last executing test programs: 6m24.297862681s ago: executing program 32 (id=912): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYRES8=r1], 0x14}}, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x3, r4, 0x0, 0x0) request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m15.265107066s ago: executing program 33 (id=1010): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x305) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = dup2(r4, r3) getsockopt$bt_sco_SCO_CONNINFO(r5, 0x11, 0x2, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xe0, 0x0, &(0x7f00000004c0)=[@acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/238, 0xee, 0x0, 0x18}, @fda={0x66646185, 0x4, 0x1, 0x1e}, @fda={0x66646185, 0x4, 0x2, 0x22}}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x40}, @exit_looper, @exit_looper, @acquire_done={0x40106309, 0x2}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/227, 0xe3, 0x0, 0xd}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_binder}, &(0x7f0000000100)={0x0, 0x28, 0x40}}, 0x40}, @request_death={0x400c630e, 0x6}, @decrefs={0x40046307, 0x3}], 0x0, 0x0, 0x0}) 5m15.780089679s ago: executing program 34 (id=1803): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02"], 0x4, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f00000000c0)={0xf692, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) (async) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) close_range(r1, 0xffffffffffffffff, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f0000090583"], 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) write(r4, &(0x7f0000000040)="c478218588a775acd5026009ea6ce233dfc8c20ebb76efdb759bf21056be512cecb0da47b8520b7a98305f", 0x2b) (async) write(r4, &(0x7f0000000040)="c478218588a775acd5026009ea6ce233dfc8c20ebb76efdb759bf21056be512cecb0da47b8520b7a98305f", 0x2b) fcntl$setlease(r4, 0x400, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r6) sendmsg$IEEE802154_LLSEC_ADD_KEY(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r7, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000) getsockopt$MRT(r5, 0x0, 0xce, &(0x7f0000000080), &(0x7f0000000100)=0x4) (async) getsockopt$MRT(r5, 0x0, 0xce, &(0x7f0000000080), &(0x7f0000000100)=0x4) 4m51.871839683s ago: executing program 5 (id=2216): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x2000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x8) ioctl$TCSETS(r1, 0x5420, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9e4d2236078f0080000004ff98023dffffffff"}) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26001, 0x13, r0, 0xd3c59000) 4m51.866337743s ago: executing program 5 (id=2218): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) fcntl$getown(r0, 0x9) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="cc0000001b0001032dbd7000fbdbdf25ac1414aa000000000000000000000000e00000010000000000000000000000004e2300004e2300080200802084000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000001040020000000000500000000000000f80000000f0000005e0000000000000001000000000000002f060000000000000c00000000000000f8fffffffffffffffaffffffc06b6e00020003010000000002000000000000000a"], 0xcc}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x10) write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r3, 0xc008aec1, &(0x7f00000004c0)={0xa, 0x0, [{0x40000001, 0x4, 0x2, 0xd, 0x0, 0x910}, {0x80000008, 0x0, 0x6, 0x1000, 0x5, 0x800, 0x1}, {0x1, 0x37e, 0x2, 0x4, 0x7, 0x0, 0x2}, {0x80000008, 0x1, 0x2, 0x9392, 0x5, 0x9, 0x7}, {0x40000001, 0xfffffffc, 0x0, 0x4, 0x9, 0x2, 0x4}, {0x7, 0xeab, 0x9, 0x0, 0xb, 0x5, 0x4}, {0xa, 0x9, 0x1, 0x4, 0x1, 0x7, 0x3}, {0xc0000001, 0x0, 0x0, 0x200, 0xf, 0x2, 0x6}, {0x4, 0x2, 0x0, 0xf1d9, 0x2, 0x3, 0x6}, {0x40000000, 0xfffffff8, 0x3, 0xffff, 0x8001, 0xffff, 0x8}]}) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x48c0, 0x8) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000980)=""/4096) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r8]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r9 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigaction(0x1b, &(0x7f0000000040)={0xfffffffffffffffc, 0x4c000000, 0x0, {[0x8000000000005a]}}, 0x0, 0x8, &(0x7f00000001c0)) tkill(r9, 0x1b) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r10, 0x6, 0x7, 0x0, &(0x7f0000000040)) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x541c, &(0x7f0000000100)) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB]) 4m51.006615558s ago: executing program 5 (id=2224): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000180)='geneve1\x00') writev(r1, &(0x7f0000000200), 0x34) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000340)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000100080c1000020a000000000000", 0x58}], 0x1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom1\x00', 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0xfffff05b}) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) openat$ashmem(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x2}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = syz_clone(0x20040000, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setown(r5, 0x8, r6) sendmsg$key(0xffffffffffffffff, 0x0, 0x10) syz_usb_connect(0x0, 0x5d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d0062413"], 0x0) r7 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000400)) mmap$binder(&(0x7f000094d000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0xb) mmap(&(0x7f0000270000/0x4000)=nil, 0x4000, 0x2, 0x4000010, 0xffffffffffffffff, 0xcdc2000) connect$netlink(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x12, &(0x7f0000000240)=0xff, 0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="bc000004040801080000000000000000000000070600024088a200000900010073797a30000000000900010073797a31000000000900010073797a3100000000060002400008000054000480080002400000ffff08000240ffff9fee0800024000000009080001400000000b0800024000000004080002408000000108000240000000b80800014000000009080001400000006f0800014000000e7a0909000000797a31000000001400068008000640000000060800084000000005"], 0xbc}, 0x1, 0x0, 0x0, 0x4000010}, 0x40) 4m49.776265408s ago: executing program 5 (id=2229): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x2010004, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='.\x00') r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x5, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x38a, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000000)=0x5) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 4m49.776025078s ago: executing program 5 (id=2230): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x101, 0x2}) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x76]}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r2) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000002480)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x30000084}, 0x880) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)={0x54, r5, 0x11, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xfffffffb, 0xfffffffc}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x0, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2, 0x3}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x4000800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) 4m49.763132169s ago: executing program 5 (id=2231): syz_io_uring_setup(0x848d2, &(0x7f0000000080)={0x0, 0x5e99, 0x4000, 0x0, 0x19a}, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x12, 0x0, 0x0) r3 = socket(0xa, 0x801, 0x0) getsockopt(r3, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f00000000c0)=0x54) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r4}) keyctl$link(0x8, r5, r5) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m49.720763414s ago: executing program 35 (id=2231): syz_io_uring_setup(0x848d2, &(0x7f0000000080)={0x0, 0x5e99, 0x4000, 0x0, 0x19a}, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x12, 0x0, 0x0) r3 = socket(0xa, 0x801, 0x0) getsockopt(r3, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f00000000c0)=0x54) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r4}) keyctl$link(0x8, r5, r5) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m42.166001044s ago: executing program 7 (id=2339): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef00000000000000000000000000000000000000010000000000000044000500"/136], 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty, 0xfffffffc}, 0x1c) write(r1, &(0x7f0000000180)="b1f6a4e6086771339298ff93c614cda94476d7b3650dace6ffd148ee98b8cb08591ffc2467faa14e", 0x28) 4m42.092149472s ago: executing program 7 (id=2340): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x20, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x6, 0x80}}}}}]}}]}}, 0x0) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x267, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x101, 0xd0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xa, 0x2, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f0000000140)={0x0, 0x22, 0x4, {0x4, 0x21, 'zZ'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) rt_sigqueueinfo(0x0, 0x37, &(0x7f0000000000)={0x41f, 0x21, 0x1}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0022050000"], 0x0}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000200)={0x14, &(0x7f0000000180)={0x0, 0x21, 0x4a, {0x4a, 0x31, "fd4cf29cd2e397948de767f5f6590eafc70bd4f3f4a2e0370a108d846c49551027d250475d5489305825a8a8698c50084b918f9cf7cb6bb21a3e7cd74518451f3804a9bcea178658"}}, &(0x7f00000002c0)={0x0, 0x3, 0x57, @string={0x57, 0x3, "13fa528e61dcf5ebad078ea6224d5ec01b40052ba43132422712aaa387ef3950d785843ef2394986e30c16246dcdc8cdd9435e7474cc5dc2b8a93b6f58c8e25a920d160fd18f2a286cd2dbcdf18966a6bb5f3b6397"}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000380)={0x20, 0x15, 0xec, "480f29965f14a6fe6a9f652441e447a351f52b2a8902beb2fe70a13eddf4e66789ca51aba20323dcebd03798ccdd9320e56d0c10c2939d6299cdc06988be9744ec7a8f82e734fdd3fa261e63356dbf9b0cf9ff668f85ebaefddbc668279649cdc11400d6e3aa4d8b6b4721ff10b63ef09c9f9c9e34dadc87994c49ce6cbb34f18154e0da925aef1ad6c16623fa1c216805664f2374d40d4c2cd9b4f2937542c545b2747dd1077db70c96018981bbea9a10e4ad9471d764b6597c61e4bffa9e2e63bc9d64b8271fe05eced98c164fc856c155e6431f0346cc4718430df06aebe164d38eded33bf09f42905cfc"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0xbb}, &(0x7f0000000540)={0x20, 0x81, 0x3, "f303ef"}, &(0x7f0000000580)={0x20, 0x82, 0x1, "f9"}, &(0x7f0000000600)={0x20, 0x83, 0x3, "f53422"}, &(0x7f0000000640)={0x20, 0x84, 0x1, "ba"}, &(0x7f0000000680)={0x20, 0x85, 0x3, "5b3fea"}}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r3, &(0x7f0000005280)=[{{&(0x7f00000011c0)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000001640)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x4, [@local]}, @ssrr={0x89, 0x3, 0x4e}]}}}], 0x20}}], 0x1, 0x4008000) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x8, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYBLOB, @ANYRESDEC=r1], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x12, @string={0x12, 0x3, "ac658b07741f4dea81fc22a34f4b8918"}}, 0x0, 0x0}, &(0x7f00000005c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m39.117453723s ago: executing program 7 (id=2385): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) eventfd2(0xe5c, 0x80001) ioctl$KVM_IRQFD(r1, 0x4020ae76, 0x0) 4m39.020360993s ago: executing program 7 (id=2386): inotify_add_watch(0xffffffffffffffff, 0x0, 0x449) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x4, r0, &(0x7f0000000380), 0x10000) syz_open_procfs(r0, &(0x7f0000000000)='smaps_rollup\x00') lstat(&(0x7f0000000640)='./file0/file0\x00', &(0x7f0000000180)) 4m39.020157213s ago: executing program 7 (id=2387): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) listxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=""/199, 0xc7) 4m38.992719945s ago: executing program 7 (id=2388): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_XSAVE(r3, 0x5000aea5, 0x0) socket(0x80000000000000a, 0x2, 0x0) 4m38.938514931s ago: executing program 36 (id=2388): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_XSAVE(r3, 0x5000aea5, 0x0) socket(0x80000000000000a, 0x2, 0x0) 3m11.212131131s ago: executing program 8 (id=3693): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x604000, 0x0) pwritev2(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="429331029c1c619f978cbd3e175c4eb306a534536d5f676547a1b8c164b81d108872e8a330cda2e71fa3c1661f7c269baa57aacce43255d3e43c6fa01a453aa26cf6fb684e4769179e1a783bb0d44c5b9cfa21ad7fc451294bafdc920b28d5c4ca49ad12031f5cff645b52edbcb5426aeaceade759b93ac6389636c891959789e951b6f85b", 0x85}, {&(0x7f0000000100)="e636bfb0356cdab9296d034061ff4bb038b51a6afe51", 0x16}, {&(0x7f0000000140)="60ed6a3029f7733472f6110537201609a046ae1ef1f962b7c33718489d7e3918735695874645f4cbe02ac167ed3212883f5c0de94ae42a8c77648848928b0f2e6d591310e8c1f7cf17caa88c79a2e3f93627f1eb7e77e844532871c8d0187b235816e4a1d6410304253d39d88324840810b04e15841b5e5f357fabf6423a95c47302d3c995d66f59a48c8ef3ee1658b85ecf156e00579a6e", 0x98}], 0x3, 0x3, 0x7, 0x9) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000340)={0x1, 0x3, 0x1000, 0x47, &(0x7f0000000240)="bc5a5749c5b7992462e6654063cca2090f8c40d819221c2d1e13e74b2ea180ca3892deaece7e31be1f363ab8536ab20ad28d952be1e568730ad8b7097f3e7bd090ea1f69cfc815", 0x57, 0x0, &(0x7f00000002c0)="433fbc18a06472bc00af734d6ff9a647e70b6a83f8612c1e4264326add1af14a430f72c450d5a44b2aa91a9d4244bd593b307d90059a3ea82821964741f6902a628eb96d3f21cb4fc608cc857f7e42bd1798a90411989e"}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000003c0)={[0x72a, 0x5, 0x9, 0xffff, 0x1fd8000000000000, 0x4, 0x2, 0x4, 0xf491, 0x3ff, 0x2, 0x2d, 0x3, 0x63d, 0xff, 0x4], 0x2000, 0x3081}) fallocate(r0, 0x14, 0x3f23, 0x6) r1 = openat$cgroup_int(r0, &(0x7f0000000480)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f00000004c0)) r2 = syz_open_pts(r0, 0x20000) sendfile(r2, r1, 0x0, 0xc) r3 = open(&(0x7f0000000500)='./file0\x00', 0x400000, 0x10) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000540)=0x6) quotactl_fd$Q_SETQUOTA(r2, 0x3cd0212f00b08ff9, 0xffffffffffffffff, &(0x7f0000000580)={0x7ff, 0x4800000000000000, 0x4, 0x10, 0x4, 0x8, 0x8000000000000000, 0xd, 0x1}) close_range(r1, r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0xe) lsetxattr$trusted_overlay_nlink(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640), &(0x7f0000000680)={'U-', 0x5}, 0x16, 0xc695b9b029df4b0c) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000006c0), 0xccc0e34af00b1c8f, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000700)=0x76) inotify_add_watch(r3, &(0x7f0000000740)='./file0\x00', 0x81000004) ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f0000000780)) getresuid(&(0x7f0000000940), &(0x7f0000000980)=0x0, &(0x7f00000009c0)) mount$incfs(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x2000, &(0x7f0000000a00)={[{@read_timeout_ms={'read_timeout_ms', 0x3d, 0x100000000}}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@smackfshat={'smackfshat', 0x3d, '&-@'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'blkio.throttle.write_bps_device\x00'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@subj_type={'subj_type', 0x3d, ')+$'}}, {@fowner_lt={'fowner<', r6}}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x61, 0x30, 0x64, 0x39, 0x35, 0x39, 0x35], 0x2d, [0x34, 0x37, 0x32, 0x32], 0x2d, [0x65, 0x33, 0x34, 0x33], 0x2d, [0x32, 0x38, 0x64, 0x37], 0x2d, [0x0, 0x38, 0x66, 0x64, 0x34, 0x65, 0x66, 0x56]}}}, {@obj_role={'obj_role', 0x3d, 'blkio.throttle.write_bps_device\x00'}}]}) sendmmsg$inet6(r0, &(0x7f0000000dc0)=[{{&(0x7f0000000b40)={0xa, 0x4e22, 0x80000000, @empty, 0x6}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000b80)="4d986400bdb67bb696667198d222fb82", 0x10}, {&(0x7f0000000bc0)="6193d8a24560e0d2d523cd39ea2cc10f98412f332b7ee4b2b0336d1dc08ec416d150ef02aab8d532eb9e75dcd9c9cf0c049d4552c6810a2eb51bcbc42e3e26d74986085d81805ddc469ab189f97b50dffe853d76046a41a142d8a59a20bcbdcd4b014747f1d3123e03a851fefc8c17cb57d89fbb455ca4b2b5e9701d1ad462b6a443d6fe453f30e696a58164769a574faab1cb0f353fbcae23ecb11ccd398678c04500f5b2be253b5c4389a82cbbd0ab3bc9fcfcf8401fef28d13c2f518a0c25a48d94350fb05c5da0bab09ce6874f9daec25bbf6a66674e5158ad2bd879ff9e437081173fdbfbced482cf6c37d16441a7c81b85f6fde69f07", 0xf9}, {&(0x7f0000000cc0)="7b4482db1c53dd", 0x7}], 0x3, &(0x7f0000000d40)=[@dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @hoplimit={{0x14, 0x29, 0x34, 0x8}}, @flowinfo={{0x14, 0x29, 0xb, 0x9d4}}], 0x48}}], 0x1, 0x8050) write$cgroup_subtree(r3, &(0x7f0000000e00)={[{0x2d, 'net_prio'}, {0x2d, 'rdma'}, {0x2b, 'freezer'}, {0x3e, 'memory'}, {0x2d, 'rdma'}, {0x2b, 'net_prio'}, {0x2d, 'rdma'}, {0x2d, 'io'}]}, 0x3b) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000e40)={{r3}, 0x8, 0x9b21, 0x4}) r7 = getgid() fchownat(r0, &(0x7f0000000e80)='./file0/file0\x00', r6, r7, 0x1000) signalfd4(r4, &(0x7f0000000ec0)={[0x5]}, 0x8, 0x80800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000f40)={0x1, &(0x7f0000000f00)=[{0x1, 0x7, 0x5, 0x9}]}) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000f80)={0x7, 0x5, 0x262}) 3m11.211356721s ago: executing program 8 (id=3694): syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r0 = syz_usb_connect$uac1(0x0, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca00030100700009040000000101"], 0x0) syz_usb_control_io(r0, &(0x7f0000001bc0)={0x2c, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000043c0)={0x2020}, 0x2020) 3m8.206347216s ago: executing program 3 (id=3754): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendto$inet(r1, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) bind$unix(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x2, 0x0, 0x4, 0x3, 0x2, 0x0, 0x100, 0x5}, &(0x7f0000000040)={0x1d, 0xfffffffffffffffe, 0x40, 0x7eff, 0x0, 0xfffffffffffffffe, 0x71e7, 0x8}, 0x0, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x7}, 0x14) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r3, &(0x7f00000062c0)={0x2020, 0x0, 0x0}, 0x2020) setresgid(0xffffffffffffffff, 0xee01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x800000, &(0x7f0000000380)=ANY=[@ANYBLOB]) r5 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r5, &(0x7f0000000980)={0x2020}, 0x2074) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x29, 0x40000, 0x20, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x1}}, 0x50) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000b40), 0xfe1c, 0x0) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000785700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000190000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010800", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0x81, 0xfffff800, {{0x10, 0x4, 0x0, 0x2e, 0x40, 0x68, 0x0, 0x7, 0x29, 0x0, @local, @rand_addr=0x64010102, {[@timestamp={0x44, 0xc, 0xd, 0x0, 0x1, [0x10, 0x43]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x1b, 0x93, [@rand_addr=0x64010102, @multicast1, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x2e}, @multicast1]}]}}}}}) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000003c0)={r7, @rand_addr=0x64010100, @local}, 0xc) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0xa8, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff67, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x8}, @fda={0x66646185, 0x4, 0x0, 0xfffffffffffffffd}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@handle={0x73682a85, 0x0, 0x3}, @fd, @flat=@weak_handle={0x77682a85, 0xa}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @release={0x40046306, 0x3}, @request_death], 0x0, 0x0, 0x0}) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00') 3m8.199243227s ago: executing program 8 (id=3755): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1, 0x2) ioctl$USBDEVFS_CONNECTINFO(r1, 0x40085511, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x0, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000240)="0979e127b8b3891be8dd397c67fc82251cecd27196a59beb85cb7450266767e735d2f6932155ed86f508fe87dbb49fc69db4458cbb2113dbf9f32c7a53eed2206e041bb9eee97a5798b41527404ddeff"}) 3m8.128211903s ago: executing program 8 (id=3756): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x10, 0x406102) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000040)=0x2) (async) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0xfffffeff, @empty, 0x4000000}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x80009, @empty, 0x7}, 0x1c) (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x8000000004) (rerun: 64) writev(r3, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7102d000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 3m8.127861724s ago: executing program 8 (id=3757): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e1c, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xc8}, 0x1c) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') getpeername$inet(r4, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000100)=0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000940)={0x4, 0x0, &(0x7f0000000040)=[@clear_death={0x400c630f, 0x1}], 0xfffffffffffffff5, 0x0, 0x0}) 3m8.125223674s ago: executing program 8 (id=3758): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0107fcfffffffcdbdf250f"], 0x14}}, 0x4c040) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="180000001a0001002abd70000000000081ff80"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$BINDER_CTL_ADD(r3, 0xc1086201, &(0x7f0000000140)={'binder0\x00'}) 3m7.360292119s ago: executing program 3 (id=3766): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x2000008, 0x12, r0, 0xd2bd4000) (async) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcca) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="0f30c402fd3eecc7442400d8b104cac744240209000000c7442406000002000f011c24660f38800a66aab80c010100d0662e3646d87213460f09b98c0900000f32b801001c000f01c12e644c0fc72f", 0x4f}], 0x1, 0x6d, 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 64) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x7, 0x8, 0x0, 0x9, 0x3, 0x0, 0x8, 0x6}, {0xffff1000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x8080000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x0, 0xfc}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4}, {0x80a0000, 0xeeee8000, 0xe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x1, 0x2, 0x0, 0x0, 0xff, 0x1, 