last executing test programs: 1m11.534865817s ago: executing program 2 (id=1240): r0 = socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = timerfd_create(0x8, 0x80800) socket$nl_generic(0x10, 0x3, 0x10) fstat(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) timerfd_settime(r1, 0x0, &(0x7f00000013c0)={{}, {0x0, 0x989680}}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x21, &(0x7f0000000040)=0x9eb9, 0x4) sendto$inet6(r3, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x1, @empty, 0x6}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ftruncate(r4, 0x398a0bdb) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f00000001c0)="66b9800000c00f326635010000000f3064660f38828e4258660f08676ac744240012e93bf966b8000001000f23d00f21f86635300000090f23f8f20f78ecf5543e660f3829544e66b9800000c0b8ff000f00d86635002000000f3066b80500000066b900200000a90a000f01c40f019c09000f01c2", 0x78}], 0x0, 0x1c, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r6, 0x4068aea3, &(0x7f0000000100)={0xbc, 0x0, 0x4}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r9 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5500000020007f2fb72d13b2a4a271930200000000aab88bb5969e41789848a3c728f1afa823ff0000010100005ae583de0d32d6ed9098d100000042e718f94b02000000000000002ce9c95d92fb38675800000000", 0x55}], 0x1}, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x40000002) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r8, 0x7dfff000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x20140, 0x0) 1m11.478070599s ago: executing program 2 (id=1241): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xb, 0x100000000, 0x1, 0x9, 0xaae5, 0xffffffffffffffff, 0x400103}, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x190c, 0x2}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 1m10.677540481s ago: executing program 2 (id=1261): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) setrlimit(0x2, &(0x7f0000000040)={0xfffffffffffffffd, 0x200}) 1m10.617227702s ago: executing program 2 (id=1262): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000008, 0x12, r0, 0x2b09d000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x2}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x2}) r1 = socket$xdp(0x2c, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af13, &(0x7f0000000040)) (async) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af13, &(0x7f0000000040)) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, 0x0, &(0x7f0000000040)=0x18) (async) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, 0x0, &(0x7f0000000040)=0x18) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) fstat(r1, &(0x7f00000001c0)) (async) fstat(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r2, 0xee00, r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x99) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x99) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f0000000480)='./file0\x00', 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 1m10.602725732s ago: executing program 2 (id=1265): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={0x0}}, 0x40859) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={0x0}}, 0x40859) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x10000, 0x6000}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000005, 0x12, r1, 