last executing test programs: 7m4.404531066s ago: executing program 2 (id=305): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000540)=@updsa={0x238, 0x1a, 0x1, 0x70bd2c, 0x25dfdbfb, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@loopback, 0x4e20, 0x2, 0x4e21, 0x4e, 0xa, 0x80, 0x20, 0x62}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d3, 0x3c}, @in6=@private0, {0x6, 0xff, 0x8, 0x310652ad, 0x9, 0x9d, 0xdf9d, 0x9f34}, {0x5, 0x5, 0x5, 0x3b80000000000}, {0x4, 0x0, 0x7}, 0x70bd25, 0x0, 0xa, 0x1, 0xda, 0x21}, [@coaddr={0x14, 0xe, @in6=@mcast2}, @sa={0xe4, 0x6, {{@in6=@private0, @in6=@mcast1, 0x4e23, 0x0, 0x4e20, 0x3ff, 0xa, 0x80, 0x20, 0x36fd6a3a467949ad}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d5, 0x6c}, @in=@rand_addr=0x64010101, {0x8, 0x6, 0x0, 0x6d, 0x10001, 0xf, 0x2ec18, 0x1}, {0x1, 0x3, 0x9, 0x3}, {0x9, 0x5, 0x6}, 0x70bd2c, 0x0, 0x2, 0x2, 0x7, 0x20}}, @tfcpad={0x8, 0x16, 0x4}, @sec_ctx={0x2a, 0x8, {0x26, 0x8, 0x0, 0x70, 0x1e, "3b43f100bdaac317f5ee395028bbcc344dd09e306efb6674b17dc2da48ff"}}, @extra_flags={0x8, 0x18, 0x8000}, @srcaddr={0x14, 0xd, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x238}, 0x1, 0x0, 0x0, 0x20004}, 0x8000) 7m4.391934637s ago: executing program 2 (id=306): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) io_setup(0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r1, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='ex+\x88\xfe\xf7\x01') (async) syz_usb_connect(0x3, 0xffffffffffffffe3, &(0x7f0000000c00)=ANY=[], 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000280)={'lo\x00'}) (async) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) (async) r5 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x4e) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0xdd86, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)="0c9c7652971832dbe1b31a4aa5f8006b00001080000000008da33ed3cf1113496f00000000000000", 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) (async) chdir(&(0x7f00000001c0)='./file0\x00') (async) getsockopt$sock_buf(r4, 0x1, 0x1c, &(0x7f0000000140)=""/18, &(0x7f0000000180)=0x12) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) r8 = userfaultfd(0x80801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000001c0)) (async) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f00003de000/0x2000)=nil, 0x2000, 0xa) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r9 = openat$tun(0xffffffffffffff9c, 0x0, 0x10800, 0x0) ioctl$TUNSETQUEUE(r9, 0x400454d9, 0x0) 7m1.350883343s ago: executing program 2 (id=325): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x107) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff4010000008003950323030302e75"], 0x15) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000000), 0x8) listen(r4, 0x1) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, 0x0, 0x0) r5 = dup(r1) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r5, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x803}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) newfstatat(0xffffffffffffff9c, &(0x7f0000000f00)='./file0\x00', 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x11, r0, 0x45809000) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000180)=0x5, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r6, &(0x7f0000000140)="1b8b0f768e", 0x5, 0x24044844, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 7m1.249793235s ago: executing program 2 (id=328): r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x6, @remote, 0x6}, 0x1c) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) capset(0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f00000001c0)={0x20080522, r5}, 0x0) fchown(r4, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x12}, 0x100, 0x2, 0xff, 0xd, 0x6, 0x4}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r11, 0x1, 0x1d, 0x0, 0x0) vmsplice(r9, &(0x7f0000001100)=[{&(0x7f0000000000)="8b21097e", 0x4}, {0x0}], 0x2, 0x8) splice(r1, 0x0, r10, 0x0, 0xaf4, 0xd) 7m1.165928916s ago: executing program 2 (id=330): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) (async, rerun: 64) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 64) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') poll(&(0x7f0000000040)=[{r1, 0x1000}], 0x1, 0xc) (async, rerun: 32) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async, rerun: 32) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (async) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) (async, rerun: 32) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 32) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="0207782702"], 0x10}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000ffdbdf2501000000180001801400020076657468305f746f5f68737200000c00"], 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x4000004) (async) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'veth0_to_bridge\x00', &(0x7f0000000180)=@ethtool_modinfo={0x42, 0x0, 0x8}}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x15, 0x0, 0x33}, @flat=@weak_binder={0x77622a85, 0x1, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) (async, rerun: 32) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x7) (rerun: 32) 7m0.997900339s ago: executing program 2 (id=332): r0 = socket$nl_audit(0x10, 0x3, 0x9) clock_gettime(0x4, &(0x7f0000000580)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000007380)=[{{0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=""/64, 0x40}, 0x4}, {{&(0x7f0000000440)=@alg, 0x80, &(0x7f0000006680)=[{&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000000600)=""/87, 0x57}, {&(0x7f0000000f80)=""/156, 0x9c}, {&(0x7f0000006700)=""/184, 0xb8}, {&(0x7f0000006440)=""/170, 0xaa}, {&(0x7f0000006500)=""/86, 0x56}, {&(0x7f0000006580)=""/214, 0xd6}], 0x8, &(0x7f00000006c0)=""/189, 0xbd}, 0x6}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000780)=""/170, 0xaa}, {&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000007500)=""/208, 0xd0}, {&(0x7f0000000940)=""/59, 0x3b}], 0x4, &(0x7f00000009c0)=""/69, 0x45}, 0x4000004}, {{&(0x7f0000000a40)=@nfc, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000001c0)=""/36, 0x24}, {&(0x7f0000000880)=""/175, 0xaf}, {&(0x7f0000000bc0)=""/31, 0x1f}, {&(0x7f0000000c00)=""/143, 0x8f}], 0x4, &(0x7f0000000ac0)=""/241, 0xf1}, 0x9}, {{&(0x7f0000000e00)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000001080)=[{&(0x7f0000003180)=""/4078, 0xfee}, {&(0x7f0000004180)=""/4096, 0x1000}, {&(0x7f0000000e80)=""/140, 0x8c}, {&(0x7f00000004c0)=""/38, 0x26}, {&(0x7f0000005180)=""/4096, 0x1000}, {&(0x7f0000000d00)=""/227, 0xe3}, {&(0x7f0000006180)=""/213, 0xd5}, {&(0x7f0000006280)=""/204, 0xcc}], 0x8, &(0x7f0000007600)=""/4112, 0x1010}, 0x7f}], 0x5, 0x2000, &(0x7f00000074c0)={r1, r2+60000000}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f00000002c0)=0x3000) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x3, 0x6, 0x1000, 0x2000, &(0x7f0000001000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r6, 0x0, 0x41, &(0x7f0000001080)=ANY=[@ANYRES64=r2], 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, 0xffffffffffffffff, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x900}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x5, 0x0, 0x11}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000380)="ec5879bcae4ebf1dcf85134d8b5e05505209abff506d2f73957fa39fbdbc84a722e85b7aa2dd37976eaa5b831df72f213796242fbd571621cc5d7cdf0257b01ea7a5119e8f9d6ed2b82920a14886fc0c"}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20102, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x140, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="21012cbd7000000000001400000008000300", @ANYRES32=r14, @ANYBLOB="0a0006000802110000010000060010004a020000"], 0x30}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) 7m0.961693159s ago: executing program 32 (id=332): r0 = socket$nl_audit(0x10, 0x3, 0x9) clock_gettime(0x4, &(0x7f0000000580)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000007380)=[{{0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=""/64, 0x40}, 0x4}, {{&(0x7f0000000440)=@alg, 0x80, &(0x7f0000006680)=[{&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000000600)=""/87, 0x57}, {&(0x7f0000000f80)=""/156, 0x9c}, {&(0x7f0000006700)=""/184, 0xb8}, {&(0x7f0000006440)=""/170, 0xaa}, {&(0x7f0000006500)=""/86, 0x56}, {&(0x7f0000006580)=""/214, 0xd6}], 0x8, &(0x7f00000006c0)=""/189, 0xbd}, 0x6}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000780)=""/170, 0xaa}, {&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000007500)=""/208, 0xd0}, {&(0x7f0000000940)=""/59, 0x3b}], 0x4, &(0x7f00000009c0)=""/69, 0x45}, 0x4000004}, {{&(0x7f0000000a40)=@nfc, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000001c0)=""/36, 0x24}, {&(0x7f0000000880)=""/175, 0xaf}, {&(0x7f0000000bc0)=""/31, 0x1f}, {&(0x7f0000000c00)=""/143, 0x8f}], 0x4, &(0x7f0000000ac0)=""/241, 0xf1}, 0x9}, {{&(0x7f0000000e00)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000001080)=[{&(0x7f0000003180)=""/4078, 0xfee}, {&(0x7f0000004180)=""/4096, 0x1000}, {&(0x7f0000000e80)=""/140, 0x8c}, {&(0x7f00000004c0)=""/38, 0x26}, {&(0x7f0000005180)=""/4096, 0x1000}, {&(0x7f0000000d00)=""/227, 0xe3}, {&(0x7f0000006180)=""/213, 0xd5}, {&(0x7f0000006280)=""/204, 0xcc}], 0x8, &(0x7f0000007600)=""/4112, 0x1010}, 0x7f}], 0x5, 0x2000, &(0x7f00000074c0)={r1, r2+60000000}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f00000002c0)=0x3000) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x3, 0x6, 0x1000, 0x2000, &(0x7f0000001000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r6, 0x0, 0x41, &(0x7f0000001080)=ANY=[@ANYRES64=r2], 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, 0xffffffffffffffff, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x900}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}, @fda={0x66646185, 0x5, 0x0, 0x11}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000380)="ec5879bcae4ebf1dcf85134d8b5e05505209abff506d2f73957fa39fbdbc84a722e85b7aa2dd37976eaa5b831df72f213796242fbd571621cc5d7cdf0257b01ea7a5119e8f9d6ed2b82920a14886fc0c"}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20102, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x140, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="21012cbd7000000000001400000008000300", @ANYRES32=r14, @ANYBLOB="0a0006000802110000010000060010004a020000"], 0x30}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) 1m58.095068584s ago: executing program 4 (id=4241): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xd9) creat(&(0x7f0000001380)='./file0\x00', 0x4) pipe(&(0x7f0000000040)) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='msdos\x00', 0x8000, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='msdos\x00', 0x8000, 0x0) 1m58.093947255s ago: executing program 4 (id=4242): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fchdir(r1) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000040)={0x6, 0x1}) (async) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='memory.numa_stat\x00', 0x0, 0x0) (async) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='ncpfs\x00', 0x41002, 0x0) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000180), 0x4) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x300, 0x70bd2a, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) (async) r4 = accept(r0, &(0x7f00000002c0)=@can, &(0x7f0000000340)=0x80) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000380)) (async) fstat(r4, &(0x7f00000003c0)) (async) r5 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000440)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x65, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xd8, 0x40, 0xe8, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x3, 0x9, {0x9, 0x21, 0xfff8, 0x38, 0x1, {0x22, 0x258}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x80, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xc, 0x81, 0x6}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x300, 0x3, 0x40, 0x8, 0x10, 0x9}, 0x64, &(0x7f00000004c0)={0x5, 0xf, 0x64, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x5, 0x2, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0x0, 0x39, 0xfffc, 0x5}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x1, 0x4, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0x3, 0x10}, @generic={0x3c, 0x10, 0xa, "a887c5546c43704500351d2fab0c2f9c3a2ad9ce5974fb4c7e372ec3626c8e680ea25972838eeb4e2ecdc928d5678347940c342c1219b24b34"}]}, 0x2, [{0xb0, &(0x7f0000000540)=@string={0xb0, 0x3, "372811892cd0eb2b6cd962f2f0c0ccfe3d97c35b0f7ec3d7d43aacc56d3ccb477597673a219d80faadd24c6ac726aa5a53d1680ff7cf1f3ae65d2c6d2ae55ec8feb9585f50fd8496425d79a9cea1f440875b0fc41dd53d42e3bdfa29bc79ab2d0ace4864b5e5708b390607915473f17c837e820cbdfd333e4cb522588b45c6bf3e9e47d471a9d648f035b32914fafe60405f3246b22ff9354087f523d9462e39eb521563e1df5546fcf8317dedb4"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x200a}}]}) syz_usb_control_io$hid(r5, &(0x7f0000000880)={0x24, &(0x7f0000000680)={0x0, 0x11, 0xfb, {0xfb, 0x22, "1294305792a3c016ad51039bff6eea6c0d40533c994b23ab7c3c9eff8d47d78c9b90f1413c55468fa99d4d41c544f155fcd03b3371a688e69aa3953c717a3afb1429067ae0d77e9dd52370a797306e24025bf283decd1fa0ddd67995bf041f8ef5167d158b2b04e5393db0df9f10047c47955be712f858af745ffac01bc140c0c9a0d48e2905ecddb6f1c9b407a92e28c76400af36696532fd170485ee21a6ca59cc2970c271cc867231614edd3fe6f5a6f039766b31a90184291c33401283111c7441554d853f9e7dc1a0e9a63e92c85aa6a24487fa0ad15997c60db21f2d629d025da4c3111872c09ecea77cd91ca72f5a8d9dd2cbc63dbb"}}, &(0x7f00000007c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1809}}, &(0x7f0000000800)={0x0, 0x22, 0x1d, {[@main=@item_4={0x3, 0x0, 0xc, "e5225705"}, @global=@item_4={0x3, 0x1, 0x9, "ce03ecd6"}, @local=@item_012={0x2, 0x2, 0x6, "3318"}, @local=@item_4={0x3, 0x2, 0xa, "7fc2b5cb"}, @main=@item_012={0x2, 0x0, 0xb, "7896"}, @local=@item_012={0x2, 0x2, 0x3, "8414"}, @main=@item_4={0x3, 0x0, 0x9, "ede86a12"}]}}, &(0x7f0000000840)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8001, 0x4, 0x1, {0x22, 0x8b}}}}, &(0x7f0000000b00)={0x2c, &(0x7f00000008c0)={0x40, 0x7, 0xa9, "72d9d093e328f2c691d5fe13f2d1d912295925fefb559b494a30248e31a0631d88de0851baa6f8b517608475a09e0cc3d5f9cfabdf7dee9b50095231575b9e82bbb024fd46c05a41058f8f4df1e9ffbe30c8acc5991e221c763c039fe0e61a9eecce911eeda89cf0e18f0217ba9493a5641f3a2e38a674906010a306fd93b8726e9a4bd3e9f783692c776cacd580be8d7759efcd642d36714693abe6c50451531deac210cf15fd6919"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0xe}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000a00)={0x20, 0x1, 0x8c, "29e04ee58d8136d4c982320e91e5bce0a5c86021eb94c298d80dc5f31495fc3a8b0403e5826482a7bf668ceae9945ea776787ddaab4e20da52026595e6915ddf9767473c09f24f9ec75b241a1854bc8f230a95d95d33f74110aff3048bbf2234b6d7590576b0a631c937fc7891159f68d9263b0b462c8e216d174602994609b994a819d088b0041c856d2fa5"}, &(0x7f0000000ac0)={0x20, 0x3, 0x1, 0x5}}) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)={0x80002, 0x54, 0x8}, 0x18) (async) sendmsg$nl_netfilter(r2, &(0x7f0000000e00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x190, 0x2, 0xb, 0x301, 0x70bd2a, 0x25dfdbff, {0x1, 0x0, 0x7}, [@generic="6c90aa60de7791d786c123a790f53da04118189f56a2bfb4da29e8275136a2903be1f33b1730e8ea7eb63158e9fb3ad9b767dcfa9c31147579271cc8ce437c75fe895590363ea0a7ca5587e85a2408bee85df9e4207bcd6821b90e9a5fcc2d47cff636", @typed={0x9c, 0xa9, 0x0, 0x0, @binary="f835f658b500278992dbde19f8481d253cfac491811621038f61fe7c56c2904ed6daefe8e8b6bc111b88887430957e9a799e90c69d094a12e7f5c0a548e3b54725a9f87d3f2c4a3eb9c159d96e4149c527b249c34961c01865695774e7cfc7702c6d316a73c4fa6a78f19e3b5b4bd6915df4d6be1f1183e13807369066a38574e6d59cedd60a5ecdce14a4508c42c2fc4fd83880440e4ca5"}, @generic="10945d08b431feae98097a68726689d9de3b249ba2bf7b475045cb321fc57e2fe6bb09a9102a87b4dc339a9a1562ea6206d8a789b132a7344028d2a25b09240de2cd1f969960c19925", @typed={0x33, 0x105, 0x0, 0x0, @binary="9fe41b64bd8e4e81af23920107f428e1020211522844df1d0278bc3aba368a2dbbcecf667bf33c1e8f156a1dfc2da0"}]}, 0x190}}, 0x20000844) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000e40)={'pimreg1\x00', 0x400}) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = fcntl$dupfd(r6, 0x406, r0) fcntl$getownex(r7, 0x10, &(0x7f0000000e80)={0x0, 0x0}) ptrace$setregset(0x4205, r8, 0x6, &(0x7f0000000f80)={&(0x7f0000000ec0)="d183d2a78090631cb8fc9b4507d86cb3f95097277112613ee9732772c12ed4905540499c7c2b0f3be9ea0763df92bc2c524692f297773a9d475b1d429428afd25c970a33fdb120df5f21fae52ec7b20827400439d3504c948303290b22779c360b2e7bbfbee8d491cfe1fd340314310d368a4c7b29592acb713ee3048e3f75c808812eed92a332c4067335ab6017245094083c86e5", 0x95}) write$cgroup_freezer_state(r1, &(0x7f0000000fc0)='THAWED\x00', 0x7) (async) pread64(r1, &(0x7f0000001000)=""/4096, 0x1000, 0xe9) (async) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000002000)={0xd, 0x7}) (async) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000002040)) (async) chdir(&(0x7f0000002080)='./file0\x00') sendmsg$tipc(r0, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002440)=[{&(0x7f00000020c0)="609e183b8d2c2b19a1ce14f20884619f2a8a1aefabf114f046b716667b46fd06203dd50a6e3866eee13fcf7053e6ec6c2ba7c52e919b94720e880411a80918e6c1cbc363e3ad35770b5d103a353128a061f7c376ac234cf6f901f918df650832d37d405eb9e24e4a68ae5449b401d8a32cf205a972b7", 0x76}, {&(0x7f0000002140)="0c70338e5c448549df642dfb087c61e562d4dc9cc597e1c2d910dd6a6b90f46a4bbb76391a69ec89e9c6ab9e2d4a68b2ea07b56080c5fe2c79e866dacfb6db315e61297744d0ca1df177939f9c29239eb9a0b7e5eb5bd350196d72394f9a30d8a4711741da1cfc91db53c64712ea866f78435cbd57742b28e256bca177fc8f670ea99ecf8fc6a1e16f5b845ad15499ea9c5e392b4a7189d9c7429d203c0ae82c1deafffb35b79274286710005cb95bafbc86fb79768cd7584e42a73b095b41fc7efb5e0fd5a0b301dc2970617510b0d150eb156cd458cf0a3cb3a6aa4608dee305e85470891ef9f9f6c9474953a4dc5a16b9f6b3256de19e87", 0xf9}, {&(0x7f0000002240)="e15360aca698c77026c20777bc4745f30e3480ad35f65a3bf23cd7417532abbfee9ff39c83aa2ffade5ac0909435a7e89e6942154aaadc701f48319f911107b0d8009ab4476d0adf6ca23c9a638417e29a8e9eb0c32d4226ac48e4fc2b2701df1ac6824e692adf9aea799a491922eea027e23e629dabe54ced3b3320e1705c03cdf8b5f68c78028895deb86bd5210e1a9d552b51ab6a88b10b5e3569517bf6a589482c379f70f76dbaba6df4d444587d198b819e758f5fa0048a745525055cff592ba7e069f6e661a393d6400b7ac3d02e35ccf3e50a9fd665136c951d151f4c29d72046ce2413c4d14bb96e237740d2d65faaacf7", 0xf5}, {&(0x7f0000002340)="d229488414e674395d44ea94707c353cb02c8d1e7491e5c95cd035a07b16ecae5c93eeae3dead9e187814209b1479e6454d9fda205d81558f565aa51acbddf61227fbbb7540be2cb349563430f628a4279511cafdfefcaeafe2368490990220bb70fce2fa00df7cf373788ab20f6bc9f6a3291c4605822095b7cabe52246c6a532cb3b745af78d5a311c4c891d14e500b5dac51de78d0f894d36ab9ffd42d8824d930b32533cfcded079868ab2d4e2cd81d67b26e0e41a92ceade7e6d75756e3c88e0b8662477ea8174a6426108cd03abd001b4fa9ec4c6fea", 0xd9}], 0x4, &(0x7f0000002480)="c6b33dd5cebcb997c71c3acdbe9cdb9c83da2e9c07f5dbf1a270f1a0c2c1bda5084f5e", 0x23, 0x840}, 0x1) openat$cgroup_type(r1, &(0x7f0000002500), 0x2, 0x0) (async) getrusage(0x0, &(0x7f0000002540)) connect$inet6(r1, &(0x7f0000002600)={0xa, 0x4e22, 0x0, @mcast2, 0x8}, 0x1c) (async) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000002680)={'binder1\x00'}) 1m54.863682124s ago: executing program 4 (id=4280): mknodat(0xffffffffffffffff, 0x0, 0xe10a, 0x1) (async) mknodat(0xffffffffffffffff, 0x0, 0xe10a, 0x1) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$incfs(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='./bus\x00', &(0x7f0000000200), 0xa00400, &(0x7f0000000240)={[{@rlog_pages={'rlog_pages', 0x3d, 0x9000000000000000}}]}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') lseek(r2, 0xfffffffffffff000, 0x0) (async) lseek(r2, 0xfffffffffffff000, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x8, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m54.843029714s ago: executing program 4 (id=4281): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mlockall(0x0) (async) mlockall(0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) creat(0x0, 0xc8) (async) creat(0x0, 0xc8) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='erofs\x00', 0x8800, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setresgid(0x0, 0x0, 0xee01) lstat(&(0x7f0000000280)='./file0\x00', 0x0) ptrace(0x10, r2) (async) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024f01c173a49b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$setregset(0x4205, r2, 0x1, &(0x7f0000000380)={&(0x7f0000000480)="f62611ea80d4ffee0646fcbd7df0b9db92702397a47d70db8c0a7446d7d7e9a08b482294c994333b694d606fce4ea5be9f1c841f792edc5548b6d53f1b1708db242761ec69731aaaf2c48c73c0f75e0c1f8c1ae7740a92a64ea417fe", 0x5c}) clock_gettime(0xb, &(0x7f0000004e00)) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x1) r5 = dup(r4) getpid() ioctl$KVM_CHECK_EXTENSION_VM(r5, 0xae03, 0x0) (async) ioctl$KVM_CHECK_EXTENSION_VM(r5, 0xae03, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 1m54.751630406s ago: executing program 4 (id=4282): mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @multicast1}, 0xc) mount$9p_xen(&(0x7f0000000140), &(0x7f00000001c0)='./file2\x00', &(0x7f0000000200), 0x4048, &(0x7f0000000240)={'trans=xen,', {[{@cache_loose}, {@version_9p2000}, {@noxattr}, {@afid={'afid', 0x3d, 0x8}}, {@uname={'uname', 0x3d, '*'}}, {@cache_fscache}, {@aname={'aname', 0x3d, 'memory'}}], [{@fowner_lt={'fowner<', r1}}]}}) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file2'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000000f00)={0x2020}, 0x2020) 1m54.681220757s ago: executing program 4 (id=4284): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) preadv2(r0, &(0x7f0000000040)=[{}], 0x1, 0x9, 0x80, 0x10) (async) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x140, 0x13, 0x2, 0x70bd25, 0x25dfdbfb, {0x1d, 0x89, 0x8, 0x80, {0x4e23, 0x4e22, [0x10001, 0xfffffdc3, 0x2, 0x2000000], [0x5, 0x4, 0x5, 0x4], r2, [0x81, 0x7a139296]}, 0xda, 0x2}, [@INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "0292d92a0ec684d964c75c00af4c162eba40503c4972e76ccfb7c6df0480b2622d6e4bc33ae8a6d0b44ee9412decef4f7b7487c1ce80e8b8fb9599f857ae88a0026ba8b2638df4363e1e7faf82c79cd82c605bf24a1382f6e27af64923a17414cc306e1db0dddce03783a69b80aa7cd480ba2e6b5727e89d232f103b8fc53085f40616e8f7e98fa55eddbfbda86f61c1c7254aa3d59ad6e6bf050aaaa6e9e7e1694c9054ca905cf76e162578545251937a380153c77a5686f7eface8db0aa45f92106981c019e1ab8ed1f475498a1eda943f5e70356f237b97172487cb46afe675c9c85126d97ded6ca6f2233a0a"}]}, 0x140}, 0x1, 0x0, 0x0, 0x2000c800}, 0x4000) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e24, @remote}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000340)=0x200000, 0x4) r5 = socket$xdp(0x2c, 0x3, 0x0) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r6, &(0x7f00000003c0)={0x2c, 0x6, 0x0, {0x1, 0x6, 0x3, 0x0, '$\\+'}}, 0x2c) (async) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000400), 0x401c0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r7, 0x40087705, &(0x7f0000000440)={0x0, 0x787}) (async) r8 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) read$FUSE(r8, &(0x7f00000004c0)={0x2020}, 0x2020) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000002500)=0x300020, 0x4) close_range(r3, r0, 0x0) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r8, &(0x7f0000002600)={&(0x7f0000002540), 0xc, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}}, 0x40000) (async) r9 = socket$inet(0x2, 0x6, 0x40) setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f0000002680)={'filter\x00', 0x7, 0x4, 0x3d0, 0xf0, 0x200, 0xf0, 0x2e8, 0x2e8, 0x2e8, 0x4, &(0x7f0000002640), {[{{@arp={@dev={0xac, 0x14, 0x14, 0x15}, @multicast1, 0x0, 0xff, 0xb, 0x3, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x1, 0x369d, 0x1, 0x4, 0x6, 0x8, 'wlan0\x00', 'bond0\x00', {}, {0xff}, 