0xa1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf9ffdb, 0x0, 0x0, 0x110, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1, 0x1]}) (async, rerun: 64) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) (async) setuid(0xee01) (async) execve(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000ec0)='\x00\x00\xff\x02\x01\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') 3m7.347317631s ago: executing program 3 (id=3767): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, 0x0, &(0x7f0000000240)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x2000008, 0x12, r1, 0xd2bd4000) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000ec0)='\x00\x00\xff\x02\x01\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') 3m7.292339855s ago: executing program 3 (id=3768): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) r3 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) (async) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x8}}], [], 0x6b}}) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) (async) r5 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r5, r4, 0x0, 0xffffffff) (async) sendfile(r5, r4, 0x0, 0xffffffff) 3m7.260701679s ago: executing program 3 (id=3769): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xfffffffd) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x3) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$inet6(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000140)) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f00000003c0), 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540), 0x0, 0x0) close(r4) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, 0xffffffffffffffff, 0xffffd000) socket(0x25, 0x1, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000140), 0x1e) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r0, 0x4068aea3, &(0x7f0000000180)={0xa8, 0x0, 0x3}) r7 = syz_open_procfs(0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000140)=[@decrefs={0x40046307, 0x2}, @clear_death={0x400c630f, 0x2}, @request_death, @dead_binder_done], 0x0, 0x0, 0x0}) ioctl$KVM_REINJECT_CONTROL(r7, 0xae71, &(0x7f00000000c0)={0x9}) 3m7.213037404s ago: executing program 3 (id=3771): accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x2, 0x10000, 0xe, 0xf0, 0x44, 0xfd, 0xd4, 0xd4, 0x67, 0x4, 0x7, 0x7}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0xa3, 0x6, 0x8, 0xc, 0x2, 0x3, 0xca}, {0x3000, 0xe6e50002, 0x3, 0x2, 0x2, 0x5, 0x8, 0x5, 0xc, 0xb, 0xff, 0x5}, {0x80a0000, 0x6000, 0xb, 0x7, 0x1, 0x44, 0x2, 0x6, 0x6, 0x3, 0x0, 0x1}, {0x4, 0x0, 0x9, 0x1, 0x3, 0x9, 0x9, 0x5, 0x5, 0x44, 0x10, 0xc}, {0x2, 0xf000, 0x0, 0x7, 0x3, 0xe1, 0x1, 0xff, 0x4, 0x80, 0x1, 0xa}, {0xeeee8000, 0x1000, 0x6, 0x5, 0xf, 0x38, 0xfd, 0xb, 0x0, 0x80, 0x4, 0x58}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x43, 0x2, 0x7}, {0xeeee8000, 0x5}, {0x2, 0x9}, 0x2, 0x0, 0xdddf1000, 0x436d, 0x5, 0x0, 0xe6e70c00, [0xffffffffffffff49, 0x4, 0x9000000000000, 0x3]}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0x12, 0x4, 0x0, 0x0) 2m52.210587176s ago: executing program 37 (id=3758): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0107fcfffffffcdbdf250f"], 0x14}}, 0x4c040) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="180000001a0001002abd70000000000081ff80"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$BINDER_CTL_ADD(r3, 0xc1086201, &(0x7f0000000140)={'binder0\x00'}) 2m52.186489859s ago: executing program 38 (id=3771): accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x2, 0x10000, 0xe, 0xf0, 0x44, 0xfd, 0xd4, 0xd4, 0x67, 0x4, 0x7, 0x7}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0xa3, 0x6, 0x8, 0xc, 0x2, 0x3, 0xca}, {0x3000, 0xe6e50002, 0x3, 0x2, 0x2, 0x5, 0x8, 0x5, 0xc, 0xb, 0xff, 0x5}, {0x80a0000, 0x6000, 0xb, 0x7, 0x1, 0x44, 0x2, 0x6, 0x6, 0x3, 0x0, 0x1}, {0x4, 0x0, 0x9, 0x1, 0x3, 0x9, 0x9, 0x5, 0x5, 0x44, 0x10, 0xc}, {0x2, 0xf000, 0x0, 0x7, 0x3, 0xe1, 0x1, 0xff, 0x4, 0x80, 0x1, 0xa}, {0xeeee8000, 0x1000, 0x6, 0x5, 0xf, 0x38, 0xfd, 0xb, 0x0, 0x80, 0x4, 0x58}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x43, 0x2, 0x7}, {0xeeee8000, 0x5}, {0x2, 0x9}, 0x2, 0x0, 0xdddf1000, 0x436d, 0x5, 0x0, 0xe6e70c00, [0xffffffffffffff49, 0x4, 0x9000000000000, 0x3]}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0x12, 0x4, 0x0, 0x0) 1m2.407636574s ago: executing program 9 (id=5689): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000100)=0x40280, 0x25) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000001a80), 0x7, 0x9001) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x1000000012abec) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000080)=0xffffffff) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=']) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}, @free_buffer], 0x0, 0x0, 0x0}) 1m2.372850297s ago: executing program 9 (id=5692): mount$binderfs(0x0, &(0x7f0000000300)='./binderfs\x00', 0x0, 0x84000, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000000000)=0x2, 0x4) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x421001, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r2 = socket$inet6(0xa, 0x2, 0x8) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, 0x0) r3 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000240)={'ipvlan0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}) capset(&(0x7f0000000100)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000080)={0x6, 0x10ffff, 0xd53, 0x0, 0x0, 0x2000000}) r4 = geteuid() r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x8, &(0x7f0000000000)=0x5, 0x4) r6 = geteuid() mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x20, &(0x7f0000000180)={[{@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x147}}, {@uid={'uid', 0x3d, r4}}, {@mode={'mode', 0x3d, 0x7}}, {@uid={'uid', 0x3d, r6}}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@subj_role={'subj_role', 0x3d, 'ipvlan0\x00'}}, {@permit_directio}]}) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) 1m2.372263588s ago: executing program 9 (id=5693): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0xcfd, 0x1) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000100)={&(0x7f0000000040), &(0x7f0000000080)=""/127, 0x7f}) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r1, 0x1370}], 0x1, &(0x7f0000000200)={r2, r3+10000000}, &(0x7f0000000240)={[0x7]}, 0x8) r4 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) r5 = accept$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000002c0)=0x1c) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e20, 0x2, @mcast2, 0x8000}, 0x1c) r6 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000340)=@id, &(0x7f0000000380)=0x10, 0x80000) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r6, 0x8002f515, &(0x7f00000003c0)) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffff9c, 0x40106614, &(0x7f0000000400)) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000480), 0x4) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r7) sendmsg$NL80211_CMD_SET_WIPHY(r7, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r8, 0x0, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) r9 = eventfd(0x3) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x12, r9, 0xaa910000) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r10, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x28000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r11, 0x203, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x4008045) writev(r9, &(0x7f0000000940)=[{&(0x7f0000000780)="e955a3b6e8b738173ff8861faa03b5bf84856806d583edf6eb6af83afb29d2fb451cc1ab7cd3b47fa44644910bfe5035014fd65d1f934cc9e05c14756420449787275983eed4f51b113f40100f3e23e0f8b5b4c0ea1ee23da5a125bdeacb2a78101c5eaf5a5da3f5", 0x68}, {&(0x7f0000000800)="9eb8a083cb3e9cc0c41749da08bbc46fbc8dc0f6ed5d9c7e457165be31491f05652c2a96dffa59f7d9138b347da36cfb59bb292f131ee825bdbf7a5faa2c7dd6125fd121b8f2123e6d102ef560ed0126829d7efd3fff0165f33aeda5dcc41828b4f08d1ad99d23cdb4ff5e36f6f4ab017772cfebdc116e3c4b027dff0c3c068985db47c9b270148a119a987386eb48315a633caa0e047717cef6e5dd1f19f6aeb6bfb91318be5a", 0xa7}, {&(0x7f00000008c0)="156d45dfa4f495eaf0263c2902259a5047671902b7f37fa79d368dba0c02d531ddc3f0800784c54d93d061dec8336991dce0a6740d3556f91303f897", 0x3c}, {&(0x7f0000000900)="26448641cd9d60f381903ae887848c374223b1854c24c2e32a01473e4402134137828811f5", 0x25}], 0x4) r13 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$negate(0xd, 0x0, 0x3, r13) read$FUSE(r7, &(0x7f0000000a00)={0x2020}, 0x2020) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002a80), r10) sendmsg$NLBL_CIPSOV4_C_LIST(r14, &(0x7f0000002e80)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002e40)={&(0x7f0000002ac0)={0x348, r15, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x8c, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x15cc843c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x40cf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xed5b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xefbf}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdc6d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c13b228}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9b9a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5bde}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa799}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x189ac9b4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb206}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb80a}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x777d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x91fe}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xec17}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x70, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2ba0dc4f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79824483}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x97}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a87d74e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d72523c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43b00d0d}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7744973d}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x71e43de6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12800522}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xbc, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x71111d8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x36}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2639b0f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45cef5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x68}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x89}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x98c154c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xba}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ffc1e97}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa14c839}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x563e77b7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2bb02a40}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a4ed09d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x411f3d50}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5871a5eb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x63}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x163527a4}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x130, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x92}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc9}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76b04f7f}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xac9f975}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x25}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4674a95d}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x16fd1661}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e06e0c5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28b4a945}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b81ed92}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x53c50432}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b600b1f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xce}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70493aad}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4deeaf31}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9e97836}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8c}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34280c82}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc00c782}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7cdca411}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44219ca7}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x63}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x65}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ad2b937}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}]}]}]}, 0x348}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r14, &(0x7f0000002fc0)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002f80)={&(0x7f0000002f00)={0x70, r11, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xe6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x4800}, 0x4) 1m1.543530719s ago: executing program 9 (id=5712): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x20008855}, 0x4008000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) fsopen(&(0x7f0000000080)='qnx4\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r6 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f0000007340)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x80008, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c, 0x0, 0x0, &(0x7f00000044c0)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000aa", @ANYRES32=r5, @ANYBLOB="d1ffffff"], 0x28}}, {{0x0, 0x0, 0x0}}], 0x2, 0x800) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ptrace(0x10, r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x7) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000002cc0)={0x1, [{0x0, 0x4d88, 0x6, &(0x7f0000001000)="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"}, {0x1, 0x0, 0x41ff7484, 0x0}, {0x3, 0x0, 0x100d5b6, 0x0}, {0x2, 0x52, 0x101, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x3, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x7fffffff, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x4000b, 0x0}]}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socket$inet6(0xa, 0x80002, 0x0) 1m1.442365279s ago: executing program 9 (id=5713): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) close(r1) ioctl$TIOCCONS(r1, 0x541d) prlimit64(0x0, 0xd, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) tkill(0x0, 0x13) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x44f, 0xb65d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x6, [{{0x9, 0x4, 0x0, 0x10, 0x5, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x36, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0xfd, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x6, {[@local=@item_012={0x0, 0x2, 0x3}, @local=@item_4={0x3, 0x2, 0x8, "f507b2b0"}]}}, 0x0}, 0x0) write$uinput_user_dev(r1, &(0x7f00000001c0)={'syz0\x00', {0x6, 0x800, 0x1, 0x800}, 0xb, [0xffffffff, 0x3, 0x9, 0x3629, 0xffffffff, 0x2, 0x6, 0x1, 0x2, 0x6, 0x81, 0xd8a, 0x7f91da0b, 0x1, 0x292, 0x2, 0x2, 0x6, 0xb, 0x3, 0x8, 0x3, 0x6, 0x200, 0xe717, 0x5417, 0xfffffff8, 0x1ff, 0xffff, 0x2, 0x3, 0x2e, 0x3, 0x7, 0x6, 0x9, 0x8, 0x1a, 0x7ea4, 0x0, 0x6, 0x7, 0xb4ea, 0xa8, 0x9, 0x0, 0x4, 0x8, 0x26, 0x2, 0x702a, 0x5, 0x80000000, 0x40, 0x9, 0x4, 0x3, 0xb, 0x8, 0x7f, 0x10001, 0x7, 0x9, 0xb], [0x25d, 0xfffffffd, 0xa, 0x6a824308, 0x4, 0x8, 0x7, 0xfe7, 0xb, 0x8a4, 0x2000000, 0x0, 0xff, 0x6, 0xfd43, 0xa1d, 0x3, 0x5, 0x8, 0xc, 0xd15b, 0x51, 0x3, 0xc2000, 0x5, 0x200, 0x642, 0x101, 0x8, 0x3ff, 0x2b, 0x0, 0x40, 0x80, 0x5cf, 0x7ff, 0x5, 0x5, 0xdd9a, 0xc2c1, 0x7ff, 0xffffffff, 0xdc6, 0x2, 0x5, 0x0, 0x4, 0x6, 0x1d, 0xcf, 0xfffff000, 0x9, 0x2, 0x6, 0x10, 0x80000001, 0xb, 0x3, 0xbca6, 0x0, 0x4, 0x3, 0x80000000, 0x7], [0x1, 0xe, 0x0, 0x6, 0x3, 0x8, 0x5, 0x10, 0xf, 0x10000, 0x7, 0x1, 0x6429bae4, 0x80000000, 0x4, 0x1, 0xfffffff0, 0x8, 0x8, 0x3, 0x2, 0xffffffff, 0x1, 0x8, 0x5, 0x6, 0x0, 0x3ff, 0xa, 0x6, 0x1, 0x0, 0x3, 0x9, 0xed1, 0x401, 0x8, 0x6, 0x1, 0x9, 0xf, 0x4, 0x80000000, 0x8, 0x3, 0x80, 0x8001, 0x8, 0xd, 0xfffffff2, 0x3, 0x0, 0x0, 0xe7, 0x1, 0x3, 0x75, 0x10001, 0xfa, 0x6, 0xfff, 0xa, 0xff, 0x5], [0x6, 0x4, 0x7ff, 0x9, 0x8, 0x80, 0x7f, 0x4, 0x40, 0xa, 0x2, 0xd1, 0x548d, 0x6, 0x7, 0x7, 0x3ff, 0x7ff, 0x5, 0x6, 0xc, 0xff, 0xfdd, 0x9, 0x8000, 0xffffffe6, 0x9, 0x4f, 0x9, 0x1, 0x30, 0xd, 0xff, 0xe000000, 0x9, 0x80000000, 0x100, 0x7f, 0x2, 0x8, 0x427bbd0c, 0x0, 0x5, 0xfffffffe, 0x0, 0xced, 0x2, 0x5, 0x2, 0x0, 0x5, 0x7, 0x9, 0x7, 0x0, 0xfffffffa, 0x9, 0x8001, 0x1, 0x92b, 0x38a, 0xe117, 0xffffff47]}, 0x45c) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup2(r3, r3) faccessat2(r4, &(0x7f0000000880)='\x00', 0x1, 0x1100) r5 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') execveat$binfmt(r4, r5, &(0x7f0000000680)={[&(0x7f0000000040)='/dev/ttynull\x00', &(0x7f0000000080)='./binderfs/binder1\x00', &(0x7f0000000100)='./binderfs/binder1\x00', &(0x7f0000000140)='\x00', &(0x7f0000000640)='&\'\x00']}, &(0x7f0000000840)={[&(0x7f00000006c0)='$/\\}&]+\'\x00', &(0x7f0000000700)='$(\x00', &(0x7f0000000740)=']}:&,$-\'&\\-^\'%\x14&$$,]\x00', &(0x7f0000000780)='/dev/ttynull\x00', &(0x7f00000007c0)=':\\^\x00', &(0x7f0000000800)=':\x00']}, 0x4c67d73284ee12d6) 1m1.117632801s ago: executing program 9 (id=5717): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044010}, 0x1000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[], 0x108}, 0x1, 0x7}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xeffdffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x9a], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m1.060361307s ago: executing program 39 (id=5717): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044010}, 0x1000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[], 0x108}, 0x1, 0x7}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xeffdffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x9a], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17.380973594s ago: executing program 6 (id=6413): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x10002, 0x0) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f00000001c0)={0x40}) (async) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x5) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r2, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xfffffffffffffffd, {0x4, 0x3, 0xfffffffffffffffa, 0x8, 0x2, 0x80, {0x5, 0x80000000000, 0x1, 0x8, 0x16f, 0xdbf, 0x0, 0x0, 0x0, 0x8000, 0x2, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BLKCRYPTOGENERATEKEY(r0, 0xc030128a, &(0x7f0000000280)={&(0x7f0000000200)=""/114, 0x72}) (async) write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, r3, {0x7, 0x27, 0x4000, 0x801001a, 0x66f, 0xfffe, 0x4, 0xa075, 0x0, 0x0, 0x10, 0x2}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)={0x90, 0x0, 0xffffffffffffffff, {0x4, 0x3, 0x0, 0x7e30, 0xf, 0x0, {0x0, 0x1fffc, 0x0, 0x1, 0x3, 0x1, 0x2, 0x2, 0x0, 0xa000, 0x101, 0x0, 0x0, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00') (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) rt_sigaction(0x8, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) (async) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) (async) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r7 = getpid() syz_pidfd_open(r7, 0x0) syz_open_procfs(r7, &(0x7f0000000080)='net/raw6\x00') (async) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) sendmsg$netlink(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002200"], 0x1c}], 0x1}, 0x0) (async) write$uinput_user_dev(r1, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0xb}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x43, 0x0, 0xfffffffd, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x83, 0x2, 0x0, 0xffffffff, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xd, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffa, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0xe], [0x7, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x2, 0xe, 0x1, 0x80000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x791a, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x7, 0x4], [0xfffffffc, 0x0, 0x0, 0x8000000, 0x1000000, 0x0, 0x0, 0x0, 0xc045, 0x0, 0x0, 0x4, 0x1000, 0x0, 0x7f, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffff9, 0x4]}, 0x45c) 17.379138715s ago: executing program 6 (id=6414): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRES16=r0], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) mmap(&(0x7f000063f000/0x4000)=nil, 0x4000, 0xe, 0x12, r2, 0x8fe69000) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000440)=0x3) ioctl$PPPIOCSDEBUG(r3, 0x40047440, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000331000/0x400000)=nil) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BLKRRPART(r1, 0x125f, 0x0) 17.378982125s ago: executing program 6 (id=6415): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r0, 0x66053000) socket$netlink(0x10, 0x3, 0x7) 17.377283895s ago: executing program 6 (id=6416): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000004f00), 0x2001, 0x0) write$cgroup_int(r1, &(0x7f0000000380)=0x5, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) r3 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_create(r3, &(0x7f0000000040)=@access={'system_u:object_r:ld_so_cache_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0xfffffffffffffffd}, 0x48) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1, 0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xf9, 0x2, 0x4}, @fda={0x66646185, 0x7, 0x0, 0x12}, @fda={0x66646185, 0x4, 0x0, 0x23}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 17.356571977s ago: executing program 6 (id=6417): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x8001, @none, 0x4, 0x1}, 0xe) r1 = fsopen(&(0x7f0000000280)='fuse\x00', 0x0) fchown(r1, 0xffffffffffffffff, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1}) 17.270412735s ago: executing program 6 (id=6418): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000300)={0x20, 0x27, 0x6, "e2e040f3a886"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f00000003c0)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x2b08}}, 