0x45801000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000180)=0x1b) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000180)=0x1b) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)) openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10000, 0x58947a5b18566f1c, 0x1b}, 0x18) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)) 1m10.176728219s ago: executing program 2 (id=1274): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0x0, 0xfffffffc}}, 0x30) chmod(&(0x7f0000000180)='./file0\x00', 0x1d0) creat(&(0x7f0000000300)='./file0\x00', 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, &(0x7f0000000500)}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.empty_time\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x0, 0x2, 0x1b9, 0x7fffffff}) fcntl$lock(r0, 0x1, &(0x7f0000000140)={0x0, 0x4, 0x9, 0x8da}) r4 = syz_clone(0x8400, &(0x7f0000000240)="c4b8a49a3d47eef05af103632026542b24779d8293d411f0d8b584833c50810dd68ef1c69ddb7a101cbbc8fd49fac9e4d46e1b9888cb7b0a3e2c085272e9065704556c1ce376813448a9232377b11e83a0f44b7864e008cd3ee24d93245897cef6da604d8d182bf0b7564a24d7e4900c5d1aec6a88", 0x75, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="b53e3cbfe090fcf642dd75d41daa012eb03c84cadee73872c2d7782898d5c282878b3cf8e74eac04849467e454755bc5ccfc6c9d6a267b974c60a5d5f76b954b73a547721782c7cdd65d995caec4f3d5b40ce06a688a35fbba015b543edab68ff0288667073b9270f1576d3c08bd99c764466fb9567c333647d3b3c967fbef9b229916a611bc0d75addf572bf3849b74") ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000580)={'\x00', 0x3, 0x40, 0x2, 0x1d, 0x68, r4}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r5, 0xc0046209, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket$packet(0x11, 0x3, 0x300) r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000007146810d21983ff50310102030109022400010100800109046b0202ffffff0009050402100000fa00090582022b476df000"], 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f00000004c0), 0x804, &(0x7f0000000700)=ANY=[@ANYRES64=r0, @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r3, @ANYBLOB="2cfa8c1ae4ab0542c73d", @ANYRESOCT=r7]) read$FUSE(r6, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000004300)="afe28a28263ffd9dbc5af980196765a3c1f82c4a1fae7a322fdf0f6eec50303f6104db417704a701a8d6c5e7f5c99a5cf3eed4e0e1c82545122d6933469933ec605aaf61a5b8b1f8aacbafca498796976da62837e4a0d818ea71474d0412cfe162a7260456c425f2604cbd262e2aef92d09d6d2e105b7e7d377c95ccfe1d0f9af9f7e6a6d85d4a8ebee6fa703efd8c4a106793205a405938d47f97266eaa5fda88f11a03a8305399889ccc48f85c4b6a7747f489dc76c93b06be84635190224018e13954cd2fe714fec88f6aac3c57d5fec99307b8c8327e8854000e81d781e2f5bc37e96bbc3077555f696c6fadd199d9bfbf0997e76925fe17923ac5976e32f52ee407c43070cd8a709a2326ac96b94051cd0cc8f29b43edbc4ed850ae7a30b45db7e72114aeb46bd3a91775582c9206a638456a0e3da847a7be2e21620df89ea7e2da53f77f39cf0eb2d0b601d507d4dd57a534b5c77076052cdb03dd0c241f75f442fdb07624ad9d9fcbba92a4f20b20b424e3c9c92f2831e5efe0be454f3b4dbb9dbe6152bb152206ff0451edeffdbaba54deb39f00e74297c676effb60950dce7a847031ca85a1b3690f573bc31094d6e7d95f5821c0eae6a2685958619d94108eefcbc0dc5dda47ca509878dd8caa875d69af6c88997b5d67e5c67bf9daf89547a55061eb0cc55e2c696b71c7384ba16928fa81f7394a048329c467ef813df172236464f9d1418e5d5386b0eb6d5c4f765d0246ee91ab39c07310b61680788e3a57dab96d1eabe1a0efc2b6c882aed50d993d15f8561bc1f6bde7e79