabf4c8c9b741786e42917f7ffcbfea4d41b17eed2a6780e8fcdae49fc9deaeae9a57f79a37716bdcdbf"}}, {0xd8, &(0x7f0000000dc0)=@string={0xd8, 0x3, "1c8e8d5af2a84c350af09d80f75eede623c4609d5fba41c4b8e7e8a4d0b73d41c785037559271486282baaedf912a11cfc2dff32294aba92e62ceebc17c11db713c71eb67ae4ae4db171c2c660f8aeaef85fd0c665eaf02e1b81d1286b8112e1cdb159add42c3a1d760569a55bf7d72701a42af3dcdef39c2d5a57677ffa50de7c149ccf9800d58284271d07997e6a35836a115a56a95cc60fae7bf064e203d0008b9a7b56c6e8ac890370ed64fd9e635e769159f06e8cf2a6ab154f4d21dc1c862c8f91e08b689aeb154c78e3859625fdb83c96a0c1"}}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x2, 0x40}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$INCFS_IOC_CREATE_FILE(r8, 0xc058671e, &(0x7f00000003c0)={{'\x00', 0x2}, {0xea61}, 0x6, 0x0, 0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000b00)='./file0/file0\x00', &(0x7f00000002c0)="77d309607129ceb27fedfb1ef8547d9c065fb4836c836b6239fd7abfa54334cf3486d40b75065d8326f4ef96e06f96489f8fd17c5aadde8f95c3ea9fb2687b43ffee0b52146b960c01819a33873582b971d5ce0db015ea2939d7381f5212ed75dc20f556b079b28638af765a774849c44095f62ef7f5225162c6c16e1c862ab471877e648af2f944975ff7ff982a921ae2219542ee4012f65cf4cb01109dd86677b189185cd92b4f353eebd55b8adcabdf42ffe2f8acf5e8fcb70fd102f002dc84bf060fa80f58d8f396b67e9ff8c987629f6c74a5c4a3487d39e5ea6ed92fc74e64", 0xe2, 0x0, &(0x7f00000019c0)=ANY=[@ANYBLOB="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"], 0x1147}) 1m30.680691935s ago: executing program 6 (id=657): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100110001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') 1m28.376382631s ago: executing program 6 (id=682): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4008af60, &(0x7f0000000940)) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000440)=ANY=[@ANYBLOB="01000002000000009e00000000040800000000000014197f11f4ee4c3d23cbe246fe36bcb3e0b526c09afb81929e562c9ee0196c61e2eaf50e17d7967d9bc41e4d73f958975672fe8ce769fa12331a0168d3cc6ac3bcb0b40600437c844f4918a45f18a24f6202a9dcb40314e1dba3cba28b342c6c8b65d6db476d21123a0ff3ded41534aabc1768b569f8e80b18196fbd49a20f1cfbf89d0dbbc50099a3a85370c803b712827e8faef36d"]) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008602"]) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00') 1m28.159899234s ago: executing program 6 (id=686): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r1, 0x10e, 0x2, 0x0, &(0x7f0000000080)) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x8000000004) (rerun: 64) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000340)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000300080c10000000000000000000", 0x58}], 0x1) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x6, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630e}, @release], 0x0, 0x0, 0x0}) (async) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000080)={0xd000, 0x12000, 0x1}) 1m28.076105215s ago: executing program 6 (id=689): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@initdev}}, &(0x7f0000000380)=0x42) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x4, &(0x7f0000000240)={[{@stats}, {@stats}, {@max={'max', 0x3d, 0x6697}}, {@stats}], [{@euid_eq={'euid', 0x3d, r2}}, {@smackfsroot={'smackfsroot', 0x3d, '&'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r3) syz_clone(0x22000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 1m28.070034355s ago: executing program 6 (id=692): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000004c0)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0x10000a}, 0x1c) sendmmsg(r2, &(0x7f0000000480)=[{{&(0x7f0000000000)=@qipcrtr={0x2a, 0x2, 0x4000}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)="8ec8eff8", 0x4}], 0x1, &(0x7f0000000500)=[{0x10, 0x104, 0xe86}, {0x10, 0x1, 0x2}], 0x20}}], 0x1, 0x10) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000180)={0x3, 0xffffffffffffffff, 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00', @ANYRES16=r5, @ANYBLOB="040025bd7000ffdbdf251200000014001180040002000400060004000600040002000c00430008000000080000000c00118004000200040003000600b50012050000"], 0x48}, 0x1, 0x0, 0x0, 0x10000000}, 0x24000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1000000, 0x80010, r0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 1m27.972312847s ago: executing program 6 (id=695): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_RELEASEINTERFACE(r3, 0x80045510, &(0x7f0000000100)=0x165) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000000009a0200000000000008006b12379e0d2076cc000000000000"]) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000000)=0x8, 0x1) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[]) (async) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) (async, rerun: 32) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001002dbd700000000000e0000002000000000000000000000000fe800000"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x25dfdbff, {{@in=@multicast1=0xe0000002, @in6=@remote, 0x300, 0x0, 0x4e22, 0x0, 0xa, 0x30, 0xa0}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffffffffffffffc}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) (async) close(r2) (async) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ptrace$getsig(0x4202, r7, 0x7, &(0x7f0000000080)) (async) read(r5, &(0x7f00000004c0)=""/92, 0x1001) (async, rerun: 64) close(r5) (rerun: 64) 1m27.953742657s ago: executing program 35 (id=695): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_RELEASEINTERFACE(r3, 0x80045510, &(0x7f0000000100)=0x165) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000000009a0200000000000008006b12379e0d2076cc000000000000"]) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000000)=0x8, 0x1) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[]) (async) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) (async, rerun: 32) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001002dbd700000000000e0000002000000000000000000000000fe800000"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x25dfdbff, {{@in=@multicast1=0xe0000002, @in6=@remote, 0x300, 0x0, 0x4e22, 0x0, 0xa, 0x30, 0xa0}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffffffffffffffc}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) (async) close(r2) (async) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ptrace$getsig(0x4202, r7, 0x7, &(0x7f0000000080)) (async) read(r5, &(0x7f00000004c0)=""/92, 0x1001) (async, rerun: 64) close(r5) (rerun: 64) 1m5.948003391s ago: executing program 7 (id=1022): openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x145480, 0x0) (async) r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) (async) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) (async) r2 = socket(0x1e, 0x4, 0x0) accept4$packet(r2, 0x0, 0x0, 0x80800) (async, rerun: 32) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) (async) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000600)='./file0\x00', 0x54000c58) (async, rerun: 64) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffffa) (async, rerun: 64) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) (async, rerun: 32) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000440), 0x541200, 0x0) (rerun: 32) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r5, 0x0) (async) r6 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) read(r6, &(0x7f0000000380)=""/41, 0x29) (async) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x140001, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000200)=0xd) (async) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000c, 0x13, r5, 0x293f000) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') (async, rerun: 64) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f0000000ac0)='\x00\x00\x03\x86\x00\x00\x00\x01\x00x\x9a\x12\xbc\x00\x00\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x94\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcbzA\x8e\xf6\x89\xc2\'\xdfn\x054\xd4\x91s\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xe0\\\x98\xed%\x1c\xf4\xd0\xf5\xd5\x80\xc4\xb40\x86X\x8cK\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\a\x00\x00\x00\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xa5a\xfb\xa6\xff\xfbj\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x8cl\x05\x00\xeb\xd8\t\x00\x00\x00CvNx461\x04Nl\xedV\xcet\xaa~\x01j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\f\x00\x97T\x90.\x9c\xe3\x9a\xf103\xcd\xb3\xc8\xd5l\x14!\xf9Xg\xc52\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xdeZ%\xa7\x01\x00\x00\x00\x01\x00\x00\x00\xbe\x97\x1fGg\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x1c\v\x80\x00\x00\x00Y\x16+\x89\x18\x8c{v\fN\x17\xff\xff\xff\xff\xff\xff\xff\xff\"Y\xad\xaf\x83\xaf\x93\xdaHg\xd4\x8c\xee\x0f\x00\x1c/\x9a\xf83\';:q\x92\x010g\\Ym\xd8,\x8d\b\xab\x9dq\xed\xcc\xba\x06\x1ej\xb7s33\xe5\xec\xe90+\xd1\xfd\xbb\xdf\xedc\xd1\xbbI\xa3\xbdqU\x02\x00\x00\x00\x00\x00\x00\x00\xee\xb0\v\x84\xc7\xac\xec\x92t\x00\x00\xde\a\x1a\f\xbbM\x1cG\xb8\xa4\x05\x16\x06\xb6\x1a\tL\xe3C$K~\xf7\xa1\x01t\x87E\xc4\xb6h\xf3\x8cG=&\xbd\xa16\xaa\xa2N\xac\xad,Q\x97\xd6\x15\xc46v\x9a\x97\xa6\xb9`\x03\x8ff,V\xe8\xeb\x8bJn\x12o\x8b\xe7K)+\xe0\x06\x8a\\\xfc\nw\xf8\x01\xc4\xd8\x97\xd2\x9cF\xda6F\xfa6I\x83o\xa7\x15&*\xf6Wn\xb9\x00~Y\x17:\x03\xef\xf9\x03\xe7\x8d\x16\\/\xe3\xfcV\x9d\xf2g\xbcFy\xca\x8a\x10*\xbdU#\x7f\xbb\'6\x9e\x1d\n\x19\xff[\x92n\xe1\x81q\xfe\x10\xfd\xa6pL\xc6\x0fN\x06&W\xa2\x9dPWp\x94r\xe2\x92X\x12\x87\xe5\x94\xb3Aa\xb1/\\\xde\x9c\x93\xf5(,u|\f`\x8e\x86\xeb\xcb\x18\x00\x00\x00\x00\x00\x00\x00\xfc\xc6\x95\xea^j(x\xa5\x9b\xd6f1\x9d\x8fcr\x18\x1fs%\x91~\x19@\x84!u\xc8u\x8aL\x021k\xb4\b\xbb_#A{dw<\xb9\x9dR\xef\xaf]\xe0\xca\xd9x\xdab7@\xfd\x0e\x94\xf8\xab\x8c\xf4\xf1\xb0\xd6\xac\x8e,\xa2Y\x000F\xe6q\xe3~\xc9\xaa!\xf3\'UF\xf0\xc0\x11\x11\xc2\xc9\x93#K\xea\xc2c\xb9\xe7)\xa4\xd9X\xb9\xaay\xd1\xc7\xab\xe9F\xc6r5\xdf\xa0\'y\r\xbf\xbd\x97\x9d\x8aS\xdb\rF\x9e99\xb4\xf7\x8c\xf9\xca;\xef\xc7]\xa4\xdd<6wc5\xc6\xdeS\xe5*H\xed\xc8^a-\xe8\xb1\xc2\xca\xfa\t\xd0\\\xfc\xe9\x90\x83oj\xa9E\xfb\x8du\x94\x97\x1cF\x0f\xe9d\xf2\xe4\fc\xdf\xde\x1c\xd8u\x9b\xd7\x9c\x00\xbe\b\xb5\x1e\x04\xa0\xdc\xe1Oxu\xd7O#\n%\x89+\xcc\x9f\x8e\xb2:\xa0\xb0\xdc\xd1\xba\xbd@\xf4\x00\x00\xfd\aqn:\x83\x84N\x83K\xbf^\xd8&\xde\x14\x17\x9d\xcd\xed\x19\xd0\xc1$*K\b\x16$\x12\xf3\x88#\xb1#\xb6RX\x11\x86X\x94\x84\x8e\xdd\x82b\xa6M\x18vC\xe5,\xc1r\xd5e\x19b\x9fQ\x91\x98\x9e\xf7\xf6`\x03\xb3\x8a\x86\xf9\x00\x00\x00\x00\x00P\x00\xb7\xa1v\x84JN9\"F\xcd\xff\x98\xde\xa4\xd4\t\xff\xc1\x99x\x9f\xcd\xe8\xd4\xc1>\x8f\r@[\x7f\x89\x85{\xe2:+O\xb1\x8c\xb6\x88\bV\x18w\x81\'\x94\x84\x18\xce\x98\xc6\x02@\xbf\x98\xb0\x8b\x8b\x97\xcf)\xe5[\x00\x00\x00\x00') (async, rerun: 64) ioctl$ASHMEM_SET_NAME(r3, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') (async) ioctl$ASHMEM_SET_NAME(r5, 0x40087708, &(0x7f0000000f40)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bf\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xffn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\x06\x00\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\x01\x00\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\x18^[D~\x00\x00\x00\x00\x00\x00\x00') (async, rerun: 32) keyctl$search(0xa, 0x0, &(0x7f00000003c0)='asymmetric\x00', &(0x7f0000000400)={'syz', 0x1}, 0x0) (rerun: 32) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x801, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x110a, 0x1}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x18, 0x0, &(0x7f0000000700)=[@increfs={0x40046305}, @increfs, @decrefs], 0x0, 0x0, 0x0}) keyctl$unlink(0x9, r0, r1) 1m5.927840651s ago: executing program 7 (id=1023): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c400)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f, 0xffffffff, 0x640184, 0x1, 0x8001, 0x2, 0x0, 0x0, 0x0, 0x20, 0x7}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a3c0)="61ddaf21c1282a5a6352f350c2f614ede5b0c406f5488574ed6fcb609ce20f648ee274c8dfeaa625b1fd332f70f776ae0b6e3f959c24f3876756c20e05c82079387520764f2446820d53242898a90e51c5b68297e39b7fcf558b450e9608326c3dc6704a054216a8c6f0d689e5eb6b8564854376910eff147682d2378b9c5b95a626493ce628b1bb6b524ed7e90ebe6eb0246399eac6d624dcf4e824be2de9c1d5d06eab13f2770577304eb676106fd9868a030192067ac009482e03a817f1abd909a94702479fe30b2594ca60b4acc37148cf04e8c0e76dd69e29d243596f8174129ac6ab9dbb79ace8f0fae14234845725102a027d4163f97f3971d207500defeaa2c7318f7e82e591701f9d3f78592ea7ec28806a53278a35a20251eeb2735fa9f37bf0045b5e6faf5f751c7ad31d8426be7b09027b2092f49247159a33b580d2691ebf00797962168bdc368f57282ce5b8526eacb80952ffba771626c0016b8a010546f0b4daf470814cee0ea418b76331c34616cea0459dbd1f196364c99e4a47bcdd64b518ef51833e6f8041fbbbe86e808bdbade7009985f2c4d7ffd76a0e7dc7d542bdee1d136d2096dfa997f98ac83c6341b306a3a8cf81642566d7777480d4dc61b0182f0d418ce95d74c9aadb182326d6671412a1f0c62c93a0ba873ff5daa4ece4b2fc73ed5b02b60890374acc0cd25cbf1707016a542fafd6af098f9737304c726712c8243dcd5eb15c0996e9e03dd741d519cb3e86ea214e20408c2cc5ea607585f1bfd268ba3084ffa69425512571d263fd1ae49b488b2964bd3e78943122006489cc22191dec2900a7fdf798c9f683461f2a7b940f4112b805dc077a7b99071b5b454f7c6d2b13a6b23091f74ecc65a24ac0d11e2ffd7332fb2b2b11aeec3c809d78cc2e168f126f38dddfe3e1d0ec1c6fb25f880690f97a70dc5fbea5d25dba3b24c01d9bd228c58deca660625511127a62220429c94be65d6ad4ce7e79e97af67931b46ccfabca5dbaea11e2dc76279b0244cc2845f31beff418fe4bd892d3676079d9d4eb0251dfead9e0a07a11c0a7e597ac89ec77de60a5f6e0ff4a62374856b8e1659e885d3a0d90293daa0c7bb041cbcd54bf098b66b2ddec28dcba4cfbad969e3b97e4bf680f901485d1cd4b231a9115c22ab2f911415ad0efe0eb7f4bee15c6de7d0f818acd687a117286f9e3c33df5206df918ea4ac52927487968d88f4a18d4889a4060f20487e4cec19250fe48a16b1f9f7250a6ab81fbaa2ad451a936ee98021bf859b9a635132a0dcf7530c0e2c84a459241a1fc9fe45b4a4f32fa8e95185db92660292ece6b5ddbb0b9f69bd7435cd4944f8ff2ed51172f0683fbae1013cde202498f2e1be54d1a2e17b3984b17d1994915a477c87697f465781e41b44c6a40ae035e75a4d9f9c0926bec533db0d4c26d605cb1ae225e692ed315062e8c3283716929e25a22b25105e018d81c07cb7600d1bae16d8beec33c88f1cdb52ac988b4677ed604c28ff1cdeeeb74c332dc526cff5ee935016984cabf117694cccabae944de4d2d2daff8f281b6434475b52c1910210598c684da99c108000a53d2ca03afd42b0200691d92341616353a22a8dacd8cb7eee85953b251236603d2ef1e450675f8d0f3cd0e28ef36457f79c267d836d14ed758148e979b9749ddcef14aec903939c69567a1697aae8f9ed72a16be0267a3a967727937f609720802570287c4e08641b9b7b979c6541add0e8600dd2d75a1dc0822ceb7a7e4e1afda2940d127f488589963b46417d7a7474545e5b08a621c1a7637b3fcb62b0aee10d999505907bd14033370e391f6192ff7d718e1db3ef861d30b2d477f11cd45ecb296d4babcccc34901165e3fcdbef6fa1ee478a97f7d21dc5562582d67c448ae352d3157d83e8ab0122a2bb056bdff8043a91b8f3abe4d788fe741483997a8e3fe126626a14b4243d3ff8ada8dd555c95d5e30b68cc053dfbbb61940cbb552cc1fe211ea5ea13cbfb6a577cde339282d84e92f866145e7b1de4d5a1705fc24fc8843f1a69f4c604adf0d715ad88c6a4ac80a35375662610e0ed07af9c4c76326716a77b106ef87782804ca353eaade28a1ca522d706282ebe48c0b23fd42b2e0297f5997d3aab40615f143e868c6aaf920bc827224946db3e3b3e65ea66dbfa5fe6c45dab930877852e86df251024e4ae46ee8e04cf40f2b3239f4df40062cfddada61700959deaeed3a44fb185ce51685fcab793184435b3e668e7d80820a613acde8d61e24571b9de7ce4581a4751d70a28e8d098660e81941fe40b6844a3204b512457194e100c995c75921569f735afee321080ed6310610887ca842001f5112c5af8c9083e3d088a404b48ee82e1e8be16fd493a2a643816488447706f3e86d2d0ed48f7397aad0cf105a4a71d928a15413ab3813e42478cf7a5be2e03d15ccb90a625863cb2ca1059110f90186cf4c370469f4d7e1ccda56ed9c427cce46e7d1c82641554ffa0c7c42697cbc754702b62be5ab03c995ac8cda3145959c440c4d6ead7d6398faf189de77645a05a54d6c33c9678daec6e5ac0048f91e15b2fdb808d712e662007da5e228ddc7370f575723a0018a1da70fa27e6624c8c75047eb584bf3399a8fce999df94f6fb54fb6c1fc954b1d899459fcd2f459e57c214ae590513ed268ed2d1114d8276642510a2eb99feecb58d8476550553a9f3d1f04c9bb442dae6dd84628b60cc9fd3c1e5c4fe3b9ad5f43b5d06e31ba4644f7499c03fd68cd2207027eeb1908a8022d70eb8fc8f55fee7be7e3af525d4fb1ab3e9b458246cbb5371e8145e1d04762c62068e03795a5a6b48d8643a83927c47000b7766e320e0ef2339d5423813e8d7845b939a9567745f6e2d6070764669c905ea77943a31f0df838a5d046f25d516bb654336f759c05dcc0febbbf1d214382a76fa09aa32be9799252f1d0fd8bacfe3f32574fdc82c6ed77f1c08d4aef88c157cbdac947346e3e015af60125d3e36ec6bd8dc5127c7ab1ed773c8beffc9dba99bd9fa1498a5a49bcce4ddb13fb85e256fcac569aab1c815527710d2c350c7cc84db5a7eb243227973fd5e2d1d8450077ececa0d96884c90ac0146d37b13f1aacc1eaddec3f0d475df6ceafe73f9076fcfeaf496efcae22d09745453a5e4776876ecfb1d004361f82f76b2bfba050d0fd5060f50fd74f9908a62649955e2f90e4ac4a4f0b29484cf80eebcbecb12db8586ee58443c181a59c046c657ecbb067a1e70d4c548e8b291a5aa681624747d9a52a6184a5fc82d824d9ab6156ec5fd73a038b38d86974e7a89b55a95b609e12c98f4168c0e48139749fce33397948224641e9823588858f82247d9abf8f84250564189676325e43944e888cef6918cd2b842b3a42751475a37656b3f04a02430705f16908d638212f69cf96d5311038e00e048468810d1cfefb0a9aeaf46d1bd31f7156a97542d9373abd3c069aa096486244389312031398a35e0ebca6668ed06dbe80290ac9a2a15ac9c208cdbcb2c1e18f008741649b4fe2ac1e6ca0a19980b6276fa09c5c0e67e748c1669add6fd4c70ba522be4428df305c3313929a4eec348f03fc6a6dfd1d6740a61230a977555b6b4d5165c98323871d750e80f9205231af03ab430a720dcaad03d113f38574ebada74f5b34a05a6abb7ba9b8b280401a3a21dd7e1e026deb438ed020d09fc93ffd7376ced7b5d6c9c35072c7f28ddb7fea3ffa7b7e6766892be2015c20e2cc7fa8bcb5832b97e964947ae940d5ce215ff3a0d74851d5735f3573d533cca9b3a89f9494f150cb732139cc2282304f6a375ee1062f6f850ebf89548973b6c5e7aee8b98b18b443332d3be20fea086653d52756b40ec4f08ad52f4d0a5a61004c700f070b83548670ef36dcbd8daf13ae6d382aaba3c3bac3c1efd953781d69e7365e1393d2c3f34d3dc91999ab9a545bc167e50ea6874fe8f49e93e452ad4710d7127c430ab2caf3ec1627e6a2a6a57604a5da490087991b68cd58d456f6818f22e38007e1628c6a78f6a8a321e3f0d5d5e1bc7f9ef53c4780b451dad949962c8a6a464b25cb161159b72f40fed8280daec34135f77373b9432f411b232e9374e9cb3fcd85a599c20d0b8e294835c60c2e034eb8385c507095c6eb6748180fd1ad97cb0a4b2ffa70c90891d373459538f4106078162bc46b425572466aa4769153b994698bbff1a98b5948e40d98bb2900445eebe95c4892bcb92b4c28b734ea7e106accc9836767e0881f970c9d69063dd918de44a484ef3f860b0dcec58f22b3f1a0abb9c0c2b6cd5bdacdc194f188588c0888d6abfa2d0b79d0b33a41e3b6a0f9fbf811ba20f346025b3a4be17eb5ce583b860cad5424bcaf1ef4a255678706052c1cae9cd77cc78639f975f07737b791831c64f0c974b23a5c428091b8b8e17a037ac3c6d56da4b4c7e4752736cbbc8d67b1b823e87d51ffc95fe9752e8479fc15a6fe7b96fbd7b93dc2144381c424ec7782d7f8b2637010dca11ccdaab1bad652a9ecd8b6ba2c116fa419c8582a0ccf754a294d9de5b457d9b1a4120fd53667862e50cb028e2f92c73a38f77ff57c93b410e7f3257bd56e5aa504f0643bd2bcfae2168046ad2737a36b21f6d993de1fe7b31e9ef7c79d545e5364b65011a6d26e0a2f1018a5280ca88d3d1e30c68195f8cf1a3ece813f22e44d83867c9f711218203d1adf2869ed89babca094b8def7ae0abd0245f522930db59c4b2eeec4d564bfdb931d435a986daba4b604d5bf30b1cfdf6960986ba0dab216dfd7ad95ca2555e0573d073dccd407ddd5ed7920c788aa0213aec90b38981a91bc370ede38d171648316d59478e66c068eec33295345162e9896ffc82f8d94b995d3a3a7a4f459e564632b5918b4fd850da380937655f19e2820376e7deb48edb0f5e295521a9a153f5ef69de397d88acc20be99779d7ea2c38445bd70aeeb68cc6c68c1bc603ab580b632866497a3dbcbfd933e2074323f66f1db73129eec8331c8872aa92a33e2180fc0cf2e28d198faef4421064b8435f37b5bfb9b531332b3b0838015fe848f0ce859db8706f2e53fb07ce4d0fd017d85ac9ce2943ab172f08b13c948c3778d2469257d412b1a5305526cc8dcb4a8645f825cca66a63b7134d8b7c760db6a8fa21f2df3456e9b460867303a9d53fb01db8548800d800e49c08c8d731bbf9a642206f4cc6673e4fc0f7106661abfde1eb8a8d384b26d88c16d15f238556ff4b205145d860228038430cd8a342bc15849afd81666b55b358e3ec584fa96f119b77495c4ec36616070237bb170fc04d3befebdaff66643814eb8519abaaf1e9bf939bf5bfefa33c32fe9909055393e383268e426436305b370867db76991ca600bf6211dece3b6b7b4dc5cd4569ff4538080fec318a9e0cce4a8cf26aca8359b503781aaedc2d58b0bb1a82c163425e678b488bdc7362d0be24a7a8238deb31482c332d4d385005ca84c836933b0fce21685ec067adb9490d1a416f83e36e6e3b87d05ab6973f4e359a1fb5a4dbf2ff6a85d235e50d893f222c2a7d84252be9015e104ee3609c83cafdd796a8422257c9ca9172888d91c0f2f2afe36dccada9a713cfc026cf25e113fc543d522e9254f5e129d7ffd61b43ee25bdd63545a81a2b086b616e23abd380a7bb8e54b8341f42c663da1fc8451f21da7315aea416e6856d4d45128dcd34a0f3aeb7aed00c54c348f38888b8c8fec59028d38344a92249c95943d3ff8608bc11406102ebe8269892b2e909bd82ba467aabef127713a0993df779ba7b0816a990566699e4926d75fd47c3f1b9cae3e58771a6ae8776fdb672ee70f215fd908d6dfddb8a2ad10f27b749fa6e67171848d70d3ae135ee3defb2546bb35a3ad2d8ac0e838ff8abb1cd733d80047bc8626960a257b704b43bf0390b7fee656ca7831d23e8ba940533c16c17de68270bb3b2d3bf142b34899b3a106cf9569b4f46f148297c61390733ff9f399c669122dd045187d0a35fe54b4f17e4090c56cfcfa47498b1701a855827d35cf3624624906f997092b010b1da616325a090770694d028fae9874a91f8d21fea85804956594b8252c24d05df5775148ecbf8ab38f131c268cc263f6a2dcd375acfbf39a2defc9869801a720d83add1ff01ac7fc389bc7e35c2eee2b44f808508e6e02ea31cf23ea9f2118bce520101e307b394e5fdd28e90870a327b0a1444b552b7227134a8e5397474a6c0e1ce89d918c899d292660ea44294e07b1645ff9e85f65156f92d55ae795e134250b5359dec6c31d4892d83f363cb09632bb738c4e7f351361adc3ab54776a5c55d6ff4895516c82cc6387b1a424f3af2bb0398d0d4a71fe44c5132b7ad5fdfa732bbcff9f02395df587714072caca65f5fc1215dc9068585e1fbcee22cd69c0386a6482230540ec9ff8e373018e4e2788b9502e5be3e3247f997800c68a634e4490c91d01144a63a7a55afbfa4f0ef5ad538aeec8ea203ef2716ff989e11ce4985263898b8e36b0d3386b816ce484e81404a01ac0ed9f18ef5643f93d46705c949acddca2b74ad53441090f658d22dd081aaf49a7bb07c93ab8dfb5213cba354b4d37d9899423d3b3d45e9463c506ccd69747162d2d64b54291d11fdc6c9b89114543d6948f10e68008973cc485df080b84e0d098f962715ba009f2aa1fb41f7199ea5b9b70df0e1c378da164f7257b4ed04a9fee7cc2de065ad35a60b882d78e26d5804942ed1f2bcf85fc63795fb9164a5f94ffe6bfbf838c9197bce2160d24f88dca14c3e733d18ff1fb7acb0ebdfc4e2ce268a676fb27cc34d4b6b5d7e8db29c020c4c498d793931b0fc7d91ad68d3d8463e36a267833edbdd7062f4d62aa9fd1cb7f8e561d3939bbfa118b897167168832c0aff17fb6cdcf75ad6ef0a18e2b37fb24c85d0866f2e5f191b2ef8fe9b5997635a74cb06aec67363435eb175559629c09316f96dc56de6c7785335d121fc2e4d47c2f50c37c5bf7950ae5de07b3b73830f4299d5009742d4eca98df821a95d244967a42b5a4f3375edc41c5281ca3104bd247c14e838912634d4764c1b6e440860d98f258aa8a24e8af643497366edc2b781aec0567451884aec0343ced1fbddfae585db1012a6d9245ad85c56aa33d5bc30307515bccc8d36d7848c99884db4a49d748e1953b4673e4286393fc97c233d529435faf7ed9f9aa64029814b7cd6a36c3dd9ca7be95e5c4d48e024a3d23651cc81c00a52e2fa2d094435ebdb4ae5be8e6b53cf628ddc87a4bc2dccc98ac38019c91789a40d103fb95785bde5992de08ecdca1dff2ab7cf5013420b3d29b8a7f0af455c4e86285422b986bdf482b87297061084b50684e936acbb075a84e720a2d03892efec7dc1af2fae2a7ce7725cf0d19f39403b273be262c7a4ff638898f6caf84bfb358c580ba4adfd8664bcc539b82792e39ab4f1d8393b1f98f6dd5aae14bc6b73feeeaef7c3accde4d9b098f2d5c7ed68621851f37d27980c4b44df095d865493eeef2724db90aa53a3c37bd345ea75b4e76e8878deae1b4f3204c2957f3806e36a03e995f7633de9b863ff6b3309d330ade917c82f3286d9500105755efac22a4220f457debd861df3c0925dc4ba8913cea12b8deb93cec87c972421bb8442ef2a2a9d638471108ae0152aefdc45eac6ff786dae370a21bfe1e5777df8070bcefba8596cb8f71a516b505b1f83de1129cee91d3a4d6383daac7b9de46a99bc34661f3d805d2e138a769fd6489e4d058a3ab35ccbc81251aa2f23f83d7740bd8869465634e10e114c62bdfd640d69cebf6e78eb0970fa442746f7c3bea77d8589ab131827a95b274dd63ea04fba4c822aed4f8d0cd83ed83177d90332c7e66f103d4eb1dffb9ec0f52094bc7324a7c59819dca343776d6adb6850e7e7e83e2316db1c32feb4ea1c6f47a2ee41bb09d0a931f4fa3cdf7ada2bac7fe5ae2b997e24b8f8c52b0bee1482b74af68b407f0d78f3767bdcb42557c9f3aff0c2c2ea7745a0f588b00a751c1c8d2124a8bfd4d7f756587d239cc43a8cae1d67cf15c73dc8569a1ebdd7b8559e969541a547c272e52d57e5924ced9afc87cd2cdcdf8e30f423ebe26170393ecec06afa093839fc3a10fdc3f9ae19e79e4df6a9af6027e1129a7a6cb4517607eac80fa2b5f7853fe84028a66976ec4b4af50abe9ca959b844d7b2ab94903efec6dfc99ed9df2c329c0e8449b4d2a0a5bc2506d170884d2c6ea8aefebcaaf2abbfa3c4d9e4d201369a47792124a7909e247dc98b777b60a30b1461d857f164e3df983d9a900f8b11bddbdcf47c29d483033c9250f30e268ddf97e0ecbdd99d6fb3dc4562bb75f8f1e03d1aec424293fa5fc786444411a512fc582a9b577d5e88fb9d6f7346bd489f6eb4296e576e25c45e114fb6a3d0b6b831fb4ffe7486daadf2f0ad78aad8f8f7eba17e524de06e81a5af9c1aa09019fcc51611afc45fd30b8ecd2a2ae19758a1ffa55f79cdf53ef1bb55e49cb58d8b291664be61586ace94c7b378d685e54aeee09af828a3ce7335f9d03f8daabcf3543b8099956f60913db6ab401a427aca83772df4fce9081409ab426dae09739b50a8ab4c04a6d2e63b2c4c0b5f7fbd9dc76722057ab6cefc9ccae3abf251259f999fe09dbe1232b8ecf0e26b3d88d13a1001840f6b5942359c3ac75bfc321d9504bcc0e3f4add741125941ece20b4f90416b1f14edb4ecb1ced79cef883aa1d5193f3efeeae7e103891ae4840978fbe74d2cc90b7e02b4d839f15c75576b74e05f7a8af71823317a851bf0ff9171bdb16ffa36f57ccdef61065a62d64ba434571db0d476995e2bf4f148f0a6276b2fad82f03b91fe53f9a7acff3ecdfcedcc1eae42e52e1f7443114b8edc8a9d5c8a55727f7ee1d20e1ca55b42e51b47fc4d2313458ab9a5f05c1411dc8f11e4c57d3fe87183763bd24cfb8dc583c82ce9c0abbeb76310666d2236e2ca164c66e6336fd571967f35b2b0ba847922f5aabf97aea061d19eb9cc3cd6e764da9651f9e66577d9c8870734fe8e03d20ba107e6e2997ef7c42f940b88410c6bf46635cb5e402113411a98c75e8cfd3760235d7a486bfeea1a1dc188b7886172ac66d45a4bd87f60b8502382888f3806e47ffb74d9aef2519e91536f7798b7c22ee70566e686ae2b577f6341f7c47dc1ae41f2af983b80f7db23a3466b4f14e2afd591b19d36375acbc0c8ebf21654c8cf44ea49103299eb1ac6e96bb282a33a6ea204aa266b7d627c53757daa176f6cde932e7e0342977dbf7d5668e8ba984bf05dc610e5450eb4c3dcf7965eedc9b168a9c274ef6a050e93234a9bb5488a5aefaea9c442729b5416dcee6bac23f238bea2f1f4615c863a3ff7c7a081558237f2097b9ffa869f4b69fa32784f62c0b7a458411efd3a9108735de667c63c34af2225e382a17600acecc118ac1f81ec5ed9a26fa966bee8dc6f55c17bbd89a94932bf930b081fd310ef94c490855453551e9eb809e9d568500e6662564b65701a721208dcbef9a07650f9faa5a503d37f2e1b1912fbfb437f1f4c2d4a830a2dcfae905d323fe9a6a01cc8d88ff82a26a1c228103396b6756659b6a8a9ff8b31494cd8bde6205d6f62e698d9ae43ec740fafc60d798a85e5f8598486b6e82f23506c6004ec2f733cde633c3b45d9ef14fb223c020a67f305e33b5d3b239b5026ca679004e212725a4090818734435247b918dc9c65d2f0c580722651217ce7a2dec34c0f8c49e3dc051c01f5d445dca8675339f5c8b30ddc19f51ffa9e9c513f5fc9892dbe5ee5bc148ebf3033635401c8675f0fb43e503d73cd432e3ae2f25bf29b4088a3193c208f5ba51882364202dc3eed6f3ab9a871b4afa960f1776cc92deb7098ae6f61af30e715ab60d44f378bbb79f8fb663de164a5f4f582e6a17fd7e553e677632d1e8489a8138bc780418de30c0a95ae3ec3b0cdee51901869acc318a6725c0c06273dc67d393129278225b9384d978512befdf449f85146fbbe92e6b52cf40028b13d77ccc68e7b65e0c1a25f1f9d17b06b17f216729684fec1b4c0c3fdaf40af5dd1a3f4492d49e018f60f41d91524bc5d750789fd39b6e69cb66b1d86b2c1405331e3e793fb38dc447161f1ba02cee1519b72727aee9ede2898c5195adb0dc1c29fe6eca6598c5612a7f98bfe0d1853e44f47c94ae57bfdaee16711135226c9b44440abbeca5ed53b0aa58d34fa0faf766087135599d7b88a04d5ba7d69c148f3ebaee211a06438146d762c9f85d9007a228edd7d71ad18fe69a1af0caa6176eade25bea11504c2f0498a450d4d265bf97dea5b23c10560c9844d761702a5814fb355827ed6f46bcebb61d0a06c21746625a438c38496a941f447c2150c9125990ff7feef9d551a7adcbe0fd828ef4397c0799507599899259f61ff914f76be6077d0daa67ac0ab9093ecd0f78455b605a7885cae38a88b2955cecd37f972841f440de12831263ae64c7c78970138a738bcc66aae8c1a5c3ca0e166dde9860bbfc4c7bdb854cdb3d94ad4c723b2de03a50dfd120041a9b3107a480e7e108f729484d0df0d8e47c3a6b7ce0376e642ec5a267a91dd2bb1f1b3fe56a5097edddba482627cf79b66801fdd4ecb733067ad52e8fb9970be01a397ede6a3eaee6b8524f8e1cf00e0c5aed165b8b1533afaaeeaa82153f9840760b58b8a12e8168956db4522f2dd5a13183cf861acb0c0bb2735ff5cb683f633bd99ba2bfa7f1fcdd0a54d3b4fa9a7d3de250d7e40bd7b3a829a4f04fd71c64ed4f2503094773b45fdd821688d10ced9da17089b7c954f7e4a7f3e56226abee46d7eb93a6f3d039a7cf3dc14c18dd7502aa0e29e1c54bd1c2182138e06326f3cd4cddcf1997c9739f9e4a0899ce919f20b2def0ff103e5a9e123a1db4a544d438f789a0ed26664523bd55902364f4a21b2a92fcc111392dcdcf7ac0ece18c474d47a11d544b64836a62e3e1e0e9d15f8066315f000b7d8603f772704ed5b96798f28e4f699a671023a4d49c5a1e30d14145b9179e4b0f3424fd46cc22ca48cde74904876cc037a04aee32b53d02e4869427b6b18bf0ce7b5ffb75268788ca5029d2d12b2df068219af12d4e17e56f83e581b0fd6cb7048204803342ab8b146b0c237d6ac7aeb2ee21550c00da60286994f1e7ca53de19d874f7bb27c8c5e263fa350448ea28f4ac0cdfdc4c0d5096f2ab328d089dacb5e87f0a29814e8461470a22ee8a4a318f5e2b5317a027da39789b7b17bdcc9b26bdad1ba5e4580f671a3179a9fde91408aa41a68f47c71c524f8e413557b0656cc2a67e36da5a07ee7c55b0877ecf41a8616ec20f59d370f3eff6b10e68a6c55feff6f52f498bc9ab77224a7548ccdfa3de41ff44ee4bd32295a42d9fdac1a4c8484a7383a6bd5e39cb0249e939fe7f53075d6d4a54bcfbaec50853c5e4bfda256665ed56dcd20fbd04a1d40c200223ddac36a7229df6003f335227a6bde261f7e2f7c980e7e522c68abc63601b3b1a9ebdd4530e4f33b9986f582300", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x0, {0x410000003, 0x10, 0x0, {0x0, 0x8, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8001, 0x0, r3, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006100)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x400000042, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) truncate(&(0x7f0000000240)='./file0\x00', 0x1) 1m5.903224481s ago: executing program 7 (id=1024): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000000)=""/20, 0x14, 0x12041, &(0x7f0000000040)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80) r1 = syz_usb_connect$uac1(0x3, 0xc8, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb6, 