last executing test programs: 1m42.412809338s ago: executing program 2 (id=359): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200100, 0x1c4) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0xc0, 0x1ec) read(r1, &(0x7f0000000080)=""/239, 0xef) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r2, 0x4dd99000) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) r3 = socket(0x28, 0x5, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x0) accept4$unix(r3, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m42.212751554s ago: executing program 2 (id=362): getdents64(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000000)=[@exit_looper, @increfs, @release, @request_death={0x400c630e, 0x2}], 0x1b, 0x0, &(0x7f00000000c0)="9f5b6a7cddd97b8a8d9708df0565a8d8fed866bebb4d614553ba99"}) syz_open_dev$mouse(&(0x7f0000000140), 0x6, 0x40) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8"]) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup\x00', &(0x7f0000000080)={0x8c441, 0x1e6, 0x3}, 0x18) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x50, 0x0, &(0x7f0000000600)="dd3dcb8ed3596fb60a52f56e1a2d06c921decd52342f658f94085fea462fbe4380e50f0d78e28babedd9607a2d2769cd2b76b86d7a93bd5d36a28631a10f3ca9e13d62b95ef3d9eafed8e5b5bd73f5f4"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x381, 0x3}) r3 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x18}, @flat=@binder={0x73622a85, 0x100, 0xfffffffffffffffc}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x3065a7505c571d71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) 1m41.994179362s ago: executing program 2 (id=372): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) 1m41.883710871s ago: executing program 2 (id=373): r0 = socket$pppl2tp(0x18, 0x1, 0x1) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x189a02, 0xb8) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r2, 0x107, 0x12, &(0x7f0000000240)=0xe9, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write(r3, &(0x7f0000002400)="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", 0x1000) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x101) close(r4) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) mmap(&(0x7f00000dd000/0x1000)=nil, 0x1000, 0x100000a, 0x10010, r4, 0xaec14000) 1m41.850666323s ago: executing program 2 (id=374): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f00000029c0)={0x2020}, 0x2020) 1m41.685790397s ago: executing program 2 (id=377): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000340)={0x80, 0x40000094, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r4, &(0x7f0000000100)="3f031c000302140006001e00890000004a1b7880610cc945000081000000c400000000000000", 0x26, 0x0, &(0x7f0000000540)={0xc9, 0x8100, r5, 0x1, 0x1}, 0x14) ioctl$USBDEVFS_SUBMITURB(r3, 0x802c550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x1f}, 0x8c, 0x40, 0x0, 0x0, 0x6, 0x9, 0x0, 0x8, 0xf788, 0x0}) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x420081, 0x0) bind$netlink(r8, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x100000}, 0xc) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r9, 0x29, 0x48, &(0x7f0000000080)=0x6, 0x4) ioctl$KVM_SET_DEBUGREGS(r7, 0x4080aea2, &(0x7f0000000180)={[0xeeee8000, 0x4, 0x4, 0xdddd1000], 0x40, 0x6, 0x8}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000002010040"]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000340)={0x80, 0x40000094, 0x0, 0x0}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) (async) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async) sendto$packet(r4, &(0x7f0000000100)="3f031c000302140006001e00890000004a1b7880610cc945000081000000c400000000000000", 0x26, 0x0, &(0x7f0000000540)={0xc9, 0x8100, r5, 0x1, 0x1}, 0x14) (async) ioctl$USBDEVFS_SUBMITURB(r3, 0x802c550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x1f}, 0x8c, 0x40, 0x0, 0x0, 0x6, 0x9, 0x0, 0x8, 0xf788, 0x0}) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x420081, 0x0) (async) bind$netlink(r8, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x100000}, 0xc) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_int(r9, 0x29, 0x48, &(0x7f0000000080)=0x6, 0x4) (async) ioctl$KVM_SET_DEBUGREGS(r7, 0x4080aea2, &(0x7f0000000180)={[0xeeee8000, 0x4, 0x4, 0xdddd1000], 0x40, 0x6, 0x8}) (async) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000002010040"]) (async) 1m41.580236255s ago: executing program 32 (id=377): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000340)={0x80, 0x40000094, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r4, &(0x7f0000000100)="3f031c000302140006001e00890000004a1b7880610cc945000081000000c400000000000000", 0x26, 0x0, &(0x7f0000000540)={0xc9, 0x8100, r5, 0x1, 0x1}, 0x14) ioctl$USBDEVFS_SUBMITURB(r3, 0x802c550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x1f}, 0x8c, 0x40, 0x0, 0x0, 0x6, 0x9, 0x0, 0x8, 0xf788, 0x0}) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x420081, 0x0) bind$netlink(r8, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x100000}, 0xc) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r9, 0x29, 0x48, &(0x7f0000000080)=0x6, 0x4) ioctl$KVM_SET_DEBUGREGS(r7, 0x4080aea2, &(0x7f0000000180)={[0xeeee8000, 0x4, 0x4, 0xdddd1000], 0x40, 0x6, 0x8}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000002010040"]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000340)={0x80, 0x40000094, 0x0, 0x0}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) (async) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async) sendto$packet(r4, &(0x7f0000000100)="3f031c000302140006001e00890000004a1b7880610cc945000081000000c400000000000000", 0x26, 0x0, &(0x7f0000000540)={0xc9, 0x8100, r5, 0x1, 0x1}, 0x14) (async) ioctl$USBDEVFS_SUBMITURB(r3, 0x802c550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x1f}, 0x8c, 0x40, 0x0, 0x0, 0x6, 0x9, 0x0, 0x8, 0xf788, 0x0}) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x420081, 0x0) (async) bind$netlink(r8, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x100000}, 0xc) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_int(r9, 0x29, 0x48, &(0x7f0000000080)=0x6, 0x4) (async) ioctl$KVM_SET_DEBUGREGS(r7, 0x4080aea2, &(0x7f0000000180)={[0xeeee8000, 0x4, 0x4, 0xdddd1000], 0x40, 0x6, 0x8}) (async) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000002010040"]) (async) 59.935538924s ago: executing program 4 (id=921): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa3}}, 0x14) io_setup(0x6, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000380)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000140)={0x1, 0x0, 0x78, 0x10}) dup3(r5, r2, 0x0) io_setup(0x8, &(0x7f0000000040)) io_setup(0x9, &(0x7f0000000080)) io_setup(0x7fff, &(0x7f00000000c0)) io_setup(0x10, &(0x7f0000000100)) r6 = socket$netlink(0x10, 0x3, 0x7) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1, 0x0, 0x0, 0xea}, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, 0x0) 59.928741994s ago: executing program 4 (id=922): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder0\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8500, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3}, 0x1c) connect$pppl2tp(r3, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x10, 0x0, {0xa, 0x4e20, 0x0, @loopback}}}, 0x32) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34060}], 0x1) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = dup(r5) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, 0x0, 0x0) openat$cgroup_ro(r6, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x400000b7, 0x0, 0x1}]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x3, 0x3, 0x0, 0x4, 0x2}) getsockopt$inet6_tcp_int(r8, 0x6, 0x2a, 0x0, &(0x7f0000001e80)) close_range(r0, 0xffffffffffffffff, 0x0) 59.72878454s ago: executing program 4 (id=924): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) (async) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = fsmount(r1, 0x0, 0x6) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000180)={{0x2, 0x4623, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) (async) fchdir(r2) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) (async) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x10e, 0x0) (async) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, 0x0) 59.72827505s ago: executing program 4 (id=925): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0xa00) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000180)=""/4096) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) write(r0, &(0x7f0000002400)="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", 0x1000) 59.72775186s ago: executing program 4 (id=926): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) (async) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2005, 0x1fd}) (async) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x800001, 0x0) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000180)) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x20) ftruncate(r2, 0xf09) (async) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x401}) (async) ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f00000001c0)) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000037c0), 0x0, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) pread64(r3, &(0x7f0000002800)=""/209, 0xd1, 0x8) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_pts(r3, 0x4200) (async) ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f00000002c0)={0x0, 0x1, 0x67c1}) 59.654419566s ago: executing program 4 (id=927): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x7cab6ced6415609}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000200)={'sit0\x00', 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0}}], 0x6e, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a6"}) 59.612833979s ago: executing program 33 (id=927): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x7cab6ced6415609}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000200)={'sit0\x00', 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0}}], 0x6e, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a6"}) 7.562084248s ago: executing program 0 (id=1801): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) (async) inotify_init1(0x800) 7.504387843s ago: executing program 0 (id=1803): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x765301, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) fsetxattr$security_capability(r1, &(0x7f0000002580), 0x0, 0x0, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x8c002, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200410a00"], 0x20}}, 0x0) write(r0, &(0x7f0000002400)="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", 0x1000) 7.502645863s ago: executing program 0 (id=1805): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) writev(r0, &(0x7f00000001c0)=[{0x0}], 0x1) (async) socket(0x10, 0x2, 0x0) syz_usb_connect(0x5, 0x35, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003be004209904a2a9e8c4011903010902230001046b40090904e44401ffe7bf0408240201bb03b610090507", @ANYRES8], 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x6, 0x0, &(0x7f0000000340)=[@decrefs], 0x0, 0x0, 0x0}) 7.328392717s ago: executing program 5 (id=1807): r0 = socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r0], 0x70}}, 0x40001) (async) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0) 7.268598532s ago: executing program 5 (id=1808): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x64, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4d, 0x10, 0x7, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0xff, 0x8, 0x1, {0x22, 0x7ab}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x1, 0x3, 0x8}}]}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x5, 0x9, 0xe6, 0x8}, 0x18f, &(0x7f00000003c0)={0x5, 0xf, 0x18f, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x6, 0x7f, 0x5}, @generic={0xe5, 0x10, 0x3, "e65b7ce35f21a9c5146f25d72719a395d222b92d8e4ddb3965d8586a536a5e632afdcc4229ee0723ab99f77bed15c9f55ea43e46379e7abb498d4939ed350013c3fff0558e3d46892a505ad0ecead9ce06355f1dcf3a7d97d5095dbfde38a2ff45d771a7b7fd3cb9142c2e16048ecbffecbb79a85047bdf99b93324dcc0d73b97e9744f9ca752915e2bd4d4c40bec7e1d2890b7a1344ef0c1893a214b42b27b7da9f4a87ba7b0eed817fd2a07024bd89f9d400a4e18b0acae8e579068cdf8cfaa74429c68a7d0f36b38374107ddbe1d718f331e83c0c4870c4a65d7e14018702c7a4"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0xb, 0xfffe}, @generic={0x80, 0x10, 0x3, "c50d475f8578e310f3dfa9893cdf08c1099b78de8ec21cb00a231a1522fcb10901259c64993c960cabb6174ce4d048924a64cacbcbef93d20b98706aa489f144b4214217b333412a620816b0f009c2408f41034ecf698d0c8807da01c8243375602dc6082afc3835b1397034e8e327fce03a6ad09b59463846a447138b"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "6ea7df9ec39344e49ecc164388c09e78"}]}, 0xa, [{0x62, &(0x7f0000000100)=@string={0x62, 0x3, "1fd4a082805670aa5178f975cd68ab40c8a8ac085020c546f37d5e34bb8107204ead34bd970bff27b2185929e79975833be88be3b1a71b4701f55aca7102a7559c7526c58b63daa3a7540a63b1f76832f9b6d99612f53dae1e8414f94fa5805a"}}, {0xf5, &(0x7f0000000280)=@string={0xf5, 0x3, "4c834fb49c1827a7edb3ed80067d5018b36a82c387ba2dc3a6ca24f9a4e96cf613c14c4cdf425764682400dfc2af0eaa7410dba04c2fa880ae0c9e0b229c00ac6aefe4a486022028b7cfcbc43ef1b27d5c439424724bf641c72030f520adef1ebc72a125f7947efd315f2ef4a45df7562f8ebb13e36462118e1c8cda934c0d24c8226458d8bf05e02fc2925cdc80ed6bdc08315e68f84cebb8e0cdd3c3a707e38e22a580ce4ac8c9302d2548b4eedbd5e29e25aa27e84e02d38d46e4e3c8ee837af8d8c383ac928a63d18595ec4e9aef373f5b47e4abb3ec5b346682f6f4662327aa72917017d71717bd43651d7d47afd00676"}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x340a}}, {0xa5, &(0x7f0000000580)=@string={0xa5, 0x3, "59b09178e199b0b8bd0b0694ccf016a41767cef7edf064dbbf67000c20f43fcc0c012594427af500d3be6eb137b64700db7c026027fcfe58955006fec2e6380167c576b2bb4a76410b69857e3f84a6f6d754d5be5fdf7d7a39f9b3c42a8fe65d0160e8788ba4a2199d555ce92070a96dd4296ff9b934502fe7144588204c7451f15667f87bccf355507a700dc7a56870abdcdf578893ee30486b911178a02c36e5cec5"}}, {0x102, &(0x7f0000000640)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x82c}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000ac0)={0x24, &(0x7f0000000940)={0x0, 0x2, 0x95, {0x95, 0xc9f64b022ee4ad6, "643e93cbbebc8ab40a71ac1cc81d557bd52e8df1223da13322aa149bc106c291101ec86419579691972dd23b99cdbba1cfbf2155dfeb007cf8b11c6376bd4d501693e2672becd8b0e58efbc74d95ea3e2b8a33da71696350c8a5a3939c69fdb3ec3c5ca45e34fcc3a706ec1d0b186e6f1bbb0c80adef310dcd449f9cf6442961bdb011943a2132581a3db87fa2bf73e248b93c"}}, &(0x7f0000000a00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x430}}, &(0x7f0000000380)={0x0, 0x22, 0x1a, {[@global=@item_4={0x3, 0x1, 0x9, "a68b5281"}, @main=@item_4={0x3, 0x0, 0xa, "e6bb16d7"}, @main=@item_4={0x3, 0x0, 0xc, "45ca59a1"}, @main=@item_4={0x3, 0x0, 0xb, "65491e5d"}, @local=@item_4={0x3, 0x2, 0xa, "bcde79d1"}, @global=@item_012={0x0, 0x1, 0x2}]}}, &(0x7f0000000a80)={0x0, 0x21, 0x9, {0x9, 0x21, 0xb3cb, 0x5f, 0x1, {0x22, 0x4d7}}}}, &(0x7f0000000d00)={0x2c, &(0x7f0000000b00)={0x40, 0x16, 0x84, "6ee62dbfd9c6a266cb1010d6c7883ae0e88c730c5b799198dadac75ed859f69f7c4ef079d52450f029b25db960be140c05251739528539c9325a2db720df52860dc43322b5c7f7ec9057b2aae684fee941b54720a1cc57ab428866e5b3c553d55cd349822892642a35b452968a0e7c9438cfe6cb3f8a7c5df502fa4918a3e5862c35a1d4"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000c40)={0x20, 0x1, 0x3e, "02d2e71505df49024ef577b3e01f1afa03951434597fe76185b6534402b8bf8055436a8618fc799c2a52e303fce7d1e18dca03d59eb6430ffff51c2abe7f"}, &(0x7f0000000cc0)={0x20, 0x3, 0x1, 0x1}}) syz_open_dev$evdev(0x0, 0x3f, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) syz_usb_connect$cdc_ncm(0x4, 0x127, &(0x7f0000000d40)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x115, 0x2, 0x1, 0x2, 0x40, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x7fff, 0x0, 0x1}, {0x6, 0x24, 0x1a, 0x10, 0xe757bc2981ae0a73}, [@mdlm_detail={0xa4, 0x24, 0x13, 0x6, "78e62c6fac6b2d5d3db55bf9812765b08e73481d544798309eaa7b02945de0f8322490eb6c564518a9d64a3c96543a3e9dce68ae3eab6989166cb03e6cb5d1a6ae0924a4d462b45d17cc17660bd282aa967a43ede13f1cb39e4d7c1d91ff70562804cf05c44d664db0778420666cd352a27f6ba4545026812772ff981e717ba3b571de58d0080adcd2ad11bd2574ef4178f71d7aa06a51b627f3ecb0d52521fa"}, @mdlm={0x15, 0x24, 0x12, 0xd}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x8, 0x4, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xd, 0x9, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x5, 0x9, 0x3}}}}}}}]}}, &(0x7f00000013c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x1, 0x9, 0xe, 0x10, 0x9}, 0x110, &(0x7f0000000e80)={0x5, 0xf, 0x110, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x55, 0xb, 0x2, 0x8}, @generic={0xd8, 0x10, 0xa, "eed86928381030614e3ff870fcb75ee810cefb5ed355828419bba70d5d6558224de8a8a9d49283514cd29913f983f2eca4c0774bd0655f2944e6ae2450c5a60466550cb02724d6d54226f27ff4d6a2fead70bfa32310377c375636ed219a964ddf7928b04da898b81640797314bd40c16c6d4110a37b728951292a9156bb7456c1189c99f7d40c7155810e0352529e28e28bfb98cf263c124f953e999768b2ccfb9ad5fc06dcb58318366a37240f11308c3d8818859ad1f3c238d08e863941dd889670d214b4004b0c8bc259bfd953fac2a95e520c"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xc, "523c75db025a9f99e782d198159bcef7"}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x1, 0x2, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x0, 0x5, 0x2}]}, 0x8, [{0x65, &(0x7f0000000fc0)=@string={0x65, 0x3, "e226d45297525a9ae36be1d5e6d21067b09b7fcaffcfcaa83bb8c00e3ff0ee3b4ef874298a51e5eb8fafdc56c15eb49ac856a7434a9f6552a3c78efdfe1f1cd97dad4cc6b73dac65c1bd6892caed7121709aa6340c2c52af9121a675c9811e2f7bf6fe"}}, {0x2, &(0x7f0000000a40)=@string={0x2}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x423}}, {0xe5, &(0x7f0000001080)=@string={0xe5, 0x3, "94baf547f1af00acb33128f226ec94e467e6876248de60977892d9a21120f5d73006d840a05389db6e64da52943022cdec005694d6fc6dce5bed05ce384d87c6d4eea9a0a739e5b983a6d7db81da7f5d88407b73c40e0bd0e1b0e856d2cc699a33dd5b5950084b824828ec11db07a9b7e123193f604d3f4e4131a3f6bd79a17fed83755750e3cd6a32e427e2cd0e7a3f9a5aef6599d8781b419f5a63cc9170679fe8e7cba9cc21008c14445f627274fc92f914bea21264f0d03fa03f2e34bef42b887361b3e6ed8331d945777041d6b30d9c6dec4efb4d9b2180506cee7290a7d0b8a3"}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x403}}, {0x2, &(0x7f00000011c0)=@string={0x2}}, {0xaa, &(0x7f0000001200)=@string={0xaa, 0x3, "93a8bb4248cb4c9ec44421faead5e7c9f72b6226195d8673517ff912dcfa2a08d4c1195f4e544bea3f33a060a8a1a7a7f3cf8aef0412ea1b2bcc3bb24b92a55c9a593ced80af7bd630d4a23475208a283820d2953df49800546476e71e2e86baa53b7d35ec953829ef11ec11a36d997007b04c26906bb2a4aa8fa25bf0d474bae3f0c0db60364874f99c9d606891341edbe9be9f4b38e0d96ec0eff4c587a775c894c5becfc5d27e"}}, {0xf6, &(0x7f00000012c0)=@string={0xf6, 0x3, "db6852c365a1f7bde7368a4cc3e6c71e2c47f8d01022158e0764f3ba321bfbfbd58c559959e6aaea6697ccfb0e9592df7e562f7ac6c97a7cf431d8cc2489c9dd4397857aa68cea0f198a4ede4e1447e33f22133dc5d7bee274a0015be2f34f5feb3ba5b9cf617b5088bc3bda123c96247526ccb587db3e7ddbbb3a0d19d5a1562699905b7888a75d4c7468c3bce1ed2660df530db58df281ceff5b3d9b66e2e757bff70c2b7ae36249309905accaa179406a45ccba161ee5340ec1c3791ed67bd823ceab543c2ae91ebe2a4fdca5d07889f4fbb8e611e49e224455b5cb84798cf6acb55b37799c49c5119b0829bf6b4c69e7c9f5"}}]}) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000240)=0x3, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r4, 0x0, r3, 0x0, 0x4, 0x8) ioctl$RTC_RD_TIME(r4, 0x80247009, &(0x7f0000001440)) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000001480), 0x4) 4.293424553s ago: executing program 5 (id=1835): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000040)=r1) (async) socketpair(0xb, 0x5, 0x5, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$bt_hci(r3, &(0x7f00000000c0)={0x1, @le_set_scan_rsp_data={{0x2009, 0x20}, {0x10, "97856c9bf0e3d102bdc4f43b9d6e341604486685ed49f6cd5709f7b9852226"}}}, 0x24) (async) write$binfmt_register(r0, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x800, 0x3a, '', 0x3a, '', 0x3a, './file0', 0x3a, [0x4f, 0x50, 0x4f, 0x50, 0x50, 0x4f, 0x50]}, 0x2e) (async) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000140)={@private0}, 0x14) (async) r4 = getuid() sendmsg$nl_generic(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x128, 0x3c, 0x4, 0x70bd2d, 0x25dfdbfe, {0x10}, [@generic="ff44c70ac70d72146b2dd7acceb284df5924e6ad632c73c9490234de088654b7301d39966c4b3f244053bf7ba3022bdb6a06e2a0f9c494b0f42d4f43a1f6f6a664641401819ef6519feb9b7956965fcc23529221c682bc42b19f054e8236275cf0dffa7c5efa5e10fb32eda9", @typed={0x8, 0x106, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x97, 0xe9, 0x0, 0x1, [@nested={0x4, 0x10b}, @generic="1824ba8b5665e888af62437f3ef5c9ce87ab37fc353b581d42c8d838c752f00edd96f8007c895c2dbf492178752038fca04e6103faf2eb7bf8765a1fe8eb71f664134e841a673af571c64e28bb3579e9b857f5d9a29627c3e07d64be79f5f818d9566d7523f16a074fa7643664728d3dfac0fc147430e196bffcdbd50f02d4853ba5dcdd296ebfd1d8b1741cc67955"]}, @typed={0x8, 0xfd, 0x0, 0x0, @uid=r4}]}, 0x128}, 0x1, 0x0, 0x0, 0x14}, 0x10040055) fremovexattr(r0, &(0x7f0000000380)=@random={'btrfs.', '\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'veth1_to_team\x00'}) (async) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x4d8100, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000480)={0x6, 0x4, {0x3, @usage=0x100, 0x0, 0xbe23, 0x3, 0x100000000, 0x4, 0x2, 0x20, @struct={0x9, 0xf0000000}, 0x3, 0x1000, [0x1, 0x7ff, 0x5, 0x0, 0xe5f, 0xbb]}, {0x7, @usage=0xfffffffffffffffa, 0x0, 0x6, 0x8000, 0x9808, 0x1, 0x9, 0x442, @usage=0x8, 0x8277, 0xfffffffe, [0x8, 0x8, 0x6, 0x5, 0x4, 0x8]}, {0x40, @usage=0x4, 0x0, 0x8000000000000000, 0x6, 0x4, 0xeade, 0x4, 0x4e0, @struct={0xfffffffd, 0xfffffffd}, 0x2, 0xa6, [0x8000000000000000, 0xc4, 0x5, 0x8, 0x1, 0x2]}, {0x4, 0x3, 0x5}}) (async) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000880)={0x13, 0x5, {0x1, @usage=0x10001, 0x0, 0x1, 0x100, 0x5, 0x2, 0x5, 0x28, @usage=0x2283, 0x7, 0x61, [0x10, 0x7f, 0x9, 0x719, 0x5, 0xffff]}, {0xc73f, @struct={0xc5, 0xdf}, 0x0, 0x2592, 0x0, 0x9, 0x9, 0xfffffffffffffffa, 0x80, @struct={0x5, 0x33b6}, 0x3, 0x8, [0x8, 0x9, 0xa6, 0xfffffffffffffffc, 0x6, 0xcd7]}, {0x4, @struct={0x80000000, 0x6}, 0x0, 0xe3, 0x2, 0x8, 0x4, 0x1, 0x80, @struct={0x9}, 0x8000, 0xffff, [0x1000, 0x7f, 0x3, 0x8, 0x4, 0x4]}, {0x3, 0x80, 0x8000000000000001}}) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000c80)={0x0, 0xffffffffffffffff, 0x921, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000001080)={0x4, 0x6, {0xffffffffffff4b49, @usage=0x2, r6, 0x5, 0x60000000000, 0x9, 0x2, 0x7fffffff, 0x40, @usage, 0x3ff, 0x2, [0x80, 0x2, 0xfe, 0x9, 0x8000, 0x1]}, {0x2, @struct={0x7, 0x5}, r7, 0x6, 0x5, 0x7, 0x6, 0x94a, 0x8, @struct={0x9, 0x4581}, 0x3, 0x8, [0x1, 0x9, 0x2, 0xd, 0x3, 0x3]}, {0x847, @usage=0xab9, r8, 0x6, 0x1, 0xffffffff, 0x82, 0x800, 0x4, @usage=0x1, 0x5, 0xdb8, [0x69, 0x1, 0x40, 0x6, 0x8000, 0x1000]}, {0xd5, 0xa0, 