0x4000806) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000340)=@ccm_128={{0x304}, "49c2ace48cb54d80", "e0e6d4a271e30000596600", '\x00', "c962b0c0b5d958c9"}, 0x28) recvmmsg(r2, &(0x7f0000001040)=[{{0x0, 0x5e00, 0x0}, 0x2002}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/94, 0x5e}], 0x1}, 0x4}], 0x2, 0x40000002, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') exit(0x3) read$FUSE(r4, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001e00010026bd7000fedbdf25e0000002000000000000000000000000000004d30a003300ffffffff000000000000000000000000040000000535000044be5725151df569c30b637079592fd1d2b474f95d06c1f784a05efcafa7283a05bed6dffa24f543c5f5bee4d2e750fb6d"], 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x90) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000006c0)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0xfe9, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 17.213160841s ago: executing program 40 (id=6418): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000300)={0x20, 0x27, 0x6, "e2e040f3a886"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f00000003c0)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x2b08}}, 0x4000806) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000340)=@ccm_128={{0x304}, "49c2ace48cb54d80", "e0e6d4a271e30000596600", '\x00', "c962b0c0b5d958c9"}, 0x28) recvmmsg(r2, &(0x7f0000001040)=[{{0x0, 0x5e00, 0x0}, 0x2002}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/94, 0x5e}], 0x1}, 0x4}], 0x2, 0x40000002, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') exit(0x3) read$FUSE(r4, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001e00010026bd7000fedbdf25e0000002000000000000000000000000000004d30a003300ffffffff000000000000000000000000040000000535000044be5725151df569c30b637079592fd1d2b474f95d06c1f784a05efcafa7283a05bed6dffa24f543c5f5bee4d2e750fb6d"], 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x90) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000006c0)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0xfe9, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 3.640426833s ago: executing program 0 (id=6622): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000000)=0xa, 0x4) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) 3.613489776s ago: executing program 0 (id=6623): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/71, 0x0, 0x2000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000f40)) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000001c0)=&(0x7f0000000180)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) 3.541224803s ago: executing program 0 (id=6624): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfc\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xa4\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01L\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x06\xb3\xf0wVq\xe9d\xac\xe9\xaa\x9dR\x00\x9b\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2G\x1b+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2v\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x1e\x11X\f\x0f\xf0\xe2\xb5\xf8', 0xb) ftruncate(r1, 0xffff) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x4, 0x2a6, 0x8}}, 0x30) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 2.95555441s ago: executing program 4 (id=6626): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) (async) socket(0x2b, 0x3, 0xfff) readv(r0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x2) readahead(r0, 0x2, 0x3c0) 2.913563154s ago: executing program 4 (id=6627): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) fcntl$addseals(r0, 0x409, 0x6) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x802, 0x0) ioctl$BINDER_FREEZE(r1, 0xc0046209, &(0x7f0000000140)) 2.851033981s ago: executing program 4 (id=6630): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1e, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) listen(r0, 0xb5d6) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGICOUNT(r3, 0x541e, 0xff4f370c567f0000) ioctl$KVM_CREATE_VCPU(r2, 0x40047705, 0x2) 2.684307417s ago: executing program 4 (id=6633): setreuid(0x0, 0xee00) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) capget(&(0x7f0000000080)={0x20071026, r2}, &(0x7f0000000100)={0x4, 0x6, 0x8, 0x3, 0x5, 0xffff808a}) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2204c96, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r3], 0x20}}, 0x0) lseek(r3, 0xfffd, 0x0) setresgid(r1, r1, r1) 2.600398045s ago: executing program 4 (id=6636): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/233, 0xe9, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x24}, @fd}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 2.563627769s ago: executing program 4 (id=6638): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect(0x2, 0x36, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) r4 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FICLONERANGE(r4, 0x4020940d, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4}}}}}]}}]}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f0000000c00)=0x3fd, 0x4) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x81, 0x2, "15aa"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 1.172176815s ago: executing program 1 (id=6656): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)=ANY=[@ANYBLOB="978f3d", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_fuse_handle_req(r1, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871999e0dde7, 0xdcf, 0x4005, 0xb, 0x802, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0xb, r2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) clock_gettime(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f0000000080)={{r4, r5+10000000}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f0000005e40)="1700000002000100e636fdec5ee17688a2003208020300ecff3f0000000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x5dd93000) syz_fuse_handle_req(r1, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1, {0xc, 0x0, 0x0, {0x5, 0x0, 0x5, 0x80000001, 0x0, 0x1, 0x9e9, 0xfffffffe, 0xb877, 0x8000, 0x7893b06e, 0xffffffffffffffff, 0xee01, 0x3d, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x300) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000000), 0xf6, 0x400) r9 = syz_open_dev$loop(&(0x7f0000000040), 0x3, 0x140000) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000540)={r9, 0x7fff, {0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x4, 0x4, 0x10, "ef3c95abda89281fd63e75941eed4246f37007212e7467f0ea9c6806710129fb20aea8dbc2653ed6c857aa036bf5f507763adf6def3b510a31cec7bf5cd7dc44", "7c2db3d8b654399ccb3b8f5a8de4b45cdef09a098fd808b16ac7908515da229ef52e7ede7be809ba8f3e24e524ad3675db2fa68e41f7b83bdcfb5f10d69c9cf1", "7e3e79110a6f17c9b9be0f7bc1186e0784860b8cf82eee42fd8ce8471a5817c7", [0x8, 0xdf2]}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0xffffffffffffff8b, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x2, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x138}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x40}], 0x0, 0x0, 0x0}) 1.096885813s ago: executing program 1 (id=6657): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r1, 0x5) accept4(r1, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000240), 0x4) sendto$inet6(r2, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000140)={r4, 0xe, {0x2a00, 0x80010000, 0x0, 0x5, 0x6, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab75fc179fd1f8a0e91ddaaca7bd6447a4bde00d9683dda1af1ea09de2b7fb4af956000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5523406c7f0000000000000000000000000000000000000900", [0x4, 0x40000000000000]}}) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x301700, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0x400001000001fe) ioctl$ASHMEM_SET_PROT_MASK(r5, 0x40087705, 0x0) mmap(&(0x7f000001a000/0x2000)=nil, 0x2000, 0x1000003, 0x12, r5, 0xca639000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) close_range(r6, 0xffffffffffffffff, 0x4) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_async', 0x1, 0x0) write$cgroup_pid(r7, &(0x7f00000004c0)=0xffffffffffffffff, 0x12) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x103, 0x3}) r9 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}, @free_buffer={0x40086303, r9}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000280)=[@enter_looper, @free_buffer={0x40086303, r9}, @exit_looper], 0x52, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df52fc"}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) 526.076499ms ago: executing program 2 (id=6660): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x40, 0x14, 0x1, 0x70bd2d, 0x0, {0xa}, [@typed={0x4}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x14, 0x2, 0x0, 0x1, [@generic="bf74a7dffdd8f8331b9dd3f2f9834b7f"]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) listen(r1, 0x0) connect$unix(r1, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f00000001c0)={0x1d, r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) capset(0x0, &(0x7f0000000500)={0x9, 0x0, 0x0, 0x4000000}) syz_fuse_handle_req(r5, &(0x7f0000004280)="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", 0x2000, &(0x7f0000001180)={&(0x7f00000000c0)={0x50, 0x0, 0x4, {0x7, 0x2b, 0x0, 0x78040108, 0x80, 0x9, 0x9, 0x8, 0x0, 0x0, 0x100, 0x5}}, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x18, 0x0, 0x391, {0x10001}}, &(0x7f0000000300)={0x28, 0x0, 0x8e6, {{0xa, 0x2, 0x2}}}, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x0, 0x14}}, &(0x7f0000000480)={0x78, 0x0, 0x151, {0xb, 0x9, 0x0, {0x6, 0x0, 0x7, 0x1, 0x7, 0x0, 0x5, 0x9, 0x229, 0xa000, 0x8200, 0x0, 0xffffffffffffffff, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0) 505.703971ms ago: executing program 0 (id=6661): r0 = socket$can_bcm(0x1d, 0x2, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r1, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r1, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1}, 0x200}], 0x2, 0x10162, 0x0) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) recvmmsg(r2, &(0x7f0000004500)=[{{0x0, 0xff9c, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x62, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20048041}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x8, 0xd, 0x6, 0x2, 0x0, 0x70bd27, 0x25dfdbfc}, 0x10}}, 0x800) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) r5 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0xa) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='veth1_to_batadv\x00', 0x10) fchdir(r6) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8880, 0x85) lseek(r7, 0x100, 0x1) ioctl$BTRFS_IOC_DEFRAG(r7, 0x50009402, 0x0) getdents64(r7, 0x0, 0x4f) r8 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r8, 0x0, &(0x7f0000000100)) ioctl$AUTOFS_IOC_EXPIRE(r5, 0x810c9365, &(0x7f0000000600)={{0xfff, 0xf0ec}, 0x100, './file0\x00'}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x4}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x40}], 0x0, 0x0, 0x0}) 376.148153ms ago: executing program 0 (id=6662): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x82000714) inotify_rm_watch(r1, r2) r3 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) r4 = socket(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) fchdir(r3) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) lseek(r5, 0x1, 0x1) getdents(r5, 0x0, 0x0) readv(r0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x2) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) (async) inotify_init() (async) inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x82000714) (async) inotify_rm_watch(r1, r2) (async) fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) (async) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r3, 0x0, 0x0) (async) socket(0xa, 0x1, 0x0) (async) bind$inet6(r4, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) (async) fchdir(r3) (async) open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) (async) lseek(r5, 0x1, 0x1) (async) getdents(r5, 0x0, 0x0) (async) readv(r0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x2) (async) 375.214473ms ago: executing program 2 (id=6663): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x6, 0x0) 374.929963ms ago: executing program 0 (id=6664): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) sendto$inet6(r3, 0x0, 0x0, 0xc880, &(0x7f0000000540)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) sendmmsg$inet6(r3, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}}], 0x1, 0x404c484) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000080)={0x40, 0x98a, &(0x7f0000000240)="197d83e001886a2c338e3526fe4278e778193d15e1b37173afac0cdb736f73298b8769fd309e456493ae8957d7c6844129b8d3fba517d2a5119c843d4fddd783490c90977daa9184f637d58449764061a3d7873588c60fb53ef3937b919ec711b95b444345485bade63dcd42affb5bdd37bfdd878f80ae7d5255946697a09dd002140ab047fadc45188d2322202978d24ef32d185081b3eb32f074bb12586e9695611d6e080105644cfdb5302a0712602fa3ea1d263a7acd497644", &(0x7f0000000040)="ea2c33f6bd094947b373e783ae7a9a8c34a7729f1a9ba65b4143974edeb8c27953d068fff59f95898deaf810f67d4193ca6b9a", 0xbb, 0x33}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000bc0)={0x18, 0x0, @ioapic={0x33325000, 0xb, 0xa, 0x7ff, 0x0, [{0xc, 0x6, 0x7, '\x00', 0xb4}, {0x83, 0x7, 0x4, '\x00', 0x4b}, {0xfc, 0xe, 0x7, '\x00', 0xf8}, {0x0, 0x9, 0x40, '\x00', 0x7}, {0x8, 0x10, 0x5, '\x00', 0xa8}, {0x2, 0x9, 0x6, '\x00', 0xff}, {0x6, 0xe, 0x47, '\x00', 0x6}, {0x5, 0x8c, 0x4, '\x00', 0xe9}, {0xe, 0x4, 0x8, '\x00', 0xfb}, {0x5, 0x7, 0x6, '\x00', 0x4}, {0x2, 0xd, 0x15, '\x00', 0x5}, {0x6, 0x7, 0x6, '\x00', 0x7}, {0x4, 0x8a, 0x80, '\x00', 0xdd}, {0x3, 0xf1, 0x6, '\x00', 0x9}, {0x7, 0x65, 0xb, '\x00', 0xfd}, {0x6, 0x9b, 0x19, '\x00', 0x5}, {0x7, 0x3, 0x4, '\x00', 0x7}, {0xef, 0x6, 0x19, '\x00', 0x4}, {0xf, 0x6, 0x6, '\x00', 0x9}, {0x9, 0x3, 0x3, '\x00', 0x4}, {0x1, 0x3, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0x6}, {0xfe, 0xfd, 0x7, '\x00', 0xff}, {0x92, 0x6, 0xfa}]}}) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x3, 0x62, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000fb5d7d086d04c30816040102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d24f4000103020001000600060924030505030605810924030601030405050724", @ANYRES8=r4], 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 321.385359ms ago: executing program 2 (id=6665): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) close_range(r0, 0xffffffffffffffff, 0x0) r2 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x141, 0x20}, 0x18) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@local, 0x1, 0x0, 0x10, 0x0, [{@initdev}]}}) 276.248393ms ago: executing program 2 (id=6666): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r2, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r4, 0x4068aea3, &(0x7f0000000240)) (async) r5 = dup(r1) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r7, 0x4068aea3, &(0x7f0000000280)={0x80, 0x0, 0xffff}) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) (async) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r5, 0xf505, 0x0) (async) write$FUSE_INIT(r5, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c6566646e6f3d47d3505dafb643694bfd", @ANYRESHEX=r5, @ANYBLOB=',aname=:,k']) r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r9 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r9, r8, 0x0, 0xffffffff) 148.077246ms ago: executing program 1 (id=6667): syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000940)={@private2, 0x4, 0x0, 0x1, 0x9, 0x81, 0x8}, &(0x7f0000000980)=0x20) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x12b8b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_submit(0x0, 0x1, &(0x7f0000000480)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x10001, 0x0, 0x1}]) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8400000000080102000000000000000000000004060002400a0100074000000005080006400000000508000540000000040600024088fb00004400048008000140000000060800014000000400080006400000000508000140000000090800074000006c3408000340000000080800034000000003080006400001"], 0x84}, 0x1, 0x0, 0x0, 0x10000}, 0x20000000) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a0443000b0018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x540, 0x20) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$netlink(0x10, 0x3, 0x0) splice(r4, 0x0, r5, 0x0, 0xab4, 0x8) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000080)={0x10201, 0x0, &(0x7f00001df000/0xc000)=nil}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r6 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) close(r7) ioctl$BTRFS_IOC_DEFRAG(r6, 0x80081270, 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 127.386908ms ago: executing program 1 (id=6668): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x408600, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) r3 = dup2(r2, r0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000340)="88afd4544fccbdd5ada5e8a25923084986e6cfd6bf6928aac6b9de4a94330a47e4b17f26ba2f4a49848ff274b3e47e03a7b322562824655ee05f822cc421b6acb065c47209a510be8af31b9cbf5e0ae61e4d6d95ca6330243475efb33c92852ef3a2b72e7617f2acce56427a3b61a7d61ddae112bd074a4f80cda46bc0d416523b05b10fe676fdf095fbe50d420744c3cf186f750f9c01268c7f4ed4cea0d4196348daa4bed43395", 0xa8}, {&(0x7f0000000200)="9f719919505d4c40afaf44ed55eb499451a3bb95609303ae9c2a1188ad38d8c119054cb09561b993ff1a1cf4ec7a67d2d53d0036b9ecf0c34959006cfc0cba2381d59f4e90a7bd31c7", 0x49}, {&(0x7f0000000400)="8ac0284956781a472a881cda263ad8563075a4db78655ae52d2aafd694ed8f5e8a2431cde619fa8e251f9775849fb88e605cf925585f538350e58652731befff6fcbd6975321f9853b9855a8932495024f69807310a2a8", 0x57}, {0x0}], 0x4) 104.03994ms ago: executing program 2 (id=6669): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@flat=@binder={0x73622a85, 0x100, 0x3}, @ptr={0x70742a85, 0xfffffffe, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @flat=@weak_handle={0x77682a85, 0x10a, 0x1}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 102.38449ms ago: executing program 1 (id=6670): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) ioctl$TIOCCONS(r1, 0x541d) prlimit64(0x0, 0xd, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = accept4$packet(r2, 0x0, &(0x7f0000000000), 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000002280)={'syz_tun\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="3303120081fd120000007ef52f555f2a0c09000000fd88a800f788a83baa99000f8588a832f4", 0xfeba, 0x40008c1, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0xcf}, 0x14) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r5, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x10) socket$inet6(0xa, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 289.29µs ago: executing program 1 (id=6671): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x40, 0x0}) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000002c0)={0x284140, 0x82, 0x4}, 0x18) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x400, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) getsockopt$inet_buf(r2, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) write$selinux_load(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x65) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20101, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0x44, 0x80, 0x5, 0x3}, {0xfffc, 0xa1, 0x6, 0x4}, {0xfe00, 0xd, 0x8, 0xbb55}, {0x2, 0x5, 0x7, 0x47}, {0x8, 0x6, 0xe7, 0x8}]}) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r0, 0x22e7c000) 0s ago: executing program 2 (id=6672): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02030002100000000000000000000000020008000840"], 0x80}, 0x1, 0x7}, 0x0) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f00000001c0)=0x1) (async, rerun: 32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) (rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000440)={&(0x7f0000000000)={0x1d, r4}, 0x10, &(0x7f00000005c0)={&(0x7f0000000240)=@canfd={{0x1}, 0x28, 0x3, 0x0, 0x0, "d6654fb393eb970e005e920024e8fe45ae01ab710300000000000000c6b6aa275866f025eecb750a3371571c516f4d7ec48f1dbabe3172939f52577f72fcd45d"}, 0x48}, 0x1, 0x0, 0x0, 0x48004}, 0x80) (async) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r7) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x34, r8, 0x1, 0x300, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}]}]}]}, 0x34}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 398.255380][T15860] /dev/rnullb0: Can't lookup blockdev [ 398.299096][ T2194] usb 2-1: device descriptor read/64, error -71 [ 398.539080][ T2194] usb 2-1: device descriptor read/64, error -71 [ 398.779087][ T2194] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 398.802220][T15880] rust_binder: 928: no such ref 0 [ 398.807921][T15880] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 398.815899][T15880] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 398.827202][T15885] 9pnet_fd: Insufficient options for proto=fd [ 398.849078][ T3049] usb 10-1: new full-speed USB device number 59 using dummy_hcd [ 398.919097][ T2194] usb 2-1: device descriptor read/64, error -71 [ 398.999735][ T3049] usb 10-1: not running at top speed; connect to a high speed hub [ 399.008255][ T3049] usb 10-1: config 95 has an invalid interface number: 1 but max is 0 [ 399.016473][ T3049] usb 10-1: config 95 has no interface number 0 [ 399.022784][ T3049] usb 10-1: config 95 interface 1 has no altsetting 0 [ 399.031515][ T3049] usb 10-1: string descriptor 0 read error: -22 [ 399.037811][ T3049] usb 10-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 399.046949][ T3049] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.169151][ T2194] usb 2-1: device descriptor read/64, error -71 [ 399.264561][ T10] usb 10-1: USB disconnect, device number 59 [ 399.282374][ T2194] usb usb2-port1: attempt power cycle [ 399.308847][T15896] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 399.318606][ T36] audit: type=1400 audit(2000000181.206:1484): avc: denied { relabelto } for pid=15895 comm="syz.9.5392" name="file0" dev="tmpfs" ino=1525 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 399.329490][T15896] netlink: 'syz.9.5392': attribute type 4 has an invalid length. [ 399.346635][ T36] audit: type=1400 audit(2000000181.206:1485): avc: denied { associate } for pid=15895 comm="syz.9.5392" name="file0" dev="tmpfs" ino=1525 