0x3, 0x1, 0x9, 0xd0, 0xb, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xff}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x201, 0x4, 0x7, 0x7, 0x19, 0x10}, @selector_unit={0xb, 0x24, 0x5, 0x6, 0xf7, "f1dfc2c178fc"}, @processing_unit={0xd, 0x24, 0x7, 0x5, 0x3, 0x8, "29d4153cea2d"}, @feature_unit={0xf, 0x24, 0x6, 0x1, 0x4, 0x4, [0xa, 0x3, 0x9, 0x6], 0xd2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x3, 0x2, 0xfb, 0x40, "9e"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x0, 0x4, 0x81, 0x1, "7843df", "7cb4"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x5, 0x1, 0x8, {0x7, 0x25, 0x1, 0x1, 0xa, 0xfffc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x81, 0x3, 0x8, 0x6, "05e634e76432"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x6, 0x13, {0x7, 0x25, 0x1, 0x1, 0x9, 0x5}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x4, 0xf8, 0x5, 0x20, 0x4}, 0x8, &(0x7f0000000200)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x2, [{0x8, &(0x7f0000000240)=@string={0x8, 0x3, "5b8b92d75f52"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x410}}]}) syz_usb_control_io$uac1(r1, &(0x7f0000000480)={0x14, &(0x7f0000000300)={0x4b384da90b0a7a28, 0x3, 0x45, {0x45, 0x27, "58277847be545f05c4087516674d171479afa34f246d480bed65cff8661b1072dbfd540096da4c82109916ed31372702906cae1332d92245f58f55d949d5284b7acdf5"}}, &(0x7f0000000380)={0x0, 0x3, 0xc0, @string={0xc0, 0x3, "c39f05037cf50625448eb55418f59fe140d2eac9d71d09a7eebfdf2a69e9ebb130603457903caca710ffd0c8c6ffb46a328cc9269c58ee8b3ec9ddffd9861aa53f990fcc7571514a5862eb34d270944b41ddcbacc4f915e8527576e4195d944bf376fe1b882164a939b28dfce36eeb0b8cf4222dd84cd2a19b9800605c337ed4608e4634fd1cc7982365c3c896b4ed8134180ca04de40312b11ee01389f6f1e082c3b3fadf0837efe4f972e73708fab27b95891f07105c46b865c278966d"}}}, &(0x7f00000006c0)={0x44, &(0x7f00000004c0)={0x40, 0x15, 0x39, "3b083650ba90d721fa81b19a986ff769e695c5ca7b6201a5f8cd7b57fb9f11878d3db64d0aeaa5975d03a0244d03e7c23715a70b202f9e82d8"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0xe8}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000580)={0x20, 0x81, 0x1, "b9"}, &(0x7f00000005c0)={0x20, 0x82, 0x3, "09a681"}, &(0x7f0000000600)={0x20, 0x83, 0x2, "3ece"}, &(0x7f0000000640)={0x20, 0x84, 0x1, '<'}, &(0x7f0000000680)={0x20, 0x85, 0x3, "2765d6"}}) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000740)=0x5, 0x4) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000780)=0x100000001, 0xa) syz_usb_control_io$uac1(r1, &(0x7f0000000840)={0x14, &(0x7f00000007c0)={0x20, 0xe, 0x20, {0x20, 0x4, "012f91b21bfde7af3d6ee9b21cdddfc421c34fdc92a50a5d403435563f77"}}, &(0x7f0000000800)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x422}}}, &(0x7f0000000b40)={0x44, &(0x7f0000000880)={0x40, 0x16, 0xd7, "0580590f91ef4b87d161670d5b7b1584197875c099ffb192d6397a707fa486aecae23d1401ad49357c06e035ccce56e9c1ce53682bae7b3141ac2e681617788547233443109be82cf8e0091dd2fd5c308aa5dbaafb07b3aee8d05e60e3937922c3670bb1d2a30bd63e50ca31a92985284f81fddf0b271ce50432b3777e5fbc485c3689d1635dbdde05791494e798788cb24f402299c6c5d26062238bc17bc3fc775d546bd287f243ecfd75c2e27f6376b44fd66143cf8ac6a5d1f4ce05bc6600274bde94434bb0f7951c64098704989095831a9de9ee31"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000a00)={0x20, 0x81, 0x1, 'v'}, &(0x7f0000000a40)={0x20, 0x82, 0x2, "a8a6"}, &(0x7f0000000a80)={0x20, 0x83, 0x3, "da1a5c"}, &(0x7f0000000ac0)={0x20, 0x84, 0x3, "4fda96"}, &(0x7f0000000b00)={0x20, 0x85, 0x3, "231dc3"}}) io_setup(0x7fffffff, &(0x7f0000000bc0)=0x0) io_cancel(r2, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0xa, 0x4, r0, &(0x7f0000000c00)="0664a1d15ffb9d84d9ad010da668fbda40c413025306886776cdee7612e52e2e628022b8c56a4a36e662f0af7223eac18ce186f73c38c294bfa46eefebb6e382d9f66cb380", 0x45, 0xf, 0x0, 0x1, r0}, &(0x7f0000000cc0)) write$P9_RVERSION(r0, &(0x7f0000000d00)={0x15, 0x65, 0xffff, 0xf, 0x8, '9P2000.L'}, 0x15) read$FUSE(r0, &(0x7f0000000d40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000002d80)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x81, 0xc0, 0xd, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x7, 0x1, 0x2, 0xa, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x2, 0x9, 0x9}}, [{{0x9, 0x5, 0x82, 0x2, 0x100, 0x5, 0x7f, 0x6}}]}}}]}}]}}, &(0x7f0000002ec0)={0xa, &(0x7f0000002dc0)={0xa, 0x6, 0x201, 0xf4, 0x1, 0x12, 0x40, 0x80}, 0xf, &(0x7f0000002e00)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x8, 0x1, 0x6}]}, 0x2, [{0x4, &(0x7f0000002e40)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000002e80)=@lang_id={0x4, 0x3, 0x430}}]}) syz_usb_control_io$printer(r4, &(0x7f0000002f80)={0x14, &(0x7f0000002f00)={0x20, 0x22, 0x11, {0x11, 0x5, "2ebe5600c5253153027e7d1a7e6371"}}, &(0x7f0000002f40)={0x0, 0x3, 0x10, @string={0x10, 0x3, "98a92438b0b81eca3ef1bd3c36f3"}}}, &(0x7f0000003240)={0x34, &(0x7f0000002fc0)={0x20, 0xa, 0x10, "3ade93b1fa3b34adecc774f2bc1bebe3"}, &(0x7f0000003000)={0x0, 0xa, 0x1, 0xf0}, &(0x7f0000003040)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000003080)={0x20, 0x0, 0x102, {0x100, "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"}}, &(0x7f00000031c0)={0x20, 0x1, 0x1, 0x4}, &(0x7f0000003200)={0x20, 0x0, 0x1, 0x80}}) syz_usb_control_io$printer(r4, &(0x7f00000033c0)={0x14, &(0x7f0000003280)={0x40, 0x24, 0xdd, {0xdd, 0x23, "6e281d8af61a3038147eb84e8d651157484058728033daa52b828117ddd34c259d45eb497ad8a7589d5ac3a6c02cbb53069775b247fad7024fa753a0d715a118e6d360f89c0b1189cda3b4b638f321638f793ce52a9b53da2bdd6e305c3b777c59bbb4e27bbde0cdd23fa8024f075d4f1a759f703d59f9017546db4747507192f4515cbceaab64e239e70e42e1627dd188629d1d262104899c314acf8ff4ead366c50929f6f319b8246ab5678d1ee067e58bec4b112decf3c1e2f4ced643b988883f5eb716f3293a85291df4b52b0b3ad2d253465feb4946c3f7a8"}}, &(0x7f0000003380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x455}}}, &(0x7f0000003600)={0x34, &(0x7f0000003400)={0x60, 0x16, 0x2c, "560f728af9b4b7f781e897b24cb7957ec7e68c37cf5757698acb2a74492ca4160258ce7334240db9691baae2"}, &(0x7f0000003440)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000003480)={0x0, 0x8, 0x1}, &(0x7f00000034c0)={0x20, 0x0, 0x82, {0x80, "f60fec6e8e1247fabbdf90f3f44e2885decf24661445d03fa1d1b15b91cceb7127b9843bfef55ab2b6193c9f7dc34caed5ad1124a91020cbf7de39f51553509a5a5b74594bd9aa89983862ddc14c2cfbcf3f7c0295b1cf72ed5564d09098065b51f279b8aa1997314d01d64b8d0435e09abd7499340dd76d072f24dde43ab257"}}, &(0x7f0000003580)={0x20, 0x1, 0x1, 0x87}, &(0x7f00000035c0)={0x20, 0x0, 0x1, 0x13}}) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000003640), &(0x7f0000003680)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(r0, &(0x7f00000036c0)="8f9789e25a090dbb0057031c9ab72563ee2afb8f5eecee766ad33e5ccc14422e3833b01182435252e8c11ceb9fc0854c64d3a3db731c23676df338cdee489a3f6673646e87c351b5c8666e40ef3002542b9425d3a8777eaa5a9ddb8d39c15333addd16da1a3e757c6cd34602c8945d5a3b43ccabb3f95c2c", 0x78, 0x20000000, &(0x7f0000003740)={0x2, 0x4e23, @multicast2}, 0x10) syz_usb_control_io$uac1(r1, &(0x7f0000003800)={0x14, &(0x7f0000003780)={0x40, 0x9, 0x22, {0x22, 0x21, "5cb5c39cd44f701691a3ae97a3d3e5f270e11966a90f072a6dda0ea8116e322c"}}, &(0x7f00000037c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x300a}}}, &(0x7f0000003ac0)={0x44, &(0x7f0000003840)={0x0, 0x15, 0xaa, "0cf200b58b554ca626de449d5237d2be8e74d79ae09c54417e36cd2fbb79d6f96b53f71d28c3658df94cd9c9a6e429b7318cec7a0883825c48201236b2f370bb41046d8df10d0a6374ead93a8798c0311eaf0811057bed3899c1a20968dcea5770c8de7a0190dfddae45706ac7583d7f91e6f1b751a938bdec6c66b2642a1624dee8e775ab6a16fca6369870373863bb3ce4948a2004ed896514f32c73eebcdeb5144bf2d8022a59e383"}, &(0x7f0000003900)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000003940)={0x0, 0x8, 0x1, 0x18}, &(0x7f0000003980)={0x20, 0x81, 0x2, "e303"}, &(0x7f00000039c0)={0x20, 0x82, 0x3, "39c055"}, &(0x7f0000003a00)={0x20, 0x83, 0x1, 'z'}, &(0x7f0000003a40)={0x20, 0x84, 0x4, "49afc2e7"}, &(0x7f0000003a80)={0x20, 0x85, 0x3, "b25d99"}}) r6 = socket$xdp(0x2c, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000003b40), 0x100, 0x0) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f0000003b80)={{0x2, 0x3, 0x2, 0x3, 0xff, 0x3}, 0x2fd, [0x6, 0x4a9, 0xffff8000, 0x5c3c, 0x3f8428a3, 0x53b83231, 0xd050, 0x3, 0x0, 0x1000, 0x9, 0x4, 0x8, 0x7, 0x5, 0x9, 0x6, 0xf, 0x2, 0x3, 0x9, 0x401, 0x1, 0xb9, 0x3, 0xc, 0x1, 0x401, 0x7e, 0x800, 0x9, 0x4, 0x5, 0x9, 0x5, 0x3, 0x0, 0x7, 0x0, 0x6, 0x9, 0x3, 0x4, 0x0, 0x950c, 0x6634, 0x9, 0xf, 0x6, 0x7, 0x4, 0x88db, 0x4, 0x9, 0xef, 0xffffffff, 0x2, 0x7f, 0xffffff7f, 0x0, 0x6, 0x800, 0xffff, 0x10, 0x80000001, 0x7, 0x5, 0x0, 0x1, 0x9, 0xfffffffb, 0x6, 0x7, 0x116f0bcf, 0xffffffff, 0x1, 0x6, 0xfffffffd, 0x0, 0x9, 0x8, 0x6, 0xffff1a17, 0x9, 0xa8, 0x3, 0x7, 0x3, 0x0, 0xf2, 0x80, 0x7, 0x5, 0x5, 0x1ba, 0x2, 0x6, 0x5, 0x3, 0x3, 0xce, 0x37af480a, 0xfffff270, 0x1ff800, 0x3, 0x6, 0x4, 0x70000, 0x0, 0x1, 0x7f, 0x2, 0x5, 0x6, 0x859, 0xbe, 0x4, 0x6, 0xe16d, 0xaf2a, 0x6, 0x6, 0x4, 0x3, 0x0, 0x7fffffff, 0x8, 0x32, 0x5, 0x7db, 0x80, 0x8000, 0x6, 0x0, 0x5, 0x8, 0x5, 0x7, 0x4, 0x8, 0x4, 0x400, 0x2, 0x4, 0x2, 0x1, 0x40, 0x9, 0x80000000, 0x5, 0x8, 0x2, 0x80000000, 0xf, 0x7fffffff, 0x5a5, 0x3, 0x5, 0x5, 0xe69, 0x3ff, 0x58, 0x40, 0x1, 0xfffffffb, 0x40, 0x3, 0x6, 0x7, 0x7ff, 0x5, 0x7fff, 0x4, 0x4, 0x7, 0x3, 0x1, 0x9, 0x7, 0xfffff0c6, 0x7, 0x101, 0x8a, 0x1, 0x40, 0x101, 0x4, 0x38b, 0x9, 0xc8, 0xd, 0x7, 0x2, 0x86000000, 0x22cf, 0x9, 0x7, 0xce4, 0x1000, 0xfffffffd, 0x4, 0xb3aa, 0x7, 0x0, 0xe, 0x2, 0x2, 0x4, 0x3, 0x3, 0x4, 0x7fffffff, 0x2, 0xffffff7f, 0x80, 0x4d, 0x2, 0x4, 0xfffffff4, 0x6, 0x3, 0x1, 0x9, 0xfffffffa, 0x2, 0x2, 0x101, 0x4, 0x4390, 0x6, 0x7, 0x8, 0x2, 0x8, 0x5, 0x9, 0x5, 0x3, 0x6, 0x4, 0xffffffff, 0xffffffff, 0x5, 0x7f, 0x9, 0x87d6, 0x1, 0x4, 0xb, 0x7, 0x9, 0x0, 0xffff, 0x4, 0x7, 0x1, 0x6, 0x0, 0xc, 0x4e94, 0x2, 0x0, 0x7, 0x5, 0x19, 0x5, 0x8, 0xea9, 0x8, 0x5, 0x142, 0xb60, 0x5, 0x4, 0x2, 0xffffff13, 0x5, 0x5, 0x0, 0x2, 0x8, 0x6, 0x6, 0xc47, 0x0, 0x8000, 0x7, 0xfffffffa, 0x8, 0x3, 0x1, 0x1, 0x3, 0x70, 0x100, 0xfffffffe, 0x8, 0x400, 0x8, 0x2, 0x3, 0xfff, 0xfffff1b2, 0x7, 0x10000, 0x9, 0x2, 0x0, 0x3, 0x2, 0x3, 0x9, 0xfff, 0x3, 0xfffffff8, 0x7, 0x1b, 0x10, 0x1, 0x9, 0x0, 0x80000000, 0x4, 0x5, 0x7be, 0x5, 0x3, 0x9, 0xfff, 0x2, 0x3, 0x7, 0x0, 0x7ff, 0x5, 0x7ff, 0x8, 0x8, 0x4, 0x8d4, 0x80800, 0x7, 0x80000001, 0x0, 0x5, 0xd, 0x7, 0x7f, 0xc50, 0x8000, 0xe, 0x8, 0x34b, 0x401, 0x18f, 0x5, 0x5, 0x5, 0x10, 0xfffffffe, 0x5f, 0x8, 0xe79a, 0xffffffff, 0x6, 0x200, 0x26, 0x7fff, 0x2, 0x6, 0x6, 0x80000001, 0x56e, 0x4, 0x5, 0x2a4d, 0x3, 0x4, 0x550, 0x1cb2, 0x8, 0x80000000, 0xba, 0x101, 0x7, 0x35, 0x3, 0x0, 0xa02f, 0xf7, 0x9, 0x5, 0x1, 0x9, 0x7ff, 0x2400000, 0x401, 0xffffffbc, 0x101, 0x7, 0x2, 0x7ff, 0x7, 0x2, 0x7135, 0x1000, 0x80000001, 0xcc35, 0x2b3, 0x0, 0xa, 0x2, 0x5, 0x5, 0x400, 0x6, 0x7, 0x7, 0x3, 0x10000000, 0x6, 0x8, 0x5, 0x9, 0x3, 0x1, 0x1, 0x6, 0xc4b1, 0x4, 0x40, 0x80000000, 0x5, 0x5, 0x4, 0xc1e, 0x8, 0x4, 0x1, 0x3, 0x0, 0x200, 0x1, 0x7, 0xc2, 0x0, 0x400, 0xfffffff7, 0x62, 0x3, 0x1, 0x1, 0xa, 0x1, 0xa6, 0x4, 0x7fffffff, 0x8, 0x85e, 0x40, 0x9, 0x4, 0x8c4, 0x6, 0xc, 0x3, 0x2, 0x7, 0xfffff7e0, 0x200, 0x925, 0x5, 0x7, 0x0, 0x9, 0x8, 0x5, 0x10000, 0x101, 0x20, 0xe40, 0xf6, 0xffffffff, 0xdf8, 0x0, 0x4, 0xd, 0x1, 0xe, 0x5, 0x0, 0xb3f7, 0x7, 0x40, 0x6, 0xa5a, 0x10001, 0x0, 0x7474, 0x0, 0x8, 0xfffffff7, 0x4, 0xffffffff, 0x401, 0x0, 0x0, 0x5, 0x3, 0x4, 0x3, 0x6, 0x4, 0x2, 0xfffffbf4, 0xe6f, 0xa0000000, 0x9, 0x1, 0x1, 0x2, 0x2, 0x4, 0x5, 0x2, 0x5, 0x2, 0x5, 0x4, 0x9, 0x3ff, 0x5, 0x6, 0xe0c, 0x6, 0x3f6, 0xffff, 0x9, 0x8, 0x7, 0x7, 0x80, 0x2, 0x0, 0x5, 0xa751, 0x2, 0x760d6e57, 0x9, 0x7, 0xe, 0x6, 0x101, 0xae, 0x3, 0x0, 0x86a, 0x70, 0x6a, 0x80000000, 0x9, 0x100, 0xc, 0x10001, 0xfffffffb, 0x6, 0xd5, 0x800, 0x3, 0x8, 0x7f, 0x1a400000, 0xf0d0, 0x2, 0xf, 0x2, 0x9, 0x1, 0x86, 0x0, 0x5, 0x8001, 0x0, 0x7, 0x6, 0x3, 0x7ff, 0x7, 0x8, 0x0, 0x7, 0x8, 0xc70, 0x7, 0xffff, 0x10, 0xffff, 0x6, 0xd, 0x2, 0x4, 0x343, 0x9, 0x9, 0x3f5, 0x2, 0x6, 0x6, 0x4, 0x80, 0x4, 0x6, 0x80000001, 0x0, 0x4fca, 0x80000000, 0x80000001, 0x4, 0x80000001, 0xf5b, 0x1, 0x2, 0x3, 0x0, 0x8000, 0x4, 0x800, 0xab5, 0x8, 0x800, 0x100, 0x1, 0x0, 0x5, 0x6, 0x7, 0x1, 0x1, 0x3ff, 0xff, 0x3ff, 0x1000, 0xfffffffa, 0x80000001, 0x45, 0xff, 0x401, 0x7fff, 0x86, 0xffffc688, 0x8, 0x7fffffff, 0x8, 0x401, 0xfffff2be, 0x4da, 0x633a, 0x9, 0x1ff, 0x1, 0xe, 0x8, 0x5, 0x400, 0x3, 0x40, 0xaba, 0x7ff, 0xfff, 0x10, 0xb43, 0x10000, 0x6, 0x46eb3ba8, 0xc, 0x2, 0x10, 0x2, 0x400, 0x8, 0x9, 0x30, 0x3, 0x6, 0x3, 0x400, 0x400, 0x2, 0x55, 0xde0, 0x7ff, 0xffffffff, 0x5, 0x4, 0xffffffff, 0x443, 0x98f, 0x10, 0x2, 0xfffffffc, 0x9, 0x0, 0xfffffffe, 0x0, 0x5, 0xfffffe01, 0x2, 0x507, 0x962, 0x7, 0x6, 0x0, 0x9, 0x1d, 0x9, 0x8001, 0x7, 0x1, 0x0, 0x6, 0x7, 0x64, 0x4, 0x4, 0xe, 0x4, 0x80000001, 0x80, 0x3, 0x8, 0xfffffe01, 0x80000000, 0xb7, 0x1, 0x2, 0x80, 0xffffff38, 0xdc0, 0x8, 0x2, 0x1, 0x5, 0x6c, 0x8, 0x1, 0x200, 0x0, 0x2, 0xd, 0x100, 0x67, 0x5, 0x0, 0x2, 0xe28, 0x22, 0xe56, 0x2, 0x1a, 0x101, 0x1, 0x6, 0x47, 0x8183, 0xfffffffd, 0x1, 0x4884, 0x8000, 0x3, 0x2, 0xb, 0x0, 0xfffffff7, 0x0, 0xffffffd6, 0xfffffff4, 0x0, 0x6, 0x5, 0x6, 0x5, 0xe0000000, 0x1, 0xffffffff, 0x8b0d, 0x9, 0xffffffff, 0x56e, 0x800, 0x7, 0x5, 0x1, 0x80, 0x0, 0x9c8, 0x8, 0x2, 0x2, 0x8e, 0x6, 0x3, 0x8, 0x401, 0xa453, 0x5, 0x1, 0x2, 0x10, 0xfffffffc, 0x7fffffff, 0xffff0713, 0x15d, 0x800, 0x1, 0x101, 0x6, 0xa1d8, 0x7, 0xffffffff, 0x9, 0x2af, 0x4, 0xc53f, 0x8, 0x4, 0x2, 0xf54b, 0x5, 0x2, 0x2, 0x7fff, 0x8, 0xc5d4, 0x0, 0x3, 0xfffffffc, 0x4, 0x81, 0x8, 0x8, 0x101, 0x4, 0x8, 0x4, 0x7f, 0x3ff, 0x7, 0x3, 0xffff1f4b, 0x0, 0x1, 0xfffffff7, 0x1, 0xffffff84, 0x4, 0x5, 0xe, 0x2, 0x2, 0x5, 0x2, 0x7, 0x1, 0x1, 0x6d, 0x7, 0xed, 0x5, 0x80, 0x1, 0x9, 0x9, 0xffffff55, 0x8, 0x401, 0x6a2, 0x2, 0xfffffffa, 0x8, 0xfffffff8, 0x7f, 0x6, 0x3, 0x2, 0x2, 0x81, 0x1, 0xffffffff, 0x3, 0xf0f3, 0x7f, 0x5, 0xffff, 0xb902, 0x5fdb, 0x3, 0x40, 0x1, 0x5, 0x8, 0x2, 0x6, 0x7fffffff, 0x8, 0x7716, 0x1000, 0xbc3, 0x2, 0x1, 0x5, 0x7, 0x1, 0x5, 0x9, 0x85, 0xfffffff9, 0x21, 0xfffffffc, 0xac, 0x1a, 0x7, 0x2, 0xf, 0x197682c1, 0x8, 0x40, 0x8001, 0xf06, 0x752, 0x3, 0xfffffffc, 0x1, 0xf0, 0x8, 0x8, 0x2, 0x40, 0x5, 0xe7e, 0x7fffffff, 0x9, 0x2, 0xf, 0xf36, 0x7, 0x7, 0x2, 0xfffffffc, 0x1, 0x1, 0x1, 0x1, 0x2, 0x41b, 0x0, 0x90b1, 0x10000, 0x7, 0x10000, 0x93e0, 0x5, 0x26, 0x56, 0x1, 0xfffffff9, 0x7, 0x2, 0x2, 0x3, 0x0, 0x1ff, 0x1, 0x7ff, 0xb, 0x9, 0xd62, 0x5, 0xfffffe00, 0x4fd, 0x9, 0x6, 0xfffffff8, 0x1200, 0x1, 0x9, 0x8c, 0x1ff, 0xe24, 0x9, 0x1, 0x9, 0x2, 0x8, 0x2, 0x3, 0xcf, 0x7, 0x2, 0x9, 0x8, 0x7, 0xffff, 0x7fffffff, 0x3, 0x9, 0x8, 0x61cf, 0x3, 0x3, 0x3eb4, 0x1, 0x5, 0x7, 0x0, 0x4, 0x4, 0xa, 0x0, 0x3ac, 0x9, 0x7fff, 0x9, 0x9, 0x20]}) ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0xc020662a, &(0x7f0000004bc0)={0x2, 0xaf, 0x5, 0x7, 0x3, 0x0, [{0xbc3, 0xd02, 0xc58, '\x00', 0x980}, {0x7, 0x8, 0x6, '\x00', 0x304}, {0x4, 0x10000, 0x61c474d3, '\x00', 0x1600}]}) fcntl$lock(r0, 0x26, &(0x7f0000004cc0)={0x3, 0x3, 0x5, 0x3, r3}) r7 = pidfd_getfd(r0, r0, 0x0) tee(r6, r7, 0x6, 0x5) r8 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x1010, r8, 0x89604000) syz_usb_control_io(r4, &(0x7f0000004f40)={0x2c, &(0x7f0000004d00)={0x40, 0x31, 0x70, {0x70, 0x31, "8e4dc31f86ad66911096f497e13add3d6a53d9482f7873cf9e77cdbc4cbac82f335c9cc49b2db4173dd1333eb086395f4a63e8b3d2b7b5486f53f1379ea5a5da1dc6e15d15146bbd538ed6495aa8c5afa3a64fef8ef46250bdcfb7d99c12c67628ebf184c06b118a739032bb1f11"}}, &(0x7f0000004d80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x405}}, &(0x7f0000004dc0)={0x0, 0xf, 0xbe, {0x5, 0xf, 0xbe, 0x6, [@generic={0x46, 0x10, 0x2, "47fb123c5e73616f74ae9084bf64dc1e92865b700280df1cc81f4de15857abe376c98f14bef20d13437f2a691015dee34af76b498a239c72d9e70bebb91c1c26d29c83"}, @ptm_cap={0x3}, @generic={0x52, 0x10, 0x2, "9d0890eb275373670ebb84a64e98097e5b22ff0f150cc6ef2bc05422536044c4b84174bb62ba9b65fd632b806304a52872a1accfc2235be23e2f5fea00d6a46ed7c59b75b65bbee02d604df554c38e"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x8, 0x8001}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "518105b9a64fbbaa05f8363032d083ec"}]}}, &(0x7f0000004ec0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe, 0x1, 0x3, 0xd, "b5b7c702", "b842fa07"}}, &(0x7f0000004f00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3e, 0x16, 0x0, 0x1, 0x8, 0x3, 0x9}}}, &(0x7f0000005400)={0x84, &(0x7f0000004f80)={0x20, 0x0, 0xb4, "df4ddaac5e8ba313b228e258d8614eab81e7810583e828b8f691d657d554b3d90884d275d57599071778fd1757f954c2fb6f85f41c4e2c529e61e50874aee5c85babd287cfed82447eedc3edb61a70b94f108bf99887c0528e6ee18d000a516e6e738981fabd1ba133cc5e2cf6f2ba68c21566e700ef6fd03f2dc2dcbb85d6b2362cc8d2e7f60ae48152b1ef8314ac6301d2d801ae43188f7d553cee3d09271c7ddb8512a037609789627b4730f1400989641189"}, &(0x7f0000005040)={0x0, 0xa, 0x1}, &(0x7f0000005080)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000050c0)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000005100)={0x20, 0x0, 0x8, {0xe0, 0x4, [0xf0f0]}}, &(0x7f0000005140)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000005180)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000051c0)={0x40, 0xb, 0x2, "3a93"}, &(0x7f0000005200)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000005240)={0x40, 0x13, 0x6, @random="e3711e349744"}, &(0x7f0000005280)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000052c0)={0x40, 0x19, 0x2, "a12b"}, &(0x7f0000005300)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000005340)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f0000005380)={0x40, 0x1e, 0x1, 0x4}, &(0x7f00000053c0)={0x40, 0x21, 0x1, 0x3}}) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, &(0x7f00000054c0)=0x7fffffff, 0x4) close_range(r5, r7, 0x0) 1m2.840648429s ago: executing program 7 (id=1075): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000085"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0xff}, {0x3000, 0xffff1000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x8080000, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3, 0x0, 0x0, 0x4}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26, 0xff}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x400000b3}]}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x52, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a4"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) fchown(r7, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) fsopen(&(0x7f0000000000)='securityfs\x00', 0x1) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_FLUSHABLE(r9, 0x112, 0x8, &(0x7f0000000000)=0x80000001, &(0x7f0000000040)=0x4) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={'wg0\x00', {0x2, 0x4e20, @rand_addr=0x64010100}}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ptrace$peek(0x1, r10, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) 1m2.668081962s ago: executing program 7 (id=1078): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x10b8010, &(0x7f0000000180)={[{@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x30, 0x6, 0x36, 0x70]}}, {@huge_never}, {@huge_never}], [{@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\\\('}}]}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0xffffc000) socket$igmp6(0xa, 0x3, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) statx(r1, &(0x7f0000000200)='./file0\x00', 0x2000, 0x0, &(0x7f0000000340)) setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f0000000000)=0x2, 0x4) socket$inet_icmp(0x2, 0x2, 0x1) 1m2.520233044s ago: executing program 7 (id=1081): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) epoll_create(0x80000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000300)=[@decrefs={0x40046307, 0x3}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x8, 0x1, 0x16}, @flat=@binder={0x73622a85, 0x10b, 0x3}, @fda={0x66646185, 0x9, 0x1, 0x38}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}, 0x40}, @register_looper], 0x0, 0x0, 0x0}) 1m2.387680336s ago: executing program 36 (id=1081): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) epoll_create(0x80000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000300)=[@decrefs={0x40046307, 0x3}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x8, 0x1, 0x16}, @flat=@binder={0x73622a85, 0x10b, 0x3}, @fda={0x66646185, 0x9, 0x1, 0x38}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}, 0x40}, @register_looper], 0x0, 0x0, 0x0}) 22.338740341s ago: executing program 4 (id=2103): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122223f090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') 21.82465469s ago: executing program 4 (id=2105): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x5}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000001b80)=0x7ff, 0x8) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0) 21.740375621s ago: executing program 4 (id=2106): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000180)={[0x1ff, 0x6, 0xff, 0x1de, 0x1c, 0x1, 0x3388cf44, 0x1, 0x0, 0x2, 0x6, 0xffffffff, 0x3a, 0x10000, 0x4, 0x1], 0xeeef0000, 0x202}) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{@max={'max', 0x3d, 0x2}}]}) 21.739221961s ago: executing program 4 (id=2107): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r0, 0x0, 0x0) (async, rerun: 64) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x802, 0x0) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) (async, rerun: 64) r3 = userfaultfd(0x801) (rerun: 64) io_setup(0x80000000, 0x0) (async) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002140)={0xaa, 0x150}) (async, rerun: 32) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32) read(r3, 0x0, 0x0) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4) write$cgroup_subtree(r4, &(0x7f00000003c0)=ANY=[@ANYRES16=r1, @ANYRES16=r1], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x810, r2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001500add4050000000000000002117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x7}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x400000f4, 0x0, 0x1ff}]}) (async) ioctl$KVM_CAP_MAX_VCPU_ID(r2, 0x4068aea3, &(0x7f0000000100)={0x80, 0x0, 0xb}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000040)=0x1) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) r10 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r10, &(0x7f0000004700)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x2b4, @remote, 0x7}, 0x1c, 0x0}}, {{&(0x7f0000000540)={0xa, 0x4e20, 0xffffffc7, @loopback, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="2400000000000000000000000000000000000100000040000000000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3d8}}], 0x2, 0x80040c0) (async) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) (async, rerun: 32) ioctl$KVM_CREATE_PIT2(r9, 0x4040ae77, &(0x7f0000000040)) (async, rerun: 32) ioctl$KVM_SET_PIT(r9, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x8000, 0x5, 0x7, 0x1, 0x9, 0x3, 0xbf, 0xb8, 0x3, 0xf, 0x5, 0x1ff}, {0xfffff8d5, 0x5, 0x5, 0x5, 0x7, 0x2, 0xff, 0x5, 0x9, 0x4, 0xb, 0x7f, 0x3}, {0x4, 0x6, 0x38, 0x6, 0x84, 0x7, 0x0, 0x50, 0x2, 0x70, 0x3, 0xd, 0x400000000006}], 0xffffffff}) 21.700721282s ago: executing program 4 (id=2109): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x2015, 0x100000000000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x111, 0x487, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) sendto$inet6(r2, &(0x7f00000000c0)="044aac", 0x3, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r2, 0x1) recvmsg(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000140)=""/69, 0x45}], 0x1}, 0x40000112) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x18, 0x0, &(0x7f0000000180)=[@increfs, @clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x1000000000000) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r1, 0x201}], 0x1, &(0x7f00000000c0)={r4, r5+10000000}, &(0x7f0000000140)={[0x7]}, 0x8) 20.770169476s ago: executing program 4 (id=2127): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, 0x0) syz_clone3(0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0xfffffffffffffffa) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 9.093878518s ago: executing program 0 (id=2162): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x2048095, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats']) socket$inet6(0xa, 0x80000, 0x6) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bond_slave_0\x00', 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000000)) 9.091562198s ago: executing program 5 (id=2163): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x201080}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x11c, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0xf4, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffff}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x406}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_ID={0x44, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x80000001}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}]}, @NL802154_DEVKEY_ATTR_ID={0x64, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7fff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}]}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40080}, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r2, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008004}, 0x28008000) r3 = dup(0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40000) fstat(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x1001000, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_user}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@pcr={'pcr', 0x3d, 0x1000}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'wpan4\x00'}}]}}) mkdirat(r3, &(0x7f0000000640)='.