0x0, 0x90}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0x2, 0x8001, 0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @empty, @broadcast, @private=0xa010100, 0x1, 0x1}}}, {{@arp={@empty, @private=0xa010102, 0xff000000, 0xff, 0xd, 0x0, {@mac=@remote, {[0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x27, 0x0, 0x7, 0x9, 0x9, 0x6, 'wlan1\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x0, 0x222}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7ff, 0x9}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f0000002ac0)=0x2) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r9, 0x8982, &(0x7f0000002b00)={0x0, 'team_slave_1\x00', {0x8001}, 0xb}) r10 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000002b40), 0x1, 0x0) clock_gettime(0x0, &(0x7f0000002bc0)={0x0, 0x0}) ppoll(&(0x7f0000002b80)=[{r5, 0x8180}, {r4, 0x5040}, {r4, 0x202}, {r10, 0x81}, {r5, 0x8000}], 0x5, &(0x7f0000002c00)={r11, r12+60000000}, &(0x7f0000002c40)={[0x4]}, 0x8) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002cc0), r8) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f0000002d80)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x38, r13, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x8086) 1m54.627182078s ago: executing program 33 (id=4284): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) preadv2(r0, &(0x7f0000000040)=[{}], 0x1, 0x9, 0x80, 0x10) (async) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x140, 0x13, 0x2, 0x70bd25, 0x25dfdbfb, {0x1d, 0x89, 0x8, 0x80, {0x4e23, 0x4e22, [0x10001, 0xfffffdc3, 0x2, 0x2000000], [0x5, 0x4, 0x5, 0x4], r2, [0x81, 0x7a139296]}, 0xda, 0x2}, [@INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "0292d92a0ec684d964c75c00af4c162eba40503c4972e76ccfb7c6df0480b2622d6e4bc33ae8a6d0b44ee9412decef4f7b7487c1ce80e8b8fb9599f857ae88a0026ba8b2638df4363e1e7faf82c79cd82c605bf24a1382f6e27af64923a17414cc306e1db0dddce03783a69b80aa7cd480ba2e6b5727e89d232f103b8fc53085f40616e8f7e98fa55eddbfbda86f61c1c7254aa3d59ad6e6bf050aaaa6e9e7e1694c9054ca905cf76e162578545251937a380153c77a5686f7eface8db0aa45f92106981c019e1ab8ed1f475498a1eda943f5e70356f237b97172487cb46afe675c9c85126d97ded6ca6f2233a0a"}]}, 0x140}, 0x1, 0x0, 0x0, 0x2000c800}, 0x4000) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e24, @remote}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000340)=0x200000, 0x4) r5 = socket$xdp(0x2c, 0x3, 0x0) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r6, &(0x7f00000003c0)={0x2c, 0x6, 0x0, {0x1, 0x6, 0x3, 0x0, '$\\+'}}, 0x2c) (async) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000400), 0x401c0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r7, 0x40087705, &(0x7f0000000440)={0x0, 0x787}) (async) r8 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) read$FUSE(r8, &(0x7f00000004c0)={0x2020}, 0x2020) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000002500)=0x300020, 0x4) close_range(r3, r0, 0x0) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r8, &(0x7f0000002600)={&(0x7f0000002540), 0xc, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}}, 0x40000) (async) r9 = socket$inet(0x2, 0x6, 0x40) setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f0000002680)={'filter\x00', 0x7, 0x4, 0x3d0, 0xf0, 0x200, 0xf0, 0x2e8, 0x2e8, 0x2e8, 0x4, &(0x7f0000002640), {[{{@arp={@dev={0xac, 0x14, 0x14, 0x15}, @multicast1, 0x0, 0xff, 0xb, 0x3, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x1, 0x369d, 0x1, 0x4, 0x6, 0x8, 'wlan0\x00', 'bond0\x00', {}, {0xff}, 0x0, 0x90}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0x2, 0x8001, 0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @empty, @broadcast, @private=0xa010100, 0x1, 0x1}}}, {{@arp={@empty, @private=0xa010102, 0xff000000, 0xff, 0xd, 0x0, {@mac=@remote, {[0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x27, 0x0, 0x7, 0x9, 0x9, 0x6, 'wlan1\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x0, 0x222}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7ff, 0x9}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f0000002ac0)=0x2) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r9, 0x8982, &(0x7f0000002b00)={0x0, 'team_slave_1\x00', {0x8001}, 0xb}) r10 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000002b40), 0x1, 0x0) clock_gettime(0x0, &(0x7f0000002bc0)={0x0, 0x0}) ppoll(&(0x7f0000002b80)=[{r5, 0x8180}, {r4, 0x5040}, {r4, 0x202}, {r10, 0x81}, {r5, 0x8000}], 0x5, &(0x7f0000002c00)={r11, r12+60000000}, &(0x7f0000002c40)={[0x4]}, 0x8) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002cc0), r8) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f0000002d80)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x38, r13, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x8086) 7.371572877s ago: executing program 0 (id=5783): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b0003010000000904000000010100000a2401000000020102092408000000004c58062404000052072405000053f10b24050000133b9bda531c092405fc0596efc3590904010000010200000904010101010200000905010900000000000725010006000009040200000102"], 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000001100)={0x14, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io(r1, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003040000000003"], 0x0, 0x0, 0x0}, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r2, 0x5408, &(0x7f0000000040)={0x2000, 0x0, 0x0, 0x0, 0x0, "23f50000adb4004408020e90d1beaa82dc1ecf", 0x3}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000002c0)={0x2c, &(0x7f0000000140)={0x0, 0x4, 0xa7, {0xa7, 0x6, "84d378f7d45158af1ac58adf4a87783a167fdfb1e10aa1c1cbd4771fafbf8929a42c9216061491045118f965885ae7cedefe8a6cab60ca1a4dcb37bd69acbe20dc7444dba8a9e7b02bace09a4b1f5f176de9abc5198d0e6a2afb6ebf03858d49353aa98c76384c3bffb08e88dcaa8695be4852e1f5fb7e8d3a4c022177dc4913deb1eecf941efe15c9b334d569e3acbcd49b816f14d064c3dc767ebc5c1a3b093f92c60649"}}, &(0x7f00000000c0)={0x0, 0x3, 0x25, @string={0x25, 0x3, "7c09d54397672cf5bc5aecfc027869b446cfb56d6e3a17763df75545f72dc18bb34f92"}}, &(0x7f0000000200)=ANY=[@ANYBLOB="000f32000000050f3200050a100302c267b0c7199b831984a50c4d6bb35ec30300200500000710ffffffffffffffff000b00005efe000710"], &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfc, 0x3, 0xc, 0x2, "9958f711", "105c070b"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x0, 0x74, 0xff, 0x7, 0x8, 0x100}}}, &(0x7f0000000d80)={0x84, &(0x7f0000000900)={0x20, 0x18, 0xfa, "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"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000a80)={0x20, 0x0, 0x8, {0x0, 0x8, [0xf0]}}, &(0x7f0000000ac0)={0x40, 0x7, 0x2, 0xf46}, &(0x7f0000000b00)={0x40, 0x9, 0x1}, &(0x7f0000000b40)={0x40, 0xb, 0x2, "f66c"}, &(0x7f0000000b80)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000bc0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000c00)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000c40)={0x40, 0x19, 0x2, "984f"}, &(0x7f0000000c80)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000cc0)={0x40, 0x1c, 0x1, 0x10}, &(0x7f0000000d00)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000d40)={0x40, 0x21, 0x1, 0x1f}}) 4.137069146s ago: executing program 0 (id=5848): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4140aecd, &(0x7f0000000000)) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xffffffc1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x200000e, 0x100010, r3, 0xcfee8000) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f0000002600)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') syz_usb_connect(0x0, 0x4b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100003f9aab106d04f0080d5001020301090239000100001647090400000308066200090507"], 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x7, 0x0, [{0xa66, 0x0, 0xfffffffffffffff1}, {0xa62, 0x0, 0x8}, {0x80c, 0x0, 0x8}, {0xabe, 0x0, 0x4}, {0x287, 0x0, 0x1}, {0x64d, 0x0, 0x5}, {0x233, 0x0, 0x2}]}) 2.661792519s ago: executing program 0 (id=5864): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="280000002d000100fcffffff0000000008000000", @ANYRES32=0x0, @ANYBLOB="0a002500000400018000"], 0x28}], 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0xfffffffc, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000980)="ec5879bcae4ebf1dcf85134d8b5e05505209abff506d2f7395ee7ebb6f09b6e07fa39fbdbc84a722e85b7aa2dd37976eaa5b831df72f213796242fbd571621cc5d7cdf0257b01ea7a5119e8f9d6ed2b8"}) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="280000002d000100fcffffff0000000008000000", @ANYRES32=0x0, @ANYBLOB="0a002500000400018000"], 0x28}], 0x1, 0x0, 0x0, 0x4}, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, 0x0}, 0x10}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0xfffffffc, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000980)="ec5879bcae4ebf1dcf85134d8b5e05505209abff506d2f7395ee7ebb6f09b6e07fa39fbdbc84a722e85b7aa2dd37976eaa5b831df72f213796242fbd571621cc5d7cdf0257b01ea7a5119e8f9d6ed2b8"}) (async) 2.523597541s ago: executing program 0 (id=5866): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20000000, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000080)=@x86={0xa0, 0xf9, 0x5, 0x0, 0x3, 0x3, 0xb, 0x1, 0xf8, 0x9, 0x7, 0x3, 0x0, 0x9d, 0x1, 0x7, 0x6, 0xd7, 0xd, '\x00', 0x4, 0x80000caa}) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20000000, 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) dup(r3) (async) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000080)=@x86={0xa0, 0xf9, 0x5, 0x0, 0x3, 0x3, 0xb, 0x1, 0xf8, 0x9, 0x7, 0x3, 0x0, 0x9d, 0x1, 0x7, 0x6, 0xd7, 0xd, '\x00', 0x4, 0x80000caa}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 2.459239702s ago: executing program 0 (id=5868): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x15, 0x0, 0x33}, @flat=@weak_binder={0x77622a85, 0x1, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000140)) 2.351752344s ago: executing program 0 (id=5871): r0 = socket(0x11, 0x99d5a3c95a4d8557, 0xfffffffe) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x0) (async) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0114e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa00090582024000000000"], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000680)="f2a55daca8be3ea3f9148611085b8afe4bfdfa4f90bfab7b0790316e6228095a2a53302e1651d6b62e8aaadce24a10f0c045be53c2744996118a3bd9b8a85495ed38b6dbe6efa666491dc7ea35c2210820f76455577a206f4211bf5723a29a26faf0dd53d1cf946bae1678c12d7ae4182224e02eed857330867657ac9acab9ad76d456ed4a52088b343483d74b82a271c585e79ceed8b7b23fa8e9a4f0f758ecfa4c6a539459abcf79d1d3f21e5217b0955453efd146c4e0ce3fc1ac0398559645e52ab84b7936956eb6dce8181e152f68c9893a3a476f38d7c7bb9f62505e4da4198f4413821060d366476ada5426779b76ce263dace60968b7cf1fde44573db39415c258bfd5c0fdf61c649f686c3736b00a883d1e3d827b475c63ff0102c374cf62983384cb89d61c19e69528092e492d3539f12459444c3ba6af2eea2ac39ebf411236049bb1dcd16bd242dd1e67e441816d21deef1956795c8710ed58b05ae98be8d9c4798686142bc58e0c4925db68a54c4884fd973315cff1f6b2d29ecfa933ada12b75dde54f64220c39eab9eb015afe9e131a675c6317fca8c5fe9f4ae70d847173a6240ce82a0890222f22cbfba56192191eb96a99b1bb12fc1bd8a3159705c1a6b3ab7cc6a030eb213700ba129e816f0d33323974456a4766e4d76b789647a4b73d525beecefa37d8a9dfce43aeaefbcb7db16c868636e837878f9bc4e85edd8e636cc8dca84350752d7a7e3c0b858c81fa22dfa80acb54799c2b4cb5452381d5e27c1af9f630479001b64ce332e2b6a45dca9c76a9b9bcdac1c090080bdf488a4edfd9757b8134092de083565e979c4e4e3c3b16901ca2084a100d41ed292b6081e82ddc8a65e39beba3ad55381ca7843f8117b8838eee976674780c97bb9e1e3b2b22ddf2b23b06a393e48efcf522ebc1866821281dcb61cfd7f1a2dd40ee44796485234e4dbfcacd1f96ae3d65ff91e2e936cc3f4eaa2b482a13a94f76302785cccfe25bdf35f7143efc8343858b34d63922d4723afaa5ceaed51100e8d478986767bc4c90ecead8a95c521584205b697dfa4492bef18fc5a32b38964207a69bf7833f79a489ffe71ce4eeb3b9a4a26f32ac8a88abdca60b7260a9f557ffc31669d8bc9022e969a804f5d5f0806bf10eba43d5995981a6dda6d0dc284665c7053031e4e1840ee2525c365f2f488b2e94b697a9955ac68c47e1759918b757710e4c33587b2f850e4080c118ca2b4769e3fd308a408a67e55e5f730fed6ca0730e159d309e18b6f8c6b0a2ae4589dff8638767c98d219c65ca415225a032fabd9d9e58d3f36bfae9c8b3187210ff1fdd5dd0dde1ab5f3a187a270822961629781869fd6292cd5af4502492b8f697fb2ebeb8e29fd351910895e3e73031e5b00011bc8886f67f74e45ebaaf300f9efbeedff4cb7eb9f455eb8922916ad786f7c6807666244c23e121b2909fd099295b2560059035fa8ca0a5d88b317bf4745f574debf84cba74cd13a7c585ff2a656432f54fdd1e26d888ce41137d8b1d9437a84369a811d0d1312a85abe97e8a2411e27871b7b71ac9bb9572ed211ebd0cd7ee9b5d923fede6cff407c51d801ea5385293eef43d23cfa8213a8d36073b4c012ae5fdf727ba871a699cab43a6f2a311fe3daa8b47ea5bf277b857b8ad8e8d142dd83cfde34ac22aca464d97b0bd3c8149fad9b4e8f0957344fad6f5069c3c5fa1c58bad68478efa25bb287c413f3e9b69fa302181f08065c069c9302a7494b6365ae195d5520f58349b7971e42654d072877addb1a4c2e044bc505d8c71fde2755364181acb78be230a20d0ced0d618daafb742a573f64e2a4bc53aee47ca50e0f230e8eb153083b5e3d50e74017fa935916fc06b86b5199bc17cd685e7feddfd9a5c0c2aae12c260789e6692103df0a1263ead3bd0c260f6ceb0e480c191caacd9fcb0305ba4c9a3b256dcd4d861af462047e71bebc98cda66686e12d71e684ebb6caa85600d39512530632687a73e0fe529d291803b2df80f6d876bec576a162e6f8e6cccf93e44d4efb7e7f619bca8e46fe6923d114e72acbbe6b06814ae90952e31301775a4b4c5bbeec032e4a5439ef615edf2ae7459842f376aaee0b1a97f9860c099a7782c710b7876b4538c19bec1aa23f6ef742276ed9f121621126e11df4dd11c9eaba9f8d5c36d8b90db40463046c3790590394b134367e5fa4f3144ad19d573cdeb9f4ede7e308643f80f99d5cfbb3da6381998ca064059b180baf219f6b7eafb99785671ade624e3edbdf266dbc51e04fe4c820a083e19080470188c63fa5fb1e313876d817ea91db72bb16a32abbdfc49a12ee3d2d04937b9fc321993a290b8dc33a0ec6799783c505e9d998ad05de8dc7b65a3bc80bbbf5082798e3aa262b266b2a3f9eb118ffd39e388e626a936878fb032f50e74f4ce08580577aed3790d055637ca3c0555a066417e896c5500c096df41fbc22a0c330f8b40961dd0740c181104c8d52a0dbfdeef530bdf4b1c8c1f318329b90604c8816456bba5f5e520b9bb700e9e5c4f986a0d47c6c73e6790e2a67feddb5fa9eb31a0cbf3998e52742b4c61c85582a580634961662e0955d98e54687f09f2c53c7a52f12eaa22cb95dbd3930aae2c942a240735d0cb9b79cb4056c8b4fe1ee4075940220a80a63ddd28096c53d9d81532e2b3275b32d6f1addb2fd8c15cc949fafdaa5b9a5547db40b12c763d58d34ff36d4a6cf2851a58aa549eb077724f975539ebbaaac339e31f495419cc35cdbeab6076c027c90b64c3a835638879ada35aaa13e03916824dff2b41070ecae6d6a314299fed92999c05e86cbea6dd1423bdee21ae280ecc623912bc0fa4224ad14b43f4b413279e0ba105277e8b34c28178d60c5ee277ab445ad1f3203b11af1fc07165d43c4ee3063493657756be0670fd28ff3b79f6dfb30b44a7626dae0e434f2ed097e1e18b3dc6cdb07b99320362562ae2e2c126c7b0ce06ff5fe0f6bd45515638149b51a0113fb852c1321dc54ea79935e682a1e7392574382b8b218aaebf47a07169cefaacce17731cafbbbed2646327614030a5a4dc4d2a0d56f2e20c410997802b5593ee145a4af77d7eb285d0ae606463a96f16f122aa105d5e963385122b52956fe23de16ccc5e220a4fd5c31b7902242128bd48d630a2e50623ca5b855c7d12e4d47e97a05925d9de141e8fa047433390235279398858253f5550741c8cba38f96cb53eb5775fcc25dd0921cdbc82efb58a507254a8216a9dc4c0ba5c5ef2848bae33d40b03e82fb0067e281977dd8310c7f00b8acb30b35c13a6d73fa788a8cef6a049ea85a32597ba4253db6f66b4b1559855d8d27851c340c240467dedc10d4354cfff8a2919e7fa85c7b6acf4ba9137c1cafb2860608e6c5eb8b4e0fcadc108781ccbf42607eacb76e06013930af7206ed71a783b7131603f36aec48d8f4a867f3230b5aa1648b71f8794fac52a4d2029c9e8ed54a5a912dda9d7e3302ffe223b5648ea5f0e7b439d8dc63536d33cacbf65ead82038fb1f81b87743d434fa12d69977aef2ffae4f1dc806e1f6d359c0142fc317977dad2e078cda0d39c84ee8cda618e900ca75d7aa8960d6367d71dd8bfe93cf439599e3886a978ee34cfb1a4df9a7b8319b17401e6ace3c970906d9ad5e151212b31686a99252b864701daccdd87748710dc77fd195f8edd097743030b205fa2ac56f6906854790828e53bdf79d7d565dac1345b8984da45f656d529d26c320c53bc806bbf72d8be9429d976b5430727f1e67ff6986b7ef59f28d7413bcc32d61d4152e1ba5b0f8f4749634e73c8896126e7493b769199086b457fb5485329096a1d48e0975bfa99617cb5e60e11ba920716bf7ba76dfbd66d1163848af8f737580992a02e52d379e04cde87ad6d90788dbf6ce83e4dfd88404da9eee23c48505e4e1bb91275f860c4c6648d46f79bb94153032feb5ec3e70e33764daef5028475e61a85dbdb5b26ca55fafbef8cbf1f14de46ea7a4e499b20574b86323294a9d37bee29ca4c74b4f7cdd85704eb83bebf1c734164ada95ecf5936f260761d06eb16217f3ed22b326c9032a6ee52a65c74fa3798ad342ca7f3818a3304b469ec1fb70d3ff15f63f29eb13a026a929ac507541472fd46e0a0ef90a8da3f5206025db320ed7a82d409727e92dbdfe426752f98f5781f61417ada5ca2f89c00e00e8d6ae37d4fde7065293f7abcb54105baa7d9c5a55c022b463274e8d295b0a7c0aaeddc9b06e57db6b27d98f5413a3b57a604c0f0a63f8c14295253cc0954f1579ba3c360432a86c67ce8b5ad11fd96e9c4e9b0142262125b0596d8f12bc5cce613e280ddcd6981c6d6f0672bb22dab037c3a1fe3523f2eb85a9521f15a9d0eb29ed6d66261ee8b8cead174b51dbd21b494b87dcaaa285bd1ea93cf2b434664fb8981fcfc0f057135d3add60153ef1619ae4890ca154c4583197a78f2801b46dfa60332ce4216126167b53659cd8047739d93c8f3ece518e4930c4c1ff3cbb3c5f66fcebd9818dd37a2ba6d8661b3e916eed5b04a3cf96fdd70c5819e0c3f96c2dc26395ddc98696a60063c2cc07176cadfb1b67cf21a2476cbfe695d18e75d59672845851824b0cf701bfb9e25ace899a71ae4750685db1cef99bed4b184105898f8f67b4bb5bec36d8ca0d78482c6283ed4ef49f1dc32f21bec9e0e003b0701070dca47702cfb83c7cb8ce702e667c3fcc36e284bb93feed84a74e224a955030d0eda4e4635a90ef5292cdf6efb059c620bbf14a06f66cbda84b066f1560d8ff2b0718030928920a84f111622eeffb65e9cb1e84ad2fc8f7959fb850666638c0fc8ce7ca560631fe91476587f3f3a6bbdfcfdad0c8bb142b8b33b689c622a1aff8bbd8330519a00a27b53410b777a72d279b1336b31679c80d9bccdfc7ecac43d0044ff2c583bcc7db36c7ff0a28c0bbd03bed691f9306cfbea3930e13a5d8671dcf1b7cc660cb3280600c3efb3bc54ad8bab42cbf8d5a05018e63af02bbf365cd7f85f07da8f5d8b72758ec8e7f94ff19e7115ec9d30892000753cd87491438322522f2862415c2196a9534f05e5aeeacca326499b633df8b09e12a7baa702b1d96e750db97ff25c713fc62c60010b17de0f808dc249c25158e5363460429130356c023f3735d3b48031d264884fd269b2d493e252ed9ec781303cdbefc50398df6a7f51dc99c38fd085ada2b169dfb62fac20abc418bdb51b05d0f58df1d932845f5f8b8808ac143d785915ce26ced36d4657ab9c33749471a6a697607303f4df65b038dc774b4a56eb00ad0288690cddda6a3b61eb4546e6a5fc9b4782221eefc200fca45aa8122243f6b128bdfb2a4ac0de9ce55aafcf7425f48fa389a2c47c49335ba920786abdaf47eed9429e0c0d12355867b800131d1071ce5faac5762aec4dae4607a08f5c3d45ae5f3f60f5399f54394cd91d5a9ae3c23aac5f5cd73041bb5afa5ad349f45ec3cf80445e1da65e64fae8c66f8c0b45f14a4cb8a9f40e594b464c95a75ef22079c8fa8871761f7f6dee723941b0429e320d6b9946d033fa44c0edd6b55a4468431333b3c1d70707a63891bb720e04c2aa5707b476ee907de25654d31de6d1ea74cc0b1a53e4f1a90fcee253e330d49469af234e298f44fd76fa34ccdbc3b587c9858716c190b6b7b083256be09535ebf177109e9821db4a7fca9e81c469cd4f252bc5a3302f0c8cde8cbdf7135b5d9ae068eb33ad76d7ce012026f5fd1b12b5217c0a165c2c7", 0x1000, 0x0, 0x0, 0x2c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000010140)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964ded28f79c862e674356af492b8377a759d8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bc10d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a9786cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732291a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b244645c68c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25ade162ba3c91bb844aaf6fd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614f1b749099e59560ae7060", 0x1000}}, 0x1006) r3 = epoll_create(0x3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) clock_gettime(0x0, &(0x7f00000001c0)) (async) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(r7, 0x0, &(0x7f0000000240)={{0x77359400}, {r8, r9+10000000}}, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r10 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000000000000810400"]) ppoll(&(0x7f0000000200)=[{r3, 0x26a}], 0x1, &(0x7f0000000240)={0x0, 0x989680}, 0x0, 0x0) mmap(&(0x7f00003dc000/0x4000)=nil, 0x4000, 0xc, 0x80010, r3, 0xfc2a9000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x8000000004) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0xfe37, 0x0) (async) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0xfe37, 0x0) listen(0xffffffffffffffff, 0x0) (async) listen(0xffffffffffffffff, 0x0) writev(r11, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000224effffffff", 0x58}], 0x1) 1.155894412s ago: executing program 5 (id=5883): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async, rerun: 32) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000004a00010200000000000000000a"], 0x164}}, 0x0) (async, rerun: 32) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r1) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001400)=ANY=[@ANYBLOB="440a000061b0ea6e89f991143402bd71f89fbfb6459c4032cc151705c383a529831a21f96838a7313cdc2db080301ad7b25d97ab8f659285d380a96e86c935fcd62ae352750d961449b493762d7f9cb2b8e241f1f2194c6d9b65cf7187007dfeb258b1b60f54e0b6774dafc4bd18297eae0934722e3b2746157c88dfab8e4fd312019f99f04998dcfb92690c", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYRES64=r0], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, 0xffffffffffffffff, 0x147a5000) (async, rerun: 32) r5 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x89e0, 0x0) (async) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r7 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r7) (async) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) (async) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async, rerun: 32) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (rerun: 32) bind$xdp(r8, &(0x7f00000001c0)={0x2c, 0x8, r10}, 0x10) (async) recvmsg(r7, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x10000) sendfile(0xffffffffffffffff, r6, 0x0, 0x6) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) futex(&(0x7f0000000140)=0x1, 0x2, 0x1, &(0x7f00000001c0)={r11, r12+60000000}, &(0x7f0000000200)=0x1, 0x0) (async) r13 = socket$xdp(0x2c, 0x3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00002ee000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000440)="64d9560066ba2100ecb96b0b0000b889545365ba5f89050f0f30c4427978d9c44225be0766b8a9000f00d00f013f0f23c0c421fd51567e66baf80cb8acde8f82ef66bafc0c66b8100066ef", 0x4b}], 0x1, 0x12, &(0x7f0000000100)=[@cstype0={0x4, 0x9}], 0x1) getsockopt$XDP_MMAP_OFFSETS(r13, 0x11b, 0x1, 0x0, &(0x7f0000000000)) (async) socket$xdp(0x2c, 0x3, 0x0) 1.075215284s ago: executing program 5 (id=5885): sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, 0x1, 0x8, 0x3, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0xb}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x60}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_REPLIED={0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x2804c048) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'gretap0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x20, 0x8, 0xb, 0x4, {{0xe, 0x4, 0x0, 0x9, 0x38, 0x66, 0x0, 0xa9, 0x29, 0x0, @private=0xa010101, @remote, {[@timestamp_addr={0x44, 0x24, 0xa8, 0x1, 0x5, [{@empty, 0x6}, {@multicast1, 0xae000000}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3be}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x10, 0x1, 0xcded, 0x62ae, {{0x49, 0x4, 0x1, 0x0, 0x124, 0x64, 0x0, 0x8, 0x4, 0x0, @empty, @private=0xa010102, {[@ssrr={0x89, 0x2b, 0x38, [@private=0xa010101, @remote, @empty, @rand_addr=0x64010100, @empty, @multicast1, @broadcast, @broadcast, @rand_addr=0x64010102, @remote]}, @ssrr={0x89, 0x1b, 0x94, [@rand_addr=0x64010102, @multicast2, @remote, @multicast1, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x84, 0x0, [{0x6, 0xd, "cf2ca59884412beeb43b5d"}, {0x0, 0x12, "cc77349bdd44bb1d45eb3430610c0edb"}, {0x5, 0x11, "5109bdcf0c4956cbbf5040eeb230f6"}, {0x7, 0xe, "ea3de882da960687acfc27cf"}, {0x1, 0xa, "e5dafe9f9563ed02"}, {0x2, 0xf, "454445663fc38509b92400c26b"}, {0x5, 0xb, "2ec6f01ffead5987e0"}, {0x2, 0x7, "54aeeca093"}, {0x2, 0x10, "308aaedd895ade8b4a139ca46bbc"}, {0x1, 0x5, "6c85f0"}]}, @end, @generic={0x89, 0x12, "350b56601ef9d6a885216fb125420144"}, @ra={0x94, 0x4}, @cipso={0x86, 0x2a, 0x3, [{0x2, 0xd, "1f58046905f0f88a55eab6"}, {0x7, 0x5, "8b8fde"}, {0x6, 0x12, "810831d3d638c4510d6757aeda7ae4fe"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000480)={@private2, 