last executing test programs: 6.015508781s ago: executing program 0 (id=115): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xe00, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffff20}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@register_looper, @acquire_done={0x40106309, 0x2}, @acquire={0x40046305, 0x3}, @clear_death={0x400c630f, 0x1}, @clear_death={0x400c630f, 0x1}, @clear_death, @decrefs], 0xff28, 0x0, 0x0}) 5.893105013s ago: executing program 0 (id=116): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='wchan\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0xa80000, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f00000000c0)={'veth0_to_bond\x00', {0x2, 0x0, @multicast1}}) 5.840859104s ago: executing program 0 (id=117): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000480)={0x79, 0x0, 0xdbf}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x3) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x9, 0x7, 0x0, 0x1, 0x0, 0x2, 0xfffffffffffff801, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x1, 0x5], 0x8000000, 0x49340}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)=@x86={0x7f, 0x3, 0xfd, 0x0, 0x9, 0x7e, 0xca, 0x50, 0x8, 0x5, 0xb, 0x0, 0x0, 0x10003, 0x3, 0xff, 0x4, 0x2, 0x12, '\x00', 0x8, 0xfffffffffffffffc}) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'veth1_to_team\x00', 0x200}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x4) getsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x5, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) 5.753477866s ago: executing program 0 (id=119): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYRES16, @ANYRESOCT=r0, @ANYRES64=r1, @ANYRES32=r1, @ANYRES8=0x0, @ANYBLOB="b2c09a88862ff0732ae6eaf1c812846ed64044261df913d64536bc85e0f96193eeeb9ca72d534168ddf30e0ce767ab857ff52331d0cc", @ANYBLOB="3e81560ae5643a057f33608fff0c6e0278841ccc710a903e8b6aa68927ceaedb0d65d0ea1e959fc3a86b344c105f115d5d0119a881908e40f3663307f9f885a43b4d1e5b2d53ab935d095d99e52df3a0f38310106fbc0822d6e856ef6298f2a73987466cd8647ef8ba8750676700cbecc283907d9f", @ANYRESOCT=r0, @ANYRESOCT=r0], 0x88}}, 0x20008040) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x11, &(0x7f0000000000)=0x1, 0x4) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$BTRFS_IOC_QGROUP_CREATE(r4, 0x4010942a, 0x0) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r4, &(0x7f00000000c0), 0x10) close_range(r3, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000240)="390000001300034700ab65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) (async) writev(r1, &(0x7f0000000100), 0x0) (async) ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f0000000000)=@generic={0x0, 0x8000, 0x8}) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) syz_usb_connect(0x5, 0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="120100007ef10020c80a1034f9b60000000109027c0001fa24000209040800010e0100fe0524060001052400fbff0d240f019f010000000081004906241a07000040241306db3c8a79870716130d1b741acb4836b9912babed30d94e05b918f7ebe00f9a60e11fa4f240f95049a200d58931716e715b0979dc140cd5537f820424020b09058203ff03010cff0000"], 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @broadcast}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x6f631b4376e74f1e, {0x2, 0x0, @rand_addr=0x64010100}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) r7 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0x1000, @mcast2, 0x7}, 0x1c) (async) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x4a000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r9, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES16=r3, @ANYRES16=r8], 0x27) 5.309038885s ago: executing program 1 (id=126): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x44, 0x30, 0x1, 0x70bd29, 0x25dfdbfa, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0x3fad7e17a27f2d2d, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020}, 0x2020) dup2(0xffffffffffffffff, r1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x100}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x0, 0x7f, 0x2, 0x17, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, {0x6, 0x2b, 0x1, 0x80, 0x0, 0x1, 0x0, @in=@local, @in=@rand_addr=0x64010102}}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e24, @local}}, @sadb_x_filter={0x5, 0x1a, @in=@multicast2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x11, 0x14, 0x10}, @sadb_key={0x3, 0x8, 0x78, 0x0, "9725cc405a98fc48d3a5c035eb8422"}]}, 0xb8}}, 0x8080) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003040040000000000109022472510000000009040000120701030009050102cb0a00000009058202"], 0x0) r4 = memfd_create(&(0x7f0000000a00)='\vem\xda\x99R@i\x93\xfe\x9b#*\xff', 0x2) write(r4, &(0x7f0000000040)="06", 0x1) sendfile(r4, r4, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r4, 0x0) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000440)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r6, &(0x7f0000000240)={'syz0\x00', {0x508, 0x7, 0x7, 0x1}, 0x4a, [0x5f11bec3, 0x3, 0x5, 0x40, 0x0, 0x3, 0x0, 0x7d, 0x80013, 0x5, 0x0, 0x6, 0x0, 0x0, 0x4000000, 0x2, 0x1a4, 0xfffff605, 0x3, 0x0, 0x46e9, 0x7ff, 0xe2b, 0x7, 0x681c1eb5, 0x11e, 0x0, 0x2, 0x0, 0xe9, 0x0, 0xffff, 0x9, 0x4, 0x0, 0x3, 0x0, 0x0, 0x5de82a4e, 0x0, 0x0, 0x20000, 0x4, 0xfffffffe, 0x1, 0x0, 0x8000, 0x7, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff7, 0x0, 0xf685, 0x0, 0x1ab9, 0x0, 0x2, 0x0, 0xfffffffb, 0x1c15d73a, 0x2], [0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x61c5fb46, 0x10000, 0x0, 0x4, 0x10001, 0x75, 0x0, 0x4, 0x0, 0xd, 0x80000000, 0x0, 0x61c2, 0x9, 0x0, 0x9, 0x2, 0xff, 0x2, 0x10001, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x9, 0x441238ca, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x0, 0xc50, 0x3, 0x9f5, 0x0, 0xa02, 0x1c75, 0xf51, 0x6, 0x40, 0x0, 0x21, 0x20000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0xfffffffd, 0xc, 0x0, 0x200, 0xcc0, 0x401, 0x6, 0x6, 0x0, 0x0, 0xffffff7f, 0xe, 0x921, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x4, 0x0, 0x6574, 0x7, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0xffffffff, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x3ff, 0x8, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0x4ad, 0x0, 0x0, 0x80000001, 0x3, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x40, 0x8000010, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x800, 0x5, 0xd, 0x0, 0x40000000, 0x0, 0x4, 0x45d, 0x4, 0x0, 0xfff, 0xb2, 0xa, 0xb]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r6, 0x0) futimesat(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}) getsockopt$inet6_tcp_buf(r5, 0x6, 0x1a, 0x0, &(0x7f0000001080)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x7fffffff, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x43, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x10, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x6, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0xf4c, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x3, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) getsockname(r6, &(0x7f00000001c0), &(0x7f0000000000)=0x80) 2.738826485s ago: executing program 0 (id=136): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket(0x10, 0x3, 0x0) r1 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup2(r1, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) syz_io_uring_setup(0x21e75, &(0x7f00000000c0)={0x0, 0x5e04, 0x8, 0x0, 0x3af}, 0x0, 0x0) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="000086dd0500561008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) listen(0xffffffffffffffff, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffd}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) 2.691221136s ago: executing program 0 (id=137): r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) socket$unix(0x1, 0x1, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r1, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) connect$unix(r1, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r3, 0x1, &(0x7f0000001580)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x4, r2, 0x0, 0x0, 0xe6, 0x0, 0x1}]) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r0}}) (async) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r0}}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004680)=ANY=[@ANYBLOB="a4010000100013070000000000000000ac1e0101000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1a4}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r6, 0x28, 0x2, &(0x7f0000000180)=0x3, 0x8) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r6, 0x28, 0x2, &(0x7f0000000180)=0x3, 0x8) open(&(0x7f0000000340)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xca280, 0x10) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000480)={'veth0_to_batadv\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x41}}}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f0000000380)) ioctl$BTRFS_IOC_SCRUB_CANCEL(r5, 0x941c, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, r9, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xd0}, 0x0) (async) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, r9, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xd0}, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) (async) prctl$PR_GET_CHILD_SUBREAPER(0x25) r10 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r10, &(0x7f0000000200)={0xa, 0x4e23, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async) r11 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r11, 0x40087703, 0x5) (async) ioctl$ASHMEM_SET_SIZE(r11, 0x40087703, 0x5) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r11, 0x22e7c000) 2.283607054s ago: executing program 1 (id=139): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000007100)=0x8, 