\x00', 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000680), r5) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f00000006c0)={0x8}, 0x2) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1181}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x50, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x4040000) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000880), r0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x50, r6, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xb40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, 'wfdno'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8000}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r3, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc8, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x4}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0xc001}, 0x10) recvfrom(r5, &(0x7f0000000b80)=""/79, 0x4f, 0x0, &(0x7f0000000c00)=@ll={0x11, 0x9, 0x0, 0x1, 0x4, 0x6, @broadcast}, 0x80) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14, 0x0, 0x2, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d80)={'wpan3\x00', 0x0}) r8 = getpid() sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x4500010}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)={0xc4, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x58, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'sit0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x6}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}]}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xfa}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x286c8298}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xcb1}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), r5) sendmsg$IPVS_CMD_DEL_SERVICE(r5, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x70, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xb42}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40885}, 0x10008010) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001240)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x68, r1, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5199}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x40004) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000001380)={{0x87, @loopback, 0x4e20, 0x3, 'ovf\x00', 0x1, 0xfe, 0x3f}, {@local, 0x4e22, 0x2, 0x4, 0xc9a2, 0x6}}, 0x44) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001400), r0) syz_open_procfs(r8, &(0x7f0000001440)='stat\x00') 9.091239489s ago: executing program 8 (id=2164): chmod(0x0, 0x17c) r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000240)=0x3, 0x4) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000008200)={0xa, 0x4e23, 0x200, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 7.481270804s ago: executing program 0 (id=2165): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x102, 0x8}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0xffffffffffffffe1, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000002580)={0x6, 0x0, [{0xeeee8000, 0x2d, &(0x7f0000000040)=""/45}, {0x2000, 0x37, &(0x7f0000000080)=""/55}, {0x1, 0x1000, &(0x7f0000000580)=""/4096}, {0x10000, 0xff, &(0x7f0000000240)=""/255}, {0x8080000, 0x1000, &(0x7f0000001580)=""/4096}, {0x8000000, 0xcf, &(0x7f0000000340)=""/207}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x102, 0x8}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, 0x0) (async) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0xffffffffffffffe1, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000002580)={0x6, 0x0, [{0xeeee8000, 0x2d, &(0x7f0000000040)=""/45}, {0x2000, 0x37, &(0x7f0000000080)=""/55}, {0x1, 0x1000, &(0x7f0000000580)=""/4096}, {0x10000, 0xff, &(0x7f0000000240)=""/255}, {0x8080000, 0x1000, &(0x7f0000001580)=""/4096}, {0x8000000, 0xcf, &(0x7f0000000340)=""/207}]}) (async) 7.480439013s ago: executing program 5 (id=2166): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/66, 0x42}, {&(0x7f0000000080)=""/26, 0x1a}, {&(0x7f0000000140)=""/45, 0x2d}, {&(0x7f0000000240)=""/149, 0x95}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000300)=""/139, 0x8b}, {&(0x7f0000000180)=""/106, 0x6a}], 0x8) syz_clone3(0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, 0x0) (async) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/66, 0x42}, {&(0x7f0000000080)=""/26, 0x1a}, {&(0x7f0000000140)=""/45, 0x2d}, {&(0x7f0000000240)=""/149, 0x95}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000300)=""/139, 0x8b}, {&(0x7f0000000180)=""/106, 0x6a}], 0x8) (async) syz_clone3(0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) (async) 7.478352013s ago: executing program 8 (id=2167): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x2000, &(0x7f0000006300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000063c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.720337711s ago: executing program 0 (id=2168): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000026c0)={0x0, {0x2, 0x4e23, @loopback}, {0x2, 0x4e21, @private=0xa010102}, {0x2, 0x4e20, @broadcast}, 0x22, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5c, 0x7f}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x14, &(0x7f0000000040), 0x50) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000180)={0x4, &(0x7f0000000140)=[{0x2, 0x10, 0x7, 0xbf3}, {0xbcf, 0xff, 0x3, 0x6}, {0x0, 0x1, 0x7, 0x1000}, {0x5, 0x4, 0x81, 0x7}]}) (async) process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/215, 0xd7}], 0x1, 0x0, 0x0, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x400, &(0x7f00000000c0)=ANY=[@ANYBLOB='context']) 5.716939021s ago: executing program 5 (id=2169): r0 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 32) r1 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) bind$unix(r1, &(0x7f0000000dc0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000640)=0x14) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r3, 0x2000) 5.716248881s ago: executing program 8 (id=2170): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000001"]) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000700)={"ce85bf2fb3cd8f0e18f44494adfd754252f57b44e3463dfcb57b5aa2b43cd438723b695eec6b4426ea40a206b9cdbc407406838fcc7114ee6e137328f81af34923eb4829d751fe67819c96419effe8f53ecc9abb1c638d0daf743cf4f42698c10d497e714371c2c78b293c2e33df72ca75c4f998b90a473868c98f53ed8f448286b859d15f97b4b6802e87f2170db785ac72fbc40e3ca4684e282864a612c553ebd1ca1948bfea0769e283fa6ed8e2216714062bcf9059e36c3697dd9aee5af04c32980b53ea45e5cf150d3442ba0e58aacdfdeb14d6a20bed8351e1f2b17abdb988f50fbf4074f815d68745a04f2e7ac4212ab17a2872ad028e133aa42778e459ab306a7b6b1cef1f7facf93ddfc3f93908f1b21a13217f02d020f45649159822d69c818682368f0e59316563717a71fcf3c65c496d766a7d7fa6840377e9e93d46f322c1d36fd5275d97da2d9f5eeaee4cdd98e9d0c911ba7b21e47766397360658f815eff477dd353f82cb463aa5e1b9fc305d21e07e657de987152fd9372f4225a5b1231c4b680c9b8918bc5b10786c1660eb829c5f1096f7c4270dcef52c9ad70a3dd9b80e32d0a2c45a6a469e28fa75a064cdaae3e59099df9c3e384e6927ebf0f84df459d179410ce200dc8d9452923b32c67a5165c78a0b382aa9c2755e83834be0b88fbdeffb4841192d5c9480dfd52aaad7c928f601ebf48523775c20399fbaa5b6d83e5add38fea61e11491496e164b09fbffeab88f9329bc4526a076377a4d0a47ea223e1660e9dcbf562e505914b6ca6d978d84162fa5895299eb8fb8eaec40808fe6eb449333f62ac02b8bece9c708971d1d1cb6dffe416c2c6fae7c906678dfe105ff10cfe1eda88c69dcaa73c89cfcfdf92ef6ad69889b1d9984feb0711745f126fae4523f0e3d087978b127cc272033c9f3f1b0ac7e0ed4f3cfeb3e60b691478d9fb01b4158d22d1f64698d076aa830586aff206b3e65772b0d189e770ea239689638d0d935aef9ab8c167819cb17ad67a7e8fd5d658f4f929efa834be01e2644e36ab7c13930499a50ad46716274d62407635b97d6e6c19b1226451294b5e575135a8c972a739e89c92f698b043ed9b97d8b6d7e44522d462a54c10190eecb15f7edd14e3815eff39d614b50f015356e731f0812649979de235f19552bc2826e15c9b67ed40416ba164033135fee831df925e9baabdb846b5bf66855e3f8b79dca16f3bec23aa634606196a388f8e1b126f36618f685cb62065d30f6fe2b0a562a94591ee3fa981160e1481ee781c371cc7ee8c928f77b4e6d9b73fa3bfc479060ce1f4f0b68fd21d068d50e29c84bc2af8328817bcc3293afe6c78d4ee87c835097b383169d8017ef12eabd7ff4f91701088ace6da8a31c05e729aade819777203973c20f6c1611f8adb2ac10d22795c125db94b18cf9"}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000b00)={"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"}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 3.948452069s ago: executing program 0 (id=2171): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8500, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000200)={0xf0003, 0x0, [0xfffffffffffffff8, 0x6, 0x200000000000000, 0x5, 0x3, 0x0, 0x10000, 0xa3f]}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000600000008000300", @ANYBLOB="080005000700ff"], 0x24}}, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x8202, 0x0) (async) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) (async) sendmmsg(r8, &(0x7f00000050c0)=[{{&(0x7f0000000080)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x80, 0x0}}], 0x1, 0x4800) (async, rerun: 32) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0x8000000000000000) (rerun: 32) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) r10 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(r10, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x8, 0x0) (async) ioctl$TUNGETFILTER(r9, 0x801054db, 0x0) setsockopt$CAN_RAW_LOOPBACK(r6, 0x65, 0x3, &(0x7f0000000000), 0x4) (async) ioctl$sock_netdev_private(r6, 0x89f9, &(0x7f0000000780)="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") r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1, 0x11, r11, 0x0) syz_usb_connect(0x6, 0x1db, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0xb6, 0xb2, 0x18, 0x8, 0xfb8, 0x3001, 0xb81c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c9, 0x2, 0x7, 0x8, 0x0, 0x1, [{{0x9, 0x4, 0x2f, 0x2, 0x5, 0xe0, 0x1a, 0xd2, 0x8, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, 'l'}, {0x5, 0x24, 0x0, 0x40}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0x7, 0xfb}, [@country_functional={0xa, 0x24, 0x7, 0xff, 0xfff, [0x2, 0x0]}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x81}]}], [{{0x9, 0x5, 0xf, 0x0, 0x40, 0x10, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xcb, 0x3}, @generic={0x37, 0x24, "957b1a4ea7178b1337a81cb174806765a4a11ce765ab6aede4036a2b92d1d5b224baadf3863e202fe30921c15688153a31666dd9a2"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x8, 0xcd, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x101, 0x7, 0x7f}]}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x5, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x14, 0x6c65}]}}, {{0x9, 0x5, 0x5, 0xb, 0x8, 0x71, 0x1}}, {{0x9, 0x5, 0x4, 0x2, 0x3ff, 0x6, 0x3}}]}}, {{0x9, 0x4, 0xe3, 0x3, 0x5, 0xff, 0xff, 0xff, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x101, 0x1}, [@mixer_unit={0x5, 0x24, 0x4, 0x3, 0x9}, @processing_unit={0x8, 0x24, 0x7, 0x2, 0x0, 0x93, '\\'}, @mixer_unit={0xa, 0x24, 0x4, 0x10, 0xde, "4bdc7cf25a"}, @feature_unit={0x9, 0x24, 0x6, 0x6, 0x4, 0x1, [0x1], 0x40}, @selector_unit={0x6, 0x24, 0x5, 0x6, 0x6, 'l'}, @selector_unit={0x9, 0x24, 0x5, 0x6, 0x1, "e67712ea"}]}, @generic={0x91, 0x30, "d2f6013a4bd1a432adabcbbc13a9ab68b58f840644631cc26faa05d6d1d320211d2141604a6fad15e9f97ca047a48b763f4e295d20f0a4a24c12ba392b5f86ddc99d3ad0634276c2d1e89cfff59a0044234d0d61197d81c714d0974fe51a882dd88b43264ab82b70efe70e22621a4584fdfd58ef2074cb6282c90fda397ee09b867b55eb5010f54a0d7a2c6b49b627"}], [{{0x9, 0x5, 0x0, 0x10, 0x40, 0xb, 0x2, 0xb}}, {{0x9, 0x5, 0x3, 0x1, 0x0, 0x0, 0x77, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x3ff}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x1, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x2, 0x400, 0x9, 0xe1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x6}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x8, 0x4, 0xa}}]}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x2, 0x0, 0x45, 0x8, 0x8}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x2, [{0x57, &(0x7f0000000440)=ANY=[@ANYBLOB="57032b29ccbc0788f97056bc8e6f13db1d99dd57a53d464c3336ef2210d080ecd60cc563144e72d2553a1b1d09a7e2b0d5566284bd508194abfd5d817e7e024ae0b9e0567f26eceadd51c72119419df53909cec2e882f89865dcb0dd6e6bb0ddb7549839b64b0a0f28f3466ec6e6acda041b319456eaa0e1064c93a1843a5593bb576798b139f2adf09249906e616230edac69611cac02e1aaf8983a4af399db9fb1cb16"]}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x807}}]}) 3.947695049s ago: executing program 5 (id=2172): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x7, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, &(0x7f0000000500)}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) (async) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.946971889s ago: executing program 8 (id=2173): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x10200, 0x5, 0xd000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000040)=0x800000) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000080)={0x3, 0x0, [{0x987, 0x0, 0xc1}, {0x400000b5, 0x0, 0x2}, {0x4000022f, 0x0, 0x7ff}]}) r2 = accept4$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x1c, 0xc00) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x4, 0xb6, 0x80, 0x7, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x40, 0x8000, 0x39f, 0x5}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x58, r3}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f0000000280)=""/202, &(0x7f0000000380)=0xca) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f00000003c0)={{r0}, "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"}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000013c0)={0xb, 0x49b34429, 0x2, 0x4, 0x4}, 0x14) ioctl$FIOCLEX(r4, 0x5451) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000001400)) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000001440)={0x4, 0x0, 0x401, 0x4, 0x9, 0x9b, 0x9}, 0xc) r5 = syz_open_dev$MSR(&(0x7f0000001480), 0x80000000, 0x0) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ppoll(&(0x7f00000014c0)=[{r5, 0x254}, {r6, 0x100}, {r4, 0x8000}], 0x3, &(0x7f0000001500)={0x77359400}, &(0x7f0000001540)={[0x4]}, 0x8) r7 = socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg$inet(r7, &(0x7f0000003880)=[{{&(0x7f0000001580)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000001680)=[{&(0x7f00000015c0)="3b4471133eed889fb0a5db7e52c71179051088131c208812cde9d91179eb6e531c2f31420d75138c1053d0dcdb837a34dc2e7e0b1ed8ea694851cc4d81b981d888ba39f9964a46d6b5d24bcf800d0441c3874efe59d4a0fcd353c949edb0f9c8ba80f47a5a87cf72dd058721da8b950f4f842f660dc37e4fa9a6a4e28cb72fe81ae7d4fad3ee68a5d3a0f4e4576226ec", 0x90}], 0x1, &(0x7f00000016c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @loopback, @dev={0xac, 0x14, 0x14, 0x31}}}}], 0x20}}, {{&(0x7f0000001700)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001840)=[{&(0x7f0000001740)="21f2ba8442c55c0c4a8ea37d6aede5afe8213f7f968e1b73d714f3d4d055972aff41e554594b3c3d20afd6da13652eda72af56d1f9e004e7aa344683f2b15e3051693fffc70b29f222ea452658ae548a99dc21d7b180c42d019c3747e5f8fddd7025b0f861ebef61a4416d6bbc27af5293", 0x71}, {&(0x7f00000017c0)="d50468fe8491901c359b087b59d5360cdfb07bd3318fa3f350b2ba68e5d73c11c39c94b16fdeecacf2f53ef32d4255e2c2fef648ad7e952ae7e6bac16c1d14109f7b40b71797203996684baf25bf1dec24316995208a8c8e218ea370cbd5", 0x5e}], 0x2, &(0x7f0000001880)=[@ip_retopts={{0x5c, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0xe, [@loopback]}, @timestamp={0x44, 0x14, 0x4a, 0x0, 0x5, [0x0, 0x1, 0x2, 0x8]}, @rr={0x7, 0xb, 0xa, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @generic={0x83, 0xe, "3d0044f97bf8b296a11494e6"}, @timestamp_addr={0x44, 0x14, 0xa1, 0x1, 0x7, [{@remote}, {@broadcast, 0x6}]}, @noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_retopts={{0x60, 0x0, 0x7, {[@end, @timestamp={0x44, 0x18, 0x7, 0x0, 0x1, [0xa, 0xfff, 0x81, 0x7, 0x1]}, @noop, @end, @noop, @timestamp={0x44, 0x28, 0xa1, 0x0, 0x3, [0x75f, 0x7ff, 0x6, 0xdf9, 0x6, 0x2, 0x1, 0x1, 0x3]}, @timestamp_addr={0x44, 0xc, 0xe4, 0x1, 0x1, [{@broadcast, 0x4ea423b1}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8d}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_retopts={{0x50, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0xef, 0x3, 0x1, [{@remote, 0x3}, {@local, 0x9}]}, @cipso={0x86, 0x2a, 0x2, [{0x7e1912d8c85e9989, 0xc, "b8038f4badb4551b173a"}, {0x1, 0x10, "8f411801a02eebf8980a0ddfd56a"}, {0x6, 0x8, "e39e863696f8"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x134, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x14, 0xe, 0x1, 0x9, [{@rand_addr=0x64010100, 0x1000}, {@multicast1, 0x1}]}, @cipso={0x86, 0x1d, 0xffffffffffffffff, [{0xd5a5eed42920c7c7, 0xf, "9404d364890eedd574b7a30326"}, {0x1, 0x8, "85bb8c7f0f97"}]}, @timestamp_addr={0x44, 0x14, 0x8, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x2d}, 0x6}, {@remote, 0x3}]}, @end, @timestamp_addr={0x44, 0x3c, 0x91, 0x1, 0x6, [{@rand_addr=0x64010101, 0x1}, {@broadcast, 0x8}, {@private=0xa010100, 0x4}, {@private=0xa010102, 0x7}, {@private=0xa010101, 0x2}, {@local}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x10}]}, @cipso={0x86, 0x58, 0xffffffffffffffff, [{0x1, 0x9, "19213b89c7f199"}, {0x6, 0x6, "5eaa4a9b"}, {0x0, 0xb, "726c0370b756f8623e"}, {0x6, 0x10, "a8587e9c99ffca0ac853a87ad762"}, {0x1, 0x11, "7d451b3da275c7ce75d6c2c2b36ee0"}, {0x7, 0x9, "4aba3e542bfd36"}, {0x2, 0xe, "86d1f1410f7810fd86fb2b22"}]}, @rr={0x7, 0x1f, 0x9, [@broadcast, @multicast2, @loopback, @broadcast, @private=0xa010102, @empty, @loopback]}, @rr={0x7, 0x13, 0x58, [@dev={0xac, 0x14, 0x14, 0x3f}, @dev={0xac, 0x14, 0x14, 0x2e}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @cipso={0x86, 0x17, 0xffffffffffffffff, [{0x6, 0x11, "0732a3d195f9f45a36920706ef8bfb"}]}]}}}], 0x2c0}}, {{&(0x7f0000001b40)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000002000)=[{&(0x7f0000001b80)="82ee5c06e6dd78077e7edf1cb1106cb33c742508245a7f8331c3d78299ad0a5372d9b8ed6b450fe153a123d23650757785d152863d6d77c72c7050196d3ed7f499102826cc5e5f2f6537004522f136494c8029c3c496a03877a6c427022662cf0f7fece77c490b1fe6210c03515179a11ae864383ae76a0de45b78571a228b17ddcba95a28c8c47736b9ca8bd23ff559e82e73cadd58ce321fe7b6043d2660f49b0c32c11b6e05e4", 0xa8}, {&(0x7f0000001c40)="c7c5b866197a1b0d0df6c1aa26882372e6b9dfe46fffbd3d540f9aa0ceb0a0648ca6eec7587cb5ff02f67465fda6bb143f2ce2bb3e066ea44f105245a0fa8e24c386fce459859f189016c93aa68952587ea3349c38a1162ff384c0b09c30a9bc203d67140b3524a44da6b3b974b56e3da379c7a2b5eef2739579e6f80f01aab5dfd856bb5e3fb5b00109bcbb7a2a82c06f1824a70fc963692f79c8856207c8c04d06f15e0e280b531ac4103246a2d3280a03769a83ae63a613b26686b8ec9b7f414f8f055d9fcb881c3056dafab39a195872860110ebb103b7495408a597ac4c", 0xe0}, {&(0x7f0000001d40)="7f662c16ce07057363ffbf71427c5b8eb2615d59e5cac24097486d149bf19980cfb97238a5328b2537588cc3654214394f43cb1e7d8a5311fe4d9b4ff2e7bc7ba198dee0040000c9236009fb5ba3e1d1ecfd323c8678fcbe95eccf98fd23b73cdf41393190260b295c76b3ca6dcb844e9e2c65c1727a964a265ff7c6cf20e9d844d3dfd995df7e233848b746d54900ad8a23e45c8d0b71cfa533be77061b8b5244026c698d0f3717bb1500baff603f30", 0xb0}, {&(0x7f0000001e00)="51bce2a4db52b46e84b852761e13330b6f2394026c8b43f4bd5c6d3dda99e0fd851239f83c18b0c581efda1b702ad6f7d36cca6d31e9b87bc31e19ef5ae2773757b9f3613f372d9cd66c4fa9e8fd87e23e374124c01b3415e8c5b95026a51877543d9b6664a2c936c0b7646d92d7ffe2871caa6063780eee313c9e17fc4fde385f1f227b97441e7a99c6b7938eda6a2b2f57b872bd1fe3a813a60d0a48927f63873a2dc8c440591ad4872ee3d62bd42ca50664d0caf1b5d3859d3a4a18307b4e6bf3ac95100da50493923384eb68194873ce683c4070af836aac88ffcd4844911c2ea5791ef2e9e91cd3", 0xea}, {&(0x7f0000001f00)="0507d9e35e847fd7cd4cefd2b632fe47914b7110b89d617db7b6a3247e865d238add3f02e2d3acdf82dc07c7035c861356b5493a63a854b209bcedb1de99d551e5cf04a2d2b8ecb1b1cd1f022468a1be2518c86a69e5b16641eb6330a2f770abb9222de758c3b01dba61af5d45857351f8c7ea4c6db109aa2323fdd635ccaaae35ce24ca6f01ab98aa459c5fcbbadb08158663889acf10e71b64aa6e738c2d1d5aeeaac17b4f785592f7b893f2393d959fc61b2ee6a10d7a63b78ff425f6be89aebf95328f40a12c", 0xc8}], 0x5, &(0x7f0000002080)=[@ip_retopts={{0x60, 0x0, 0x7, {[@generic={0x7, 0xf, "c9a467135eca6f7636bb19d1a3"}, @lsrr={0x83, 0x13, 0xac, [@local, @multicast1, @local, @empty]}, @lsrr={0x83, 0x2b, 0x32, [@dev={0xac, 0x14, 0x14, 0x2e}, @private=0xa010100, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @local, @loopback, @empty, @broadcast, @empty]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x78}}, {{&(0x7f0000002100)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000002540)=[{&(0x7f0000002140)="1dd23e79a2d6e7ec35cbe6358edf19e1cc8cfbc102c2fadf476075c92b92ad448792e57044251eb0bbe6c092825679a1fd6d7b41a66391e228c84ba374eac9fd9e03d228e668b0bca3878403370ee06f1e94ee18e1594473a6448e33533603673ec4496fc68b39e62a05de0c5acf530801f99f9728c88863", 0x78}, {&(0x7f00000021c0)="914563b5dd8faf832ece25e39b213b1c810453700b6228ae789f54ae761d63a12513d3cdf5a443f5fac082c1be7594941a0f4abcd02c1c750190070d8e330af80a02d216191516eae3332f206935473e5962907f70df9a1e3620a5835cb19720c9af5fc3e5f3aff698d06b73a38b78f9f2dd4bc32b2534ca9622812740879e59d73670aecdd4d564f7ff134473ee3d1499636d19", 0x94}, {&(0x7f0000002280)="81c2e44f5fe7b97d0f7852bd849300be76e5ded53e32a84c674fac8a162d1b55ded442fb571cf74d3232a23bf4db1eb4231e6624e9ee06b2a58aa557bd76dd21dfd9f0e9c537d0fa3cce3e9ab635212850dbcabff31ac58b1393d525eef019f0916872ebf4dba4501ea777c4b5046e43e503c8cac0f80ea033c2789e2765fb4911338c14aa57ec190206cd720579", 0x8e}, {&(0x7f0000002340)="ab4fd52059245331c5ef82d5798e4f88915a8c3d9cc68a1bf7a2aa1accb748811f7003933bab8df8a2cb7e228e6fa70da37625685dfed40e598849318cea4251ad2b459c41e65f56b6fc3e", 0x4b}, {&(0x7f00000023c0)="b7b0c1f5214e2f38c30027054d14689339", 0x11}, {&(0x7f0000002400)="99b8e2595941", 0x6}, {&(0x7f0000002440)="ee80993e6fcd61d5bab1471c704c60618f94f4469b803836b8648820a5340e6fecf32f7ebb5a2a9d8a8b576e84abae08e55943def2c3c1396ac6fa8018af34daffbc9a1220a52f5627beea57a2443b22cfdb491b9b82b0d8d6fa02b730cbad587c83c21dea539ec49f3a7a3b553f2582697682ff60d58e909bb0c265e2a0fef165b271ea858b665aade9c15a43a8ac429cc669cd72f89c3cd04ede711d3a14ade1230ea39e2d059449c79db38685fcf2ea133dd7bf4f1d947368a1a49675c6f5b31bc657dfa9e8f8667a4c401e3e06815cb23ef2", 0xd4}], 0x7, &(0x7f00000025c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xd7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}}], 0x68}}, {{0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000002640)="85093a239b1328ecec526344dfe1ee04968421a2fc813feff98676d3dcdfd16e2e127cbb26bc936afba8e95494d155e0a225178bc69d401503506162f772340b8e", 0x41}, {&(0x7f00000026c0)="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", 0x1000}, {&(0x7f00000036c0)="e72229ff3820cf595e1702d3d4141b6eacb2a545b3b844a47e711bedf29768b8f703f9d7f75f5949f7b2418e984322e3a45d7238", 0x34}, {&(0x7f0000003700)="710a2ebbe450e63f1d52b0ef210ba6d5129009136950176c36e5755f7a2ed86fc4a25cb4e30f08d2e7d44ca07e410389bc6e5cd187c2eb0c6f1cf82b220aeea73e19a228", 0x44}, {&(0x7f0000003780)="e9a3bf70e2eae1626aa0a1066b010a4e4dfcae8b16fedbaa3e209519afc5edc1665f1c", 0x23}, {&(0x7f00000037c0)="2348b5e35a008f16de2e91eff35d7b5e3c0c604627e55f02c6c982f0113a2a9e962ac3bf43", 0x25}], 0x6}}], 0x5, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000003a00), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000003ac0)={&(0x7f00000039c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003a80)={&(0x7f0000003a40)={0x2c, r8, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x800}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x26040000}, 0x4000) sendto$inet(r1, &(0x7f0000003b00)="704c861a6c164bfb2916fecc73aaae423d66d2d5f942cc975888920b393f94640e2695ae1a235b4bec603ad049ea61facf587f36206513e88bc3e1eec4d3da2427345fab0d780dca9352b83466a78e3f84be87e94c5a1ddb396d1b3dac648e65dff30d51696d6055069d4a125a72e92236b6dcff1b5c548888", 0x79, 0x4040010, &(0x7f0000003b80)={0x2, 0x4e21, @loopback}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000003bc0), r1) r9 = syz_open_dev$loop(&(0x7f0000003c00), 0xb8, 0x200000) ioctl$LOOP_SET_CAPACITY(r9, 0x4c07) r10 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000003c40)='./binderfs/binder-control\x00', 0x802, 0x0) flock(r10, 0x3) tee(r10, r10, 0xffffffff, 0x6) 2.026666839s ago: executing program 0 (id=2174): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file1\x00', 0x11a) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x200040c0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x2402, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir_follow}, {@volatile}]}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0xfffffffffffffff6, 0x80000000003, 0x4, 0x804, 0x7, 0x7fd, 0x120000, 0xff, 0xffffffffffffbfff, 0xfffffffffffffffb, 0x1, 0x200005, 0x0, 0x7, 0x400000000000006, 0x6], 0x1000, 0x141200}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xff, 0x8, 0x10, 0x0, 0x6, 0x0, 0x0, 0x4, 0x0, 0x80, '\x00', 0x2, 0x5}) ioctl$KVM_RUN(r5, 0xae80, 0x0) pread64(r0, &(0x7f0000000200)=""/44, 0x2c, 0x7) read$FUSE(r2, &(0x7f0000000980)={0x2020}, 0x2020) 2.026227589s ago: executing program 5 (id=2175): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000540)=ANY=[], 0xfffffffffffffff4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x9410ac, &(0x7f0000000500)=ANY=[@ANYRES8=r0]) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001500add4050000000000000002117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/disk', 0x143a82, 0x33) fremovexattr(r2, &(0x7f0000000000)=@known='security.apparmor\x00') r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@private0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@private2}}, &(0x7f00000000c0)=0xe8) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) setreuid(0xee00, 0x0) r5 = getuid() chown(&(0x7f0000000200)='./file0\x00', r5, 0x0) setreuid(0xee00, r5) open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) r6 = getegid() r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r8, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @ioapic={0x1000, 0x8, 0x6, 0x3, 0x0, [{0x1, 0x3, 0x3, '\x00', 0x2}, {0x0, 0x5, 0x1, '\x00', 0x8}, {0x7, 0x2b, 0xf3, '\x00', 0x2}, {0x7, 0x2, 0x1c, '\x00', 0x7}, {0x0, 0x3, 0x4, '\x00', 0x58}, {0x80, 0x2, 0xb, '\x00', 0x9}, {0x2, 0x7, 0x5, '\x00', 0x2}, {0x0, 0x81, 0x4, '\x00', 0x22}, {0x9, 0x9, 0x6, '\x00', 0x7}, {0x4, 0x58, 0x81, '\x00', 0x1}, {0x9, 0x8, 0x1, '\x00', 0xfa}, {0x1, 0x7f, 0x2, '\x00', 0x81}, {0x2, 0x4, 0xff, '\x00', 0xa}, {0x7b, 0x1, 0x2, '\x00', 0x5}, {0x7f, 0x4, 0x6, '\x00', 0x6}, {0x1, 0x0, 0x9}, {0xa, 0x1, 0x0, '\x00', 0x7}, {0x80, 0x2, 0x4, '\x00', 0x1}, {0x82, 0x5, 0x6, '\x00', 0x2f}, {0x2, 0x8, 0x0, '\x00', 0xb}, {0x8, 0x41, 0xfe, '\x00', 0x6}, {0x1, 0x4, 0x8, '\x00', 0x8}, {0x0, 0x5, 0x2, '\x00', 0x3}, {0x1, 0x9, 0x6, '\x00', 0xc}]}}) r9 = getuid() r10 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r10, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r11) fstat(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=r4, @ANYBLOB, @ANYRESDEC=r6, @ANYBLOB=',max_read=0x0000000000008001,max_read=0x000000000000000b,default_permissions,max_read=0x0000000000000005,allow_other,appraise,dont_hash,euid=', @ANYRESDEC=r9, @ANYBLOB=',uid>', @ANYRESDEC=r11, @ANYBLOB=',rootcontext=root,euid<', @ANYRESDEC=r12, @ANYBLOB=',dont_appraise,fsmagic=0x000000000000000b,uid=', @ANYRESDEC=0xee00, @ANYBLOB=',\x00']) 2.025139949s ago: executing program 8 (id=2176): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r3 = openat$ptp0(0xffffff9c, &(0x7f0000000000), 0xc200, 0x0) r4 = eventfd(0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r5, 0x11, 0x1, 0x0, &(0x7f0000000040)) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0x0, 0x0, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3966, 0x3, 0x8000, 0x0, r8, r9, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r10, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r10, r6) read$eventfd(r4, 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r3, 0xc0603d0f, &(0x7f0000000040)) r11 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) fcntl$lock(r11, 0x6, &(0x7f0000000080)={0x2, 0x2, 0xffffffffffffffc0, 0x10001}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.09738ms ago: executing program 0 (id=2177): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x51bf3295, 0x101040) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$FUSE_DIRENTPLUS(r1, 0x0, 0xb0) (async) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000080)={0x9, 0x1c, 0xffff, 0x7f, "e32fa43f54cd078fe74124a6fba6333969e872ae247a4975aefa77cf3e2a4bd1"}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) (async, rerun: 64) r3 = gettid() (async, rerun: 64) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002a80)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000003480)={'wg1\x00', &(0x7f0000000100)=@ethtool_perm_addr}) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={r4, r5+10000000}, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r7 = socket$inet6(0xa, 0x4, 0x10) getsockopt$inet6_buf(r7, 0x29, 0x1b, &(0x7f0000000000)=""/73, &(0x7f0000000080)=0x49) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sendmsg$inet(r7, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)="b1c08c13f0920c8938daaa2308486275bc42bffcc4086b2f5d6647598e96b6de5b363fd0decd20fa00a961562f53dacef7d9a9699984c7d6cc4e31adc65c99fe2ed36596d16fa5ae377d73a3984a97ff2588f49214e1bea04d7af8588b71d1f40d0489c22d54e43eb477bf9b886a77db56da29cd5f5cff6aad3857c0e5e4dee9179c3c20403c1200a26abb0a2cefa37b96c91ccf5ed444439b3a60484644f4ffd4ddcf5d8ebf21b9a3b7182ecb3fb7799f91cf2e6acda74c6bca84b6432d485e", 0xc0}], 0x1}, 0x48011) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x267, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x2, 0xa, {0x9, 0x21, 0x489, 0x8e, 0x1, {0x22, 0x59}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x3, 0x1}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x400c620e, 0xfffffffffffffffe) 335.7µs ago: executing program 5 (id=2178): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3314) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xda6, 0x0, &(0x7f0000000580)="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"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000001740)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x7f, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x1, 0x1, 0x7, 0x20, 0x2, [{{0x9, 0x4, 0x0, 0x34, 0x3, 0x2, 0x6, 0x0, 0x5, {{0xa, 0x24, 0x6, 0x0, 0x0, "4646c669d2"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x83, 0x101, 0x7, 0x8}, [@mbim={0xc, 0x24, 0x1b, 0x80, 0x3ff, 0x9, 0x79, 0xfffc, 0x7}, @country_functional={0x10, 0x24, 0x7, 0x3, 0x0, [0x3, 0x1, 0x6, 0x6, 0x5]}, @country_functional={0x8, 0x24, 0x7, 0x40, 0x2, [0x0]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x6, 0xd1, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0xe, 0x3, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6, 0xfb, 0xeb}}}}}]}}]}}, &(0x7f0000001400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x7, 0x0, 0x8, 0x8}, 0x15, &(0x7f0000000280)={0x5, 0xf, 0x15, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x2, 0x6, 0x1}]}, 0x7, [{0x7e, &(0x7f00000002c0)=@string={0x7e, 0x3, "4b85701808c21111fa8275a5b12e88da0ef163b6c7fe4c0c420755ed72d6bf95b2a6ecf5b056991962157f21e31d23bb3a646319953f63769655be04a4ac456c27563a900073a999190bf292250685d5285b50bf94ebfecf0b81dbb17fab98845b824cedc6bd649f537135ee4bba4e5b406b189eb972883260480f29"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3447}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x423}}, {0x96, &(0x7f0000000440)=@string={0x96, 0x3, "1b7dc79c5fe78959cd6e1a8fbb1e2fd3bf947cab93b6c08c898fa832b9e78bc33717a6a7629487cad67be48a537d8625a8c2720cd5242ed7f6577697d4abfe2485bf1df217fe6569e9a35f2e32bfc30fd829065e03fc21b416a04c8388a0a2a641a80e3e67ffe0a2e1124f4101e551eeb6d5305568fa9bc22098700131bd502864a9dd451c81dff09a1f4fa800ab4414177be622"}}, {0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x2809}}, {0x28, &(0x7f0000001380)=@string={0x28, 0x3, "804b13a2fba58f35f1c3dad50d19640c71020e202a170749e78939ab8424159c95affaed17c4"}}, {0x4, &(0x7f00000013c0)=@lang_id={0x4, 0x3, 0x411}}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200a82, 0x0) 0s ago: executing program 8 (id=2179): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000058c0)=ANY=[@ANYBLOB="fc01000013000100000000000000000000000000000000000000000000000001fc0200000000000000000000000000014e24000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x11}, 0x0) kernel console output (not intermixed with test programs): [ 79.336190][ T407] ums-usbat 1-1:0.230: probe with driver ums-usbat failed with error -5 [ 79.362109][ T407] usb 1-1: USB disconnect, device number 20 [ 79.378070][ T10] HID 045e:07da: Invalid code 65791 type 1 [ 79.391812][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000F/input/input23 [ 79.421433][ T10] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID vff.ff Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 80.185109][ T10] usb 5-1: USB disconnect, device number 9 [ 80.418636][ T2345] rust_binder: Error while translating object. [ 80.418679][ T2345] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 80.425736][ T2345] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:588 [ 80.530770][ T2352] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 80.547241][ T2352] rust_binder: Write failure EINVAL in pid:152 [ 80.649612][ T2350] rust_binder: Write failure EINVAL in pid:593 [ 80.736925][ T2361] rust_binder: Error while translating object. [ 80.743306][ T2361] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 80.749511][ T2361] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:598 [ 80.789088][ T36] audit: type=1400 audit(1750464240.871:452): avc: denied { checkpoint_restore } for pid=2362 comm="syz.4.617" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 80.834893][ T2367] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:321 [ 80.898178][ T2369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 80.913489][ T2371] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 80.921517][ T2369] rust_binder: Got transaction with invalid offset. [ 80.930186][ T2371] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:324 [ 80.943443][ T2369] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 80.952628][ T2369] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:602 [ 80.954893][ T2371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.000649][ T2371] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 81.014088][ T2371] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:324 [ 81.094842][ T2378] rust_binder: Error while translating object. [ 81.124989][ T2378] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 81.131228][ T2378] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:327 [ 81.187572][ T2384] binder: Unknown parameter '7' [ 81.447711][ T31] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 81.629269][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 81.640439][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.659517][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 81.682778][ T31] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 81.700022][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.710985][ T31] usb 5-1: config 0 descriptor?? [ 81.880658][ T2399] overlay: ./file0 is not a directory [ 81.897455][ T36] audit: type=1400 audit(1750464241.971:453): avc: denied { create } for pid=2398 comm="syz.0.630" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 82.125587][ T31] HID 045e:07da: Invalid code 65791 type 1 [ 82.142368][ T31] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0010/input/input24 [ 82.175610][ T31] microsoft 0003:045E:07DA.0010: input,hidraw0: USB HID vff.7f Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 82.234237][ T2404] rust_binder: Write failure EINVAL in pid:629 [ 82.279028][ T2412] mmap: syz.0.634 (2412) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 82.370265][ T2415] rust_binder: Error while translating object. [ 82.370321][ T2415] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 82.376833][ T2415] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:164 [ 82.455720][ T36] audit: type=1400 audit(1750464242.527:454): avc: denied { bind } for pid=2420 comm="syz.6.