0x3}}) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001480)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async) epoll_create(0x6) r10 = accept$nfc_llcp(r3, 0x0, &(0x7f00000014c0)) copy_file_range(r10, &(0x7f0000001500)=0x3, r9, &(0x7f0000001540)=0x7, 0x800000000000000, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0), r2) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x38, r11, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x4e}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "f6aef84694"}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x4020010) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000016c0), 0x4) r12 = creat(&(0x7f0000001700)='./file0\x00', 0x44) r13 = ioctl$USERFAULTFD_IOC_NEW(r12, 0xaa00) ioctl$AUTOFS_IOC_PROTOSUBVER(r13, 0x80049367, &(0x7f0000001740)) syz_genetlink_get_family_id$mptcp(&(0x7f0000001780), r5) (async) recvmmsg(r10, &(0x7f0000003cc0)=[{{&(0x7f00000017c0)=@nfc_llcp, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001840)=""/76, 0x4c}], 0x1, &(0x7f0000001900)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000002900)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000002b80)=[{&(0x7f0000002980)=""/180, 0xb4}, {&(0x7f0000002a40)=""/106, 0x6a}, {&(0x7f0000002ac0)=""/174, 0xae}], 0x3}, 0x7}, {{&(0x7f0000002bc0)=@caif=@rfm, 0x80, &(0x7f0000003c40)=[{&(0x7f0000002c40)=""/4096, 0x1000}], 0x1, &(0x7f0000003c80)}, 0x2}], 0x3, 0x100, &(0x7f0000003d80)) (async) fsetxattr$security_capability(r12, &(0x7f0000003dc0), &(0x7f0000003e00)=@v1={0x1000000, [{0x8, 0xffffffff}]}, 0xc, 0x0) 4.279014004s ago: executing program 5 (id=1836): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x820061, &(0x7f0000000040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020) 4.224723098s ago: executing program 5 (id=1837): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000240)=@usbdevfs_driver={0x1, 0xfffffffe, &(0x7f0000000200)}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r2], 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1843, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'pim6reg0\x00', 0x2}) ioctl$TUNSETOWNER(r4, 0x400454cc, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 3.986048238s ago: executing program 0 (id=1844): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f0000000280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}}) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/36, 0x24}, {&(0x7f00000000c0)=""/22, 0x16}, {&(0x7f0000000140)=""/152, 0x98}, {&(0x7f0000000400)=""/196, 0xc4}, {&(0x7f0000000200)=""/4, 0x4}], 0x5, &(0x7f0000000d00)=""/4096, 0x1000}, 0x10020) (async) sendmmsg$inet6(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40) sendfile(r1, r0, 0x0, 0x80000000) 3.142137066s ago: executing program 0 (id=1847): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x89102) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x32, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[]) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000340)={'\x00', 0x0, 0x3, 0x7, 0x0, 0xc4c, 0xeeee0000, 0xeeef0000, '\x00', 0x1000}) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000140)=0x6, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xa, 0x1}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0xc, 0x0, &(0x7f0000000040)=[@enter_looper, @acquire={0x40046305, 0x2}], 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000240)=[{r5, 0xc4}], 0x1, 0x0, 0x0, 0x0) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000280)='memory.current\x00', 0x0, 0x0) fsetxattr$trusted_overlay_origin(r7, &(0x7f00000002c0), &(0x7f0000000300), 0x2, 0x0) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x12, r8, 0xa0e52000) openat$uhid(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) getsockopt$MRT6(r0, 0x29, 0xd0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 2.933226953s ago: executing program 5 (id=1848): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000001c0)={r0, 0x1, 0x6, @broadcast}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000002740)={'wg0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'netpci0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000002780)={@dev, @empty, 0x0}, &(0x7f00000027c0)=0xc) getpeername$packet(0xffffffffffffffff, &(0x7f0000002800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002840)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000002d80)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002880)=ANY=[@ANYBLOB="dc020000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="d000028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000000000054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000240004003e070307800000000000060cffffff7f0600095ab2e20000006009070900000008000100", @ANYRES32=0x0, @ANYBLOB="0400028000ff2402f4ad42df43f053bf178f567d5777691b127709a5b2df7735cfb43c6f895dc542b5c389f69cb93864fd0dd3ab4a926c608b2b64560b77e59dde3d39a70ce847d862626a13996832b7eb265abdd896a7226b67d6b791776ca3261444371117153d0cc4d6eaec9319f84a0830541395a2304681025a6272f0bf7c0c5ff27784007fa33a729f144549c942a4f25ce4457e5aca41e3cdbf0698dd69ee728a33a24f17558694b032780ab94014242db4d0e69fd1bb34d69e7ae5dfc8896209692c127f3120b40169ce5e0eb9206c969e58a59fff1cde89dfb943f6e180cacfe273747c6c8010128470", @ANYRES32=0x0, @ANYBLOB="080102803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c000400090001083f000000ff016803000000000c000406090000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="7400028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000700000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000a00000008000100", @ANYRES32=r5, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=r6, @ANYBLOB="04000280"], 0x2dc}, 0x1, 0x0, 0x0, 0x4080}, 0x800) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r8 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r8, &(0x7f00000001c0)=""/171, 0xab) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r9 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000000730d30bede06723e99773900407d1e502d000000000001090224000100000000090400000503000200d36b01302cff92c6ae92e898218212000905810300000c0007b2e63d7aa7843cb15f64f00951abd026705a10a54a65e10723f27017bd8681af50834bb51acd5e31c6af8c9a163ad1d8b61573123ec79d69ec13e8f0b12f94d44110c68bd75c8b478b3b7220c3829c86c498faabecc37243c8b947d52ca83591ec19b3f0fb9da38af99406793f5d4a5f049ae5084f5efe389dc678df782c4b0eef37549838bfe3cb2f8e0feafcac49d298292ba991"], 0x0) syz_usb_disconnect(r9) r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0) syz_usb_control_io$uac1(r10, 0x0, 0x0) syz_usb_control_io(r10, &(0x7f0000000300)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="400b67000000673007f59dd8df9eafb7b688daaeb58b9dfe63bbeeae65567c934d145b5c968dae7e61c16451ad6571f2d69a7993c0716e2ed8b42509c2cc4626067bd6a4f5916ed208ed98195800adb5b037c24dc600"/101], 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x1, 0x80, 0x5, 0x7, 0x3}}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000280), 0x1000000, &(0x7f0000000140)) syz_usb_connect$cdc_ecm(0x0, 0x77, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090265000101000004090400001002060000052406000005240000000d240f0100040000000000000115241207"], 0x0) read$FUSE(r7, &(0x7f00000005c0)={0x2020}, 0x2020) setxattr$trusted_overlay_upper(&(0x7f0000000500)='./file1\x00', &(0x7f00000004c0), &(0x7f0000000200)=ANY=[@ANYBLOB="00fb5f01801f0c48f35d96f0251ed5bdb7d02d347d8e985337e6b5eca44e2624353f5f325ff430ffffff7f00000000e18f3011c705454a36a15f8aa93c89c22b10d7649c78e027e5da14f7df440cfbc3ab6c6e03e99dd0f8bc1e3bba78d4cb"], 0x5f, 0x0) 2.204812062s ago: executing program 0 (id=1859): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001dc0)={0x30, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x1e, 0x0, 0x1, [@nested={0x9, 0x3d, 0x0, 0x1, [@generic="f1df62fd16"]}]}]}]}, 0x30}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x88, 0x17, 0xca, 0x10, 0x4dd, 0x8007, 0x4590, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5e, 0x0, 0x0, 0x2, 0xa, 0x0, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x3, 0xb}}]}}]}}]}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r2 = timerfd_create(0x0, 0x80000) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x3, 0x4}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/19, 0x13, 0x0, 0x8}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 1.026937777s ago: executing program 1 (id=1866): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/xfrm_stat\x00') ftruncate(r1, 0x3119c976) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'vlan1\x00', &(0x7f0000000200)=@ethtool_sset_info={0x4a, 0x0, 0x101}}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a41, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, 0x0) mlock(&(0x7f0000ffa000/0x2000)=nil, 0x2000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) userfaultfd(0x801) pselect6(0x40, &(0x7f0000000000)={0xb, 0x100000000, 0x1, 0x9, 0xaae5, 0x2, 0x101}, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@flat=@weak_binder={0x77622a85, 0x10a, 0x3}, @fda={0x66646185, 0x8, 0x2, 0x2d}, @fda={0x66646185, 0x2, 0x2, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x38}}, 0x400}], 0x0, 0x0, 0x0}) 508.702159ms ago: executing program 3 (id=1869): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x480000, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, &(0x7f0000000080)={0x1, 0x0, [{0x80000019, 0x6, 0x5, 0x100, 0x5, 0xa, 0x4}]}) fadvise64(r3, 0xfffffffffffff800, 0x3, 0x2) r5 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000002c0)={0x400002, r5}) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000000)={0x3, r5}) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x480000, 0x0) (async) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, &(0x7f0000000080)={0x1, 0x0, [{0x80000019, 0x6, 0x5, 0x100, 0x5, 0xa, 0x4}]}) (async) fadvise64(r3, 0xfffffffffffff800, 0x3, 0x2) (async) eventfd2(0x6, 0x80800) (async) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000002c0)={0x400002, r5}) (async) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000000)={0x3, r5}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 460.077763ms ago: executing program 3 (id=1870): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = getpgrp(0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = syz_clone(0x20002000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r4, 0x7, r3, &(0x7f0000000180)={0xffffffffffffffff, r3, 0xfffffffd}) r5 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = socket$inet(0x2, 0x2, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSNPMODE(r7, 0x4008744b, &(0x7f000000bb40)={0x281, 0x3}) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r8, 0xc0505405, &(0x7f0000000000)={{0x1}}) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), r9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r10, @ANYBLOB="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", @ANYRES32=r11], 0x22c}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) writev(r12, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fsopen(0x0, 0x0) r13 = getuid() setreuid(0x0, r13) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@private0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) statx(r5, &(0x7f00000002c0)='./file0\x00', 0x100, 0x1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r5, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000300)={{}, {}, [{0x2, 0x2, r13}, {0x2, 0x4, r14}, {0x2, 0x4}], {}, [{0x8, 0x5, 0xee01}, {0x8, 0x2}, {0x8, 0x1, 0xee01}, {0x8, 0x5, r15}, {0x8, 0x1, 0xee01}], {0x10, 0x7}, {0x20, 0x3}}, 0x64, 0x3) 426.111776ms ago: executing program 3 (id=1871): r0 = getpgrp(0xffffffffffffffff) waitid(0x0, r0, &(0x7f0000000000), 0x8, &(0x7f0000000080)) (async, rerun: 32) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000140)={0x3, [0x0, 0x0, 0x0]}) (async, rerun: 32) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000180)=0x101, 0x4) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1b) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0), 0x50001, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000000200)={{r2}, "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"}) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000001200)) (async) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x3) (async) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x11) (async) sendfile(0xffffffffffffffff, r2, &(0x7f0000001280)=0x4, 0x40) (async) r3 = signalfd(r2, &(0x7f00000012c0), 0x8) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000001300)=0x20, 0x4) (async, rerun: 64) readlinkat(r3, &(0x7f0000001340)='./file0\x00', &(0x7f0000001380)=""/31, 0x1f) (rerun: 64) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f00000013c0)='/dev/urandom\x00') r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000001540)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/12, 0xc, 0x0, &(0x7f0000001440)=""/250, 0xfa}, &(0x7f0000001580)=0x40) (async) getpeername$netlink(r3, &(0x7f00000015c0), &(0x7f0000001600)=0xc) (async) eventfd2(0x1000, 0x80800) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000001640)={{{@in=@broadcast, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}}}, &(0x7f0000001740)=0xe8) getgroups(0x6, &(0x7f0000001780)=[0x0, 0xee01, 0x0, 0xee00, 0xee01, 0xee01]) write$FUSE_STATX(r3, &(0x7f00000017c0)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x20, 0xe0, 0x6, 0x8, r5, r6, 0xa000, '\x00', 0x2, 0x5, 0x3, 0x7, {0x5, 0x9}, {0xf71c1a2, 0x5}, {0xffffffff, 0x9}, {0x6, 0x4}, 0x9, 0x7, 0x6, 0x1}}}, 0x130) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001900)={0x73622a85, 0x10a, 0x2}) (async) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001940), 0x2, 0x0) read$FUSE(r8, &(0x7f0000001980)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r10 = syz_open_procfs(r0, &(0x7f00000039c0)='net/snmp6\x00') fchown(r8, r5, 0xee01) (async, rerun: 32) sendmsg(r10, &(0x7f0000004100)={&(0x7f0000003a00)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x3, 0x1, 0x2, 0x4, {0xa, 0x4e21, 0x3, @empty, 0x7c}}}, 0x80, &(0x7f0000003e00)=[{&(0x7f0000003a80)="eedb0e2fad8c390cbff92e6cb7215b1cd29d2fbd5108b6dc967b3c2e8f805fd37f593010bf400fef609510038a56da8f00797d2f4f756eb8631ffe566316418a7f3875f2262f527c68cf77b0c85fadbf1ecb541a744aaff2a9c2d0044c7efdc995000d7b569e525b503c857e4c2e5779ec79ef519fef671d4fd198b42df6577cf9726eaf94265c4a5cd6acda9bc2e58ed5d675087bcfb73759b65c0c8172248e5c2966dbab6be97f100dec81357f58cf34b2095bb7a1b9479d7d282145f7b4643a87e5306a159ec8a77fc87e6d281f", 0xcf}, {&(0x7f0000003b80)="52ccd8e9fdda093d85ae6f7d5477631d1c79f5c71b6b419f02e7d9f6840535a4c2567122022b299a512a204b9747d960712ea24f62d8a4699c6826f7", 0x3c}, {&(0x7f0000003bc0)="cb208e5ba14b4455280d7248e3bba67c084570ce4123ce5a22b444aaf8d84f385d61c27f5e2579", 0x27}, {&(0x7f0000003c00)="381a5252597c635312018a52adc3653e04b4f18ac043bea326a96cf0b874392c219a72222f828882f73e29aebaa286c3e2df6f92bd2abec7ab19e7857fc137b33feb4b8048f82721a30cb9a77ea532934c26cf5c60edb700e9d57c8728c4", 0x5e}, {&(0x7f0000003c80)="9664c894658fb0a080392949d0296a8cbdb3612a938e2d82874414210d27ad1293ee8ad3b2830e02cf18f627b78dd882a6bcc9bbba1172748985c4b15f51c119af26625da8a0f1e9987a0083b1700b7e15296a43590d2428ec048676bdc3c72e6560ce0a791d49a8fd4b977d0fd71fe7", 0x70}, {&(0x7f0000003d00)="53a468eefa39697260f7faa2af110fee43e0028ae6cb765bbc0196ababb6a92fb42fc27be4f232a235bae7d4eb59537e037813b4cc4d6ede20679d972213b6025790db8e7172c02f7eb346e8d59595c0799c52ee50b3e379afb1a2a6e443f58ff5cdb245d4fff5064535deb452633e4311165acf87eb28d6e615d13b3e95c6da81c2755770187b710b9ea488f6626759dc9963aa261928f8f0f83b6599d04423e760b9aa25eb2f2bd30ba02eb60bbb7df62ba10a8321da9f655d93a6f940ea67774da2d4adf236", 0xc7}], 0x6, &(0x7f0000003e80)=[{0x40, 0x1c, 0x6f, "5ddc95b437331ea96db950b259390d7c8cf139b7c76dbfe8cf93d6839783a945fdaebe2f03bd82790049b792"}, {0xb0, 0x10a, 0x6, "590fd83219dfc07910d83150dc8033cf62d0c85164f986441b290b2093d14b3b71ab0e9ee4d5bdcfaee1dd58b3a83a6926ef4f9907bbb9c8b76eaafddcb7020a31c1d499d4e850ae0eccee2ce844bde04af2ff27cfd8be15eec7fe9c0bfd1223131522c46067ea235f4b3c8d7b6e771d4fe611a1f1b974095690e72056e4158758fb6a283570dca83ce8ec279d9b3c8a539309e06d29245dff"}, {0xe0, 0x88, 0x8001, "5ace830d269d78a7b4f34c236ba659619d10d29244c132609e6e45e1679ab5db788c9b67d5d55e267a2f129583210f94d5597cc2c1a52a19c7e4be2aa6e3998283a49a3a4052644b569a427014a8f791bf31bbd8eb3992e287cc8448183fde49c1d2ba9f21a92499134cfe23ded389916aa0da28363a8ef87c721d67ddd04b03d405055944934f7aa0f674287532845ba79deb350eb0e8d1d1f1e2677286cda8dfdaa17b3135fda245a6fc439a333491cf8affc01ebb320debcfa3acc14dbb2965836acc98f7b2cbce79f61646"}, {0x80, 0x88, 0x80000001, "bdc431098e50961c0c933fb0327386fa192ae9dc7c58b13ed2a866c4ef8a8d3d370cb99110cf08a1f59be94159b4b7b0de55df1fab0f21e74c69af8f02847a384c418c6e32d84e67581f42f4d5f5df5d5dd9a5537f0083fecf2fb2f78925562bbd7c1107d03af34c06e5"}, {0x10, 0x113, 0x7}], 0x260}, 0x20000890) (async, rerun: 32) mount$fuse(0x0, &(0x7f0000004140)='./file0\x00', &(0x7f0000004180), 0x20, &(0x7f00000041c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r9}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@default_permissions}], [{@fsmagic}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@measure}]}}) (async) ioctl$VHOST_VDPA_GET_STATUS(r10, 0x8001af71, &(0x7f00000042c0)) 359.386041ms ago: executing program 3 (id=1872): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) (async) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x408000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) getdents64(r3, &(0x7f00000000c0)=""/85, 0x55) (async) mkdir(&(0x7f0000000200)='./control\x00', 0x100) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407006}, 0x10020) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) (async) ioctl$TUNSETLINK(r4, 0x400454cd, 0x30b) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) (async) close(0x3) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x3, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000001300)={{r6}, 0x0, 0x6, @inherit={0x58, &(0x7f0000000240)=ANY=[@ANYBLOB="0100e9410b5f00000200000000000000050000000000010008000000000000000200000000000000ff030000000000000e000000000000000600000002000000fbffff"]}, @devid}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) (async) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e20, @local}, 0x10) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000000)={0xeeee8000, 0x2000, 0x1}) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) 299.097676ms ago: executing program 3 (id=1873): r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:policy_config_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:policy_config_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x80) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, r2, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x64}, 0x1, 0x0, 0x0, 0x24040004}, 0x20006880) socket$inet_udp(0x2, 0x2, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r7, 0x11, 0x64, &(0x7f0000000400)=0x3, 0x4) r8 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x26) ioctl$TIOCEXCL(r8, 0x540c) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2f) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r9, 0x8010aebb, &(0x7f0000000440)={0xffff1000, 0x1000}) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xbc, r0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macsec0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:event_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pimreg1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wlan0\x00'}]}, 0xbc}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xbc, r0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macsec0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:event_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pimreg1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wlan0\x00'}]}, 0xbc}, 0x1, 0x0, 0x0, 0x800}, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000600), 0x2, 0x0) (async) r10 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000600), 0x2, 0x0) close_range(0xffffffffffffffff, r10, 0x2) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r1) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, r11, 0x603, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010102}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4) r12 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r12, 0x800448d2, &(0x7f0000000d80)={0xa, &(0x7f0000000780)=[{@fixed}, {@none}, {@none}, {@none}, {@none}, {@fixed}, {@none}, {}, {}, {@none}]}) (async) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r12, 0x800448d2, &(0x7f0000000d80)={0xa, &(0x7f0000000780)=[{@fixed}, {@none}, {@none}, {@none}, {@none}, {@fixed}, {@none}, {}, {}, {@none}]}) sendmmsg(r12, &(0x7f0000002ec0)=[{{&(0x7f0000000dc0)=@ax25={{0x3, @default, 0x6}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x80, &(0x7f0000002140)=[{&(0x7f0000000e40)="2b25a86faff4d9a00cc6452528f86068449ac00376e5af5c2222dad109e86bde18a73f467597fb6a88a787a8dc1e9582eeea1f059c9189b59c04624f2c8834641542754728437dec656bba38802ee7d639b768ff48cf7de3a9f5f72739f5f5807d9fb62a85e0b0bd17dad3841139c091cde0cd6cc3495f780bd2449085043ba03d3d7018b7a829ea447673d18392f31d9c82", 0x92}, {&(0x7f0000000f00)="3a8572c09403d596d44a7acccfe42df0f912c900c8b3e79c0e38368355e660ecc425aee350be3f7f2bd9a8fcd1b13e3810dbf26741ed6cb7954bc3a63c8bc7b6511359d490065676ea5f27a35d8676fe147edb205bc6800810e46a46b1e5dcab396d4a11d5435698909e1c3c771039513339963fe3aa0065e8cde7dd3d8abac6942951c612090754af6c960ea17e274c7928aa2fdf62fcdfb991aaed2cbafe4fcda425fb40bdcf06195fdcd7a84783a115e1fb25b9f7e2dfb6e0a5b2d407d3d0e4895b1d13d9a03053fe0b97bd2393fd2b4be8bbb2f137a9", 0xd8}, {&(0x7f0000001000)="d4fe0a3a25d20b051bc233bf6085e41b9b41d3b2aa4eaff6e33923bec2cf6f7908eacde81eee635e589790690f039d8214976c5997cf5623a393fdf824772e", 0x3f}, {&(0x7f0000001040)="27f05c5695de433a57ecb0bc5a13cde201fa9f300a9ab37a4a9fdeae6286ee86ab8bf979e272f2d6ecb07308cb7d67b5c1a5dca2af792d341999864b664fca5bec297b407f4437b2f3b60a347a7b201b2e2af78cab6d9566e945e54d855fa911cad514c4f9cac0e6d025a4041e99cf1a0a937935940212c57e332ec3b0dda6957d42b75267a54adda4c6747f855c80db6b7bf7f76b29394fcdaa954fd810d7b72afee23c1c1eb6584551b540490ccb5b44b6c7aa8595226338029890bb42a657c09979ad886d0a", 0xc7}, {&(0x7f0000001140)="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", 0x1000}], 0x5}}, {{&(0x7f00000021c0)=@phonet={0x23, 0x7, 0x81}, 0x80, &(0x7f0000002340)=[{&(0x7f0000002240)="01398ed8a641b795b5441fd94ab9d631218e1d8f2925316ac65aa43050e1471d89a06c4561b58260880556617996b7a4a288f3812bc51430deebd967b5c7b72d56a61c85b5363f04ee24970fa192b665062de564228b3330983cdeee52dd5914b77c14427ae3db4ef2f6b310fc9740e9f236e682cd95c3519df1a8fc34d71d3105b33c2a468b731689748ca7f68973cf6016d729e4e8dc30cf43ec8a5ebf5cbd7a477f78ddd3f0eb744cf3fc643ff1c2b3aae1bd1b2884c0cd5541716114fd7de8e1246c8a1106d80db540b7c6e44aa5530675411258d3ce5974fbf46d79839ffd09b7d6e3e746070987bb", 0xeb}], 