0x4) (async) r6 = socket(0x2, 0x2, 0x1) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000001c0)) (async) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000580)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r8, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f00005ae000/0x4000)=nil, 0x4000}, 0x3, 0x2}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r5, &(0x7f0000007080)="31e9200000007ef52f555f76c888", 0xe, 0x24000840, &(0x7f0000000040)={0x11, 0x86dd, r9, 0x1, 0xe2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, 0x14) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) (async) write(r4, &(0x7f0000000380)="240000001a005f1414f9f407000904000a00000000000008000f0001000000181fa198b0", 0x24) (async) r10 = eventfd(0x1008c69) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000080)={0x5, 0x0, 0x4, r10, 0x19}) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x18, 0x0, &(0x7f0000000300)=[@decrefs={0x40046307, 0x1}, @request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0}) 2.119477858s ago: executing program 1 (id=141): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r0, 0x3) setsockopt$bt_BT_VOICE(r0, 0x112, 0x13, 0x0, 0x0) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats=']) 2.111092168s ago: executing program 1 (id=142): write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0xf, 0x4704e000, 0x0, 0x5, 0x7f7c, 0x10, 0x0, 0x0, 0x4, 0xea33}}, 0x50) r0 = socket$can_raw(0x1d, 0x3, 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x109101, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f0000000440)=0xa000002, 0x4) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x13, 0x0, 0x0) close_range(r0, r1, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x7fffffffffffffff]}, 0x8) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x4000000000001) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000080)=0x4, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r8, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000140)={0x5, 0xf00, 0xa, {0x0, 0x2710}, {}, {0x0, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x2, 0x1}, 0xb4, 0x0, 0x0, 0x0, "d5aa30489ce9f8372f5ba8fecc94744033a0cd2091162670f2925f0ee19d6a6367758070930b931c0cc292bdd91b6ba67e38ff1919d7654d4ff9222ade3737b6"}}, 0x80}, 0x1, 0x0, 0x0, 0x844}, 0x8083) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r9, 0xb60aebde7ebb79ef, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000848}, 0x4000010) syz_clone(0xa61a2100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x300a, 0x3}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000001e00090002000000ffdbdf2501000000590001002f6465762f726e6c7a3000e1b679e7a300000000b7407e5ab474871987a67580e481ade7b420c9cdd56fb656c3eb738fbad5c4776d36b585a2893c0c59c64bef5bd09a2824525b431d132f93ea9fd13000c4dd11ca9a2ff1ef9f81eeb48cdebaffe705cfda130ba46df38cf7377cfaf6bc5e108c4a0eea8bb585c32d33cf96aebcaa83f9f327f822362b7ae4cb8f2398f4e844cf152e8810843cc37f000000906549a42f4c5edde21534d49053aede0a9ae95624f96570fa8093ce1204270bee2ada5e3000000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x24000810}, 0x4000) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) syz_open_dev$hidraw(&(0x7f0000000040), 0xbe, 0xa0380) syz_usb_connect(0x0, 0xa2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x8, 0x5, 0x6, 0x20, 0x91}, 0xde, &(0x7f00000001c0)={0x5, 0xf, 0xde, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x8, 0x0, 0x6}, @generic={0xc3, 0x10, 0xf8aaf92a686b861a, "1ca28707aff18042780debb96f8a1b21946216a8120d8433c5ba3daf900555f7da98ae3e94ca03ef71a0c1b5492fe04031d2ad0f32dbef685c4e69160c4887925f55d69d8eb617f4c47133a277c83b8c1333398d540046c83506f66050f0e8ef300c063c5e94800cb6cf1cf477d299c61668ff79581c76009db3a69a5c12a1c7980ade4481fca8187960e1df9a8c3d0fad6494ca537cb37be9d93d2ebfed4007636dd84132c7bcf7f3ac8288631a181eaa65749fc9a15fc0392b0a5305ac1a86"}, @generic={0x5, 0x10, 0xb, "cd5e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0xd, 0x1, 0x2}]}}) 931.196131ms ago: executing program 2 (id=153): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x80108907, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) setpgid(0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x7cab6ced6415609}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x4000000000) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async, rerun: 64) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) r6 = gettid() setpriority(0x1, r6, 0x1) (async) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000140)=0x0) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f00000001c0)={r7, 0x1, 0x8}) (async) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000080)) (async) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) bind$packet(r8, &(0x7f0000000200)={0x11, 0xf8, r9, 0x1, 0x5, 0x6, @multicast}, 0x14) (async) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x3}, 0x1c) (async) fcntl$setown(r4, 0x8, r6) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000480)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 922.939001ms ago: executing program 2 (id=154): r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40107446, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x1e, 0x5, 0x0) connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r5, 0x0, 0x29, 0x0, &(0x7f0000695ffc)) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noxattr}, {@cache_fscache}]}}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0x401) read$FUSE(r6, &(0x7f00000029c0)={0x2020}, 0x2020) 872.794742ms ago: executing program 2 (id=155): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) fchdir(r1) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) r5 = getuid() mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x400a1, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions}, {@allow_other}], [{@fowner_gt}, {@obj_role}, {@smackfshat={'smackfshat', 0x3d, '\'y\xc1'}}, {@uid_lt={'uid<', r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '#],-\\)-.^&{!}-'}}, {@fowner_lt={'fowner<', r5}}]}}) 872.543502ms ago: executing program 2 (id=156): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x3, 0x80000001, 0xda6, 0x1ff, 0x4}}, 0x118) fallocate(r0, 0x0, 0x5, 0x5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000080)={0x7, 0x7, 0x2}, &(0x7f00000001c0)=0x28) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9d81, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000085, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, 0x0) ptrace$cont(0x20, r3, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x2, 0x1, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) writev(r9, 0x0, 0x0) sendmsg$inet6(r9, &(0x7f0000000140)={&(0x7f0000000040)={0xa, 0x4e23, 0x45, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6d}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x8720}}], 0x18}, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r5, 0x4068aea3, &(0x7f00000000c0)={0xbc, 0x0, 0x1}) syz_kvm_setup_cpu$x86(r4, r8, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000002c0)="0f08646f410fff6636430f017aa2660f38800647a200000000000000004e0fc7ab74a5000066baf80cb864401517828266bafc0ced470fc77f39b8de2a9f8cef66bafc0cec0f07c7442400ca000000c74424020a000000ff2c24", 0x5a}], 0x1, 0x45, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) 782.821884ms ago: executing program 2 (id=157): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x1800, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r2 = socket(0x10, 0x1, 0x5) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0), 0x0, 0x4000081) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r6) tkill(r6, 0x12) ptrace(0x4208, r6) ptrace(0x4207, r6) sendmmsg$sock(r4, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)="763d91dff23d5de04955531d9a87e65ce6bf0f528453e3a7327d947cfc48db3f9fa3d019da1d1d3901086a2af9dd65b3b2935b9a01c4c589f887fd3e44", 0x3d}], 0x1}}], 0x1, 0x0) recvfrom(r5, &(0x7f0000000040)=""/60, 0x3c, 0x102, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(r0, 0xffffffffffffffff, 0x6) link(&(0x7f0000000400)='./cgroup\x00', &(0x7f0000000440)='./cgroup/file0\x00') syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) write(r9, &(0x7f0000000280)="240000001e005f0214fefffffffffff8074000001d00000004000000080009000d1b0000", 0x24) timer_settime(0x0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}}, &(0x7f00000001c0)) 712.715865ms ago: executing program 2 (id=158): mkdir(&(0x7f0000000040)='./file0\x00', 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="dc5960c7b372658fe7f7f7cec6d1b2008d80b8d946ab4e589fa8659ae05a17cb76a788182fae9b4038452e7c10c898e66a0d83746b479bde9b87edfc3fcbe9cc6a6d79c356b664233aec4e2e5db5d0e58043ca5dcfff0d1752e6f02191d21261d1c59e4275730c679e0abdd29f074769ad76f6fce470688b0dbd3cd7d31a9f77a4cfa4bcc11fc5204ca9", @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES8=r0, @ANYRES8, @ANYRES32=r0], 0x19c}, 0x1, 0x0, 0x0, 0x4008884}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x4) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@index_off}, {@redirect_dir_on}, {@nfs_export_on}]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r1 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="400d0100002a1e49990bc54ff2ed81c7d147cefca60060"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000500)='children\x00') r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) ioctl$BLKFINISHZONE(r3, 0x40101288, &(0x7f0000000140)={0x1, 0x9}) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000300)=0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r4, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000240)='./file1/file0\x00', 0x100, &(0x7f0000000200)={0x3, 0x4, 0x60000, {r3}}, 0x20) setitimer(0x2, &(0x7f00000000c0)={{0x0, 