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_lib_t:s0" [ 399.387306][T15896] rust_binder: 854: no such ref 3 [ 399.403676][ T36] audit: type=1400 audit(2000000181.286:1486): avc: denied { unlink } for pid=11640 comm="syz-executor" name="file0" dev="tmpfs" ino=1525 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 399.463312][T15916] netlink: 'syz.6.5400': attribute type 11 has an invalid length. [ 399.500040][T15923] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 399.629147][ T2194] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 399.660458][ T2194] usb 2-1: device descriptor read/8, error -71 [ 399.749176][ T45] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 399.800491][ T2194] usb 2-1: device descriptor read/8, error -71 [ 399.861363][T15936] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 399.909263][ T45] usb 10-1: Using ep0 maxpacket: 8 [ 399.921428][ T45] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 399.930241][ T45] usb 10-1: config 179 has no interface number 0 [ 399.936790][ T45] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 399.948429][ T45] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 399.949152][T15940] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5408'. [ 399.983845][ T45] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 399.994247][ T45] usb 10-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 400.007978][ T45] usb 10-1: config 179 interface 65 has no altsetting 0 [ 400.015545][ T45] usb 10-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 400.020620][T15949] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5411'. [ 400.034362][ T45] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.056381][ T2194] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 400.090610][ T2194] usb 2-1: device descriptor read/8, error -71 [ 400.096444][T15953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5413'. [ 400.231631][ T2194] usb 2-1: device descriptor read/8, error -71 [ 400.267360][ T45] usb 10-1: USB disconnect, device number 60 [ 400.399863][ T2194] usb usb2-port1: unable to enumerate USB device [ 400.408540][T15970] vcan0: left allmulticast mode [ 400.413559][T15972] netlink: 'syz.2.5417': attribute type 12 has an invalid length. [ 400.431120][T15974] netlink: 'syz.2.5419': attribute type 5 has an invalid length. [ 400.438992][T15974] netlink: 'syz.2.5419': attribute type 5 has an invalid length. [ 400.446789][T15974] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.5419'. [ 400.515452][T15976] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5420'. [ 400.812052][T15984] SELinux: ebitmap: truncated map [ 400.822296][T15984] SELinux: failed to load policy [ 400.900204][T15986] fuse: Bad value for 'fd' [ 400.986399][T16002] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5429'. [ 401.059301][T16004] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 401.085004][T16015] netlink: 'syz.2.5435': attribute type 28 has an invalid length. [ 401.164518][T16033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5439'. [ 401.211610][T16033] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 401.215571][T16033] netlink: 'syz.1.5439': attribute type 27 has an invalid length. [ 401.230980][T16033] gretap0: left allmulticast mode [ 401.249315][T16033] veth0_vlan: left promiscuous mode [ 401.254846][T16033] veth0_vlan: entered promiscuous mode [ 401.262466][T16033] veth1_macvtap: left promiscuous mode [ 401.269869][T16033] veth1_macvtap: entered promiscuous mode [ 401.271436][T16042] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 238) [ 401.277059][T16042] rust_binder: Error while translating object. [ 401.278948][ T1481] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.288446][T16042] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 401.293787][ T1481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.300946][T16042] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:977 [ 401.314392][ T1481] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.333648][ T1481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.577143][ T36] audit: type=1326 audit(8000000757.427:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16062 comm="syz.6.5450" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f419fb8eec9 code=0x0 [ 401.652653][T16067] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 401.703718][T16077] rust_binder: 16067 RLIMIT_NICE not set [ 401.949128][ T45] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 402.025678][T16091] tmpfs: Unknown parameter '0x0000000000000003' [ 402.109362][ T45] usb 10-1: Using ep0 maxpacket: 32 [ 402.116740][ T45] usb 10-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 32 [ 402.126743][ T45] usb 10-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 402.139747][ T45] usb 10-1: config 1 interface 0 has no altsetting 0 [ 402.147804][ T45] usb 10-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 402.156973][ T45] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.165128][ T45] usb 10-1: Product: ➏䫟斦尬潌ᛡ☛싑榷❭Ԭ꯰赭豿慦⽴㙞☴煉㼶흀睝暑셉ꤕ哢뗐妌혥ད庺㣶ꏂ㜑 [ 402.179255][ T45] usb 10-1: Manufacturer: 䱏 [ 402.183933][ T45] usb 10-1: SerialNumber: 픅A좫愌樱甲쨗벂鏐쬏ಗ턗恫粽헁茸뫬岡槆诤숚ꂻ [ 402.197258][T16079] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 402.408258][ T45] usb 10-1: USB disconnect, device number 61 [ 402.492833][T16101] 9pnet_fd: Insufficient options for proto=fd [ 402.554120][T16115] 9p filesystem being mounted at /354/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 402.568660][T16117] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5471'. [ 402.639722][T16137] 9pnet_fd: Insufficient options for proto=fd [ 402.816375][T16141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5480'. [ 402.966620][T16143] rust_binder: 16144 RLIMIT_NICE not set [ 402.975251][T16148] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:896 [ 402.979146][T16147] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:896 [ 403.059145][ T66] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 403.069820][T16164] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 403.107949][T16174] 9p filesystem being mounted at /307/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 403.188144][T16190] 9p filesystem being mounted at /310/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 403.220190][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 403.231147][ T66] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 403.244264][ T66] usb 2-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 403.254047][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.263084][ T66] usb 2-1: config 0 descriptor?? [ 403.271839][T16141] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 403.281407][ T66] usbhid 2-1:0.0: can't add hid device: -22 [ 403.287178][T16203] overlayfs: conflicting options: nfs_export=on,index=off [ 403.287493][T16204] overlayfs: conflicting options: nfs_export=on,index=off [ 403.301757][ T66] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 403.331862][T16207] kvm: pic: non byte write [ 403.336496][T16207] kvm: pic: non byte write [ 403.341081][T16207] kvm: pic: non byte write [ 403.345728][T16207] kvm: pic: non byte write [ 403.482150][ T2194] usb 2-1: USB disconnect, device number 113 [ 403.910735][T16252] 9p filesystem being mounted at /313/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 403.958564][T16258] rust_binder: Write failure EFAULT in pid:946 [ 403.958611][T16259] rust_binder: Write failure EFAULT in pid:946 [ 403.974090][ T36] audit: type=1400 audit(8000000759.827:1488): avc: denied { lock } for pid=16261 comm="syz.9.5519" path="socket:[95168]" dev="sockfs" ino=95168 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 403.977314][T16262] netlink: 88 bytes leftover after parsing attributes in process `syz.9.5519'. [ 404.015358][T16266] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 404.026230][ T36] audit: type=1326 audit(8000000759.877:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16269 comm="syz.9.5522" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff4cc58eec9 code=0x0 [ 404.097078][T16282] binder: Bad value for 'stats' [ 404.119825][T16284] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 404.120050][T16285] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 404.136850][T16290] rust_binder: Write failure EFAULT in pid:957 [ 404.320971][T16302] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 404.389097][ T2194] usb 10-1: new high-speed USB device number 62 using dummy_hcd [ 404.559084][ T2194] usb 10-1: Using ep0 maxpacket: 32 [ 404.565385][ T2194] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.576475][ T2194] usb 10-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 404.585631][ T2194] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.594379][ T2194] usb 10-1: config 0 descriptor?? [ 405.011247][ T2194] elo 0003:04E7:0009.0035: hidraw0: USB HID v0.00 Device [HID 04e7:0009] on usb-dummy_hcd.9-1/input0 [ 405.190935][T16330] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5542'. [ 405.206866][T16332] overlayfs: failed to clone lowerpath [ 405.215027][T16292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.224895][T16292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.233533][T16292] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 405.241247][T16292] rust_binder: Write failure EINVAL in pid:959 [ 405.241616][ T2194] usb 10-1: USB disconnect, device number 62 [ 405.302560][T16341] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 405.307189][T16341] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 405.319270][T16344] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 405.326202][T16344] netlink: 328 bytes leftover after parsing attributes in process `syz.1.5548'. [ 405.579083][ T370] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 405.730112][ T370] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.741134][ T370] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33792, setting to 1024 [ 405.752487][ T370] usb 2-1: New USB device found, idVendor=056a, idProduct=0005, bcdDevice= 0.00 [ 405.761707][ T370] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.768213][T16346] netlink: 'syz.6.5549': attribute type 1 has an invalid length. [ 405.777110][ T370] usb 2-1: config 0 descriptor?? [ 405.782682][T16346] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5549'. [ 406.194333][ T370] wacom 0003:056A:0005.0036: unknown main item tag 0x3 [ 406.201298][ T370] wacom 0003:056A:0005.0036: item fetching failed at offset 3/7 [ 406.209132][ T370] wacom 0003:056A:0005.0036: parse failed [ 406.214977][ T370] wacom 0003:056A:0005.0036: probe with driver wacom failed with error -22 [ 406.395019][T16344] rust_binder: 1036: no such ref 2 [ 406.400259][T16344] rust_binder: 1036: no such ref 0 [ 406.405470][T16344] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 406.412735][T16344] rust_binder: 1036: no such ref 2 [ 406.417871][T16344] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1036 [ 406.641687][ T36] audit: type=1400 audit(8000000762.497:1490): avc: denied { remount } for pid=16394 comm="syz.9.5564" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 406.646834][T16395] can0: slcan on ttyS3. [ 406.858880][T16437] incfs: Error accessing: ./bus/file0. [ 406.864507][T16437] incfs: mount failed -2 [ 406.935576][ T36] audit: type=1400 audit(8000000762.787:1491): avc: denied { ioctl } for pid=16454 comm="syz.6.5581" path="/" dev="configfs" ino=2473 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 406.959248][ T2194] usb 10-1: new full-speed USB device number 63 using dummy_hcd [ 407.007385][ T3049] usb 2-1: USB disconnect, device number 114 [ 407.032108][T16459] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 407.074289][T16460] x_tables: unsorted underflow at hook 2 [ 407.087485][T16461] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 407.087513][T16461] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 407.102573][T16461] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1038 [ 407.120205][ T2194] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 407.140422][ T2194] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 407.153938][ T2194] usb 10-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 407.163456][ T2194] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.173138][ T2194] usb 10-1: config 0 descriptor?? [ 407.178920][T16403] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 407.187440][ T2194] usbhid 10-1:0.0: can't add hid device: -22 [ 407.193630][ T2194] usbhid 10-1:0.0: probe with driver usbhid failed with error -22 [ 407.291599][T16464] netlink: 'syz.6.5584': attribute type 63 has an invalid length. [ 407.299459][T16464] netlink: 5 bytes leftover after parsing attributes in process `syz.6.5584'. [ 407.869874][T16485] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5592'. [ 407.889778][T16489] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 407.959877][T16509] SELinux: Context system_u:object_r:checkpolicy_exec_t:s0 is not valid (left unmapped). [ 407.959877][ T36] audit: type=1400 audit(8000000763.817:1492): avc: denied { relabelfrom } for pid=16508 comm="syz.6.5601" name="NETLINK" dev="sockfs" ino=95684 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 407.994183][ T36] audit: type=1400 audit(8000000763.847:1493): avc: denied { relabelto } for pid=16508 comm="syz.6.5601" name="NETLINK" dev="sockfs" ino=95684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:checkpolicy_exec_t:s0" [ 408.006436][T16511] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5602'. [ 408.042585][T16513] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 408.128781][T16549] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5612'. [ 408.144643][T16513] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 408.144669][T16513] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 408.153045][T16513] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1050 [ 408.253699][T16578] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5623'. [ 408.267316][T16580] netlink: 'syz.6.5624': attribute type 46 has an invalid length. [ 408.301319][T16588] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2051 sclass=netlink_tcpdiag_socket pid=16588 comm=syz.2.5627 [ 408.865765][T16605] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5634'. [ 408.932301][T16623] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 408.932550][T16623] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 408.939257][T16623] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 408.947315][T16623] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1061 [ 409.081270][T16633] futex_wake_op: syz.2.5643 tries to shift op by -1; fix this program [ 409.208664][T16638] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5644'. [ 409.501836][T16687] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1070 [ 409.712524][ T2194] usb 10-1: USB disconnect, device number 63 [ 409.734654][T16709] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 409.734684][T16709] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:986 [ 409.757251][T16711] /dev/rnullb0: Can't open blockdev [ 409.884407][T16726] __vm_enough_memory: pid: 16726, comm: syz.9.5679, bytes: 18014402804453376 not enough memory for the allocation [ 409.912932][T16730] __vm_enough_memory: pid: 16730, comm: syz.9.5681, bytes: 18014402804453376 not enough memory for the allocation [ 409.935153][T16732] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 409.942527][ T66] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 409.942541][T16732] rust_binder: Write failure EINVAL in pid:1009 [ 409.967491][T16738] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1013 [ 409.974161][T16739] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 409.991352][T16741] rust_binder: Write failure EFAULT in pid:1016 [ 410.022155][T16748] fuse: Bad value for 'fd' [ 410.100525][ T66] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 410.129090][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.137886][ T66] usb 2-1: config 0 descriptor?? [ 410.207345][T16759] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.214478][T16759] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.221643][T16759] bridge_slave_0: entered allmulticast mode [ 410.227875][T16759] bridge_slave_0: entered promiscuous mode [ 410.234450][T16759] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.241553][T16759] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.248609][T16759] bridge_slave_1: entered allmulticast mode [ 410.254949][T16759] bridge_slave_1: entered promiscuous mode [ 410.307489][T16759] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.314587][T16759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.321878][T16759] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.328906][T16759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.348743][ T1481] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.356167][ T1481] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.370441][ T1481] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.377522][ T1481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.385146][ T1481] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.392201][ T1481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.412824][T16759] veth0_vlan: entered promiscuous mode [ 410.423211][T16759] veth1_macvtap: entered promiscuous mode [ 410.443070][ T36] audit: type=1400 audit(8000000766.297:1494): avc: denied { mounton } for pid=16759 comm="syz-executor" path="/root/syzkaller.tx1IUz/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=97325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 410.472285][ T36] audit: type=1400 audit(8000000766.327:1495): avc: denied { mounton } for pid=16759 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 410.548973][ T66] ryos 0003:1E7D:3138.0037: unknown main item tag 0x2 [ 410.556765][ T66] ryos 0003:1E7D:3138.0037: hidraw0: USB HID v1.01 Device [HID 1e7d:3138] on usb-dummy_hcd.1-1/input0 [ 410.581234][T16788] __nla_validate_parse: 4 callbacks suppressed [ 410.581252][T16788] netlink: 37 bytes leftover after parsing attributes in process `syz.2.5700'. [ 410.596538][T16789] netlink: 37 bytes leftover after parsing attributes in process `syz.2.5700'. [ 410.632707][T16798] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5703'. [ 410.749448][ T66] usb 2-1: USB disconnect, device number 115 [ 410.985160][ T36] audit: type=1400 audit(8000000766.837:1496): avc: denied { unlink } for pid=11640 comm="syz-executor" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 411.070268][T12877] can0 (unregistered): slcan off ttyS3. [ 411.134228][ T1477] bridge_slave_1: left allmulticast mode [ 411.148104][ T1477] bridge_slave_1: left promiscuous mode [ 411.156410][ T1477] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.169239][ T1477] bridge_slave_0: left allmulticast mode [ 411.174899][ T1477] bridge_slave_0: left promiscuous mode [ 411.189134][ T1477] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.315245][T16873] 9pnet_fd: Insufficient options for proto=fd [ 411.381811][T16882] rust_binder: Write failure EFAULT in pid:1097 [ 411.399588][ T1477] veth1_macvtap: left promiscuous mode [ 411.413119][T16886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5721'. [ 411.422127][ T1477] veth0_vlan: left promiscuous mode [ 411.496028][T16887] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.503146][T16887] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.510264][T16887] bridge_slave_0: entered allmulticast mode [ 411.516526][T16887] bridge_slave_0: entered promiscuous mode [ 411.523933][T16887] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.530994][T16887] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.538059][T16887] bridge_slave_1: entered allmulticast mode [ 411.544412][T16887] bridge_slave_1: entered promiscuous mode [ 411.560242][ T36] audit: type=1326 audit(8000000767.417:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16821 comm="syz.2.5711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2138eec9 code=0x7fc00000 [ 411.574618][T16892] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 411.585588][ T36] audit: type=1326 audit(8000000767.417:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16821 comm="syz.2.5711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbc2138eec9 code=0x7fc00000 [ 411.615983][ T36] audit: type=1326 audit(8000000767.417:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16821 comm="syz.2.5711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2138eec9 code=0x7fc00000 [ 411.639625][ T36] audit: type=1326 audit(8000000767.417:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16821 comm="syz.2.5711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2138eec9 code=0x7fc00000 [ 411.663449][ T36] audit: type=1326 audit(8000000767.417:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16821 comm="syz.2.5711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2138eec9 code=0x7fc00000 [ 411.687230][ T36] audit: type=1326 audit(8000000767.417:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16821 comm="syz.2.5711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2138eec9 code=0x7fc00000 [ 411.710975][ T36] audit: type=1326 audit(8000000767.417:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16821 comm="syz.2.5711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2138eec9 code=0x7fc00000 [ 411.759505][T16887] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.766578][T16887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.773856][T16887] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.780892][T16887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.804453][ T1467] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.809720][T16900] binder: Unknown parameter 'context[7' [ 411.817599][T16901] binder: Unknown parameter 'context[7' [ 411.817612][ T1467] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.841721][ T1467] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.848790][ T1467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.856833][ T1467] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.863883][ T1467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.885490][T16887] veth0_vlan: entered promiscuous mode [ 411.898709][T16887] veth1_macvtap: entered promiscuous mode [ 411.942339][T16914] __vm_enough_memory: pid: 16914, comm: syz.4.5727, bytes: 18014402804453376 not enough memory for the allocation [ 412.027272][T16920] SELinux: policydb magic number 0x401008c does not match expected magic number 0xf97cff8c [ 412.037484][T16920] SELinux: failed to load policy [ 412.080440][T16920] kvm: kvm [16919]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 412.089575][T16920] kvm: kvm [16919]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 412.172360][T16933] loop2: detected capacity change from 0 to 7 [ 412.178736][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 412.187893][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 412.195967][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 412.205149][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 412.212976][T16933] loop2: unable to read partition table [ 412.218752][T16933] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 412.222220][ T370] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 412.240486][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 412.249642][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 412.289949][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 412.299126][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 412.307176][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 412.316342][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 412.342141][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 412.351328][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 412.389379][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 412.398541][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 412.406577][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 412.415752][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 412.423685][T16933] loop2: unable to read partition table [ 412.423862][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 412.429538][ T370] usb 5-1: Using ep0 maxpacket: 32 [ 412.438472][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 412.443974][T16933] loop_reread_partitions: partition scan of loop2 (7࢕cFpX]Mec!Z83&;!, @~+ρsPɶlԏ) failed (rc=-5) [ 412.457642][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 412.466112][ T370] usb 5-1: config 0 has an invalid interface number: 137 but max is 0 [ 412.474041][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 412.489069][ T370] usb 5-1: config 0 has no interface number 0 [ 412.502357][ T370] usb 5-1: config 0 interface 137 altsetting 1 endpoint 0x8 has invalid wMaxPacketSize 0 [ 412.513616][ T370] usb 5-1: config 0 interface 137 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 412.527097][ T370] usb 5-1: config 0 interface 137 has no altsetting 0 [ 412.535495][ T370] usb 5-1: New USB device found, idVendor=0c52, idProduct=2861, bcdDevice= 1.37 [ 412.544618][ T370] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.552777][ T370] usb 5-1: Product: syz [ 412.556938][ T370] usb 5-1: Manufacturer: syz [ 412.561546][ T370] usb 5-1: SerialNumber: syz [ 412.566816][ T370] usb 5-1: config 0 descriptor?? [ 412.572957][ T370] ftdi_sio 5-1:0.137: FTDI USB Serial Device converter detected [ 412.581090][ T370] usb 5-1: Detected SIO [ 412.585342][ T370] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 8 [ 412.593641][ T370] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 412.780704][ T66] usb 5-1: USB disconnect, device number 4 [ 412.787100][ T66] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 412.796852][ T66] ftdi_sio 5-1:0.137: device disconnected [ 412.860702][T16970] 9p filesystem being mounted at /426/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 413.026864][T16997] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.026894][T16997] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.036701][T16997] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.043649][T16997] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.050248][T16997] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.051707][T17002] /dev/loop0: Can't lookup blockdev [ 413.056673][T16997] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.068371][T16997] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.075387][T16997] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.081865][T16997] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.088295][T16997] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.094834][T16997] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.101366][T16997] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.107882][T16997] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.114376][T16997] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.120832][T16997] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.127260][T16997] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.133692][T16997] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.140344][T16997] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.146823][T16997] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.153291][T16997] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.160040][T16997] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.166467][T16997] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.173047][T16997] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.179547][T16997] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.186014][T16997] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.192640][T16997] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.199250][T16997] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.205677][T16997] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.212462][T16997] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.218887][T16997] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.225526][T16997] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.233258][T16997] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.239862][T16997] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.269098][ T370] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 413.317405][T17029] overlayfs: failed to resolve './file0/file0': -2 [ 413.430138][ T370] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 413.459095][ T370] usb 2-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 413.478467][ T370] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.488629][ T370] usb 2-1: config 0 descriptor?? [ 413.715998][T17069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5780'. [ 413.725667][T17070] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.725708][T17069] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 413.762025][T17078] /dev/rnullb0: Can't open blockdev [ 413.829993][T17092] rust_binder: inc_ref_done called when no active inc_refs [ 413.900640][ T370] logitech 0003:046D:C626.0038: unknown main item tag 0x4 [ 413.909809][T16996] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 413.914982][T16996] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 413.924027][T16996] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1146 [ 413.930967][ T370] logitech 0003:046D:C626.0038: hidraw0: USB HID v0.00 Device [HID 046d:c626] on usb-dummy_hcd.1-1/input0 [ 413.974805][ T370] usb 2-1: USB disconnect, device number 116 [ 413.987649][T17126] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 414.129246][T17132] rust_binder: Error in use_page_slow: ESRCH [ 414.135782][T17132] rust_binder: use_range failure ESRCH [ 414.142904][T17132] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 414.148378][T17132] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 414.156680][T17132] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:62 [ 414.439101][ T370] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 414.479086][ T2194] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 414.600105][ T370] usb 5-1: No LPM exit latency info found, disabling LPM. [ 414.607955][ T370] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 8 [ 414.618833][ T370] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 414.633623][ T370] usb 5-1: string descriptor 0 read error: -22 [ 414.639845][ T370] usb 5-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 414.648884][ T370] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.656905][ T2194] usb 2-1: Using ep0 maxpacket: 16 [ 414.662957][T17134] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 414.670780][ T2194] usb 2-1: config 0 has an invalid interface number: 147 but max is 0 [ 414.678941][ T2194] usb 2-1: config 0 has no interface number 0 [ 414.685569][ T2194] usb 2-1: config 0 interface 147 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32 [ 414.695561][ T2194] usb 2-1: config 0 interface 147 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 414.706849][ T2194] usb 2-1: config 0 interface 147 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 414.718396][ T2194] usb 2-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=5b.44 [ 414.727499][ T2194] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.735561][ T2194] usb 2-1: Product: syz [ 414.739744][ T2194] usb 2-1: Manufacturer: syz [ 414.744337][ T2194] usb 2-1: SerialNumber: syz [ 414.749777][ T2194] usb 2-1: config 0 descriptor?? [ 414.755057][T17136] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 414.762280][T17136] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 414.874013][ T370] usbhid 5-1:1.0: can't add hid device: -71 [ 414.880077][ T370] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 414.888730][ T370] usb 5-1: USB disconnect, device number 5 [ 414.970127][T17136] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 414.977320][T17136] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 414.987336][ T2194] net1080 2-1:0.147 usb0: register 'net1080' at usb-dummy_hcd.1-1, NetChip TurboCONNECT, 0a:6a:bd:d2:55:58 [ 415.238453][T17159] SELinux: security_context_str_to_sid () failed with errno=-22 [ 415.301291][T17171] SELinux: security_context_str_to_sid () failed with errno=-22 [ 415.334148][T17173] binder: Unknown parameter 'fscontext?}' [ 417.461930][T17219] 9p filesystem being mounted at /460/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 420.116563][ T2194] usb 2-1: USB disconnect, device number 117 [ 420.139608][ T2194] net1080 2-1:0.147 usb0: unregister 'net1080' usb-dummy_hcd.1-1, NetChip TurboCONNECT [ 420.311666][T17257] fuse: Bad value for 'user_id' [ 420.316614][T17257] fuse: Bad value for 'user_id' [ 420.346075][T17265] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5834'. [ 420.389075][ T370] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 420.480605][T17283] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.487736][T17283] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.494985][T17283] bridge0: entered allmulticast mode [ 420.501635][T17283] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.508766][T17283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.516084][T17283] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.523130][T17283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.530460][T17283] bridge0: entered promiscuous mode [ 420.546921][T17285] fuse: Bad value for 'fd' [ 420.549081][ T370] usb 5-1: Using ep0 maxpacket: 16 [ 420.560278][ T370] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 420.570185][ T370] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 420.580173][ T370] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 420.593238][ T370] usb 5-1: config 1 interface 0 has no altsetting 0 [ 420.601675][ T370] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 420.610808][ T370] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.618832][ T370] usb 5-1: Product: syz [ 420.623030][ T370] usb 5-1: Manufacturer: syz [ 420.627621][ T370] usb 5-1: SerialNumber: syz [ 420.834573][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 420.834589][ T36] audit: type=1400 audit(8000000776.687:1524): avc: denied { accept } for pid=17224 comm="syz.4.5825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 420.862444][ T370] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 420.886795][ T370] usb 5-1: USB disconnect, device number 6 [ 420.892039][T17298] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 420.893328][T17298] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 420.894151][ T370] usblp0: removed [ 420.900081][T17298] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 420.911570][T17298] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1191 [ 420.927819][ T36] audit: type=1326 audit(8000000776.777:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17299 comm="syz.2.5846" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc2138eec9 code=0x0 [ 420.985511][T17309] can: request_module (can-proto-6) failed. [ 420.991726][T17309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=17309 comm=syz.2.5846 [ 421.015954][T17313] fuse: Bad value for 'fd' [ 421.098806][T17320] fuse: blksize only supported for fuseblk [ 421.102248][T17304] binder: Bad value for 'defcontext' [ 421.125659][ T1481] Bluetooth: hci0: Frame reassembly failed (-84) [ 421.233494][T17332] fuse: Bad value for 'fd' [ 421.245992][T17334] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5860'. [ 421.499076][ T370] usb 2-1: new full-speed USB device number 118 using dummy_hcd [ 421.629095][ T370] usb 2-1: device descriptor read/64, error -71 [ 421.869097][ T370] usb 2-1: device descriptor read/64, error -71 [ 421.968073][T17385] veth0: entered promiscuous mode [ 421.973235][T17385] veth0: left promiscuous mode [ 422.109092][ T370] usb 2-1: new full-speed USB device number 119 using dummy_hcd [ 422.239086][ T370] usb 2-1: device descriptor read/64, error -71 [ 422.479084][ T370] usb 2-1: device descriptor read/64, error -71 [ 422.589610][ T370] usb usb2-port1: attempt power cycle [ 422.911490][T17418] SELinux: Context system_u:object_r:tty_device_t:s0 is not valid (left unmapped). [ 422.921198][ T36] audit: type=1400 audit(8000000778.777:1526): avc: denied { relabelto } for pid=17417 comm="syz.2.5890" name="cgroup" dev="tmpfs" ino=2669 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:tty_device_t:s0" [ 422.948376][ T36] audit: type=1400 audit(8000000778.777:1527): avc: denied { associate } for pid=17417 comm="syz.2.5890" name="cgroup" dev="tmpfs" ino=2669 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:tty_device_t:s0" [ 422.949090][ T370] usb 2-1: new full-speed USB device number 120 using dummy_hcd [ 422.976420][ T36] audit: type=1400 audit(8000000778.777:1528): avc: denied { read } for pid=17417 comm="syz.2.5890" name="cgroup" dev="tmpfs" ino=2669 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:tty_device_t:s0" [ 423.010094][ T36] audit: type=1400 audit(8000000778.777:1529): avc: denied { unlink } for pid=11641 comm="syz-executor" name="cgroup" dev="tmpfs" ino=2669 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:tty_device_t:s0" [ 423.020118][ T370] usb 2-1: device descriptor read/8, error -71 [ 423.149070][ T4189] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 423.149080][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 423.180061][ T370] usb 2-1: device descriptor read/8, error -71 [ 423.227000][T17433] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5894'. [ 423.419089][ T370] usb 2-1: new full-speed USB device number 121 using dummy_hcd [ 423.440050][ T370] usb 2-1: device descriptor read/8, error -71 [ 423.570048][ T370] usb 2-1: device descriptor read/8, error -71 [ 423.646567][T17441] netlink: 'syz.2.5897': attribute type 6 has an invalid length. [ 423.679172][ T370] usb usb2-port1: unable to enumerate USB device [ 423.909113][ T3049] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 423.987316][T17463] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5904'. [ 424.006299][ T36] audit: type=1400 audit(8000000779.857:1530): avc: granted { setsecparam } for pid=17464 comm="syz.6.5905" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 424.041759][T17469] tipc: Started in network mode [ 424.046645][T17469] tipc: Node identity 16196a640393, cluster identity 4711 [ 424.053915][T17469] tipc: Enabled bearer , priority 8 [ 424.070300][ T3049] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 424.081562][ T3049] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 424.094669][ T3049] usb 5-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 424.103021][T17474] 9pnet_virtio: no channels available for device /dev/rnullb0 [ 424.104042][ T3049] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.120188][ T3049] usb 5-1: config 0 descriptor?? [ 424.125412][T17445] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 424.133329][ T3049] usbhid 5-1:0.0: can't add hid device: -22 [ 424.139351][ T3049] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 424.168713][T17478] fuse: Invalid rootmode [ 424.202957][T17484] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5913'. [ 424.221752][T17486] /dev/rnullb0: Can't open blockdev [ 424.236164][T17488] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5915'. [ 424.293512][T17501] fuse: Unknown parameter '00000000000000000000' [ 424.345609][ T2197] usb 5-1: USB disconnect, device number 7 [ 424.368995][T17511] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5923'. [ 424.393040][ T36] audit: type=1326 audit(8000000780.247:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17512 comm="syz.1.5924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97a1f8eec9 code=0x7ffc0000 [ 424.431716][ T36] audit: type=1326 audit(8000000780.247:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17512 comm="syz.1.5924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97a1f8eec9 code=0x7ffc0000 [ 424.455341][ T36] audit: type=1326 audit(8000000780.267:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17512 comm="syz.1.5924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f97a1f8d710 code=0x7ffc0000 [ 424.699069][T17531] rust_binder: Failed copying remainder into alloc: EFAULT [ 424.699092][T17531] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 424.706389][T17531] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 424.714716][T17531] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:122 [ 424.729079][ T45] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 424.741304][T17533] 9pnet: Could not find request transport: rdma [ 424.869080][ T45] usb 2-1: device descriptor read/64, error -71 [ 424.884608][T17539] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5932'. [ 424.910212][T17537] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 424.910280][T17537] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 424.994699][T17548] binder: Unknown parameter '˄R' [ 425.119074][ T45] usb 2-1: device descriptor read/64, error -71 [ 425.169095][ T370] tipc: Node number set to 361392740 [ 425.311617][T17556] cgroup: subsys name conflicts with all [ 425.369076][ T45] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 425.509082][ T45] usb 2-1: device descriptor read/64, error -71 [ 425.639280][T17563] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 425.750513][T17566] rust_binder: Failed copying remainder into alloc: EFAULT [ 425.758644][T17566] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 425.759100][ T45] usb 2-1: device descriptor read/64, error -71 [ 425.765995][T17566] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 425.780532][T17566] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:134 [ 425.899191][ T45] usb usb2-port1: attempt power cycle [ 425.937537][T17581] netlink: 'syz.4.5945': attribute type 4 has an invalid length. [ 425.949893][T17581] netlink: 'syz.4.5945': attribute type 4 has an invalid length. [ 425.953173][T17583] fuse: Unknown parameter 'user00000000000000000000' [ 425.959588][T17581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17581 comm=syz.4.5945 [ 426.229097][ T3049] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 426.249081][ T45] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 426.270053][ T45] usb 2-1: device descriptor read/8, error -71 [ 426.384120][T17596] loop7: detected capacity change from 0 to 16384 [ 426.391038][ T3049] usb 5-1: Using ep0 maxpacket: 32 [ 426.400032][ T3049] usb 5-1: unable to get BOS descriptor or descriptor too short [ 426.408019][ T45] usb 2-1: device descriptor read/8, error -71 [ 426.418284][ T3049] usb 5-1: config 7 has an invalid interface number: 103 but max is 2 [ 426.428045][ T3049] usb 5-1: config 7 has an invalid interface number: 3 but max is 2 [ 426.436800][ T3049] usb 5-1: config 7 has an invalid interface number: 134 but max is 2 [ 426.445294][ T3049] usb 5-1: config 7 has no interface number 0 [ 426.451708][ T3049] usb 5-1: config 7 has no interface number 1 [ 426.457974][ T3049] usb 5-1: config 7 has no interface number 2 [ 426.467296][ T3049] usb 5-1: config 7 interface 3 altsetting 1 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 426.479558][ T3049] usb 5-1: config 7 interface 103 has no altsetting 0 [ 426.490088][T17596] rust_binder: Failed copying remainder into alloc: EFAULT [ 426.496898][T17596] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 426.504594][T17596] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 426.513104][ T3049] usb 5-1: config 7 interface 3 has no altsetting 0 [ 426.514045][T17596] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:145 [ 426.523373][ T3049] usb 5-1: config 7 interface 134 has no altsetting 0 [ 426.542002][T17599] overlay: ./bus is not a directory [ 426.548867][ T3049] usb 5-1: New USB device found, idVendor=4971, idProduct=1012, bcdDevice=36.82 [ 426.559383][ T3049] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.567459][ T3049] usb 5-1: Product: syz [ 426.571682][ T3049] usb 5-1: Manufacturer: syz [ 426.576271][ T3049] usb 5-1: SerialNumber: syz [ 426.588210][ T3049] usb 5-1: Interface #103 referenced by multiple IADs [ 426.595117][ T3049] usb 5-1: Interface #134 referenced by multiple IADs [ 426.671403][ T45] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 426.709069][ T45] usb 2-1: device descriptor read/8, error -71 [ 426.805085][ T3049] usb-storage 5-1:7.103: USB Mass Storage device detected [ 426.813184][ T3049] usb-storage 5-1:7.103: Quirks match for vid 4971 pid 1012: 800000 [ 426.840061][ T45] usb 2-1: device descriptor read/8, error -71 [ 426.848681][ T3049] usb-storage 5-1:7.3: USB Mass Storage device detected [ 426.856282][ T3049] usb-storage 5-1:7.3: Quirks match for vid 4971 pid 1012: 800000 [ 426.880875][ T3049] usb-storage 5-1:7.134: USB Mass Storage device detected [ 426.888608][ T3049] usb-storage 5-1:7.134: Quirks match for vid 4971 pid 1012: 800000 [ 426.912079][ T3049] usb 5-1: USB disconnect, device number 8 [ 426.949161][ T45] usb usb2-port1: unable to enumerate USB device [ 427.319657][T17613] fuse: Unknown parameter 'user00000000000000000000' [ 427.359209][T17630] tmpfs: Unsupported parameter 'mpol' [ 427.374159][T17634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5959'. [ 427.398157][T17636] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 427.458931][T17639] binder: Bad value for 'stats' [ 427.504202][T17645] rust_binder: 1237: no such ref 0 [ 427.509436][T17645] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 427.516678][T17645] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 427.524190][T17645] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5964'. [ 427.555156][T17654] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 427.555846][T17654] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 427.562478][T17654] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 427.570504][T17654] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1246 [ 427.719087][ T370] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 427.880072][ T370] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 427.889087][ T3049] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 427.890958][ T370] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.909383][ T370] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.919312][ T370] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 427.932277][ T370] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 427.941322][ T370] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.949850][ T370] usb 5-1: config 0 descriptor?? [ 428.040116][ T3049] usb 2-1: config 1 has an invalid interface number: 64 but max is 0 [ 428.048281][ T3049] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 428.058517][ T3049] usb 2-1: config 1 has no interface number 0 [ 428.065993][ T3049] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 428.075105][ T3049] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.083128][ T3049] usb 2-1: Product: syz [ 428.087283][ T3049] usb 2-1: Manufacturer: syz [ 428.092072][ T3049] usb 2-1: SerialNumber: syz [ 428.298628][T17656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.307173][T17656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.322086][T17656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.330618][T17656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.357074][ T370] holtek_kbd 0003:04D9:A055.0039: unknown main item tag 0x0 [ 428.364984][ T370] holtek_kbd 0003:04D9:A055.0039: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.4-1/input0 [ 428.400178][ T3049] usb 2-1: USB disconnect, device number 126 [ 428.414019][T17668] binder: Binderfs stats mode cannot be changed during a remount [ 428.435741][T17671] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=17671 comm=syz.1.5972 [ 428.540405][T17677] netlink: 'syz.1.5974': attribute type 4 has an invalid length. [ 428.549855][T17677] netlink: 'syz.1.5974': attribute type 4 has an invalid length. [ 428.560509][T17677] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 428.560591][T17677] rust_binder: 1263: no such ref 0 [ 428.564227][ T370] usb 5-1: USB disconnect, device number 9 [ 428.567017][T17677] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 32768 [ 428.567035][T17677] rust_binder: 1263: no such ref 2 [ 428.591122][T17677] rust_binder: Error while translating object. [ 428.591172][T17677] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 428.597369][T17677] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1263 [ 428.808615][T17704] overlayfs: failed to resolve './bus': -2 [ 428.824825][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 428.824842][ T36] audit: type=1400 audit(8000000784.677:1565): avc: denied { create } for pid=17703 comm="syz.2.5983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 428.861096][ T36] audit: type=1400 audit(8000000784.707:1566): avc: denied { write } for pid=17703 comm="syz.2.5983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 429.166894][ T36] audit: type=1400 audit(8000000785.017:1567): avc: denied { read write } for pid=16887 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 429.191594][ T36] audit: type=1400 audit(8000000785.017:1568): avc: denied { open } for pid=16887 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 429.216023][ T36] audit: type=1400 audit(8000000785.017:1569): avc: denied { ioctl } for pid=16887 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 429.242377][ T36] audit: type=1400 audit(8000000785.077:1570): avc: denied { write } for pid=17724 comm="syz.4.5991" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 429.265379][ T36] audit: type=1400 audit(8000000785.087:1571): avc: denied { read append } for pid=17724 comm="syz.4.5991" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 429.288726][ T36] audit: type=1400 audit(8000000785.087:1572): avc: denied { open } for pid=17724 comm="syz.4.5991" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 429.311956][ T36] audit: type=1400 audit(8000000785.087:1573): avc: denied { ioctl } for pid=17724 comm="syz.4.5991" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 429.336837][ T36] audit: type=1400 audit(8000000785.087:1574): avc: denied { create } for pid=17725 comm="syz.1.5990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 429.343707][T17729] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 429.639087][ T377] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 429.799707][ T377] usb 2-1: Using ep0 maxpacket: 32 [ 429.814547][ T377] usb 2-1: config 1 interface 0 has no altsetting 0 [ 429.830965][T17744] rust_binder: Got transaction with invalid offset. [ 429.831016][T17744] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 429.837741][T17744] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:150 [ 429.848227][ T377] usb 2-1: New USB device found, idVendor=056a, idProduct=00db, bcdDevice= 0.40 [ 429.866447][ T377] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.874469][ T377] usb 2-1: Product: Р [ 429.878681][ T377] usb 2-1: Manufacturer: Њ [ 429.883815][ T377] usb 2-1: SerialNumber: ぁ铱緸調﷠▴虃污⮖㠻苼㹱ཨ꒡燢͐倱튠뚿錨䥝⯁솤៑鼗ⓨ헅:널랲궓ꪙT㧱鹯Ⱎ䔻怩튫軋釨壘⽲雲竖﬍쌲삸Ā嶜䨾邍诨믙쭌䶐괘탫鏪콹ᒭ彠鄜뫕ⶵ⑛ [ 429.957034][T17766] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6000'. [ 430.102121][T17777] rust_binder: 161: no such ref 1 [ 430.107246][T17777] rust_binder: 161: no such ref 2 [ 430.123645][T17777] rust_binder: 161: no such ref 0 [ 430.128912][T17777] rust_binder: Read failure Err(EAGAIN) in pid:161 [ 430.129634][T17777] rust_binder: Write failure EFAULT in pid:161 [ 430.225419][T17785] 9pnet_fd: Insufficient options for proto=fd [ 430.325679][T17733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.348656][T17733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.379942][T17794] 9p filesystem being mounted at /60/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 430.593362][ T377] usbhid 2-1:1.0: can't add hid device: -71 [ 430.605781][ T377] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 430.619179][ T377] usb 2-1: USB disconnect, device number 127 [ 430.744156][T17814] netlink: 'syz.4.6014': attribute type 4 has an invalid length. [ 430.752024][T17814] netlink: 17 bytes leftover after parsing attributes in process `syz.4.6014'. [ 430.906766][T17824] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6018'. [ 431.017511][T17836] netlink: 'syz.4.6022': attribute type 29 has an invalid length. [ 431.025443][T17836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6022'. [ 431.064314][T17843] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6024'. [ 431.079270][T17843] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6024'. [ 431.088415][T17843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6024'. [ 431.183796][T17857] 9pnet_fd: Insufficient options for proto=fd [ 431.336018][T17878] netlink: 'syz.6.6034': attribute type 16 has an invalid length. [ 431.434032][T17890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6038'. [ 431.500169][T17895] 9p filesystem being mounted at /539/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 431.541486][T17902] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 431.604856][T17905] netlink: 'syz.2.6045': attribute type 12 has an invalid length. [ 431.659733][T17908] SELinux: security_context_str_to_sid (sytem_uGй1844674407370955161500000000000000000003) failed with errno=-22 [ 431.837553][T17912] rust_binder: Write failure EFAULT in pid:1294 [ 432.315320][T17932] fuse: Bad value for 'fd' [ 432.583392][T17955] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6063'. [ 432.594010][T17958] 9pnet_fd: Insufficient options for proto=fd [ 432.853045][T17962] fuse: Unknown parameter '0x0000000000000003' [ 432.859306][ T370] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 433.012970][ T370] usb 2-1: config index 0 descriptor too short (expected 5140, got 18) [ 433.021666][ T370] usb 2-1: config 137 has too many interfaces: 170, using maximum allowed: 32 [ 433.031338][ T370] usb 2-1: config 137 has an invalid descriptor of length 0, skipping remainder of the config [ 433.043420][ T370] usb 2-1: config 137 has 0 interfaces, different from the descriptor's value: 170 [ 433.056710][ T370] usb 2-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 433.067154][ T370] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 433.075882][ T370] usb 2-1: SerialNumber: syz [ 433.194772][T17983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6073'. [ 433.459128][ T370] usb 2-1: USB disconnect, device number 2 [ 433.956528][ T36] kauditd_printk_skb: 1026 callbacks suppressed [ 433.956545][ T36] audit: type=1400 audit(8000000789.807:2601): avc: denied { read write } for pid=11349 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 433.987255][ T36] audit: type=1400 audit(8000000789.807:2602): avc: denied { read write open } for pid=11349 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 434.018220][ T36] audit: type=1400 audit(8000000789.807:2603): avc: denied { ioctl } for pid=11349 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 434.044560][ T36] audit: type=1400 audit(8000000789.827:2604): avc: denied { read write } for pid=18001 comm="syz.1.6080" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 434.071398][ T36] audit: type=1400 audit(8000000789.827:2605): avc: denied { read open } for pid=18001 comm="syz.1.6080" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 434.102675][ T36] audit: type=1400 audit(8000000789.827:2606): avc: denied { create } for pid=18001 comm="syz.1.6080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 434.141030][ T36] audit: type=1400 audit(8000000789.827:2607): avc: denied { write } for pid=18001 comm="syz.1.6080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 434.142816][T18017] fuse: Bad value for 'rootmode' [ 434.162879][T18018] binder: Bad value for 'max' [ 434.176012][T18017] netlink: 680 bytes leftover after parsing attributes in process `syz.2.6084'. [ 434.188056][ T36] audit: type=1400 audit(8000000789.827:2608): avc: denied { read } for pid=18001 comm="syz.1.6080" dev="nsfs" ino=4026532323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 434.210151][ T36] audit: type=1400 audit(8000000789.827:2609): avc: denied { read open } for pid=18001 comm="syz.1.6080" path="net:[4026532323]" dev="nsfs" ino=4026532323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 434.239188][ T36] audit: type=1400 audit(8000000789.827:2610): avc: denied { create } for pid=18001 comm="syz.1.6080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 434.267328][T18025] fuse: Unknown parameter '0x0000000000000003' [ 434.378928][T18033] netlink: 'syz.2.6090': attribute type 1 has an invalid length. [ 434.499086][ T3049] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 434.651653][ T3049] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 434.661871][ T3049] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 434.674945][ T3049] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 0.00 [ 434.685033][ T3049] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 434.695081][ T3049] usb 2-1: SerialNumber: syz [ 434.797812][T18049] netlink: 188 bytes leftover after parsing attributes in process `syz.4.6096'. [ 434.913784][T18023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 434.965620][T18050] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false [ 434.972237][T18050] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 434.980334][T18050] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1319 [ 435.172217][T18052] fuse: Unknown parameter '0x0000000000000003' [ 435.331053][T18063] sit0: left promiscuous mode [ 435.338632][T18066] devpts: called with bogus options [ 435.460046][T18076] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6105'. [ 435.492772][T18078] fuse: Unknown parameter '0x0000000000000003' [ 436.124302][T18101] fuse: Unknown parameter 'fd0x0000000000000003' [ 436.502925][T18109] 9pnet_fd: Insufficient options for proto=fd [ 436.510587][T18109] overlayfs: failed to clone lowerpath [ 436.707294][T18113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6120'. [ 437.219777][T18141] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6130'. [ 437.277176][ T2197] usb 2-1: USB disconnect, device number 3 [ 437.464209][T18164] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6140'. [ 437.659069][ T2197] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 437.812053][ T2197] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 437.821429][ T2197] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.834867][ T2197] usb 2-1: config 0 descriptor?? [ 438.249809][ T2197] ryos 0003:1E7D:3138.003A: unknown main item tag 0x2 [ 438.257507][ T2197] ryos 0003:1E7D:3138.003A: hidraw0: USB HID v1.01 Device [HID 1e7d:3138] on usb-dummy_hcd.1-1/input0 [ 438.433654][T18196] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6150'. [ 438.459995][T18153] 9pnet: p9_errstr2errno: server reported unknown error OX۵רѳlu9 [ 438.494718][T18153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.505223][T18153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.517406][ T377] usb 2-1: USB disconnect, device number 4 [ 438.960510][ T36] kauditd_printk_skb: 754 callbacks suppressed [ 438.960521][ T36] audit: type=1326 audit(8000000801.814:3365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18190 comm="syz.2.6148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbc213c1785 code=0x7ffc0000 [ 438.993984][ T36] audit: type=1326 audit(8000000801.814:3366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18190 comm="syz.2.6148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbc213c1785 code=0x7ffc0000 [ 439.018216][ T36] audit: type=1326 audit(8000000801.814:3367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18190 comm="syz.2.6148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbc213c1785 code=0x7ffc0000 [ 439.027773][T18212] /dev/loop0: Can't lookup blockdev [ 439.044758][ T36] audit: type=1326 audit(8000000801.814:3368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18190 comm="syz.2.6148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbc213c1785 code=0x7ffc0000 [ 439.065319][T11349] audit: audit_backlog=65 > audit_backlog_limit=64 [ 439.072146][ T36] audit: type=1326 audit(8000000801.814:3369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18190 comm="syz.2.6148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbc213c1785 code=0x7ffc0000 [ 439.089775][T11349] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 439.102045][ T36] audit: type=1326 audit(8000000801.814:3370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18190 comm="syz.2.6148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbc213c1785 code=0x7ffc0000 [ 439.112303][T11349] audit: backlog limit exceeded [ 439.133578][ T36] audit: type=1326 audit(8000000801.814:3371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18190 comm="syz.2.6148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbc213c1785 code=0x7ffc0000 [ 439.164466][T18215] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 439.290335][ T1495] Bluetooth: hci0: Frame reassembly failed (-84) [ 439.479849][T18223] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6160'. [ 441.275586][T18287] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6181'. [ 441.309064][ T4189] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 441.309069][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 441.606710][T18292] netlink: 104 bytes leftover after parsing attributes in process `syz.6.6183'. [ 441.931055][T18310] rust_binder: 1337: no such ref 3 [ 441.937047][T18310] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1337 [ 442.045419][T18323] rust_binder: Write failure EFAULT in pid:1349 [ 442.064131][T18323] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6193'. [ 442.122796][T18325] __vm_enough_memory: pid: 18325, comm: syz.1.6194, bytes: 18014402804453376 not enough memory for the allocation [ 442.204313][T18335] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 442.211870][T18335] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1356 [ 442.229288][T18337] netlink: 'syz.6.6198': attribute type 5 has an invalid length. [ 442.246886][T18337] netlink: 'syz.6.6198': attribute type 5 has an invalid length. [ 442.254707][T18337] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.6198'. [ 442.360393][T18352] 9pnet_fd: Insufficient options for proto=fd [ 442.852939][T18378] SELinux: Context system_u:object_r:dpkg_lock_t:s0 is not valid (left unmapped). [ 442.884315][T18380] SELinux: Context system_u:object_r:locale_t:s0 is not valid (left unmapped). [ 443.400809][T18390] rust_binder: Write failure EFAULT in pid:1372 [ 443.542847][T18395] rust_binder: Write failure EFAULT in pid:1376 [ 443.979072][ T3049] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 443.993418][ T36] kauditd_printk_skb: 645 callbacks suppressed [ 443.993433][ T36] audit: type=1400 audit(8000000806.844:4011): avc: denied { ioctl } for pid=18403 comm="syz.1.6222" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 444.024612][ T36] audit: type=1400 audit(8000000806.854:4012): avc: denied { ioctl } for pid=18403 comm="syz.1.6222" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 444.049765][ T36] audit: type=1400 audit(8000000806.874:4013): avc: denied { ioctl } for pid=18403 comm="syz.1.6222" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 444.089424][ T36] audit: type=1400 audit(8000000806.944:4014): avc: denied { ioctl } for pid=18403 comm="syz.1.6222" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 444.169060][ T3049] usb 2-1: Using ep0 maxpacket: 32 [ 444.174762][ T36] audit: type=1400 audit(8000000807.024:4015): avc: denied { ioctl } for pid=18403 comm="syz.1.6222" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 444.200277][ T36] audit: type=1400 audit(8000000807.024:4016): avc: denied { ioctl } for pid=18403 comm="syz.1.6222" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 444.225552][ T36] audit: type=1400 audit(8000000807.054:4017): avc: denied { ioctl } for pid=18403 comm="syz.1.6222" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 444.250692][ T3049] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 444.258855][ T3049] usb 2-1: config 0 has no interface number 0 [ 444.264987][ T3049] usb 2-1: config 0 interface 184 has no altsetting 0 [ 444.271826][ T36] audit: type=1400 audit(8000000807.074:4018): avc: denied { ioctl } for pid=18403 comm="syz.1.6222" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 444.274788][ T3049] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 444.297340][ T36] audit: type=1400 audit(8000000807.074:4019): avc: denied { ioctl } for pid=18403 comm="syz.1.6222" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 444.306526][ T3049] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.332562][ T36] audit: type=1400 audit(8000000807.104:4020): avc: denied { ioctl } for pid=18403 comm="syz.1.6222" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 444.339169][ T3049] usb 2-1: Product: syz [ 444.368854][ T3049] usb 2-1: Manufacturer: syz [ 444.373558][ T3049] usb 2-1: SerialNumber: syz [ 444.379626][ T3049] usb 2-1: config 0 descriptor?? [ 444.387759][ T3049] smsc75xx v1.0.0 [ 444.795115][ T3049] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 444.815749][ T3049] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 444.826136][ T3049] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 444.837677][ T3049] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 444.847800][ T3049] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 444.858129][ T3049] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 444.867566][ T3049] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 444.878306][ T3049] usb 2-1: USB disconnect, device number 5 [ 445.169067][ T3049] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 445.319057][ T3049] usb 2-1: Using ep0 maxpacket: 16 [ 445.326144][ T3049] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 445.336092][ T3049] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 445.345952][ T3049] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 445.358991][ T3049] usb 2-1: config 1 interface 0 has no altsetting 0 [ 445.368107][ T3049] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 445.377275][ T3049] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.385305][ T3049] usb 2-1: Product: syz [ 445.389511][ T3049] usb 2-1: Manufacturer: syz [ 445.394097][ T3049] usb 2-1: SerialNumber: syz [ 445.619625][ T3049] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 445.806999][T18439] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6233'. [ 