0x1, &(0x7f0000002380)=[{0x68, 0x115, 0x1f, "610798c767201aa3762cacd11c8cc36833e6b413cccc2fea0d116643d754156185370bb2c43e1e89665e942d4c230232bd8db8907f3e12bbd712f4e8bc5a0bb686621c3606bb11d036d412266faa5291b29514423854"}, {0xa8, 0x119, 0x5, "1d33c1feda298818deb1cb9b80ae767d9ebb85ad25630a5b02ac2a9ca431410a716770df4c0fa995a583795dca5f1ed6f1468b17a16afd9d4fa26d9bc626669bb13e6879d1974f3647bab15c017b5d758503e81101c6a93a9523aeebeae69cc29e75bd9f2b08915e31f39ef7883a4f1f7329ca8fa07f4e5d0ee40a3b30842f550cb179580a8bc673856ed0c57121d621cd08d10bc2"}, {0xd0, 0x1, 0x5, "90fb5eaaa8d05a6487c812383257a80b4d07bafcd2bc140fa2aa0044ff8bd0d3ecaf3051b249bfdcfc664a14f413f1adfee53ad33e6b243add411b740ea14c028609ef9b51c1ef081e4f1f483e81f28638ea1b286a67b6308fc4221eba6f1bd76f2ff14be62d3a8eff0804f9a04eb856f66f67ed9730fcb7a5a807d6fd0547091badee9dcdcaaf0476a06362acfc2d36986bebfe2784ee989c16d1488d8ea94af83ea70e4244f810192204d9ad9fb54afdab53d11fdfd8c5359b6a46"}, {0x58, 0x10f, 0x9, "be7c0f068a3adddd4fd29b0cfd891e3f78e1fe886249262cf71ba800e7c0a5328b8854707e51b9f8bbfc023bed276aa29d9c6956adf64064c3ab2cc72dc83dad7b27da"}, {0x80, 0x3a, 0xffffffff, "83054544e33abcf324fe4cbf69cef94fa4f5340e34124bd8988614a376159b589dc6513d78a3e7c26c66a8f353b456dd682ef2b42503bb16aad3be488e8be5e548909c538a2ccdbb6848e84083e2908a825aa7bc70f43b4732830b55e40417b25c259b106f47d1f46419dc"}, {0x38, 0x10b, 0xbe, "210779c7a9667f1c0bdd6adc88944b1f0708e4bdfb872105e395bece7028f7b838e03a"}, {0x20, 0x10f, 0xfffffffd, "bedcbe764a68316c52ab"}], 0x310}}, {{&(0x7f00000026c0)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f0000002940)=[{&(0x7f0000002740)="56f6e88505a63114456aa6acaabb7be74fb7437a580d32", 0x17}, {&(0x7f0000002780)="5b5c52c168fd1e3da7bfa151be42822ef5f036a5b755aafa657b0d8477a1ea584dc6582954b6e9c6943ec9f47277439fd6c6683a6d42b3264afec9a4fce23639e2dbc3f74244717589f86f799e020418196f42cf07ed92c61dcf1f271e104bc00d3e1408998e34b1c45f77bdda172b9b160a0e82d33ace1df3365b404acf58ae8bbd8375c7b550a23c559fa49a2405a8006f7f0b1a1f333ca6964ed78f598be525645bc2a262ff1700b985d6112cc63a784bd66f248e82b644b8410b14fbbafbd1d3cd118d40cfd823f289bc142582f18fe366d30f4f69efd938178125b43072cbaa0d94146cb9d01f0482a7000d99aabd640b0e9c1ec54594b64f", 0xfb}, {&(0x7f0000002880)="b4a8cc52a9d8f214533ab66afe47a6cecab544e9eafb0c603bc54cea039a62d7648607a290ebf0b500fdcb845ae549ac3c559f3252f2e18f19c2a6d664823730f452a560004517bd144e324887e8e375c335c14424e923395f1a7670b915ac298a598998c1fbc8c2e995010af78ac9bcacb516bb35546d5c396079f127b56a553e05196adb8e9683c72dbb8fa2de4590143be848b0a8741374b97136a5449ace3239ba4c481892", 0xa7}], 0x3, &(0x7f0000002980)=[{0x20, 0x112, 0x7, "26c8294b5652cb5797ee0503"}], 0x20}}, {{&(0x7f00000029c0)=@pppoe={0x18, 0x0, {0x2, @local, 'bond_slave_1\x00'}}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002a40)="44289e8f355a768052bbb47d0b17bbe1f3e6ca2a99561ba54ef3f0eb73a6c1c59fba9c9f71aef19a34ebd1dad12d1f10d6dfe186138863c72cc5b0c12d1f863048f4ec5ab1bcaf0fdb5cbb4e940674", 0x4f}, {&(0x7f0000002ac0)="fc21cb350aee8daf9381b8c2d0a96f45e461063658e66c5077cdc2d7ec93a35b66c5560937860247ac7d95967d9b9aff501c7c2d667558c98b55b99cc8701e9114068de6417707d918c177582e57804abf3d785072bd4e100f8e6e2bb415fa7b6ee4890b5723ce9e42e59a2dadf514cb81a448d049a9122c85349fc07cc9f616ab3ff2ece589fdb1e1af44469fe64ca8fc1c4f0625f5df79716a0dfce8a0a4439c15c0565dfd1ab14314710630", 0xad}, {&(0x7f0000002b80)="4cb635bc1200ca489d6ae859f45eda01ab1456ebaa19bda85a58172f1c63e26366d645b889584ce442c77acd32a7ea03155f42d4ad089bed71a8ebfdf3598922b651aaa10b190ce406bbd529da82011cc2fde8f18b8833cde57762ba8866cfd714d0311a9ff9c8c6c614a66cf243741a52797673ef290571d31fcecf7197500766756175cf7d1ab89761273d4a2668eda8280e9080a02bc2c7d3fc88667eb5077b0f12ee2106c3f1dcb2244fbdb55f23daab2d2d517089d36bf5d81a6809b42dcd60c5192419c9a502c51dca21009a75ccc6bb06e598dc5ab36d181484b18a3b3b95632b4cffff6e6bf65c6dd1f86fe469f8e411f0ba", 0xf6}], 0x3, &(0x7f0000002cc0)=[{0x30, 0x108, 0xfffffff7, "90bd760cd9f87fc74535b761d2da4db8833fbc59ea7cb0786d304723b1"}, {0x108, 0x115, 0x1, "e562551d2fab7e68757b33a98fd32e655b63362ff62add888d2a00d3f38560adeededf97bc8437948d781c5b36838f5785781eaa9fabf7575e72de43e74af08f1d9c7c4c9a02ae274cc0edecb8b13abb683191fd10bac428670e2414d64ba54ceee04876318e7afec53dfb42cb7ac481ae6d931b544859e5bda05bfde7105cd970c85a2cb12846451cdcafb556739574f4f82cfa4484e1e18514bec001a12dccc4ad0b641bf2246afda027617522985b9b65bc00eb9148f3227b3d6168b06d0ae085a2429e41c87ba4a253d91730e24e8ac551432f21e24957cf3fcb0679de28e8dfa319254301fcda405e5bb9f274252dbc5a"}, {0x10, 0x10e, 0x2}, {0xb8, 0x3a, 0x6, "416ef35e156ba392e493ccaffe1a4bfa858e6b5bac1af9e02a4efc0779cc0ceb33e58a45b21707f666dd8dd5d6e373b9f3a68e4364f9a16be94ce4532056b301e302772f869e406220ab817fdfb3704766b0a40dd22f802c07ed0f1c951370fc98d56fa911857f36a34047696a2c82391b09df49e0488750ed5b316eb0dd51304b7045d328e25f731762d7973140825961e515a4757c6a190166386c474dbdfb55d1af19"}], 0x200}}], 0x4, 0x4000) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r12, 0x800448d2, &(0x7f0000003480)={0x8, &(0x7f0000002fc0)=[{}, {@none}, {@none}, {@fixed}, {@none}, {@fixed}, {@none}, {@none}]}) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000003600)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000035c0)={&(0x7f0000003500)={0x9c, r0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:kvm_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x36}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:passwd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_vlan\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000003600)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000035c0)={&(0x7f0000003500)={0x9c, r0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:kvm_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x36}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:passwd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_vlan\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x80) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000003640)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r13, &(0x7f0000003680)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000036c0), 0x2, 0x0) (async) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f00000036c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r14, 0x40045564, 0x1f) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000003700), r1) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000003700), r1) 280.708577ms ago: executing program 3 (id=1874): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x9, 0x2, 0x4d, 0x401}]}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async, rerun: 32) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) (async, rerun: 32) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x3, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0x108) close(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x802, 0x0) (rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000a80)) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000001440)=[@acquire], 0x0, 0x0, 0x0}) (async) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xa, 0xc0, 0x3, [{{0x9, 0x4, 0x0, 0x6a, 0x1, 0x7, 0x1, 0x1, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x80, 0x1}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x2, 0x5, 0x5}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x0, 0x7, 0xb, 0x0, 0xff}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) r4 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="92b90857152077ebb70000000109021200010000000009040000000000"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000800)={0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x13, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f00000004c0)=[@request_death, @request_death], 0x0, 0x0, 0x0}) 152.389988ms ago: executing program 1 (id=1875): openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) pipe2(&(0x7f0000000100), 0x4800) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x40106726, &(0x7f00000000c0)) 152.005258ms ago: executing program 1 (id=1876): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f00000004c0)) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x367342, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r2, &(0x7f0000000080)='nv\x00', 0x3) readv(r1, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x2) 151.769318ms ago: executing program 1 (id=1877): sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340), 0x10, &(0x7f0000000400)={&(0x7f0000000880)=@can={{0x0, 0x1, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "50ee6e0546b37e57"}, 0x10}, 0x1, 0x0, 0x0, 0x8490}, 0x1) (async) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340), 0x10, &(0x7f0000000400)={&(0x7f0000000880)=@can={{0x0, 0x1, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "50ee6e0546b37e57"}, 0x10}, 0x1, 0x0, 0x0, 0x8490}, 0x1) socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f00000006c0)=""/103, 0x67}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000980)=""/121, 0x79}, {&(0x7f0000000900)=""/73, 0x49}, {&(0x7f0000000200)=""/68, 0x44}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/186, 0xba}, 0x6}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x8) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x8) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6664cca42b4e1416dfe01d00000000000000d0", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket(0x28, 0x5, 0x1) (async) socket(0x28, 0x5, 0x1) vmsplice(r2, &(0x7f0000000180)=[{&(0x7f0000000100)="d8e4e057f4de59c646b4a79d41474a5c9fdd439783ff1051fc9a7a8cd081afdbe88a84c663f36b5cec285f17bbb61089fdd64a8190300427", 0x38}, {&(0x7f0000000540)="06714f8ebd474c0f40382aa844ce228d353b6b67481273cea02503044e63bcb7b79d74e491b8f4dbc25e5fb749a5b8570b19a08a8460215afc9e1718037d7224bc2838a4c0f87f291aaea0538b5e90b8f34301dd88ff46520ba18627484bb10f4a241fd44c1d6a779719c4272ef5eb5cf5916d586395c7fc9464b0fee69adaa0712c", 0x82}], 0x2, 0xc) chown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 145.033758ms ago: executing program 1 (id=1878): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x51cc, &(0x7f0000000040)={0x0, 0xdc62, 0x4000, 0x1, 0x1be}, &(0x7f00000000c0), &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe50}, {0x0}, {0x0, 0x17}, {0x0}, {&(0x7f00000020c0)}], 0x5}, 0x0) syz_io_uring_setup(0x7c95, &(0x7f0000000280)={0x0, 0xaea1, 0x20000, 0x0, 0x156, 0x0, r1}, &(0x7f0000000300), &(0x7f0000000340)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x38a, 0x3}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup(r5) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="3b00000000000000400101c0"]) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r7 = accept$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) getsockopt$IP_SET_OP_GET_BYINDEX(r7, 0x1, 0x53, &(0x7f0000000440)={0x7, 0x7, 0x2}, &(0x7f0000000480)=0x28) setuid(0xee00) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x4}, @flat=@weak_binder={0x77622a85, 0xb, 0x2}, @fd}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xb, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) syz_io_uring_setup(0x51cc, &(0x7f0000000040)={0x0, 0xdc62, 0x4000, 0x1, 0x1be}, &(0x7f00000000c0), &(0x7f0000000180)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) (async) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="34cbf9c55466da0eadc249236ab3cbf316717306be4c08c8c7da1f1ee04ab4b4eac14995ebdf620ff778a4e3452587e42a3c6aa1bd35dfd99f23b525893bc3b5f9f3bed1986bf8d0dddd7c5cdada611f9bf641e421ed71a842d84fa289a542f941d6e06b2b14e2a706ce30acf7d82f224f3e30cadd9d15f3dddbb29dbeb9f68fb68bedb91e0b1ef48832778fe36699c7ebf101659a8f476c4a065eac71d6d1e7fafc6f25ec2c9a8f431fe347a2d30e912c5b2397613ce784637ec71e37566eb0548b461f71028459c6f137c18737d58b56949d022bf1eaf486692bb76836a233c7879d745e5bffffffffffff0442824f536a41bb22d08fe53952b9c6fed2605d53311c71b455655f96ea6a87e41e9211e90170b0a2b1a2098175ebcd33d517085d224122264cddadd82a3d11bc4a33ce66108b22b1abc6243d306d8f6b8a2ddb5373c190d8f859a3174a200936b079f85edcac7fc03fb993ec0ff8b83f1fd3f1b888d192d99c7ede5d381784d25410cccf1b0bf26a54f065e1e3ec59cc5704fb658fc980a0ac4287ef884ee82007554be3f1e163c81468d0c26c95e3e12393776e32800bb4f086f19080c4fca3d72e8569a5627ce98f2ae0bdb3ec42c23847d47e10b1c58da7e9cea990da842d96e3a51ed7d892f7b28a10486424a69a9109ebd4d7d5a3768400ac000a6d7556ca192e5cd45efb82001ac7b53e03036b6019a07ffb545cd3853e077f08a015f6232488c1139a9409c95ed005261e36b307406ba5714ef395129345866109341feb6c7c458ce08c147a983b46375ddb3621cee0312ba1a434bcd6081e1a8ae8b6d518988b9965faf9aff86df8173b93342cceaec357a100e59b4d66553633626b0b12e9622b8f8fdfe26545b87c57f8ce8609fb8e19b0f6d1cd64e8de85c7327f543b2f38cf3086b57f85e1aaa4add723e4bc4e3ea2c27acec1e545ae3fc870bd42422f6eaf17a1f82699c9cadf224ea1e5d1705b49118d91cc3731aeed60e41bf15a9613aeda8e63a29bc7a95b2d993d23269a310b91f69d16a71243c0f4080d3359f5ddd63c7032bef14ab25eb7df4b28b2132bcbf94a281c8f5de79885a6d679f145fca292b599bb09a1864726d86b65d4781408320b968e2224c23ce7a56d8892970043737ae47f071aaeb219716bc21e3304e301eb5cd32aea951a70621eb870214a72e6c474c3a20f5bd8e089ba16326cc9a80a1a4f5f0e8f58629e20b1c73eb8af330744b187a5cfdb410466378313700ca44eb6dcbc8f3d70f58e134202546f0b1a3b61a298f2a1184b1533bdad308fa2f960087e0f239d2ccbaee3889ddc1a2bea2183b98854d255a6f708909134fab83f42f13e7604f602e264f4a3b2b2a08c673c7ce2813218159b472d3b20ecbf26dd2f7b3ba5298a4ff7444ea0936e098c126f590b05e7697ed8a3d52ba1abc7285de2f160b9b081cb775a5ab77aad1bb98d47e3da53fc4c11d4db47de1e4e6f56ad671f5d8389b33260cc546e4f0bf34fec9b2abd209e6b89e6e381367774676ed6e6eaffe42b07241c276f3c84f17a0762de83eb769bdf28991ddbc23758f01c9ecfba4ab2ca2118fcedd7adde9ff47f643c13e3ad2f13b576985128f233e329fe269d5745cd2b30e5762452a4ff58fdec30623175f8d575ced1c43411e2869aadbe6f1e79a010bca334cb08d545bc2808f359b7777d1bb5675ee210574b9f72cdeb071e07eeaa0988086213a37a972647cf21d3a3bcbd7359da327bacad41b93c5e0e494669109dddcec781774f248f5663e4fac187d42ffccf68335de2adac4f8d3e1bf04b95a9464960186ed019773ffeda18f9827a61edc5fc4088eb0965cb1bd8af1185aa3972b8f73839b4611e303bcbc1f84a330f60fa0a7795ea3cffe0e338406533e12c7deef0b5906c513eab4619a8f02fdd65dcfb7297ef971c4601ad079f7ad38278ae3ff455b37d5492af546975535450693fd4593c8157b3fdb16fd3a106d2f1509d1c06dabb8933269d790a1c5e5f7bdd4a57e1e670d7043cfed88c365b5f8eefe530ef7da5322df981723332c088fce89c2ceee23b420f64332243b9c606d67d538810a94e0ffbd37a119d8fc4d6caec0def40e62613873c74feabde63e12cb2016c1d35cf1bb95bf59e01a63be8825cb3118b74b106f21eef5ee2f41e5fb39fdde058050f780d98ced247c66fc3a03ba04edaf14d698859ba303d511cf0845dc5e269aef2287770a247fd5ae1299b45819ff41725f9da3e4dab7770eb83992b53ae9a9de69e764f6e3aee3e27cfb1bacf531a91605894ae209da6d25872fb54bf36b2ed450b51aa8ee4875b9bc7e55753f61e12a323d301faceb2ecff0686b1359343a94774a6a098dc2df440725cd8331f527d4e22f8090d8879ef4765849705b99465d7ebdf661b81c303d13b87270dc1f227d5954fcbc93bbce6fde2a1f8d573d9cd8130c173a14706f1e9dabc4d16a5b003dd3239faf91769e25cf007b0623141e4e57f11746cd62f20d73956fa84c6a12e1756b6671a64bd7a0001a425907e1a61ba6d2ffa1149165a713a141bfec0f1af51afebdb84d5f14eb51acc284403627d6ce48fd028dc04e00ed963de37f85d155c33e2b4ceb09044c4f1c7791348216b674a8831a232a638f8bfb396fabbe1f880944bc5dcac55df8abc78f804306c88617acfd4adfbb5a055d3d3e91abb763ad84e701cc5679498e04600570f4b2e57c70542043dc590ab363215e6ab3f0bd89383748783d01c9227229edac723d4e2eaa061a44f2630691f25ca6093775183fdf432e01322203dd654b336670116a6a52a27ff2032b1103a4e4be0cc2fb05b24352d72e374e90cc3db2a5a691c7f6b8d1058d7730433c742d8ce52074318b1bce9bb104cf90c8b7f65293c2b74434661444f38d94d977e03433440517f6155a3cad2621c5502dd6148b867a40e6a40be4c8265ec2164b5257f06da1784e98991f42003ced4ba67c23b8c654b542d2d31168fd853cf56cc2c464d7a8a9fbcd2715968788f8527c597ab5f917753c1f1708d2c19972373c5a22af71847de22b9f1e9d38a04ea4dd291da3099cb836a696350bf1263c3c275c27b8b82f604625451a24490b0b5367c2fd05e699546ddf17709d2e2c2710f4361d9dd6e2de2b4353b7f4f8141f6f989dc1a798a974565978e4f9ec0c59a7dbc04bcab072c8513b9ca782c22cdd31fb116c10081740fd8f7d0cbd5c54f1069297f20b45d79bb9ace8e851a655fedf47b2dc76fd30b9ba9f09c9b50d6910ffcdec7078c36fe1e9b19dbb110197496349560a43c0ab42b4ce286643e73a92246ecb71e95ce0d54114772f8477c7d5604c1a52d2f680c5868cf08a2688dd9fef492a01836112cec824483e77da93d104a9e18d06bddf9a4007740a0537ac1a5e09900acc65d52680212a15b68b0ef887228e06f533c1ca95b8f9d81b9fc6608cb5bacf4b867922999c69d46048ec3f408866789f49fcb176fc99ed9d3e6c357ed2e3ce2665925773e5d86c2ceaf8f18519a00d9d2e19e9a6b16af0a53fd7df6974f5db00494460e7f3de6ff6b642859335e020513bb525adddabf0d7d6ae85e7e56e32ca8acc07fe86b7b445358966ba3914c1dfa7b814d9e846ff02a6a8c8f5713a0f727024b5d1ea7e4ce7c64f9b24dd3337a3df33714c5404403b0304b25a66fe3ac85083965877117b3d721e7922f0ac7e278feeb8dc09f58cbcfbb81b11d4699737f37ac240a24b9c4b2b587e68974f7ca5561856f32e389d32056f7d58e4de24c11bd5c5afaa441120370d0c48341e1b8146a6bbca8c15f23c155d2533e97a8e6496bc00533ec83be8488d020708d97385a03bcbf57cadc2c1e575e1ac134cdb5047f3f88eae0230751626cea1c85da9b74ddace668afebb2dc66d302ddf3c5f8f21ac0c0535d00839457e7cac9282a8e49d018b077e38ea512cf28eacff5d98e880abfb5af2e7c039d2e1f1edaad2642963ef29d715f754e2715caa6af046a298b285e3582d903be726b608619332e1a82be48b0f5adf6838f41ff776e5290de8269794bce8fb971267d036bd6bd30e42df918125d573ced78263251bcae2b7b40f1ba855b4f2472312ea8752c4a0e09468bd25615a6c00a9b44c484c5507b8400537f20890e9499ec94ed2b6aeff21e57c6e8a93d80097f85ac9316b03a5f768721bf7d041bb9a6a03eabd615e3c4d74f56c429d53b8fec4b5e86c5b311a6cd4a86f03e04dab25ad65b68a8b8d9053993fd2440ff2b81768213084c831d31a0f8c646aff9090b5463cbee452abd6318340ec41b50f1deba7ffb60b326751de3f6dbf9b17714299233d5c43071367ece2e53212e7f4e084fea60850d4d16908d9bbbb531fbf72143fdb62d1b40afde3d0b2ac2c94c32e456bbef62f8d677e332aec8ccc8eedbac61e7b89b32d57157a39ad5c456258d9c36db0edc82c2baead990ee78007ed89c8f450e92d5e209cc25f7c13f5909ca404fddbdbeff89cc42350c91e9f1fdf9753c6e95f71257f8cbb97838684461cd1244c938b9939a4e9c7725902b6f1a5434e0a06d3fc221771dd87572ae801c5ce6886122f0c91dae57440ffc7ace4e8e0041a1d245103aaadbfc2ecff622228daed2b0cd30f7f59b2617f6f0571ee4403d84e652d78b8e64d5450b6483ef70582dcda9351f2dddd3a4ac84f514f708d3af6242501bd041beae78e6b29b517b534148ea91ef85653fec824d6ddb0c0fa2555ab2564ba29227b1046b48a11ee0e6aafda9d0b80b0f05a8d057cbeb16264cb579aea3ba2b2000052d03c77844ab7c81be3110a36a27aeffe0ad5a8a7385a1913a64fb2db630e8fc8017828cea60f327c3a510b441d94d32584e55f7c2320d89b2ba3d44d832b8e7c5f45442de9ef37d057e6d0c6664e8d74e23f18336d41a3e38c2cda49050cb32ca7040a388c75741ac07d3befc714df35dc92ff70ad041cf17b70a971c142bb89ecfe25290750e989c8666560a61b62fdc4fadef7f30b6269a669ef99be7e7ba7ddddf99949fedc0c331796988c6eedb5c66cbe2870a2affce0b550c3411a2aaf302481ee93398c0fbc0c815cfe1e78bf8fed7f19f2c2dae17a4533aa85f6b787f8072adda379118d76dbba3cebfc4c8aacbb1f79a28ec3a0ec99816e3c8721ddcde1ce73b0704063474", 0xe50}, {0x0}, {0x0, 0x17}, {0x0}, {&(0x7f00000020c0)}], 0x5}, 0x0) (async) syz_io_uring_setup(0x7c95, &(0x7f0000000280)={0x0, 0xaea1, 0x20000, 0x0, 0x156, 0x0, r1}, &(0x7f0000000300), &(0x7f0000000340)) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x38a, 0x3}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) dup(r5) (async) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="3b00000000000000400101c0"]) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) accept$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) (async) getsockopt$IP_SET_OP_GET_BYINDEX(r7, 0x1, 0x53, &(0x7f0000000440)={0x7, 0x7, 0x2}, &(0x7f0000000480)=0x28) (async) setuid(0xee00) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x4}, @flat=@weak_binder={0x77622a85, 0xb, 0x2}, @fd}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xb, 0x1}) (async) 0s ago: executing program 1 (id=1879): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') pread64(r0, &(0x7f000001a240)=""/102391, 0x18ff7, 0x20004041e) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0xa7, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x200000000000009, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0x40d, 0x0, 0x102, 0xed3, 0x2, 0x5, 0x2000, 0xfffffffc, r6, 0x0, 0x7, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = dup(r7) connect$inet6(r8, &(0x7f0000008900)={0xa, 0x4e21, 0x1, @local, 0x7}, 0x1c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000440)={0x73622a85, 0x1000}) write$FUSE_INIT(r4, &(0x7f0000004300)={0x50, 0x0, r5, {0x7, 0x26, 0x8, 0xffffffffb3abdb0c, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r4, &(0x7f000000a400)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa0, 0x0, 0x16, {{0x3, 0x0, 0x4, 0x9, 0xfffffffc, 0x6, {0x0, 0xa5, 0x6, 0x100000008, 0x3, 0x1, 0x1ff, 0xffffff61, 0x0, 0x8000, 0x0, r6, 0xee01, 0xfffffff9, 0x4}}, {0x0, 0x10}}}, 0x0, 0x0}) close_range(r3, 0xffffffffffffffff, 0x0) r9 = socket$inet6(0xa, 0x80001, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000280)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@private=0xa010100, @in=@rand_addr=0x64010100, 0x4e21, 0x9, 0x4e21, 0x0, 0x0, 0xc540206b7571b5b4, 0xa0, 0x87, r10, r11}, {0x6, 0xb, 0x1000, 0x3, 0xffffffffffffffff, 0x7, 0x7fffffffffffffff, 0x3}, {0x4000400, 0x80000001, 0x10, 0x7f}, 0x4, 0x6e6bb7, 0x1, 0x0, 0x2, 0x3}, {{@in=@local, 0x4d3, 0x6c}, 0xa, @in6=@private1, 0x3506, 0x0, 0x1, 0x3, 0x4e3, 0x8, 0x8}}, 0xe8) getsockopt$bt_hci(r9, 0x0, 0x60, 0x0, &(0x7f0000d23000)=0x44) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x50, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x3e}, @ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/4096, 0x1000, 0x1, 0x2c}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/6, 0x0, 0x2, 0x27}}, &(0x7f0000000080)={0x0, 0x28, 0x50}}, 0x1000}, @register_looper], 0x0, 0x0, 0x0}) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) kernel console output (not intermixed with test programs): class=chr_file permissive=1 [ 99.088245][ T2632] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 144, size: 97) [ 99.110092][ T2632] rust_binder: Error while translating object. [ 99.110943][ T36] audit: type=1400 audit(1755866416.720:934): avc: denied { open } for pid=2630 comm="syz.3.739" path="/179/file0" dev="tmpfs" ino=1010 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 99.123053][ T2632] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 99.127237][ T36] audit: type=1400 audit(1755866416.780:935): avc: denied { write } for pid=2630 comm="syz.3.739" name="file0" dev="tmpfs" ino=1010 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 99.149822][ T2632] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:539 [ 99.360000][ T2649] SELinux: ebitmap start bit (402653440) is beyond the end of the bitmap (1472) [ 99.386155][ T2649] SELinux: failed to load policy [ 99.414353][ T36] audit: type=1400 audit(1755866417.070:936): avc: denied { mounton } for pid=2654 comm="syz.0.748" path="/180/file0" dev="tmpfs" ino=1038 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 99.414415][ T2655] 9pnet: Could not find request transport: uniYSݒkew.Z0x [ 99.464870][ T2659] syz.0.750: attempt to access beyond end of device [ 99.464870][ T2659] loop0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 99.478147][ T2659] EXT4-fs (loop0): unable to read superblock [ 99.501405][ T865] hid-picolcd 0003:04D8:C002.000A: No report with id 0x11 found [ 99.506947][ T36] audit: type=1400 audit(1755866417.160:937): avc: denied { getopt } for pid=2663 comm="syz.0.