0xea60}, {0xffffffff}}, 0x0) ioctl$BLKRRPART(r3, 0xc0481273, 0x0) read$FUSE(r2, &(0x7f0000007100)={0x2020}, 0x941f) 292.737883ms ago: executing program 1 (id=159): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x3032, 0xffffffffffffffff, 0x1000) rt_sigaction(0x40000022, &(0x7f0000000080)={0x0, 0x80000000, 0x0, {[0x400fff]}}, 0x0, 0x8, &(0x7f0000000180)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x6) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0x0, &(0x7f0000000040)=0x20004, 0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f00007db000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x1) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x202, 0x0) write$UHID_INPUT(r5, &(0x7f00000010c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0xfffffffffffffeb7, &(0x7f0000000380)={@ptr={0x70742a85, 0x2, 0x0, 0xfffffffffffffffe}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/228, 0xe4, 0x2, 0x34}, @fd}, &(0x7f0000000080)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x6, 0x4, 0x58, @ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @empty}, 0x80, 0x700, 0x3, 0x8}}) setsockopt$MRT6_DEL_MIF(r6, 0x29, 0xcb, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x6, r7, 0x3}, 0xc) 176.172256ms ago: executing program 1 (id=161): getgroups(0x2, &(0x7f0000005e00)=[0x0, 0x0]) setregid(r0, r0) preadv(0xffffffffffffffff, &(0x7f0000000700)=[{0x0}], 0x1, 0x8, 0x101) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r2, &(0x7f0000002780)={0x2020}, 0x207a) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x60080, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) syz_clone(0x810000, &(0x7f0000000800)="220da1846e3314d8d6f033e82398cdcaf85614d04a970bdac15c1c7213cb07b2d7b3", 0x22, &(0x7f0000000200), &(0x7f00000002c0), &(0x7f0000000400)="e263c035ca4b228db34860d3c20e9d3745f755364a4c7c835b3326333a6cb9a91495d19558b908d5ee51bc3faa981952507e536e1279d36c83b9e019e8a005447719a51f8d69f7aefd532940d93d5ac76f3a56fb0551211f4aa2d23a890100f5674fdc4f840afc9dfa56944d07ff05571c5baa3491e160a804a9") fcntl$getflags(r1, 0x3) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20d00, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0xff, 0xffffffff, 0xfffffffd, 0x7, "ff00"}) r7 = syz_open_pts(r6, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x16) ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000000c0)) r8 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000400)={0x5, {{0xa, 0x4e21, 0x200000b, @mcast2, 0x10000}}, {{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xdbd4}}}, 0x108) sendmmsg$inet6(r1, &(0x7f00000006c0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffffc}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000480)="a95d4cb03715383ee8967b1a581c714394a372fe04ddca245c44cd733b7dc56e6723e01b6290d694a4e3de697de7d5a08272c3866cfa2a2199285c8d937fcf44e5709ca654ee627142130d82b0c89a45b5bee9f7c1a9a638aae911d8c15dab12270d3534b4534c33cbdcd55631ca38807f481d27c6b3e30f582d8b539b43a9183d0e99fec37eaf1402b6073af9ddf62da357280fd78ed5ce1348aedb97ef9672a7e5c35b3c", 0xa5}, {&(0x7f0000000540)="5ab572d8beccbe1342389bbd8eb6fcc5aee659746f3999d59bd68b9bbe28a7d8f873f39b7237388cd302b76b9a33a7d96145707364852c61670c310970af7b406d475c61ac43d3b37d0ee67b41c50939248ca31235d94394c15c3c1dc52c2b0ecadc29c0d953ee45f2a15eeb0b1686e70d4b269a21376d6a7148c56e1a44e8137e896247ab87ac251da90bba1ce9a4d25f9bce04d0aa0a4cd90d3f7b6be60450fcb215442e8ee9d04c727b6ae72abad217af2f03e4589ec64c1f04dfc7df1b0012a1d58da79983beccf2b60146ae0bb0a80626329cd94c25e8b6f5461ecbe60bc89d71b6c5761a6391a31b30e53535ed45b46d0f365bd81c", 0xf8}, {&(0x7f0000000300)="088e821d6850007f739285a2d16dcf7372db2569c2259ff8cc2e401ce6b92bc82a25c1d86bfbabb2d63536773a4e0cb6223f3fe4a11ccb70b16a929db1ffd4b7e7bd4683398b9f583f1dcb20183e5afbd9a6d9b105e0025f1b3e0efb", 0x5c}, {&(0x7f0000000080)="8300738b559891cadca764d2adb385e9ba37043478", 0x15}, {&(0x7f00000003c0)="3f6db746cf845a45ecd8c6cd14aa1cf38ad410b41a8b295266a5a815fe9218034095df", 0x23}], 0x5}}, {{0x0, 0x0, &(0x7f00000003c0)}}], 0x3, 0x2000c8c0) sendmmsg$inet6(r5, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)="93503d", 0x3}], 0x1}}], 0x1, 0x40) recvmmsg(r4, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000780)=""/115, 0x73}, {0x0}], 0x2}, 0x2}], 0x1, 0x100, 0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00') r9 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000000000098000040"]) 64.820138ms ago: executing program 3 (id=162): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x6, 0x0, &(0x7f0000000240)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x18, &(0x7f0000000300)=0xffffffff, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r2, r2, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000000)=0x8001, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0xfffffd88, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 64.606208ms ago: executing program 3 (id=163): mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@default_permissions}]}) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x140, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r1, &(0x7f0000007100)={0x2020}, 0x941f) 64.413138ms ago: executing program 3 (id=164): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 62.235198ms ago: executing program 3 (id=165): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'veth0_to_team\x00', @broadcast}) close_range(r0, 0xffffffffffffffff, 0x0) 16.296139ms ago: executing program 3 (id=166): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x44, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats']) r2 = getuid() mount$cgroup2(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x1400d, &(0x7f0000000100)={[{@memory_localevents}, {@memory_hugetlb_accounting}, {@favordynmods}, {@memory_localevents}, {@favordynmods}, {@memory_localevents}, {@pids_localevents}], [{@appraise_type}, {@uid_lt={'uid<', r2}}, {@obj_user={'obj_user', 0x3d, './binderfs\x00'}}]}) 0s ago: executing program 3 (id=167): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) setrlimit(0x6, &(0x7f0000000080)={0x6, 0x1003}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) r2 = dup(r1) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xd7) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r4, 0x0, 0x0, 0x0) rename(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00') syz_usb_disconnect(0xffffffffffffffff) syz_fuse_handle_req(r4, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0x8, {0x3, 0x3, 0x100000003, 0x0, 0x0, 0x3881fffc, {0x5, 0x7, 0x1, 0x0, 0x3, 0x0, 0xb, 0x0, 0x0, 0x2000, 0x4, 0x0, 0x0, 0x5, 0x8009}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_ima(&(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x3) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000640)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x50, 0x0, &(0x7f00000000c0)="70d07134252032b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8edc11615cb9fab16"}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0xfffffffffffffffe) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r6 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f00000006c0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x90}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="aa", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="307ddfb8", 0x4}, {&(0x7f0000000340)="ced98c1a5f5a93258dfa9a8c31878af8d7be921a531da9e6c50efdba96722424d55ce610a4d9b534b3aa09618dfc04f5504e30a263ad3fedf0a7381a8a", 0x3d}], 0x2}}], 0x3, 0x2000c8c0) sendmmsg$inet6(r6, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)="93503d", 0x3}], 0x1}}], 0x1, 0x40) recvmmsg(r5, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000780)=""/115, 0x73}, {0x0}], 0x2}, 0x2}], 0x1, 0x100, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.182' (ED25519) to the list of known hosts. [ 20.158361][ T36] audit: type=1400 audit(1758044322.550:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.159423][ T282] cgroup: Unknown subsys name 'net' [ 20.181078][ T36] audit: type=1400 audit(1758044322.550:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.208257][ T36] audit: type=1400 audit(1758044322.580:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.208455][ T282] cgroup: Unknown subsys name 'devices' [ 20.392428][ T282] cgroup: Unknown subsys name 'hugetlb' [ 20.398186][ T282] cgroup: Unknown subsys name 'rlimit' [ 20.550533][ T36] audit: type=1400 audit(1758044322.940:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.574334][ T36] audit: type=1400 audit(1758044322.950:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.596373][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.599216][ T36] audit: type=1400 audit(1758044322.950:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 20.631268][ T36] audit: type=1400 audit(1758044323.010:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.656970][ T36] audit: type=1400 audit(1758044323.010:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.685682][ T36] audit: type=1400 audit(1758044323.090:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.711358][ T36] audit: type=1400 audit(1758044323.090:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.711414][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.489834][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.496917][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.504172][ T289] bridge_slave_0: entered allmulticast mode [ 21.510366][ T289] bridge_slave_0: entered promiscuous mode [ 21.517313][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.524455][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.531568][ T290] bridge_slave_0: entered allmulticast mode [ 21.537730][ T290] bridge_slave_0: entered promiscuous mode [ 