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 82.513297][ T2425] overlayfs: failed to resolve './file1/file0': -2 [ 82.520879][ T36] audit: type=1400 audit(1750464242.596:455): avc: denied { accept } for pid=2424 comm="syz.6.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 82.546835][ T31] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 82.698061][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 82.704421][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.715760][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.725928][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 82.740658][ T31] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 82.751371][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.760553][ T31] usb 1-1: config 0 descriptor?? [ 82.921705][ T2433] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:181 [ 82.947466][ T407] usb 5-1: USB disconnect, device number 10 [ 83.173786][ T31] microsoft 0003:045E:07DA.0011: unknown main item tag 0x1 [ 83.193648][ T31] microsoft 0003:045E:07DA.0011: unknown global tag 0xc [ 83.201078][ T31] microsoft 0003:045E:07DA.0011: item 0 0 1 12 parsing failed [ 83.215612][ T31] microsoft 0003:045E:07DA.0011: parse failed [ 83.221799][ T31] microsoft 0003:045E:07DA.0011: probe with driver microsoft failed with error -22 [ 83.385882][ T31] usb 1-1: USB disconnect, device number 21 [ 83.592753][ T2474] rust_binder: Write failure EINVAL in pid:345 [ 83.675563][ T36] audit: type=1400 audit(1750464243.737:456): avc: denied { associate } for pid=2482 comm="syz.4.656" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 83.907285][ T1425] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 84.042367][ T2495] kvm: apic: phys broadcast and lowest prio [ 84.048770][ T36] audit: type=1400 audit(1750464244.114:457): avc: denied { name_bind } for pid=2494 comm="syz.4.661" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 84.060326][ T2496] random: crng reseeded on system resumption [ 84.098701][ T1425] usb 7-1: Using ep0 maxpacket: 16 [ 84.109784][ T1425] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.120908][ T1425] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 84.133913][ T1425] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 84.143074][ T1425] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.152291][ T1425] usb 7-1: config 0 descriptor?? [ 84.264374][ T2498] rust_binder: Write failure EINVAL in pid:358 [ 84.389347][ T2501] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:360 [ 84.574104][ T1425] HID 045e:07da: Invalid code 65791 type 1 [ 84.595851][ T1425] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0012/input/input25 [ 84.610730][ T1425] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v11.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 84.811206][ T2504] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:640 [ 84.843209][ T2510] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.852553][ T2510] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.859256][ T2510] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.866064][ T2510] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.872671][ T2510] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.879498][ T2510] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.886169][ T2510] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.892764][ T2510] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.906351][ T2510] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.906381][ T2510] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.912987][ T2510] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.926770][ T2510] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.926802][ T2510] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.934517][ T2509] rust_binder: Error in use_page_slow: ESRCH [ 84.947635][ T2509] rust_binder: use_range failure ESRCH [ 84.947665][ T2509] rust_binder: Failed to allocate buffer. len:208, is_oneway:false [ 84.953223][ T2510] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.968357][ T2509] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 84.968417][ T2509] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:645 [ 85.017482][ T2517] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.027097][ T2517] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 85.050107][ T2519] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 85.058151][ T2519] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:655 [ 85.219834][ T2533] rust_binder: Write failure EFAULT in pid:363 [ 85.370877][ T2535] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 85.386138][ T407] usb 7-1: USB disconnect, device number 9 [ 85.395706][ T2535] rust_binder: Write failure EINVAL in pid:365 [ 85.397977][ T443] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 85.508489][ T2539] input: syz0 as /devices/virtual/input/input26 [ 85.541396][ T2539] syzkaller0: entered allmulticast mode [ 85.550621][ T36] audit: type=1400 audit(1750464245.604:458): avc: denied { relabelfrom } for pid=2538 comm="syz.4.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 85.571501][ T36] audit: type=1400 audit(1750464245.604:459): avc: denied { relabelto } for pid=2538 comm="syz.4.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 85.610377][ T443] usb 1-1: unable to get BOS descriptor or descriptor too short [ 85.618387][ T443] usb 1-1: not running at top speed; connect to a high speed hub [ 85.628646][ T443] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 85.641397][ T443] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 85.654167][ T443] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.669925][ T443] usb 1-1: Product: syz [ 85.674211][ T443] usb 1-1: Manufacturer: syz [ 85.678882][ T443] usb 1-1: SerialNumber: syz [ 85.873457][ T2549] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:379 [ 85.913807][ T443] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 85.934555][ T36] audit: type=1400 audit(1750464245.971:460): avc: denied { accept } for pid=2551 comm="syz.4.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 85.941682][ T2553] 9pnet_virtio: no channels available for device syz [ 85.956145][ T443] usb 1-1: unit 244 not found! [ 85.977791][ T443] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 85.994080][ T443] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 86.014466][ T443] usb 1-1: USB disconnect, device number 22 [ 86.020818][ T36] audit: type=1400 audit(1750464246.051:461): avc: denied { write } for pid=2555 comm="syz.6.682" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.043245][ T36] audit: type=1400 audit(1750464246.051:462): avc: denied { remove_name } for pid=2555 comm="syz.6.682" name="binder0" dev="binder" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.066642][ T36] audit: type=1400 audit(1750464246.051:463): avc: denied { unlink } for pid=2555 comm="syz.6.682" name="binder0" dev="binder" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 86.137696][ T2562] rust_binder: Error while translating object. [ 86.137724][ T2562] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 86.144323][ T2562] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:238 [ 86.181024][ T2566] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 86.188197][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 86.204360][ T2566] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:242 [ 86.295876][ T2587] fuse: Bad value for 'fd' [ 86.357959][ T305] bridge_slave_1: left allmulticast mode [ 86.363748][ T305] bridge_slave_1: left promiscuous mode [ 86.369457][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.377587][ T305] bridge_slave_0: left allmulticast mode [ 86.383264][ T305] bridge_slave_0: left promiscuous mode [ 86.389150][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.446036][ T2599] rust_binder: Write failure EINVAL in pid:669 [ 86.489393][ C1] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 86.524974][ T1425] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 86.549362][ T305] veth1_macvtap: left promiscuous mode [ 86.554992][ T305] veth0_vlan: left promiscuous mode [ 86.617770][ T2602] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.624886][ T2602] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.632096][ T2602] bridge_slave_0: entered allmulticast mode [ 86.638444][ T2602] bridge_slave_0: entered promiscuous mode [ 86.644896][ T2602] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.652063][ T2602] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.659339][ T2602] bridge_slave_1: entered allmulticast mode [ 86.668986][ T2602] bridge_slave_1: entered promiscuous mode [ 86.678147][ T1425] usb 5-1: Using ep0 maxpacket: 16 [ 86.684416][ T1425] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.695844][ T1425] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 86.709226][ T1425] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 86.718405][ T1425] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.730166][ T1425] usb 5-1: config 0 descriptor?? [ 86.794273][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.801395][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.811090][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.818185][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.852193][ T2602] veth0_vlan: entered promiscuous mode [ 86.858443][ T2608] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 86.869673][ T2602] veth1_macvtap: entered promiscuous mode [ 86.923337][ T2612] rust_binder: Write failure EINVAL in pid:2 [ 86.969675][ T2608] SELinux: failed to load policy [ 87.049555][ T2620] syzkaller0: entered allmulticast mode [ 87.122633][ T2630] overlayfs: missing 'lowerdir' [ 87.141168][ T1425] HID 045e:07da: Invalid code 65791 type 1 [ 87.150423][ T1425] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0013/input/input27 [ 87.163147][ T1425] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v18.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 87.349938][ T31] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 87.369156][ T2646] syz.5.711 uses obsolete (PF_INET,SOCK_PACKET) [ 87.376071][ T2646] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 87.392982][ T2648] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 87.401136][ T2648] rust_binder: Read failure Err(EFAULT) in pid:268 [ 87.433613][ T2650] overlay: Unknown parameter 'smackfsfloor' [ 87.511659][ T31] usb 8-1: Using ep0 maxpacket: 16 [ 87.521295][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.532529][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.542839][ T31] usb 8-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 87.551941][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.560785][ T31] usb 8-1: config 0 descriptor?? [ 87.660102][ T2659] binder: Bad value for 'stats' [ 87.952133][ T407] usb 5-1: USB disconnect, device number 11 [ 87.978114][ T31] usbhid 8-1:0.0: can't add hid device: -71 [ 87.987158][ T31] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 87.997686][ T31] usb 8-1: USB disconnect, device number 2 [ 88.105305][ T2635] overlayfs: statfs failed on './file0' [ 88.133773][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 88.133792][ T36] audit: type=1400 audit(1750464248.168:470): avc: denied { append } for pid=2669 comm="syz.0.721" name="pfkey" dev="proc" ino=4026532442 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 88.135782][ T2670] binder: Bad value for 'defcontext' [ 88.182002][ T2673] SELinux: security_context_str_to_sid () failed with errno=-22 [ 88.247421][ T36] audit: type=1400 audit(1750464248.288:471): avc: denied { map } for pid=2683 comm="syz.0.725" path="socket:[23560]" dev="sockfs" ino=23560 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 88.366442][ T2696] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=320745794 (2565966352 ns) > initial count (325012024 ns). Using initial count to start timer. [ 88.503252][ T2703] netlink: 188 bytes leftover after parsing attributes in process `syz.4.730'. [ 88.522781][ T2710] overlayfs: missing 'workdir' [ 88.540270][ T2712] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 88.540289][ T2712] rust_binder: Error while translating object. [ 88.549332][ T2712] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 88.555560][ T2712] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:730 [ 88.592625][ T2716] tun0: tun_chr_ioctl cmd 1074025675 [ 88.607449][ T2716] tun0: persist enabled [ 88.611897][ T2716] tun0: tun_chr_ioctl cmd 1074025675 [ 88.617264][ T2716] tun0: persist enabled [ 88.622038][ T2716] fuse: Unknown parameter '000000000000000000000050x0000000000000004' [ 88.637334][ T36] audit: type=1400 audit(1750464248.665:472): avc: denied { listen } for pid=2715 comm="syz.4.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.640017][ T2716] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 88.659156][ T36] audit: type=1400 audit(1750464248.665:473): avc: denied { append } for pid=2715 comm="syz.4.735" name="binder1" dev="binder" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 88.666225][ T2716] rust_binder: Write failure EINVAL in pid:400 [ 88.759700][ T2732] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 88.777583][ T2732] rust_binder: Error in use_page_slow: ESRCH [ 88.782140][ T36] audit: type=1400 audit(1750464248.815:474): avc: denied { map } for pid=2733 comm="syz.7.740" path="socket:[23113]" dev="sockfs" ino=23113 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.784199][ T2732] rust_binder: use_range failure ESRCH [ 88.813955][ T2732] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 88.820215][ T2736] rust_binder: Error while translating object. [ 88.827617][ T2732] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 88.828432][ T2736] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 88.834874][ T2732] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:407 [ 88.845064][ T2736] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:25 [ 88.870811][ T2738] syzkaller0: entered allmulticast mode [ 88.892955][ T2738] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 88.994929][ T2747] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 89.013952][ T2747] rust_binder: Error in use_page_slow: ESRCH [ 89.020492][ T2747] rust_binder: use_range failure ESRCH [ 89.026602][ T2747] rust_binder: Failed to allocate buffer. len:88, is_oneway:false [ 89.032300][ T2747] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 89.040166][ T2747] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:411 [ 89.129816][ T31] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 89.224628][ T2750] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 89.232857][ T2750] rust_binder: Error in use_page_slow: ESRCH [ 89.232877][ T2750] rust_binder: use_range failure ESRCH [ 89.238892][ T2750] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 89.244486][ T2750] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 89.252435][ T2750] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:414 [ 89.270595][ T31] usb 8-1: device descriptor read/64, error -71 [ 89.367677][ T2752] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 89.376031][ T2752] rust_binder: Write failure EINVAL in pid:416 [ 89.414998][ T36] audit: type=1400 audit(1750464249.441:475): avc: denied { map } for pid=2754 comm="syz.4.748" path="socket:[24050]" dev="sockfs" ino=24050 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 89.433937][ T2758] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 89.446020][ T36] audit: type=1400 audit(1750464249.441:476): avc: denied { accept } for pid=2754 comm="syz.4.748" path="socket:[24050]" dev="sockfs" ino=24050 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 89.496985][ T2757] rust_binder: Error in use_page_slow: ESRCH [ 89.497030][ T2757] rust_binder: use_range failure ESRCH [ 89.503202][ T2757] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 89.508719][ T2757] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 89.516678][ T2757] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:421 [ 89.541942][ T31] usb 8-1: device descriptor read/64, error -71 [ 89.561387][ T2764] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 89.562232][ T2764] rust_binder: Error in use_page_slow: ESRCH [ 89.568708][ T2764] rust_binder: use_range failure ESRCH [ 89.574952][ T2764] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 89.580448][ T2764] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 89.588408][ T2764] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:428 [ 89.628430][ T2769] input: syz0 as /devices/virtual/input/input29 [ 89.655229][ T2769] binder: Bad value for 'max' [ 89.775209][ T2771] binder: Bad value for 'stats' [ 89.783995][ T2771] fuseblk: Bad value for 'user_id' [ 89.789141][ T2771] fuseblk: Bad value for 'user_id' [ 89.793453][ T31] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 89.819905][ T2776] overlayfs: failed to resolve './file1/file0': -2 [ 89.827964][ T36] audit: type=1400 audit(1750464249.859:477): avc: denied { remount } for pid=2775 comm="syz.4.756" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 89.944010][ T31] usb 8-1: device descriptor read/64, error -71 [ 90.054409][ T2803] input: syz1 as /devices/virtual/input/input30 [ 90.185143][ T31] usb 8-1: device descriptor read/64, error -71 [ 90.315861][ T31] usb usb8-port1: attempt power cycle [ 90.356094][ T2812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.356590][ T2812] rust_binder: Error in use_page_slow: ESRCH [ 90.363030][ T2812] rust_binder: use_range failure ESRCH [ 90.369072][ T2812] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 90.374614][ T2812] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 90.382648][ T2812] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:464 [ 90.414982][ T2815] netlink: 'syz.4.768': attribute type 4 has an invalid length. [ 90.437242][ T2815] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 90.447607][ T2815] SELinux: failed to load policy [ 90.478079][ T2821] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.541156][ T2823] netlink: 24 bytes leftover after parsing attributes in process `syz.4.771'. [ 90.568537][ T2823] kvm: apic: phys broadcast and lowest prio [ 90.574768][ T2823] binder: Bad value for 'defcontext' [ 90.629888][ T36] audit: type=1326 audit(1750464250.655:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2824 comm="syz.4.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b28f8e929 code=0x7ffc0000 [ 90.653768][ T36] audit: type=1326 audit(1750464250.655:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2824 comm="syz.4.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f2b28f8e929 code=0x7ffc0000 [ 90.677114][ T31] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 90.698721][ T31] usb 8-1: device descriptor read/8, error -71 [ 90.744981][ T2832] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.752643][ T2832] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 90.752675][ T2832] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 90.760737][ T2832] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:483 [ 90.818354][ T2835] block device autoloading is deprecated and will be removed. [ 90.835492][ T2835] syz.4.776: attempt to access beyond end of device [ 90.835492][ T2835] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 90.850401][ T31] usb 8-1: device descriptor read/8, error -71 [ 90.881711][ T2842] rust_binder: Error while translating object. [ 90.881749][ T2842] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 90.887955][ T2842] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:293 [ 90.898146][ T2842] rust_binder: Write failure EINVAL in pid:293 [ 90.908140][ T2843] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.933892][ T2845] kvm: apic: phys broadcast and lowest prio [ 90.946996][ T2845] binder: Bad value for 'max' [ 91.039412][ T2849] __vm_enough_memory: pid: 2849, comm: syz.5.781, bytes: 281474976845824 not enough memory for the allocation [ 91.089520][ T31] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 91.110845][ T31] usb 8-1: device descriptor read/8, error -71 [ 91.224008][ T2854] rust_binder: Failed to allocate buffer. len:48, is_oneway:false [ 91.251297][ T31] usb 8-1: device descriptor read/8, error -71 [ 91.370858][ T31] usb usb8-port1: unable to enumerate USB device [ 91.747497][ T2867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.786'. [ 91.958778][ T2883] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.959519][ T2883] rust_binder: Error in use_page_slow: ESRCH [ 91.966112][ T2883] rust_binder: use_range failure ESRCH [ 91.972145][ T2883] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 91.977737][ T2883] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 91.985709][ T2883] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:514 [ 92.048221][ T2887] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.077998][ T2891] overlayfs: failed to resolve './file1/file0': -2 [ 92.113206][ T2897] overlayfs: missing 'lowerdir' [ 92.120617][ T2898] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 92.129814][ T2898] rust_binder: Write failure EINVAL in pid:313 [ 92.145208][ T2905] binder: Unknown parameter 'defcontext01777777777777777777777' [ 92.160351][ T2906] binder: Unknown parameter 'defcontext01777777777777777777777' [ 92.181783][ T2908] rust_binder: Write failure EFAULT in pid:320 [ 92.284481][ T2915] rust_binder: Write failure EINVAL in pid:327 [ 92.290852][ T2915] rust_binder: Write failure EINVAL in pid:327 [ 92.297215][ T2915] rust_binder: Write failure EFAULT in pid:327 [ 92.298020][ T2916] rust_binder: Write failure EFAULT in pid:327 [ 92.315300][ T407] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 92.329808][ T2919] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.385228][ T31] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 92.397430][ T2919] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:330 [ 92.399360][ T2918] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 92.408611][ T2918] rust_binder: Error in use_page_slow: EBUSY [ 92.421403][ T2918] rust_binder: use_range failure EBUSY [ 92.427472][ T2918] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 92.433043][ T2918] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 92.440760][ T2918] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 92.450187][ T2918] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:330 [ 92.462046][ T407] usb 8-1: device descriptor read/64, error -71 [ 92.484957][ T2925] rust_binder: Write failure EFAULT in pid:337 [ 92.555899][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 92.568597][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 92.575347][ T31] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 92.584557][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.596267][ T31] usb 5-1: config 0 descriptor?? [ 92.736860][ T407] usb 8-1: device descriptor read/64, error -71 [ 92.892146][ T2930] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.892179][ T2930] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.987757][ T407] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 93.148398][ T407] usb 8-1: device descriptor read/64, error -71 [ 93.207417][ T2904] random: crng reseeded on system resumption [ 93.233635][ T67] usb 5-1: USB disconnect, device number 12 [ 93.389375][ T407] usb 8-1: device descriptor read/64, error -71 [ 93.499874][ T407] usb usb8-port1: attempt power cycle [ 93.499886][ T1168] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 93.661652][ T1168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.672713][ T1168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.682509][ T1168] usb 1-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 93.691622][ T1168] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.700561][ T1168] usb 1-1: config 0 descriptor?? [ 93.841170][ T407] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 93.850315][ T2956] binder: Unknown parameter './binderfs' [ 93.857080][ T36] kauditd_printk_skb: 37 callbacks suppressed [ 93.857097][ T36] audit: type=1400 audit(1750464253.861:517): avc: denied { mounton } for pid=2955 comm="syz.4.813" path="/180/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 93.886919][ T407] usb 8-1: device descriptor read/8, error -71 [ 93.908411][ T2963] binder: Unknown parameter '/ (EzA?-&Sl$&wh%RccIE#֜)訽Khn>9+{e}iO&! Ĥ_'AR(L.W8vBz' [ 93.927938][ T2963] binder: Unknown parameter '/ (EzA?-&Sl$&wh%RccIE#֜)訽Khn>9+{e}iO&! Ĥ_'AR(L.W8vBz' [ 93.944598][ T2963] binder: Unknown parameter '/ (EzA?-&Sl$&wh%RccIE#֜)訽Khn>9+{e}iO&! Ĥ_'AR(L.W8vBz' [ 93.961033][ T2963] binder: Unknown parameter '/ (EzA?-&Sl$&wh%RccIE#֜)訽Khn>9+{e}iO&! Ĥ_'AR(L.W8vBz' [ 93.977393][ T2963] binder: Unknown parameter '/ (EzA?-&Sl$&wh%RccIE#֜)訽Khn>9+{e}iO&! Ĥ_'AR(L.W8vBz' [ 93.993650][ T2963] binder: Unknown parameter '/ (EzA?-&Sl$&wh%RccIE#֜)訽Khn>9+{e}iO&! Ĥ_'AR(L.W8vBz' [ 94.009894][ T2963] binder: Unknown parameter '/ (EzA?-&Sl$&wh%RccIE#֜)訽Khn>9+{e}iO&! Ĥ_'AR(L.W8vBz' [ 94.026148][ T2963] binder: Unknown parameter '/ (EzA?