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 99.531430][ T36] audit: type=1400 audit(1755866417.180:938): avc: denied { setattr } for pid=2656 comm="syz.1.749" name="NETLINK" dev="sockfs" ino=20741 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 99.558243][ T36] audit: type=1400 audit(1755866417.180:939): avc: denied { setopt } for pid=2656 comm="syz.1.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 99.652728][ T865] usb 5-1: USB disconnect, device number 9 [ 99.857788][ T2668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.858464][ T2666] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 99.865029][ T2666] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:534 [ 99.984350][ T2670] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.994152][ T2670] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 100.008353][ T2670] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:538 [ 100.056184][ T2681] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.067446][ T2681] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 100.074122][ T2681] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 100.082396][ T2681] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:547 [ 100.094252][ T2681] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true [ 100.103711][ T2681] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 100.112637][ T2681] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:547 [ 100.119972][ T947] tipc: Subscription rejected, illegal request [ 100.199085][ T36] audit: type=1400 audit(1755866417.850:940): avc: denied { append } for pid=2694 comm="syz.1.762" name="usbmon6" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 100.240445][ T2700] usb usb8: usbfs: process 2700 (syz.1.763) did not claim interface 0 before use [ 100.264338][ T2703] binder: Bad value for 'max' [ 100.269587][ T2703] PM: Enabling pm_trace changes system date and time during resume. [ 100.269587][ T2703] PM: Correct system time has to be restored manually after resume. [ 100.309801][ T2708] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.310327][ T2708] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 100.316901][ T2708] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 100.322554][ T2710] 9pnet_fd: Insufficient options for proto=fd [ 100.324938][ T2708] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:559 [ 100.342504][ T2708] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true [ 100.352054][ T2708] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 100.360511][ T2708] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:559 [ 100.431421][ T865] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 100.571414][ T865] usb 5-1: device descriptor read/64, error -71 [ 100.811463][ T865] usb 5-1: device descriptor read/64, error -71 [ 101.051442][ T865] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 101.181414][ T865] usb 5-1: device descriptor read/64, error -71 [ 101.421426][ T865] usb 5-1: device descriptor read/64, error -71 [ 101.521413][ T65] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 101.531643][ T865] usb usb5-port1: attempt power cycle [ 101.671404][ T65] usb 2-1: Invalid ep0 maxpacket: 64 [ 101.801412][ T65] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 101.881435][ T865] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 101.902709][ T865] usb 5-1: device descriptor read/8, error -71 [ 101.951353][ T65] usb 2-1: Invalid ep0 maxpacket: 64 [ 101.956919][ T65] usb usb2-port1: attempt power cycle [ 102.032711][ T865] usb 5-1: device descriptor read/8, error -71 [ 102.049571][ T2727] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 102.049596][ T2727] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:544 [ 102.085217][ T9] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 102.106483][ T9] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 102.195971][ T36] audit: type=1400 audit(1755866419.850:941): avc: denied { bind } for pid=2736 comm="syz.3.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 102.281417][ T865] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 102.302534][ T865] usb 5-1: device descriptor read/8, error -71 [ 102.311434][ T65] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 102.331813][ T65] usb 2-1: Invalid ep0 maxpacket: 64 [ 102.432769][ T865] usb 5-1: device descriptor read/8, error -71 [ 102.461443][ T65] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 102.481832][ T65] usb 2-1: Invalid ep0 maxpacket: 64 [ 102.487514][ T65] usb usb2-port1: unable to enumerate USB device [ 102.494146][ T46] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 102.541493][ T865] usb usb5-port1: unable to enumerate USB device [ 102.631408][ T46] usb 4-1: device descriptor read/64, error -71 [ 102.871438][ T46] usb 4-1: device descriptor read/64, error -71 [ 103.111452][ T46] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 103.241695][ T46] usb 4-1: device descriptor read/64, error -71 [ 103.251841][ T2741] /dev/rnullb0: Can't open blockdev [ 103.322287][ T2743] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.322771][ T2743] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 103.329245][ T2743] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 103.337538][ T2743] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:317 [ 103.347939][ T2743] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true [ 103.357591][ T2743] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 103.366133][ T2743] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:317 [ 103.408480][ T2749] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.491352][ T46] usb 4-1: device descriptor read/64, error -71 [ 103.611498][ T46] usb usb4-port1: attempt power cycle [ 103.681371][ T865] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 103.811427][ T865] usb 5-1: device descriptor read/64, error -71 [ 103.951388][ T46] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 103.972767][ T46] usb 4-1: device descriptor read/8, error -71 [ 104.051609][ T865] usb 5-1: device descriptor read/64, error -71 [ 104.102584][ T46] usb 4-1: device descriptor read/8, error -71 [ 104.291424][ T865] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 104.341402][ T46] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 104.364897][ T46] usb 4-1: device descriptor read/8, error -71 [ 104.421383][ T865] usb 5-1: device descriptor read/64, error -71 [ 104.492714][ T46] usb 4-1: device descriptor read/8, error -71 [ 104.601516][ T46] usb usb4-port1: unable to enumerate USB device [ 104.661504][ T865] usb 5-1: device descriptor read/64, error -71 [ 104.771573][ T865] usb usb5-port1: attempt power cycle [ 105.111384][ T865] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 105.132455][ T865] usb 5-1: device descriptor read/8, error -71 [ 105.231587][ T2775] binder: Unknown parameter '' [ 105.236636][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 105.236654][ T36] audit: type=1400 audit(1755866422.890:944): avc: denied { add_name } for pid=2778 comm="syz.1.792" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.263664][ T36] audit: type=1400 audit(1755866422.890:945): avc: denied { create } for pid=2778 comm="syz.1.792" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 105.286586][ T36] audit: type=1400 audit(1755866422.890:946): avc: denied { associate } for pid=2778 comm="syz.1.792" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 105.286950][ T865] usb 5-1: device descriptor read/8, error -71 [ 105.362861][ T2789] rust_binder: Error while translating object. [ 105.362906][ T2789] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 105.369223][ T2789] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:567 [ 105.391283][ T36] audit: type=1400 audit(1755866423.040:947): avc: denied { create } for pid=2790 comm="syz.3.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 105.552194][ T865] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 105.572469][ T865] usb 5-1: device descriptor read/8, error -71 [ 105.619807][ T36] audit: type=1400 audit(1755866423.270:948): avc: denied { watch } for pid=2809 comm="syz.1.802" path="/214" dev="tmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 105.642424][ T36] audit: type=1400 audit(1755866423.270:949): avc: denied { setopt } for pid=2809 comm="syz.1.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 105.688734][ T2814] input: syz1 as /devices/virtual/input/input12 [ 105.702469][ T865] usb 5-1: device descriptor read/8, error -71 [ 105.811471][ T865] usb usb5-port1: unable to enumerate USB device [ 106.103339][ T2857] rust_binder: Failed copying into alloc: EFAULT [ 106.103366][ T2857] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 106.109839][ T2857] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 106.118352][ T2857] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:618 [ 106.156686][ T2866] syz.3.821 (2866): /proc/2864/oom_adj is deprecated, please use /proc/2864/oom_score_adj instead. [ 106.492285][ T2879] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.492843][ T2879] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 106.499472][ T2879] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 106.508642][ T2879] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:567 [ 106.531719][ T2879] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true [ 106.532440][ T2885] rust_binder: Error in use_page_slow: ESRCH [ 106.545173][ T2879] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 106.565927][ T2879] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:567 [ 106.567386][ T2885] rust_binder: use_range failure ESRCH [ 106.600997][ T2890] x_tables: unsorted underflow at hook 2 [ 106.611432][ T2885] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 106.612296][ T2885] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 106.621328][ T2885] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:630 [ 106.666754][ T2898] rust_binder: Error while translating object. [ 106.676552][ T2898] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 106.683043][ T2898] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:634 [ 106.711128][ T2908] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 106.792877][ T36] audit: type=1400 audit(1755866424.450:950): avc: denied { connect } for pid=2912 comm="syz.3.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 106.815271][ T36] audit: type=1400 audit(1755866424.470:951): avc: denied { read write } for pid=2910 comm="syz.4.837" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.839014][ T36] audit: type=1400 audit(1755866424.470:952): avc: denied { open } for pid=2910 comm="syz.4.837" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.841398][ T331] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 106.863046][ T36] audit: type=1400 audit(1755866424.470:953): avc: denied { ioctl } for pid=2910 comm="syz.4.837" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.964282][ T2925] rust_binder: 646: no such ref 0 [ 106.969568][ T2925] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:646 [ 107.012659][ T331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 107.023922][ T2926] rust_binder: Error while translating object. [ 107.033161][ T331] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.033323][ T2926] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 107.039489][ T331] usb 2-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.00 [ 107.053952][ T532] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 107.062770][ T331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.073794][ T2926] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:646 [ 107.080757][ T331] usb 2-1: config 0 descriptor?? [ 107.100955][ T2929] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 107.102144][ T2929] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:581 [ 107.105806][ T2887] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 107.127893][ T2931] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 107.128864][ T2931] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 144, size: 174) [ 107.135771][ T2931] rust_binder: Error while translating object. [ 107.146626][ T2931] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 107.153043][ T2931] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:583 [ 107.163823][ T2932] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 107.251496][ T532] usb 5-1: Using ep0 maxpacket: 32 [ 107.265024][ T532] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 107.273410][ T532] usb 5-1: config 0 has no interface number 0 [ 107.279721][ T532] usb 5-1: config 0 interface 184 has no altsetting 0 [ 107.288130][ T532] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 107.297433][ T532] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.305545][ T532] usb 5-1: Product: syz [ 107.310908][ T532] usb 5-1: Manufacturer: syz [ 107.315638][ T532] usb 5-1: SerialNumber: syz [ 107.321403][ T532] usb 5-1: config 0 descriptor?? [ 107.327591][ T532] smsc75xx v1.0.0 [ 107.533863][ T331] wacom 0003:056A:0020.000C: Unknown device_type for 'HID 056a:0020'. Assuming pen. [ 107.544550][ T331] wacom 0003:056A:0020.000C: hidraw0: USB HID v1.01 Device [HID 056a:0020] on usb-dummy_hcd.1-1/input0 [ 107.561543][ T331] input: Wacom Intuos 4x5 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0020.000C/input/input13 [ 107.787491][ T331] usb 2-1: USB disconnect, device number 24 [ 107.933371][ T2947] rust_binder: Error while translating object. [ 107.933437][ T2947] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 107.936535][ T2949] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 107.939664][ T2947] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:650 [ 107.951504][ T2949] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 107.965207][ T2949] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 107.973420][ T2949] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:596 [ 107.983678][ T2949] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true [ 107.993383][ T2949] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 108.001730][ T2949] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:596 [ 108.025240][ T2951] overlay: Unknown parameter 'fsuuid' [ 108.051956][ T2951] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1551 sclass=netlink_route_socket pid=2951 comm=syz.0.850 [ 108.229380][ T2956] rust_binder: Write failure EFAULT in pid:603 [ 108.288874][ T2959] rust_binder: Error while translating object. [ 108.295380][ T2959] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 108.301931][ T2959] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:606 [ 108.489835][ T2970] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 108.499352][ T2970] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:616 [ 108.529620][ T532] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -32 [ 108.551561][ T532] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 108.563083][ T2975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40722 sclass=netlink_route_socket pid=2975 comm=syz.1.859 [ 108.660365][ T2980] rust_binder: Failed to allocate buffer. len:232, is_oneway:false [ 108.813132][ T2991] netlink: 'syz.3.865': attribute type 16 has an invalid length. [ 108.829204][ T2991] netlink: 'syz.3.865': attribute type 3 has an invalid length. [ 108.837205][ T2991] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.865'. [ 109.411492][ T331] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 109.561387][ T331] usb 2-1: Using ep0 maxpacket: 16 [ 109.569637][ T331] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 109.580568][ T331] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.591724][ T331] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.601840][ T331] usb 2-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 109.615204][ T331] usb 2-1: config 7 interface 0 has no altsetting 0 [ 109.622124][ T331] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 109.632396][ T331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.766310][ T65] rust_binder: 3007: removing orphan mapping 0:4120 [ 109.791636][ T532] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 109.805742][ T3018] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.806283][ T3018] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 109.816521][ T532] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 109.822604][ T3018] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 109.830179][ T532] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 109.835585][ T3016] rust_binder: Error in use_page_slow: ESRCH [ 109.845248][ T532] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 109.868414][ T3016] rust_binder: use_range failure ESRCH [ 109.868443][ T3016] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 109.868672][ T3018] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:337 [ 109.874886][ T3016] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 109.884464][ T532] usb 5-1: USB disconnect, device number 18 [ 109.894841][ T3016] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:628 [ 109.901121][ T3019] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true [ 109.918004][ T3019] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 109.926484][ T3019] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:337 [ 109.959038][ T3023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.976147][ T3023] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 109.976162][ T3024] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 109.976179][ T3024] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 109.984387][ T3023] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 109.993035][ T3024] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:340 [ 110.002190][ T3023] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:340 [ 110.013520][ T3021] 9pnet_fd: p9_fd_create_unix (3021): problem connecting socket: ./file0: -5 [ 110.050600][ T3027] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 110.051259][ T3027] rust_binder: Error while translating object. [ 110.058224][ T3027] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 110.064923][ T3027] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:343 [ 110.095698][ T331] input: HID 0458:5010 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:7.0/0003:0458:5010.000D/input/input16 [ 110.118849][ T331] kye 0003:0458:5010.000D: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0 [ 110.137296][ T3034] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 110.137459][ T3034] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:634 [ 110.393837][ T3039] sit0: entered promiscuous mode [ 110.409485][ T3039] netlink: 'syz.1.868': attribute type 1 has an invalid length. [ 110.417565][ T3039] netlink: 9 bytes leftover after parsing attributes in process `syz.1.868'. [ 110.426733][ T532] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 110.435831][ T3039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=3039 comm=syz.1.868 [ 110.574400][ T3043] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3043 comm=syz.3.883 [ 110.581383][ T532] usb 5-1: Using ep0 maxpacket: 8 [ 110.594180][ T532] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.604714][ T532] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.619911][ T532] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.629253][ T532] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 110.637830][ T532] usb 5-1: SerialNumber: syz [ 110.647343][ T532] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 110.655323][ T532] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 110.662088][ T532] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 110.745987][ T3047] rust_binder: Write failure EINVAL in pid:682 [ 110.746355][ T3047] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 110.760481][ T3047] rust_binder: Write failure EINVAL in pid:682 [ 110.760794][ T3047] rust_binder: 682: no such ref 1 [ 110.848676][ T3038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.857562][ T3038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.868911][ T65] usb 5-1: USB disconnect, device number 19 [ 110.947569][ T934] Bluetooth: hci0: Frame reassembly failed (-84) [ 111.381655][ C0] kye 0003:0458:5010.000D: usb_submit_urb(ctrl) failed: -1 [ 111.638088][ T3075] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 111.689349][ T3076] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:367 [ 111.893322][ T3083] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 111.954716][ T3086] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 111.961534][ T3086] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 111.969572][ T3086] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:376 [ 112.132833][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 112.132855][ T36] audit: type=1400 audit(1755866429.790:962): avc: denied { create } for pid=3093 comm="syz.3.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 112.221402][ T65] usb 2-1: reset high-speed USB device number 25 using dummy_hcd [ 112.229679][ T65] usb 2-1: device reset changed ep0 maxpacket size! [ 112.236877][ T331] usb 2-1: USB disconnect, device number 25 [ 112.371728][ T331] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 112.381536][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 112.521384][ T331] usb 2-1: Using ep0 maxpacket: 8 [ 112.527958][ T331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.537965][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 112.543178][ T331] usb 2-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 112.552493][ T331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.561647][ T9] usb 4-1: config 1 has an invalid interface number: 137 but max is 0 [ 112.570418][ T331] usb 2-1: config 0 descriptor?? [ 112.575540][ T9] usb 4-1: config 1 has no interface number 0 [ 112.581760][ T9] usb 4-1: config 1 interface 137 altsetting 4 bulk endpoint 0x6 has invalid maxpacket 545 [ 112.592861][ T9] usb 4-1: config 1 interface 137 altsetting 4 endpoint 0x82 has invalid wMaxPacketSize 0 [ 112.602994][ T9] usb 4-1: config 1 interface 137 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 0 [ 112.613061][ T9] usb 4-1: config 1 interface 137 has no altsetting 0 [ 112.621570][ T9] usb 4-1: New USB device found, idVendor=0557, idProduct=2021, bcdDevice=74.1a [ 112.630793][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.638874][ T9] usb 4-1: Product: syz [ 112.643109][ T9] usb 4-1: Manufacturer: syz [ 112.647814][ T9] usb 4-1: SerialNumber: syz [ 112.654082][ T3094] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 112.925090][ T9] pl2303 4-1:1.137: required interrupt-in endpoint missing [ 112.934338][ T9] usb 4-1: USB disconnect, device number 32 [ 112.994591][ T331] saitek 0003:06A3:0621.000E: unknown main item tag 0x0 [ 113.001735][ T331] saitek 0003:06A3:0621.000E: unknown main item tag 0x0 [ 113.008825][ T331] saitek 0003:06A3:0621.000E: unknown main item tag 0x0 [ 113.011472][ T647] Bluetooth: hci0: command 0x1003 tx timeout [ 113.016682][ T331] saitek 0003:06A3:0621.000E: unknown main item tag 0x0 [ 113.024865][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 113.029738][ T331] saitek 0003:06A3:0621.000E: unknown main item tag 0x0 [ 113.053607][ T331] saitek 0003:06A3:0621.000E: hidraw0: USB HID v0.03 Device [HID 06a3:0621] on usb-dummy_hcd.1-1/input0 [ 113.124088][ T3109] capability: warning: `syz.4.902' uses 32-bit capabilities (legacy support in use) [ 113.197696][ T3085] netlink: 'syz.1.895': attribute type 1 has an invalid length. [ 113.262505][ T9] usb 2-1: USB disconnect, device number 26 [ 113.894179][ T36] audit: type=1400 audit(1755866431.550:963): avc: denied { append } for pid=3124 comm="syz.0.908" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.917282][ T36] audit: type=1400 audit(1755866431.570:964): avc: denied { shutdown } for pid=3124 comm="syz.0.