b711bb206685344aae196c1c4b97cd515911341cd60c6ad108e0013f87d063385ea5f057de4315284cb6f8545436981ce1c4bbf13f178e3a504bc0c8b1bead105f7e7622c288aca7206ee18dbb97b1b393d102d9c65e3a765e87f554d98383e4e49ad1c600d8fac4acb970ce04e0c866806bd44b21b5c891c3bccefb87bdf389d6a36992cacfe52b96e7e1014cc58ec29fe0ac221ea6d49f759f2a746e7603272d572515fbbb33d2b6f94eb9c6571118b606e18ef88ff88366aa3ecccd6c845f9b8534f49997c940a930693fcdf742fde3676c6cee9eda06ab856a4dfee75c7c9cda6b11da6441644b62116e6fdcae5b5e0148047028a5842c21fb9637771a5ac84ba9740c9c9b56b58c08730a48e81c05b312449edd27843c173d1875c28aeca43761a06fed193378129243aa514bf74d6b76ccd70807440401948d6f3bd9a352cd432e1289f2d4e78add381e4477dd8ac2f2ccd3b6533121ac51c393dc773b9e120ea8194e51d76749b4f0c4e6e40132ba1535015d5ff224ff77310be5a31a6defa004262918136b9db98a94a1fd244be1f5a7cf6762e7bea536df1d312a72776baa881833d295f1a60f2ac98d54f302d8fc72f135ab3256d065a618b60d2a6982ee89c60bac90dd81e0cfc24118c568e8e3a29a9f29e55f479a8fb5638d6cd724605b69aaacafd440020f4776652537454041acc13cdb0bf1489fbac78c4bfae755b259764756407204b22cfe838ddf82523c03b4bc1eeb55c43b1f50b7d03fd4da448ae51cc4a844fd0240e0d131c2693ed770844bf25e3bbea974a5c2a40ed65f1c3a729ed93ec22b93899aa861ce301e1cc1f3e98846a39a49169cbe3eef35e3595207f1014a8dc89d6b512dc05cd23ed4b4741f6ac778794cd1282f42a72301f37816859cb92d53db6793f294df19d0ef1bb453685f3c666b3941c25c92b204c8307c0e83469032f276cef4ce538a4570d652aa212de6fae8ae4d62399de49f0d4bfc0a47fbd79e7a86e12c9d863dde004f9e9d605dac7d688dc5daff78c27bbe727fbab0cd3058e75544261d5d83468ef23e3a224f0ec460855aad927c5c5b3bfce0a3e3c45abb0ee6dbd04242ec765e324209bdf07f4ed21eb15e2f030476fbc3cd05554f54858232625e9b37ac41b8e354ebc85a0282fbf9ad5d6e0c2d7b093bc1f887646faa1e7622f110b546dadf44eff6bafb2a58631a93e560bd67b42ab96d4a9f044f26a481feb8b3f2018a7236799c2d1877a63e5fe64dd207be729eb1cda7977d59bc139e1d2f6cae1defe90b8f6a99ae4dbac317413745521247f3691e894af33c7484afb11f4d2f858ee87e93ad202f9853c6ceee0a92e052225ebf283a017ae2e7cfcf924ea4e3b319a05a9bfe3f476308aa5039fb8a7d3642043957a2090e0727120a7aea16d16e7a4b15d5676966041f76188fb69d89080b6eb2d4d42bc84e298dedda4db06b78df5c7198230ab439f0c3b4f3f649d531664c59eee2d73fe14f01133776b717f6b7118afdb264ace9e44af5bfdf35bfa7f7ab538004c0085c11da725ed284a34c7f27da78acf488bd0f54e6026efbf81af934558c36473d0fdc85519e11b4f30fa3b7ef757c35f4c88a360549def898cc460557433e44621589e71f3118003b4695f3130dc005d32c0330b950c12e430d2a2a6b9a68995bc9e1345dcfa30585603f09e74296cffe8d758b216de00e8302eed0e06f94e7bdf835cf27fcbe57651f36d6d2de82f179f42fc8e7fed4f5c7f5b691c6e038a76cab3e604e42ceda945e155db89cc0013564726053ccd77cd8e626bac72468ae0998f686450d5e0a17ce88e1b15d05f212c336d7cb5013eb94fa861b588be01ed252b487b4d1918c87a341b5daf74f3083bd49ccc6ee26ff8993b5398145ae7f9505c1398f1bdd2cb90636f9e99da243cedccc97252fe15ee10e886c187e5c614f33bbf630c654b1d87e693b765f3a36b67bd1fb46afcd24c96a00e00000000000000abca853d51694da85296a430b8856f51173946c9f143db65fd1b51b9534657d3a7953ba7186651ddc6f0a625563c3b43cfbc83330507d399ae87731e1ab1f15320779da21d2000d85155a8c9cbd6f642695a565dec615d7bdf8a47a76005b3607cde6176b8303b7eeb2212179d6f5176e45b1759810fcec418e6c41e7b33da9f92211631a070257cea55e644498466d5fc5744f903e6c4a2d3809eb6e70d50a82f66a1a05079ebe9ae0b756bb2781dafd14b1a06c0eb2c9b77b0d8d005d47aacf5447a104f85df3decb0ef8bf1483b47be9c945b95634c474f9cebdc97a91f85aba7172d05cd7b06afa043b8900ab400770