0x0}, &(0x7f00000004c0)=0x14) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x29, 0xfb, 0x6, 0x7, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x20, 0x0, 0x8b}}) (rerun: 32) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000005c0)={@multicast1, @multicast1, 0x0}, &(0x7f0000000600)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000700)={'gre0\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x7809, 0x0, 0x2501, 0x4ad6, {{0x12, 0x4, 0x0, 0x1, 0x48, 0x66, 0x0, 0x4, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @broadcast, {[@noop, @timestamp_prespec={0x44, 0x14, 0xf0, 0x3, 0x6, [{@empty, 0xb}, {@loopback, 0x6e}]}, @noop, @timestamp={0x44, 0x18, 0x2b, 0x0, 0xf, [0xfffffffb, 0xa9, 0x7, 0x8000, 0x2e3]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x1, 0x3, 0x8, @local, @rand_addr=' \x01\x00', 0x40, 0x20, 0xffff08b7, 0x3}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000840)={'syztnl2\x00', 0x0, 0x2f, 0x4, 0x8, 0x7f, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x1, 0x1, 0x5, 0x2}}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000e00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000900)={0x4a4, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r1}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r3}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa8fe}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf9ce}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x1fc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x4, 0x6, 0x3, 0x10000}, {0x3, 0x8, 0x34, 0x7}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x4a4}, 0x1, 0x0, 0x0, 0x1404c0c0}, 0x1) (async) r12 = openat$null(0xffffffffffffff9c, &(0x7f0000000e40), 0x4902c2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r12, 0x89f2, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000e80)={'ip6tnl0\x00', r11, 0x29, 0x80, 0x4, 0x4, 0x40, @rand_addr=' \x01\x00', @private0, 0x20, 0x80, 0x1000, 0x6}}) (async) sync_file_range(r12, 0x9, 0x9, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000f40)={0x5, 0x2, 0xf000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) (async, rerun: 64) sendmsg$NL80211_CMD_REQ_SET_REG(r12, &(0x7f0000001180)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001140)={&(0x7f0000000fc0)={0x144, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x71}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0xf4, 0x22, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffffd}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7f}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x80000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x400}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x10000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xcf4c}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x80000001}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10000}, @NL80211_ATTR_DFS_CAC_TIME={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffffd}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x80}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x10000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x144}}, 0x24000000) r13 = socket$nl_generic(0x10, 0x3, 0x10) (async) r14 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001200), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r13, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x40, r14, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x841}, 0x20000010) prctl$PR_SET_FPEMU(0xa, 0x3) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000001300)={@mcast1, 0xffffffff, 0x1, 0x3, 0x1, 0x9, 0xee2}, 0x20) (async) stat(&(0x7f0000001340)='./file0\x00', &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000400, r15, &(0x7f0000001400)) (async) ioctl$KVM_RUN(r12, 0xae80, 0x0) (async, rerun: 64) ioctl$BINDER_GET_EXTENDED_ERROR(r12, 0xc00c6211, &(0x7f0000001440)) (async, rerun: 64) ioctl$TUNSETIFINDEX(r12, 0x400454da, &(0x7f0000001480)=r3) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x80010, r12, 0x0) 1.074398493s ago: executing program 5 (id=5886): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, r2, 0x0) ioctl$MON_IOCX_GET(r2, 0x40189206, 0x0) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000002000/0x2000)=nil) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r4, 0x5761, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000f0"]) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r5, 0x4068aea3, &(0x7f0000000380)={0xbc, 0x0, 0x3}) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4d549b, 0x0, [0xffffffffffffffff, 0x7, 0x1000000, 0x0, 0x5, 0x3, 0xfffffffffffffffc, 0x800000]}) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="36d0e866b8970000000f23c80f21f866350c00a0000f23f89d0f326635000400000f302e8dcc0f23742e3b5753baf80466b8f494f78e66efbafc0c66b83ac80000666fda6509", 0x46}], 0x1, 0x1a, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r8, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x6}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x78}]}, 0x24}, 0x1, 0x0, 0x0, 0x28008881}, 0x4004000) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r8, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @void}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2282040}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x500000}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0xfff}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000084) accept4$vsock_stream(r1, &(0x7f00000001c0)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000000)) 1.028942294s ago: executing program 5 (id=5888): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) clock_gettime(0x0, 0x0) select(0x40, &(0x7f0000000080)={0x11, 0xffffffffffffffff}, 0x0, 0x0, 0x0) shutdown(r3, 0x1) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r1], 0x15) r7 = dup(r6) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNGETFEATURES(r8, 0x800454cf, 0x0) write$FUSE_BMAP(r7, &(0x7f0000000000)={0x7}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="2ce8fd6892027d92839336941e519f44ef21b2866fb6b9f5fb3bcd4240b91295b8363acf58d581440f6c14efccf275fbf310fcbf5a71a50804cfff744f682d3d0d4748bdf002a259855aeea7496c67a777c10bf6343b3fb02fb8d5299a904e8c55f50c82e84bfbdf"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x10000a0, &(0x7f0000002440)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@afid={'afid', 0x3d, 0x8000000000000001}}, {@msize={'msize', 0x3d, 0xce}}, {@noxattr}, {@cachetag={'cachetag', 0x3d, '/dev/net/tun\x00'}}, {@afid={'afid', 0x3d, 0x7}}, {@directio}], [{@fowner_gt={'fowner>', r4}}]}}) 653.85699ms ago: executing program 1 (id=5894): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000840)={0xc, 0x10001, 0x9}) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000140)) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000100)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x4b564d05, 0x0, 0x1}]}) lseek(r2, 0x8000003, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x7ff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = fcntl$dupfd(r0, 0x0, r1) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001d40)=0x0) sendmsg$netlink(r6, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000000880)={0x1208, 0x3d, 0x2, 0x70bd2a, 0x25dfdbff, "", [@nested={0x155, 0x61, 0x0, 0x1, [@generic="2e09b16942ddec46e42492727d5f59a35fb7794ab203d47bdc7cd8268d1d5338cb822e7a0d5ec277034b90bd0312f6f4b2de6a1f8de95a760fb69507e112e53fcd54ddda73ef29c390ef8f781b226eb053", @nested={0x4, 0x9e}, @typed={0x8, 0xc5, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x119, 0x0, 0x0, @fd=r2}, @typed={0xe9, 0x5b, 0x0, 0x0, @binary="12efa29eaceb26f7018698b48732801e61846e22178681495d223211bef354b0d4bdc9b4fb50e0947dbe29abc8bef8bed66876f7c9a46a17600c7e5728f687af7fe32416b38be670a67484f68610eb1b3da1a7c3a5ce71878ab359bcb9c2091a3d8229f7cfbe40f47c0351eefb6e3b38b15096c2e5a21f34a0bd244a0fdd777c4a770480d6f0e479b6fbe529b71b0c08aaaa665efc349c6b3b071cd57ffe04ea66c159bb0832c4d6a1cefafda51fe2f503a81ba57af92e1df4580761286af51e36a9fd2786d0f4a5bd3ea06326169fbb362d4a4e01a5fe83addb22ad6f7c3d7a6f574bb6d7"}]}, @generic="697ae97112a6dca89136e1b3f9405bdac6587a35d67e431c624763ddcd77937b1429198f19ee7541558964dafeb196bb5f13993f5a33d933e445ca25ee3722086fed16d2cd570f19f6285324233f28d77e73fe0d3522a1608f2206144d9f30c25633a185e5886173a3bcd811dc59c46304477b43542cdb7661adbbf1da5a8f9db67ecbebf395739eedb5b87da3a2d15650acb41d9ab688e32ad004e95622", @generic="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"]}, 0x1208}, {&(0x7f0000000180)={0x30c, 0x2c, 0x4, 0x70bd26, 0x25dfdbff, "", [@typed={0xc, 0x8, 0x0, 0x0, @u64=0x7}, @typed={0x8, 0x108, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="1a592e80cba0cfc78348b701906396f365ef7ba8d9dbc08a62d1f7af9dad8c9d7af61a9369b64d9e6c18c57f0a2b5b1640f8297e7733f0f6e904748cbc6ed740051f4a0df44ccb2c3417267f18ccc633e98066e99aac26fce4519d58a8e9d012bf71797fed3e38669bf439c0a342637009d3bf57949bfb586a01a47e046a7d4cbf7d0ddc5056ddc1a4717e5a528a13338aa234104ac51a8b8e2a79f10ac62ff574c335ce45c57b24906e8cfb97f406df564f03e58a9507419ed729e99efa23025c6c324dd93bbbdf11b3ac085fa4c2bb1e3e32fb9a76732912af5c6290fd3a", @nested={0x206, 0xea, 0x0, 0x1, [@typed={0x14, 0x141, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @typed={0x8, 0xac, 0x0, 0x0, @ipv4=@multicast2}, @generic="4cf5283168772aec5a64086d79f4d59ab6cbe6f26db14b2dfb2e5c45e8ba32fb9e7ba3a302bc8253b563c156c0b32d070ed60f4d485108b537d4821a6daa06e2835d9eb73d3f558098fd5584c75d3d7db5dc1d9b996118efee71be3edd0ca527", @nested={0x4, 0x91}, @typed={0x29, 0xa1, 0x0, 0x0, @binary="61ea3e3ee6fd7681cad1009b43c4808e073f06c1e461d97cc6f8a09bd5c44fafff65c831aa"}, @nested={0x4, 0x59}, @generic="ccd41929c1ab50c945b58b97bd07c9084f1c8d8003e818fad9f8af1c36f1edde7f76fb07d4ca47916bca41b4b1e4a53da87bd7571b95d8893be379831aac5d9937426423a1295924dd6235a84825fd32d90d78e4fc65583b812409981ae91ecb9ca71045f2cf7ac6c30d345132cd149aa15f61906aa1c5df0825e35e38a15b7b9798279f6364c89ce400bd8ae795653463ed1a32bb0b2bc9dd53ceb7a38d283bf75d2aa20cd13d4c5d4c91e65fb356840492fe0c453924d49d29c5afe253603ae7b6e765b1510e62918b7f3bf8f2bfec67552161f0523fab3ba15880772a376765", @generic="c1ba040fd081ef654845250cf1562647f22db8c155dd1c75324e489794a66f6d3e2a0fa1c79e97168fd241d660b912518f5da08989e9f8ef08c6da8860e3b789d96de9bd78dd622d68f66efbbad0ccd8c9793bc5ebbe5555e73c87d94ef341f1e3a9bf527a46a9a9798f7092677c07e048"]}]}, 0x30c}, {&(0x7f00000005c0)={0x1b0, 0x36, 0x400, 0x70bd2a, 0x25dfdbfc, "", [@generic="46953cd6d5b97d5122419822", @nested={0xaf, 0xc, 0x0, 0x1, [@nested={0x4, 0xf0}, @typed={0xc, 0x145, 0x0, 0x0, @str='pagemap\x00'}, @generic="3503a5c48738ec4a6820d079d92db4d82c2b9186e857c1de3e9948f41ab286e154f4111f14df359fba4980a0955d2f37009f87fc43578f55fa44a4126b572dcf5f71424f260187629ecaec6a2fd4dc2310c851236dcc0be6f08d26a439cd5eaaa90cfc7377f90fdf61a72e41730bf878751937b6ae4ae22e46add8ffe1ae888974b1ae3e06e5a2332adad0d43697c479654e00159abeba", @nested={0x4, 0x132}]}, @generic="6681a6c98b98fadd9bab0c144251a7c51da5e5a6673e95167ad43c551e8854d5c7137db7966c95eef110d863dbb28db4c26d93f16a92068c05bb1c3d", @typed={0x4, 0x81}, @generic="df098bfcc16e2ddc292d7376ce85b39db1f979815c52b04512fcc7b3f8d96ab95f03c22fda6997569e0b34b669478f6239ba30e11bba15eaa9f1d911dd9ec7cb04eeac6dbac8183b63c97ddbcafbfb1c7e363c013c0d64ff0caccf8ee10c613ab822cf7e683b191547e4657be81daf5e472b75dd8c9f7eb0b90c", @typed={0x8, 0xce, 0x0, 0x0, @u32=0x8135}, @typed={0x8, 0xc1, 0x0, 0x0, @uid=r7}, @typed={0xc, 0x6a, 0x0, 0x0, @u64=0x7}, @typed={0x8, 0x22, 0x0, 0x0, @fd=r0}, @typed={0x4, 0x76}]}, 0x1b0}, {&(0x7f0000001ac0)={0x25c, 0x35, 0x200, 0x70bd25, 0x25dfdbff, "", [@typed={0x8, 0x1c, 0x0, 0x0, @fd=r8}, @nested={0xd5, 0x9, 0x0, 0x1, [@generic="a599fe05b02314a7c04dccd9868f9fcbdf79b32a17a91cbfeb863a4c31809e7df337379e31980b2eb68e6a747f8d29f9588249bfb3a59902b27157c7cd57ca5b889ba9ab1d144541d96a4ed2a9fbeef88f1f8f8f1280d3a5ca2cb1672852ac4b1eeda4e1920cfceb3f1d98309e85bc5209c07ea4d722cfb5d1d4a932b4cecbb244a1fafbd7a19aba844a12aa3df7e1978d55b4076bac1dbdbbfc574ca8b5b336e9ed4402724bab3f63d7321176c95b88f5d9e9575db832c6003a15d98034cf265d58463d58", @typed={0x8, 0x12e, 0x0, 0x0, @u32=0x1}, @nested={0x4, 0x11d}]}, @nested={0x81, 0x133, 0x0, 0x1, [@nested={0x4, 0xb}, @generic="6c1cbee449b62bdcc3c9cb994979680691f71ab51a34c608e8165133486cc89d59153df24871", @generic="ceab60a709eff9a6cb0dc238a22c5cf0271c3f2373dadf9c70f9b896c96669303286b6ce1db876124374b3507590d495620c34a828713b49a5fd29c57edc09502ef357", @typed={0x10, 0x9e, 0x0, 0x0, @str='/dev/uinput\x00'}]}, @generic="08d72f7b855fb5b594ef87ed82c30a3614ece87e1fff322f599c3e0c0c6ae153861c65295a43ef0a3eaa5301456d5019febd02cc943de662d3832e099b42833cc7a147b74930688106688d07f18453c4c74a98d323af792b5b0aec8a013135724f3bcce794327e17e7fc99170e6d1766f9e0bba89b615e9148ed65bcd15dd3f6945afacf6c2303287536a72b", @generic="12b34c9015ca63724383692e2625216c65089244999c07756d7ee38b6a5a8ab9a04832fa2193988d56d4f09b41c9f98f393a94276d8a36c15810500f4136623f071424c1f262b5cc5917ed4c5c671bbe2636571b739e42695b2401d7"]}, 0x25c}, {&(0x7f0000000040)={0x20, 0x39, 0x2, 0x70bd25, 0x25dfdbfe, "", [@typed={0x8, 0x105, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x12c, 0x0, 0x0, @u32=0x6}]}, 0x20}, {&(0x7f0000001d80)={0x1080, 0x12, 0x1, 0x70bd2a, 0x25dfdbfc, "", [@generic="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", @nested={0x6e, 0x98, 0x0, 0x1, [@generic="aea25fff", @typed={0x8, 0x8b, 0x0, 0x0, @uid=r9}, @generic="eb1aa5a1700c72d6052cd1b393d8b1f2772ab2b8aa85e4", @nested={0x4, 0x70}, @typed={0x8, 0x136, 0x0, 0x0, @pid=r10}, @typed={0x8, 0x112, 0x0, 0x0, @pid=r11}, @generic="d477e5d313b767a0a0d5b46c7491bd4ebdc22dd740a1d487881f244c1c34c1ee37a0b9f26b058d1393c7f9db4a060f", @nested={0x4, 0x9f}]}]}, 0x1080}, {&(0x7f0000002e00)={0xd4, 0x14, 0x8, 0x70bd25, 0x25dfdbfc, "", [@generic="a00b58b3f5ae46a3f235c97577cb58efa154268dcab77db26fe3cf5b130b9f3141186d1351e80db0eb8495e718f846f03623b7e275f1c684a895970ec000878172fd41cffec1022107747a5eeec7406290438fda4e764f8a063103e0ea97998929aed1a06a5cecf259a8755e3fdfcb05fc5f75744ccee08fcd66d12d1a53a9c3fa999610af1da735ae88ab931fb36d641b0187e22a8aed3f0263693f0abcce8636698c53c98721d0eb443e03b594da8b8b00896f3ece7c7cb9612c0868a2c7a67f7f"]}, 0xd4}, {&(0x7f0000002f00)={0x9c, 0x32, 0x0, 0x4, 0x25dfdbfb, "", [@nested={0x8b, 0x8, 0x0, 0x1, [@nested={0x4, 0x130}, @typed={0x4, 0x87}, @nested={0x4, 0xa1}, @generic="09f7b17dd01931fea2351157b100090500b9b9b99df591d8048feafb7226c2a559991960baf3c48d30d7a28f42cd2cb81142e5ea4397a77b5e1d79c893e41d9214a6cbb01d08741c22e368cfa621b3337278bad1f5c095a43e1c61e7c685f5f3a29e4aa91dc79394ca295d5adcba63f0ff7a23ee2ee039748ff9aa"]}]}, 0x9c}], 0x8, 0x0, 0x0, 0x10}, 0x40) syz_init_net_socket$nl_generic(0xffffffffffffffff, 0x3, 0x10) mmap$binder(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x5) 529.015382ms ago: executing program 3 (id=5897): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r0, &(0x7f0000000200)={0x1f, @any, 0x9}, 0xa) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d7379737465225f75dd47d0b90b893a03ffdf"]) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee83abd51400b017ca5b", 0x26) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) recvmmsg$unix(r2, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012020, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x3, 0x2, 0x8080000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) 435.746674ms ago: executing program 3 (id=5898): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) preadv2(r0, &(0x7f0000000300), 0x0, 0x8, 0x6, 0x15) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) (async) preadv2(r0, &(0x7f0000000300), 0x0, 0x8, 0x6, 0x15) (async) 434.475013ms ago: executing program 3 (id=5899): io_setup(0x8, &(0x7f00000001c0)=0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4, r1, 0x0, 0x0, 0x3}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) io_getevents(r0, 0x5, 0x5, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x0) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) r2 = socket(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000023c0)={0x0, 0x0}) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000027c0)={0x148, 0x18, 0x89ed93a88851ead7, 0x4000000, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x134, 0x142, 0x0, 0x1, [@typed={0x14, 0x4e, 0x0, 0x0, @ipv6=@remote}, @nested={0x100, 0xd6, 0x0, 0x1, [@typed={0x14, 0xd6, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0xa8, 0x0, 0x0, @pid=r3}, @typed={0x8, 0x99, 0x0, 0x0, @fd=r1}, @typed={0x14, 0x95, 0x0, 0x0, @ipv6=@remote}, @nested={0x4, 0x128}, @generic="aed23a327a3236e9ed275cbee80cbc0e01f3ecc30e62904d9b34b243d00860ee0a1b24cf9e6117712af670c6076d84704ee3daad45bf5786b58f9c46f8e5b811d419d118af5688155e3e97f40a19ba6cfdb34a7021d5751bcf56d39fcdcd3a81d7d8568ed3be8b3edde8737632e30252ce19422b18e7f04d513fba8f3ccbaf4ee20605bb30d993", @generic="5b24b3e4df08f06520f6364e583d1c4f7cba47aacb2e8ca5e05e0ccdd78d4e9aa389159c9d4a11f53fae07d17b242bb27cc2bd64ddeb36347f"]}, @typed={0x14, 0xf5, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x5, 0x0}}, @typed={0x8, 0x137, 0x0, 0x0, @u32=0x1}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x80044}, 0x0) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)={[{@stats}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000000340)={{0x0, 0x0, 0x80, {0xdddd0000, 0x10000}}, "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", "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"}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3a0, 0xe8, 0x1d0, 0x0, 0x2b8, 0x2b8, 0x2b8, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0xff000000, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@multicast1, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f0000002440)={0x5000, 0x8000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0) 415.804024ms ago: executing program 1 (id=5900): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='\x04Xk\xd5\xbe\x80\xb5R\x7f\x87\xb7jS\x97\xe89OK\xaf\x1di\x11H\xfc\xb1\xc8\xa9\xfc\xcd\xea3}C_\x83\x8c\x1e\xd6\x89i\xe3\x943\xdd\xe2r\xec\xd3\x9f\\g\x83\"') ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000000c0)=@x86={0x0, 0x2, 0xd, 0x0, 0x1000, 0x60, 0x7f, 0xb2, 0x0, 0x1, 0xc, 0x7, 0x0, 0xd0f, 0x8, 0x9, 0x7, 0x7, 0xfb, '\x00', 0x56, 0x7}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') syz_fuse_handle_req(r1, &(0x7f0000002240)="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", 0x2000, &(0x7f0000009600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 372.896064ms ago: executing program 1 (id=5901): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = inotify_init1(0x800) inotify_add_watch(r3, &(0x7f0000000080)='.\x00', 0x2000775) r4 = dup(r3) creat(&(0x7f0000000000)='./file0\x00', 0x21) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, 0x0) r5 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000080), 0xfffffffffffffd5d) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = socket(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) setsockopt$inet_int(r7, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0xc, @empty, 0x7}, 0x1c) openat$cgroup_freezer_state(r6, &(0x7f0000000140), 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000068a000/0x1000)=nil, 0x1000, 0x2) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) openat$cgroup_procs(r6, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) clock_gettime(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r9, 0x99b33000) io_setup(0x4, &(0x7f0000000100)) 187.574847ms ago: executing program 3 (id=5902): ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000180)=ANY=[@ANYBLOB="a17c000010000900878f088d858685068a080507058c018f"]) futex(0x0, 0x84, 0x2, 0x0, &(0x7f00000001c0), 0x22) r0 = syz_open_dev$rtc(&(0x7f00000000c0), 0xc, 0x400) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffa) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000002100), 0x0, 0x0) read(r3, &(0x7f0000000040)=""/80, 0x50) read$FUSE(r3, &(0x7f00000000c0)={0x2020}, 0x2020) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000002140)=ANY=[]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x9) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x600000d, 0x810, r1, 0x2000) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f00000006c0)='\x00\x00\x03\t\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\x80\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\b\xd0\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=vj<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d\n\xce\f\xba\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\xa9\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9h\x00\x13P1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xbeMk\xe0C\xc3\aSH\xe0\xf2\x0f\'z8\xbe\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\a\x00\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+p\x00\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc2\x00\x00\x00\x00\x00\x00\x04<\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|\x18\bb\x82\x8f\xc0\xab\xe3a`z\x06\x00\x00\x00\x00\x00\x00\x00\\\xf2\xd5\b\x00\x00\x00\x00') ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000000300)='\x00\x00\x03\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') 185.578677ms ago: executing program 1 (id=5903): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x800, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup3(r1, r2, 0x0) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_vif\x00') (async, rerun: 64) io_setup(0x8, &(0x7f00000001c0)=0x0) (rerun: 64) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000240)=0xffff1000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) (async) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200), 0x40300, 0x0) r8 = dup3(r3, r7, 0x0) (async, rerun: 32) r9 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) io_submit(r5, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4, r9, 0x0, 0x0, 0x3}]) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) (rerun: 32) io_getevents(r5, 0x5, 0x5, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x0) (async) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r8, 0xf504, 0x0) read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x160e) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) (async) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x20, 0x0, 0x2, 0x401, 0x0, 0x0, {0x1}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x20}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f0000000540)=[@acquire, @release], 0x0, 0x0, 0x0}) 184.559728ms ago: executing program 3 (id=5904): syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x200000, 0x0) 155.902208ms ago: executing program 3 (id=5905): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x810000, &(0x7f0000000340)={[], [{@fowner_gt}]}) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r2, 0x0, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x14a, &(0x7f0000000900)=ANY=[@ANYBLOB], &(0x7f0000000540)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0xfd, 0xb3, 0x9, 0x40, 0x2}, 0xc, &(0x7f0000000200)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x2, 0x3}]}, 0x5, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x861}}, {0x63, &(0x7f0000000380)=@string={0x63, 0x3, "90bb02b5da244a6f4099eddbdff3924b84e2b931878223c86d2d22657a38ec90d545857276de934ca5dddae11f69327d549d5294bbf6be8e9f406dfac053ad871bfcce9308170eff6af8030039652b291ce098e98da16f12b14f2438466bcf8566"}}, {0x5e, &(0x7f00000004c0)=@string={0x5e, 0x3, "5bc42737f66bad4adbe2dbfd3133e09cae2c25c2e6d932cb117feac0e096e727aa36671c8d31c93cf35dee66fffc6ad9256b446038f16ce476e678b6514e233e65e51eb20afd16cdbc057f197ce165748ec7e2f0ebfe1c6d04062d0d"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x813}}]}) 128.819788ms ago: executing program 1 (id=5906): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x200000, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000004a40)=0xfffffff8, 0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) signalfd4(r1, &(0x7f0000000000), 0x8, 0x800) getdents64(r1, &(0x7f00000000c0)=""/21, 0x15) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 43.59165ms ago: executing program 5 (id=5907): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) io_submit(r1, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x3, 0x1, r2, 0x0}]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x0, 0xf}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 13.68437ms ago: executing program 5 (id=5908): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x358, 0xffffffff86f54b80) socketpair(0xf, 0xa, 0x8, &(0x7f0000000300)) r1 = gettid() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_io_uring_complete(0x0) openat$cgroup_ro(r5, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000100)="67f30f1efb2e0fc7bd1faa66b81dc7b9730f23c80f21f866350c0010000f23f8670f38f97738670f070f21d7f031533d3626260f38caeeb829008ec866b9800000c00f326635004000000f30", 0x4c}], 0x1, 0x22, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) ioctl$KVM_RUN(r5, 0xae80, 0x0) request_key(&(0x7f0000000280)='encrypted\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000340)='/}(/:+\x00', r6) setpgid(r1, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x585, 0x0, 0x2d}]}) r10 = socket(0x10, 0x802, 0x0) write(r10, &(0x7f0000000140)="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", 0xfc) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max']) tkill(r1, 0x3f) timerfd_create(0x4, 0x80800) ioctl$RNDADDENTROPY(r5, 0x40085203, &(0x7f0000000400)={0x8, 0x72, "d33bb3a8051fd3514eba06cbf9180c676fe46d513e590b92f0f68fe4ead1a8a664934f982dd5a11e0e74ae67ed58aa8dee6c8a9c8c452aff75c83beeecb2766790793a0d36c9574cce8a1c43fe0c5368fe9dd58386f409d28818910f9db0360b7c377fb2eb168ed9d7227d76017e5a5b192b"}) 0s ago: executing program 1 (id=5909): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x325) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000001c0)={r2, 0x1, 0x6, @broadcast}, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$update(0x2, r5, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@acquire], 0x0, 0x0, 0x0}) r6 = dup3(r4, r0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x18, 0x0, &(0x7f0000000240)=[@request_death, @decrefs], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): ion failed: BR_FAILED_REPLY { source: EFAULT } my_pid:993 [ 367.895415][ T418] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 368.068095][ T418] usb 6-1: not running at top speed; connect to a high speed hub [ 368.077184][ T418] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 368.085443][ T418] usb 6-1: can't read configurations, error -22 [ 368.093372][ T418] usb usb6-port1: attempt power cycle [ 368.103089][T13655] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 368.103438][T13655] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 368.117319][T13655] rust_binder: Write failure EINVAL in pid:1021 [ 368.194065][T13607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.209157][T13607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.227300][ T31] usbhid 2-1:1.0: can't add hid device: -71 [ 368.233319][ T31] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 368.242776][ T31] usb 2-1: USB disconnect, device number 56 [ 368.461984][ T418] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 368.485131][ T418] usb 6-1: not running at top speed; connect to a high speed hub [ 368.494568][ T418] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 368.502537][ T418] usb 6-1: can't read configurations, error -22 [ 368.643721][ T418] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 368.667221][ T418] usb 6-1: not running at top speed; connect to a high speed hub [ 368.676306][ T418] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 368.684334][ T418] usb 6-1: can't read configurations, error -22 [ 368.690803][ T418] usb usb6-port1: unable to enumerate USB device [ 368.893304][T13691] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 369.212093][T13705] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 369.212127][T13705] rust_binder: Read failure Err(EFAULT) in pid:558 [ 369.356529][T13718] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13718 comm=syz.3.4377 [ 369.400750][T13725] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13725 comm=syz.3.4380 [ 369.413671][T13720] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 369.425896][T13720] SELinux: failed to load policy [ 369.514027][T13732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4382'. [ 369.573478][T13746] rust_binder: Error while translating object. [ 369.573524][T13746] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 369.580378][T13746] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:569 [ 369.647399][T13753] 9pnet_fd: Insufficient options for proto=fd [ 369.731416][ T36] audit: type=1404 audit(2000000081.835:77579): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 369.765230][ T36] audit: type=1400 audit(2000000081.853:77580): avc: denied { create } for pid=13758 comm="syz.1.4392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 369.791764][ T36] audit: type=1400 audit(2000000081.863:77581): avc: denied { ioctl } for pid=13758 comm="syz.1.4392" path="/dev/binderfs/binder0" dev="binder" ino=28 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 369.820400][ T36] audit: type=1400 audit(2000000081.863:77582): avc: denied { map } for pid=13758 comm="syz.1.4392" path="/dev/binderfs/binder0" dev="binder" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 369.844898][ T36] audit: type=1400 audit(2000000081.863:77583): avc: denied { read } for pid=13758 comm="syz.1.4392" dev="nsfs" ino=4026532485 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 369.873120][ T36] audit: type=1400 audit(2000000081.863:77584): avc: denied { ioctl } for pid=13758 comm="syz.1.4392" path="/dev/binderfs/binder0" dev="binder" ino=28 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 370.463950][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 370.463971][ T36] audit: type=1400 audit(2000000082.527:77601): avc: denied { read write } for pid=8845 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 370.495178][ T36] audit: type=1400 audit(2000000082.527:77602): avc: denied { read write } for pid=13773 comm="syz.0.4398" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=0 trawcon="system_u:object_r:userio_device_t:s0" [ 370.524273][ T36] audit: type=1400 audit(2000000082.536:77603): avc: denied { create } for pid=13773 comm="syz.0.4398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 370.556382][ T36] audit: type=1400 audit(2000000082.545:77604): avc: denied { read write } for pid=11080 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 370.580771][ T36] audit: type=1400 audit(2000000082.555:77605): avc: denied { read write } for pid=8845 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 370.616710][ T36] audit: type=1400 audit(2000000082.574:77606): avc: denied { read write } for pid=13447 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 370.641512][T13785] sit0: entered promiscuous mode [ 370.651605][T13785] netlink: 'syz.5.4401': attribute type 1 has an invalid length. [ 370.654005][ T36] audit: type=1400 audit(2000000082.574:77607): avc: denied { read write } for pid=13775 comm="syz.1.4400" name="binder1" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 370.677330][T13785] netlink: 1 bytes leftover after parsing attributes in process `syz.5.4401'. [ 370.710560][ T36] audit: type=1400 audit(2000000082.574:77608): avc: denied { read write } for pid=13776 comm="syz.0.4399" name="binder1" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 370.744979][ T36] audit: type=1400 audit(2000000082.583:77609): avc: denied { read } for pid=13779 comm="syz.5.4401" name="binder0" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 370.795643][ T36] audit: type=1400 audit(2000000082.583:77610): avc: denied { create } for pid=13779 comm="syz.5.4401" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 370.921440][ T1051] Bluetooth: hci1: unexpected event 0x09 length: 0 < 3 [ 371.510408][T13855] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4430'. [ 372.290295][T13901] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4446'. [ 373.112383][ T53] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 373.112396][ T1051] Bluetooth: hci1: command 0x1003 tx timeout [ 373.738795][T14064] netlink: 'syz.5.4501': attribute type 4 has an invalid length. [ 374.129399][T14103] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 374.295303][T14125] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14125 comm=syz.1.4521 [ 374.308240][T14125] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14125 comm=syz.1.4521 [ 374.321307][T14125] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14125 comm=syz.1.4521 [ 374.337077][T14125] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14125 comm=syz.1.4521 [ 374.350651][T14125] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14125 comm=syz.1.4521 [ 374.363721][T14125] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14125 comm=syz.1.4521 [ 374.389509][T14125] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14125 comm=syz.1.4521 [ 374.402730][T14125] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14125 comm=syz.1.4521 [ 374.416083][T14125] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14125 comm=syz.1.4521 [ 374.429176][T14125] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14125 comm=syz.1.4521 [ 374.455656][T14132] netlink: 124 bytes leftover after parsing attributes in process `syz.3.4524'. [ 375.859294][ T36] kauditd_printk_skb: 921 callbacks suppressed [ 375.859315][ T36] audit: type=1400 audit(2000000087.559:78532): avc: denied { read write } for pid=11549 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 375.895779][ T36] audit: type=1400 audit(2000000087.606:78533): avc: denied { read write } for pid=13447 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 375.920193][ T36] audit: type=1400 audit(2000000087.606:78534): avc: denied { write } for pid=14245 comm="syz.5.4560" name="001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=0 [ 375.945024][ T36] audit: type=1400 audit(2000000087.615:78535): avc: denied { mounton } for pid=14245 comm="syz.5.4560" path="/51/file0" dev="tmpfs" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 375.968421][ T36] audit: type=1400 audit(2000000087.615:78536): avc: denied { read write } for pid=14245 comm="syz.5.4560" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=0 trawcon="system_u:object_r:userio_device_t:s0" [ 376.004403][T14260] audit: audit_backlog=65 > audit_backlog_limit=64 [ 376.006576][ T36] audit: type=1400 audit(2000000087.625:78537): avc: denied { read write } for pid=13447 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 376.014074][T14260] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 376.039152][ T36] audit: type=1400 audit(2000000087.625:78538): avc: denied { read } for pid=14247 comm="syz.5.4561" dev="nsfs" ino=4026532580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 376.047469][T14262] audit: audit_backlog=65 > audit_backlog_limit=64 [ 376.156700][T14280] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 376.163562][ T303] Bluetooth: hci1: Frame reassembly failed (-84) [ 378.329385][ T53] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 378.329426][ T1051] Bluetooth: hci1: command 0x1003 tx timeout [ 380.749755][T14476] IPv6: NLM_F_CREATE should be specified when creating new route [ 381.330601][ T36] kauditd_printk_skb: 603 callbacks suppressed [ 381.330621][ T36] audit: type=1400 audit(2000000092.685:79139): avc: denied { read write } for pid=11080 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 381.361365][ T36] audit: type=1400 audit(2000000092.695:79140): avc: denied { mounton } for pid=14533 comm="syz.1.4655" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 381.391350][ T36] audit: type=1400 audit(2000000092.704:79141): avc: denied { read write } for pid=11080 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 381.416215][ T36] audit: type=1400 audit(2000000092.723:79142): avc: denied { read write } for pid=11080 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 381.440910][ T36] audit: type=1400 audit(2000000092.732:79143): avc: denied { read write } for pid=14541 comm="syz.1.4657" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=0 trawcon="system_u:object_r:userio_device_t:s0" [ 381.469174][ T36] audit: type=1400 audit(2000000092.741:79144): avc: denied { read write } for pid=11080 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 381.493880][ T36] audit: type=1400 audit(2000000092.741:79145): avc: denied { read } for pid=14543 comm="syz.1.4658" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=0 trawcon="system_u:object_r:userio_device_t:s0" [ 381.521184][ T36] audit: type=1400 audit(2000000092.741:79146): avc: denied { create } for pid=14543 comm="syz.1.4658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 381.541100][ T36] audit: type=1400 audit(2000000092.751:79147): avc: denied { read } for pid=14543 comm="syz.1.4658" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=0 [ 381.571543][ T36] audit: type=1400 audit(2000000092.751:79148): avc: denied { create } for pid=14543 comm="syz.1.4658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 381.594975][ T3811] Bluetooth: hci1: Frame reassembly failed (-84) [ 381.651565][ T3811] Bluetooth: hci2: Frame reassembly failed (-84) [ 383.809028][ T53] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 383.818924][ T53] Bluetooth: hci2: command 0x1003 tx timeout [ 383.818967][T13831] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 384.800558][T14771] selinux_netlink_send: 55 callbacks suppressed [ 384.800582][T14771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=14771 comm=syz.1.4736 [ 386.488258][T14835] syzkaller0: entered promiscuous mode [ 386.493925][T14835] syzkaller0: entered allmulticast mode [ 386.687322][ T36] kauditd_printk_skb: 585 callbacks suppressed [ 386.687342][ T36] audit: type=1400 audit(2000000097.690:79734): avc: denied { create } for pid=14854 comm="syz.1.4766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=0 [ 386.715567][ T36] audit: type=1400 audit(2000000097.699:79735): avc: denied { read write } for pid=14854 comm="syz.1.4766" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 386.739369][ T36] audit: type=1400 audit(2000000097.699:79736): avc: denied { read } for pid=14854 comm="syz.1.4766" dev="nsfs" ino=4026532485 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 386.760893][ T36] audit: type=1400 audit(2000000097.699:79737): avc: denied { create } for pid=14854 comm="syz.1.4766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 386.780871][ T36] audit: type=1400 audit(2000000097.699:79738): avc: denied { create } for pid=14854 comm="syz.1.4766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=0 [ 387.180256][ T36] audit: type=1400 audit(2000000098.157:79739): avc: denied { read write } for pid=8845 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 387.208868][ T36] audit: type=1400 audit(2000000098.185:79740): avc: denied { read } for pid=14856 comm="syz.0.4767" dev="nsfs" ino=4026532642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 387.231675][ T36] audit: type=1400 audit(2000000098.185:79741): avc: denied { read write } for pid=14856 comm="syz.0.4767" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=0 trawcon="system_u:object_r:userio_device_t:s0" [ 387.260449][ T36] audit: type=1400 audit(2000000098.223:79742): avc: denied { read write } for pid=14856 comm="syz.0.4767" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 387.286570][ T36] audit: type=1400 audit(2000000098.260:79743): avc: denied { read write } for pid=11080 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 389.379758][T14937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4795'. [ 392.039878][ T36] kauditd_printk_skb: 340 callbacks suppressed [ 392.039899][ T36] audit: type=1400 audit(2000000102.703:80084): avc: denied { read } for pid=15092 comm="syz.0.4854" name="binder0" dev="binder" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 392.098897][ T36] audit: type=1400 audit(2000000102.703:80085): avc: denied { create } for pid=15092 comm="syz.0.4854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=0 [ 392.119976][ T36] audit: type=1400 audit(2000000102.741:80086): avc: denied { read write } for pid=8845 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 392.162448][ T36] audit: type=1400 audit(2000000102.797:80087): avc: denied { read write } for pid=11549 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 392.205809][ T36] audit: type=1400 audit(2000000102.806:80088): avc: denied { mounton } for pid=15099 comm="syz.0.4856" path="/471/file0" dev="tmpfs" ino=2573 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 392.247599][ T36] audit: type=1400 audit(2000000102.806:80089): avc: denied { read write } for pid=11080 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 392.312715][ T36] audit: type=1400 audit(2000000102.806:80090): avc: denied { mounton } for pid=15099 comm="syz.0.4856" path="/syzcgroup/unified/syz0" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=dir permissive=0 [ 392.343199][ T36] audit: type=1400 audit(2000000102.853:80091): avc: denied { read write } for pid=8845 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 392.370680][ T36] audit: type=1400 audit(2000000102.872:80092): avc: denied { append } for pid=15103 comm="syz.1.4858" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=0 trawcon="system_u:object_r:userio_device_t:s0" [ 392.417287][ T36] audit: type=1400 audit(2000000102.872:80093): avc: denied { read write } for pid=13447 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 392.601527][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 394.133568][ T303] Bluetooth: hci3: Frame reassembly failed (-84) [ 394.142176][T15278] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 394.650140][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 394.750194][T13831] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 394.750224][T15300] Bluetooth: hci1: command 0x1003 tx timeout [ 395.093187][T15322] netlink: 'syz.1.4936': attribute type 4 has an invalid length. [ 395.101067][T15322] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.4936'. [ 396.289643][T14551] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 396.289846][T13831] Bluetooth: hci3: command 0x1003 tx timeout [ 396.802820][ T53] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 396.802826][T14551] Bluetooth: hci4: command 0x1003 tx timeout [ 396.851415][T15399] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 396.967281][T15414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=15414 comm=syz.3.4966 [ 396.967294][T15415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4966'. [ 396.967895][T15414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=15414 comm=syz.3.4966 [ 397.154040][T15433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=15433 comm=syz.1.4972 [ 397.396498][ T36] kauditd_printk_skb: 877 callbacks suppressed [ 397.396520][ T36] audit: type=1400 audit(2000000107.717:80971): avc: denied { read write } for pid=11080 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 397.433520][ T36] audit: type=1400 audit(2000000107.745:80972): avc: denied { read write } for pid=11549 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 397.467927][ T36] audit: type=1400 audit(2000000107.764:80973): avc: denied { read write } for pid=11080 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 397.501597][ T36] audit: type=1400 audit(2000000107.783:80974): avc: denied { mounton } for pid=15459 comm="syz.1.4984" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 397.525944][ T36] audit: type=1400 audit(2000000107.783:80975): avc: denied { read } for pid=15461 comm="syz.3.4983" name="binder0" dev="binder" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 397.549360][ T36] audit: type=1400 audit(2000000107.783:80976): avc: denied { read } for pid=15461 comm="syz.3.4983" name="binder0" dev="binder" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 397.573690][ T36] audit: type=1400 audit(2000000107.783:80977): avc: denied { read write } for pid=15461 comm="syz.3.4983" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 397.597544][ T36] audit: type=1400 audit(2000000107.783:80978): avc: denied { mounton } for pid=15461 comm="syz.3.4983" path="/362/file0" dev="tmpfs" ino=2011 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 397.620566][ T36] audit: type=1400 audit(2000000107.783:80979): avc: denied { create } for pid=15461 comm="syz.3.4983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 397.641683][ T36] audit: type=1400 audit(2000000107.783:80980): avc: denied { read } for pid=15461 comm="syz.3.4983" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 399.494812][T15548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5015'. [ 399.504936][T15548] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15548 comm=syz.1.5015 [ 399.605657][T15559] netlink: 25 bytes leftover after parsing attributes in process `syz.1.5018'. [ 399.828697][T15574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=15574 comm=syz.0.5024 [ 401.222966][T15667] can0: slcan on ttyS3. [ 401.270456][T15667] can0 (unregistered): slcan off ttyS3. [ 401.322258][T15673] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5065'. [ 402.015935][ T578] Bluetooth: hci1: Frame reassembly failed (-84) [ 402.746732][ T36] kauditd_printk_skb: 2614 callbacks suppressed [ 402.746761][ T36] audit: type=1400 audit(2000000112.712:83595): avc: denied { read } for pid=147 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 402.785948][ T147] audit: audit_backlog=65 > audit_backlog_limit=64 [ 402.800347][ T147] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 402.808122][ T36] audit: type=1400 audit(2000000112.712:83596): avc: denied { read } for pid=147 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 402.829858][ T147] audit: backlog limit exceeded [ 402.835841][ T147] audit: audit_backlog=65 > audit_backlog_limit=64 [ 402.842631][ T147] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 402.851533][ T36] audit: type=1400 audit(2000000112.721:83597): avc: denied { read } for pid=147 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 402.873021][ T147] audit: backlog limit exceeded [ 402.879116][ T147] audit: audit_backlog=65 > audit_backlog_limit=64 [ 403.310070][T15743] netlink: 'syz.0.5089': attribute type 4 has an invalid length. [ 403.344575][T15743] netlink: 'syz.0.5089': attribute type 17 has an invalid length. [ 403.629021][ T3811] Bluetooth: hci3: Frame reassembly failed (-84) [ 404.157896][T14551] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 404.157937][T13831] Bluetooth: hci1: command 0x1003 tx timeout [ 405.782881][ T53] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 405.787635][T14551] Bluetooth: hci3: command 0x1003 tx timeout [ 406.006857][T15844] netlink: 'syz.3.5128': attribute type 12 has an invalid length. [ 408.102935][ T36] kauditd_printk_skb: 9144 callbacks suppressed [ 408.102956][ T36] audit: type=1400 audit(2000000117.735:92704): avc: denied { read } for pid=147 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 408.163003][ T147] audit: audit_backlog=65 > audit_backlog_limit=64 [ 408.165494][T15959] audit: audit_backlog=65 > audit_backlog_limit=64 [ 408.169650][ T147] audit: audit_lost=18 audit_rate_limit=0 audit_backlog_limit=64 [ 408.177358][ T36] audit: type=1400 audit(2000000117.754:92705): avc: denied { read } for pid=147 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 408.185829][ T147] audit: backlog limit exceeded [ 408.211866][ T147] audit: audit_backlog=65 > audit_backlog_limit=64 [ 408.213121][T13447] audit: audit_backlog=65 > audit_backlog_limit=64 [ 408.218414][ T147] audit: audit_lost=19 audit_rate_limit=0 audit_backlog_limit=64 [ 408.218435][ T147] audit: backlog limit exceeded [ 409.460546][ T53] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 409.466729][T13831] Bluetooth: hci1: command 0x1003 tx timeout [ 411.427509][T14551] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 412.398517][T16130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5229'. [ 413.459228][ T36] kauditd_printk_skb: 9894 callbacks suppressed [ 413.459250][ T36] audit: type=1400 audit(2000000122.740:102596): avc: denied { read } for pid=147 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 413.499820][T16156] audit: audit_backlog=65 > audit_backlog_limit=64 [ 413.499959][ T147] audit: audit_backlog=65 > audit_backlog_limit=64 [ 413.513205][ T147] audit: audit_lost=22 audit_rate_limit=0 audit_backlog_limit=64 [ 413.514386][T16156] audit: audit_lost=23 audit_rate_limit=0 audit_backlog_limit=64 [ 413.520989][ T147] audit: backlog limit exceeded [ 413.521395][ T36] audit: type=1400 audit(2000000122.740:102597): avc: denied { read } for pid=147 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 413.539161][T16158] audit: audit_backlog=65 > audit_backlog_limit=64 [ 413.555429][ T147] audit: audit_backlog=65 > audit_backlog_limit=64 [ 413.565667][T16156] audit: backlog limit exceeded [ 413.695412][T16162] netlink: 288 bytes leftover after parsing attributes in process `syz.1.5238'. [ 413.729419][T16162] netlink: 'syz.1.5238': attribute type 4 has an invalid length. [ 413.762177][T16162] netlink: 'syz.1.5238': attribute type 4 has an invalid length. [ 416.153448][T16327] can0: slcan on ptm3. [ 416.258348][T16324] can0 (unregistered): slcan off ptm3. [ 416.397654][T16343] ptm ptm15: ldisc open failed (-12), clearing slot 15 [ 417.328063][T16384] netlink: 'syz.1.5288': attribute type 3 has an invalid length. [ 417.350169][T16384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5288'. [ 417.588626][T16399] can0: slcan on ptm3. [ 417.661489][T16396] can0 (unregistered): slcan off ptm3. [ 418.144149][ T3811] Bluetooth: hci1: Frame reassembly failed (-84) [ 418.151958][ T303] Bluetooth: hci1: Frame reassembly failed (-84) [ 418.814712][ T36] kauditd_printk_skb: 7752 callbacks suppressed [ 418.814734][ T36] audit: type=1400 audit(2000000127.744:110211): avc: denied { read } for pid=147 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 418.868355][ T147] audit: audit_backlog=65 > audit_backlog_limit=64 [ 418.868928][T16457] audit: audit_backlog=65 > audit_backlog_limit=64 [ 418.875021][ T147] audit: audit_lost=71 audit_rate_limit=0 audit_backlog_limit=64 [ 418.875045][ T147] audit: backlog limit exceeded [ 418.875650][ T147] audit: audit_backlog=65 > audit_backlog_limit=64 [ 418.884534][T16457] audit: audit_lost=72 audit_rate_limit=0 audit_backlog_limit=64 [ 418.889495][ T36] audit: type=1400 audit(2000000127.744:110212): avc: denied { read } for pid=147 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 418.898301][T16457] audit: backlog limit exceeded [ 418.900958][ T36] audit: type=1400 audit(2000000127.744:110213): avc: denied { read } for pid=147 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 420.322190][T14551] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 421.444332][T16552] netlink: 'syz.5.5347': attribute type 4 has an invalid length. [ 422.107968][T16564] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1310 [ 422.272025][T16571] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 422.311068][T16571] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 422.337808][T16571] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1314 [ 422.460494][ T10] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 422.632222][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 422.648645][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 422.661094][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 422.671556][ T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 422.684297][T16578] can0: slcan on ptm3. [ 422.694708][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 422.707935][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.731045][ T10] usb 4-1: Product: syz [ 422.739061][ T10] usb 4-1: Manufacturer: syz [ 422.755688][ T10] usb 4-1: SerialNumber: syz [ 422.962692][ T45] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 423.016188][T16592] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 423.019794][T16592] netlink: 37 bytes leftover after parsing attributes in process `syz.1.5359'. [ 423.036453][T16592] rust_binder: Write failure EINVAL in pid:1322 [ 423.138449][ T45] usb 1-1: config 0 has no interfaces? [ 423.161480][ T45] usb 1-1: New USB device found, idVendor=18a8, idProduct=41d7, bcdDevice=d5.2c [ 423.174069][ T45] usb 1-1: New USB device strings: Mfr=194, Product=8, SerialNumber=3 [ 423.187181][ T45] usb 1-1: Product: syz [ 423.196086][ T45] usb 1-1: Manufacturer: syz [ 423.206621][ T45] usb 1-1: SerialNumber: syz [ 423.210796][ T10] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 423.219639][ T45] usb 1-1: config 0 descriptor?? [ 423.440718][T16613] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 423.452374][ T387] usb 1-1: USB disconnect, device number 110 [ 423.507142][T16578] can0 (unregistered): slcan off ptm3. [ 423.547475][T16617] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 423.547515][T16617] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1335 [ 423.745026][T16626] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 423.757311][T16626] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 423.767621][T16626] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 423.774095][T16626] rust_binder: Read failure Err(EFAULT) in pid:1339 [ 424.170994][ T36] kauditd_printk_skb: 6075 callbacks suppressed [ 424.171019][ T36] audit: type=1400 audit(2000000132.748:115850): avc: denied { search } for pid=16643 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 424.193794][ T10] usb 4-1: current rate 14026156 is different from the runtime rate 9338507 [ 424.234887][ T36] audit: type=1400 audit(2000000132.795:115853): avc: denied { search } for pid=16643 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=421 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 424.281544][ T36] audit: type=1400 audit(2000000132.795:115854): avc: denied { search } for pid=16643 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 424.318038][ T36] audit: type=1400 audit(2000000132.795:115855): avc: denied { search } for pid=16643 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 424.342532][ T36] audit: type=1400 audit(2000000132.804:115856): avc: denied { ioctl } for pid=16641 comm="syz.0.5368" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 424.384345][T16648] audit: audit_backlog=65 > audit_backlog_limit=64 [ 424.390985][ T36] audit: type=1400 audit(2000000132.804:115857): avc: denied { map } for pid=16641 comm="syz.0.5368" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 424.391809][T11080] audit: audit_backlog=65 > audit_backlog_limit=64 [ 424.418044][T16648] audit: audit_lost=219 audit_rate_limit=0 audit_backlog_limit=64 [ 424.435172][T16649] audit: audit_backlog=65 > audit_backlog_limit=64 [ 424.453033][ T10] usb 4-1: USB disconnect, device number 48 [ 424.623110][T16569] udevd[16569]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 424.880268][T16668] /dev/rnullb0: Can't open blockdev [ 424.899270][T16672] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 424.903408][T16672] netlink: 'syz.1.5375': attribute type 3 has an invalid length. [ 424.918207][T16672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5375'. [ 424.935653][T16672] rust_binder: Error while translating object. [ 424.935683][T16672] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 424.941950][T16672] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1354 [ 425.117039][ T3811] tipc: Subscription rejected, illegal request [ 425.330516][T16698] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 425.464379][ T387] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 425.475030][ T45] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 425.581918][ T31] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 425.613990][ T387] usb 1-1: device descriptor read/64, error -71 [ 425.656876][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 425.664599][ T45] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.675538][ T45] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.685328][ T45] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 425.698179][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 425.707274][ T45] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice=ba.0c [ 425.716424][ T45] usb 4-1: New USB device strings: Mfr=185, Product=7, SerialNumber=0 [ 425.724816][ T45] usb 4-1: Product: syz [ 425.729082][ T45] usb 4-1: Manufacturer: syz [ 425.735857][ T45] usb 4-1: config 0 descriptor?? [ 425.742243][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 425.752624][ T31] usb 2-1: unable to get BOS descriptor set [ 425.760548][ T31] usb 2-1: config 4 has an invalid interface number: 216 but max is 0 [ 425.770119][ T31] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 425.780239][ T31] usb 2-1: config 4 has no interface number 0 [ 425.786387][ T31] usb 2-1: config 4 interface 216 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 425.802974][ T31] usb 2-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice=c8.54 [ 425.812109][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.820184][ T31] usb 2-1: Product: syz [ 425.824390][ T31] usb 2-1: Manufacturer: syz [ 425.829068][ T31] usb 2-1: SerialNumber: syz [ 425.881751][ T387] usb 1-1: device descriptor read/64, error -71 [ 426.052896][T16698] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1367 [ 426.115124][T16700] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 426.132775][ T31] usbhid 2-1:4.216: couldn't find an input interrupt endpoint [ 426.145204][ T387] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 426.150525][ T31] usb 2-1: USB disconnect, device number 57 [ 426.187896][ T45] hid-picolcd 0003:04D8:F002.002A: unknown main item tag 0x0 [ 426.206253][ T45] hid-picolcd 0003:04D8:F002.002A: unknown main item tag 0x0 [ 426.218013][ T45] hid-picolcd 0003:04D8:F002.002A: unknown main item tag 0x0 [ 426.225510][ T45] hid-picolcd 0003:04D8:F002.002A: unknown main item tag 0x0 [ 426.234126][ T45] hid-picolcd 0003:04D8:F002.002A: unknown main item tag 0x0 [ 426.241582][ T45] hid-picolcd 0003:04D8:F002.002A: unknown main item tag 0x0 [ 426.308879][ T387] usb 1-1: device descriptor read/64, error -71 [ 426.308898][ T45] hid-picolcd 0003:04D8:F002.002A: No report with id 0xf3 found [ 426.308923][ T45] hid-picolcd 0003:04D8:F002.002A: No report with id 0xf4 found [ 426.405180][ T45] usb 4-1: USB disconnect, device number 49 [ 426.524575][T16707] binder: Unknown parameter 'fscontext?}0000000006' [ 426.586835][ T387] usb 1-1: device descriptor read/64, error -71 [ 426.704486][ T387] usb usb1-port1: attempt power cycle [ 426.941927][T16713] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 426.942920][T16713] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1382 [ 427.044791][T16716] netlink: 'syz.3.5391': attribute type 10 has an invalid length. [ 427.067934][ T387] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 427.092341][ T387] usb 1-1: device descriptor read/8, error -71 [ 427.252691][ T387] usb 1-1: device descriptor read/8, error -71 [ 427.377958][ T10] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 427.506488][ T387] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 427.530054][ T387] usb 1-1: device descriptor read/8, error -71 [ 427.538307][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 427.545854][ T10] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 427.555009][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 427.565178][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 427.578160][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 427.587326][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.595396][ T10] usb 4-1: Product: syz [ 427.599586][ T10] usb 4-1: Manufacturer: syz [ 427.604222][ T10] usb 4-1: SerialNumber: syz [ 427.669146][ T387] usb 1-1: device descriptor read/8, error -71 [ 427.784291][ T387] usb usb1-port1: unable to enumerate USB device [ 428.053402][ T10] usb 4-1: 0:2 : does not exist [ 428.056512][T16727] 9pnet: Could not find request transport: fdì÷fdno-Cß­c’dòä>êë8eÕ™‹qÙ±ÿ–âϱ¾(]-§Z÷ˆpõú–½D›1fVæZõ&KD¡;Ó`'2ãâ`~íˆ83 ®;'¦$ñ÷”ì>TL"I¾½I†¼H»ìå'ÇÀßR{I#?h¾<Ù½iÌÿ>B%$ñ…æQ$ì0x0000000000000006 [ 428.291976][T16734] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 428.292006][T16734] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1397 [ 428.301510][T16734] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 428.310794][T16734] rust_binder: Read failure Err(EFAULT) in pid:1397 [ 429.543416][ T36] kauditd_printk_skb: 844 callbacks suppressed [ 429.543440][ T36] audit: type=1400 audit(2000000137.781:116685): avc: denied { read write } for pid=8845 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 429.581430][T16718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.596913][T16718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.599833][ T36] audit: type=1400 audit(2000000137.781:116686): avc: denied { read write open } for pid=8845 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 429.650809][ T10] usb 4-1: USB disconnect, device number 50 [ 429.659732][ T36] audit: type=1400 audit(2000000137.781:116687): avc: denied { ioctl } for pid=8845 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 429.688791][T16755] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 429.689301][ T36] audit: type=1400 audit(2000000137.809:116688): avc: denied { read write } for pid=16717 comm="syz.3.5392" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 429.720854][ T36] audit: type=1400 audit(2000000137.809:116689): avc: denied { read write open } for pid=16717 comm="syz.3.5392" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 429.738368][T16755] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 429.746175][ T36] audit: type=1400 audit(2000000137.818:116690): avc: denied { ioctl } for pid=16717 comm="syz.3.5392" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 429.746454][T16338] udevd[16338]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 429.754023][ T36] audit: type=1400 audit(2000000137.818:116691): avc: denied { ioctl } for pid=16717 comm="syz.3.5392" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 429.819616][ T36] audit: type=1400 audit(2000000137.818:116692): avc: denied { mounton } for pid=16752 comm="syz.0.5405" path="/588/file0" dev="tmpfs" ino=3214 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 429.819972][T16755] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 429.842649][ T36] audit: type=1400 audit(2000000137.856:116693): avc: denied { create } for pid=16717 comm="syz.3.5392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 429.877663][ T36] audit: type=1400 audit(2000000137.865:116694): avc: denied { read write } for pid=8845 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 429.900183][T16755] rust_binder: Write failure EINVAL in pid:1735 [ 430.021851][T16762] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.034893][T16762] rust_binder: Error while translating object. [ 430.041518][T16762] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 430.047825][T16762] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1742 [ 430.168163][ T10] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 430.317885][ T10] usb 4-1: device descriptor read/64, error -71 [ 430.507258][T16781] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 430.507639][T16781] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1761 [ 430.516107][T16783] rust_binder: Error while translating object. [ 430.524049][T16783] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 430.530385][T16783] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1761 [ 430.574448][ T10] usb 4-1: device descriptor read/64, error -71 [ 430.822175][T16785] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.829266][T16785] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.836465][ T10] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 430.843557][T16785] bridge_slave_0: entered allmulticast mode [ 430.850435][T16785] bridge_slave_0: entered promiscuous mode [ 430.858247][T16785] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.865409][T16785] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.872625][T16785] bridge_slave_1: entered allmulticast mode [ 430.879118][T16785] bridge_slave_1: entered promiscuous mode [ 430.975221][T16785] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.982356][T16785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.989676][T16785] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.996780][T16785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.005280][ T10] usb 4-1: device descriptor read/64, error -71 [ 431.091785][ T303] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.099462][ T303] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.128903][ T3811] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.136052][ T3811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.147926][ T303] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.155058][ T303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.237137][T16785] veth0_vlan: entered promiscuous mode [ 431.275017][T16785] veth1_macvtap: entered promiscuous mode [ 431.441460][T16792] tmpfs: Unknown parameter 'fowner>00000000000000000000' [ 431.483162][ T10] usb 4-1: device descriptor read/64, error -71 [ 431.612047][ T10] usb usb4-port1: attempt power cycle [ 431.718320][ T31] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 431.882940][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 431.893119][ T31] usb 1-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 431.906089][ T31] usb 1-1: config 1 interface 0 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 431.919136][ T31] usb 1-1: config 1 interface 0 has no altsetting 0 [ 431.926321][ T31] usb 1-1: config 1 interface 0 has no altsetting 1 [ 431.945866][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 431.955050][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.963080][ T31] usb 1-1: Product: ë®ë”‚ⓚ潊饀ïŸä®’ㆹ芇젣⵭攢㡺郬䗕犅䲓椟紲鵔鑒躾䂟舘å€èž­ï°›éŽáœˆï¼Žï¡ª改⤫ê†á‰¯ä¾±ã ¤æ­†è— [ 431.979352][ T31] usb 1-1: Manufacturer: à¡¡ [ 431.983995][ T31] usb 1-1: SerialNumber: 쑛㜧毶䪭﷛㌱鳠Ⲯ숥쬲缑샪雠⟧㚪ᱧã†ã³‰å·³æ›®ï³¿æ¬¥æ„뙸乑㸣눞ﴊ촖ּ᥿瑥잎ﻫ洜؄ഭ [ 431.984894][T16805] binder: Bad value for 'max' [ 432.004553][ T10] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 432.053344][ T10] usb 4-1: device descriptor read/8, error -71 [ 432.191509][ T10] usb 4-1: device descriptor read/8, error -71 [ 432.221703][ T31] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 432.244859][ T31] usb 1-1: USB disconnect, device number 115 [ 432.445329][ T10] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 432.469178][ T10] usb 4-1: device descriptor read/8, error -71 [ 432.608034][ T10] usb 4-1: device descriptor read/8, error -71 [ 432.724377][ T10] usb usb4-port1: unable to enumerate USB device [ 434.359200][T16843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.367766][T16843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.521913][T16848] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 434.583441][ T31] usb 1-1: new low-speed USB device number 116 using dummy_hcd [ 434.643155][ T13] Bluetooth: hci1: Frame reassembly failed (-84) [ 434.643509][ T363] kernel read not supported for file /rfkill (pid: 363 comm: kworker/0:4) [ 434.701010][ T45] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 434.757457][ T31] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 434.769905][ T31] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 434.786132][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 434.794051][ T31] usb 1-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 434.804180][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.814925][ T31] usb 1-1: config 0 descriptor?? [ 434.823819][T16844] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 434.844262][T16858] rust_binder: Write failure EFAULT in pid:726 [ 434.880052][ T45] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 434.914915][ T36] kauditd_printk_skb: 730 callbacks suppressed [ 434.914935][ T36] audit: type=1400 audit(2000000142.804:117425): avc: denied { read } for pid=16859 comm="syz.5.5441" name="vsock" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 434.945372][ T36] audit: type=1400 audit(2000000142.832:117426): avc: denied { read open } for pid=16859 comm="syz.5.5441" path="/dev/vsock" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 434.946857][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.974183][ T36] audit: type=1400 audit(2000000142.860:117427): avc: denied { ioctl } for pid=16859 comm="syz.5.5441" path="/dev/vsock" dev="devtmpfs" ino=207 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 435.011043][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.020904][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 435.021723][ T36] audit: type=1400 audit(2000000142.869:117428): avc: denied { read write } for pid=13447 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 435.055400][ T45] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 435.068021][ T45] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 435.077233][ T45] usb 4-1: Manufacturer: syz [ 435.084281][ T45] usb 4-1: config 0 descriptor?? [ 435.089518][ T36] audit: type=1400 audit(2000000142.869:117429): avc: denied { read write open } for pid=13447 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 435.114944][ T36] audit: type=1400 audit(2000000142.869:117430): avc: denied { ioctl } for pid=13447 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 435.142563][ T36] audit: type=1400 audit(2000000142.926:117431): avc: denied { ioctl } for pid=16845 comm="syz.3.5437" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 435.167858][ T36] audit: type=1400 audit(2000000142.926:117432): avc: denied { ioctl } for pid=16845 comm="syz.3.5437" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 435.193308][ T36] audit: type=1400 audit(2000000142.926:117433): avc: denied { ioctl } for pid=16845 comm="syz.3.5437" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 435.218703][ T36] audit: type=1400 audit(2000000142.944:117434): avc: denied { ioctl } for pid=16842 comm="syz.0.5435" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 435.284416][ T31] logitech 0003:046D:C286.002B: unknown main item tag 0x6 [ 435.294116][ T31] logitech 0003:046D:C286.002B: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.0-1/input0 [ 435.305574][ T31] logitech 0003:046D:C286.002B: no inputs found [ 435.558821][ T363] usb 1-1: USB disconnect, device number 116 [ 435.579429][ T45] appleir 0003:05AC:8243.002C: unknown main item tag 0x0 [ 435.589374][ T45] appleir 0003:05AC:8243.002C: No inputs registered, leaving [ 435.601985][ T45] appleir 0003:05AC:8243.002C: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 435.922803][T16877] SELinux: security_context_str_to_sid () failed with errno=-22 [ 436.162572][T16883] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:24 [ 436.219678][T16886] rust_binder: Write failure EINVAL in pid:24 [ 436.256321][T16888] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5449'. [ 436.271562][T16888] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5449'. [ 436.828494][ T53] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 436.829698][T14551] Bluetooth: hci1: command 0x1003 tx timeout [ 437.064113][T16896] 9pnet_fd: Insufficient options for proto=fd [ 437.117518][ T363] usb 4-1: reset high-speed USB device number 55 using dummy_hcd [ 437.158410][T16900] rust_binder: Write failure EINVAL in pid:31 [ 437.245382][ T310] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 437.416388][ T310] usb 2-1: Using ep0 maxpacket: 16 [ 437.423921][ T310] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 437.435232][ T310] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 437.444980][ T310] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 437.459673][ T310] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 437.468804][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.476924][ T310] usb 2-1: Product: syz [ 437.481198][ T310] usb 2-1: Manufacturer: syz [ 437.485829][ T310] usb 2-1: SerialNumber: syz [ 437.876527][T16916] 9pnet_fd: Insufficient options for proto=fd [ 437.931172][ T310] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 437.942188][ T10] usb 4-1: USB disconnect, device number 55 [ 438.002567][T16922] rust_binder: Write failure EINVAL in pid:1407 [ 438.006007][T16922] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 438.035082][T16922] rust_binder: Write failure EINVAL in pid:1407 [ 438.442692][ T10] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 438.630544][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 438.641566][ T10] usb 1-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 438.654790][ T10] usb 1-1: config 1 interface 0 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 438.668016][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 438.674776][ T10] usb 1-1: config 1 interface 0 has no altsetting 1 [ 438.691374][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 438.709420][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.717906][ T10] usb 1-1: Product: ë®ë”‚ⓚ潊饀ïŸä®’ㆹ芇젣⵭攢㡺郬䗕犅䲓椟紲鵔鑒躾䂟舘å€èž­ï°›éŽáœˆï¼Žï¡ª改⤫ê†á‰¯ä¾±ã ¤æ­†è— [ 438.739354][ T10] usb 1-1: Manufacturer: à¡¡ [ 438.745270][ T10] usb 1-1: SerialNumber: 쑛㜧毶䪭﷛㌱鳠Ⲯ숥쬲缑샪雠⟧㚪ᱧã†ã³‰å·³æ›®ï³¿æ¬¥æ„뙸乑㸣눞ﴊ촖ּ᥿瑥잎ﻫ洜؄ഭ [ 438.765110][T16946] 9pnet_fd: Insufficient options for proto=fd [ 438.766961][ T310] usb 2-1: current rate 14026156 is different from the runtime rate 9338507 [ 438.993876][ T310] usb 2-1: USB disconnect, device number 58 [ 439.004694][ T10] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 439.017987][ T10] usb 1-1: USB disconnect, device number 117 [ 439.053319][ T363] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 439.111127][T16569] udevd[16569]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 439.226308][ T363] usb 4-1: unable to get BOS descriptor or descriptor too short [ 439.234861][ T363] usb 4-1: not running at top speed; connect to a high speed hub [ 439.244180][ T363] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 439.252417][ T363] usb 4-1: config 0 has no interface number 0 [ 439.258634][ T363] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 439.269776][ T363] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 439.279662][ T363] usb 4-1: config 0 interface 88 has no altsetting 0 [ 439.291799][ T363] usb 4-1: string descriptor 0 read error: -22 [ 439.298179][ T363] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 439.307240][ T363] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 439.317506][ T363] usb 4-1: config 0 descriptor?? [ 439.326441][ T363] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input49 [ 439.433510][T16338] udevd[16338]: Unable to EVIOCGABS device "/dev/input/event3" [ 439.441475][T16338] udevd[16338]: Unable to EVIOCGABS device "/dev/input/event3" [ 439.552558][T16954] binder: Bad value for 'stats' [ 439.578851][ T363] usb 4-1: USB disconnect, device number 56 [ 439.854747][T16969] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 439.928696][ T45] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 439.992861][ T10] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 440.104041][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.115197][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.125594][ T45] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 440.152432][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.174294][ T45] usb 1-1: config 0 descriptor?? [ 440.185769][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 440.220434][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 440.230073][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.238167][ T10] usb 2-1: Product: syz [ 440.251266][ T10] usb 2-1: Manufacturer: syz [ 440.255940][ T10] usb 2-1: SerialNumber: syz [ 440.281499][ T10] usb 2-1: config 0 descriptor?? [ 440.292901][ T36] kauditd_printk_skb: 541 callbacks suppressed [ 440.292940][ T36] audit: type=1400 audit(2000000147.846:117976): avc: denied { ioctl } for pid=16960 comm="syz.1.5478" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 440.349884][ T36] audit: type=1400 audit(2000000147.846:117977): avc: denied { ioctl } for pid=16960 comm="syz.1.5478" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 440.382682][ T36] audit: type=1400 audit(2000000147.846:117978): avc: denied { ioctl } for pid=16960 comm="syz.1.5478" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 440.408017][ T36] audit: type=1400 audit(2000000147.846:117979): avc: denied { ioctl } for pid=16960 comm="syz.1.5478" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 440.433699][ T36] audit: type=1400 audit(2000000147.939:117980): avc: denied { ioctl } for pid=16958 comm="syz.0.5476" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 440.458954][ T36] audit: type=1400 audit(2000000147.939:117981): avc: denied { ioctl } for pid=16958 comm="syz.0.5476" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 440.513584][ T36] audit: type=1400 audit(2000000148.042:117982): avc: denied { create } for pid=16960 comm="syz.1.5478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 440.533515][ T36] audit: type=1400 audit(2000000148.042:117983): avc: denied { ioctl } for pid=16960 comm="syz.1.5478" path="/dev/binderfs/binder0" dev="binder" ino=28 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 440.625456][ T36] audit: type=1400 audit(2000000148.154:117984): avc: denied { ioctl } for pid=16958 comm="syz.0.5476" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 440.632323][ T45] hid-thrustmaster 0003:044F:B65D.002D: unknown main item tag 0x0 [ 440.667296][ T36] audit: type=1400 audit(2000000148.154:117985): avc: denied { ioctl } for pid=16958 comm="syz.0.5476" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 440.687511][ T45] hid-thrustmaster 0003:044F:B65D.002D: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 440.722327][ T45] hid-thrustmaster 0003:044F:B65D.002D: Wrong number of endpoints? [ 440.846579][T16987] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 440.847053][ C1] hid-thrustmaster 0003:044F:B65D.002D: Unknown packet type 0x0, unable to proceed further with wheel init [ 440.871566][T16986] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1428 [ 440.964088][T16990] mmap: syz.5.5488 (16990): VmData 29077504 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 441.136362][ T363] usb 1-1: USB disconnect, device number 118 [ 441.314258][T17007] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 442.110560][T17029] 9pnet_fd: Insufficient options for proto=fd [ 442.233433][T17037] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 442.351300][T17041] netlink: 'syz.5.5506': attribute type 4 has an invalid length. [ 442.360768][T17041] netlink: 'syz.5.5506': attribute type 4 has an invalid length. [ 442.505127][ T45] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 442.665489][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 442.674806][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 442.685092][ T45] usb 1-1: config 7 has an invalid interface number: 213 but max is 0 [ 442.694971][ T45] usb 1-1: config 7 has no interface number 0 [ 442.702030][ T45] usb 1-1: config 7 interface 213 altsetting 15 bulk endpoint 0x8F has invalid maxpacket 16 [ 442.713141][ T45] usb 1-1: config 7 interface 213 altsetting 15 endpoint 0xD has an invalid bInterval 128, changing to 7 [ 442.725352][ T45] usb 1-1: config 7 interface 213 altsetting 15 endpoint 0xD has invalid wMaxPacketSize 0 [ 442.749768][ T45] usb 1-1: config 7 interface 213 altsetting 15 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 442.765336][ T45] usb 1-1: config 7 interface 213 has no altsetting 0 [ 442.788348][ T45] usb 1-1: language id specifier not provided by device, defaulting to English [ 442.813827][ T45] usb 1-1: New USB device found, idVendor=15e8, idProduct=9100, bcdDevice=61.61 [ 442.826373][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.835226][ T45] usb 1-1: Product: syz [ 442.839538][ T45] usb 1-1: Manufacturer: syz [ 442.844177][ T45] usb 1-1: SerialNumber: syz [ 442.870467][T17037] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 442.913898][T17055] 9pnet_fd: Insufficient options for proto=fd [ 442.950047][ T10] usb 2-1: USB disconnect, device number 59 [ 443.089549][T16569] udevd[16569]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 443.099961][T17062] rust_binder: Write failure EFAULT in pid:1451 [ 443.127705][ T45] usb 1-1: USB disconnect, device number 119 [ 443.430975][T17077] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 443.431594][T17077] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1462 [ 443.708132][T17093] 9pnet_fd: Insufficient options for proto=fd [ 443.734555][ T45] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 443.916292][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 443.925744][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 443.939056][ T45] usb 2-1: config 5 has an invalid interface number: 224 but max is 0 [ 443.947536][ T45] usb 2-1: config 5 has no interface number 0 [ 443.958876][ T45] usb 2-1: New USB device found, idVendor=9a9e, idProduct=dcd0, bcdDevice=d8.fc [ 443.968152][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.976278][ T45] usb 2-1: Product: syz [ 443.980509][ T45] usb 2-1: Manufacturer: syz [ 443.985136][ T45] usb 2-1: SerialNumber: syz [ 444.001820][ T31] usb 4-1: new low-speed USB device number 57 using dummy_hcd [ 444.119454][ T310] usb 1-1: new low-speed USB device number 120 using dummy_hcd [ 444.165481][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 444.176176][ T31] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 444.185560][ T31] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 444.195717][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 444.214528][ T31] usb 4-1: string descriptor 0 read error: -22 [ 444.220913][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 444.231546][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.246681][ T31] usb 4-1: 0:2 : does not exist [ 444.284539][ T310] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 444.300831][ T310] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 444.317123][ T310] usb 1-1: config 0 interface 0 has no altsetting 0 [ 444.318471][ T45] usb-storage 2-1:5.224: USB Mass Storage device detected [ 444.324618][ T310] usb 1-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 444.340296][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.351200][ T310] usb 1-1: config 0 descriptor?? [ 444.366890][T17109] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 444.397129][ T45] usb 2-1: USB disconnect, device number 60 [ 444.480234][ T363] usb 4-1: USB disconnect, device number 57 [ 444.819451][T17109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.828163][T17109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.849004][ T310] logitech 0003:046D:C286.002E: unknown main item tag 0x3 [ 444.859696][ T310] logitech 0003:046D:C286.002E: unknown main item tag 0x6 [ 444.869503][ T310] logitech 0003:046D:C286.002E: unknown main item tag 0x6 [ 444.887870][ T310] logitech 0003:046D:C286.002E: unknown main item tag 0x6 [ 444.909066][ T310] logitech 0003:046D:C286.002E: item fetching failed at offset 7/8 [ 444.930842][ T310] logitech 0003:046D:C286.002E: parse failed [ 444.939236][ T310] logitech 0003:046D:C286.002E: probe with driver logitech failed with error -22 [ 445.067155][ T10] usb 1-1: USB disconnect, device number 120 [ 445.222253][T17152] overlayfs: missing 'workdir' [ 445.391456][T17163] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1468 [ 445.431396][T17165] rust_binder: Write failure EFAULT in pid:1470 [ 445.651180][ T36] kauditd_printk_skb: 741 callbacks suppressed [ 445.651205][ T36] audit: type=1400 audit(2000000152.850:118727): avc: denied { node_bind } for pid=17173 comm="syz.0.5553" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 445.685290][ T36] audit: type=1400 audit(2000000152.888:118728): avc: denied { read write } for pid=16785 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 445.710209][ T36] audit: type=1400 audit(2000000152.888:118729): avc: denied { read write open } for pid=16785 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 445.741376][ T36] audit: type=1400 audit(2000000152.888:118730): avc: denied { ioctl } for pid=16785 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 445.769343][ T36] audit: type=1400 audit(2000000152.906:118731): avc: denied { read write } for pid=17175 comm="syz.0.5554" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 445.792946][ T36] audit: type=1400 audit(2000000152.906:118732): avc: denied { read open } for pid=17175 comm="syz.0.5554" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 445.817026][T13448] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 445.820935][ T36] audit: type=1400 audit(2000000152.906:118733): avc: denied { ioctl } for pid=17175 comm="syz.0.5554" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 445.849780][ T36] audit: type=1400 audit(2000000152.906:118734): avc: denied { read write } for pid=17175 comm="syz.0.5554" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 445.874293][ T36] audit: type=1400 audit(2000000152.906:118735): avc: denied { read write open } for pid=17175 comm="syz.0.5554" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 445.900568][ T36] audit: type=1400 audit(2000000152.906:118736): avc: denied { ioctl } for pid=17175 comm="syz.0.5554" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 445.938306][T17180] fuse: Unknown parameter 'rootñœ' [ 445.962392][T17180] 9pnet_fd: Insufficient options for proto=fd [ 445.979587][ T10] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 445.997496][T13448] usb 2-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 446.007066][T13448] usb 2-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 446.016558][T13448] usb 2-1: Product: syz [ 446.020787][T13448] usb 2-1: Manufacturer: syz [ 446.025444][T13448] usb 2-1: SerialNumber: syz [ 446.032931][T13448] usb 2-1: config 0 descriptor?? [ 446.139953][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 446.147862][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.158731][ T10] usb 1-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 446.167851][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.179213][ T10] usb 1-1: config 0 descriptor?? [ 446.531033][T17201] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 446.578264][T13448] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 446.614249][T13448] asix 2-1:0.0: probe with driver asix failed with error -71 [ 446.632930][T13448] usb 2-1: USB disconnect, device number 61 [ 446.654034][ T10] cypress 0003:04B4:0001.002F: hidraw0: USB HID v0.00 Device [HID 04b4:0001] on usb-dummy_hcd.0-1/input0 [ 447.035793][ T10] usb 1-1: USB disconnect, device number 121 [ 447.255169][T17220] 9pnet_fd: Insufficient options for proto=fd [ 447.936019][ T10] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 448.063200][T17258] netlink: 'syz.5.5582': attribute type 1 has an invalid length. [ 448.072801][T17258] overlayfs: failed to resolve './file0': -2 [ 448.085629][ T10] usb 2-1: device descriptor read/64, error -71 [ 448.227987][ T578] Bluetooth: hci1: Frame reassembly failed (-84) [ 448.240462][T17270] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 448.261723][T17270] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5586'. [ 448.271172][T17270] netlink: 128 bytes leftover after parsing attributes in process `syz.5.5586'. [ 448.363932][ T10] usb 2-1: device descriptor read/64, error -71 [ 448.435067][T17283] tmpfs: Bad value for 'nr_inodes' [ 448.580877][T17296] fuseblk: Bad value for 'user_id' [ 448.586138][T17296] fuseblk: Bad value for 'user_id' [ 448.630915][ T10] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 448.769856][ T10] usb 2-1: device descriptor read/64, error -71 [ 448.855365][T13448] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 449.015765][T13448] usb 1-1: Using ep0 maxpacket: 32 [ 449.023241][T13448] usb 1-1: config 0 has an invalid interface number: 195 but max is 0 [ 449.031514][T13448] usb 1-1: config 0 has no interface number 0 [ 449.037109][ T10] usb 2-1: device descriptor read/64, error -71 [ 449.042617][T13448] usb 1-1: New USB device found, idVendor=0403, idProduct=ed22, bcdDevice=55.ea [ 449.053257][T13448] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.061305][T13448] usb 1-1: Product: syz [ 449.065510][T13448] usb 1-1: Manufacturer: syz [ 449.070208][T13448] usb 1-1: SerialNumber: syz [ 449.076529][T13448] usb 1-1: config 0 descriptor?? [ 449.155000][ T10] usb usb2-port1: attempt power cycle [ 449.518191][ T10] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 449.542455][ T10] usb 2-1: device descriptor read/8, error -71 [ 449.681198][ T10] usb 2-1: device descriptor read/8, error -71 [ 449.860938][T13448] hub 1-1:0.195: bad descriptor, ignoring hub [ 449.867100][T13448] hub 1-1:0.195: probe with driver hub failed with error -5 [ 449.875021][T13448] ftdi_sio 1-1:0.195: FTDI USB Serial Device converter detected [ 449.886895][T13448] ftdi_sio ttyUSB0: unknown device type: 0x55ea [ 449.925824][T13448] usb 1-1: USB disconnect, device number 122 [ 449.944426][T13448] ftdi_sio 1-1:0.195: device disconnected [ 449.956475][ T10] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 450.001423][ T10] usb 2-1: device descriptor read/8, error -71 [ 450.140518][ T10] usb 2-1: device descriptor read/8, error -71 [ 450.256037][ T10] usb usb2-port1: unable to enumerate USB device [ 450.426959][ T53] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 450.426987][T14551] Bluetooth: hci1: command 0x1003 tx timeout [ 450.527040][T17337] binder: Unknown parameter 'contextÀ' [ 450.695556][T17346] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 450.833127][ T363] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 450.912348][T17362] binder: Unknown parameter './binderfs' [ 451.004175][ T36] kauditd_printk_skb: 1645 callbacks suppressed [ 451.004208][ T36] audit: type=1400 audit(2000000157.845:120382): avc: denied { write } for pid=17363 comm="syz.0.5619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 451.036301][ T36] audit: type=1400 audit(2000000157.845:120383): avc: denied { nlmsg_write } for pid=17363 comm="syz.0.5619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 451.051501][ T363] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 451.060886][ T36] audit: type=1400 audit(2000000157.845:120384): avc: denied { read write } for pid=11080 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 451.071240][ T363] usb 4-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 451.095115][ T36] audit: type=1400 audit(2000000157.845:120385): avc: denied { read write open } for pid=11080 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 451.107457][ T363] usb 4-1: config 1 interface 0 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 451.132902][ T36] audit: type=1400 audit(2000000157.845:120386): avc: denied { ioctl } for pid=11080 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 451.170675][ T363] usb 4-1: config 1 interface 0 has no altsetting 0 [ 451.171820][ T36] audit: type=1400 audit(2000000157.845:120387): avc: denied { write } for pid=17363 comm="syz.0.5619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 451.185938][ T363] usb 4-1: config 1 interface 0 has no altsetting 1 [ 451.198262][T17369] rust_binder: Write failure EINVAL in pid:1485 [ 451.221265][ T363] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 451.232692][ T36] audit: type=1400 audit(2000000157.845:120388): avc: denied { nlmsg_write } for pid=17363 comm="syz.0.5619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 451.242600][ T363] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.259512][ T36] audit: type=1400 audit(2000000157.892:120389): avc: denied { ioctl } for pid=17339 comm="syz.3.5611" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 451.282127][ T363] usb 4-1: Product: ë®ë”‚ⓚ潊饀ïŸä®’ㆹ芇젣⵭攢㡺郬䗕犅䲓椟紲鵔鑒躾䂟舘å€èž­ï°›éŽáœˆï¼Žï¡ª改⤫ê†á‰¯ä¾±ã ¤æ­†è— [ 451.312054][ T36] audit: type=1400 audit(2000000157.901:120390): avc: denied { ioctl } for pid=17339 comm="syz.3.5611" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 451.333213][ T363] usb 4-1: Manufacturer: à¡¡ [ 451.340477][ T36] audit: type=1400 audit(2000000157.901:120391): avc: denied { ioctl } for pid=17339 comm="syz.3.5611" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 451.351380][ T363] usb 4-1: SerialNumber: 쑛㜧毶䪭﷛㌱鳠Ⲯ숥쬲缑샪雠⟧㚪ᱧã†ã³‰å·³æ›®ï³¿æ¬¥æ„뙸乑㸣눞ﴊ촖ּ᥿瑥잎ﻫ洜؄ഭ [ 451.613845][ T363] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 451.638618][ T363] usb 4-1: USB disconnect, device number 58 [ 452.201516][ T363] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 452.231186][T17386] /dev/rnullb0: Can't open blockdev [ 452.361908][ T363] usb 1-1: device descriptor read/64, error -71 [ 452.575694][ T310] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 452.629152][ T363] usb 1-1: device descriptor read/64, error -71 [ 452.656865][T17404] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5633'. [ 452.666121][T17404] gretap0: entered promiscuous mode [ 452.673824][T17404] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5633'. [ 452.682929][T17404] 0ªî{X¹¦: renamed from gretap0 [ 452.688601][T17404] 0ªî{X¹¦: left promiscuous mode [ 452.693706][T17404] 0ªî{X¹¦: entered allmulticast mode [ 452.700147][T17404] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 452.760384][ T310] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 452.771288][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.782203][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.792034][ T310] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 452.806559][ T310] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 452.815718][ T310] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 452.824058][ T310] usb 4-1: Manufacturer: syz [ 452.830313][ T310] usb 4-1: config 0 descriptor?? [ 452.885634][T17406] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 452.891305][T17406] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false [ 452.897866][ T363] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 