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 114.091343][ T331] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 114.117369][ T36] audit: type=1400 audit(1755866431.770:965): avc: denied { getopt } for pid=3140 comm="syz.0.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 114.117550][ T3141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.913'. [ 114.150152][ T3141] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=3141 comm=syz.0.913 [ 114.163463][ T3141] 9pnet_fd: Insufficient options for proto=fd [ 114.264994][ T331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 114.270620][ T3151] netlink: 20 bytes leftover after parsing attributes in process `syz.0.918'. [ 114.276637][ T331] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 114.304397][ T331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.322859][ T331] usb 2-1: config 0 descriptor?? [ 114.336424][ T3123] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 114.361350][ T36] audit: type=1400 audit(1755866432.010:966): avc: denied { bind } for pid=3158 comm="syz.4.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 114.702688][ T934] bridge_slave_1: left allmulticast mode [ 114.708541][ T934] bridge_slave_1: left promiscuous mode [ 114.714419][ T934] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.721428][ T31] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 114.729714][ T934] bridge_slave_0: left allmulticast mode [ 114.735997][ T934] bridge_slave_0: left promiscuous mode [ 114.742108][ T934] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.865982][ T3172] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.873486][ T3172] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.880791][ T3172] bridge_slave_0: entered allmulticast mode [ 114.887240][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 114.887687][ T3172] bridge_slave_0: entered promiscuous mode [ 114.893761][ T31] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 193, changing to 11 [ 114.899696][ T3172] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.909917][ T31] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.919674][ T3172] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.927172][ T31] usb 4-1: config 0 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 114.934702][ T3172] bridge_slave_1: entered allmulticast mode [ 114.949110][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 114.954643][ T3172] bridge_slave_1: entered promiscuous mode [ 114.964046][ T31] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 114.966695][ T331] usbhid 2-1:0.0: can't add hid device: -71 [ 114.980369][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.981378][ T331] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 114.994169][ T31] usb 4-1: config 0 descriptor?? [ 114.999108][ T331] usb 2-1: USB disconnect, device number 27 [ 115.011538][ T934] veth1_macvtap: left promiscuous mode [ 115.017389][ T934] veth0_vlan: left promiscuous mode [ 115.133985][ T936] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.141548][ T936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.153224][ T947] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.160423][ T947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.195017][ T3172] veth0_vlan: entered promiscuous mode [ 115.208420][ T3172] veth1_macvtap: entered promiscuous mode [ 115.313948][ T3184] netlink: 2885 bytes leftover after parsing attributes in process `syz.3.923'. [ 116.111664][ T3195] binder: Bad value for 'defcontext' [ 116.641410][ T331] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 116.792710][ T331] usb 2-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 116.801844][ T331] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.813387][ T331] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 65 [ 116.822782][ T331] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 116.831968][ T331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.840913][ T331] usb 2-1: config 0 descriptor?? [ 116.931429][ T532] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 117.093102][ T532] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 117.105018][ T532] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 117.116334][ T532] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 117.128059][ T532] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 117.137436][ T532] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.146690][ T3201] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 117.355548][ T3201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.364511][ T3201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.373013][ T3201] rust_binder: Error while translating object. [ 117.373052][ T3201] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 117.379359][ T3201] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:14 [ 117.389820][ T3208] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.405830][ T532] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 117.424914][ T532] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input18 [ 117.448335][ T532] usb 6-1: USB disconnect, device number 2 [ 117.500337][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 117.506983][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 117.510512][ T3217] rust_binder: 3214 RLIMIT_NICE not set [ 117.519841][ T31] usb 4-1: USB disconnect, device number 33 [ 117.750784][ T36] audit: type=1400 audit(1755866435.400:967): avc: denied { ioctl } for pid=3231 comm="syz.3.943" path="socket:[25214]" dev="sockfs" ino=25214 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 117.820253][ T36] audit: type=1326 audit(1755866435.460:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3198 comm="syz.1.933" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe61ff8ebe9 code=0x0 [ 118.517501][ T3252] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 118.586832][ T36] audit: type=1400 audit(1755866436.240:969): avc: denied { map } for pid=3253 comm="syz.5.948" path="socket:[25380]" dev="sockfs" ino=25380 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 118.670001][ T3260] rust_binder: 3259 RLIMIT_NICE not set [ 118.780213][ T3266] 9pnet_fd: Insufficient options for proto=fd [ 118.971678][ T865] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 118.980090][ T865] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 119.052960][ T36] audit: type=1400 audit(1755866436.710:970): avc: denied { relabelfrom } for pid=3270 comm="syz.3.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 119.073253][ T36] audit: type=1400 audit(1755866436.710:971): avc: denied { relabelto } for pid=3270 comm="syz.3.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 119.452435][ T530] usb 2-1: USB disconnect, device number 28 [ 119.791368][ T530] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 119.801487][ T3283] rust_binder: 3282 RLIMIT_NICE not set [ 119.843652][ T3291] rust_binder: Write failure EINVAL in pid:65 [ 119.849926][ T3291] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 119.856252][ T3293] SELinux: security_context_str_to_sid () failed with errno=-22 [ 119.864622][ T3291] rust_binder: Write failure EINVAL in pid:65 [ 119.952598][ T530] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.970023][ T530] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.980305][ T530] usb 2-1: config 0 interface 0 has no altsetting 0 [ 119.987026][ T530] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 119.996176][ T530] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.005109][ T530] usb 2-1: config 0 descriptor?? [ 120.018582][ T3303] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:734 [ 120.119563][ T3309] rust_binder: 3308 RLIMIT_NICE not set [ 120.141442][ T865] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 120.259282][ T331] rust_binder: 3310: removing orphan mapping 0:4120 [ 120.302738][ T865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.313935][ T865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.323856][ T865] usb 6-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 120.333385][ T865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.342566][ T865] usb 6-1: config 0 descriptor?? [ 120.499465][ T31] rust_binder: 3320: removing orphan mapping 0:24 [ 120.512029][ T31] rust_binder: 0: removing orphan mapping 24:1024 [ 120.554103][ T3340] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 120.554148][ T3340] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:764 [ 120.581414][ T3342] rust_binder: 3338 RLIMIT_NICE not set [ 120.608507][ T3346] IPv6: NLM_F_CREATE should be specified when creating new route [ 120.624277][ T530] usbhid 2-1:0.0: can't add hid device: -71 [ 120.637824][ T530] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 120.650888][ T530] usb 2-1: USB disconnect, device number 29 [ 120.673162][ T3353] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 120.674473][ T3353] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.695006][ T3359] rust_binder: 774: no such ref 1 [ 120.707005][ T3359] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 120.719835][ T3359] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 120.750024][ T865] kye 0003:0458:5014.0010: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 120.752970][ T36] audit: type=1400 audit(1755866438.410:972): avc: denied { remount } for pid=3361 comm="syz.0.983" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 120.758781][ T865] kye 0003:0458:5014.0010: unknown main item tag 0x0 [ 120.796083][ T865] kye 0003:0458:5014.0010: unknown main item tag 0x0 [ 120.809214][ T865] kye 0003:0458:5014.0010: unknown main item tag 0x0 [ 120.820518][ T865] kye 0003:0458:5014.0010: unknown main item tag 0x0 [ 120.830591][ T865] kye 0003:0458:5014.0010: unknown main item tag 0x0 [ 120.839895][ T865] kye 0003:0458:5014.0010: hidraw0: USB HID v0.00 Device [HID 0458:5014] on usb-dummy_hcd.5-1/input0 [ 120.852272][ T3364] overlay: filesystem on ./bus not supported as upperdir [ 120.859439][ T865] kye 0003:0458:5014.0010: tablet-enabling feature report not found [ 120.875153][ T865] kye 0003:0458:5014.0010: tablet enabling failed [ 120.944650][ T3369] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 120.962841][ T865] usb 6-1: USB disconnect, device number 3 [ 121.382309][ T3425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1001'. [ 121.479750][ T3428] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 121.604451][ T3436] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3436 comm=syz.5.1005 [ 121.625668][ T3437] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3437 comm=syz.5.1005 [ 121.641464][ T31] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 121.791434][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 121.798009][ T31] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 121.814380][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.826075][ T31] usb 2-1: config 0 descriptor?? [ 122.032414][ T31] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 122.066673][ T36] audit: type=1400 audit(1755866439.720:973): avc: denied { read } for pid=3444 comm="syz.5.1008" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 122.301378][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 122.316899][ T3449] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 122.316964][ T3449] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:815 [ 122.433135][ T31] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 122.452955][ T31] asix 2-1:0.0: probe with driver asix failed with error -61 [ 122.464152][ T10] usb 6-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 122.474564][ T10] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 122.483943][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.492264][ T36] audit: type=1400 audit(1755866440.140:974): avc: denied { name_bind } for pid=3468 comm="syz.3.1016" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 122.514057][ T36] audit: type=1400 audit(1755866440.150:975): avc: denied { lock } for pid=3468 comm="syz.3.1016" path="socket:[25936]" dev="sockfs" ino=25936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 122.515899][ T10] aiptek 6-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 122.609642][ T3476] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 122.618156][ T3476] rust_binder: Write failure EINVAL in pid:842 [ 122.624251][ T36] audit: type=1400 audit(1755866440.280:976): avc: denied { write } for pid=3475 comm="syz.3.1018" path="socket:[26008]" dev="sockfs" ino=26008 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 122.810080][ T10] usb 6-1: USB disconnect, device number 4 [ 122.925665][ T3488] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 122.925688][ T3488] rust_binder: Error while translating object. [ 122.934624][ T3488] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 122.941093][ T3488] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:848 [ 122.962867][ T3490] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 122.980834][ T3490] rust_binder: Write failure EINVAL in pid:850 [ 123.151424][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 123.311378][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 123.317767][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.329042][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 123.342221][ T10] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 123.352045][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.360936][ T10] usb 6-1: config 0 descriptor?? [ 123.501359][ T3494] rust_binder: Fixups oob 156 120 160 164 [ 123.501390][ T3494] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 123.507345][ T3494] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 123.515704][ T3494] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:852 [ 123.606260][ T3500] tmpfs: Bad value for 'huge' [ 123.773718][ T10] HID 045e:07da: Invalid code 65791 type 1 [ 123.799826][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0011/input/input20 [ 123.825992][ T10] microsoft 0003:045E:07DA.0011: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 123.888255][ T3508] syz.3.1027 uses obsolete (PF_INET,SOCK_PACKET) [ 123.970642][ T3515] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1029'. [ 124.008543][ T3522] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 124.251436][ T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 124.266362][ T3531] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:712 [ 124.272699][ T10] rust_binder: 3529: removing orphan mapping 0:24 [ 124.283567][ T3533] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 124.288934][ T3534] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 124.316701][ T3536] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:718 [ 124.316828][ T3536] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 124.326411][ T3536] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:718 [ 124.350692][ T36] audit: type=1400 audit(1755866442.000:977): avc: denied { getattr } for pid=3540 comm="syz.0.1037" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=27528 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 124.398727][ T530] usb 2-1: USB disconnect, device number 30 [ 124.412424][ T9] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 124.422020][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.430964][ T9] usb 4-1: config 0 descriptor?? [ 124.461016][ T31] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 124.531889][ T31] hid-generic 0000:0000:0000.0012: hidraw1: HID v0.00 Device [syz1] on syz0 [ 124.724099][ T10] usb 6-1: USB disconnect, device number 5 [ 124.840064][ T9] hid-multitouch 0003:0EEF:72C4.0013: unknown main item tag 0x0 [ 124.849687][ T9] hid-multitouch 0003:0EEF:72C4.0013: item fetching failed at offset 3/5 [ 124.858994][ T9] hid-multitouch 0003:0EEF:72C4.0013: probe with driver hid-multitouch failed with error -22 [ 125.040222][ T10] usb 4-1: USB disconnect, device number 34 [ 125.317333][ T3562] netlink: 196 bytes leftover after parsing attributes in process `syz.5.1043'. [ 125.414418][ T3573] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1046'. [ 125.483529][ T3577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.483561][ T3577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.490526][ T3577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.498531][ T3577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.505848][ T3577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.512836][ T3577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.519384][ T3577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.526219][ T3577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.533015][ T3577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.539990][ T3577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.546784][ T3577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.574354][ T3582] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1050'. [ 125.610779][ T3589] /dev/rnullb0: Can't open blockdev [ 125.780106][ T3608] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:121 [ 125.788900][ T9] rust_binder: 3606: removing orphan mapping 0:24 [ 125.821771][ T3612] fuse: Bad value for 'user_id' [ 125.830260][ T3612] fuse: Bad value for 'user_id' [ 125.846004][ T3612] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:126 [ 125.881457][ T530] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 125.917932][ T3619] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 125.917959][ T3619] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:128 [ 125.931403][ T3619] rust_binder: 3616 RLIMIT_NICE not set [ 125.985585][ T3631] bridge0: port 3(erspan0) entered blocking state [ 125.998008][ T3631] bridge0: port 3(erspan0) entered disabled state [ 126.013970][ T3631] erspan0: entered allmulticast mode [ 126.020088][ T3631] erspan0: entered promiscuous mode [ 126.025758][ T3631] bridge0: port 3(erspan0) entered blocking state [ 126.032421][ T3631] bridge0: port 3(erspan0) entered forwarding state [ 126.039971][ T3633] erspan0: left allmulticast mode [ 126.043007][ T530] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 126.045122][ T3633] erspan0: left promiscuous mode [ 126.062015][ T530] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 20, changing to 8 [ 126.073808][ T530] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9345, setting to 1024 [ 126.083420][ T3633] bridge0: port 3(erspan0) entered disabled state [ 126.085837][ T530] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 126.105413][ T3634] /dev/rnullb0: Can't open blockdev [ 126.111515][ T3634] /dev/rnullb0: Can't open blockdev [ 126.117849][ T3634] /dev/rnullb0: Can't open blockdev [ 126.125247][ T3634] /dev/rnullb0: Can't open blockdev [ 126.131476][ T530] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 126.140792][ T530] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 126.150134][ T3634] /dev/rnullb0: Can't open blockdev [ 126.155822][ T530] usb 4-1: Manufacturer: syz [ 126.161974][ T530] usb 4-1: config 0 descriptor?? [ 126.167177][ T3634] /dev/rnullb0: Can't open blockdev [ 126.172886][ T3592] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 126.180984][ T3634] /dev/rnullb0: Can't open blockdev [ 126.187264][ T3634] /dev/rnullb0: Can't open blockdev [ 126.193114][ T3634] /dev/rnullb0: Can't open blockdev [ 126.198702][ T3634] /dev/rnullb0: Can't open blockdev [ 126.204768][ T3634] /dev/rnullb0: Can't open blockdev [ 126.210976][ T3634] /dev/rnullb0: Can't open blockdev [ 126.216784][ T3634] /dev/rnullb0: Can't open blockdev [ 126.222422][ T3634] /dev/rnullb0: Can't open blockdev [ 126.228021][ T3634] /dev/rnullb0: Can't open blockdev [ 126.233719][ T3634] /dev/rnullb0: Can't open blockdev [ 126.239334][ T3634] /dev/rnullb0: Can't open blockdev [ 126.245272][ T3634] /dev/rnullb0: Can't open blockdev [ 126.250928][ T3634] /dev/rnullb0: Can't open blockdev [ 126.256559][ T3634] /dev/rnullb0: Can't open blockdev [ 126.262603][ T3634] /dev/rnullb0: Can't open blockdev [ 126.268253][ T3634] /dev/rnullb0: Can't open blockdev [ 126.273997][ T3634] /dev/rnullb0: Can't open blockdev [ 126.279545][ T3634] /dev/rnullb0: Can't open blockdev [ 126.285309][ T3634] /dev/rnullb0: Can't open blockdev [ 126.291258][ T3634] /dev/rnullb0: Can't open blockdev [ 126.298824][ T3634] /dev/rnullb0: Can't open blockdev [ 126.304562][ T3634] /dev/rnullb0: Can't open blockdev [ 126.305864][ T3643] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1068'. [ 126.310434][ T3634] /dev/rnullb0: Can't open blockdev [ 126.325175][ T3634] /dev/rnullb0: Can't open blockdev [ 126.330846][ T3634] /dev/rnullb0: Can't open blockdev [ 126.336823][ T3634] /dev/rnullb0: Can't open blockdev [ 126.342542][ T3634] /dev/rnullb0: Can't open blockdev [ 126.348167][ T3634] /dev/rnullb0: Can't open blockdev [ 126.353895][ T3634] /dev/rnullb0: Can't open blockdev [ 126.359382][ T3634] /dev/rnullb0: Can't open blockdev [ 126.365082][ T3634] /dev/rnullb0: Can't open blockdev [ 126.370756][ T3634] /dev/rnullb0: Can't open blockdev [ 126.376737][ T3634] /dev/rnullb0: Can't open blockdev [ 126.382352][ T3634] /dev/rnullb0: Can't open blockdev [ 126.388190][ T3634] /dev/rnullb0: Can't open blockdev [ 126.394086][ T3634] /dev/rnullb0: Can't open blockdev [ 126.399718][ T3634] /dev/rnullb0: Can't open blockdev [ 126.405246][ T3634] /dev/rnullb0: Can't open blockdev [ 126.410787][ T3634] /dev/rnullb0: Can't open blockdev [ 126.416480][ T3634] /dev/rnullb0: Can't open blockdev [ 126.422216][ T3634] /dev/rnullb0: Can't open blockdev [ 126.427633][ T3634] /dev/rnullb0: Can't open blockdev [ 126.433460][ T3634] /dev/rnullb0: Can't open blockdev [ 126.439144][ T3634] /dev/rnullb0: Can't open blockdev [ 126.444873][ T3634] /dev/rnullb0: Can't open blockdev [ 126.450519][ T3634] /dev/rnullb0: Can't open blockdev [ 126.456161][ T3634] /dev/rnullb0: Can't open blockdev [ 126.462082][ T3634] /dev/rnullb0: Can't open blockdev [ 126.468078][ T3634] /dev/rnullb0: Can't open blockdev [ 126.473780][ T3634] /dev/rnullb0: Can't open blockdev [ 126.479812][ T3634] /dev/rnullb0: Can't open blockdev [ 126.485825][ T3634] /dev/rnullb0: Can't open blockdev [ 126.491470][ T3634] /dev/rnullb0: Can't open blockdev [ 126.497191][ T3634] /dev/rnullb0: Can't open blockdev [ 126.503292][ T3634] /dev/rnullb0: Can't open blockdev [ 126.509122][ T3634] /dev/rnullb0: Can't open blockdev [ 126.514729][ T3634] /dev/rnullb0: Can't open blockdev [ 126.520288][ T3634] /dev/rnullb0: Can't open blockdev [ 126.525878][ T3634] /dev/rnullb0: Can't open blockdev [ 126.582678][ T530] appleir 0003:05AC:8243.0014: item fetching failed at offset 0/1 [ 126.584685][ T3657] rust_binder: 152: no such ref 2 [ 126.590812][ T530] appleir 0003:05AC:8243.0014: parse failed [ 126.595881][ T3657] rust_binder: Write failure EFAULT in pid:152 [ 126.601818][ T530] appleir 0003:05AC:8243.0014: probe with driver appleir failed with error -22 [ 126.625748][ T3659] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1074'. [ 126.635087][ T3659] tc_dump_action: action bad kind [ 126.700860][ T3667] binder: Unknown parameter 'x3&ޢzS.5KzˁWfBLuUXӑ-ē !' [ 126.747887][ T3674] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 126.747919][ T3674] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 126.961134][ T36] audit: type=1400 audit(1755866444.610:978): avc: denied { setattr } for pid=3682 comm="syz.5.1083" name="RAWv6" dev="sockfs" ino=28304 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 126.991038][ T530] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 127.127962][ T3689] rust_binder: 176: no such ref 2 [ 127.133245][ T3689] rust_binder: Write failure EFAULT in pid:176 [ 127.142388][ T530] usb 2-1: config 0 has an invalid interface number: 199 but max is 1 [ 127.157422][ T530] usb 2-1: config 0 has no interface number 1 [ 127.163845][ T530] usb 2-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 127.174099][ T530] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 127.186425][ T530] usb 2-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 127.196312][ T530] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 127.204813][ T530] usb 2-1: SerialNumber: syz [ 127.210967][ T530] usb 2-1: config 0 descriptor?? [ 127.217636][ T530] usb 2-1: Found UVC 0.00 device (0002:0000) [ 127.225194][ T530] usb 2-1: No valid video chain found. [ 127.240982][ T3695] SELinux: security_context_str_to_sid () failed with errno=-22 [ 127.317328][ T530] usb 4-1: USB disconnect, device number 35 [ 127.328845][ T3697] fuseblk: Invalid rootmode [ 127.391566][ T3701] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 127.391594][ T3701] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:892 [ 127.401768][ T3701] rust_binder: 3700 RLIMIT_NICE not set [ 127.420442][ T3671] overlayfs: failed to resolve './file0': -2 [ 127.427056][ T3704] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 127.432904][ T3704] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:895 [ 127.448260][ T65] usb 2-1: USB disconnect, device number 31 [ 127.791404][ T530] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 127.942669][ T530] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 127.953146][ T530] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 127.962777][ T530] usb 4-1: config 220 interface 0 has no altsetting 0 [ 127.971059][ T530] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 127.980686][ T530] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.988885][ T530] usb 4-1: Product: syz [ 127.989168][ T3726] overlayfs: conflicting lowerdir path [ 127.993158][ T530] usb 4-1: Manufacturer: syz [ 128.003531][ T530] usb 4-1: SerialNumber: syz [ 128.194147][ T3740] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1102'. [ 128.204494][ T3740] SELinux: security_context_str_to_sid () failed with errno=-22 [ 128.215725][ T530] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 128.222459][ T530] usb 4-1: No valid video chain found. [ 128.230493][ T530] usb 4-1: USB disconnect, device number 36 [ 128.282980][ T3742] rust_binder: validate_parent_fixup: fixup_min_offset=58, parent_offset=36 [ 128.283008][ T3742] rust_binder: Error while translating object. [ 128.299648][ T3742] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 128.306300][ T3742] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:190 [ 128.400053][ T3748] rust_binder: Read failure Err(EAGAIN) in pid:192 [ 128.412341][ T3748] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:192 [ 128.526310][ T3754] rust_binder: 3753 RLIMIT_NICE not set [ 128.631258][ T36] audit: type=1400 audit(1755866446.280:979): avc: denied { link } for pid=3771 comm="syz.5.1113" name="file1" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 128.712198][ T3773] rust_binder: 3772 RLIMIT_NICE not set [ 128.722017][ T331] rust_binder: 3771: removing orphan mapping 0:4248 [ 128.746374][ T3775] input: /dev/ashmem as /devices/virtual/input/input22 [ 128.773697][ T3779] fuse: Unknown parameter 'V&25#ߚw{;T' [ 128.851895][ T3782] rust_binder: 3781 RLIMIT_NICE not set [ 128.865833][ T3784] rust_binder: Error while translating object. [ 128.871609][ T3784] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 128.877962][ T3784] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:910 [ 128.991464][ T331] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 129.131513][ T331] usb 6-1: device descriptor read/64, error -71 [ 129.251457][ T9] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 129.371396][ T331] usb 6-1: device descriptor read/64, error -71 [ 129.402810][ T9] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 129.411449][ T9] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 129.419835][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 129.429633][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 129.440708][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 129.450795][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 129.465846][ T9] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 129.475021][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.483653][ T9] usb 4-1: Product: syz [ 129.488153][ T9] usb 4-1: Manufacturer: syz [ 129.492807][ T9] usb 4-1: SerialNumber: syz [ 129.498210][ T9] usb 4-1: config 0 descriptor?? [ 129.504175][ T9] hub 4-1:0.0: bad descriptor, ignoring hub [ 129.510151][ T9] hub 4-1:0.0: probe with driver hub failed with error -5 [ 129.613834][ T331] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 129.674361][ T3796] binder: Unknown parameter 'i; [ 129.674361][ T3796] xOGȆd>sfw"reV7J}!wI'T)g__Z' [ 129.690326][ T3796] 9pnet_fd: Insufficient options for proto=fd [ 129.705984][ T3790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.714979][ T3790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.724093][ T3790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.732710][ T3790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.771371][ T331] usb 6-1: device descriptor read/64, error -71 [ 129.787456][ T3800] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1123'. [ 129.796824][ T3800] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1123'. [ 129.881450][ T65] usb 4-1: USB disconnect, device number 37 [ 130.011369][ T331] usb 6-1: device descriptor read/64, error -71 [ 130.083126][ T3802] netlink: 'syz.1.1124': attribute type 46 has an invalid length. [ 130.091086][ T3802] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1124'. [ 130.121470][ T331] usb usb6-port1: attempt power cycle [ 130.198998][ T3810] binder: Bad value for 'stats' [ 130.227728][ T36] audit: type=1400 audit(1755866447.880:980): avc: denied { read } for pid=3814 comm="syz.1.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 130.327495][ T36] audit: type=1400 audit(1755866447.980:981): avc: denied { create } for pid=3819 comm="syz.3.1132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 130.461470][ T331] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 130.482617][ T331] usb 6-1: device descriptor read/8, error -71 [ 130.612699][ T331] usb 6-1: device descriptor read/8, error -71 [ 130.651399][ T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 130.664438][ T3830] rust_binder: 3829 RLIMIT_NICE not set [ 130.679626][ T3832] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3832 comm=syz.0.1136 [ 130.698631][ T3832] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 130.698652][ T3832] rust_binder: Error while translating object. [ 130.707665][ T3832] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 130.714299][ T3832] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:741 [ 130.737182][ T3834] SELinux: Context ϧ-):E2٭ؾ)đJu36ޢ{@m[ is not valid (left unmapped). [ 130.812672][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 130.823873][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.835507][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.845691][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 130.860167][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 130.869900][ T331] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 130.877975][ T9] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 130.886214][ T9] usb 4-1: Manufacturer: syz [ 130.892224][ T9] usb 4-1: config 0 descriptor?? [ 130.902461][ T331] usb 6-1: device descriptor read/8, error -71 [ 131.032450][ T331] usb 6-1: device descriptor read/8, error -71 [ 131.069977][ T3847] 9pnet_fd: Insufficient options for proto=fd [ 131.070469][ T36] audit: type=1400 audit(1755866448.720:982): avc: denied { view } for pid=3846 comm="syz.0.1141" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 131.079358][ T3847] /dev/rnullb0: Can't open blockdev [ 131.151608][ T331] usb usb6-port1: unable to enumerate USB device [ 131.166714][ T3863] usb usb8: usbfs: process 3863 (syz.1.1148) did not claim interface 0 before use [ 131.196054][ T3869] binder: Unknown parameter '0x0000000000000003~' [ 131.253013][ T3875] Trying to write to read-only block-device rnullb0 [ 131.303130][ T9] appleir 0003:05AC:8243.0015: unknown main item tag 0x0 [ 131.310758][ T9] appleir 0003:05AC:8243.0015: No inputs registered, leaving [ 131.330335][ T9] appleir 0003:05AC:8243.0015: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 131.462643][ T3885] rust_binder: 3879 RLIMIT_NICE not set [ 131.477711][ T3887] rust_binder: Got transaction with invalid offset. [ 131.483600][ T3887] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 131.490339][ T3887] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:768 [ 131.501158][ T3887] x_tables: duplicate entry at hook 1 [ 131.590814][ T3905] binder: Bad value for 'stats' [ 131.697952][ T3923] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 131.840163][ T3938] netlink: 'syz.0.1172': attribute type 2 has an invalid length. [ 131.875122][ T36] audit: type=1400 audit(1755866449.520:983): avc: denied { accept } for pid=3940 comm="syz.0.1173" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 131.950313][ T3944] rust_binder: 3943 RLIMIT_NICE not set [ 132.018753][ T36] audit: type=1400 audit(1755866449.670:984): avc: denied { getopt } for pid=3951 comm="syz.0.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 132.109555][ T36] audit: type=1400 audit(1755866449.760:985): avc: denied { setattr } for pid=3965 comm="syz.5.1181" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 132.206899][ T530] usb 4-1: USB disconnect, device number 38 [ 132.342255][ T9] rust_binder: 3973: removing orphan mapping 0:8 [ 132.445258][ T9] rust_binder: 3988: removing orphan mapping 0:8 [ 132.459473][ T3992] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 132.459502][ T3992] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:251 [ 132.572286][ T4005] rust_binder: 4004 RLIMIT_NICE not set [ 132.601126][ T4007] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 132.614033][ T4007] rust_binder: Write failure EINVAL in pid:266 [ 132.751985][ T4015] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1198'. [ 133.191406][ T331] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 133.341359][ T331] usb 4-1: Using ep0 maxpacket: 32 [ 133.348384][ T331] usb 4-1: unable to get BOS descriptor or descriptor too short [ 133.357200][ T331] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.377524][ T331] usb 4-1: New USB device found, idVendor=17ef, idProduct=7000, bcdDevice=a1.ec [ 133.390082][ T331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.408779][ T331] usb 4-1: Product: syz [ 133.416521][ T331] usb 4-1: Manufacturer: syz [ 133.426551][ T331] usb 4-1: SerialNumber: syz [ 133.437074][ T36] audit: type=1400 audit(1755866451.090:986): avc: denied { associate } for pid=4027 comm="syz.5.1203" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 133.459249][ T331] usb 4-1: config 0 descriptor?? [ 133.537198][ T4031] rust_binder: 4030 RLIMIT_NICE not set [ 133.542285][ T331] rust_binder: 4029: removing orphan mapping 0:1112 [ 133.623318][ T4036] /dev/rnullb0: Can't open blockdev [ 133.693571][ T4017] kvm: kvm [4016]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x5407 [ 133.696065][ T4040] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1208'. [ 133.702620][ T4017] kvm: kvm [4016]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x5b07 [ 133.735803][ T865] usb 4-1: USB disconnect, device number 39 [ 133.848667][ T4047] netlink: 288 bytes leftover after parsing attributes in process `syz.5.1210'. [ 133.944281][ T4054] rust_binder: 4053 RLIMIT_NICE not set [ 133.949250][ T865] rust_binder: 4052: removing orphan mapping 0:1112 [ 134.251418][ T865] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 134.302123][ T4063] rust_binder: validate_parent_fixup: fixup_min_offset=58, parent_offset=36 [ 134.302147][ T4063] rust_binder: Error while translating object. [ 134.311147][ T4063] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 134.317740][ T4063] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:933 [ 134.391349][ T865] usb 6-1: device descriptor read/64, error -71 [ 134.430053][ T4072] tap0: tun_chr_ioctl cmd 1074025675 [ 134.435533][ T4072] tap0: persist enabled [ 134.440050][ T4072] tap0: tun_chr_ioctl cmd 1074025675 [ 134.445779][ T4072] tap0: persist enabled [ 134.450320][ T4073] tap0: tun_chr_ioctl cmd 1074025675 [ 134.456102][ T4073] tap0: persist enabled [ 134.541685][ T4081] rust_binder: 4080 RLIMIT_NICE not set [ 134.546930][ T65] rust_binder: 4079: removing orphan mapping 0:1112 [ 134.557461][ T4083] binfmt_misc: register: failed to install interpreter file ./cgroup [ 134.651378][ T865] usb 6-1: device descriptor read/64, error -71 [ 134.656570][ T4086] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:951 [ 134.663508][ T530] rust_binder: 4084: removing orphan mapping 0:24 [ 134.891384][ T865] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 135.021359][ T865] usb 6-1: device descriptor read/64, error -71 [ 135.090941][ T4100] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1228'. [ 135.100180][ T530] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 135.251497][ T530] usb 4-1: Using ep0 maxpacket: 16 [ 135.257945][ T530] usb 4-1: config 8 has an invalid interface number: 39 but max is 0 [ 135.266420][ T530] usb 4-1: config 8 has no interface number 0 [ 135.271391][ T865] usb 6-1: device descriptor read/64, error -71 [ 135.273094][ T530] usb 4-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 135.291336][ T530] usb 4-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 521 [ 135.302196][ T530] usb 4-1: config 8 interface 39 has no altsetting 0 [ 135.310865][ T530] usb 4-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 135.320358][ T530] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.328425][ T530] usb 4-1: Product: syz [ 135.332719][ T530] usb 4-1: Manufacturer: syz [ 135.337339][ T530] usb 4-1: SerialNumber: syz [ 135.344174][ T4093] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 135.382084][ T865] usb usb6-port1: attempt power cycle [ 135.577230][ T530] ipheth 4-1:8.39: ipheth_get_macaddr: usb_control_msg: -71 [ 135.585213][ T530] ipheth 4-1:8.39: probe with driver ipheth failed with error -71 [ 135.586930][ T4130] rust_binder: 962: no such ref 2 [ 135.597817][ T530] usb 4-1: USB disconnect, device number 40 [ 135.721378][ T865] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 135.742609][ T865] usb 6-1: device descriptor read/8, error -71 [ 135.872785][ T865] usb 6-1: device descriptor read/8, error -71 [ 136.111372][ T865] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 136.132863][ T865] usb 6-1: device descriptor read/8, error -71 [ 136.262549][ T865] usb 6-1: device descriptor read/8, error -71 [ 136.372020][ T865] usb usb6-port1: unable to enumerate USB device [ 136.435972][ T4151] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 136.907379][ T4166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1253'. [ 137.009413][ T4186] 9pnet: Could not find request transport: n(rfdno=0x0000000000000004 [ 137.057231][ T4192] rust_binder: Write failure EFAULT in pid:310 [ 137.079176][ T4196] rust_binder: Write failure EINVAL in pid:312 [ 137.150726][ T36] audit: type=1326 audit(1755866454.800:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4211 comm="syz.1.1273" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe61ff8ebe9 code=0x0 [ 137.181911][ T4213] rust_binder: 4204 RLIMIT_NICE not set [ 137.187448][ T9] rust_binder: 4203: removing orphan mapping 0:1112 [ 137.331037][ T4222] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 137.354870][ T36] audit: type=1400 audit(1755866455.010:988): avc: denied { mount } for pid=4223 comm="syz.3.1278" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 137.359199][ T4224] overlayfs: failed to resolve 'xino=on': -2 [ 137.378491][ T36] audit: type=1400 audit(1755866455.010:989): avc: denied { mounton } for pid=4223 comm="syz.3.1278" path="/319/file0" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=dir permissive=1 [ 137.475122][ T4225] /dev/rnullb0: Can't open blockdev [ 137.571110][ T36] audit: type=1400 audit(1755866455.220:990): avc: denied { mounton } for pid=4226 comm="syz.5.1279" path="/109/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 137.710364][ T36] audit: type=1400 audit(1755866455.360:991): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 137.734667][ T4231] __vm_enough_memory: pid: 4231, comm: syz.3.1281, bytes: 18014402804453376 not enough memory for the allocation [ 137.754777][ T4232] rust_binder: Write failure EFAULT in pid:323 [ 137.811562][ T4236] rust_binder: 4234 RLIMIT_NICE not set [ 137.823972][ T532] rust_binder: 4233: removing orphan mapping 0:1112 [ 138.091348][ T532] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 138.237530][ T36] audit: type=1400 audit(1755866455.890:992): avc: denied { watch } for pid=4268 comm="syz.0.1296" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 138.271342][ T532] usb 4-1: Using ep0 maxpacket: 16 [ 138.282049][ T532] usb 4-1: config 4 has an invalid interface number: 159 but max is 0 [ 138.292170][ T532] usb 4-1: config 4 has no interface number 0 [ 138.298832][ T4280] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:822 [ 138.301870][ T532] usb 4-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=45.cb [ 138.327373][ T532] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.335843][ T532] usb 4-1: Product: syz [ 138.340055][ T532] usb 4-1: Manufacturer: syz [ 138.345069][ T532] usb 4-1: SerialNumber: syz [ 138.350206][ T4288] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:822 [ 138.356829][ T530] rust_binder: 0: removing orphan mapping 0:24 [ 138.574998][ T4238] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 138.593615][ T4298] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 138.598562][ T532] usb 4-1: MBOX3: Invalid descriptor size=18. [ 138.624779][ T532] usb 4-1: USB disconnect, device number 41 [ 138.660584][ T4303] rust_binder: 4300 RLIMIT_NICE not set [ 138.675445][ T947] Bluetooth: hci0: Frame reassembly failed (-84) [ 139.882413][ T4331] overlay: Unknown parameter 'dont_measure' [ 140.691385][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 140.691398][ T647] Bluetooth: hci0: command 0x1003 tx timeout [ 141.144122][ T4389] rust_binder: Error while translating object. [ 141.144172][ T4389] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 141.150501][ T4389] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1013 [ 141.193905][ T36] audit: type=1400 audit(1755866458.850:993): avc: denied { bind } for pid=4394 comm="syz.3.1341" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 141.229727][ T4397] overlay: ./file0 is not a directory [ 141.247355][ T36] audit: type=1400 audit(1755866458.850:994): avc: denied { name_bind } for pid=4394 comm="syz.3.1341" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 141.269448][ T36] audit: type=1400 audit(1755866458.850:995): avc: denied { node_bind } for pid=4394 comm="syz.3.1341" saddr=ff01::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 141.531347][ T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 141.674327][ T4443] tipc: Started in network mode [ 141.679325][ T4443] tipc: Node identity 7f000001, cluster identity 4711 [ 141.682619][ T9] usb 4-1: config 0 has an invalid interface number: 9 but max is 0 [ 141.686545][ T4443] tipc: Enabled bearer , priority 10 [ 141.694609][ T9] usb 4-1: config 0 has no interface number 0 [ 141.706829][ T9] usb 4-1: config 0 interface 9 altsetting 132 endpoint 0x6 has invalid wMaxPacketSize 0 [ 141.717274][ T9] usb 4-1: config 0 interface 9 altsetting 132 has an endpoint descriptor with address 0x31, changing to 0x1 [ 141.729405][ T9] usb 4-1: config 0 interface 9 altsetting 132 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 141.741395][ T9] usb 4-1: config 0 interface 9 has no altsetting 0 [ 141.749756][ T9] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 141.759245][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.767768][ T9] usb 4-1: Product: syz [ 141.772190][ T9] usb 4-1: Manufacturer: syz [ 141.777015][ T9] usb 4-1: SerialNumber: syz [ 141.782963][ T9] usb 4-1: config 0 descriptor?? [ 142.048551][ T4455] 9pnet_fd: Insufficient