445.934977][T18449] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18449 comm=syz.2.6236 [ 445.948412][T18449] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pid=18449 comm=syz.2.6236 [ 446.555529][T18463] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6242'. [ 446.741055][T18491] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6251'. [ 446.849970][T18505] overlayfs: failed to clone lowerpath [ 447.564123][T18516] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.575069][T18522] netlink: 240 bytes leftover after parsing attributes in process `syz.4.6259'. [ 447.585169][T18516] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.604403][T18516] bridge_slave_0: entered allmulticast mode [ 447.633940][T18516] bridge_slave_0: entered promiscuous mode [ 447.644833][T18516] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.653210][T18516] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.655027][T18529] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6261'. [ 447.660739][T18516] bridge_slave_1: entered allmulticast mode [ 447.675736][T18516] bridge_slave_1: entered promiscuous mode [ 447.688451][ T1481] bridge_slave_1: left allmulticast mode [ 447.698147][ T1481] bridge_slave_1: left promiscuous mode [ 447.704672][ T1481] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.722675][ T1481] bridge_slave_0: left allmulticast mode [ 447.735047][ T1481] bridge_slave_0: left promiscuous mode [ 447.746041][ T1481] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.824365][ T2194] usb 2-1: USB disconnect, device number 6 [ 447.831675][ T2194] usblp0: removed [ 447.916208][ T1481] tipc: Disabling bearer [ 447.923815][ T1481] tipc: Left network mode [ 447.930555][ T1481] veth1_macvtap: left promiscuous mode [ 447.936103][ T1481] veth0_vlan: left promiscuous mode [ 447.942785][T18552] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 447.951750][T18552] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 448.062890][T18516] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.069961][T18516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.077197][T18516] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.084246][T18516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.109154][T18559] 9p filesystem being mounted at /134/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 448.137861][ T1475] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.145269][ T1475] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.158162][ T1495] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.165234][ T1495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.175600][ T1475] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.182675][ T1475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.254357][T18516] veth0_vlan: entered promiscuous mode [ 448.292191][T18516] veth1_macvtap: entered promiscuous mode [ 448.296520][T18568] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6271'. [ 448.447948][T18578] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 448.485975][T18582] __vm_enough_memory: pid: 18582, comm: syz.1.6275, bytes: 18014402804453376 not enough memory for the allocation [ 448.538436][T18590] overlayfs: failed to clone upperpath [ 448.583942][T18593] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6279'. [ 448.713938][T18610] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6284'. [ 448.759174][T18610] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6284'. [ 448.833502][T18625] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6291'. [ 448.905070][T18633] rust_binder: Error in use_page_slow: ESRCH [ 448.905092][T18633] rust_binder: use_range failure ESRCH [ 448.916816][T18633] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 448.916845][T18633] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 448.924903][T18633] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:19 [ 449.002844][ T36] kauditd_printk_skb: 698 callbacks suppressed [ 449.002864][ T36] audit: type=1400 audit(8000000811.854:4719): avc: denied { create } for pid=18634 comm="syz.4.6295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 449.037288][ T36] audit: type=1400 audit(8000000811.854:4720): avc: denied { create } for pid=18634 comm="syz.4.6295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 449.089080][ T3049] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 449.090754][ T36] audit: type=1400 audit(8000000811.854:4721): avc: denied { write } for pid=18634 comm="syz.4.6295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 449.117852][ T36] audit: type=1400 audit(8000000811.854:4722): avc: denied { read } for pid=18634 comm="syz.4.6295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 449.121955][T18640] audit: audit_backlog=65 > audit_backlog_limit=64 [ 449.139181][ T36] audit: type=1400 audit(8000000811.854:4723): avc: denied { read } for pid=18634 comm="syz.4.6295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 449.145112][T18640] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 449.167109][ T36] audit: type=1400 audit(8000000811.854:4724): avc: denied { write } for pid=18634 comm="syz.4.6295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 449.173684][T18640] audit: backlog limit exceeded [ 449.194926][ T36] audit: type=1400 audit(8000000811.884:4725): avc: denied { ioctl } for pid=18624 comm="syz.1.6290" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 449.205255][T18642] 9p filesystem being mounted at /136/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 449.252012][ T3049] usb 2-1: unable to get BOS descriptor or descriptor too short [ 449.261075][ T3049] usb 2-1: not running at top speed; connect to a high speed hub [ 449.283083][ T3049] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 449.294090][T18642] netlink: 'syz.4.6297': attribute type 1 has an invalid length. [ 449.306405][T18642] netlink: 'syz.4.6297': attribute type 2 has an invalid length. [ 449.315186][ T3049] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 449.329652][ T3049] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 449.339126][ T3049] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.347914][ T3049] usb 2-1: Product: syz [ 449.353068][ T3049] usb 2-1: Manufacturer: syz [ 449.357667][ T3049] usb 2-1: SerialNumber: syz [ 449.460809][T18659] tmpfs: Unknown parameter 'noswWp' [ 449.584588][T18627] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 449.593712][T18627] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 449.608004][T18627] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 449.618113][T18627] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1410 [ 449.638557][ T3049] usb 2-1: 0:2 : does not exist [ 449.668507][ T3049] usb 2-1: USB disconnect, device number 7 [ 449.733341][T11982] udevd[11982]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 449.839074][ T45] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 449.946308][T18703] fuseblk: Unknown parameter 'pcr' [ 449.999218][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 450.015061][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 450.035090][ T45] usb 3-1: string descriptor 0 read error: -22 [ 450.049082][ T45] usb 3-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=82.fe [ 450.068304][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.188307][T18721] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 450.190460][T18721] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 450.196969][T18721] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 450.205848][T18721] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1412 [ 450.263789][T18723] rust_binder: Write failure EFAULT in pid:1414 [ 450.294842][ T45] asix 3-1:7.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 450.334800][ T45] asix 3-1:7.0: probe with driver asix failed with error -32 [ 450.369882][ T45] usb 3-1: USB disconnect, device number 55 [ 450.648146][T18738] 9pnet_fd: Insufficient options for proto=fd [ 450.781035][T18756] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 450.866540][T18765] rust_binder: Write failure EFAULT in pid:47 [ 450.978223][T18771] kvm: pic: non byte write [ 450.994513][T18771] kvm: pic: non byte write [ 451.001250][T18771] kvm: pic: non byte write [ 451.008881][T18771] xt_NFQUEUE: number of total queues is 0 [ 451.157729][T18800] __nla_validate_parse: 2 callbacks suppressed [ 451.157750][T18800] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6350'. [ 451.211456][T18805] rust_binder: Read failure Err(EAGAIN) in pid:1422 [ 451.671200][T18815] netlink: 393 bytes leftover after parsing attributes in process `syz.2.6356'. [ 451.909387][T18823] fuseblk: Unknown parameter 'rooqmode' [ 452.005274][T18839] cgroup: subsys name conflicts with all [ 452.574607][T18846] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:55 [ 452.782940][T18869] sit0: entered promiscuous mode [ 452.799055][T18869] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6373'. [ 452.808174][T18870] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6373'. [ 452.910899][T18881] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1434 [ 453.424142][T18906] rust_binder: Error while translating object. [ 453.443643][T18906] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 453.459057][T18906] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1450 [ 453.588471][T18914] tipc: Started in network mode [ 453.603913][T18914] tipc: Node identity 4, cluster identity 4711 [ 453.613599][T18914] tipc: Node number set to 4 [ 453.969166][ T370] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 454.039468][ T36] kauditd_printk_skb: 974 callbacks suppressed [ 454.039481][ T36] audit: type=1400 audit(8000000816.894:5697): avc: denied { ioctl } for pid=18919 comm="syz.2.6389" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 454.071461][ T36] audit: type=1400 audit(8000000816.924:5698): avc: denied { ioctl } for pid=18922 comm="syz.1.6390" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 454.119119][ T370] usb 3-1: Using ep0 maxpacket: 16 [ 454.124887][ T36] audit: type=1400 audit(8000000816.974:5699): avc: denied { ioctl } for pid=18919 comm="syz.2.6389" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 454.149991][ T2197] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 454.151079][ T36] audit: type=1400 audit(8000000816.974:5700): avc: denied { ioctl } for pid=18919 comm="syz.2.6389" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 454.160277][ T370] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 454.182823][ T36] audit: type=1400 audit(8000000817.004:5701): avc: denied { ioctl } for pid=18922 comm="syz.1.6390" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 454.194473][ T370] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 454.217542][ T36] audit: type=1400 audit(8000000817.004:5702): avc: denied { ioctl } for pid=18922 comm="syz.1.6390" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 454.230838][ T370] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 454.251718][ T36] audit: type=1400 audit(8000000817.004:5703): avc: denied { ioctl } for pid=18922 comm="syz.1.6390" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 454.261226][ T370] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.285343][ T36] audit: type=1400 audit(8000000817.014:5704): avc: denied { ioctl } for pid=18919 comm="syz.2.6389" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 454.294166][ T370] usb 3-1: Product: syz [ 454.318183][ T36] audit: type=1400 audit(8000000817.014:5705): avc: denied { ioctl } for pid=18919 comm="syz.2.6389" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 454.323268][ T370] usb 3-1: Manufacturer: syz [ 454.347811][ T36] audit: type=1400 audit(8000000817.014:5706): avc: denied { ioctl } for pid=18919 comm="syz.2.6389" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 454.352002][ T2197] usb 2-1: Using ep0 maxpacket: 8 [ 454.382022][ T370] usb 3-1: SerialNumber: syz [ 454.388799][ T2197] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 454.400906][ T2197] usb 2-1: config 179 has no interface number 0 [ 454.410195][ T2197] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 454.422008][ T2197] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 454.433681][ T2197] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 454.444768][ T2197] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 454.459543][ T2197] usb 2-1: config 179 interface 65 has no altsetting 0 [ 454.466447][ T2197] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 454.475557][ T2197] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.682373][T18957] sit0: entered promiscuous mode [ 454.688418][T18957] netlink: 'syz.6.6403': attribute type 1 has an invalid length. [ 454.697339][T18957] netlink: 1 bytes leftover after parsing attributes in process `syz.6.6403'. [ 454.712223][ T2197] usb 2-1: USB disconnect, device number 8 [ 454.855605][T18967] 9p filesystem being mounted at /192/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 455.151531][ T1475] bridge_slave_1: left allmulticast mode [ 455.158335][ T1475] bridge_slave_1: left promiscuous mode [ 455.164830][ T1475] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.179716][ T1475] bridge_slave_0: left allmulticast mode [ 455.187108][ T1475] bridge_slave_0: left promiscuous mode [ 455.192807][ T1475] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.200981][ T1475] tipc: Resetting bearer [ 455.224066][ T1475] tipc: Disabling bearer [ 455.310920][ T1475] tipc: Left network mode [ 455.317606][ T1475] veth1_macvtap: left promiscuous mode [ 455.323309][ T1475] veth0_vlan: left promiscuous mode [ 455.396965][T18991] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.404168][T18991] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.411378][T18991] bridge_slave_0: entered allmulticast mode [ 455.417730][T18991] bridge_slave_0: entered promiscuous mode [ 455.425221][T18991] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.432321][T18991] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.439448][T18991] bridge_slave_1: entered allmulticast mode [ 455.445705][T18991] bridge_slave_1: entered promiscuous mode [ 455.522327][T18991] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.529387][T18991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.536622][T18991] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.543654][T18991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.590001][ T1495] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.597455][ T1495] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.611161][ T1475] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.618237][ T1475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.628949][ T1495] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.636054][ T1495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.709560][T18991] veth0_vlan: entered promiscuous mode [ 455.739366][T18991] veth1_macvtap: entered promiscuous mode [ 456.134582][T19019] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 456.134599][T19019] rust_binder: Error while translating object. [ 456.143428][T19019] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 456.149653][T19019] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1468 [ 456.185974][T19021] rust_binder: Failed copying remainder into alloc: EFAULT [ 456.195365][T19021] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 456.202655][T19021] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 456.210985][T19021] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1471 [ 456.259248][ T45] usb 1-1: new low-speed USB device number 37 using dummy_hcd [ 456.271171][T19028] __vm_enough_memory: pid: 19028, comm: syz.1.6425, bytes: 18014402804453376 not enough memory for the allocation [ 456.313392][T19030] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 456.314543][T19030] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 456.422311][ T45] usb 1-1: config 9 has an invalid interface number: 51 but max is 0 [ 456.439056][ T45] usb 1-1: config 9 has no interface number 0 [ 456.450451][ T45] usb 1-1: string descriptor 0 read error: -22 [ 456.456654][ T45] usb 1-1: New USB device found, idVendor=07a6, idProduct=25c2, bcdDevice=37.12 [ 456.466419][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.526310][T19045] /dev/rnullb0: Can't open blockdev [ 456.678792][ T370] usb 3-1: 0:2 : does not exist [ 456.694389][ T370] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 456.705832][T19016] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6421'. [ 456.718533][ T370] usb 3-1: USB disconnect, device number 56 [ 456.741206][T19016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.759397][T19016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.773559][T19058] /dev/rnullb0: Can't open blockdev [ 456.782207][ T45] usb 1-1: USB disconnect, device number 37 [ 456.810652][T19056] /dev/rnullb0: Can't open blockdev [ 456.852200][T19061] rust_binder: Write failure EFAULT in pid:86 [ 456.863927][T11982] udevd[11982]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 456.962206][T19067] rust_binder: Error while translating object. [ 456.962254][T19067] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 456.968508][T19067] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1509 [ 457.309110][ T45] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 457.460143][T19076] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 457.469254][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 457.477184][ T45] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 457.491646][ T45] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 457.502463][ T45] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 457.515549][ T45] usb 2-1: config 1 interface 0 has no altsetting 0 [ 457.524742][ T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 457.533888][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.541897][ T45] usb 2-1: Product: syz [ 457.546104][ T45] usb 2-1: Manufacturer: syz [ 457.550710][ T45] usb 2-1: SerialNumber: syz [ 457.729074][ T370] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 457.763149][ T45] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 457.779140][ T45] usb 2-1: USB disconnect, device number 9 [ 457.789390][ T45] usblp0: removed [ 457.858362][T19085] rust_binder: Error in use_page_slow: ESRCH [ 457.858386][T19085] rust_binder: use_range failure ESRCH [ 457.865258][T19085] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 457.871605][T19085] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 457.879742][ T370] usb 3-1: Using ep0 maxpacket: 32 [ 457.879810][T19085] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1519 [ 457.892561][ T370] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.915647][ T370] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.926971][ T370] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 457.936747][ T370] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.941330][T19087] loop2: detected capacity change from 0 to 7 [ 457.947221][ T370] usb 3-1: config 0 descriptor?? [ 457.983670][ C0] blk_print_req_error: 4 callbacks suppressed [ 457.983691][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 458.000493][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 458.008761][T19092] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 458.009656][ C1] buffer_io_error: 4 callbacks suppressed [ 458.009671][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 458.020845][T19092] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 458.022672][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 458.046777][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 458.056339][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 458.065506][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 458.075614][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 458.084787][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 458.094644][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 458.103804][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 458.375821][ T370] savu 0003:1E7D:2D5A.003B: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 458.570095][T19113] 9p filesystem being mounted at /526/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 458.712469][ T370] usb 3-1: USB disconnect, device number 57 [ 458.809127][ T45] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 458.839103][ T2197] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 458.959075][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 458.967928][ T45] usb 1-1: config 44 has too many interfaces: 167, using maximum allowed: 32 [ 458.977341][ T45] usb 1-1: config 44 has 1 interface, different from the descriptor's value: 167 [ 458.986515][ T45] usb 1-1: config 44 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.997543][ T45] usb 1-1: config 44 interface 0 has no altsetting 0 [ 459.004280][ T45] usb 1-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice=ff.00 [ 459.009064][ T2197] usb 2-1: Using ep0 maxpacket: 16 [ 459.013425][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.025198][ T2197] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 459.036844][ T2197] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.045303][ T2197] usb 2-1: Product: syz [ 459.050353][ T2197] usb 2-1: Manufacturer: syz [ 459.054958][ T2197] usb 2-1: SerialNumber: syz [ 459.070103][ T36] kauditd_printk_skb: 651 callbacks suppressed [ 459.070120][ T36] audit: type=1400 audit(8000000821.924:6358): avc: denied { ioctl } for pid=19112 comm="syz.1.6452" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 459.101283][ T36] audit: type=1400 audit(8000000821.924:6359): avc: denied { ioctl } for pid=19112 comm="syz.1.6452" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 459.127123][ T36] audit: type=1400 audit(8000000821.974:6360): avc: denied { ioctl } for pid=19112 comm="syz.1.6452" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 459.152919][ T36] audit: type=1400 audit(8000000821.974:6361): avc: denied { ioctl } for pid=19112 comm="syz.1.6452" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 459.153053][ T2197] r8152-cfgselector 2-1: Unknown version 0x0000 [ 