-&Sl$&wh%RccIE#֜)訽Khn>9+{e}iO&! Ĥ_'AR(L.W8vBz' [ 94.042357][ T2963] binder: Unknown parameter '/ (EzA?-&Sl$&wh%RccIE#֜)訽Khn>9+{e}iO&! Ĥ_'AR(L.W8vBz' [ 94.053097][ T407] usb 8-1: device descriptor read/8, error -71 [ 94.058917][ T2963] binder: Unknown parameter '/ (EzA?-&Sl$&wh%RccIE#֜)訽Khn>9+{e}iO&! Ĥ_'AR(L.W8vBz' [ 94.080740][ T2963] binder: Unknown parameter '/ (EzA?-&Sl$&wh%RccIE#֜)訽Khn>9+{e}iO&! Ĥ_'AR(L.W8vBz' [ 94.097065][ T2963] binder: Unknown parameter '/ (EzA?-&Sl$&wh%RccIE#֜)訽Khn>9+{e}iO&! Ĥ_'AR(L.W8vBz' [ 94.113586][ T2963] binder: Unknown parameter '/ (EzA?-&Sl$&wh%RccIE#֜)訽Khn>9+{e}iO&! Ĥ_'AR(L.W8vBz' [ 94.127873][ T1168] elo 0003:04E7:0030.0015: unknown main item tag 0x0 [ 94.129943][ T2963] binder: Unknown parameter '/ (EzA?-&Sl$&wh%RccIE#֜)訽Khn>9+{e}iO&! Ĥ_'AR(L.W8vBz' [ 94.136856][ T1168] elo 0003:04E7:0030.0015: unknown main item tag 0x0 [ 94.153071][ T2963] binder: Unknown parameter '/ (EzA?-&Sl$&wh%RccIE#֜)訽Khn>9+{e}iO&! Ĥ_'AR(L.W8vBz' [ 94.159357][ T1168] elo 0003:04E7:0030.0015: unknown main item tag 0x0 [ 94.175882][ T2963] binder: Unknown parameter '/ (EzA?-&Sl$&wh%RccIE#֜)訽Khn>9+{e}iO&! Ĥ_'AR(L.W8vBz' [ 94.182206][ T1168] elo 0003:04E7:0030.0015: unknown main item tag 0x0 [ 94.198194][ T2963] binder: Unknown parameter '/ (EzA?-&Sl$&wh%RccIE#֜)訽Khn>9+{e}iO&! Ĥ_'AR(L.W8vBz' [ 94.204817][ T1168] elo 0003:04E7:0030.0015: unknown main item tag 0x0 [ 94.221018][ T2963] binder: Unknown parameter '/ (EzA?-&Sl$&wh%RccIE#֜)訽Khn>9+{e}iO&! Ĥ_'AR(L.W8vBz' [ 94.227611][ T1168] elo 0003:04E7:0030.0015: unknown main item tag 0x0 [ 94.244177][ T2963] binder: Unknown parameter '/ (EzA?-&Sl$&wh%RccIE#֜)訽Khn>9+{e}iO&! Ĥ_'AR(L.W8vBz' [ 94.250376][ T1168] elo 0003:04E7:0030.0015: unknown main item tag 0x0 [ 94.266423][ T2963] binder: Unknown parameter '/ (EzA?-&Sl$&wh%RccIE#֜)訽Khn>9+{e}iO&! Ĥ_'AR(L.W8vBz' [ 94.274451][ T1168] elo 0003:04E7:0030.0015: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.0-1/input0 [ 94.289058][ T2963] binder: Unknown parameter '/ (EzA?-&Sl$&wh%RccIE#֜)訽Khn>9+{e}iO&! Ĥ_'AR(L.W8vBz' [ 94.315880][ T407] usb 8-1: new low-speed USB device number 10 using dummy_hcd [ 94.323468][ T31] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 94.331399][ T2963] binder: Unknown parameter '/ (EzA?-&Sl$&wh%RccIE#֜)訽Khn>9+{e}iO&! Ĥ_'AR(L.W8vBz' [ 94.347998][ T2963] binder: Unknown parameter '/ (EzA?-&Sl$&wh%RccIE#֜)訽Khn>9+{e}iO&! Ĥ_'AR(L.W8vBz' [ 94.348988][ T407] usb 8-1: device descriptor read/8, error -71 [ 94.370474][ T2963] binder: Unknown parameter '/ (EzA?-&Sl$&wh%RccIE#֜)訽Khn>9+{e}iO&! Ĥ_'AR(L.W8vBz' [ 94.377727][ T2954] SELinux: security_context_str_to_sid () failed with errno=-22 [ 94.386687][ T2963] binder: Unknown parameter '/ (EzA?-&Sl$&wh%RccIE#֜)訽Khn>9+{e}iO&! Ĥ_'AR(L.W8vBz' [ 94.396433][ T1168] usb 1-1: USB disconnect, device number 23 [ 94.410462][ T2963] binder: Unknown parameter '/ (EzA?-&Sl$&wh%RccIE#֜)訽Khn>9+{e}iO&! Ĥ_'AR(L.W8vBz' [ 94.432523][ T2963] binder: Unknown parameter '/ (EzA?-&Sl$&wh%RccIE#֜)訽Khn>9+{e}iO&! Ĥ_'AR(L.W8vBz' [ 94.448762][ T2963] binder: Unknown parameter '/ (EzA?-&Sl$&wh%RccIE#֜)訽Khn>9+{e}iO&! Ĥ_'AR(L.W8vBz' [ 94.464928][ T2963] binder: Unknown parameter '/ (EzA?-&Sl$&wh%RccIE#֜)訽Khn>9+{e}iO&! Ĥ_'AR(L.W8vBz' [ 94.481105][ T2963] binder: Unknown parameter '/ (EzA?-&Sl$&wh%RccIE#֜)訽Khn>9+{e}iO&! Ĥ_'AR(L.W8vBz' [ 94.497403][ T2963] binder: Unknown parameter '/ (EzA?-&Sl$&wh%RccIE#֜)訽Khn>9+{e}iO&! Ĥ_'AR(L.W8vBz' [ 94.513723][ T2963] binder: Unknown parameter '/ (EzA?-&Sl$&wh%RccIE#֜)訽Khn>9+{e}iO&! Ĥ_'AR(L.W8vBz' [ 94.530127][ T2963] binder: Unknown parameter '/ (EzA?-&Sl$&wh%RccIE#֜)訽Khn>9+{e}iO&! Ĥ_'AR(L.W8vBz' [ 94.530248][ T407] usb 8-1: device descriptor read/8, error -71 [ 94.552845][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 94.563738][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 94.576840][ T31] usb 5-1: New USB device found, idVendor=1477, idProduct=1024, bcdDevice= 0.00 [ 94.587352][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.596307][ T31] usb 5-1: config 0 descriptor?? [ 94.601647][ T2968] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 94.655891][ T407] usb usb8-port1: unable to enumerate USB device [ 94.656268][ T2976] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.666135][ T2978] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:367 [ 94.803027][ T2980] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.813069][ T2980] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 94.819588][ T2980] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:371 [ 94.983505][ T2996] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:39 [ 94.993716][ T2996] rust_binder: Error while translating object. [ 95.003363][ T2996] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 95.009964][ T2996] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:39 [ 95.021432][ T31] hid-generic 0003:1477:1024.0016: unknown main item tag 0x0 [ 95.053684][ T31] hid-generic 0003:1477:1024.0016: unknown main item tag 0x0 [ 95.062164][ T31] hid-generic 0003:1477:1024.0016: unknown main item tag 0x0 [ 95.069644][ T31] hid-generic 0003:1477:1024.0016: unknown main item tag 0x0 [ 95.077184][ T31] hid-generic 0003:1477:1024.0016: unknown main item tag 0x0 [ 95.084622][ T31] hid-generic 0003:1477:1024.0016: unknown main item tag 0x0 [ 95.092105][ T31] hid-generic 0003:1477:1024.0016: unknown main item tag 0x0 [ 95.099547][ T31] hid-generic 0003:1477:1024.0016: unknown main item tag 0x0 [ 95.107003][ T31] hid-generic 0003:1477:1024.0016: unknown main item tag 0x0 [ 95.114423][ T31] hid-generic 0003:1477:1024.0016: unknown main item tag 0x0 [ 95.121874][ T31] hid-generic 0003:1477:1024.0016: unknown main item tag 0x0 [ 95.129317][ T31] hid-generic 0003:1477:1024.0016: unknown main item tag 0x0 [ 95.136756][ T31] hid-generic 0003:1477:1024.0016: unknown main item tag 0x0 [ 95.144172][ T31] hid-generic 0003:1477:1024.0016: unknown main item tag 0x0 [ 95.151717][ T31] hid-generic 0003:1477:1024.0016: unknown main item tag 0x0 [ 95.156066][ T36] audit: type=1400 audit(1750464255.157:518): avc: denied { setattr } for pid=3004 comm="syz.5.828" name="tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 95.159151][ T31] hid-generic 0003:1477:1024.0016: unknown main item tag 0x0 [ 95.189695][ T31] hid-generic 0003:1477:1024.0016: unknown main item tag 0x0 [ 95.197125][ T31] hid-generic 0003:1477:1024.0016: unknown main item tag 0x0 [ 95.204528][ T31] hid-generic 0003:1477:1024.0016: unknown main item tag 0x0 [ 95.211958][ T31] hid-generic 0003:1477:1024.0016: unknown main item tag 0x0 [ 95.219440][ T31] hid-generic 0003:1477:1024.0016: unknown main item tag 0x0 [ 95.226934][ T31] hid-generic 0003:1477:1024.0016: unknown main item tag 0x0 [ 95.234346][ T31] hid-generic 0003:1477:1024.0016: unknown main item tag 0x1 [ 95.241775][ T31] hid-generic 0003:1477:1024.0016: unknown main item tag 0x0 [ 95.249251][ T31] hid-generic 0003:1477:1024.0016: unknown main item tag 0x0 [ 95.256714][ T31] hid-generic 0003:1477:1024.0016: unknown main item tag 0x0 [ 95.264156][ T31] hid-generic 0003:1477:1024.0016: unknown main item tag 0x0 [ 95.271634][ T31] hid-generic 0003:1477:1024.0016: unknown main item tag 0x0 [ 95.279098][ T31] hid-generic 0003:1477:1024.0016: unknown main item tag 0x0 [ 95.286554][ T31] hid-generic 0003:1477:1024.0016: unknown main item tag 0x0 [ 95.293971][ T31] hid-generic 0003:1477:1024.0016: unknown main item tag 0x0 [ 95.301414][ T31] hid-generic 0003:1477:1024.0016: unknown main item tag 0x0 [ 95.308842][ T31] hid-generic 0003:1477:1024.0016: unknown main item tag 0x0 [ 95.316236][ T31] hid-generic 0003:1477:1024.0016: unknown main item tag 0x0 [ 95.323685][ T31] hid-generic 0003:1477:1024.0016: unknown main item tag 0x0 [ 95.331880][ T31] hid-generic 0003:1477:1024.0016: hidraw0: USB HID v0.00 Device [HID 1477:1024] on usb-dummy_hcd.4-1/input0 [ 95.487005][ T3013] tipc: New replicast peer: 255.255.255.255 [ 95.493370][ T3013] tipc: Enabled bearer , priority 10 [ 95.500394][ T3013] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 95.500685][ T3013] rust_binder: Error in use_page_slow: ESRCH [ 95.507467][ T3013] rust_binder: use_range failure ESRCH [ 95.513639][ T3013] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 95.519243][ T3016] rust_binder: Write failure EINVAL in pid:765 [ 95.519463][ T3013] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 95.533781][ T3013] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:389 [ 95.618443][ T3028] binder: Unknown parameter 'coyBLV"i5ntext' [ 95.711986][ T36] audit: type=1400 audit(1750464255.715:519): avc: denied { ioctl } for pid=3040 comm="syz.5.839" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 95.742868][ T3043] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 95.750591][ T3043] SELinux: failed to load policy [ 95.757484][ T36] audit: type=1400 audit(1750464255.754:520): avc: denied { execute } for pid=3042 comm="syz.0.840" path="/dev/bus/usb/009/001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 95.783043][ T3044] fuse: Bad value for 'max_read' [ 95.789567][ T36] audit: type=1400 audit(1750464255.784:521): avc: denied { mounton } for pid=3040 comm="syz.5.839" path="/138/file0" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 95.935860][ T3058] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 95.943328][ T3058] rust_binder: Write failure EINVAL in pid:46 [ 95.944042][ T3059] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 95.951896][ T3060] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 95.965882][ T3060] rust_binder: Write failure EINVAL in pid:46 [ 96.065660][ T3066] binder: Unknown parameter 'mAx' [ 96.091919][ T3073] binder: Bad value for 'context' [ 96.100126][ T36] audit: type=1400 audit(1750464256.093:522): avc: denied { map } for pid=3072 comm="syz.0.849" path="socket:[26889]" dev="sockfs" ino=26889 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.116533][ T3075] rust_binder: Write failure EFAULT in pid:804 [ 96.131585][ T36] audit: type=1400 audit(1750464256.093:523): avc: denied { read } for pid=3072 comm="syz.0.849" path="socket:[26889]" dev="sockfs" ino=26889 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.206598][ T3082] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:54 [ 96.305810][ T3090] rust_binder: Error in use_page_slow: ESRCH [ 96.305838][ T3090] rust_binder: use_range failure ESRCH [ 96.311900][ T3090] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 96.317400][ T3090] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 96.325287][ T3090] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:811 [ 96.507286][ T3101] rust_binder: Write failure EINVAL in pid:817 [ 96.560989][ T3107] 9pnet_fd: Insufficient options for proto=fd [ 96.601390][ T1168] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 96.610966][ T67] tipc: Node number set to 4126894497 [ 96.658557][ T3113] binder: Unknown parameter '18446744073709551615' [ 96.752859][ T1168] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.763037][ T1168] usb 8-1: config 0 has no interfaces? [ 96.768625][ T1168] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 96.777749][ T1168] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.786471][ T1168] usb 8-1: config 0 descriptor?? [ 96.831721][ T31] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 96.948352][ T443] usb 5-1: USB disconnect, device number 13 [ 96.984010][ T31] usb 1-1: not running at top speed; connect to a high speed hub [ 96.993446][ T31] usb 1-1: config 14 has an invalid interface number: 161 but max is 1 [ 97.001735][ T31] usb 1-1: config 14 has an invalid interface number: 131 but max is 1 [ 97.010093][ T31] usb 1-1: config 14 has an invalid interface number: 166 but max is 1 [ 97.018397][ T31] usb 1-1: config 14 has 3 interfaces, different from the descriptor's value: 2 [ 97.027544][ T31] usb 1-1: config 14 has no interface number 0 [ 97.038723][ T31] usb 1-1: config 14 has no interface number 1 [ 97.044965][ T31] usb 1-1: config 14 has no interface number 2 [ 97.051246][ T31] usb 1-1: config 14 interface 161 altsetting 7 has an endpoint descriptor with address 0x7C, changing to 0xC [ 97.063386][ T31] usb 1-1: config 14 interface 161 altsetting 7 endpoint 0xC has an invalid bInterval 183, changing to 4 [ 97.075211][ T31] usb 1-1: config 14 interface 161 altsetting 7 endpoint 0xC has invalid maxpacket 39413, setting to 1023 [ 97.086672][ T31] usb 1-1: config 14 interface 161 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 97.100113][ T31] usb 1-1: too many endpoints for config 14 interface 131 altsetting 214: 154, using maximum allowed: 30 [ 97.111443][ T31] usb 1-1: config 14 interface 131 altsetting 214 has 0 endpoint descriptors, different from the interface descriptor's value: 154 [ 97.125129][ T31] usb 1-1: config 14 interface 161 has no altsetting 0 [ 97.131996][ T31] usb 1-1: config 14 interface 131 has no altsetting 0 [ 97.138890][ T31] usb 1-1: config 14 interface 166 has no altsetting 0 [ 97.147960][ T31] usb 1-1: New USB device found, idVendor=1b3d, idProduct=01b3, bcdDevice=60.c2 [ 97.157673][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.165890][ T31] usb 1-1: Product: 䵕쏋ᰂ䩣颒鷸屰跤硴㺀㧒焷圝⇣眀䂊䊵鬆ౠ儵㕻Ϸ肉А螚㿳⢎ﭝ跡㨀缣䕹쪛绋Ƚ纃곦邮ᅆ嫊焌ͫ哚뜎撧캢蒱ꨙ빬쉘쬔ԛ⵷夋瘄浫ﷁ㶰凒去㦪騦㏌靫낹$୩혠ꧾ瘝៽맖虜佤扼ꦲ厂⼒뤷틛蝙⊯裃逴畫㽗晢ࡈ㨽綰衫祼苦᧜蘺휦鲅៊킏圧먦ᓭוּ穚훜㔿 [ 97.201830][ T31] usb 1-1: Manufacturer: ᇄ︟üਨ☃壀ᦀ낹ୃ㷮怇늒ㅘ䐣㋄ﾊ嫐昄佁⭹䚳祢摁ᙖર墎ᤪN♹ꀬ饿릶ې硤欺ꆍ菋ᬓ搛杁ሖ纵낂脔㪘孂䂖ꪐ귌ꏉ㜮评釕뵺셈韶脏ʨ⿎Ỳｎହ샕裞숍Ẏ鄓䷰얎ῳ셸䪑䨫⃓㤻얦꽺貝䷞ꌁ췾飖嶜语醿筪얍斬؅樆皲ު‱ꊌ⺔ᰒ [ 97.232092][ T407] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 97.346775][ T3125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.355323][ T3125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.383377][ T407] usb 6-1: Using ep0 maxpacket: 16 [ 97.389790][ T407] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.400794][ T443] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 97.408414][ T407] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 97.421774][ T407] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 97.430897][ T407] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.439880][ T407] usb 6-1: config 0 descriptor?? [ 97.448581][ T31] ftdi_sio 1-1:14.161: FTDI USB Serial Device converter detected [ 97.456789][ T31] ftdi_sio ttyUSB0: unknown device type: 0x60c2 [ 97.464803][ T31] ftdi_sio 1-1:14.131: FTDI USB Serial Device converter detected [ 97.472919][ T31] ftdi_sio ttyUSB1: unknown device type: 0x60c2 [ 97.480408][ T31] ftdi_sio 1-1:14.166: FTDI USB Serial Device converter detected [ 97.488499][ T31] ftdi_sio ttyUSB2: unknown device type: 0x60c2 [ 97.496433][ T31] usb 1-1: USB disconnect, device number 24 [ 97.504032][ T31] ftdi_sio 1-1:14.161: device disconnected [ 97.510506][ T31] ftdi_sio 1-1:14.131: device disconnected [ 97.517206][ T31] ftdi_sio 1-1:14.166: device disconnected [ 97.563938][ T443] usb 5-1: device descriptor read/64, error -71 [ 97.804663][ T443] usb 5-1: device descriptor read/64, error -71 [ 97.849665][ T407] HID 045e:07da: Invalid code 65791 type 1 [ 97.858737][ T407] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0017/input/input31 [ 97.871897][ T407] microsoft 0003:045E:07DA.0017: input,hidraw0: USB HID vfa.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 97.970630][ T3129] rust_binder: Write failure EFAULT in pid:823 [ 98.045407][ T443] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 98.185811][ T443] usb 5-1: device descriptor read/64, error -71 [ 98.215902][ T67] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 98.367545][ T67] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.378543][ T67] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.388425][ T67] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 98.401354][ T67] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 98.410441][ T67] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.419158][ T67] usb 1-1: config 0 descriptor?? [ 98.426519][ T443] usb 5-1: device descriptor read/64, error -71 [ 98.536909][ T443] usb usb5-port1: attempt power cycle [ 98.659570][ T407] usb 6-1: USB disconnect, device number 14 [ 98.827535][ T67] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 98.835033][ T67] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 98.842471][ T67] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 98.849913][ T67] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 98.857302][ T67] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 98.864736][ T67] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 98.872159][ T67] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 98.879851][ T67] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 98.887270][ T67] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 98.887830][ T443] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 98.894712][ T67] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 98.909871][ T67] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 98.918803][ T67] plantronics 0003:047F:FFFF.0018: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 98.919199][ T443] usb 5-1: device descriptor read/8, error -71 [ 99.059384][ T443] usb 5-1: device descriptor read/8, error -71 [ 99.180071][ T3134] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.180682][ T3134] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:419 [ 99.298967][ T443] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 99.330308][ T443] usb 5-1: device descriptor read/8, error -71 [ 99.380903][ T407] usb 8-1: USB disconnect, device number 11 [ 99.387539][ T3136] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 99.387573][ T3136] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:825 [ 99.460583][ T443] usb 5-1: device descriptor read/8, error -71 [ 99.580010][ T443] usb usb5-port1: unable to enumerate USB device [ 99.613624][ T3141] random: crng reseeded on system resumption [ 99.638889][ T3141] rust_binder: Error while translating object. [ 99.638919][ T3141] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 99.645208][ T3141] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:72 [ 99.655517][ T3141] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.723645][ T3143] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:74 [ 99.731363][ T3143] rust_binder: Read failure Err(EFAULT) in pid:74 [ 99.753213][ T3145] fuse: Bad value for 'group_id' [ 99.764716][ T3145] fuse: Bad value for 'group_id' [ 99.785386][ T3147] SELinux: security_context_str_to_sid () failed with errno=-22 [ 100.040951][ T67] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 100.088606][ T3159] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.201352][ T67] usb 8-1: Using ep0 maxpacket: 32 [ 100.214116][ T67] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 100.222199][ T67] usb 8-1: config 0 has no interface number 0 [ 100.228318][ T67] usb 8-1: config 0 interface 2 has no altsetting 0 [ 100.236347][ T67] usb 8-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 100.245454][ T67] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.253525][ T67] usb 8-1: Product: syz [ 100.257798][ T67] usb 8-1: Manufacturer: syz [ 100.262427][ T67] usb 8-1: SerialNumber: syz [ 100.267677][ T67] usb 8-1: config 0 descriptor?? [ 100.282273][ T407] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 100.431921][ T407] usb 6-1: Using ep0 maxpacket: 16 [ 100.438373][ T407] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.449360][ T407] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 100.462307][ T407] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 100.471361][ T407] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.480565][ T407] usb 6-1: config 0 descriptor?? [ 100.487655][ T3149] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.488310][ T3149] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 100.501997][ T3149] rust_binder: Write failure EINVAL in pid:80 [ 100.586457][ T67] usb 8-1: invalid MIDI in EP 0 [ 100.600564][ T67] snd-usb-audio 8-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 100.610841][ T67] usb 8-1: USB disconnect, device number 12 [ 100.773359][ T753] udevd[753]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 100.891201][ T407] HID 045e:07da: Invalid code 65791 type 1 [ 100.900215][ T407] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0019/input/input32 [ 100.912968][ T407] microsoft 0003:045E:07DA.0019: input,hidraw1: USB HID v5.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 100.986739][ T3164] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.007985][ T67] usb 1-1: USB disconnect, device number 25 [ 101.009866][ T3166] fuse: Bad value for 'group_id' [ 101.025772][ T3166] fuse: Bad value for 'group_id' [ 101.035379][ T3168] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 101.035412][ T3168] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:828 [ 101.062466][ T3171] No source specified [ 101.066492][ T3174] random: crng reseeded on system resumption [ 101.072102][ T3171] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 101.093588][ T3171] rust_binder: Write failure EINVAL in pid:830 [ 101.127711][ T3177] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 101.134091][ T3177] rust_binder: Error while translating object. [ 101.143357][ T3177] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 101.152584][ T3177] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:82 [ 101.159973][ T3180] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.179681][ T36] audit: type=1400 audit(1750464261.169:524): avc: denied { setattr } for pid=3175 comm="syz.7.890" name="NETLINK" dev="sockfs" ino=27454 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 101.182349][ T3180] rust_binder: Error in use_page_slow: ESRCH [ 101.210002][ T3180] rust_binder: use_range failure ESRCH [ 101.216244][ T3180] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 101.221750][ T3180] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 101.229783][ T3180] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:551 [ 101.251189][ T3185] Zero length message leads to an empty skb [ 101.266615][ T36] audit: type=1400 audit(1750464261.259:525): avc: denied { nlmsg_write } for pid=3181 comm="syz.0.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 101.340009][ T36] audit: type=1400 audit(1750464261.328:526): avc: denied { getattr } for pid=3181 comm="syz.0.893" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 101.340195][ T3187] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:836 [ 101.421970][ T3204] netlink: 112 bytes leftover after parsing attributes in process `syz.7.900'. [ 101.487504][ T3207] netlink: 'syz.4.901': attribute type 4 has an invalid length. [ 101.495777][ T3207] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.525179][ T3211] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.532257][ T3211] rust_binder: Error in use_page_slow: ESRCH [ 101.538846][ T3211] rust_binder: use_range failure ESRCH [ 101.545042][ T3211] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 101.550559][ T3211] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 101.558583][ T3211] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:565 [ 101.578398][ T3212] rust_binder: Write failure EINVAL in pid:96 [ 101.582763][ T3214] netlink: 96 bytes leftover after parsing attributes in process `syz.4.904'. [ 101.587980][ T3210] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 101.602954][ T3210] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 101.611041][ T3210] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 101.637209][ T36] audit: type=1400 audit(1750464261.628:527): avc: denied { execute } for pid=3217 comm="syz.7.906" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 101.676887][ T3222] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 101.695077][ T3222] rust_binder: Write failure EINVAL in pid:103 [ 101.717477][ T407] usb 6-1: USB disconnect, device number 15 [ 101.744726][ T3230] rust_binder: Write failure EFAULT in pid:106 [ 101.746571][ T3232] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.758515][ T3233] rust_binder: Error in use_page_slow: ESRCH [ 101.768358][ T3233] rust_binder: use_range failure ESRCH [ 101.774402][ T3233] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 101.780427][ T3233] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 101.790614][ T3233] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:576 [ 101.825688][ T3239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.869551][ T3241] binder: Unknown parameter 'maxyH' [ 101.901444][ T3242] rust_binder: Error in use_page_slow: ESRCH [ 101.901469][ T3242] rust_binder: use_range failure ESRCH [ 101.908664][ T3242] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 101.917566][ T3242] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 101.929790][ T3242] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:581 [ 102.038182][ T3248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.914'. [ 102.112042][ T3254] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.116065][ T3254] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:590 [ 102.143146][ T3248] binder: Bad value for 'stats' [ 102.251121][ T3258] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 102.266318][ T36] audit: type=1326 audit(1750464262.246:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3260 comm="syz.5.919" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f639738e929 code=0x0 [ 102.366103][ T3266] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 102.413162][ T3268] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.464873][ T3276] rust_binder: Error in use_page_slow: ESRCH [ 102.472939][ T3272] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 102.476934][ T3276] rust_binder: use_range failure ESRCH [ 102.491472][ T3272] rust_binder: Write failure EINVAL in pid:843 [ 102.494360][ T3276] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 102.508023][ T3276] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 102.516906][ T3276] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:597 [ 102.554767][ T3282] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 102.637277][ T3288] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.646239][ T36] audit: type=1400 audit(1750464262.625:529): avc: denied { mounton } for pid=3287 comm="syz.0.930" path="/proc/850/cgroup" dev="proc" ino=28878 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 102.695993][ T36] audit: type=1400 audit(1750464262.625:530): avc: denied { remount } for pid=3287 comm="syz.0.930" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 102.723239][ T3295] netlink: 16 bytes leftover after parsing attributes in process `syz.0.931'. [ 102.769155][ T36] audit: type=1400 audit(1750464262.755:531): avc: denied { bind } for pid=3297 comm="syz.7.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 102.846873][ T3305] binder: Unknown parameter '`' [ 102.870360][ T3307] rust_binder: Error while translating object. [ 102.870395][ T3307] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 102.876623][ T3307] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:447 [ 102.886756][ T3309] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.902595][ T3308] rust_binder: Error while translating object. [ 102.902640][ T3308] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 102.909111][ T3308] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:447 [ 102.935539][ T3313] binder: Unknown parameter 'permit_directio' [ 103.078388][ T407] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 103.144597][ T3331] binder: Unknown parameter 'defcontext01777777777777777777777' [ 103.228458][ T1168] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 103.238521][ T407] usb 1-1: Using ep0 maxpacket: 32 [ 103.245085][ T407] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 103.259858][ T407] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 103.280939][ T407] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.289131][ T36] audit: type=1400 audit(1750464263.264:532): avc: denied { getopt } for pid=3336 comm="syz.4.