21.544892][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.551937][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.558990][ T290] bridge_slave_1: entered allmulticast mode [ 21.565271][ T290] bridge_slave_1: entered promiscuous mode [ 21.571314][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.578424][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.585528][ T289] bridge_slave_1: entered allmulticast mode [ 21.591817][ T289] bridge_slave_1: entered promiscuous mode [ 21.641442][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.648482][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.655621][ T292] bridge_slave_0: entered allmulticast mode [ 21.661935][ T292] bridge_slave_0: entered promiscuous mode [ 21.671128][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.678252][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.685500][ T291] bridge_slave_0: entered allmulticast mode [ 21.691688][ T291] bridge_slave_0: entered promiscuous mode [ 21.698009][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.705121][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.712260][ T291] bridge_slave_1: entered allmulticast mode [ 21.718453][ T291] bridge_slave_1: entered promiscuous mode [ 21.724749][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.731828][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.738903][ T292] bridge_slave_1: entered allmulticast mode [ 21.745206][ T292] bridge_slave_1: entered promiscuous mode [ 21.879184][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.886264][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.893658][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.900690][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.926956][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.934021][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.941325][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.948342][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.962181][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.969272][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.976599][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.983644][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.008019][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.015427][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.022974][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.030328][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.037852][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.045308][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.059079][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.066171][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.081638][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.088679][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.103199][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.110258][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.122924][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.129958][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.158406][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.165474][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.181714][ T289] veth0_vlan: entered promiscuous mode [ 22.189785][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.196849][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.221193][ T290] veth0_vlan: entered promiscuous mode [ 22.233563][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.240632][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.253653][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.260755][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.272620][ T289] veth1_macvtap: entered promiscuous mode [ 22.283370][ T291] veth0_vlan: entered promiscuous mode [ 22.289464][ T290] veth1_macvtap: entered promiscuous mode [ 22.315023][ T291] veth1_macvtap: entered promiscuous mode [ 22.347075][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 22.354543][ T292] veth0_vlan: entered promiscuous mode [ 22.398703][ T292] veth1_macvtap: entered promiscuous mode [ 22.411445][ T340] incfs: ino conflict with backing FS 2 [ 22.418646][ T337] rust_binder: Error in use_page_slow: ESRCH [ 22.418680][ T337] rust_binder: use_range failure ESRCH [ 22.464657][ T337] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 22.464704][ T337] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 22.493009][ T344] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 22.493063][ T344] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:4 [ 22.505287][ T337] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:2 [ 22.510600][ T348] exFAT-fs (rnullb0): invalid boot record signature [ 22.528443][ T348] exFAT-fs (rnullb0): failed to read boot sector [ 22.536537][ T348] exFAT-fs (rnullb0): failed to recognize exfat type [ 22.557687][ T350] rust_binder: Error while translating object. [ 22.557827][ T350] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 22.566185][ T350] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:7 [ 22.605016][ T356] usb usb9: check_ctrlrecip: process 356 (syz.1.8) requesting ep 01 but needs 81 [ 22.623252][ T356] usb usb9: usbfs: process 356 (syz.1.8) did not claim interface 0 before use [ 22.800453][ T364] rust_binder: Error while translating object. [ 22.800512][ T364] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 22.807315][ T363] netlink: 64 bytes leftover after parsing attributes in process `syz.2.11'. [ 22.820763][ T364] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:11 [ 22.825593][ T364] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 22.834992][ T364] rust_binder: Read failure Err(EFAULT) in pid:11 [ 23.480588][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 23.526731][ T382] /dev/rnullb0: Can't open blockdev [ 23.640564][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 23.646906][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.657855][ T31] usb 1-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 23.667016][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.675158][ T62] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 23.684208][ T31] usb 1-1: config 0 descriptor?? [ 23.698863][ T384] 9pnet: Unknown protocol version 9 [ 23.698910][ T385] 9pnet: Unknown protocol version 9 [ 23.851518][ T62] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.862538][ T62] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 23.872418][ T62] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 23.881516][ T62] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.890290][ T62] usb 4-1: config 0 descriptor?? [ 23.960550][ T331] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.098474][ T31] cypress 0003:04B4:07B1.0001: hidraw0: USB HID v0.10 Device [HID 04b4:07b1] on usb-dummy_hcd.0-1/input0 [ 24.111773][ T331] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 24.121985][ T331] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 24.131691][ T331] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 24.142869][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 24.151222][ T331] usb 3-1: SerialNumber: syz [ 24.358916][ T331] usb 3-1: 0:2 : does not exist [ 24.370680][ T331] usb 3-1: USB disconnect, device number 2 [ 24.397742][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 24.420841][ T389] loop2: detected capacity change from 0 to 7 [ 24.428198][ T389] rust_binder: Fixups oob 165 172 361 173 [ 24.428233][ T389] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 24.435580][ T389] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 24.444070][ T389] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:19 [ 24.468235][ T391] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.500324][ T62] hid-led 0003:27B8:01ED.0002: collection stack underflow [ 24.508712][ T62] hid-led 0003:27B8:01ED.0002: item 0 1 0 12 parsing failed [ 24.516466][ T62] hid-led 0003:27B8:01ED.0002: probe with driver hid-led failed with error -22 [ 24.560828][ T396] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 24.560852][ T396] rust_binder: Error while translating object. [ 24.571600][ T396] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 24.577773][ T396] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:26 [ 24.711095][ T62] usb 4-1: USB disconnect, device number 2 [ 24.994473][ T402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24'. [ 25.003345][ T402] netlink: 16 bytes leftover after parsing attributes in process `syz.2.24'. [ 25.262319][ T406] rust_binder: Write failure EINVAL in pid:8 [ 25.262870][ T406] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:8 [ 25.301824][ T36] kauditd_printk_skb: 101 callbacks suppressed [ 25.301843][ T36] audit: type=1400 audit(1758044327.700:175): avc: denied { ioctl } for pid=407 comm="syz.3.26" path="socket:[2007]" dev="sockfs" ino=2007 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 25.350995][ T36] audit: type=1400 audit(1758044327.750:176): avc: denied { write } for pid=407 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 25.370248][ T408] /dev/rnullb0: Can't open blockdev [ 25.375974][ T408] capability: warning: `syz.3.26' uses deprecated v2 capabilities in a way that may be insecure [ 25.387440][ T36] audit: type=1400 audit(1758044327.780:177): avc: denied { read } for pid=407 comm="syz.3.26" dev="nsfs" ino=4026532560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 25.408599][ T36] audit: type=1400 audit(1758044327.780:178): avc: denied { open } for pid=407 comm="syz.3.26" path="net:[4026532560]" dev="nsfs" ino=4026532560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 25.431898][ T36] audit: type=1400 audit(1758044327.800:179): avc: denied { read } for pid=407 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 25.461771][ T36] audit: type=1400 audit(1758044327.860:180): avc: denied { append } for pid=410 comm="syz.1.27" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.501067][ T36] audit: type=1400 audit(1758044327.890:181): avc: denied { create } for pid=412 comm="syz.3.28" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 25.545334][ T36] audit: type=1400 audit(1758044327.890:182): avc: denied { map } for pid=412 comm="syz.3.28" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=2018 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 25.570076][ T36] audit: type=1400 audit(1758044327.890:183): avc: denied { read write } for pid=412 comm="syz.3.28" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=2018 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 25.583060][ T416] pim6reg1: entered promiscuous mode [ 25.603103][ T36] audit: type=1400 audit(1758044328.000:184): avc: denied { unlink } for pid=412 comm="syz.3.28" name="#1" dev="tmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 25.612018][ T416] pim6reg1: entered allmulticast mode [ 25.639876][ T418] devpts: called with bogus options [ 25.701233][ T423] rust_binder: Error while translating object. [ 25.701259][ T423] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 25.707435][ T423] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:26 [ 25.732414][ T427] veth0_to_team: entered promiscuous mode [ 25.747343][ T427] veth0_to_team: entered allmulticast mode [ 25.760553][ T331] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.910536][ T342] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 25.928917][ T331] usb 2-1: Using ep0 maxpacket: 32 [ 25.936013][ T331] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.950550][ T331] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.960214][ T437] tipc: Started in network mode [ 25.961842][ T331] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 25.965489][ T437] tipc: Node identity 100, cluster identity 4711 [ 25.974474][ T331] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 25.989582][ T331] usb 2-1: Product: syz [ 25.993927][ T331] usb 2-1: Manufacturer: syz [ 26.001955][ T437] tipc: Node number set to 256 [ 26.007549][ T331] hub 2-1:4.0: USB hub found [ 26.061892][ T342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.072940][ T342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.082868][ T342] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 26.091999][ T342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.101182][ T342] usb 4-1: config 0 descriptor?? [ 26.122108][ T444] rust_binder: Write failure EFAULT in pid:47 [ 26.153632][ T448] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 26.170986][ T448] SELinux: Context ϧ-):E2٭ؾ)đJu36ޢ{@m[ is not valid (left unmapped). [ 26.207529][ T331] hub 2-1:4.0: 2 ports detected [ 26.245323][ T9] usb 1-1: USB disconnect, device number 2 [ 26.253577][ T452] rust_binder: Write failure EINVAL in pid:53 [ 26.982340][ T342] hid-led 0003:27B8:01ED.0003: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0 [ 27.020736][ T342] hid-led 0003:27B8:01ED.0003: ThingM blink(1) initialized [ 27.144801][ T469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.153388][ T469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.162074][ T469] SELinux: security_context_str_to_sid () failed with errno=-22 [ 27.223024][ T31] usb 4-1: USB disconnect, device number 3 [ 27.350976][ T9] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 27.390620][ T342] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 27.502404][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 27.510235][ T331] hub 2-1:4.0: hub_hub_status failed (err = -32) [ 27.516681][ T331] hub 2-1:4.0: config failed, can't get hub status (err -32) [ 27.524814][ T9] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 27.530550][ T342] usb 3-1: device descriptor read/64, error -71 [ 27.536782][ T9] usb 1-1: config 1 interface 0 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 27.557950][ T331] usb 2-1: USB disconnect, device number 2 [ 27.564414][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 27.573103][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.40 [ 27.582509][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.590684][ T9] usb 1-1: Product: ဉ [ 27.595011][ T9] usb 1-1: Manufacturer: 鵫罃㴛伂㏿⺏暗唬廥律䞃텂夞틏肘鏐羯旫ꭅ갘率꘨綁塥쨷좡꿦ඵ蓳嚢枢솪寮裔囶ꢌ⫼嵭ᖇ暝趢㎥먿䤬蝭䗷۟ⅵ숵鹯봒ꑀ襩Ꙑ㪅䍃턏祩뎣懞虳麒巀㥒鈓᪻│⩼퀙衕௑镢 [ 27.621959][ T9] usb 1-1: SerialNumber: syz [ 27.627636][ T463] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 27.780575][ T342] usb 3-1: device descriptor read/64, error -71 [ 27.980730][ T31] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 28.020596][ T342] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 28.036138][ T463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.044830][ T463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.130539][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 28.137572][ T31] usb 4-1: config 13 has an invalid interface number: 239 but max is 2 [ 28.146397][ T31] usb 4-1: config 13 has an invalid interface number: 99 but max is 2 [ 28.154668][ T342] usb 3-1: device descriptor read/64, error -71 [ 28.160955][ T31] usb 4-1: config 13 contains an unexpected descriptor of type 0x2, skipping [ 28.169759][ T31] usb 4-1: config 13 contains an unexpected descriptor of type 0x2, skipping [ 28.178833][ T31] usb 4-1: config 13 has an invalid interface number: 246 but max is 2 [ 28.187237][ T31] usb 4-1: config 13 contains an unexpected descriptor of type 0x1, skipping [ 28.196042][ T31] usb 4-1: config 13 has no interface number 0 [ 28.202240][ T31] usb 4-1: config 13 has no interface number 1 [ 28.208407][ T31] usb 4-1: config 13 has no interface number 2 [ 28.214666][ T31] usb 4-1: config 13 interface 239 altsetting 4 has an endpoint descriptor with address 0x34, changing to 0x4 [ 28.226819][ T31] usb 4-1: config 13 interface 239 altsetting 4 bulk endpoint 0x3 has invalid maxpacket 64 [ 28.236863][ T31] usb 4-1: config 13 interface 239 altsetting 4 endpoint 0xE has invalid wMaxPacketSize 0 [ 28.246843][ T31] usb 4-1: config 13 interface 239 altsetting 4 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 28.257924][ T31] usb 4-1: config 13 interface 239 altsetting 4 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 28.269121][ T31] usb 4-1: config 13 interface 239 altsetting 4 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 28.280243][ T31] usb 4-1: config 13 interface 239 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 28.291109][ T31] usb 4-1: config 13 interface 239 altsetting 4 endpoint 0x5 has invalid maxpacket 50316, setting to 64 [ 28.302708][ T31] usb 4-1: config 13 interface 239 altsetting 4 has an invalid endpoint descriptor of length 6, skipping [ 28.314384][ T31] usb 4-1: config 13 interface 239 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 28.325622][ T31] usb 4-1: config 13 interface 239 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 28.336484][ T31] usb 4-1: config 13 interface 239 altsetting 4 endpoint 0xD has invalid maxpacket 43875, setting to 64 [ 28.347700][ T31] usb 4-1: config 13 interface 239 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 28.358561][ T31] usb 4-1: config 13 interface 239 altsetting 4 endpoint 0xC has invalid maxpacket 62056, setting to 64 [ 28.369718][ T31] usb 4-1: config 13 interface 239 altsetting 4 has 17 endpoint descriptors, different from the interface descriptor's value: 15 [ 28.383434][ T31] usb 4-1: config 13 interface 99 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 28.394647][ T31] usb 4-1: config 13 interface 99 altsetting 4 endpoint 0x8 has an invalid bInterval 243, changing to 7 [ 28.405945][ T31] usb 4-1: config 13 interface 99 altsetting 4 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 28.416865][ T31] usb 4-1: config 13 interface 99 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 28.427857][ T31] usb 4-1: config 13 interface 99 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 28.438652][ T31] usb 4-1: config 13 interface 99 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 28.449416][ T31] usb 4-1: config 13 interface 99 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 28.460274][ T342] usb 3-1: device descriptor read/64, error -71 [ 28.466896][ T31] usb 4-1: config 13 interface 99 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 28.477633][ T31] usb 4-1: config 13 interface 99 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 28.488543][ T31] usb 4-1: config 13 interface 99 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 28.499288][ T31] usb 4-1: config 13 interface 99 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 28.510279][ T31] usb 4-1: config 13 interface 99 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 28.521112][ T31] usb 4-1: config 13 interface 99 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 28.531831][ T31] usb 4-1: config 13 interface 99 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 28.542947][ T31] usb 4-1: config 13 interface 99 altsetting 4 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 28.553994][ T31] usb 4-1: config 13 interface 99 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 28.564745][ T31] usb 4-1: config 13 interface 246 altsetting 118 has a duplicate endpoint with address 0x9, skipping [ 28.573317][ T9] usbhid 1-1:1.0: can't add hid device: -71 [ 28.575876][ T342] usb usb3-port1: attempt power cycle [ 28.590342][ T9] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 28.600560][ T31] usb 4-1: config 13 interface 246 altsetting 118 has a duplicate endpoint with address 