options for proto=fd [ 142.049917][ T4456] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1017 [ 142.138297][ T4464] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1367'. [ 142.274801][ T4483] fuse: Unknown parameter '}$*Y(S۴c%Ⰱ/wMYx^8Z) [ 142.274801][ T4483] &`qmʳ3P0g^"' [ 142.310929][ T4491] overlayfs: failed to clone lowerpath [ 142.314965][ T4492] binder: Unknown parameter 'devcontext01777777777777777777777' [ 142.348989][ T4496] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 142.591490][ T331] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 142.761328][ T331] usb 6-1: Using ep0 maxpacket: 8 [ 142.767540][ T331] usb 6-1: config 162 has an invalid interface number: 79 but max is 1 [ 142.776155][ T331] usb 6-1: config 162 has an invalid interface number: 183 but max is 1 [ 142.784807][ T331] usb 6-1: config 162 has no interface number 0 [ 142.791142][ T331] usb 6-1: config 162 has no interface number 1 [ 142.797566][ T331] usb 6-1: config 162 interface 79 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 142.811326][ T532] tipc: Node number set to 2130706433 [ 142.812718][ T331] usb 6-1: config 162 interface 183 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 142.820608][ T4513] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1385'. [ 142.827929][ T331] usb 6-1: config 162 interface 183 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 142.827966][ T331] usb 6-1: config 162 interface 183 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 142.828016][ T331] usb 6-1: config 162 interface 183 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 142.828044][ T331] usb 6-1: config 162 interface 183 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 142.885063][ T331] usb 6-1: config 162 interface 79 has no altsetting 0 [ 142.892026][ T331] usb 6-1: config 162 interface 183 has no altsetting 0 [ 142.900552][ T331] usb 6-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 142.909946][ T331] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.916236][ T4515] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1386'. [ 142.918350][ T331] usb 6-1: Product: syz [ 142.931867][ T331] usb 6-1: Manufacturer: syz [ 142.936609][ T331] usb 6-1: SerialNumber: syz [ 143.149453][ T331] pl2303 6-1:162.79: required endpoints missing [ 143.158010][ T331] pl2303 6-1:162.183: pl2303 converter detected [ 143.164824][ T331] pl2303 6-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 143.173888][ T331] pl2303 6-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 143.182772][ T331] pl2303 6-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 143.191211][ T331] pl2303 6-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 143.199847][ T331] pl2303 6-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 143.208692][ T331] pl2303 6-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 143.217542][ T331] pl2303 6-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 143.226268][ T331] pl2303 6-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 143.234905][ T331] pl2303 6-1:162.183: pl2303_vendor_write - failed to write [0000]: -71 [ 143.244116][ T331] pl2303 6-1:162.183: pl2303_vendor_write - failed to write [0001]: -71 [ 143.253137][ T331] pl2303 6-1:162.183: pl2303_vendor_write - failed to write [0002]: -71 [ 143.262683][ T331] usb 6-1: pl2303 converter now attached to ttyUSB0 [ 143.273045][ T331] usb 6-1: USB disconnect, device number 15 [ 143.281548][ T331] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 143.290117][ T331] pl2303 6-1:162.183: device disconnected [ 143.675668][ T4536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1392'. [ 143.826913][ T4564] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1402'. [ 144.011389][ T331] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 144.162357][ T331] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 144.170439][ T331] usb 6-1: config 1 has no interface number 0 [ 144.176851][ T331] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 144.188682][ T331] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 144.198291][ T331] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.206444][ T331] usb 6-1: Product: syz [ 144.210842][ T331] usb 6-1: Manufacturer: syz [ 144.215723][ T331] usb 6-1: SerialNumber: syz [ 144.221458][ T4552] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 144.256230][ T9] ftdi_sio 4-1:0.9: FTDI USB Serial Device converter detected [ 144.264382][ T9] usb 4-1: Detected SIO [ 144.268771][ T9] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 6 [ 144.277236][ T9] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 144.293832][ T9] usb 4-1: USB disconnect, device number 42 [ 144.307644][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 144.317614][ T9] ftdi_sio 4-1:0.9: device disconnected [ 144.430843][ T36] audit: type=1400 audit(1755866462.080:996): avc: denied { mounton } for pid=4550 comm="syz.5.1398" path="/123/file0" dev="tmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 144.691703][ T9] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 144.842901][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 144.851928][ T9] usb 4-1: config 14 has an invalid interface number: 21 but max is 0 [ 144.860611][ T9] usb 4-1: config 14 has no interface number 0 [ 144.867863][ T9] usb 4-1: config 14 interface 21 has no altsetting 0 [ 144.876743][ T9] usb 4-1: New USB device found, idVendor=c880, idProduct=760e, bcdDevice=35.fc [ 144.888682][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.896998][ T9] usb 4-1: Product: syz [ 144.903473][ T9] usb 4-1: Manufacturer: syz [ 144.908348][ T9] usb 4-1: SerialNumber: syz [ 144.908412][ T36] audit: type=1400 audit(1755866462.560:997): avc: denied { create } for pid=4584 comm="syz.1.1409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 144.916426][ T36] audit: type=1400 audit(1755866462.560:998): avc: denied { sys_admin } for pid=4584 comm="syz.1.1409" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 144.956893][ T4587] serio: Serial port ptm1 [ 145.014845][ T4594] fuse: Bad value for 'fd' [ 145.247698][ T9] usb 4-1: MIDIStreaming interface descriptor not found [ 145.258694][ T9] usb 4-1: USB disconnect, device number 43 [ 145.270796][ T1293] udevd[1293]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:14.21/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 145.296376][ T4613] rust_binder: 4612 RLIMIT_NICE not set [ 145.578633][ T4629] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 145.838078][ T4649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1431'. [ 145.902509][ T36] audit: type=1400 audit(1755866463.560:999): avc: denied { watch watch_reads } for pid=4648 comm="syz.3.1431" path="/337/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 146.700701][ T4661] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1435'. [ 146.776929][ T9] usb 6-1: USB disconnect, device number 16 [ 146.818125][ T4666] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:367 [ 146.818510][ T36] audit: type=1326 audit(1755866464.470:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.5.1437" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f78ed58ebe9 code=0x0 [ 146.869659][ T4669] rust_binder: 367: no such ref 3 [ 146.875025][ T4669] rust_binder: 367: no such ref 1 [ 147.051316][ T4689] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1055 [ 148.021441][ T9] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 148.066844][ T36] audit: type=1400 audit(1755866465.720:1001): avc: denied { create } for pid=4720 comm="syz.3.1456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 148.109647][ T4726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1457'. [ 148.161396][ T9] usb 6-1: device descriptor read/64, error -71 [ 148.387304][ T4740] netlink: 'syz.3.1463': attribute type 20 has an invalid length. [ 148.395595][ T4739] netlink: 'syz.3.1463': attribute type 20 has an invalid length. [ 148.421704][ T9] usb 6-1: device descriptor read/64, error -71 [ 148.457196][ T4744] fuse: Unknown parameter '000000000000000000030xffffffffffffffff' [ 148.477736][ T36] audit: type=1400 audit(1755866466.130:1002): avc: denied { map } for pid=4747 comm="syz.3.1465" path="/dev/ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 148.661942][ T9] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 148.771534][ T331] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 148.801443][ T9] usb 6-1: device descriptor read/64, error -71 [ 148.921418][ T331] usb 4-1: Using ep0 maxpacket: 8 [ 148.927876][ T331] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 148.937237][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.946070][ T331] usb 4-1: config 0 descriptor?? [ 149.041393][ T9] usb 6-1: device descriptor read/64, error -71 [ 149.151569][ T9] usb usb6-port1: attempt power cycle [ 149.411216][ T4786] 9pnet_virtio: no channels available for device ./file0 [ 149.419316][ T4786] netlink: 'syz.1.1477': attribute type 29 has an invalid length. [ 149.427556][ T4786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1477'. [ 149.501441][ T9] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 149.522325][ T9] usb 6-1: device descriptor read/8, error -71 [ 149.652462][ T9] usb 6-1: device descriptor read/8, error -71 [ 149.891640][ T9] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 149.912513][ T9] usb 6-1: device descriptor read/8, error -71 [ 149.962382][ T331] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 149.973284][ T331] asix 4-1:0.0: probe with driver asix failed with error -71 [ 149.982473][ T331] usb 4-1: USB disconnect, device number 44 [ 150.042561][ T9] usb 6-1: device descriptor read/8, error -71 [ 150.151563][ T9] usb usb6-port1: unable to enumerate USB device [ 150.537079][ T4809] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 150.537469][ T4810] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 150.791385][ T530] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 150.935661][ T4821] netlink: 'syz.5.1489': attribute type 1 has an invalid length. [ 150.943618][ T4821] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1489'. [ 150.965031][ T530] usb 4-1: Using ep0 maxpacket: 16 [ 150.972501][ T530] usb 4-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 1024 [ 150.982875][ T530] usb 4-1: config 1 interface 0 altsetting 6 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 151.001627][ T530] usb 4-1: config 1 interface 0 has no altsetting 0 [ 151.015486][ T530] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.017726][ T36] audit: type=1400 audit(1755866468.670:1003): avc: denied { create } for pid=4825 comm="syz.5.1491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 151.025237][ T530] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.045170][ T4826] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 151.052664][ T4826] rust_binder: Error while translating object. [ 151.053350][ T530] usb 4-1: Product: 䠊 [ 151.061638][ T4826] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 151.061672][ T4826] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:390 [ 151.079377][ T4828] loop7: detected capacity change from 0 to 7 [ 151.089590][ T530] usb 4-1: Manufacturer: ј [ 151.132573][ T530] usb 4-1: SerialNumber: syz [ 151.168068][ T4813] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 151.175665][ T4813] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 151.308581][ T36] audit: type=1400 audit(1755866468.960:1004): avc: denied { mounton } for pid=4841 comm="syz.5.1498" path="/135/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 151.396004][ T530] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 151.409412][ T530] usb 4-1: USB disconnect, device number 45 [ 151.421234][ T4856] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 151.421337][ T4856] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:886 [ 151.456648][ T4859] kvm: kvm [4858]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 151.474780][ T4859] kvm: kvm [4858]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 151.495170][ T4859] kvm: kvm [4858]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xc800 [ 151.504372][ T4859] kvm: kvm [4858]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xc800 [ 151.931347][ T10] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 152.082661][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 152.094191][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.104133][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 152.113554][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.122596][ T10] usb 4-1: config 0 descriptor?? [ 152.548163][ T4912] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 152.603854][ T36] audit: type=1400 audit(1755866470.260:1005): avc: denied { append } for pid=4916 comm="syz.0.1525" name="event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 152.758481][ T9] usb 4-1: USB disconnect, device number 46 [ 153.174057][ T4935] rust_binder: Error while translating object. [ 153.174112][ T4935] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 153.180606][ T4935] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:417 [ 153.218840][ T4939] rust_binder: Write failure EFAULT in pid:421 [ 153.279358][ T4939] rust_binder: Write failure EFAULT in pid:421 [ 153.396443][ T36] audit: type=1400 audit(1755866471.050:1006): avc: denied { nlmsg_write } for pid=4963 comm="syz.3.1540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 153.435220][ T4971] binder: Bad value for 'stats' [ 153.457607][ T36] audit: type=1400 audit(1755866471.110:1007): avc: denied { ioctl } for pid=4972 comm="syz.5.1543" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 153.457796][ T4973] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 153.558549][ T36] audit: type=1400 audit(1755866471.200:1008): avc: denied { read } for pid=4979 comm="syz.1.1546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 153.791354][ T9] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 153.921393][ T9] usb 6-1: device descriptor read/64, error -71 [ 154.130652][ T4987] /dev/rnullb0: Can't open blockdev [ 154.151174][ T4989] /dev/rnullb0: Can't open blockdev [ 154.161348][ T9] usb 6-1: device descriptor read/64, error -71 [ 154.173894][ T4992] rust_binder: Read failure Err(EFAULT) in pid:1153 [ 154.401371][ T9] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 154.531395][ T9] usb 6-1: device descriptor read/64, error -71 [ 154.771411][ T9] usb 6-1: device descriptor read/64, error -71 [ 154.805249][ T5000] 9pnet_fd: Insufficient options for proto=fd [ 154.812893][ T5000] 9pnet_fd: Insufficient options for proto=fd [ 154.881517][ T9] usb usb6-port1: attempt power cycle [ 155.126056][ T36] audit: type=1400 audit(1755866472.780:1009): avc: denied { sys_module } for pid=5027 comm="syz.3.1563" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 155.158854][ T5030] binder: Unknown parameter 'context?' [ 155.210878][ T5032] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 155.210928][ T5032] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 155.219108][ T5032] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1193 [ 155.231474][ T9] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 155.262503][ T9] usb 6-1: device descriptor read/8, error -71 [ 155.365065][ T5038] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1198 [ 155.392581][ T9] usb 6-1: device descriptor read/8, error -71 [ 155.549763][ T5046] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 155.549793][ T5046] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1207 [ 155.559874][ T5046] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1207 [ 155.580290][ T5048] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 155.590223][ T5048] rust_binder: Read failure Err(EFAULT) in pid:1209 [ 155.599735][ T5048] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 155.609352][ T5048] rust_binder: Read failure Err(EFAULT) in pid:1209 [ 155.642256][ T9] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 155.654073][ T5055] binder: Binderfs stats mode cannot be changed during a remount [ 155.675124][ T9] usb 6-1: device descriptor read/8, error -71 [ 155.675750][ T5057] binder: Bad value for 'max' [ 155.687031][ T5058] binder: Bad value for 'max' [ 155.812690][ T9] usb 6-1: device descriptor read/8, error -71 [ 155.921485][ T9] usb usb6-port1: unable to enumerate USB device [ 156.488451][ T532] rust_binder: 5053: removing orphan mapping 0:24 [ 156.561467][ T5064] netlink: 196 bytes leftover after parsing attributes in process `syz.5.1576'. [ 156.571575][ T5064] fuse: Bad value for 'fd' [ 156.649094][ T5077] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:445 [ 156.812220][ T5092] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1585'. [ 156.832073][ T5092] fuse: Bad value for 'fd' [ 156.855035][ T36] audit: type=1400 audit(1755866474.510:1010): avc: denied { getattr } for pid=5093 comm="syz.3.1586" name="/" dev="incremental-fs" ino=2283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 156.862000][ T5095] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 156.883076][ T5097] overlay: Unknown parameter 'smackfsroot' [ 156.941737][ T36] audit: type=1400 audit(1755866474.590:1011): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 157.040528][ T5118] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1595'. [ 157.098948][ T5129] overlayfs: failed to clone upperpath [ 157.129428][ T5132] loop8: detected capacity change from 0 to 7 [ 157.341748][ T36] audit: type=1400 audit(1755866475.000:1012): avc: denied { accept } for pid=5145 comm="syz.3.1604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 157.429004][ T5160] fuse: Unknown parameter './binderfs/binder1' [ 157.435399][ T36] audit: type=1400 audit(1755866475.080:1013): avc: denied { mounton } for pid=5159 comm="syz.1.1610" path="/file0" dev="ramfs" ino=35391 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 157.626132][ T5192] usb usb9: check_ctrlrecip: process 5192 (syz.5.1622) requesting ep 01 but needs 81 [ 157.635865][ T5192] usb usb9: usbfs: process 5192 (syz.5.1622) did not claim interface 0 before use [ 157.646793][ T5192] rust_binder: Write failure EFAULT in pid:459 [ 157.663405][ T5199] /dev/rnullb0: Can't open blockdev [ 157.728785][ T5207] rust_binder: 465: no such ref 2 [ 157.757147][ T5217] 9pnet_fd: Insufficient options for proto=fd [ 157.802015][ T5222] syzkaller0: entered allmulticast mode [ 157.807940][ T5222] syzkaller0: entered promiscuous mode [ 157.827065][ T5221] syzkaller0: left promiscuous mode [ 157.832856][ T5221] syzkaller0: left allmulticast mode [ 157.881336][ T532] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 158.031378][ T532] usb 4-1: Using ep0 maxpacket: 16 [ 158.038504][ T532] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 158.048985][ T532] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.060179][ T532] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.069957][ T532] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 158.083050][ T532] usb 4-1: config 7 interface 0 has no altsetting 0 [ 158.089909][ T532] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 158.099115][ T532] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.188316][ T5246] netlink: 1323 bytes leftover after parsing attributes in process `syz.1.1642'. [ 158.217819][ T36] audit: type=1400 audit(1755866475.870:1014): avc: denied { ioctl } for pid=5248 comm="syz.1.1643" path="socket:[35481]" dev="sockfs" ino=35481 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 158.530470][ T532] hid (null): global environment stack underflow [ 158.546171][ T532] input: HID 0458:5010 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:7.0/0003:0458:5010.0017/input/input24 [ 158.571164][ T532] kye 0003:0458:5010.0017: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0 [ 158.735983][ T5293] binder: Unknown parameter 'ont_measure' [ 158.833496][ T5195] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 158.931617][ T5305] binder: Unknown parameter 'fscontext?