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 103.315271][ T407] usb 1-1: Product: syz [ 103.320093][ T407] usb 1-1: Manufacturer: syz [ 103.324739][ T407] usb 1-1: SerialNumber: syz [ 103.331382][ T407] usb 1-1: config 0 descriptor?? [ 103.354060][ T3343] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.388830][ T1168] usb 6-1: Invalid ep0 maxpacket: 16 [ 103.529060][ T1168] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 103.545382][ T3303] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 103.545406][ T3303] rust_binder: Read failure Err(EFAULT) in pid:857 [ 103.555078][ T67] usb 1-1: USB disconnect, device number 26 [ 103.565738][ T3363] netlink: 40 bytes leftover after parsing attributes in process `syz.4.958'. [ 103.619267][ T407] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 103.679439][ T1168] usb 6-1: Invalid ep0 maxpacket: 16 [ 103.684934][ T1168] usb usb6-port1: attempt power cycle [ 103.780783][ T407] usb 8-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 103.792527][ T407] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 35, changing to 9 [ 103.803633][ T407] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 103.814950][ T407] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 103.824068][ T407] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.833251][ T3349] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 104.030104][ T1168] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 104.050495][ T1168] usb 6-1: Invalid ep0 maxpacket: 16 [ 104.076419][ T3368] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:859 [ 104.076457][ T3368] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 104.085745][ T3368] rust_binder: Read failure Err(EFAULT) in pid:859 [ 104.112660][ T3370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.119831][ T3370] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 104.126792][ T3370] rust_binder: Write failure EINVAL in pid:861 [ 104.180364][ T1168] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 104.210823][ T1168] usb 6-1: Invalid ep0 maxpacket: 16 [ 104.216313][ T1168] usb usb6-port1: unable to enumerate USB device [ 104.258217][ T3376] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.258583][ T3376] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 104.265946][ T36] audit: type=1400 audit(1750464264.242:533): avc: denied { accept } for pid=3375 comm="syz.0.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 104.306269][ T3380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.437868][ T3382] fuse: Unknown parameter 'grou00000000000000000000' [ 104.477867][ T3386] rust_binder: Write failure EFAULT in pid:630 [ 104.541115][ T1168] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 104.702447][ T1168] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 104.712497][ T1168] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 104.726346][ T1168] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 104.735486][ T1168] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 104.743726][ T1168] usb 1-1: SerialNumber: syz [ 104.749441][ T3380] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 104.821653][ T31] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 104.951914][ T31] usb 5-1: device descriptor read/64, error -71 [ 104.958373][ T3380] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 105.192343][ T31] usb 5-1: device descriptor read/64, error -71 [ 105.367457][ T1168] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 105.432784][ T31] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 105.563056][ T31] usb 5-1: device descriptor read/64, error -71 [ 105.586542][ T3380] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:871 [ 105.738991][ T306] usb 1-1: USB disconnect, device number 27 [ 105.813460][ T31] usb 5-1: device descriptor read/64, error -71 [ 105.923796][ T31] usb usb5-port1: attempt power cycle [ 106.043342][ T3404] fuse: Unknown parameter 'grou00000000000000000000' [ 106.073569][ T3408] FAULT_INJECTION: forcing a failure. [ 106.073569][ T3408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.086723][ T3408] CPU: 0 UID: 0 PID: 3408 Comm: syz.5.977 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 106.086759][ T3408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 106.086772][ T3408] Call Trace: [ 106.086779][ T3408] [ 106.086789][ T3408] __dump_stack+0x21/0x30 [ 106.086815][ T3408] dump_stack_lvl+0x10c/0x190 [ 106.086832][ T3408] ? __cfi_dump_stack_lvl+0x10/0x10 [ 106.086850][ T3408] ? bpf_lsm_file_permission+0xd/0x20 [ 106.086868][ T3408] dump_stack+0x19/0x20 [ 106.086885][ T3408] should_fail_ex+0x3d9/0x530 [ 106.086902][ T3408] should_fail+0xf/0x20 [ 106.086916][ T3408] should_fail_usercopy+0x1e/0x30 [ 106.086934][ T3408] _copy_from_user+0x22/0xb0 [ 106.086954][ T3408] __x64_sys_clock_adjtime+0xe1/0x2c0 [ 106.086971][ T3408] ? __cfi_mutex_unlock+0x10/0x10 [ 106.086986][ T3408] ? __cfi___x64_sys_clock_adjtime+0x10/0x10 [ 106.087006][ T3408] ? __kasan_check_read+0x15/0x20 [ 106.087024][ T3408] x64_sys_call+0x1af1/0x2ee0 [ 106.087044][ T3408] do_syscall_64+0x58/0xf0 [ 106.087064][ T3408] ? clear_bhb_loop+0x35/0x90 [ 106.087087][ T3408] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 106.087109][ T3408] RIP: 0033:0x7f639738e929 [ 106.087121][ T3408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.087134][ T3408] RSP: 002b:00007f639821a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 106.087151][ T3408] RAX: ffffffffffffffda RBX: 00007f63975b5fa0 RCX: 00007f639738e929 [ 106.087162][ T3408] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000000 [ 106.087172][ T3408] RBP: 00007f639821a090 R08: 0000000000000000 R09: 0000000000000000 [ 106.087182][ T3408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.087191][ T3408] R13: 0000000000000001 R14: 00007f63975b5fa0 R15: 00007ffe3cc19318 [ 106.087204][ T3408] [ 106.154349][ T3414] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:876 [ 106.171825][ T3416] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.232717][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 106.232747][ T36] audit: type=1326 audit(1750464266.208:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3415 comm="syz.5.978" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f639738e929 code=0x0 [ 106.328239][ T31] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 106.356090][ T31] usb 5-1: device descriptor read/8, error -71 [ 106.382525][ T3426] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.382975][ T3426] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 106.434585][ T3432] FAULT_INJECTION: forcing a failure. [ 106.434585][ T3432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.453276][ T3434] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.455861][ T3432] CPU: 1 UID: 0 PID: 3432 Comm: syz.5.988 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 106.455894][ T3432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 106.455907][ T3432] Call Trace: [ 106.455914][ T3432] [ 106.455922][ T3432] __dump_stack+0x21/0x30 [ 106.455950][ T3432] dump_stack_lvl+0x10c/0x190 [ 106.455974][ T3432] ? __cfi_dump_stack_lvl+0x10/0x10 [ 106.456000][ T3432] dump_stack+0x19/0x20 [ 106.456022][ T3432] should_fail_ex+0x3d9/0x530 [ 106.456044][ T3432] should_fail+0xf/0x20 [ 106.456064][ T3432] should_fail_usercopy+0x1e/0x30 [ 106.456087][ T3432] _copy_to_user+0x24/0xa0 [ 106.456114][ T3432] __x64_sys_clock_adjtime+0x22a/0x2c0 [ 106.456138][ T3432] ? __cfi_mutex_unlock+0x10/0x10 [ 106.456157][ T3432] ? __cfi___x64_sys_clock_adjtime+0x10/0x10 [ 106.456183][ T3432] ? __kasan_check_read+0x15/0x20 [ 106.456207][ T3432] x64_sys_call+0x1af1/0x2ee0 [ 106.456232][ T3432] do_syscall_64+0x58/0xf0 [ 106.456258][ T3432] ? clear_bhb_loop+0x35/0x90 [ 106.456288][ T3432] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 106.456317][ T3432] RIP: 0033:0x7f639738e929 [ 106.456335][ T3432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.456352][ T3432] RSP: 002b:00007f639821a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 106.456374][ T3432] RAX: ffffffffffffffda RBX: 00007f63975b5fa0 RCX: 00007f639738e929 [ 106.456389][ T3432] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000000 [ 106.456402][ T3432] RBP: 00007f639821a090 R08: 0000000000000000 R09: 0000000000000000 [ 106.456415][ T3432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.456427][ T3432] R13: 0000000000000001 R14: 00007f63975b5fa0 R15: 00007ffe3cc19318 [ 106.456444][ T3432] [ 106.457199][ T3434] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 106.502062][ T31] usb 5-1: device descriptor read/8, error -71 [ 106.709323][ T3451] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.761136][ T3452] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 106.794837][ T1168] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 106.904970][ T31] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 106.926172][ T31] usb 5-1: device descriptor read/8, error -71 [ 106.956225][ T1168] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 106.975391][ T1168] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 106.984816][ T1168] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 106.993304][ T1168] usb 6-1: SerialNumber: syz [ 106.995694][ T3458] FAULT_INJECTION: forcing a failure. [ 106.995694][ T3458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.011138][ T3458] CPU: 1 UID: 0 PID: 3458 Comm: syz.0.998 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 107.011172][ T3458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 107.011185][ T3458] Call Trace: [ 107.011193][ T3458] [ 107.011207][ T3458] __dump_stack+0x21/0x30 [ 107.011236][ T3458] dump_stack_lvl+0x10c/0x190 [ 107.011260][ T3458] ? __cfi_dump_stack_lvl+0x10/0x10 [ 107.011284][ T3458] dump_stack+0x19/0x20 [ 107.011300][ T3458] should_fail_ex+0x3d9/0x530 [ 107.011318][ T3458] should_fail+0xf/0x20 [ 107.011337][ T3458] should_fail_usercopy+0x1e/0x30 [ 107.011413][ T3458] _copy_to_user+0x24/0xa0 [ 107.011437][ T3458] simple_read_from_buffer+0xed/0x160 [ 107.011461][ T3458] proc_fail_nth_read+0x19e/0x210 [ 107.011476][ T3458] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 107.011499][ T3458] ? bpf_lsm_file_permission+0xd/0x20 [ 107.011522][ T3458] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 107.011541][ T3458] vfs_read+0x278/0xb60 [ 107.011566][ T3458] ? __cfi_vfs_read+0x10/0x10 [ 107.011583][ T3458] ? __kasan_check_write+0x18/0x20 [ 107.011599][ T3458] ? mutex_lock+0x92/0x1c0 [ 107.011615][ T3458] ? __cfi_mutex_lock+0x10/0x10 [ 107.011632][ T3458] ? __fget_files+0x2c5/0x340 [ 107.011663][ T3458] ksys_read+0x141/0x250 [ 107.011685][ T3458] ? xfd_validate_state+0x68/0x150 [ 107.011708][ T3458] ? __cfi_ksys_read+0x10/0x10 [ 107.011728][ T3458] ? __kasan_check_write+0x18/0x20 [ 107.011753][ T3458] ? fpregs_restore_userregs+0x11d/0x260 [ 107.011782][ T3458] __x64_sys_read+0x7f/0x90 [ 107.011807][ T3458] x64_sys_call+0x2638/0x2ee0 [ 107.011833][ T3458] do_syscall_64+0x58/0xf0 [ 107.011859][ T3458] ? clear_bhb_loop+0x35/0x90 [ 107.011883][ T3458] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 107.011905][ T3458] RIP: 0033:0x7f629a78d33c [ 107.011918][ T3458] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 107.011939][ T3458] RSP: 002b:00007f629b694030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 107.011962][ T3458] RAX: ffffffffffffffda RBX: 00007f629a9b5fa0 RCX: 00007f629a78d33c [ 107.011978][ T3458] RDX: 000000000000000f RSI: 00007f629b6940a0 RDI: 0000000000000003 [ 107.011990][ T3458] RBP: 00007f629b694090 R08: 0000000000000000 R09: 0000000000000000 [ 107.012004][ T3458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.012014][ T3458] R13: 0000000000000001 R14: 00007f629a9b5fa0 R15: 00007ffc384e67b8 [ 107.012027][ T3458] [ 107.281010][ T3462] binder: Unknown parameter 'coyBLV"i5ntext' [ 107.289214][ T31] usb 5-1: device descriptor read/8, error -71 [ 107.405412][ T31] usb usb5-port1: unable to enumerate USB device [ 107.421926][ T3473] x_tables: duplicate underflow at hook 1 [ 107.468470][ T3480] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 107.469021][ T3480] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 107.475969][ T3480] rust_binder: Failed to allocate buffer. len:168, is_oneway:true [ 107.641857][ T36] audit: type=1400 audit(1750464267.590:539): avc: denied { compute_member } for pid=3489 comm="syz.4.1012" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 107.676892][ T1168] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 107.756101][ T31] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 107.931505][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 107.938247][ T31] usb 1-1: config 4 has an invalid interface number: 15 but max is 0 [ 107.951539][ T31] usb 1-1: config 4 has no interface number 0 [ 107.957901][ T31] usb 1-1: config 4 interface 15 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 107.967847][ T31] usb 1-1: config 4 interface 15 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 107.977854][ T31] usb 1-1: config 4 interface 15 has no altsetting 0 [ 107.986267][ T31] usb 1-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.44 [ 107.995529][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.003574][ T31] usb 1-1: Product: syz [ 108.007804][ T31] usb 1-1: Manufacturer: syz [ 108.012440][ T31] usb 1-1: SerialNumber: syz [ 108.018432][ T3486] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 108.025722][ T3486] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 108.093226][ T3442] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:484 [ 108.094093][ T3442] rust_binder: Error while translating object. [ 108.103441][ T3442] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 108.109909][ T3442] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:484 [ 108.120556][ T3442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.138413][ T3442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.152645][ T1168] usb 6-1: USB disconnect, device number 20 [ 108.163097][ T1168] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 108.239962][ T3485] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 108.247662][ T3485] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 108.257685][ T407] aiptek 8-1:17.0: Aiptek using 400 ms programming speed [ 108.268705][ T407] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:17.0/input/input33 [ 108.296373][ T407] usb 8-1: USB disconnect, device number 13 [ 108.296436][ C0] aiptek 8-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 108.462448][ T3565] fuse: Unknown parameter 'group_i00000000000000000000' [ 108.631927][ T1168] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 108.723981][ T36] audit: type=1400 audit(1750464268.648:540): avc: denied { write } for pid=3572 comm="syz.0.1026" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 108.787472][ T1168] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 108.801142][ T1168] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.816526][ T1168] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.817248][ T407] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 108.826425][ T1168] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 108.847949][ T1168] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 108.857061][ T1168] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 108.871983][ T1168] usb 6-1: Manufacturer: syz [ 108.888246][ T1168] usb 6-1: config 0 descriptor?? [ 108.898926][ T3588] fuse: Unknown parameter 'group_i00000000000000000000' [ 108.925500][ T36] audit: type=1326 audit(1750464268.842:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3591 comm="syz.0.1034" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f629a78e929 code=0x0 [ 108.977772][ T36] audit: type=1326 audit(1750464268.891:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3591 comm="syz.0.1034" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f629a78e929 code=0x0 [ 109.002354][ T407] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 109.014122][ T407] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 109.023501][ T407] usb 8-1: config 1 has an invalid descriptor of length 5, skipping remainder of the config [ 109.029380][ T3598] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.034742][ T3598] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 109.042033][ T407] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.066866][ T407] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 109.070080][ T3600] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.076090][ T407] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.083203][ T3600] rust_binder: Failed to allocate buffer. len:65400, is_oneway:true [ 109.092135][ T407] usb 8-1: Product: syz [ 109.115874][ T407] usb 8-1: Manufacturer: А [ 109.124873][ T407] usb 8-1: SerialNumber: syz [ 109.128895][ T1168] usbhid 6-1:0.0: can't add hid device: -71 [ 109.146862][ T1168] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 109.168532][ T1168] usb 6-1: USB disconnect, device number 21 [ 109.188356][ T31] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 109.238949][ T3617] fuse: Unknown parameter 'group_i00000000000000000000' [ 109.354608][ T3625] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.415341][ T31] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 109.432853][ T31] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 109.446198][ T31] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 109.456947][ T31] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 109.468128][ T31] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 109.483551][ T31] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 109.494673][ T31] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 109.497656][ T1168] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 109.505782][ T31] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 109.526245][ T31] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 109.537353][ T31] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 109.548518][ T31] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 109.559895][ T31] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 109.563331][ T3641] fuse: Unknown parameter 'group_id00000000000000000000' [ 109.571766][ T31] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 109.592136][ T1425] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 109.594077][ T31] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 109.610782][ T31] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 109.621928][ T31] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 109.633134][ T31] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 109.644222][ T31] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 109.655331][ T31] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 109.666458][ T31] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 109.677627][ T31] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 109.690618][ T31] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 109.694221][ T1168] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 109.703993][ T31] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 109.728410][ T1168] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.728476][ T31] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 109.738286][ T3648] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.748889][ T31] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 109.749090][ T1168] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 109.755671][ T31] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 109.766473][ T1425] usb 5-1: Using ep0 maxpacket: 16 [ 109.775893][ T31] ax88179_178a 1-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 109.786744][ T1168] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 109.794964][ T31] ax88179_178a 1-1:4.15 eth1: register 'ax88179_178a' at usb-dummy_hcd.0-1, Toshiba USB Ethernet Adapter, 9a:7b:0a:d4:12:02 [ 109.802811][ T1168] usb 6-1: SerialNumber: syz [ 109.817561][ T31] usb 1-1: USB disconnect, device number 28 [ 109.824300][ T1425] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.838850][ T31] ax88179_178a 1-1:4.15 eth1: unregister 'ax88179_178a' usb-dummy_hcd.0-1, Toshiba USB Ethernet Adapter [ 109.850851][ T1425] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.866850][ T1425] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 109.879896][ T1425] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 109.888988][ T1425] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.922713][ T3657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.931036][ T1425] usb 5-1: config 0 descriptor?? [ 109.936892][ T3657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.105644][ T1168] usb 6-1: 0:2 : does not exist [ 110.110646][ T1168] usb 6-1: unit 255 not found! [ 110.120792][ T1168] usb 6-1: USB disconnect, device number 22 [ 110.282220][ T1654] udevd[1654]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 110.298174][ T36] audit: type=1400 audit(1750464270.181:543): avc: denied { ioctl } for pid=3566 comm="syz.7.1024" path="socket:[31270]" dev="sockfs" ino=31270 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 110.323185][ T36] audit: type=1400 audit(1750464270.191:544): avc: denied { map } for pid=3566 comm="syz.7.1024" path="socket:[30191]" dev="sockfs" ino=30191 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 110.323312][ T31] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 110.347485][ T1425] hid (null): report_id 1537886436 is invalid [ 110.361847][ T1425] hid-multitouch 0003:0457:07DA.001A: report_id 1537886436 is invalid [ 110.370387][ T1425] hid-multitouch 0003:0457:07DA.001A: item 0 4 1 8 parsing failed [ 110.378716][ T1425] hid-multitouch 0003:0457:07DA.001A: probe with driver hid-multitouch failed with error -22 [ 110.505380][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.516331][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.526314][ T31] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 110.535429][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.545931][ T31] usb 1-1: config 0 descriptor?? [ 110.603455][ T1169] usb 5-1: USB disconnect, device number 22 [ 111.178879][ T3699] fuse: Unknown parameter 'group_id00000000000000000000' [ 111.202274][ T3705] rust_binder: Error while translating object. [ 111.202302][ T3705] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 111.208539][ T3705] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:511 [ 111.234038][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 111.249628][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 111.267261][ T31] usb 1-1: USB disconnect, device number 29 [ 111.302378][ T3713] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 111.347345][ T36] audit: type=1400 audit(1750464271.259:545): avc: denied { create } for pid=3717 comm="syz.4.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 111.419627][ T3728] fuse: Unknown parameter 'group_id00000000000000000000' [ 111.428704][ T36] audit: type=1400 audit(1750464271.336:546): avc: denied { read } for pid=3719 comm="" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 111.448744][ T36] audit: type=1400 audit(1750464271.356:547): avc: denied { ioctl } for pid=3719 comm="syz.5.1069" path="socket:[31405]" dev="sockfs" ino=31405 ioctlcmd=0xf50f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 111.539056][ T407] usb 8-1: 0:2 : does not exist [ 111.560465][ T407] usb 8-1: USB disconnect, device number 14 [ 111.666691][ T3746] rust_binder: Write failure EFAULT in pid:1008 [ 111.673957][ T36] audit: type=1400 audit(1750464271.569:548): avc: denied { unlink } for pid=2602 comm="syz-executor" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 111.725594][ T1168] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 111.779267][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 111.800201][ T13] bridge_slave_1: left allmulticast mode [ 111.808312][ T13] bridge_slave_1: left promiscuous mode [ 111.816200][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.828282][ T3751] fuse: Bad value for 'user_id' [ 111.829019][ T13] bridge_slave_0: left allmulticast mode [ 111.833807][ T3751] fuse: Bad value for 'user_id' [ 111.838839][ T13] bridge_slave_0: left promiscuous mode [ 111.838954][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.891229][ T1168] usb 5-1: Using ep0 maxpacket: 32 [ 111.901161][ T1168] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 111.909285][ T1168] usb 5-1: config 0 has no interface number 0 [ 111.943731][ T1168] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 111.973144][ T1168] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.981186][ T1168] usb 5-1: Product: syz [ 111.995697][ T1168] usb 5-1: Manufacturer: syz [ 112.000362][ T1168] usb 5-1: SerialNumber: syz [ 112.007627][ T1168] usb 5-1: config 0 descriptor?? [ 112.013447][ T1168] smsc95xx v2.0.0 [ 112.069482][ T13] veth1_macvtap: left promiscuous mode [ 112.075084][ T13] veth0_vlan: left promiscuous mode [ 112.126471][ T3758] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.127231][ T3758] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1013 [ 112.208348][ T3767] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.218595][ T3759] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.234903][ T3759] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.245777][ T3759] bridge_slave_0: entered allmulticast mode [ 112.252515][ T3759] bridge_slave_0: entered promiscuous mode [ 112.259234][ T3759] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.266364][ T3759] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.274031][ T3759] bridge_slave_1: entered allmulticast mode [ 112.280329][ T3759] bridge_slave_1: entered promiscuous mode [ 112.342111][ T3759] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.349245][ T3759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.356646][ T3759] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.363703][ T3759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.371346][ T67] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 112.391651][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.399468][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.410693][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.417770][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.427894][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.435033][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.467092][ T3759] veth0_vlan: entered promiscuous mode [ 112.479253][ T3759] veth1_macvtap: entered promiscuous mode [ 112.532377][ T67] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.542632][ T67] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 112.552674][ T67] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 112.567465][ T67] usb 6-1: New USB device found, idVendor=0525, idProduct=85a1, bcdDevice= 0.40 [ 112.577581][ T67] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.586015][ T67] usb 6-1: Product: syz [ 112.590241][ T67] usb 6-1: Manufacturer: syz [ 112.595644][ T67] usb 6-1: SerialNumber: syz [ 112.811094][ T67] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 112.818009][ T67] cdc_ncm 6-1:1.0: bind() failure [ 112.829918][ T67] usb 6-1: USB disconnect, device number 23 [ 112.859629][ T1168] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 112.876004][ T3795] support for the xor transformation has been removed. [ 112.877706][ T1168] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 112.892525][ T1168] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 112.903573][ T1168] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 112.913710][ T1168] usb 5-1: USB disconnect, device number 23 [ 112.949360][ T3804] binder: Bad value for 'stats' [ 113.100147][ T3813] binder: Unknown parameter 'measure' [ 113.452766][ T3826] binder: Bad value for 'stats' [ 113.560522][ T3835] binder: Unknown parameter '0xffffffffffffffff' [ 113.675297][ T3848] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1117'. [ 113.684690][ T3848] binder: Unknown parameter 'fscontext?