0xC, skipping [ 28.602002][ T9] usb 1-1: USB disconnect, device number 3 [ 28.620743][ T31] usb 4-1: config 13 interface 246 altsetting 118 has a duplicate endpoint with address 0x9, skipping [ 28.631850][ T31] usb 4-1: config 13 interface 246 altsetting 118 has an invalid descriptor for endpoint zero, skipping [ 28.643010][ T31] usb 4-1: config 13 interface 246 altsetting 118 has a duplicate endpoint with address 0x9, skipping [ 28.654408][ T31] usb 4-1: config 13 interface 246 altsetting 118 has a duplicate endpoint with address 0x1, skipping [ 28.665501][ T31] usb 4-1: config 13 interface 246 altsetting 118 has a duplicate endpoint with address 0x3, skipping [ 28.676872][ T31] usb 4-1: config 13 interface 239 has no altsetting 0 [ 28.685196][ T31] usb 4-1: config 13 interface 99 has no altsetting 0 [ 28.692130][ T31] usb 4-1: config 13 interface 246 has no altsetting 0 [ 28.700395][ T31] usb 4-1: Dual-Role OTG device on HNP port [ 28.706878][ T31] usb 4-1: New USB device found, idVendor=12d1, idProduct=4765, bcdDevice=c3.6c [ 28.716026][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.724147][ T31] usb 4-1: Product: Ќ [ 28.728456][ T31] usb 4-1: Manufacturer: ∄耞ᢇ먀᭡돓珴ꚋ띐﨔俄瞐᫝ᮯ磷䣐섿橊⼋ಎ꼔粣鲩됹⃺芭ҩ仚愔苡╦ఓ㨲밎硔㌁礣鈺ĩ죵혓ᘈ庬蟹ᖳ㉴⣴빔㢳᧟ਈ竿딪엂睿쿰嬼ퟕ랶㾺翋ꟼâ鉶灥⋊⟍꛲ [ 28.729564][ T487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.753313][ T31] usb 4-1: SerialNumber: ⑇擐좗郚懴ᄜ찙등靃봊뢙꣝⿙쁃椥겳嶡癿쏴뢈ྨ跜ᬐ楇禽稃⽶쩲噎박嘩〽鼞똓ꦨ벳禼ᜂ鴬ɦ [ 28.758439][ T487] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 28.761255][ T472] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 28.841286][ T495] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:51 [ 28.920550][ T342] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 28.951518][ T342] usb 3-1: device descriptor read/8, error -71 [ 29.003342][ T31] usbhid 4-1:13.246: couldn't find an input interrupt endpoint [ 29.012912][ T31] usb 4-1: USB disconnect, device number 4 [ 29.081619][ T342] usb 3-1: device descriptor read/8, error -71 [ 29.320558][ T342] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 29.341527][ T342] usb 3-1: device descriptor read/8, error -71 [ 29.481631][ T342] usb 3-1: device descriptor read/8, error -71 [ 29.516199][ T509] binder: Unknown parameter 'defcontext01777777777777777777777' [ 29.590756][ T342] usb usb3-port1: unable to enumerate USB device [ 29.631604][ T516] rust_binder: 514 RLIMIT_NICE not set [ 29.690548][ T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 29.706570][ T521] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 29.850532][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 29.864900][ T31] usb 1-1: unable to get BOS descriptor set [ 29.871683][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.881820][ T342] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 29.889314][ T31] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 29.899078][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=ff.40 [ 29.908195][ T31] usb 1-1: New USB device strings: Mfr=127, Product=0, SerialNumber=0 [ 29.916390][ T31] usb 1-1: Manufacturer: syz [ 30.043041][ T342] usb 4-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 30.052183][ T342] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.060160][ T342] usb 4-1: Product: syz [ 30.064480][ T342] usb 4-1: Manufacturer: syz [ 30.069081][ T342] usb 4-1: SerialNumber: syz [ 30.074169][ T342] usb 4-1: config 0 descriptor?? [ 30.123364][ T507] ======================================================= [ 30.123364][ T507] WARNING: The mand mount option has been deprecated and [ 30.123364][ T507] and is ignored by this kernel. Remove the mand [ 30.123364][ T507] option from the mount to silence this warning. [ 30.123364][ T507] ======================================================= [ 30.287314][ T533] rust_binder: Error while translating object. [ 30.287346][ T533] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 30.293618][ T533] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:71 [ 30.311028][ T535] netlink: 57 bytes leftover after parsing attributes in process `syz.2.67'. [ 30.324559][ T10] usb 1-1: USB disconnect, device number 4 [ 30.337167][ T536] netlink: 57 bytes leftover after parsing attributes in process `syz.2.67'. [ 30.681804][ T518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.690325][ T518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.701831][ T549] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.702073][ T549] rust_binder: Error while translating object. [ 30.708545][ T549] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 30.714831][ T549] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:36 [ 30.970534][ T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 31.001130][ T342] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 31.011105][ T342] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 31.021479][ T342] asix 4-1:0.0: probe with driver asix failed with error -71 [ 31.027715][ T554] input: syz0 as /devices/virtual/input/input4 [ 31.028885][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 31.028897][ T36] audit: type=1400 audit(1758044333.420:214): avc: denied { write } for pid=553 comm="syz.3.73" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 31.064897][ T342] usb 4-1: USB disconnect, device number 5 [ 31.073165][ T36] audit: type=1400 audit(1758044333.450:215): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=458 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.099286][ T36] audit: type=1400 audit(1758044333.450:216): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=458 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.107673][ T556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.74'. [ 31.128282][ T36] audit: type=1400 audit(1758044333.450:217): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=458 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.134647][ T559] binder: Bad value for 'stats' [ 31.157434][ T36] audit: type=1400 audit(1758044333.490:218): avc: denied { append } for pid=555 comm="syz.2.74" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 31.183224][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 31.189350][ T31] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 31.197606][ T31] usb 1-1: config 0 has no interface number 0 [ 31.203743][ T31] usb 1-1: config 0 interface 184 has no altsetting 0 [ 31.211885][ T31] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 31.221012][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.228989][ T31] usb 1-1: Product: syz [ 31.233243][ T31] usb 1-1: Manufacturer: syz [ 31.237833][ T31] usb 1-1: SerialNumber: syz [ 31.243142][ T31] usb 1-1: config 0 descriptor?? [ 31.250455][ T31] smsc75xx v1.0.0 [ 31.330414][ T562] FAT-fs (rnullb0): bogus number of reserved sectors [ 31.337185][ T562] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 31.400549][ T342] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 31.420635][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 31.551555][ T342] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 31.563148][ T342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 31.574229][ T342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 31.581627][ T10] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 31.584044][ T342] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 31.592569][ T10] usb 2-1: config 0 has no interface number 0 [ 31.605058][ T342] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 31.612844][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 31.620229][ T342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.629459][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.642088][ T342] usb 4-1: config 0 descriptor?? [ 31.645590][ T10] usb 2-1: Product: syz [ 31.654630][ T10] usb 2-1: Manufacturer: syz [ 31.659328][ T10] usb 2-1: SerialNumber: syz [ 31.664790][ T10] usb 2-1: config 0 descriptor?? [ 31.870869][ T559] binder: Bad value for 'stats' [ 31.887525][ T10] usb 2-1: Found UVC 0.08 device syz (046d:0823) [ 31.899864][ T10] usb 2-1: No valid video chain found. [ 31.909303][ T10] usb 2-1: USB disconnect, device number 3 [ 31.943393][ T36] audit: type=1400 audit(1758044334.340:219): avc: denied { bind } for pid=578 comm="syz.1.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 31.974403][ T36] audit: type=1400 audit(1758044334.340:220): avc: denied { name_bind } for pid=578 comm="syz.1.80" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 32.011422][ T36] audit: type=1400 audit(1758044334.340:221): avc: denied { node_bind } for pid=578 comm="syz.1.80" saddr=224.0.0.2 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 32.023366][ T583] Zero length message leads to an empty skb [ 32.059312][ T342] plantronics 0003:047F:FFFF.0004: ignoring exceeding usage max [ 32.074482][ T342] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 32.099767][ T342] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 32.221023][ T36] audit: type=1400 audit(1758044334.620:222): avc: denied { relabelfrom } for pid=587 comm="syz.1.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 32.247409][ T36] audit: type=1400 audit(1758044334.620:223): avc: denied { relabelto } for pid=587 comm="syz.1.