452.900140][T17406] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 452.913734][T17406] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1499 [ 453.046058][ T363] usb 1-1: device descriptor read/64, error -71 [ 453.259888][T13448] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 453.277412][ T310] appleir 0003:05AC:8243.0030: unknown main item tag 0x0 [ 453.284778][ T310] appleir 0003:05AC:8243.0030: No inputs registered, leaving [ 453.296059][ T310] appleir 0003:05AC:8243.0030: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 453.313394][ T363] usb 1-1: device descriptor read/64, error -71 [ 453.431190][ T363] usb usb1-port1: attempt power cycle [ 453.431570][T13448] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 453.455226][T13448] usb 2-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 453.469652][T13448] usb 2-1: config 1 interface 0 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 453.483316][T13448] usb 2-1: config 1 interface 0 has no altsetting 0 [ 453.490811][T13448] usb 2-1: config 1 interface 0 has no altsetting 1 [ 453.502383][T13448] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 453.514834][T13448] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.523541][T13448] usb 2-1: Product: ë®ë”‚ⓚ潊饀ïŸä®’ㆹ芇젣⵭攢㡺郬䗕犅䲓椟紲鵔鑒躾䂟舘å€èž­ï°›éŽáœˆï¼Žï¡ª改⤫ê†á‰¯ä¾±ã ¤æ­†è— [ 453.539951][T13448] usb 2-1: Manufacturer: à¡¡ [ 453.544678][T13448] usb 2-1: SerialNumber: 쑛㜧毶䪭﷛㌱鳠Ⲯ숥쬲缑샪雠⟧㚪ᱧã†ã³‰å·³æ›®ï³¿æ¬¥æ„뙸乑㸣눞ﴊ촖ּ᥿瑥잎ﻫ洜؄ഭ [ 453.641831][T17421] SELinux: security_context_str_to_sid () failed with errno=-22 [ 453.796363][T13448] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 453.805165][ T363] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 453.815887][T13448] usb 2-1: USB disconnect, device number 66 [ 453.843650][ T363] usb 1-1: device descriptor read/8, error -71 [ 453.999933][ T363] usb 1-1: device descriptor read/8, error -71 [ 454.254128][ T363] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 454.277977][ T363] usb 1-1: device descriptor read/8, error -71 [ 454.415998][T17437] bridge0: entered allmulticast mode [ 454.430271][ T363] usb 1-1: device descriptor read/8, error -71 [ 454.526694][T17440] 9pnet_fd: Insufficient options for proto=fd [ 454.555303][ T363] usb usb1-port1: unable to enumerate USB device [ 454.980523][T17445] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 454.982566][T17445] rust_binder: Failed to allocate buffer. len:4224, is_oneway:true [ 454.989042][T17445] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 454.997007][T17445] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1515 [ 455.513194][ T45] usb 4-1: USB disconnect, device number 59 [ 455.611838][T13448] usb 1-1: new full-speed USB device number 127 using dummy_hcd [ 455.785540][T13448] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 455.793886][T13448] usb 1-1: config 0 has no interface number 0 [ 455.803301][T13448] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 455.812501][T13448] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.823254][T13448] usb 1-1: Product: syz [ 455.827922][T13448] usb 1-1: Manufacturer: syz [ 455.834192][T13448] usb 1-1: SerialNumber: syz [ 455.847285][T13448] usb 1-1: config 0 descriptor?? [ 455.964684][ T45] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 456.135660][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 456.143464][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 456.153852][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 456.166151][ T45] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 456.175359][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.183451][ T45] usb 4-1: Product: syz [ 456.187634][ T45] usb 4-1: Manufacturer: syz [ 456.192278][ T45] usb 4-1: SerialNumber: syz [ 456.417284][ T36] kauditd_printk_skb: 566 callbacks suppressed [ 456.417305][ T36] audit: type=1400 audit(2000000162.924:120958): avc: denied { ioctl } for pid=17466 comm="syz.3.5656" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 456.448728][ T36] audit: type=1400 audit(2000000162.924:120959): avc: denied { ioctl } for pid=17466 comm="syz.3.5656" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 456.509422][ T36] audit: type=1400 audit(2000000162.999:120960): avc: denied { ioctl } for pid=17456 comm="syz.0.5654" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 456.534774][ T36] audit: type=1400 audit(2000000162.999:120961): avc: denied { ioctl } for pid=17456 comm="syz.0.5654" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 456.632749][ T36] audit: type=1400 audit(2000000163.121:120962): avc: denied { ioctl } for pid=17466 comm="syz.3.5656" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 456.634557][ T45] usb 4-1: 0:2 : does not exist [ 456.658003][ T36] audit: type=1400 audit(2000000163.121:120963): avc: denied { ioctl } for pid=17466 comm="syz.3.5656" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 456.731266][ T36] audit: type=1400 audit(2000000163.214:120964): avc: denied { create } for pid=17456 comm="syz.0.5654" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 456.777130][ T36] audit: type=1400 audit(2000000163.214:120965): avc: denied { ioctl } for pid=17456 comm="syz.0.5654" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=90605 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 456.821030][ T36] audit: type=1400 audit(2000000163.214:120966): avc: denied { ioctl } for pid=17456 comm="syz.0.5654" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=90605 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 456.866739][T13448] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 456.884367][T13448] asix 1-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 456.894993][T13448] asix 1-1:0.251: probe with driver asix failed with error -71 [ 456.903090][ T36] audit: type=1400 audit(2000000163.214:120967): avc: denied { ioctl } for pid=17456 comm="syz.0.5654" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=90605 ioctlcmd=0xaa03 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 456.930298][T13448] usb 1-1: USB disconnect, device number 127 [ 457.115231][T17499] tmpfs: Unexpected value for 'inode32' [ 457.504078][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 457.667089][ T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 457.678501][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.689482][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.699574][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 457.714826][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 457.724006][ T10] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 457.732224][ T10] usb 1-1: Manufacturer: syz [ 457.738531][ T10] usb 1-1: config 0 descriptor?? [ 457.930408][T17527] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1518 [ 457.931566][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 457.942299][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 457.950128][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 457.957129][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 457.964373][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 457.972751][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 457.980926][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 457.988756][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 457.995590][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.003597][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.012853][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.021359][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.029157][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.035987][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.044773][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.052650][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.062278][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.069290][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.077663][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.085464][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.093350][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.101401][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.109940][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.117749][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.126512][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.133392][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.140190][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.147758][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.154448][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.161788][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.168440][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.175168][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.183456][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.190779][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.191216][ T10] appleir 0003:05AC:8243.0031: unknown main item tag 0x0 [ 458.197462][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.203686][ T10] appleir 0003:05AC:8243.0031: No inputs registered, leaving [ 458.226219][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.226545][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.235781][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.244358][ T10] appleir 0003:05AC:8243.0031: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 458.244549][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.263489][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.271018][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.279154][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.286824][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.293619][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.301299][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.308728][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.315472][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.323147][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.330655][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.337456][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.345171][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.353344][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.360687][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.367470][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.375044][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.382497][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.389243][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.397012][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.409006][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.416479][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.423271][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.430953][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.438428][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.445766][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.452572][T17528] rust_binder: Write failure EINVAL in pid:1518 [ 458.509186][T17544] exFAT-fs (rnullb0): invalid boot record signature [ 458.522225][T17544] exFAT-fs (rnullb0): failed to read boot sector [ 458.528585][T17544] exFAT-fs (rnullb0): failed to recognize exfat type [ 458.542365][T17546] exFAT-fs (rnullb0): invalid boot record signature [ 458.549208][T17546] exFAT-fs (rnullb0): failed to read boot sector [ 458.551221][T17545] SELinux: security_context_str_to_sid () failed with errno=-22 [ 458.555598][T17546] exFAT-fs (rnullb0): failed to recognize exfat type [ 458.861942][ T31] usb 4-1: USB disconnect, device number 60 [ 458.978551][T17557] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 459.000778][T17557] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 459.022748][T17557] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 459.045007][T17557] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 459.520927][T17596] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 459.545476][T17596] rust_binder: Write failure EINVAL in pid:1544 [ 459.717120][T13448] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 460.316801][T17627] 9pnet: Could not find request transport: fd0x0000000000000003 [ 460.690152][ T418] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 460.839758][ T31] usb 1-1: USB disconnect, device number 2 [ 460.869606][ T418] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 460.887301][ T418] usb 2-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 460.913957][ T418] usb 2-1: config 1 interface 0 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 460.927919][ T418] usb 2-1: config 1 interface 0 has no altsetting 0 [ 460.934645][ T418] usb 2-1: config 1 interface 0 has no altsetting 1 [ 460.948314][ T418] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 460.958176][ T418] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.966278][ T418] usb 2-1: Product: ë®ë”‚ⓚ潊饀ïŸä®’ㆹ芇젣⵭攢㡺郬䗕犅䲓椟紲鵔鑒躾䂟舘å€èž­ï°›éŽáœˆï¼Žï¡ª改⤫ê†á‰¯ä¾±ã ¤æ­†è— [ 460.983338][ T418] usb 2-1: Manufacturer: à¡¡ [ 460.988052][ T418] usb 2-1: SerialNumber: 쑛㜧毶䪭﷛㌱鳠Ⲯ숥쬲缑샪雠⟧㚪ᱧã†ã³‰å·³æ›®ï³¿æ¬¥æ„뙸乑㸣눞ﴊ촖ּ᥿瑥잎ﻫ洜؄ഭ [ 461.003837][ T31] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 461.149567][ T31] usb 1-1: device descriptor read/64, error -71 [ 461.244095][ T418] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 461.263505][ T418] usb 2-1: USB disconnect, device number 67 [ 461.427504][ T31] usb 1-1: device descriptor read/64, error -71 [ 461.559174][T17651] 9pnet: Could not find request transport: fd0x0000000000000003 [ 461.694817][ T31] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 461.780958][ T36] kauditd_printk_skb: 713 callbacks suppressed [ 461.780984][ T36] audit: type=1400 audit(2000000167.938:121681): avc: denied { ioctl } for pid=17629 comm="syz.0.5705" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 461.836321][ T36] audit: type=1400 audit(2000000167.994:121682): avc: denied { read write } for pid=11080 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 461.876652][ T31] usb 1-1: device descriptor read/64, error -71 [ 461.883954][ T36] audit: type=1400 audit(2000000167.994:121683): avc: denied { read write open } for pid=11080 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 461.929953][ T36] audit: type=1400 audit(2000000167.994:121684): avc: denied { ioctl } for pid=11080 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 461.982710][ T36] audit: type=1400 audit(2000000168.032:121685): avc: denied { read write } for pid=17660 comm="syz.1.5718" name="binder1" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 462.022264][ T36] audit: type=1400 audit(2000000168.032:121686): avc: denied { read write open } for pid=17660 comm="syz.1.5718" path="/dev/binderfs/binder1" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 462.045661][T17665] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 462.048495][ T36] audit: type=1400 audit(2000000168.032:121687): avc: denied { create } for pid=17660 comm="syz.1.5718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 462.075886][ T36] audit: type=1400 audit(2000000168.032:121688): avc: denied { setopt } for pid=17660 comm="syz.1.5718" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 462.097533][ T36] audit: type=1400 audit(2000000168.032:121689): avc: denied { create } for pid=17660 comm="syz.1.5718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 462.118195][ T36] audit: type=1400 audit(2000000168.032:121690): avc: denied { connect } for pid=17660 comm="syz.1.5718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 462.154464][ T31] usb 1-1: device descriptor read/64, error -71 [ 462.272164][ T31] usb usb1-port1: attempt power cycle [ 462.486148][T13448] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 462.646235][ T31] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 462.659488][T13448] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 462.680149][T13448] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.692594][ T31] usb 1-1: device descriptor read/8, error -71 [ 462.699358][T13448] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.709874][T13448] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 462.725504][T13448] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 462.743097][T13448] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 462.751248][T13448] usb 2-1: Manufacturer: syz [ 462.776949][T13448] usb 2-1: config 0 descriptor?? [ 462.831983][ T31] usb 1-1: device descriptor read/8, error -71 [ 463.095266][ T31] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 463.131252][ T31] usb 1-1: device descriptor read/8, error -71 [ 463.221746][T13448] appleir 0003:05AC:8243.0032: unknown main item tag 0x0 [ 463.245175][T13448] appleir 0003:05AC:8243.0032: No inputs registered, leaving [ 463.259969][T13448] appleir 0003:05AC:8243.0032: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 463.290815][ T31] usb 1-1: device descriptor read/8, error -71 [ 463.416045][ T31] usb usb1-port1: unable to enumerate USB device [ 463.581391][T17675] SELinux: security_context_str_to_sid () failed with errno=-22 [ 464.142992][ T31] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 464.228463][ T358] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 464.307985][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 464.318209][ T31] usb 1-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 464.331216][ T31] usb 1-1: config 1 interface 0 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 464.344251][ T31] usb 1-1: config 1 interface 0 has no altsetting 0 [ 464.350932][ T31] usb 1-1: config 1 interface 0 has no altsetting 1 [ 464.361073][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 464.370263][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.378317][ T31] usb 1-1: Product: ë®ë”‚ⓚ潊饀ïŸä®’ㆹ芇젣⵭攢㡺郬䗕犅䲓椟紲鵔鑒躾䂟舘å€èž­ï°›éŽáœˆï¼Žï¡ª改⤫ê†á‰¯ä¾±ã ¤æ­†è— [ 464.393844][ T31] usb 1-1: Manufacturer: à¡¡ [ 464.398473][ T31] usb 1-1: SerialNumber: 쑛㜧毶䪭﷛㌱鳠Ⲯ숥쬲缑샪雠⟧㚪ᱧã†ã³‰å·³æ›®ï³¿æ¬¥æ„뙸乑㸣눞ﴊ촖ּ᥿瑥잎ﻫ洜؄ഭ [ 464.435753][ T358] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 464.446181][ T358] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 464.458227][ T358] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 464.467415][ T358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 464.476935][ T358] usb 4-1: SerialNumber: syz [ 464.639607][ T31] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 464.657991][ T31] usb 1-1: USB disconnect, device number 7 [ 464.713138][T17691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.722074][T17691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.734898][T17691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.743966][T17691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.756116][ T363] usb 2-1: reset high-speed USB device number 68 using dummy_hcd [ 464.786672][ T358] usb 4-1: MIDIStreaming interface descriptor not found [ 464.801161][ T358] usb 4-1: USB disconnect, device number 61 [ 464.859988][T16338] udevd[16338]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 465.229890][T17698] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:158 [ 465.243220][T17699] rust_binder: Failed to allocate buffer. len:16, is_oneway:true [ 465.682404][ T387] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 465.725137][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 465.742325][T17736] overlayfs: failed to clone upperpath [ 465.867061][ T387] usb 4-1: unable to get BOS descriptor or descriptor too short [ 465.875244][ T363] usb 2-1: device descriptor read/64, error -71 [ 465.880510][T17744] Invalid ELF header type: 3 != 1 [ 465.886695][ T387] usb 4-1: not running at top speed; connect to a high speed hub [ 465.896209][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 465.906294][ T387] usb 4-1: config 1 has an invalid interface number: 138 but max is 0 [ 465.916388][ T387] usb 4-1: config 1 has no interface number 0 [ 465.923272][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 465.933495][ T387] usb 4-1: config 1 interface 138 has no altsetting 0 [ 465.941279][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 465.952888][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 465.967115][ T387] usb 4-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 465.981770][ T387] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.001557][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 466.010714][ T387] usb 4-1: Product: syz [ 466.015931][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.024024][ T9] usb 1-1: Product: syz [ 466.028334][ T387] usb 4-1: Manufacturer: syz [ 466.032976][ T387] usb 4-1: SerialNumber: syz [ 466.046290][ T9] usb 1-1: Manufacturer: syz [ 466.067228][ T9] usb 1-1: SerialNumber: syz [ 466.281472][T17706] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1579 [ 466.281547][T17706] rust_binder: Read failure Err(EFAULT) in pid:1579 [ 466.304811][T17706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.333148][T17706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.772555][ T387] usb 4-1: USB disconnect, device number 62 [ 466.857798][T16664] udevd[16664]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.138/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 467.009399][T17762] SELinux: security_context_str_to_sid () failed with errno=-22 [ 467.042503][T17764] overlayfs: failed to clone lowerpath [ 467.151625][ T36] kauditd_printk_skb: 486 callbacks suppressed [ 467.151863][ T36] audit: type=1400 audit(2000000172.961:122177): avc: denied { unmount } for pid=11549 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 467.207746][T17775] can0: slcan on ptm0. [ 467.207939][ T36] audit: type=1400 audit(2000000172.971:122178): avc: denied { read write } for pid=11549 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 467.237014][ T36] audit: type=1400 audit(2000000172.971:122179): avc: denied { read write open } for pid=11549 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 467.263228][ T36] audit: type=1400 audit(2000000172.971:122180): avc: denied { ioctl } for pid=11549 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 467.289094][ T36] audit: type=1400 audit(2000000172.999:122181): avc: denied { create } for pid=17772 comm="syz.5.5757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 467.347295][T17775] can0 (unregistered): slcan off ptm0. [ 467.358058][ T36] audit: type=1400 audit(2000000172.999:122182): avc: denied { read write } for pid=17773 comm="syz.3.5758" name="binder1" dev="binder" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 467.408332][ T36] audit: type=1400 audit(2000000172.999:122183): avc: denied { read write open } for pid=17773 comm="syz.3.5758" path="/dev/binderfs/binder1" dev="binder" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 467.464745][ T36] audit: type=1400 audit(2000000173.017:122184): avc: denied { create } for pid=17773 comm="syz.3.5758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 467.486923][ T36] audit: type=1400 audit(2000000173.017:122185): avc: denied { setopt } for pid=17773 comm="syz.3.5758" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 467.508468][ T36] audit: type=1400 audit(2000000173.017:122186): avc: denied { setopt } for pid=17773 comm="syz.3.5758" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 467.991572][ T387] usb 2-1: reset high-speed USB device number 68 using dummy_hcd [ 468.705794][ T31] usb 1-1: USB disconnect, device number 8 [ 468.770941][T17816] binder: Unknown parameter 'mCÏÒðþ…eœtVwÖax' [ 468.804517][T17818] can0: slcan on ptm0. [ 468.817074][ T9] usb 2-1: USB disconnect, device number 68 [ 468.994110][T17827] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742) [ 468.994144][T17827] rust_binder: Error while translating object. [ 469.014257][T17827] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 469.039291][T17827] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:169 [ 469.084935][T17830] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.106470][T17830] rust_binder: Error while translating object. [ 469.113177][T17830] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 469.119787][T17830] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1607 [ 469.231663][ T9] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 469.303653][T17839] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:173 [ 469.438976][ T9] usb 2-1: config 0 has no interfaces? [ 469.488114][ T9] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 469.505921][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.520285][ T9] usb 2-1: Product: syz [ 469.524699][ T9] usb 2-1: Manufacturer: syz [ 469.540203][ T9] usb 2-1: SerialNumber: syz [ 469.548468][ T9] usb 2-1: config 0 descriptor?? [ 469.787864][ T9] usb 2-1: USB disconnect, device number 69 [ 469.841033][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 469.871945][T17818] can0 (unregistered): slcan off ptm0. [ 470.022747][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 470.042272][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 470.064009][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 470.075814][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 470.097334][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 470.116244][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.127374][ T10] usb 1-1: Product: syz [ 470.132426][ T10] usb 1-1: Manufacturer: syz [ 470.137199][ T10] usb 1-1: SerialNumber: syz [ 470.487524][T17908] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 470.489293][T17908] binder: Unknown parameter 'fscontext?