}' [ 113.735554][ T3854] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1044 [ 113.794513][ T3864] random: crng reseeded on system resumption [ 113.807449][ T36] audit: type=1400 audit(1750464273.633:549): avc: denied { shutdown } for pid=3855 comm="syz.0.1121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 113.870777][ T3869] fuse: Bad value for 'fd' [ 113.887122][ T3871] binder: Bad value for 'defcontext' [ 113.888751][ T3872] binder: Bad value for 'max' [ 113.904846][ T3875] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:36 [ 113.908654][ T36] audit: type=1400 audit(1750464273.730:550): avc: denied { map } for pid=3874 comm="syz.8.1127" path="socket:[32215]" dev="sockfs" ino=32215 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 114.219980][ T3901] fuse: Bad value for 'fd' [ 114.293306][ T3904] overlayfs: conflicting lowerdir path [ 114.428689][ T443] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 114.584700][ T443] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 114.594039][ T443] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.603227][ T443] usb 5-1: config 0 descriptor?? [ 114.868373][ T3917] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 114.868407][ T3917] rust_binder: Error in use_page_slow: EBUSY [ 114.878996][ T3917] rust_binder: use_range failure EBUSY [ 114.885057][ T3917] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 114.890540][ T3917] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 114.898281][ T3917] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 114.907632][ T3917] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:39 [ 114.950491][ T3925] fuse: Bad value for 'fd' [ 114.985994][ T1168] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 115.129308][ T3933] rust_binder: Write failure EINVAL in pid:552 [ 115.129490][ T3933] rust_binder: Read failure Err(EAGAIN) in pid:552 [ 115.150883][ T1168] usb 1-1: Using ep0 maxpacket: 16 [ 115.163707][ T1168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.174841][ T1168] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 115.187862][ T1168] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 115.197110][ T1168] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.206007][ T1168] usb 1-1: config 0 descriptor?? [ 115.233470][ T31] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 115.245269][ T3938] 9pnet_fd: Insufficient options for proto=fd [ 115.252450][ T36] audit: type=1400 audit(1750464275.039:551): avc: denied { map } for pid=3937 comm="syz.5.1150" path="pipe:[32979]" dev="pipefs" ino=32979 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 115.396041][ T31] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 115.405238][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.413308][ T31] usb 9-1: Product: syz [ 115.417560][ T31] usb 9-1: Manufacturer: syz [ 115.422236][ T31] usb 9-1: SerialNumber: syz [ 115.630896][ T1168] HID 045e:07da: Invalid code 65791 type 1 [ 115.640815][ T1168] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.001B/input/input34 [ 115.644464][ T443] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 115.654957][ T1168] microsoft 0003:045E:07DA.001B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 115.663382][ T443] asix 5-1:0.0: probe with driver asix failed with error -71 [ 115.675580][ T67] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 115.683645][ T443] usb 5-1: USB disconnect, device number 24 [ 115.852350][ T67] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.863359][ T67] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.873163][ T67] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 115.882289][ T67] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.890962][ T67] usb 6-1: config 0 descriptor?? [ 116.176803][ T3946] fuse: Bad value for 'fd' [ 116.198090][ T3948] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 116.198116][ T3948] rust_binder: Error while translating object. [ 116.208939][ T3948] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 116.215275][ T3948] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:756 [ 116.459249][ T1425] usb 1-1: USB disconnect, device number 30 [ 116.507943][ T3964] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 116.673060][ T3972] fuse: Bad value for 'fd' [ 116.708360][ T3976] binder: Unknown parameter '' [ 117.000977][ T3993] fuse: Bad value for 'fd' [ 117.022348][ T3995] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.040832][ T3997] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.054788][ T3997] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 117.189726][ T4014] SELinux: security_context_str_to_sid () failed with errno=-22 [ 117.259526][ T4019] fuse: Invalid rootmode [ 117.459562][ T1425] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 117.478926][ T36] audit: type=1400 audit(1750464277.193:552): avc: denied { create } for pid=4038 comm="syz.4.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 117.500876][ T4039] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 117.614154][ T1425] usb 1-1: Using ep0 maxpacket: 16 [ 117.620349][ T1425] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.631702][ T1425] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 117.644572][ T1425] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 117.653706][ T1425] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.662507][ T1425] usb 1-1: config 0 descriptor?? [ 117.748089][ T1168] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 117.902235][ T1168] usb 5-1: Using ep0 maxpacket: 8 [ 117.908638][ T1168] usb 5-1: too many endpoints for config 0 interface 0 altsetting 52: 213, using maximum allowed: 30 [ 117.919900][ T1168] usb 5-1: config 0 interface 0 altsetting 52 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.930982][ T1168] usb 5-1: config 0 interface 0 altsetting 52 has 1 endpoint descriptor, different from the interface descriptor's value: 213 [ 117.944248][ T1168] usb 5-1: config 0 interface 0 has no altsetting 0 [ 117.950879][ T1168] usb 5-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 117.959958][ T1168] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.968899][ T1168] usb 5-1: config 0 descriptor?? [ 118.083898][ T1425] HID 045e:07da: Invalid code 65791 type 1 [ 118.094604][ T1425] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.001C/input/input36 [ 118.096530][ T31] usb 9-1: USB disconnect, device number 2 [ 118.116601][ T1425] microsoft 0003:045E:07DA.001C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 118.169966][ T36] audit: type=1400 audit(1750464277.863:553): avc: denied { view } for pid=4045 comm="syz.8.1188" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 118.257864][ T4048] block device autoloading is deprecated and will be removed. [ 118.276168][ T4048] syz.8.1189: attempt to access beyond end of device [ 118.276168][ T4048] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 118.532491][ T67] usbhid 6-1:0.0: can't add hid device: -71 [ 118.538775][ T67] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 118.553101][ T67] usb 6-1: USB disconnect, device number 24 [ 118.624854][ T31] usb 5-1: USB disconnect, device number 25 [ 118.692476][ T36] audit: type=1326 audit(1750464278.377:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4074 comm="syz.8.1196" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c8478e929 code=0x0 [ 118.892297][ T36] audit: type=1400 audit(1750464278.571:555): avc: denied { execute } for pid=4096 comm="syz.4.1202" name="file0" dev="tmpfs" ino=1662 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 118.924583][ T67] usb 1-1: USB disconnect, device number 31 [ 118.940301][ T4102] binder: Unknown parameter 'fscontext?}' [ 119.078995][ T36] audit: type=1400 audit(1750464278.755:556): avc: denied { mounton } for pid=4108 comm="syz.4.1206" path="/302/file0" dev="tmpfs" ino=1683 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 119.079018][ T4109] fuse: Bad value for 'rootmode' [ 119.180783][ T443] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 119.335587][ T443] usb 6-1: Using ep0 maxpacket: 8 [ 119.343390][ T443] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 119.352570][ T443] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.360667][ T443] usb 6-1: Product: syz [ 119.364865][ T443] usb 6-1: Manufacturer: syz [ 119.369501][ T443] usb 6-1: SerialNumber: syz [ 119.375067][ T443] usb 6-1: config 0 descriptor?? [ 119.410457][ T4133] fuse: Bad value for 'rootmode' [ 119.429497][ T4135] binder: Unknown parameter 'i`X' [ 119.628971][ T4157] fuse: Bad value for 'rootmode' [ 119.746976][ T4166] binder: Unknown parameter 'processor : 0 [ 119.746976][ T4166] vendor_id : GenuineIntel [ 119.746976][ T4166] cpu family : 6 [ 119.746976][ T4166] model : 79 [ 119.746976][ T4166] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 119.746976][ T4166] stepping : 0 [ 119.746976][ T4166] microcode : 0xffffffff [ 119.746976][ T4166] cpu MHz : 2199.998 [ 119.746976][ T4166] cache size : 56320 KB [ 119.746976][ T4166] physical id : 0 [ 119.746976][ T4166] siblings : 2 [ 119.746976][ T4166] core id : 0 [ 119.746976][ T4166] cpu cores : 1 [ 119.746976][ T4166] apicid : 0 [ 119.746976][ T4166] initial apicid : 0 [ 119.746976][ T4166] fpu : yes [ 119.746976][ T4166] fpu_exception : yes [ 119.746976][ T4166] cpuid level : 13 [ 119.746976][ T4166] wp : yes [ 119.746976][ T4166] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 119.746976][ T4166] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 119.853033][ T4177] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.987404][ T4179] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 120.045997][ T443] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 120.210740][ T443] usb 5-1: Using ep0 maxpacket: 16 [ 120.221770][ T443] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.233539][ T443] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 120.247860][ T443] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 120.257622][ T443] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.274709][ T443] usb 5-1: config 0 descriptor?? [ 120.696543][ T443] HID 045e:07da: Invalid code 65791 type 1 [ 120.705506][ T443] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.001D/input/input37 [ 120.719557][ T443] microsoft 0003:045E:07DA.001D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 120.740222][ T4186] fuse: Unknown parameter 'use00000000000000000000' [ 120.824154][ T4189] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.825076][ T4189] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 120.882688][ T4192] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.897005][ T4192] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 121.021377][ T4204] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 121.525275][ T1168] usb 5-1: USB disconnect, device number 26 [ 121.703269][ T443] usb 6-1: USB disconnect, device number 25 [ 121.787922][ T4212] fuse: Unknown parameter 'use00000000000000000000' [ 121.805783][ T4214] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 121.839381][ T36] audit: type=1326 audit(1750464281.438:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4218 comm="syz.5.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639738e929 code=0x7ffc0000 [ 121.839857][ T4219] binder: Unknown parameter 'context' [ 121.863026][ T36] audit: type=1326 audit(1750464281.438:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4218 comm="syz.5.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639738e929 code=0x7ffc0000 [ 121.872152][ T4220] binder: Unknown parameter 'context' [ 121.892174][ T36] audit: type=1326 audit(1750464281.438:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4218 comm="syz.5.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f639738e929 code=0x7ffc0000 [ 121.923599][ T36] audit: type=1326 audit(1750464281.468:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4218 comm="syz.5.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639738e929 code=0x7ffc0000 [ 121.947855][ T36] audit: type=1326 audit(1750464281.468:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4218 comm="syz.5.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639738e929 code=0x7ffc0000 [ 122.053199][ T4236] fuse: Unknown parameter 'use00000000000000000000' [ 122.066668][ T4238] FAULT_INJECTION: forcing a failure. [ 122.066668][ T4238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.087802][ T4238] CPU: 0 UID: 0 PID: 4238 Comm: syz.4.1252 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 122.087842][ T4238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 122.087856][ T4238] Call Trace: [ 122.087863][ T4238] [ 122.087871][ T4238] __dump_stack+0x21/0x30 [ 122.087901][ T4238] dump_stack_lvl+0x10c/0x190 [ 122.087925][ T4238] ? __cfi_dump_stack_lvl+0x10/0x10 [ 122.087951][ T4238] dump_stack+0x19/0x20 [ 122.087974][ T4238] should_fail_ex+0x3d9/0x530 [ 122.087997][ T4238] should_fail+0xf/0x20 [ 122.088018][ T4238] should_fail_usercopy+0x1e/0x30 [ 122.088043][ T4238] _copy_to_user+0x24/0xa0 [ 122.088070][ T4238] __x64_sys_clock_adjtime+0x22a/0x2c0 [ 122.088096][ T4238] ? __cfi_mutex_unlock+0x10/0x10 [ 122.088122][ T4238] ? __cfi___x64_sys_clock_adjtime+0x10/0x10 [ 122.088151][ T4238] ? __kasan_check_read+0x15/0x20 [ 122.088177][ T4238] x64_sys_call+0x1af1/0x2ee0 [ 122.088203][ T4238] do_syscall_64+0x58/0xf0 [ 122.088229][ T4238] ? clear_bhb_loop+0x35/0x90 [ 122.088261][ T4238] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 122.088290][ T4238] RIP: 0033:0x7f2b28f8e929 [ 122.088307][ T4238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.088326][ T4238] RSP: 002b:00007f2b29d2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 122.088348][ T4238] RAX: ffffffffffffffda RBX: 00007f2b291b5fa0 RCX: 00007f2b28f8e929 [ 122.088364][ T4238] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000000 [ 122.088378][ T4238] RBP: 00007f2b29d2b090 R08: 0000000000000000 R09: 0000000000000000 [ 122.088391][ T4238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.088403][ T4238] R13: 0000000000000001 R14: 00007f2b291b5fa0 R15: 00007ffea777c2a8 [ 122.088420][ T4238] [ 122.161554][ T4240] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 122.277370][ T4240] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:597 [ 122.326470][ T443] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 122.410925][ T4252] binder: Unknown parameter 'coyBLV"i5ntext' [ 122.494461][ T4260] rust_binder: Error while translating object. [ 122.494509][ T4260] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 122.501013][ T4260] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:943 [ 122.510968][ T443] usb 1-1: Using ep0 maxpacket: 16 [ 122.526527][ T443] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 122.534845][ T443] usb 1-1: config 0 has no interface number 0 [ 122.545279][ T443] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 122.562312][ T443] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.570502][ T443] usb 1-1: Product: syz [ 122.575533][ T443] usb 1-1: Manufacturer: syz [ 122.580434][ T443] usb 1-1: SerialNumber: syz [ 122.589759][ T443] usb 1-1: config 0 descriptor?? [ 122.598503][ T4263] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1261'. [ 122.601323][ T443] asix 1-1:0.251: probe with driver asix failed with error -22 [ 122.824172][ T407] usb 1-1: USB disconnect, device number 32 [ 122.849262][ T1168] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 122.962281][ T4272] FAULT_INJECTION: forcing a failure. [ 122.962281][ T4272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.975469][ T4272] CPU: 1 UID: 0 PID: 4272 Comm: syz.0.1264 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 122.975504][ T4272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 122.975516][ T4272] Call Trace: [ 122.975523][ T4272] [ 122.975532][ T4272] __dump_stack+0x21/0x30 [ 122.975563][ T4272] dump_stack_lvl+0x10c/0x190 [ 122.975580][ T4272] ? __cfi_dump_stack_lvl+0x10/0x10 [ 122.975600][ T4272] dump_stack+0x19/0x20 [ 122.975616][ T4272] should_fail_ex+0x3d9/0x530 [ 122.975634][ T4272] should_fail+0xf/0x20 [ 122.975649][ T4272] should_fail_usercopy+0x1e/0x30 [ 122.975666][ T4272] _copy_to_user+0x24/0xa0 [ 122.975686][ T4272] simple_read_from_buffer+0xed/0x160 [ 122.975711][ T4272] proc_fail_nth_read+0x19e/0x210 [ 122.975726][ T4272] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 122.975740][ T4272] ? __cfi___switch_to+0x10/0x10 [ 122.975760][ T4272] ? bpf_lsm_file_permission+0xd/0x20 [ 122.975776][ T4272] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 122.975790][ T4272] vfs_read+0x278/0xb60 [ 122.975807][ T4272] ? _raw_spin_unlock+0x45/0x60 [ 122.975828][ T4272] ? __cfi_vfs_read+0x10/0x10 [ 122.975844][ T4272] ? __kasan_check_write+0x18/0x20 [ 122.975861][ T4272] ? mutex_lock+0x92/0x1c0 [ 122.975874][ T4272] ? __cfi_mutex_lock+0x10/0x10 [ 122.975887][ T4272] ? __fget_files+0x2c5/0x340 [ 122.975914][ T4272] ksys_read+0x141/0x250 [ 122.975931][ T4272] ? xfd_validate_state+0x68/0x150 [ 122.975948][ T4272] ? __cfi_ksys_read+0x10/0x10 [ 122.975965][ T4272] ? __kasan_check_write+0x18/0x20 [ 122.975982][ T4272] ? fpregs_restore_userregs+0x11d/0x260 [ 122.976042][ T4272] __x64_sys_read+0x7f/0x90 [ 122.976060][ T4272] x64_sys_call+0x2638/0x2ee0 [ 122.976080][ T4272] do_syscall_64+0x58/0xf0 [ 122.976099][ T4272] ? clear_bhb_loop+0x35/0x90 [ 122.976122][ T4272] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 122.976143][ T4272] RIP: 0033:0x7f629a78d33c [ 122.976157][ T4272] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 122.976171][ T4272] RSP: 002b:00007f629b694030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 122.976188][ T4272] RAX: ffffffffffffffda RBX: 00007f629a9b5fa0 RCX: 00007f629a78d33c [ 122.976200][ T4272] RDX: 000000000000000f RSI: 00007f629b6940a0 RDI: 0000000000000003 [ 122.976209][ T4272] RBP: 00007f629b694090 R08: 0000000000000000 R09: 0000000000000000 [ 122.976219][ T4272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.976228][ T4272] R13: 0000000000000001 R14: 00007f629a9b5fa0 R15: 00007ffc384e67b8 [ 122.976241][ T4272] [ 123.008528][ T4276] binder: Bad value for 'stats' [ 123.074395][ T443] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 123.095904][ T1168] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.134219][ T4280] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.139971][ T1168] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.144236][ T4280] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 123.148298][ T1168] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.176328][ T4285] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.188284][ T1168] usb 5-1: New USB device found, idVendor=056a, idProduct=0017, bcdDevice= 0.00 [ 123.251106][ T4286] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 123.251744][ T1168] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.289369][ T443] usb 6-1: Using ep0 maxpacket: 16 [ 123.300568][ T1168] usb 5-1: config 0 descriptor?? [ 123.308873][ T443] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.352429][ T443] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 123.365285][ T443] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 123.374388][ T443] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.383411][ T443] usb 6-1: config 0 descriptor?? [ 123.802683][ T443] HID 045e:07da: Invalid code 65791 type 1 [ 123.813661][ T443] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.001E/input/input38 [ 123.828031][ T443] microsoft 0003:045E:07DA.001E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 123.931055][ T4263] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:946 [ 123.938461][ T1168] usbhid 5-1:0.0: can't add hid device: -71 [ 123.953736][ T1168] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 123.963916][ T1168] usb 5-1: USB disconnect, device number 27 [ 124.046144][ T4294] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.046622][ T4294] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 124.173055][ T4299] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.235823][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 124.235844][ T36] audit: type=1400 audit(1750464283.772:574): avc: denied { execute_no_trans } for pid=4298 comm="syz.0.1273" path="/343/file1" dev="tmpfs" ino=1904 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 124.241278][ T4300] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 124.628100][ T407] usb 6-1: USB disconnect, device number 26 [ 124.828763][ T4316] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 124.828924][ T4316] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:962 [ 125.069068][ T4327] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1285'. [ 125.185347][ T4332] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.211354][ T4335] binder: Bad value for 'stats' [ 125.241706][ T443] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 125.416832][ T443] usb 5-1: not running at top speed; connect to a high speed hub [ 125.425744][ T443] usb 5-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 125.437151][ T443] usb 5-1: config 1 interface 0 altsetting 4 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 125.448360][ T443] usb 5-1: config 1 interface 0 has no altsetting 0 [ 125.456693][ T443] usb 5-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.40 [ 125.465934][ T443] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.474430][ T443] usb 5-1: Product: syz [ 125.479973][ T443] usb 5-1: Manufacturer: Ћ [ 125.484629][ T443] usb 5-1: SerialNumber: syz [ 125.497526][ T4325] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 125.512152][ T4325] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 125.528043][ T1168] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 125.531188][ T4344] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 125.535694][ T4344] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:607 [ 125.693130][ T1168] usb 1-1: Using ep0 maxpacket: 32 [ 125.721302][ T1168] usb 1-1: too many configurations: 240, using maximum allowed: 8 [ 125.730080][ T1168] usb 1-1: config index 0 descriptor too short (expected 259, got 27) [ 125.738495][ T1168] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 125.747077][ T1168] usb 1-1: can't read configurations, error -22 [ 125.752093][ T4350] fuse: Unknown parameter '0x0000000000000008' [ 125.786103][ T4353] random: crng reseeded on system resumption [ 125.889149][ T1168] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 125.943413][ T4325] rust_binder: Write failure EFAULT in pid:971 [ 125.948674][ T443] usbhid 5-1:1.0: can't add hid device: -71 [ 125.961701][ T443] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 125.971759][ T443] usb 5-1: USB disconnect, device number 28 [ 126.064521][ T1168] usb 1-1: Using ep0 maxpacket: 32 [ 126.070120][ T1168] usb 1-1: too many configurations: 240, using maximum allowed: 8 [ 126.085511][ T1168] usb 1-1: config index 0 descriptor too short (expected 259, got 27) [ 126.093749][ T1168] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 126.102259][ T1168] usb 1-1: can't read configurations, error -22 [ 126.108816][ T1168] usb usb1-port1: attempt power cycle [ 126.250255][ T1169] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 126.415312][ T1169] usb 6-1: Using ep0 maxpacket: 16 [ 126.421621][ T1169] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.432848][ T1169] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 126.445877][ T1169] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 126.455121][ T1169] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.464301][ T1169] usb 6-1: config 0 descriptor?? [ 126.467269][ T1168] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 126.508540][ T1168] usb 1-1: Using ep0 maxpacket: 32 [ 126.514165][ T1168] usb 1-1: too many configurations: 240, using maximum allowed: 8 [ 126.522141][ T36] audit: type=1400 audit(1750464285.994:575): avc: granted { setsecparam } for pid=4357 comm="syz.4.1297" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 126.542028][ T1168] usb 1-1: config index 0 descriptor too short (expected 259, got 27) [ 126.550410][ T1168] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 126.557024][ T4360] binder: Bad value for 'stats' [ 126.559046][ T1168] usb 1-1: can't read configurations, error -22 [ 126.597580][ T4363] rust_binder: Write failure EINVAL in pid:978 [ 126.634327][ T4365] rust_binder: Write failure EINVAL in pid:980 [ 126.682862][ T4370] rust_binder: Error in use_page_slow: ESRCH [ 126.682892][ T4370] rust_binder: use_range failure ESRCH [ 126.690724][ T4370] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 126.698049][ T4370] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 126.706171][ T4370] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:985 [ 126.714148][ T1168] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 126.755654][ T1168] usb 1-1: Using ep0 maxpacket: 32 [ 126.761211][ T1168] usb 1-1: too many configurations: 240, using maximum allowed: 8 [ 126.770042][ T1168] usb 1-1: config index 0 descriptor too short (expected 259, got 27) [ 126.779656][ T1168] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 126.796519][ T1168] usb 1-1: can't read configurations, error -22 [ 126.808899][ T1168] usb usb1-port1: unable to enumerate USB device [ 126.847178][ T4384] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 126.847218][ T4384] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:999 [ 126.857993][ T4386] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 126.898361][ T1169] HID 045e:07da: Invalid code 65791 type 1 [ 126.921325][ T1169] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.001F/input/input39 [ 126.938210][ T1169] microsoft 0003:045E:07DA.001F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 127.743054][ T1169] usb 6-1: USB disconnect, device number 27 [ 128.014994][ T4399] vlan0: entered allmulticast mode [ 128.381976][ T4414] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 128.390903][ T4414] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 128.401153][ T1168] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 128.446033][ T4417] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 128.448507][ T4417] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 128.452555][ T36] audit: type=1400 audit(1750464287.870:576): avc: denied { remount } for pid=4416 comm="syz.0.1316" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 128.524633][ T4421] fuse: Unknown parameter '0x0000000000000003' [ 128.544167][ T4424] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:632 [ 128.544709][ T4425] rust_binder: Write failure EINVAL in pid:632 [ 128.668178][ T1168] usb 5-1: Using ep0 maxpacket: 32 [ 128.680788][ T1168] usb 5-1: config 1 interface 0 altsetting 14 endpoint 0x82 has invalid wMaxPacketSize 0 [ 128.690768][ T1168] usb 5-1: config 1 interface 0 altsetting 14 bulk endpoint 0x82 has invalid maxpacket 0 [ 128.700803][ T1168] usb 5-1: config 1 interface 0 altsetting 14 endpoint 0x3 has invalid maxpacket 1600, setting to 1024 [ 128.711915][ T1168] usb 5-1: config 1 interface 0 altsetting 14 bulk endpoint 0x3 has invalid maxpacket 1024 [ 128.722048][ T1168] usb 5-1: config 1 interface 0 has no altsetting 0 [ 128.731374][ T1168] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 128.740618][ T1168] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.748661][ T1168] usb 5-1: Product: syz [ 128.752908][ T1168] usb 5-1: Manufacturer: syz [ 128.757590][ T1168] usb 5-1: SerialNumber: syz [ 128.765856][ T4404] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 128.873368][ T443] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 128.982013][ T1168] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 128.994205][ T1168] usb 5-1: USB disconnect, device number 29 [ 129.037536][ T443] usb 1-1: Using ep0 maxpacket: 16 [ 129.044334][ T443] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.055484][ T443] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 129.068405][ T443] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 129.077472][ T443] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.088916][ T443] usb 1-1: config 0 descriptor?? [ 129.508754][ T443] HID 045e:07da: Invalid code 65791 type 1 [ 129.519707][ T443] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0020/input/input40 [ 129.532893][ T443] microsoft 0003:045E:07DA.0020: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 129.625870][ T4438] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1022 [ 129.639413][ T4437] rust_binder: Error in use_page_slow: ESRCH [ 129.639443][ T4437] rust_binder: use_range failure ESRCH [ 129.651220][ T4437] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 129.651247][ T4437] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 129.659293][ T4437] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1022 [ 129.704201][ T407] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 129.797985][ T4445] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1326'. [ 129.870829][ T407] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 129.880878][ T407] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.889075][ T407] usb 6-1: Product: syz [ 129.903798][ T407] usb 6-1: Manufacturer: syz [ 129.908483][ T407] usb 6-1: SerialNumber: syz [ 129.926519][ T4447] fuse: Unknown parameter '0x0000000000000003' [ 130.135390][ T4456] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 130.135456][ T4456] rust_binder: Error in use_page_slow: EBUSY [ 130.146008][ T4456] rust_binder: use_range failure EBUSY [ 130.152145][ T4456] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 130.157815][ T4456] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 130.165549][ T4456] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 130.175053][ T4456] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:1041 [ 130.336336][ T407] usb 1-1: USB disconnect, device number 37 [ 130.871436][ T4464] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.871885][ T4465] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 131.002820][ T4474] rust_binder: Write failure EFAULT in pid:1184 [ 131.032871][ T4476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 131.046090][ T4476] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 131.216407][ T4490] rust_binder: Write failure EINVAL in pid:1053 [ 131.329085][ T4492] rust_binder: Error while translating object. [ 131.335447][ T4492] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 131.341651][ T4492] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:82 [ 131.454308][ T1168] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 131.519792][ T4501] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 131.519813][ T4501] rust_binder: Error while translating object. [ 131.528928][ T4501] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 131.535159][ T4501] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:91 [ 131.618054][ T1168] usb 1-1: Using ep0 maxpacket: 16 [ 131.630705][ T4506] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 131.632617][ T4506] rust_binder: Read failure Err(EFAULT) in pid:96 [ 131.637656][ T1168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.664670][ T1168] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 131.677871][ T1168] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 131.687041][ T1168] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.695953][ T1168] usb 1-1: config 0 descriptor?? [ 131.790603][ T4512] can0: slcan on ttyS3. [ 131.833144][ T4512] can0 (unregistered): slcan off ttyS3. [ 131.851525][ T4512] binder: Bad value for 'max' [ 132.099625][ T4550] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 132.108809][ T4550] SELinux: security_context_str_to_sid () failed with errno=-22 [ 132.120319][ T1168] HID 045e:07da: Invalid code 65791 type 1 [ 132.131876][ T1168] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0021/input/input41 [ 132.144568][ T1168] microsoft 0003:045E:07DA.0021: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 132.237505][ T4555] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 132.237528][ T4555] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:114 [ 132.247489][ T4555] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 132.263434][ T4556] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 132.263463][ T4556] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:114 [ 132.300111][ T4561] fuse: Unknown parameter 'fd0x0000000000000003' [ 132.476545][ T4574] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 132.476576][ T4574] rust_binder: Error while translating object. [ 132.487485][ T4574] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 132.493686][ T1169] usb 6-1: USB disconnect, device number 28 [ 132.510423][ T4574] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1067 [ 132.559411][ T4582] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 132.568803][ T4582] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:643 [ 132.592159][ T4584] fuse: Unknown parameter 'fd0x0000000000000003' [ 132.663577][ T4595] fuse: Invalid rootmode [ 132.864281][ T4616] fuse: Unknown parameter 'fd0x0000000000000003' [ 132.898451][ T36] audit: type=1404 audit(1750464292.228:577): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 132.915330][ T36] audit: type=1400 audit(1750464292.238:578): avc: denied { ioctl } for pid=4617 comm="syz.5.1376" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=37736 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 132.917657][ T4618] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1376'. [ 132.942990][ T36] audit: type=1400 audit(1750464292.238:579): avc: denied { ioctl } for pid=4617 comm="syz.5.1376" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=37736 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 132.977407][ T1169] usb 1-1: USB disconnect, device number 38 [ 133.000421][ T36] audit: type=1400 audit(1750464292.238:580): avc: denied { ioctl } for pid=4617 comm="syz.5.1376" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=37736 ioctlcmd=0xaa08 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 133.026875][ T36] audit: type=1400 audit(1750464292.248:581): avc: denied { read } for pid=4617 comm="syz.5.1376" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 133.050429][ T36] audit: type=1400 audit(1750464292.248:582): avc: denied { create } for pid=4617 comm="syz.5.1376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 133.072056][ T36] audit: type=1400 audit(1750464292.297:583): avc: denied { read write } for pid=4617 comm="syz.5.1376" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 133.099448][ T36] audit: type=1400 audit(1750464292.297:584): avc: denied { create } for pid=4617 comm="syz.5.1376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 133.119486][ T36] audit: type=1400 audit(1750464292.317:585): avc: denied { read write } for pid=1076 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 133.145250][ T36] audit: type=1400 audit(1750464292.356:586): avc: denied { read write } for pid=4622 comm="syz.5.1377" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 133.199346][ T4650] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4650 comm=syz.4.1387 [ 133.284485][ T4676] binfmt_misc: register: failed to install interpreter file ./file0 [ 135.911406][ T4970] netlink: 'syz.5.1513': attribute type 46 has an invalid length. [ 135.919534][ T4970] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1513'. [ 137.648166][ T5094] syzkaller0: entered allmulticast mode [ 137.769698][ T5109] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5109 comm=syz.5.1566 [ 138.000154][ T36] kauditd_printk_skb: 964 callbacks suppressed [ 138.000174][ T36] audit: type=1400 audit(1750464297.243:1551): avc: denied { create } for pid=5130 comm="syz.0.1575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 138.040511][ T36] audit: type=1400 audit(1750464297.243:1552): avc: denied { read } for pid=5132 comm="syz.0.1576" name="binder1" dev="binder" ino=431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 138.083708][ T36] audit: type=1400 audit(1750464297.272:1553): avc: denied { read } for pid=5132 comm="syz.0.1576" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 138.108300][ T36] audit: type=1400 audit(1750464297.272:1554): avc: denied { read } for pid=5132 comm="syz.0.1576" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=0 [ 138.131634][ T36] audit: type=1400 audit(1750464297.272:1555): avc: denied { create } for pid=5132 comm="syz.0.1576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 138.152674][ T36] audit: type=1400 audit(1750464297.272:1556): avc: denied { create } for pid=5132 comm="syz.0.1576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 138.173543][ T36] audit: type=1400 audit(1750464297.272:1557): avc: denied { read } for pid=5132 comm="syz.0.1576" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 138.196487][ T36] audit: type=1400 audit(1750464297.371:1558): avc: denied { read } for pid=5136 comm="syz.0.1577" name="binder0" dev="binder" ino=430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 138.213703][ T5147] audit: audit_backlog=65 > audit_backlog_limit=64 [ 138.219483][ T5145] audit: audit_backlog=65 > audit_backlog_limit=64 [ 139.044059][ T5214] netlink: 'syz.8.1605': attribute type 4 has an invalid length. [ 139.687287][ T5335] syzkaller0: entered allmulticast mode [ 143.222651][ T36] kauditd_printk_skb: 1811 callbacks suppressed [ 143.222669][ T36] audit: type=1400 audit(1750464302.400:3240): avc: denied { read write } for pid=953 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 143.253190][ T36] audit: type=1400 audit(1750464302.400:3241): avc: denied { mounton } for pid=5758 comm="syz.4.1811" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 143.280368][ T36] audit: type=1400 audit(1750464302.400:3242): avc: denied { read } for pid=5758 comm="syz.4.1811" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 143.305233][ T36] audit: type=1400 audit(1750464302.400:3243): avc: denied { create } for pid=5758 comm="syz.4.1811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 143.326388][ T36] audit: type=1400 audit(1750464302.410:3244): avc: denied { read write } for pid=953 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 143.350619][ T36] audit: type=1400 audit(1750464302.420:3245): avc: denied { read } for pid=5760 comm="syz.4.1812" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 143.373298][ T36] audit: type=1400 audit(1750464302.420:3246): avc: denied { read } for pid=5760 comm="syz.4.1812" name="binder0" dev="binder" ino=439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 143.396268][ T36] audit: type=1400 audit(1750464302.430:3247): avc: denied { read write } for pid=953 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 143.420420][ T36] audit: type=1400 audit(1750464302.440:3248): avc: denied { remount } for pid=5765 comm="syz.4.1813" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=0 [ 143.440752][ T36] audit: type=1400 audit(1750464302.440:3249): avc: denied { create } for pid=5765 comm="syz.4.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 146.409957][ T5964] binfmt_misc: register: failed to install interpreter file ./file0 [ 148.018709][ T6137] FAULT_INJECTION: forcing a failure. [ 148.018709][ T6137] name failslab, interval 1, probability 0, space 0, times 1 [ 148.031564][ T6137] CPU: 1 UID: 0 PID: 6137 Comm: syz.4.1958 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 148.031601][ T6137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 148.031616][ T6137] Call Trace: [ 148.031625][ T6137] [ 148.031633][ T6137] __dump_stack+0x21/0x30 [ 148.031665][ T6137] dump_stack_lvl+0x10c/0x190 [ 148.031689][ T6137] ? __cfi_dump_stack_lvl+0x10/0x10 [ 148.031716][ T6137] ? vfs_write+0x8ba/0xe80 [ 148.031742][ T6137] dump_stack+0x19/0x20 [ 148.031766][ T6137] should_fail_ex+0x3d9/0x530 [ 148.031790][ T6137] should_failslab+0xac/0x100 [ 148.031819][ T6137] kmem_cache_alloc_noprof+0x42/0x3a0 [ 148.031844][ T6137] ? getname_flags+0xc6/0x710 [ 148.031871][ T6137] getname_flags+0xc6/0x710 [ 148.031897][ T6137] ? fput+0x1a5/0x240 [ 148.031928][ T6137] user_path_at+0x2b/0x60 [ 148.031958][ T6137] do_sys_truncate+0xa4/0x1a0 [ 148.031986][ T6137] ? __cfi_do_sys_truncate+0x10/0x10 [ 148.032013][ T6137] ? __kasan_check_read+0x15/0x20 [ 148.032038][ T6137] __x64_sys_truncate+0x5f/0x70 [ 148.032065][ T6137] x64_sys_call+0x2698/0x2ee0 [ 148.032092][ T6137] do_syscall_64+0x58/0xf0 [ 148.032119][ T6137] ? clear_bhb_loop+0x35/0x90 [ 148.032150][ T6137] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 148.032179][ T6137] RIP: 0033:0x7f2b28f8e929 [ 148.032197][ T6137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.032216][ T6137] RSP: 002b:00007f2b29d2b038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 148.032239][ T6137] RAX: ffffffffffffffda RBX: 00007f2b291b5fa0 RCX: 00007f2b28f8e929 [ 148.032257][ T6137] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000240 [ 148.032271][ T6137] RBP: 00007f2b29d2b090 R08: 0000000000000000 R09: 0000000000000000 [ 148.032284][ T6137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.032297][ T6137] R13: 0000000000000000 R14: 00007f2b291b5fa0 R15: 00007ffea777c2a8 [ 148.032313][ T6137] [ 148.332902][ T36] kauditd_printk_skb: 941 callbacks suppressed [ 148.332921][ T36] audit: type=1400 audit(1750464307.467:4191): avc: denied { read write } for pid=1076 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 148.363443][ T36] audit: type=1400 audit(1750464307.477:4192): avc: denied { create } for pid=6156 comm="syz.5.1966" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 148.385066][ T36] audit: type=1400 audit(1750464307.477:4193): avc: denied { create } for pid=6156 comm="syz.5.1966" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 148.407687][ T36] audit: type=1400 audit(1750464307.477:4194): avc: denied { read } for pid=6156 comm="syz.5.1966" name="binder0" dev="binder" ino=445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 148.430631][ T36] audit: type=1400 audit(1750464307.477:4195): avc: denied { read } for pid=6156 comm="syz.5.1966" name="binder0" dev="binder" ino=445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 148.453610][ T36] audit: type=1400 audit(1750464307.477:4196): avc: denied { read } for pid=6156 comm="syz.5.1966" name="binder0" dev="binder" ino=445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 148.476701][ T36] audit: type=1400 audit(1750464307.487:4197): avc: denied { read write } for pid=1076 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 148.492924][ T6175] FAULT_INJECTION: forcing a failure. [ 148.492924][ T6175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.501022][ T36] audit: type=1400 audit(1750464307.497:4198): avc: denied { create } for pid=6159 comm="syz.5.1967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 148.518018][ T6175] CPU: 0 UID: 0 PID: 6175 Comm: syz.5.1973 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 148.518059][ T6175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 148.518077][ T6175] Call Trace: [ 148.518086][ T6175] [ 148.518096][ T6175] __dump_stack+0x21/0x30 [ 148.518131][ T6175] dump_stack_lvl+0x10c/0x190 [ 148.518159][ T6175] ? __cfi_dump_stack_lvl+0x10/0x10 [ 148.518189][ T6175] dump_stack+0x19/0x20 [ 148.518233][ T6175] should_fail_ex+0x3d9/0x530 [ 148.518261][ T6175] should_fail+0xf/0x20 [ 148.518286][ T6175] should_fail_usercopy+0x1e/0x30 [ 148.518317][ T6175] strncpy_from_user+0x28/0x270 [ 148.518344][ T6175] ? getname_flags+0xc6/0x710 [ 148.518378][ T6175] getname_flags+0x102/0x710 [ 148.518407][ T6175] ? fput+0x1a5/0x240 [ 148.518442][ T6175] user_path_at+0x2b/0x60 [ 148.518476][ T6175] do_sys_truncate+0xa4/0x1a0 [ 148.518505][ T6175] ? __cfi_do_sys_truncate+0x10/0x10 [ 148.518542][ T6175] ? __kasan_check_read+0x15/0x20 [ 148.518569][ T6175] __x64_sys_truncate+0x5f/0x70 [ 148.518599][ T6175] x64_sys_call+0x2698/0x2ee0 [ 148.518631][ T6175] do_syscall_64+0x58/0xf0 [ 148.518663][ T6175] ? clear_bhb_loop+0x35/0x90 [ 148.518699][ T6175] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 148.518734][ T6175] RIP: 0033:0x7f639738e929 [ 148.518756][ T6175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.518777][ T6175] RSP: 002b:00007f639821a038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 148.518804][ T6175] RAX: ffffffffffffffda RBX: 00007f63975b5fa0 RCX: 00007f639738e929 [ 148.518823][ T6175] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000240 [ 148.518841][ T6175] RBP: 00007f639821a090 R08: 0000000000000000 R09: 0000000000000000 [ 148.518858][ T6175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.518872][ T6175] R13: 0000000000000000 R14: 00007f63975b5fa0 R15: 00007ffe3cc19318 [ 148.518894][ T6175] [ 148.734913][ T36] audit: type=1400 audit(1750464307.507:4199): avc: denied { read write } for pid=1076 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 148.765253][ T36] audit: type=1400 audit(1750464307.517:4200): avc: denied { read write } for pid=6161 comm="syz.5.1968" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 148.791716][ T6200] FAULT_INJECTION: forcing a failure. [ 148.791716][ T6200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.804942][ T6200] CPU: 1 UID: 0 PID: 6200 Comm: syz.5.1983 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 148.804980][ T6200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 148.804994][ T6200] Call Trace: [ 148.805002][ T6200] [ 148.805011][ T6200] __dump_stack+0x21/0x30 [ 148.805041][ T6200] dump_stack_lvl+0x10c/0x190 [ 148.805064][ T6200] ? __cfi_dump_stack_lvl+0x10/0x10 [ 148.805090][ T6200] dump_stack+0x19/0x20 [ 148.805112][ T6200] should_fail_ex+0x3d9/0x530 [ 148.805136][ T6200] should_fail+0xf/0x20 [ 148.805156][ T6200] should_fail_usercopy+0x1e/0x30 [ 148.805181][ T6200] strncpy_from_user+0x28/0x270 [ 148.805203][ T6200] ? getname_flags+0xc6/0x710 [ 148.805230][ T6200] getname_flags+0x102/0x710 [ 148.805256][ T6200] ? fput+0x1a5/0x240 [ 148.805286][ T6200] user_path_at+0x2b/0x60 [ 148.805316][ T6200] do_sys_truncate+0xa4/0x1a0 [ 148.805343][ T6200] ? __cfi_do_sys_truncate+0x10/0x10 [ 148.805370][ T6200] ? __kasan_check_read+0x15/0x20 [ 148.805406][ T6200] __x64_sys_truncate+0x5f/0x70 [ 148.805433][ T6200] x64_sys_call+0x2698/0x2ee0 [ 148.805464][ T6200] do_syscall_64+0x58/0xf0 [ 148.805493][ T6200] ? clear_bhb_loop+0x35/0x90 [ 148.805536][ T6200] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 148.805567][ T6200] RIP: 0033:0x7f639738e929 [ 148.805586][ T6200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.805606][ T6200] RSP: 002b:00007f639821a038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 148.805631][ T6200] RAX: ffffffffffffffda RBX: 00007f63975b5fa0 RCX: 00007f639738e929 [ 148.805649][ T6200] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000240 [ 148.805664][ T6200] RBP: 00007f639821a090 R08: 0000000000000000 R09: 0000000000000000 [ 148.805680][ T6200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.805694][ T6200] R13: 0000000000000000 R14: 00007f63975b5fa0 R15: 00007ffe3cc19318 [ 148.805713][ T6200] [ 149.125728][ T6230] FAULT_INJECTION: forcing a failure. [ 149.125728][ T6230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.139042][ T6230] CPU: 1 UID: 0 PID: 6230 Comm: syz.4.1994 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 149.139081][ T6230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 149.139095][ T6230] Call Trace: [ 149.139105][ T6230] [ 149.139116][ T6230] __dump_stack+0x21/0x30 [ 149.139147][ T6230] dump_stack_lvl+0x10c/0x190 [ 149.139173][ T6230] ? __cfi_dump_stack_lvl+0x10/0x10 [ 149.139200][ T6230] ? vsnprintf+0x7b4/0x1aa0 [ 149.139235][ T6230] ? __asan_memcpy+0x5a/0x80 [ 149.139261][ T6230] dump_stack+0x19/0x20 [ 149.139287][ T6230] should_fail_ex+0x3d9/0x530 [ 149.139313][ T6230] should_fail+0xf/0x20 [ 149.139336][ T6230] should_fail_usercopy+0x1e/0x30 [ 149.139362][ T6230] _copy_from_user+0x22/0xb0 [ 149.139393][ T6230] kstrtouint_from_user+0xc2/0x150 [ 149.139420][ T6230] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 149.139444][ T6230] ? selinux_file_permission+0x309/0xb30 [ 149.139479][ T6230] ? __cfi_selinux_file_permission+0x10/0x10 [ 149.139511][ T6230] proc_fail_nth_write+0x89/0x210 [ 149.139534][ T6230] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 149.139555][ T6230] ? security_inode_post_setattr+0x8c/0x110 [ 149.139585][ T6230] ? bpf_lsm_file_permission+0xd/0x20 [ 149.139610][ T6230] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 149.139631][ T6230] vfs_write+0x3c0/0xe80 [ 149.139656][ T6230] ? __kasan_check_write+0x18/0x20 [ 149.139683][ T6230] ? __cfi_vfs_write+0x10/0x10 [ 149.139708][ T6230] ? __kasan_check_write+0x18/0x20 [ 149.139732][ T6230] ? mutex_lock+0x92/0x1c0 [ 149.139752][ T6230] ? __cfi_mutex_lock+0x10/0x10 [ 149.139773][ T6230] ? __fget_files+0x2c5/0x340 [ 149.139806][ T6230] ksys_write+0x141/0x250 [ 149.139832][ T6230] ? __cfi_ksys_write+0x10/0x10 [ 149.139859][ T6230] ? do_sys_truncate+0x12d/0x1a0 [ 149.139888][ T6230] ? __cfi_do_sys_truncate+0x10/0x10 [ 149.139916][ T6230] ? __kasan_check_read+0x15/0x20 [ 149.139946][ T6230] __x64_sys_write+0x7f/0x90 [ 149.139972][ T6230] x64_sys_call+0x271c/0x2ee0 [ 149.140001][ T6230] do_syscall_64+0x58/0xf0 [ 149.140031][ T6230] ? clear_bhb_loop+0x35/0x90 [ 149.140065][ T6230] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 149.140096][ T6230] RIP: 0033:0x7f2b28f8d3df [ 149.140115][ T6230] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 149.140135][ T6230] RSP: 002b:00007f2b29d2b030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 149.140160][ T6230] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2b28f8d3df [ 149.140177][ T6230] RDX: 0000000000000001 RSI: 00007f2b29d2b0a0 RDI: 0000000000000003 [ 149.140192][ T6230] RBP: 00007f2b29d2b090 R08: 0000000000000000 R09: 0000000000000000 [ 149.140213][ T6230] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 149.140227][ T6230] R13: 0000000000000000 R14: 00007f2b291b5fa0 R15: 00007ffea777c2a8 [ 149.140246][ T6230] [ 149.577470][ T6239] netlink: 'syz.4.1997': attribute type 4 has an invalid length. [ 149.791388][ T6260] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49571 sclass=netlink_route_socket pid=6260 comm=syz.8.2005 [ 149.918576][ T6269] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2008'. [ 152.961604][ T6552] : renamed from team_slave_1 [ 153.540785][ T36] kauditd_printk_skb: 820 callbacks suppressed [ 153.540808][ T36] audit: type=1400 audit(1750464312.646:5021): avc: denied { read write } for pid=953 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 153.582051][ T36] audit: type=1400 audit(1750464312.646:5022): avc: denied { read } for pid=6572 comm="syz.4.2127" name="binder0" dev="binder" ino=439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 153.632510][ T36] audit: type=1400 audit(1750464312.646:5023): avc: denied { read } for pid=6572 comm="syz.4.2127" name="binder0" dev="binder" ino=439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 153.658815][ T36] audit: type=1400 audit(1750464312.656:5024): avc: denied { read write } for pid=953 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 153.683378][ T36] audit: type=1400 audit(1750464312.656:5025): avc: denied { write } for pid=6571 comm="syz.0.2126" name="001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=0 [ 153.709169][ T36] audit: type=1400 audit(1750464312.656:5026): avc: denied { read } for pid=6571 comm="syz.0.2126" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 153.732035][ T36] audit: type=1400 audit(1750464312.676:5027): avc: denied { read append } for pid=6571 comm="syz.0.2126" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 153.755367][ T36] audit: type=1400 audit(1750464312.676:5028): avc: denied { read write } for pid=6571 comm="syz.0.2126" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=0 [ 153.778943][ T36] audit: type=1400 audit(1750464312.686:5029): avc: denied { execmem } for pid=6576 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 153.798481][ T36] audit: type=1400 audit(1750464312.716:5030): avc: denied { execmem } for pid=6578 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 154.562851][ T304] bridge_slave_1: left allmulticast mode [ 154.568539][ T304] bridge_slave_1: left promiscuous mode [ 154.576002][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.590249][ T304] bridge_slave_0: left allmulticast mode [ 154.601778][ T304] bridge_slave_0: left promiscuous mode [ 154.607472][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.744877][ T304] veth1_macvtap: left promiscuous mode [ 154.750413][ T304] veth0_vlan: left promiscuous mode [ 158.683228][ T36] kauditd_printk_skb: 66 callbacks suppressed [ 158.683249][ T36] audit: type=1400 audit(1750464317.765:5097): avc: denied { execmem } for pid=6636 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 158.709467][ T36] audit: type=1400 audit(1750464317.765:5098): avc: denied { read } for pid=6638 comm="syz.8.2149" name="binder0" dev="binder" ino=442 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 158.732310][ T36] audit: type=1400 audit(1750464317.765:5099): avc: denied { read } for pid=6638 comm="syz.8.2149" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 158.755085][ T36] audit: type=1400 audit(1750464317.765:5100): avc: denied { read write } for pid=6638 comm="syz.8.2149" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 158.778592][ T36] audit: type=1400 audit(1750464317.765:5101): avc: denied { read } for pid=6638 comm="syz.8.2149" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 158.801322][ T36] audit: type=1400 audit(1750464317.775:5102): avc: denied { read write } for pid=3759 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 158.825481][ T36] audit: type=1400 audit(1750464317.775:5103): avc: denied { read write } for pid=6637 comm="syz.0.2147" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 158.849064][ T36] audit: type=1400 audit(1750464317.775:5104): avc: denied { read write } for pid=6637 comm="syz.0.2147" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 158.872592][ T36] audit: type=1400 audit(1750464317.775:5105): avc: denied { mounton } for pid=6637 comm="syz.0.2147" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 158.895573][ T36] audit: type=1400 audit(1750464317.775:5106): avc: denied { read write } for pid=6639 comm="syz.5.2148" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 163.741364][ T36] kauditd_printk_skb: 44 callbacks suppressed [ 163.741383][ T36] audit: type=1400 audit(1750464322.810:5151): avc: denied { execmem } for pid=6669 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 163.770238][ T36] audit: type=1400 audit(1750464322.810:5152): avc: denied { read write } for pid=6671 comm="syz.8.2161" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 163.795998][ T36] audit: type=1400 audit(1750464322.810:5153): avc: denied { mounton } for pid=6671 comm="syz.8.2161" path="/228/file0" dev="tmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 163.818788][ T36] audit: type=1400 audit(1750464322.820:5154): avc: denied { read } for pid=6671 comm="syz.8.2161" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 163.841517][ T36] audit: type=1400 audit(1750464322.820:5155): avc: denied { read } for pid=6671 comm="syz.8.2161" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 163.864266][ T36] audit: type=1400 audit(1750464322.820:5156): avc: denied { name_bind } for pid=6671 comm="syz.8.2161" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 163.886233][ T36] audit: type=1400 audit(1750464322.840:5157): avc: denied { read } for pid=6673 comm="syz.0.2159" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 163.908959][ T36] audit: type=1400 audit(1750464322.840:5158): avc: denied { read write } for pid=3759 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 163.933066][ T36] audit: type=1400 audit(1750464322.850:5159): avc: denied { read } for pid=6670 comm="syz.5.2160" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 163.955748][ T36] audit: type=1400 audit(1750464322.850:5160): avc: denied { create } for pid=6670 comm="syz.5.2160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 170.437000][ T36] kauditd_printk_skb: 58 callbacks suppressed [ 170.437020][ T36] audit: type=1400 audit(1750464329.498:5219): avc: denied { execmem } for pid=6706 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 170.462761][ T36] audit: type=1400 audit(1750464329.498:5220): avc: denied { create } for pid=6707 comm="syz.8.2173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 170.482716][ T36] audit: type=1400 audit(1750464329.498:5221): avc: denied { read } for pid=6707 comm="syz.8.2173" dev="nsfs" ino=4026532296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 170.504466][ T36] audit: type=1400 audit(1750464329.508:5222): avc: denied { read } for pid=6708 comm="syz.5.2172" name="binder1" dev="binder" ino=446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 170.527359][ T36] audit: type=1400 audit(1750464329.508:5223): avc: denied { read } for pid=6709 comm="syz.0.2171" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 170.550078][ T36] audit: type=1400 audit(1750464329.508:5224): avc: denied { read append } for pid=6709 comm="syz.0.2171" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 170.573570][ T36] audit: type=1400 audit(1750464329.518:5225): avc: denied { create } for pid=6709 comm="syz.0.2171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 170.594073][ T36] audit: type=1400 audit(1750464329.518:5226): avc: denied { create } for pid=6709 comm="syz.0.2171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 170.614606][ T36] audit: type=1400 audit(1750464329.518:5227): avc: denied { create } for pid=6709 comm="syz.0.2171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 170.634092][ T36] audit: type=1400 audit(1750464329.518:5228): avc: denied { read } for pid=6709 comm="syz.0.2171" dev="nsfs" ino=4026532310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 174.741272][ T304] bridge_slave_1: left allmulticast mode [ 174.746971][ T304] bridge_slave_1: left promiscuous mode [ 174.752660][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.760197][ T304] bridge_slave_0: left allmulticast mode [ 174.765896][ T304] bridge_slave_0: left promiscuous mode [ 174.771686][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.871481][ T304] veth1_macvtap: left promiscuous mode [ 174.877006][ T304] veth0_vlan: left promiscuous mode [ 175.100171][ T304] bridge_slave_1: left allmulticast mode [ 175.105849][ T304] bridge_slave_1: left promiscuous mode [ 175.111549][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.119427][ T304] bridge_slave_0: left allmulticast mode [ 175.125084][ T304] bridge_slave_0: left promiscuous mode [ 175.130841][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.220726][ T304] tipc: Disabling bearer [ 175.226121][ T304] tipc: Left network mode [ 175.231441][ T304] veth1_macvtap: left promiscuous mode [ 175.236952][ T304] veth0_vlan: left promiscuous mode