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 32.384567][ T591] input: syz1 as /devices/virtual/input/input5 [ 32.541902][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 32.552994][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 32.566120][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 32.577268][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 32.587208][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 32.597906][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 32.607535][ T31] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 32.616064][ T342] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 32.625338][ T31] usb 1-1: USB disconnect, device number 5 [ 32.735046][ T599] rust_binder: Error in use_page_slow: ESRCH [ 32.735060][ T599] rust_binder: use_range failure ESRCH [ 32.741097][ T599] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 32.746572][ T599] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 32.746594][ T599] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:97 [ 32.772999][ T342] usb 2-1: Using ep0 maxpacket: 16 [ 32.779198][ T342] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 32.787988][ T342] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.798335][ T342] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 32.804295][ T602] rust_binder: Error while translating object. [ 32.807500][ T602] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.809071][ T342] usb 2-1: config 1 has no interface number 1 [ 32.813991][ T602] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:101 [ 32.823374][ T342] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 32.851117][ T342] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 32.865529][ T342] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 32.874771][ T342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.882819][ T342] usb 2-1: Product: syz [ 32.887003][ T342] usb 2-1: Manufacturer: syz [ 32.891601][ T342] usb 2-1: SerialNumber: syz [ 32.946017][ T611] rust_binder: Error while translating object. [ 32.946074][ T611] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 32.952308][ T611] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:108 [ 33.099147][ T593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.84'. [ 33.117691][ T593] rust_binder: Error while translating object. [ 33.117745][ T593] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.124179][ T593] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:84 [ 33.140785][ T342] usb 2-1: USB disconnect, device number 4 [ 33.170940][ T628] rust_binder: Failed to allocate buffer. len:4240, is_oneway:true [ 33.235179][ T638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.238306][ T634] capability: warning: `syz.0.97' uses 32-bit capabilities (legacy support in use) [ 33.244051][ T638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.318493][ T641] sock: sock_set_timeout: `\' (pid 641) tries to set negative timeout [ 33.529596][ T652] cgroup: release_agent respecified [ 33.788923][ T668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.861208][ T667] rust_binder: Error while translating object. [ 33.867681][ T667] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 33.873920][ T667] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:86 [ 33.993683][ T678] random: crng reseeded on system resumption [ 34.012638][ T674] __vm_enough_memory: pid: 674, comm: syz.3.108, bytes: 18014402804453376 not enough memory for the allocation [ 34.039363][ T680] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1024 sclass=netlink_route_socket pid=680 comm=syz.1.111 [ 34.162164][ T62] usb 4-1: USB disconnect, device number 6 [ 34.170823][ T31] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 34.321591][ T31] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 34.329835][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 34.340588][ T31] usb 3-1: config 0 has no interface number 0 [ 34.348254][ T31] usb 3-1: New USB device found, idVendor=056d, idProduct=0000, bcdDevice=39.00 [ 34.357594][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.365760][ T31] usb 3-1: Product: syz [ 34.370052][ T31] usb 3-1: Manufacturer: syz [ 34.375049][ T31] usb 3-1: SerialNumber: syz [ 34.380826][ T31] usb 3-1: config 0 descriptor?? [ 34.430585][ T342] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 34.610531][ T342] usb 2-1: Using ep0 maxpacket: 8 [ 34.616807][ T342] usb 2-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 34.626126][ T342] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 34.636330][ T342] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 34.645571][ T342] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.729819][ T692] rust_binder: 68: no such ref 3 [ 34.734961][ T692] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 34.742206][ T692] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 34.749262][ T692] rust_binder: Write failure EFAULT in pid:68 [ 34.783748][ T696] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 34.858854][ T342] usb 2-1: string descriptor 0 read error: -71 [ 34.872609][ T704] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 34.872628][ T704] rust_binder: Read failure Err(EFAULT) in pid:44 [ 34.872999][ T342] usb 2-1: USB disconnect, device number 5 [ 34.910604][ T704] rust_binder: 44: no such ref 2 [ 34.921402][ T704] rust_binder: 44: no such ref 0 [ 35.150530][ T62] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 35.220163][ T721] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.220569][ T721] bridge0: port 3(macsec0) entered blocking state [ 35.233514][ T721] bridge0: port 3(macsec0) entered disabled state [ 35.239984][ T721] macsec0: entered allmulticast mode [ 35.245328][ T721] veth1_macvtap: entered allmulticast mode [ 35.251513][ T721] macsec0: entered promiscuous mode [ 35.256908][ T721] bridge0: port 3(macsec0) entered blocking state [ 35.263594][ T721] bridge0: port 3(macsec0) entered forwarding state [ 35.281141][ T62] usb 1-1: device descriptor read/64, error -71 [ 35.350130][ T726] netlink: 24 bytes leftover after parsing attributes in process `syz.1.126'. [ 35.530531][ T62] usb 1-1: device descriptor read/64, error -71 [ 35.600528][ T342] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 35.667102][ T730] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 35.732285][ T735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39315 sclass=netlink_route_socket pid=735 comm=syz.3.129 [ 35.744908][ T342] usb 2-1: device descriptor read/64, error -71 [ 35.770550][ T62] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 35.900754][ T62] usb 1-1: device descriptor read/64, error -71 [ 35.990662][ T342] usb 2-1: device descriptor read/64, error -71 [ 36.140554][ T62] usb 1-1: device descriptor read/64, error -71 [ 36.230531][ T342] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 36.250617][ T62] usb usb1-port1: attempt power cycle [ 36.360530][ T342] usb 2-1: device descriptor read/64, error -71 [ 36.590532][ T62] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 36.600530][ T342] usb 2-1: device descriptor read/64, error -71 [ 36.611565][ T62] usb 1-1: device descriptor read/8, error -71 [ 36.694822][ T31] usb 3-1: Found UVC 0.00 device syz (056d:0000) [ 36.702440][ T666] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 36.710283][ T31] usb 3-1: No valid video chain found. [ 36.715994][ T342] usb usb2-port1: attempt power cycle [ 36.723450][ T31] usb 3-1: USB disconnect, device number 8 [ 36.742270][ T62] usb 1-1: device descriptor read/8, error -71 [ 36.765902][ T742] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.871773][ T666] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.882922][ T666] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.893203][ T666] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 36.902413][ T666] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.911015][ T666] usb 4-1: config 0 descriptor?? [ 36.980526][ T62] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 37.001482][ T62] usb 1-1: device descriptor read/8, error -71 [ 37.060526][ T342] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 37.081750][ T342] usb 2-1: device descriptor read/8, error -71 [ 37.131819][ T62] usb 1-1: device descriptor read/8, error -71 [ 37.211534][ T342] usb 2-1: device descriptor read/8, error -71 [ 37.240634][ T62] usb usb1-port1: unable to enumerate USB device [ 37.450637][ T342] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 37.461806][ T751] netlink: 'syz.2.135': attribute type 4 has an invalid length. [ 37.469827][ T750] netlink: 'syz.2.135': attribute type 4 has an invalid length. [ 37.478745][ T342] usb 2-1: device descriptor read/8, error -71 [ 37.611479][ T342] usb 2-1: device descriptor read/8, error -71 [ 37.719622][ T666] hid-led 0003:27B8:01ED.0005: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0 [ 37.731666][ T342] usb usb2-port1: unable to enumerate USB device [ 37.740243][ T666] hid-led 0003:27B8:01ED.0005: ThingM blink(1) initialized [ 37.920873][ T331] usb 4-1: USB disconnect, device number 7 [ 38.185021][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 38.185038][ T36] audit: type=1400 audit(1758044340.580:243): avc: denied { read } for pid=769 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 38.489402][ T781] binder: Bad value for 'stats' [ 38.491059][ T36] audit: type=1400 audit(1758044340.880:244): avc: denied { listen } for pid=780 comm="syz.1.