459.178604][ T36] audit: type=1400 audit(8000000822.004:6362): avc: denied { ioctl } for pid=19112 comm="syz.1.6452" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 459.184285][ T2197] r8152-cfgselector 2-1: config 0 descriptor?? [ 459.210685][ T36] audit: type=1400 audit(8000000822.004:6363): avc: denied { ioctl } for pid=19112 comm="syz.1.6452" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 459.241173][ T36] audit: type=1400 audit(8000000822.064:6364): avc: denied { ioctl } for pid=19112 comm="syz.1.6452" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 459.266323][ T36] audit: type=1400 audit(8000000822.064:6365): avc: denied { ioctl } for pid=19112 comm="syz.1.6452" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 459.291852][ T36] audit: type=1400 audit(8000000822.064:6366): avc: denied { ioctl } for pid=19112 comm="syz.1.6452" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 459.316909][ T36] audit: type=1400 audit(8000000822.094:6367): avc: denied { create } for pid=19115 comm="syz.0.6453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 459.418730][ T2197] r8152-cfgselector 2-1: Unknown version 0x0000 [ 459.425088][ T2197] r8152-cfgselector 2-1: bad CDC descriptors [ 459.501838][ T45] usb 1-1: string descriptor 0 read error: -71 [ 459.516246][ T45] usbhid 1-1:44.0: can't add hid device: -71 [ 459.522378][ T45] usbhid 1-1:44.0: probe with driver usbhid failed with error -71 [ 459.531438][ T45] usb 1-1: USB disconnect, device number 38 [ 459.589915][T19128] can0: slcan on ttyS3. [ 459.620249][T19128] can0 (unregistered): slcan off ttyS3. [ 459.625971][T19128] Falling back ldisc for ttyS3. [ 459.695884][T19132] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 459.695913][T19132] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:109 [ 459.879375][T19161] rust_binder: inc_ref_done called when no active inc_refs [ 459.922804][T19168] netlink: 'syz.4.6468': attribute type 4 has an invalid length. [ 459.942427][T19168] netlink: 'syz.4.6468': attribute type 4 has an invalid length. [ 460.052528][T19178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6470'. [ 460.072748][T19178] erspan0: default FDB implementation only supports local addresses [ 460.092024][T19180] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false [ 460.133409][T19184] 9pnet_fd: Insufficient options for proto=fd [ 460.141412][ T45] r8152-cfgselector 2-1: USB disconnect, device number 10 [ 460.165391][T19184] overlay: ./file0 is not a directory [ 460.217223][T19187] rust_binder: Failed to allocate buffer. len:17467746875420888944, is_oneway:false [ 460.217253][T19187] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 460.227915][T19187] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:23 [ 460.382717][T19199] rust_binder: Error while translating object. [ 460.410304][T19199] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 460.419049][T19199] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:25 [ 460.610114][T19210] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:28 [ 460.883278][T19232] rust_binder: Error while translating object. [ 460.907188][T19232] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 460.922201][T19232] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:127 [ 461.069685][T19242] 9p filesystem being mounted at /183/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 461.149221][ T370] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 461.215098][T19250] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6496'. [ 461.329090][ T370] usb 2-1: device descriptor read/64, error -71 [ 461.369106][ T3049] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 461.519055][ T3049] usb 3-1: Using ep0 maxpacket: 32 [ 461.540276][ T3049] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.554997][ T3049] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.565808][ T3049] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 461.569092][ T370] usb 2-1: device descriptor read/64, error -71 [ 461.575936][ T3049] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.592124][ T3049] usb 3-1: config 0 descriptor?? [ 461.599219][ T3049] hub 3-1:0.0: USB hub found [ 461.695847][T19264] bpf: Bad value for 'mode' [ 461.800464][ T3049] hub 3-1:0.0: 1 port detected [ 461.821320][ T370] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 461.877331][T19274] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6505'. [ 461.939671][T19281] tmpfs: Unknown parameter 'PH' [ 461.969136][ T370] usb 2-1: device descriptor read/64, error -71 [ 462.169075][ T2197] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 462.203948][T19248] /dev/rnullb0: Can't open blockdev [ 462.209280][ T370] usb 2-1: device descriptor read/64, error -71 [ 462.319101][ T2197] usb 1-1: Using ep0 maxpacket: 16 [ 462.324568][ T370] usb usb2-port1: attempt power cycle [ 462.332068][ T2197] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid maxpacket 60928, setting to 1024 [ 462.343414][ T2197] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 462.353545][ T2197] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 462.366520][ T2197] usb 1-1: config 1 interface 0 has no altsetting 0 [ 462.376313][ T2197] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 462.385410][ T2197] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.393417][ T2197] usb 1-1: Product: syz [ 462.397565][ T2197] usb 1-1: Manufacturer: syz [ 462.402246][ T2197] usb 1-1: SerialNumber: syz [ 462.412716][T19279] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 462.669086][ T370] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 462.701513][ T370] usb 2-1: device descriptor read/8, error -71 [ 462.832757][ T370] usb 2-1: device descriptor read/8, error -71 [ 463.079072][ T370] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 463.100987][ T370] usb 2-1: device descriptor read/8, error -71 [ 463.149786][ T3049] hub 3-1:0.0: hub_ext_port_status failed (err = -32) [ 463.231090][ T370] usb 2-1: device descriptor read/8, error -71 [ 463.339143][ T370] usb usb2-port1: unable to enumerate USB device [ 463.735631][T19330] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1566 [ 463.758143][T19334] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6523'. [ 463.781762][T19336] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 463.838167][T19341] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6526'. [ 463.907236][T19350] 9p filesystem being mounted at /47/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 464.085553][ T36] kauditd_printk_skb: 767 callbacks suppressed [ 464.085570][ T36] audit: type=1400 audit(8000000826.934:7135): avc: denied { read write } for pid=18516 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 464.119060][ T66] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 464.121817][ T36] audit: type=1400 audit(8000000826.934:7136): avc: denied { read write open } for pid=18516 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 464.152698][ T36] audit: type=1400 audit(8000000826.934:7137): avc: denied { ioctl } for pid=18516 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 464.178912][ T36] audit: type=1400 audit(8000000826.984:7138): avc: denied { ioctl } for pid=19347 comm="syz.1.6527" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 464.205766][ T36] audit: type=1400 audit(8000000826.984:7139): avc: denied { ioctl } for pid=19347 comm="syz.1.6527" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 464.238384][ T36] audit: type=1400 audit(8000000826.984:7140): avc: denied { ioctl } for pid=19347 comm="syz.1.6527" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 464.264004][ T36] audit: type=1400 audit(8000000826.994:7141): avc: denied { read write } for pid=19364 comm="syz.2.6533" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 464.292137][ T36] audit: type=1400 audit(8000000826.994:7142): avc: denied { read write open } for pid=19364 comm="syz.2.6533" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 464.301429][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.326963][T19373] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6535'. [ 464.340347][ T36] audit: type=1400 audit(8000000826.994:7143): avc: denied { create } for pid=19364 comm="syz.2.6533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 464.359581][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.369982][ T66] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 464.394508][ T66] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 464.396650][ T36] audit: type=1400 audit(8000000826.994:7144): avc: denied { setopt } for pid=19364 comm="syz.2.6533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 464.417006][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.437552][ T66] usb 2-1: config 0 descriptor?? [ 464.832079][T19402] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6544'. [ 464.850911][ T66] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x1 [ 464.858403][ T66] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x1 [ 464.865851][ T66] plantronics 0003:047F:FFFF.003C: item fetching failed at offset 12/15 [ 464.874425][ T66] plantronics 0003:047F:FFFF.003C: parse failed [ 464.880772][ T66] plantronics 0003:047F:FFFF.003C: probe with driver plantronics failed with error -22 [ 464.939145][ T66] usb 1-1: USB disconnect, device number 39 [ 465.087415][T19348] overlayfs: missing 'lowerdir' [ 465.100110][T19348] netlink: 288 bytes leftover after parsing attributes in process `syz.1.6527'. [ 465.110251][ T66] usb 2-1: USB disconnect, device number 15 [ 465.126352][T19415] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6550'. [ 465.744689][T19435] rust_binder: Write failure EFAULT in pid:209 [ 465.811524][T19439] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6559'. [ 465.886222][T19446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.908654][T19446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.991764][T19457] 9p filesystem being mounted at /538/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 466.059424][T19463] 9p filesystem being mounted at /212/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 466.127416][T19470] rust_binder: Error while translating object. [ 466.127455][T19470] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 466.133751][T19470] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1585 [ 466.308438][T19486] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 466.325102][T19486] rust_binder: Write failure EINVAL in pid:78 [ 466.598422][T19500] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 466.604554][T19500] rust_binder: Error while translating object. [ 466.613319][T19500] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 466.619520][T19500] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1598 [ 466.632172][T19503] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 466.632479][T19501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.656355][T19501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.113597][T19527] rust_binder: Failed copying remainder into alloc: EFAULT [ 467.113623][T19527] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 467.124840][T19527] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 467.133700][T19527] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:81 [ 467.596084][T19551] rust_binder: Write failure EFAULT in pid:1609 [ 467.715763][T19558] /dev/rnullb0: Can't open blockdev [ 467.741542][T19558] /dev/rnullb0: Can't open blockdev [ 467.796341][T19561] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 467.803705][T19561] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 467.811935][T19561] rust_binder: 1619: no such ref 3 [ 467.817168][T19561] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 467.825061][T19561] rust_binder: 1619: no such ref 2 [ 468.609619][T19605] rust_binder: 127: no such ref 1 [ 468.614783][T19605] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:127 [ 468.740448][T19618] rust_binder: Error while translating object. [ 468.749820][T19618] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 468.756045][T19618] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1621 [ 468.771352][T19620] batadv_slave_1: entered promiscuous mode [ 468.872724][T19619] batadv_slave_1: left promiscuous mode [ 469.089134][ T36] kauditd_printk_skb: 2906 callbacks suppressed [ 469.089151][ T36] audit: type=1326 audit(8000000831.934:10051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19626 comm="syz.0.6624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ebef8eec9 code=0x50000 [ 469.122768][ T36] audit: type=1326 audit(8000000831.974:10052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19626 comm="syz.0.6624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ebef8eec9 code=0x50000 [ 469.146087][ T36] audit: type=1326 audit(8000000831.974:10053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19626 comm="syz.0.6624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ebef8eec9 code=0x50000 [ 469.169419][ T36] audit: type=1326 audit(8000000831.974:10054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19626 comm="syz.0.6624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ebef8eec9 code=0x50000 [ 469.192853][ T36] audit: type=1326 audit(8000000831.974:10055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19626 comm="syz.0.6624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ebef8eec9 code=0x50000 [ 469.216152][ T36] audit: type=1326 audit(8000000831.974:10056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19626 comm="syz.0.6624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ebef8eec9 code=0x50000 [ 469.239453][ T36] audit: type=1326 audit(8000000831.974:10057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19626 comm="syz.0.6624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ebef8eec9 code=0x50000 [ 469.263191][ T36] audit: type=1326 audit(8000000831.974:10058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19626 comm="syz.0.6624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ebef8eec9 code=0x50000 [ 469.286512][ T36] audit: type=1326 audit(8000000831.974:10059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19626 comm="syz.0.6624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ebef8eec9 code=0x50000 [ 469.310279][ T36] audit: type=1326 audit(8000000831.974:10060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19626 comm="syz.0.6624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ebef8eec9 code=0x50000 [ 469.824728][T19656] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:223 [ 469.934058][T19660] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 470.285891][T19676] rust_binder: Error while translating object. [ 470.285933][T19676] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 470.292747][T19678] 9p filesystem being mounted at /71/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 470.306711][T19676] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1644 [ 470.510111][T19689] Invalid logical block size (14) [ 470.728962][T19694] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 470.745580][T19694] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 470.947411][T19708] binder: Unknown parameter 'context[7' [ 470.947823][T19707] rust_binder: Write failure EINVAL in pid:242 [ 471.045663][T19712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.097841][T19712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.265384][T19721] fuse: Unknown parameter '' [ 471.292458][T19721] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 471.292487][T19721] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:1672 [ 471.499248][T19725] Invalid logical block size (14) [ 471.540203][T19725] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 471.541826][T19725] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 471.959043][T19734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6660'. [ 471.988337][T19733] rust_binder: Write failure EFAULT in pid:141 [ 472.013300][T19735] /dev/rnullb0: Can't open blockdev [ 472.184541][T19748] 9pnet_fd: Insufficient options for proto=fd [ 472.246754][T19752] netlink: 'syz.1.6667': attribute type 11 has an invalid length. [ 472.254658][T19752] netlink: 'syz.1.6667': attribute type 1 has an invalid length. [ 472.262449][T19752] netlink: 3593 bytes leftover after parsing attributes in process `syz.1.6667'. [ 472.318770][ T370] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 472.361585][T19758] rust_binder: Error while translating object. [ 472.361630][T19758] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 472.367897][T19758] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:261 [ 472.409717][T19761] ------------[ cut here ]------------ [ 472.424346][T19761] WARNING: CPU: 0 PID: 19761 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0 [ 472.433903][T19761] Modules linked in: [ 472.437803][T19761] CPU: 0 UID: 0 PID: 19761 Comm: syz.1.6671 Not tainted syzkaller #0 9b63ddcf0ca82069290034062ca02b4369282e80 [ 472.449470][T19761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 472.459570][T19761] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 472.465492][T19761] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d a2 1f ee 05 00 0f 85 be 00 00 00 c6 05 95 1f ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 472.485128][T19761] RSP: 0018:ffffc9000504f540 EFLAGS: 00010246 [ 472.491252][T19761] RAX: 0000000000000000 RBX: 000000000000000d RCX: 0000000000000000 [ 472.499257][T19761] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000504f5f8 [ 472.507234][T19761] RBP: ffffc9000504f680 R08: ffffc9000504f5f7 R09: 0000000000000000 [ 472.515479][T19761] R10: ffffc9000504f5e0 R11: fffff52000a09ebf R12: ffffc9000504f580 [ 472.523712][T19761] R13: dffffc0000000000 R14: 1ffff92000a09eac R15: 0000000000000000 [ 472.531707][T19761] FS: 00007f97a2de26c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 472.540656][T19761] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 472.547243][T19761] CR2: 000000110c29f3c3 CR3: 000000013457c000 CR4: 00000000003526b0 [ 472.555233][T19761] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000009800 [ 472.563225][T19761] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 472.571215][T19761] Call Trace: [ 472.574490][T19761] [ 472.577405][T19761] ? vfs_write+0x3c0/0xf30 [ 472.581832][T19761] ? ksys_write+0x141/0x250 [ 472.586342][T19761] ? x64_sys_call+0x271c/0x2ee0 [ 472.591204][T19761] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 472.596934][T19761] ? hashtab_init+0xdb/0x1f0 [ 472.601532][T19761] ___kmalloc_large_node+0x81/0x220 [ 472.606729][T19761] ? hashtab_init+0xdb/0x1f0 [ 472.611331][T19761] __kmalloc_large_node_noprof+0x1e/0xe0 [ 472.616966][T19761] ? hashtab_init+0xdb/0x1f0 [ 472.621591][T19761] __kmalloc_noprof+0x336/0x530 [ 472.626450][T19761] ? kasan_save_alloc_info+0x40/0x50 [ 472.631759][T19761] hashtab_init+0xdb/0x1f0 [ 472.636187][T19761] ? class_read+0x162/0x8a0 [ 472.640717][T19761] symtab_init+0x44/0x70 [ 472.644956][T19761] class_read+0x1df/0x8a0 [ 472.649300][T19761] ? hashtab_init+0xdb/0x1f0 [ 472.653978][T19761] ? __cfi_class_read+0x10/0x10 [ 472.658842][T19761] ? hashtab_init+0x105/0x1f0 [ 472.663519][T19761] policydb_read+0xaa8/0x28c0 [ 472.668198][T19761] ? __kasan_kmalloc+0x96/0xb0 [ 472.672974][T19761] ? __cfi_policydb_read+0x10/0x10 [ 472.678095][T19761] ? security_load_policy+0x128/0x12f0 [ 472.683569][T19761] security_load_policy+0x162/0x12f0 [ 472.688878][T19761] ? avc_has_perm_noaudit+0x21c/0x360 [ 472.694256][T19761] ? _raw_spin_unlock+0x45/0x60 [ 472.699126][T19761] ? __check_object_size+0x50a/0x810 [ 472.704408][T19761] ? __cfi_security_load_policy+0x10/0x10 [ 472.710148][T19761] ? __kasan_check_write+0x18/0x20 [ 472.715266][T19761] sel_write_load+0x298/0x5e0 [ 472.719960][T19761] ? __cfi_sel_write_load+0x10/0x10 [ 472.725174][T19761] ? bpf_lsm_file_permission+0xd/0x20 [ 472.730574][T19761] ? __cfi_sel_write_load+0x10/0x10 [ 472.735791][T19761] vfs_write+0x3c0/0xf30 [ 472.740050][T19761] ? __cfi_vfs_write+0x10/0x10 [ 472.744812][T19761] ? __kasan_check_write+0x18/0x20 [ 472.749937][T19761] ? mutex_lock+0x92/0x1c0 [ 472.754367][T19761] ? __cfi_mutex_lock+0x10/0x10 [ 472.759254][T19761] ? __fget_files+0x2c5/0x340 [ 472.763950][T19761] ksys_write+0x141/0x250 [ 472.768269][T19761] ? xfd_validate_state+0x68/0x150 [ 472.773407][T19761] ? __cfi_ksys_write+0x10/0x10 [ 472.778255][T19761] ? __kasan_check_write+0x18/0x20 [ 472.783381][T19761] ? fpregs_restore_userregs+0x11d/0x260 [ 472.789058][T19761] __x64_sys_write+0x7f/0x90 [ 472.793655][T19761] x64_sys_call+0x271c/0x2ee0 [ 472.798409][T19761] do_syscall_64+0x58/0xf0 [ 472.802839][T19761] ? clear_bhb_loop+0x50/0xa0 [ 472.807521][T19761] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 472.813442][T19761] RIP: 0033:0x7f97a1f8eec9 [ 472.817861][T19761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.837496][T19761] RSP: 002b:00007f97a2de2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 472.845947][T19761] RAX: ffffffffffffffda RBX: 00007f97a21e5fa0 RCX: 00007f97a1f8eec9 [ 472.853937][T19761] RDX: 0000000000000065 RSI: 0000200000000280 RDI: 0000000000000004 [ 472.861946][T19761] RBP: 00007f97a2011f91 R08: 0000000000000000 R09: 0000000000000000 [ 472.869940][T19761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.877918][T19761] R13: 00007f97a21e6038 R14: 00007f97a21e5fa0 R15: 00007ffee4b26068 [ 472.885906][T19761] [ 472.888951][T19761] ---[ end trace 0000000000000000 ]--- [ 472.894529][T19761] SELinux: failed to load policy [ 472.908659][ T370] usb 1-1: Using ep0 maxpacket: 8 [ 472.923185][ T370] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 472.931569][ T370] usb 1-1: config 0 has no interface number 0 [ 472.958981][ T370] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice= 4.16 [ 472.968042][ T370] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.978756][ T370] usb 1-1: Product: syz [ 472.982954][ T370] usb 1-1: Manufacturer: syz [ 472.987552][ T370] usb 1-1: SerialNumber: syz [ 472.999767][ T370] usb 1-1: config 0 descriptor?? [ 473.214179][ T370] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 473.222149][ T370] usb 1-1: No valid video chain found. [ 473.235686][ T370] usb 1-1: USB disconnect, device number 40