}' [ 470.516328][T17908] netlink: 1619 bytes leftover after parsing attributes in process `syz.1.5800'. [ 470.527731][T17908] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 470.527793][T17908] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1583 [ 470.808631][T17926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 470.822856][T17927] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 470.830813][T17927] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1589 [ 470.999983][T17938] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 471.216858][T17957] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 471.230790][T17957] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1601 [ 471.241507][T17957] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 471.251740][T17957] rust_binder: Read failure Err(EFAULT) in pid:1601 [ 471.262184][T17960] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 471.808430][T17989] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5828'. [ 472.107156][T18012] bridge0: port 3(veth1_macvtap) entered blocking state [ 472.122193][T18012] bridge0: port 3(veth1_macvtap) entered disabled state [ 472.138720][T18012] veth1_macvtap: entered allmulticast mode [ 472.155848][T18012] veth1_macvtap: left allmulticast mode [ 472.508884][ T36] kauditd_printk_skb: 896 callbacks suppressed [ 472.508907][ T36] audit: type=1400 audit(2000000177.975:123083): avc: denied { create } for pid=18028 comm="syz.3.5843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 472.540583][ T36] audit: type=1400 audit(2000000177.975:123084): avc: denied { read write } for pid=18030 comm="syz.1.5844" name="binder0" dev="binder" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 472.567775][ T36] audit: type=1400 audit(2000000177.984:123085): avc: denied { read write open } for pid=18030 comm="syz.1.5844" path="/dev/binderfs/binder0" dev="binder" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 472.593097][ T36] audit: type=1400 audit(2000000177.984:123086): avc: denied { read write } for pid=18030 comm="syz.1.5844" name="udmabuf" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 472.618257][ T36] audit: type=1400 audit(2000000177.984:123087): avc: denied { read write open } for pid=18030 comm="syz.1.5844" path="/dev/udmabuf" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 472.647433][ T36] audit: type=1400 audit(2000000177.984:123088): avc: denied { ioctl } for pid=18030 comm="syz.1.5844" path="/dev/udmabuf" dev="devtmpfs" ino=83 ioctlcmd=0x7542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 472.675141][ T36] audit: type=1400 audit(2000000177.984:123089): avc: denied { map } for pid=18030 comm="syz.1.5844" path="/dev/binderfs/binder0" dev="binder" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 472.716270][ T36] audit: type=1400 audit(2000000177.984:123090): avc: denied { read } for pid=18030 comm="syz.1.5844" path="/dev/binderfs/binder0" dev="binder" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 472.757725][ T36] audit: type=1400 audit(2000000177.984:123091): avc: denied { block_suspend } for pid=18030 comm="syz.1.5844" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 472.779617][ T36] audit: type=1400 audit(2000000178.003:123092): avc: denied { ioctl } for pid=18028 comm="syz.3.5843" path="socket:[92083]" dev="sockfs" ino=92083 ioctlcmd=0x8954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 472.812579][ T9] usb 1-1: USB disconnect, device number 9 [ 473.077981][T18062] overlayfs: failed to clone lowerpath [ 473.138311][T18064] netlink: 'syz.5.5855': attribute type 27 has an invalid length. [ 473.240879][ T31] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 473.401250][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 473.408953][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.420001][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 473.429721][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 473.446434][ T31] usb 1-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 473.455631][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.463662][ T31] usb 1-1: Product: syz [ 473.467896][ T31] usb 1-1: Manufacturer: syz [ 473.472526][ T31] usb 1-1: SerialNumber: syz [ 473.479210][ T31] usb 1-1: config 0 descriptor?? [ 473.704079][ T10] usb 1-1: USB disconnect, device number 10 [ 474.185361][T18079] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5860'. [ 474.245449][T18086] IPv6: NLM_F_CREATE should be specified when creating new route [ 474.245486][T18085] /dev/rnullb0: Can't lookup blockdev [ 474.253472][T18086] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 474.265960][T18086] IPv6: NLM_F_CREATE should be set when creating new route [ 474.346698][T18090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5864'. [ 474.359941][T18090] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:183 [ 474.362342][T18091] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 474.473672][T18100] fuse: Unknown parameter 'rde' [ 474.551691][T18106] rust_binder: Failed copying remainder into alloc: EFAULT [ 474.551721][T18106] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 474.560756][T18106] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 474.566686][ T31] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 474.571934][T18106] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:192 [ 474.630486][T18115] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 474.759091][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 474.774304][ T31] usb 2-1: config 0 has an invalid interface number: 231 but max is 0 [ 474.784420][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.795262][ T31] usb 2-1: config 0 has no interface number 0 [ 474.801403][ T31] usb 2-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 474.811624][ T31] usb 2-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 474.828650][ T31] usb 2-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 474.837872][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.846071][ T31] usb 2-1: Product: syz [ 474.850415][ T31] usb 2-1: Manufacturer: syz [ 474.855097][ T31] usb 2-1: SerialNumber: syz [ 474.861750][ T31] usb 2-1: config 0 descriptor?? [ 474.868267][T18086] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 474.880193][ T31] usb-storage 2-1:0.231: USB Mass Storage device detected [ 474.898102][ T10] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 475.037064][ T10] usb 1-1: device descriptor read/64, error -71 [ 475.157307][ T31] usb 2-1: USB disconnect, device number 70 [ 475.293618][ T10] usb 1-1: device descriptor read/64, error -71 [ 475.550190][ T10] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 475.689198][ T10] usb 1-1: device descriptor read/64, error -71 [ 475.945734][ T10] usb 1-1: device descriptor read/64, error -71 [ 475.969552][T18168] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 475.971303][T18168] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 476.072683][T18173] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 476.079768][ T10] usb usb1-port1: attempt power cycle [ 476.096844][T18173] rust_binder: Write failure EFAULT in pid:1648 [ 476.184458][T18176] rust_binder: Write failure EFAULT in pid:1651 [ 476.325111][T18186] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=61 sclass=netlink_xfrm_socket pid=18186 comm=syz.1.5894 [ 476.344054][T18186] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=44 sclass=netlink_xfrm_socket pid=18186 comm=syz.1.5894 [ 476.357927][T18186] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=54 sclass=netlink_xfrm_socket pid=18186 comm=syz.1.5894 [ 476.371655][T18186] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=53 sclass=netlink_xfrm_socket pid=18186 comm=syz.1.5894 [ 476.385644][T18186] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=57 sclass=netlink_xfrm_socket pid=18186 comm=syz.1.5894 [ 476.393549][T18191] SELinux: Context system_u:object_r:etc_mail_t:s0 is not valid (left unmapped). [ 476.401075][T18186] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=50 sclass=netlink_xfrm_socket pid=18186 comm=syz.1.5894 [ 476.422934][T18186] netlink: 4184 bytes leftover after parsing attributes in process `syz.1.5894'. [ 476.450734][ T10] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 476.482019][ T10] usb 1-1: device descriptor read/8, error -71 [ 476.621659][ T10] usb 1-1: device descriptor read/8, error -71 [ 476.844860][T18218] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 476.875832][ T10] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 476.914163][ T10] usb 1-1: device descriptor read/8, error -71 [ 476.975858][T18223] netlink: 188 bytes leftover after parsing attributes in process `syz.5.5908'. [ 476.978462][T18226] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 476.991959][T18226] batadv_slave_0: entered promiscuous mode [ 477.010700][T18226] rust_kernel: panicked at drivers/android/binder/node.rs:893:13: [ 477.010700][T18226] attempt to subtract with overflow [ 477.031026][T18226] ------------[ cut here ]------------ [ 477.036605][T18226] kernel BUG at rust/helpers/bug.c:7! [ 477.044604][T18226] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 477.051624][T18226] CPU: 1 UID: 0 PID: 18226 Comm: syz.1.5909 Not tainted 6.12.30-syzkaller-g153a0a38e976 #0 148e3123b04ac6bd10e65cc50fbc76805c129a8d [ 477.061013][ T10] usb 1-1: device descriptor read/8, error -71 [ 477.065204][T18226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 477.065238][T18226] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 477.086768][T18226] Code: 8e e1 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 a0 e9 b1 97 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 ea 2d f8 1b 90 90 90 90 90 90 90 90 90 [ 477.106388][T18226] RSP: 0018:ffffc90003b4da90 EFLAGS: 00010246 [ 477.112464][T18226] RAX: 0000000000000061 RBX: 1ffff92000769b54 RCX: 9525356b5ca67200 [ 477.120443][T18226] RDX: ffffc90005611000 RSI: 0000000000003671 RDI: 0000000000003672 [ 477.128424][T18226] RBP: ffffc90003b4da90 R08: ffffc90003b4d787 R09: 1ffff92000769af0 [ 477.136405][T18226] R10: dffffc0000000000 R11: fffff52000769af1 R12: 0000000000000000 [ 477.144387][T18226] R13: dffffc0000000000 R14: ffffc90003b4dac0 R15: ffffc90003b4daf0 [ 477.152368][T18226] FS: 00007f7a587ec6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 477.161306][T18226] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 477.167894][T18226] CR2: 000000110c350db6 CR3: 000000013d6ec000 CR4: 00000000003526b0 [ 477.175875][T18226] Call Trace: [ 477.179160][T18226] [ 477.182105][T18226] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 477.186581][ T10] usb usb1-port1: unable to enumerate USB device [ 477.189593][T18226] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 477.203950][T18226] ? kernel_text_address+0xa9/0xe0 [ 477.209084][T18226] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 477.222703][T18226] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 477.228874][T18226] ? arch_stack_walk+0x10b/0x170 [ 477.233827][T18226] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 477.241044][T18226] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 477.248958][T18226] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0xb2/0xc0 [ 477.258867][T18226] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0x10/0x10 [ 477.269472][T18226] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 477.276084][T18226] ? _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 477.284818][T18226] ? __se_sys_ioctl+0x132/0x1b0 [ 477.289685][T18226] ? __x64_sys_ioctl+0x7f/0xa0 [ 477.294462][T18226] ? x64_sys_call+0x1878/0x2ee0 [ 477.299327][T18226] _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x17e5/0x1860 [ 477.309097][T18226] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x10/0x10 [ 477.319183][T18226] ? kasan_save_alloc_info+0x40/0x50 [ 477.324479][T18226] ? __kasan_kmalloc+0x96/0xb0 [ 477.329267][T18226] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 477.335870][T18226] ? __kasan_check_write+0x18/0x20 [ 477.340993][T18226] ? _raw_spin_lock+0x8c/0x120 [ 477.345779][T18226] ? __cfi__raw_spin_lock+0x10/0x10 [ 477.351009][T18226] ? mutex_unlock+0x8b/0x240 [ 477.355628][T18226] ? __kasan_check_write+0x18/0x20 [ 477.360790][T18226] _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x278d/0x9d20 [ 477.370412][T18226] ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10 [ 477.380391][T18226] ? unwind_next_frame+0x3c2/0x750 [ 477.385551][T18226] ? security_inode_permission+0xaa/0x120 [ 477.391412][T18226] ? security_inode_permission+0xaa/0x120 [ 477.397167][T18226] ? __kernel_text_address+0x11/0x40 [ 477.402464][T18226] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 477.408634][T18226] ? arch_stack_walk+0x12a/0x170 [ 477.413588][T18226] ? security_inode_permission+0xaa/0x120 [ 477.419325][T18226] ? stack_depot_save_flags+0x38/0x800 [ 477.424804][T18226] ? stack_depot_save+0x12/0x20 [ 477.429752][T18226] ? save_stack+0x11c/0x1f0 [ 477.434257][T18226] ? free_contig_range+0x270/0x270 [ 477.439382][T18226] ? unwind_next_frame+0x3c2/0x750 [ 477.444500][T18226] ? __se_sys_ioctl+0x53/0x1b0 [ 477.449279][T18226] ? __se_sys_ioctl+0x53/0x1b0 [ 477.454055][T18226] ? __kernel_text_address+0x11/0x40 [ 477.459344][T18226] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 477.465509][T18226] ? arch_stack_walk+0x12a/0x170 [ 477.470457][T18226] ? __se_sys_ioctl+0x53/0x1b0 [ 477.475238][T18226] ? stack_depot_save_flags+0x38/0x800 [ 477.480705][T18226] ? stack_depot_save+0x12/0x20 [ 477.485578][T18226] ? save_stack+0x11c/0x1f0 [ 477.490088][T18226] ? free_contig_range+0x270/0x270 [ 477.495208][T18226] ? __reset_page_owner+0x450/0x450 [ 477.500415][T18226] ? update_curr+0x95c/0xc60 [ 477.505017][T18226] ? post_alloc_hook+0x3b9/0x3f0 [ 477.509958][T18226] ? prep_new_page+0x1c/0x120 [ 477.514642][T18226] ? get_page_from_freelist+0x46bb/0x4750 [ 477.520375][T18226] ? __alloc_pages_noprof+0x30d/0x6c0 [ 477.525781][T18226] ? alloc_slab_page+0x6b/0x1f0 [ 477.530644][T18226] ? allocate_slab+0x69/0x440 [ 477.535343][T18226] ? update_cfs_group+0x260/0x260 [ 477.540384][T18226] ? is_bpf_text_address+0x17b/0x1a0 [ 477.545688][T18226] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 477.551776][T18226] ? update_curr+0x95c/0xc60 [ 477.556381][T18226] ? is_bpf_text_address+0x17b/0x1a0 [ 477.561677][T18226] ? kernel_text_address+0xa9/0xe0 [ 477.566793][T18226] ? __kernel_text_address+0x11/0x40 [ 477.572083][T18226] ? unwind_get_return_address+0x51/0x90 [ 477.577719][T18226] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 477.583882][T18226] ? arch_stack_walk+0x10b/0x170 [ 477.588833][T18226] ? stack_trace_save+0x9d/0xe0 [ 477.593691][T18226] ? stack_depot_save_flags+0x38/0x800 [ 477.599176][T18226] ? detach_entity_load_avg+0x7b0/0x7b0 [ 477.604731][T18226] ? kasan_save_track+0x4f/0x80 [ 477.609588][T18226] ? kasan_save_track+0x3e/0x80 [ 477.614446][T18226] ? kasan_save_free_info+0x4a/0x60 [ 477.619680][T18226] ? __kasan_slab_free+0x5f/0x80 [ 477.624628][T18226] ? kmem_cache_free+0x1c1/0x4c0 [ 477.629580][T18226] ? audit_log_end+0x1f1/0x240 [ 477.634350][T18226] ? common_lsm_audit+0x148c/0x1860 [ 477.639550][T18226] ? slow_avc_audit+0x18d/0x1f0 [ 477.644411][T18226] ? avc_has_extended_perms+0x895/0xdd0 [ 477.649958][T18226] ? ioctl_has_perm+0x384/0x4d0 [ 477.654823][T18226] ? selinux_file_ioctl+0x6e0/0x1360 [ 477.660120][T18226] ? security_file_ioctl+0x58/0xd0 [ 477.665241][T18226] ? __se_sys_ioctl+0x53/0x1b0 [ 477.670103][T18226] ? __x64_sys_ioctl+0x7f/0xa0 [ 477.674896][T18226] ? x64_sys_call+0x1878/0x2ee0 [ 477.679757][T18226] ? do_syscall_64+0x58/0xf0 [ 477.684347][T18226] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 477.690420][T18226] ? __kasan_check_write+0x18/0x20 [ 477.695538][T18226] ? _raw_spin_lock+0x8c/0x120 [ 477.700315][T18226] ? __cfi__raw_spin_lock+0x10/0x10 [ 477.705527][T18226] ? _raw_spin_unlock+0x45/0x60 [ 477.710378][T18226] ? rust_helper_spin_unlock+0x19/0x30 [ 477.715844][T18226] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x934/0x1440 [ 477.726359][T18226] ? kmem_cache_free+0x1c1/0x4c0 [ 477.731307][T18226] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 477.742078][T18226] ? audit_log_end+0x1f1/0x240 [ 477.746853][T18226] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 477.752840][T18226] ? common_lsm_audit+0x148c/0x1860 [ 477.758044][T18226] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 477.764151][T18226] ? slow_avc_audit+0x18d/0x1f0 [ 477.769010][T18226] _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x409/0x2cd0 [ 477.778135][T18226] ? avc_denied+0x112/0x180 [ 477.782646][T18226] ? avc_has_extended_perms+0x895/0xdd0 [ 477.788193][T18226] ? avc_has_extended_perms+0x91a/0xdd0 [ 477.793742][T18226] ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10 [ 477.803295][T18226] ? do_vfs_ioctl+0xeda/0x1e30 [ 477.808071][T18226] ? preempt_schedule_common+0x2d/0x60 [ 477.813531][T18226] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 477.819172][T18226] ? __cfi_preempt_schedule+0x10/0x10 [ 477.824547][T18226] ? preempt_schedule_thunk+0x1a/0x40 [ 477.829931][T18226] ? try_to_wake_up+0xe17/0x1aa0 [ 477.834885][T18226] ? ioctl_has_perm+0x384/0x4d0 [ 477.839751][T18226] ? has_cap_mac_admin+0xd0/0xd0 [ 477.844698][T18226] ? futex_wake+0x63a/0x900 [ 477.849205][T18226] ? __cfi_futex_wake+0x10/0x10 [ 477.854078][T18226] ? selinux_file_ioctl+0x6e0/0x1360 [ 477.859397][T18226] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 477.864994][T18226] ? do_futex+0x356/0x500 [ 477.869346][T18226] ? __fput+0x6ea/0xa00 [ 477.873508][T18226] ? __cfi_do_futex+0x10/0x10 [ 477.878204][T18226] ? __fget_files+0x2c5/0x340 [ 477.882902][T18226] _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 477.891438][T18226] ? __se_sys_ioctl+0x114/0x1b0 [ 477.896307][T18226] ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10 [ 477.905451][T18226] __se_sys_ioctl+0x132/0x1b0 [ 477.905842][ T36] kauditd_printk_skb: 622 callbacks suppressed [ 477.905862][ T36] audit: type=1400 audit(2000000183.023:123715): avc: denied { read write } for pid=18111 comm="syz.0.5871" name="binder0" dev="binder" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 477.910179][T18226] __x64_sys_ioctl+0x7f/0xa0 [ 477.921595][ T36] audit: type=1400 audit(2000000183.033:123716): avc: denied { read write open } for pid=18111 comm="syz.0.5871" path="/dev/binderfs/binder0" dev="binder" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 477.939768][T18226] x64_sys_call+0x1878/0x2ee0 [ 477.939811][T18226] do_syscall_64+0x58/0xf0 [ 477.977944][ T36] audit: type=1400 audit(2000000183.061:123717): avc: denied { read } for pid=18111 comm="syz.0.5871" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 477.978586][T18226] ? clear_bhb_loop+0x50/0xa0 [ 478.006106][T18226] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 478.012046][T18226] RIP: 0033:0x7f7a5798e929 [ 478.016497][T18226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.031142][ T36] audit: type=1400 audit(2000000183.061:123718): avc: denied { read open } for pid=18111 comm="syz.0.5871" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 478.036137][T18226] RSP: 002b:00007f7a587ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 478.061486][ T36] audit: type=1400 audit(2000000183.061:123719): avc: denied { ioctl } for pid=18111 comm="syz.0.5871" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 478.068276][T18226] RAX: ffffffffffffffda RBX: 00007f7a57bb5fa0 RCX: 00007f7a5798e929 [ 478.068299][T18226] RDX: 0000200000000540 RSI: 00000000c0306201 RDI: 0000000000000003 [ 478.068316][T18226] RBP: 00007f7a57a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 478.068334][T18226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.095396][ T36] audit: type=1400 audit(2000000183.070:123720): avc: denied { ioctl } for pid=18111 comm="syz.0.5871" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 478.101049][T18226] R13: 0000000000000000 R14: 00007f7a57bb5fa0 R15: 00007ffdefca46d8 [ 478.110360][ T36] audit: type=1400 audit(2000000183.080:123721): avc: denied { create } for pid=18111 comm="syz.0.5871" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 478.117017][T18226] [ 478.117049][T18226] Modules linked in: [ 478.117511][T18226] ---[ end trace 0000000000000000 ]--- [ 478.128122][ T36] audit: type=1400 audit(2000000183.080:123722): avc: denied { ioctl } for pid=18111 comm="syz.0.5871" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=94447 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 478.194272][T18226] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 478.224360][T18226] Code: 8e e1 e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 a0 e9 b1 97 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 ea 2d f8 1b 90 90 90 90 90 90 90 90 90 [ 478.246223][T18226] RSP: 0018:ffffc90003b4da90 EFLAGS: 00010246 [ 478.252358][T18226] RAX: 0000000000000061 RBX: 1ffff92000769b54 RCX: 9525356b5ca67200 [ 478.261667][T18226] RDX: ffffc90005611000 RSI: 0000000000003671 RDI: 0000000000003672 [ 478.269770][T18226] RBP: ffffc90003b4da90 R08: ffffc90003b4d787 R09: 1ffff92000769af0 [ 478.277838][T18226] R10: dffffc0000000000 R11: fffff52000769af1 R12: 0000000000000000 [ 478.287223][T18226] R13: dffffc0000000000 R14: ffffc90003b4dac0 R15: ffffc90003b4daf0 [ 478.295468][T18226] FS: 00007f7a587ec6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 478.311667][T18226] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 478.318375][T18226] CR2: 0000000000000000 CR3: 000000013d6ec000 CR4: 00000000003526b0 [ 478.326513][T18226] Kernel panic - not syncing: Fatal exception [ 478.332969][T18226] Kernel Offset: disabled [ 478.337317][T18226] Rebooting in 86400 seconds..