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 Stopping sshd: stopped /usr/sbin/sshd (pid 201) OK Stopping crond: [ 38.586010][ T787] rust_binder: BINDER_SET_CONTEXT_MGR already set stopped /usr/sbin/crond (pid 194[ 38.588033][ T787] rust_binder: BINDER_SET_CONTEXT_MGR already set ) [ 38.607474][ T787] netlink: 'syz.1.142': attribute type 1 has an invalid length. OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 148) [ 38.715444][ T36] audit: type=1400 audit(1758044341.110:245): avc: denied { search } for pid=800 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Stopping network: [ 38.824475][ T36] audit: type=1400 audit(1758044341.220:246): avc: denied { write } for pid=811 comm="syz.3.146" path="socket:[7625]" dev="sockfs" ino=7625 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.824782][ T812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.146'. [ 38.872216][ T666] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 38.880211][ T36] audit: type=1400 audit(1758044341.270:247): avc: denied { read write } for pid=814 comm="ip" path="/dev/console" dev="rootfs" ino=44 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 38.929894][ T36] audit: type=1400 audit(1758044341.270:248): avc: denied { write } for pid=149 comm="dhcpcd" name="dhcpcd" dev="tmpfs" ino=420 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.962986][ T820] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 38.965660][ T36] audit: type=1400 audit(1758044341.270:249): avc: denied { remove_name } for pid=149 comm="dhcpcd" name="sock" dev="tmpfs" ino=422 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.011329][ T36] audit: type=1400 audit(1758044341.270:250): avc: denied { unlink } for pid=149 comm="dhcpcd" name="sock" dev="tmpfs" ino=422 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 OK Stopping iptables: [ 39.052131][ T36] audit: type=1400 audit(1758044341.310:251): avc: denied { unlink } for pid=149 comm="dhcpcd" name="pid" dev="tmpfs" ino=421 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 OK [ 39.078203][ T36] audit: type=1400 audit(1758044341.350:252): avc: denied { setopt } for pid=813 comm="syz.2.147" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.080541][ T666] usb 2-1: Using ep0 maxpacket: 8 [ 39.106250][ T666] usb 2-1: config 1 has an invalid interface number: 53 but max is 1 Stopping system [ 39.114628][ T666] usb 2-1: config 1 has an invalid interface number: 126 but max is 1 message bus: [ 39.125468][ T666] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 39.148881][ T666] usb 2-1: config 1 has no interface number 0 [ 39.155564][ T666] usb 2-1: config 1 has no interface number 1 [ 39.175351][ T666] usb 2-1: config 1 interface 53 altsetting 1 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 39.191139][ T835] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 39.191172][ T835] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:85 [ 39.200813][ T666] usb 2-1: config 1 interface 53 altsetting 1 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 39.220913][ T666] usb 2-1: config 1 interface 53 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 done [ 39.248156][ T838] can0: slcan on ttyS3. [ 39.255888][ T666] usb 2-1: config 1 interface 53 altsetting 1 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 39.268801][ T666] usb 2-1: config 1 interface 53 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 39.279633][ T666] usb 2-1: config 1 interface 53 altsetting 1 endpoint 0xC has an invalid bInterval 208, changing to 7 [ 39.290891][ T666] usb 2-1: config 1 interface 53 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 39.301708][ T666] usb 2-1: config 1 interface 53 altsetting 1 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 39.312886][ T666] usb 2-1: config 1 interface 53 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 39.324212][ T666] usb 2-1: config 1 interface 53 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 39.335015][ T666] usb 2-1: config 1 interface 53 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 39.345802][ T666] usb 2-1: config 1 interface 53 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 39.361936][ T666] usb 2-1: config 1 interface 53 altsetting 1 has a duplicate endpoint with address 0x6, skipping killall: can't kill pid 708: No such process [ 39.384527][ T666] usb 2-1: config 1 interface 126 altsetting 182 has a duplicate endpoint with address 0x6, skipping [ 39.395621][ T666] usb 2-1: config 1 interface 126 altsetting 182 endpoint 0xD has invalid maxpacket 1023, setting to 64 Stopping klogd: [ 39.406977][ T666] usb 2-1: config 1 interface 126 altsetting 182 endpoint 0x9 has an invalid bInterval 245, changing to 11 [ 39.419898][ T666] usb 2-1: config 1 interface 126 altsetting 182 has an invalid descriptor for endpoint zero, skipping [ 39.433140][ T666] usb 2-1: config 1 interface 126 altsetting 182 has a duplicate endpoint with address 0x6, skipping OK[ 39.444091][ T666] usb 2-1: config 1 interface 126 altsetting 182 has a duplicate endpoint with address 0x8, skipping [ 39.455137][ T666] usb 2-1: config 1 interface 126 altsetting 182 has a duplicate endpoint with address 0x3, skipping [ 39.466150][ T666] usb 2-1: config 1 interface 126 altsetting 182 has a duplicate endpoint with address 0xA, skipping Stopping acpid: [ 39.477255][ T666] usb 2-1: config 1 interface 126 altsetting 182 has a duplicate endpoint with address 0xD, skipping [ 39.489550][ T666] usb 2-1: config 1 interface 126 altsetting 182 has a duplicate endpoint with address 0x3, skipping [ 39.490516][ T331] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 39.500494][ T666] usb 2-1: config 1 interface 126 altsetting 182 has a duplicate endpoint with address 0x9, skipping [ 39.519152][ T666] usb 2-1: config 1 interface 126 altsetting 182 has a duplicate endpoint with address 0x9, skipping [ 39.530262][ T666] usb 2-1: config 1 interface 126 altsetting 182 has a duplicate endpoint with address 0x8, skipping [ 39.541213][ T666] usb 2-1: config 1 interface 53 has no altsetting 0 [ 39.547899][ T666] usb 2-1: config 1 interface 126 has no altsetting 0 [ 39.556462][ T666] usb 2-1: Dual-Role OTG device on HNP port [ 39.562577][ T666] usb 2-1: New USB device found, idVendor=0bb4, idProduct=0a81, bcdDevice=13.f2 [ 39.571648][ T666] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.579703][ T666] usb 2-1: Product: syz [ 39.583894][ T666] usb 2-1: Manufacturer: syz [ 39.588470][ T666] usb 2-1: SerialNumber: syz [ 39.650574][ T331] usb 4-1: Using ep0 maxpacket: 16 [ 39.656988][ T331] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 39.667262][ T331] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 39.677784][ T331] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 39.686908][ T331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.695071][ T331] usb 4-1: Product: syz [ 39.699236][ T331] usb 4-1: Manufacturer: syz [ 39.703844][ T331] usb 4-1: SerialNumber: syz [ 39.709155][ T331] usb 4-1: config 0 descriptor?? [ 39.802727][ T666] usb 2-1: USB disconnect, device number 10 [ 39.920447][ T331] usb 4-1: USB disconnect, device number 8 [ 39.938903][ T867] overlayfs: conflicting options: nfs_export=on,index=off [ 39.950829][ T837] can0 (unregistered): slcan off ttyS3. [ 40.180543][ T342] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 40.341616][ T342] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 40.350826][ T342] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.359536][ T342] usb 3-1: config 0 descriptor?? [ 40.398418][ T869] pim6reg1: entered promiscuous mode [ 40.403764][ T869] pim6reg1: entered allmulticast mode [ 40.475054][ T872] netlink: 'syz.3.160': attribute type 1 has an invalid length. OK Stopping syslogd: [ 40.566660][ T342] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random stopped /sbin/syslogd (pid 92) OK [ 40.591757][ T888] veth0_to_team: entered promiscuous mode [ 40.597507][ T888] veth0_to_team: entered allmulticast mode [ 40.633919][ T892] binder: Bad value for 'stats' umount: can't remount debugfs read-only Connection to 10.128.1.182 closed by remote host. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 40.767801][ T342] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 40.800559][ T342] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 40.800578][ T331] rust_binder: 0: removing orphan mapping 0:4208 [ 40.820593][ T342] asix 3-1:0.0: probe with driver asix failed with error -71 [ 40.841727][ T342] usb 3-1: USB disconnect, device number 9 [ 40.916782][ T12] bridge_slave_1: left allmulticast mode [ 40.922479][ T12] bridge_slave_1: left promiscuous mode [ 40.928074][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.935797][ T12] bridge_slave_0: left allmulticast mode [ 40.941503][ T12] bridge_slave_0: left promiscuous mode [ 40.947071][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.121599][ T12] tipc: Left network mode [ 41.126807][ T12] veth1_macvtap: left promiscuous mode [ 41.132395][ T12] veth0_vlan: left promiscuous mode [ 41.351387][ T12] macsec0: left allmulticast mode [ 41.356436][ T12] veth1_macvtap: left allmulticast mode [ 41.362161][ T12] macsec0: left promiscuous mode [ 41.367212][ T12] bridge0: port 3(macsec0) entered disabled state [ 41.374065][ T12] bridge_slave_1: left allmulticast mode [ 41.379686][ T12] bridge_slave_1: left promiscuous mode [ 41.385287][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.392745][ T12] bridge_slave_0: left allmulticast mode [ 41.398360][ T12] bridge_slave_0: left promiscuous mode [ 41.404012][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.411607][ T12] bridge_slave_1: left allmulticast mode [ 41.417224][ T12] bridge_slave_1: left promiscuous mode [ 41.422877][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.430285][ T12] bridge_slave_0: left allmulticast mode [ 41.435981][ T12] bridge_slave_0: left promiscuous mode [ 41.441622][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.602914][ T12] veth1_macvtap: left promiscuous mode [ 41.608416][ T12] veth0_vlan: left promiscuous mode [ 41.613765][ T12] veth1_macvtap: left promiscuous mode [ 41.619255][ T12] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 42.826655][ T897] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 42.833451][ T897] ACPI: PM: Preparing to enter system sleep state S5 [ 42.840397][ T897] kvm: exiting hardware virtualization [ 42.845908][ T897] reboot: Power down serialport: VM disconnected.