}' [ 158.960657][ T36] audit: type=1400 audit(1755866476.610:1015): avc: denied { setopt } for pid=5307 comm="syz.0.1661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 159.006702][ T5306] kvm: apic: phys broadcast and lowest prio [ 159.783151][ T36] audit: type=1401 audit(1755866477.441:1016): op=fscreate invalid_context=CFA7AE [ 159.832586][ C1] kye 0003:0458:5010.0017: usb_submit_urb(ctrl) failed: -1 [ 159.961426][ T331] usb 4-1: reset high-speed USB device number 47 using dummy_hcd [ 159.997164][ T5332] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1672'. [ 160.074154][ T5336] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 160.091416][ T331] usb 4-1: device descriptor read/64, error -32 [ 160.131384][ T9] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 160.282799][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.293656][ T9] usb 6-1: config 0 has no interfaces? [ 160.300793][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 160.309917][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.318226][ T9] usb 6-1: Product: syz [ 160.322456][ T9] usb 6-1: Manufacturer: syz [ 160.327090][ T9] usb 6-1: SerialNumber: syz [ 160.331827][ T331] usb 4-1: device descriptor read/64, error -32 [ 160.338991][ T9] usb 6-1: config 0 descriptor?? [ 160.548006][ T9] usb 6-1: USB disconnect, device number 25 [ 160.571368][ T331] usb 4-1: reset high-speed USB device number 47 using dummy_hcd [ 160.701356][ T331] usb 4-1: device descriptor read/64, error -32 [ 160.980901][ T5351] cgroup: Name too long [ 161.099649][ T5367] input: syz1 as /devices/virtual/input/input25 [ 161.136896][ T5374] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1686'. [ 161.197023][ T36] audit: type=1400 audit(1755866478.851:1017): avc: denied { setattr } for pid=5379 comm="syz.5.1688" name="TIPC" dev="sockfs" ino=36786 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 161.255982][ T5385] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 161.258741][ T5383] x_tables: duplicate underflow at hook 2 [ 161.263578][ T5385] rust_binder: Write failure EINVAL in pid:1286 [ 161.380461][ T5391] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.523166][ T5428] overlayfs: missing 'lowerdir' [ 161.581904][ T10] usb 4-1: USB disconnect, device number 47 [ 161.697098][ T36] audit: type=1326 audit(1755866479.351:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5445 comm="syz.5.1711" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f78ed58ebe9 code=0x0 [ 161.779607][ T36] audit: type=1400 audit(1755866479.431:1019): avc: denied { lock } for pid=5445 comm="syz.5.1711" path="socket:[38316]" dev="sockfs" ino=38316 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 162.386914][ T36] audit: type=1326 audit(1755866480.041:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5471 comm="syz.1.1720" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe61ff8ebe9 code=0x0 [ 162.717008][ T5509] __vm_enough_memory: pid: 5509, comm: syz.3.1734, bytes: 18014402804453376 not enough memory for the allocation [ 162.800048][ T36] audit: type=1400 audit(1755866480.451:1021): avc: denied { create } for pid=5512 comm="syz.3.1735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 162.810378][ T31] rust_binder: 5512: removing orphan mapping 0:8 [ 162.972698][ T36] audit: type=1400 audit(1755866480.631:1022): avc: denied { accept } for pid=5529 comm="syz.5.1740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 163.141868][ T5536] kvm: kvm [5535]: vcpu2, guest rIP: 0x9133 Unhandled WRMSR(0x11e) = 0xbe702111 [ 163.245700][ T5545] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1746'. [ 163.261360][ T331] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 163.315688][ T5545] rust_binder: Error in use_page_slow: ESRCH [ 163.315717][ T5545] rust_binder: use_range failure ESRCH [ 163.321987][ T5545] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 163.327693][ T5545] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 163.335933][ T5545] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:968 [ 163.391322][ T331] usb 6-1: device descriptor read/64, error -71 [ 163.510509][ T5561] rust_binder: Error while translating object. [ 163.510537][ T5561] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 163.517079][ T5561] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:977 [ 163.581381][ T332] rust_binder: get_current_thread was called from the wrong process. [ 163.641361][ T331] usb 6-1: device descriptor read/64, error -71 [ 163.675126][ T5578] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 163.675154][ T5578] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 163.683763][ T5578] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 163.690471][ T5578] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 163.697197][ T5578] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 163.703831][ T5578] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 163.710538][ T5578] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 163.717102][ T5578] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 163.723674][ T5578] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 163.730332][ T5578] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 163.738269][ T5578] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 163.744815][ T5578] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 163.751608][ T5578] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 163.758444][ T5578] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 163.765058][ T5578] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 163.771551][ T5578] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 163.778271][ T5578] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 163.785014][ T5578] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 163.791605][ T5578] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 163.798195][ T5578] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 163.804852][ T5578] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 163.811366][ T5578] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 163.818009][ T5578] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 163.824589][ T5578] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 163.831519][ T5578] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 163.838487][ T5578] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 163.845324][ T5578] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 163.851972][ T5578] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 163.858595][ T5578] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 163.865235][ T5578] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 163.871834][ T5578] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 163.878460][ T5578] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 163.901444][ T331] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 163.971357][ T332] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 164.041524][ T331] usb 6-1: device descriptor read/64, error -71 [ 164.122474][ T332] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 164.134368][ T332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 164.145815][ T332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 164.156064][ T332] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 164.169355][ T332] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 164.179267][ T332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.188509][ T332] usb 4-1: config 0 descriptor?? [ 164.253979][ T5606] netlink: 'syz.1.1766': attribute type 16 has an invalid length. [ 164.262301][ T5606] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1766'. [ 164.311389][ T331] usb 6-1: device descriptor read/64, error -71 [ 164.397738][ T5592] tmpfs: Unknown parameter 'usrquota' [ 164.421415][ T331] usb usb6-port1: attempt power cycle [ 164.639122][ T332] plantronics 0003:047F:FFFF.0018: ignoring exceeding usage max [ 164.649382][ T332] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 164.659223][ T332] plantronics 0003:047F:FFFF.0018: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 164.761426][ T331] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 164.783789][ T331] usb 6-1: device descriptor read/8, error -71 [ 164.842508][ T5612] overlayfs: conflicting options: userxattr,metacopy=on [ 164.912403][ T331] usb 6-1: device descriptor read/8, error -71 [ 164.943015][ T5615] netlink: 'syz.3.1762': attribute type 13 has an invalid length. [ 164.952009][ T5615] erspan0: refused to change device tx_queue_len [ 165.151374][ T331] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 165.172582][ T331] usb 6-1: device descriptor read/8, error -71 [ 165.302390][ T331] usb 6-1: device descriptor read/8, error -71 [ 165.411568][ T331] usb usb6-port1: unable to enumerate USB device [ 165.655405][ T5617] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 165.655435][ T5617] rust_binder: Error while translating object. [ 165.664469][ T5617] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 165.670769][ T5617] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1010 [ 165.681318][ T5617] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.693040][ T5617] rust_binder: Error while translating object. [ 165.699648][ T5617] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 165.706099][ T5617] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1010 [ 165.712127][ T5624] 9pnet_fd: Insufficient options for proto=fd [ 166.044644][ T5640] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 166.044692][ T5640] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:568 [ 166.109572][ T5646] 9pnet: p9_errstr2errno: server reported unknown error [ 166.403734][ T5658] overlayfs: failed to clone upperpath [ 166.529241][ T5665] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 166.529272][ T5665] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1337 [ 166.544154][ T31] rust_binder: 5664: removing orphan mapping 0:8 [ 166.623175][ T5681] rust_binder: 1340: no such ref 1 [ 166.643593][ T5688] cgroup: noprefix used incorrectly [ 166.673856][ T5696] fuse: Bad value for 'fd' [ 166.721522][ T332] usb 4-1: USB disconnect, device number 48 [ 166.726229][ T5704] netlink: 'syz.1.1799': attribute type 4 has an invalid length. [ 166.760509][ T5708] /dev/rnullb0: Can't open blockdev [ 166.993685][ T5728] /dev/rnullb0: Can't open blockdev [ 167.221370][ T332] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 167.241380][ T9] usb 6-1: new low-speed USB device number 30 using dummy_hcd [ 167.371359][ T332] usb 4-1: Using ep0 maxpacket: 16 [ 167.378097][ T332] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.388432][ T332] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.399581][ T9] usb 6-1: Invalid ep0 maxpacket: 32 [ 167.405022][ T332] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 167.419261][ T332] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 167.428373][ T332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 167.436905][ T332] usb 4-1: SerialNumber: syz [ 167.444396][ T332] hub 4-1:1.0: bad descriptor, ignoring hub [ 167.450540][ T332] hub 4-1:1.0: probe with driver hub failed with error -5 [ 167.458099][ T332] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 167.541400][ T9] usb 6-1: new low-speed USB device number 31 using dummy_hcd [ 167.691337][ T9] usb 6-1: Invalid ep0 maxpacket: 32 [ 167.697498][ T9] usb usb6-port1: attempt power cycle [ 167.751474][ T31] usb 4-1: USB disconnect, device number 49 [ 167.812007][ T5736] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=5736 comm=syz.1.1811 [ 167.827485][ T5736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1811'. [ 167.927884][ T5743] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 167.995256][ T5752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1816'. [ 168.041394][ T9] usb 6-1: new low-speed USB device number 32 using dummy_hcd [ 168.061794][ T9] usb 6-1: Invalid ep0 maxpacket: 32 [ 168.197909][ T5759] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1819'. [ 168.207132][ T9] usb 6-1: new low-speed USB device number 33 using dummy_hcd [ 168.231741][ T9] usb 6-1: Invalid ep0 maxpacket: 32 [ 168.237485][ T9] usb usb6-port1: unable to enumerate USB device [ 169.042579][ T5779] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1826'. [ 169.161350][ T332] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 169.312812][ T332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 169.324258][ T332] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 169.334082][ T332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.342992][ T332] usb 4-1: config 0 descriptor?? [ 169.348282][ T5777] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 169.563048][ T332] hid-generic 0003:04F3:0755.0019: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 169.577975][ T332] usb 4-1: USB disconnect, device number 50 [ 169.605527][ T5797] fido_id[5797]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 169.921533][ T332] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 170.082643][ T332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 170.093826][ T332] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.106900][ T332] usb 4-1: New USB device found, idVendor=056a, idProduct=00d4, bcdDevice= 0.00 [ 170.116105][ T332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.125100][ T332] usb 4-1: config 0 descriptor?? [ 170.130666][ T5800] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 170.411443][ T331] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 170.542200][ T332] wacom 0003:056A:00D4.001A: unknown main item tag 0x0 [ 170.549188][ T332] wacom 0003:056A:00D4.001A: item fetching failed at offset 3/5 [ 170.557325][ T332] wacom 0003:056A:00D4.001A: parse failed [ 170.563292][ T332] wacom 0003:056A:00D4.001A: probe with driver wacom failed with error -22 [ 170.571975][ T331] usb 6-1: Using ep0 maxpacket: 16 [ 170.578270][ T331] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.588495][ T331] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 170.599290][ T331] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 170.608519][ T331] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.616661][ T331] usb 6-1: Product: syz [ 170.620844][ T331] usb 6-1: Manufacturer: syz [ 170.625492][ T331] usb 6-1: SerialNumber: syz [ 170.742997][ T332] usb 4-1: USB disconnect, device number 51 [ 170.868054][ T331] usb 6-1: 0:2 : does not exist [ 170.882341][ T331] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 170.902263][ T331] usb 6-1: USB disconnect, device number 34 [ 170.921259][ T1291] udevd[1291]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 171.058863][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.066684][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.075391][ T31] rust_binder: 0: removing orphan mapping 0:24 [ 171.082994][ T5835] bridge_slave_0: entered allmulticast mode [ 171.089457][ T5835] bridge_slave_0: entered promiscuous mode [ 171.096473][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.108645][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.116163][ T5835] bridge_slave_1: entered allmulticast mode [ 171.122650][ T5835] bridge_slave_1: entered promiscuous mode [ 171.185391][ T5840] rust_binder: 1028: no such ref 2 [ 171.213729][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.220837][ T5835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.228272][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.235809][ T5835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.262639][ T947] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.280723][ T947] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.294990][ T936] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.302133][ T936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.311926][ T947] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.319098][ T947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.355250][ T5835] veth0_vlan: entered promiscuous mode [ 171.370864][ T5835] veth1_macvtap: entered promiscuous mode [ 171.597130][ T5856] rust_binder: 1373: no such ref 1 [ 171.602413][ T5856] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 171.609648][ T5856] rust_binder: Error while translating object. [ 171.609674][ T5856] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 171.616018][ T5856] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1373 [ 171.651333][ T331] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 171.691339][ T31] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 171.801407][ T331] usb 6-1: device descriptor read/64, error -71 [ 171.861522][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 171.871089][ T31] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 171.882464][ T31] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.887447][ T5873] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1856'. [ 171.894521][ T31] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.913548][ T31] usb 2-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 171.928425][ T31] usb 2-1: config 7 interface 0 has no altsetting 0 [ 171.935424][ T31] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 171.941864][ T5878] fuse: Bad value for 'user_id' [ 171.945207][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.949758][ T5878] fuse: Bad value for 'user_id' [ 172.041400][ T331] usb 6-1: device descriptor read/64, error -71 [ 172.167597][ T31] usbhid 2-1:7.0: can't add hid device: -71 [ 172.174270][ T31] usbhid 2-1:7.0: probe with driver usbhid failed with error -71 [ 172.184193][ T31] usb 2-1: USB disconnect, device number 32 [ 172.190704][ T5891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1860'. [ 172.233016][ T5895] rust_binder: Write failure EINVAL in pid:14 [ 172.233379][ T5895] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 172.247187][ T5895] rust_binder: Write failure EINVAL in pid:14 [ 172.281407][ T331] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 172.431414][ T331] usb 6-1: device descriptor read/64, error -71 [ 172.671374][ T331] usb 6-1: device descriptor read/64, error -71 [ 172.781523][ T331] usb usb6-port1: attempt power cycle [ 172.881151][ T5903] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 173.121363][ T331] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 173.152508][ T331] usb 6-1: device descriptor read/8, error -71 [ 173.282369][ T331] usb 6-1: device descriptor read/8, error -71 [ 173.380333][ T5913] rust_binder: Error while translating object. [ 173.380370][ T5913] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 173.387234][ T5913] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 173.396848][ T5913] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:27 [ 173.521358][ T331] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 173.552493][ T331] usb 6-1: device descriptor read/8, error -71 [ 173.682553][ T331] usb 6-1: device descriptor read/8, error -71 [ 173.703093][ T5918] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 173.791528][ T331] usb usb6-port1: unable to enumerate USB device [ 173.870946][ T5926] netlink: 'syz.3.1870': attribute type 4 has an invalid length. [ 173.909496][ T36] audit: type=1400 audit(1755866491.561:1023): avc: denied { search } for pid=5936 comm="syz.3.1872" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 173.931500][ T36] audit: type=1400 audit(1755866491.561:1024): avc: denied { write } for pid=5936 comm="syz.3.1872" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 174.042535][ T5946] rust_binder: 1433: no such ref 0 [ 174.048051][ T5946] rust_binder: Write failure EINVAL in pid:1433 [ 174.048060][ T5948] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 174.062151][ T5948] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 174.111769][ T530] rust_binder: 5910: removing orphan mapping 0:24 [ 174.155214][ T5954] fuse: Unknown parameter 'fd̤+N' [ 174.175934][ T5957] rust_binder: Error while translating object. [ 174.175968][ T5957] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 174.182563][ T5957] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:39 [ 174.192191][ T5957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.202464][ T5957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.372497][ T5963] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] PREEMPT SMP KASAN PTI [ 174.391967][ T5963] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 174.400492][ T5963] CPU: 0 UID: 0 PID: 5963 Comm: syz.1.1879 Not tainted syzkaller #0 00ad55236d4531c7fb9f608a968d4071287717d4 [ 174.412143][ T5963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 174.422460][ T5963] RIP: 0010:fuse_atomic_open+0x1b6/0x440 [ 174.428408][ T5963] Code: 8b 6d bc 44 89 ee 83 e6 40 31 ff e8 94 83 4b ff 44 89 e8 83 e0 40 75 07 e8 47 7f 4b ff eb 25 4d 8d 6e 30 4c 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ef e8 bc a6 a1 ff 49 83 7d 00 00 74 26 e8 [ 174.448477][ T5963] RSP: 0018:ffffc9000b847990 EFLAGS: 00010203 [ 174.454662][ T5963] RAX: 0000000000000008 RBX: dffffc0000000000 RCX: 0000000000000002 [ 174.462656][ T5963] RDX: ffff88811a7c3900 RSI: 0000000000000040 RDI: 0000000000000000 [ 174.470672][ T5963] RBP: ffffc9000b8479f0 R08: ffff88811a7c3900 R09: 0000000000000002 [ 174.474954][ T5964] rust_binder: Error while translating object. [ 174.479024][ T5963] R10: 00000000fffffffe R11: 0000000000000002 R12: ffff88812ff11000 [ 174.479051][ T5963] R13: 0000000000000047 R14: 0000000000000017 R15: ffff888119bfcd80 [ 174.479069][ T5963] FS: 00007fb23c47a6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 174.485540][ T5964] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 174.493341][ T5963] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 174.493370][ T5963] CR2: 00007fb23c479f98 CR3: 0000000116a32000 CR4: 00000000003526b0 [ 174.493392][ T5963] Call Trace: [ 174.493401][ T5963] [ 174.493412][ T5963] ? security_inode_create+0x74/0x140 [ 174.501704][ T5964] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:44 [ 174.510714][ T5963] ? __cfi_fuse_atomic_open+0x10/0x10 [ 174.527269][ T36] audit: type=1400 audit(1755866492.181:1025): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 174.535183][ T5963] path_openat+0x1158/0x34b0 [ 174.535233][ T5963] ? do_filp_open+0x3e0/0x3e0 [ 174.535264][ T5963] do_filp_open+0x1c6/0x3e0 [ 174.539163][ T36] audit: type=1400 audit(1755866492.181:1026): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.541731][ T5963] ? __cfi_do_filp_open+0x10/0x10 [ 174.541772][ T5963] ? alloc_fd+0x4e7/0x5a0 [ 174.541800][ T5963] do_sys_openat2+0x12c/0x1c0 [ 174.548018][ T36] audit: type=1400 audit(1755866492.181:1027): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.556542][ T5963] ? do_sys_open+0x100/0x100 [ 174.556581][ T5963] ? __kasan_check_write+0x18/0x20 [ 174.562415][ T36] audit: type=1400 audit(1755866492.181:1028): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.584262][ T5963] __x64_sys_creat+0x92/0xc0 [ 174.584306][ T5963] x64_sys_call+0x2710/0x2ee0 [ 174.589339][ T36] audit: type=1400 audit(1755866492.181:1029): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 174.593631][ T5963] do_syscall_64+0x58/0xf0 [ 174.593666][ T5963] ? clear_bhb_loop+0x50/0xa0 [ 174.593690][ T5963] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 174.598608][ T36] audit: type=1400 audit(1755866492.181:1030): avc: denied { append open } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 174.620363][ T5963] RIP: 0033:0x7fb23b58ebe9 [ 174.620399][ T5963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.620421][ T5963] RSP: 002b:00007fb23c47a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 174.620444][ T5963] RAX: ffffffffffffffda RBX: 00007fb23b7b6090 RCX: 00007fb23b58ebe9 [ 174.620464][ T5963] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 174.626171][ T36] audit: type=1400 audit(1755866492.181:1031): avc: denied { getattr } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 174.629924][ T5963] RBP: 00007fb23b611e19 R08: 0000000000000000 R09: 0000000000000000 [ 174.629950][ T5963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.629966][ T5963] R13: 00007fb23b7b6128 R14: 00007fb23b7b6090 R15: 00007fffe74d9198 [ 174.629991][ T5963] [ 174.855445][ T5963] Modules linked in: [ 174.860091][ T5963] ---[ end trace 0000000000000000 ]--- [ 174.866219][ T5963] RIP: 0010:fuse_atomic_open+0x1b6/0x440 [ 174.872651][ T5963] Code: 8b 6d bc 44 89 ee 83 e6 40 31 ff e8 94 83 4b ff 44 89 e8 83 e0 40 75 07 e8 47 7f 4b ff eb 25 4d 8d 6e 30 4c 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ef e8 bc a6 a1 ff 49 83 7d 00 00 74 26 e8 [ 174.893188][ T5963] RSP: 0018:ffffc9000b847990 EFLAGS: 00010203 [ 174.899470][ T5963] RAX: 0000000000000008 RBX: dffffc0000000000 RCX: 0000000000000002 [ 174.907681][ T5963] RDX: ffff88811a7c3900 RSI: 0000000000000040 RDI: 0000000000000000 [ 174.915731][ T5963] RBP: ffffc9000b8479f0 R08: ffff88811a7c3900 R09: 0000000000000002 [ 174.923849][ T5963] R10: 00000000fffffffe R11: 0000000000000002 R12: ffff88812ff11000 [ 174.931961][ T5963] R13: 0000000000000047 R14: 0000000000000017 R15: ffff888119bfcd80 [ 174.940178][ T5963] FS: 00007fb23c47a6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 174.949443][ T5963] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 174.956130][ T5963] CR2: 0000000000000000 CR3: 0000000116a32000 CR4: 00000000003526b0 [ 174.964263][ T5963] Kernel panic - not syncing: Fatal exception [ 174.970905][ T5963] Kernel Offset: disabled [ 174.975256][ T5963] Rebooting in 86400 seconds..