fa270029e34ebab31a69367a18057ce532cd66e52b807b8665475977a56ec5407c778994ce9c85e8b96f1313e468cf83d266f14250acee2a4a52001de174d2208bc2a679916e4231fb30a99263a0398e99e9f8236010f17a5de367d673a95b374158d2baae4612ec6898d0fec2f95b45c6bd760a0cabcac1067470492c5e66c11ea745ae803dd24a5c89cac5a0d64bcc15648b1d812be638d10311d640b3251a8001619d09f138bf04e35c02807c2c87c222a6f54da320f0169cece864f4d37af54f0fdcfd455051c0effe17d2c04b3b67807af05cd8176017cd8e35c1ca1b13112f2dddde84be95ef67a6c8ad8a4ab0e7175fd124bda62656c4afec4dc8c0261a855e75575ddbb375e45a5b635fc7bc528ba387dd24f485ba69a9ba2761c243d359bce078d0ba0cdc13b6ee7d66a8546c49a4429af5866f866ba2e1e0a10ff4a3c3b5e240d918f6a896c35f51ad7b02e6d0747ee80a99c8812577600e359b703e571ec18d6b88866f28aef250de65f39b266f6795237f7d3f741127f3d47cefb255d1b3c06c7d8fec9bb8e5c666d7ca7b803dbabc6cacecbca1ed8e89ddc2140f45c4f8572c146d7ab2be20eb72baaee4b1d371aa9f06833ba1a0cb66b701c1fd90e8bcdcfb9bd57a8cad381e7cb2b99250d21384ebf771833ac6f32f4115fcb0ffa177dcae6673b1ff80cbefbaec2c863b263035ad2a0d0a340fed260d4fbf008745bc1b51e5b011b54584f6c0cf3a401f8cfd23f23e830a311bec365064895cbe8a664184aff212bac6f164f6b619e4d8521ae447abc8f59b284aa2e94061aa15afd9070fef452d4fd644da4b6b716784109d92abd31d3221a76eaf592e6529e70a67bd92cdb431c7af9f658b2ace3d954c4a5208f1edcdb8a04461262ed26b24bb3df41b1c28ec42880590b3685f56a3982250ae96c7e1fcb9aa6a9887639d2209cf190e9ea82d5634513eb36c5c0e0769250948967240e29921da36aa0c07c76c81c7bd8b7f1c1c9063b4b1fcd88f63aaf568a7cc9249fad5c996853dd160d80f5251673643fb5e0067c97b0d2b513c1d22a3c2e73786c3c5c17f14c57c2df7c830216e5c3ef066468069428501e1a78c935f4c520c5cfe9daa89ca4bb4895fec8a328453ff630848eeac719bcc09d7bee73e58f4b7cf90f098bb7019c73912b630af92ed9b309c53c5c4edaa3788f9e6d486bd363619cd2c140d9a7175f6c5f977eb6e6f58f18c8d0ace671570e0dd6ed78ca228782ddb71c6f137cf0e27fa85b52b1c15ddf184a72dab098a8b1c1f6746238a8a92848f2478b690b80c131c85e90b69953f5eb54c0b47d59b7e440190e1c9b2d72fdd94c64296ca33aab32cc8f69091df05aaefd4ea00303a3522672f01b5373abae33d34844831a1af2e51276b61e637a93e02e09c306e5fb9619e82bbcf0e43e2f5e8ec8a458b9f1c612634645eb82051fa34f4b13439c3ba2e016972df37f197d09121bd377b1472a2da64698efb11cc88fa36ac173c83ee155b73716639f5d73a29fb783fb27e5ccbab5f9b95a4dca6a7406cd053a7ac9ff25f42ebddd9afe7df308979c314acaacecea602267c6d57fb5f5222e4ccd4b18573b32d6a19f1798a1d78b36b32f0723f7b33b06c2ca43b22e4cce6cda741b3e68a056a0cd6d51b6929cf4a16fb7b2490cbe87e5612dfa7d26ad40ec412021f9033aa2884ee86c7610623fb64663ac5554e694e84877708e77d243bcdb198714fff672b0f927f9cbe5b2436002f02a559dda5232cc150170d7b32d547a080f852c6838809f8ae1995e7ad4b24c7d1ecdb6b5dabca5da671493a3a1b4da1e7ad13ca4b4dbcf53a71348366cef7ee45cb719a8321205aa70da47104e66f344393e64dcfcd015b9d6bc75ec3dd31551de4b614bdc4d89c8de1254a91c4f33cdddf98d8ddf36e8cdc537a7d11dbf51913ca87ca9f644a2a08905e15c0f2bc58168e425b52055e7878ba468909dbed30815e01720df5a1be196471d30c1525070efa59fe62720960e473dc237d7866d77e8ac69cbaa50cea6205b7ccef9437b132f41e87906f3b9c48e9750e7ed1993597f8e599ab8596f4378853ee10e26289e72b92c425f5f0ad0f94d4694415739ccfc06bc5a49237157071116578df4f8aaa1eb4c123c8ada753e4a631f3f9660fbc9404d8af9ef1af380ccee1f2e520c03615fe7c5d276e917d84061f8cc0e5814caac9ecb0ebdf8bfae551197d66ff22236832a0ac38586b059a4ae9054d1810d361f50da921b33904cb6ea7faf44b811e7f7348d07cd32c8f83da01d4d74092493ef5cd3d2cbb9eeed6986f3e4615b8d341cbe13d6eac3bc1e9217fc2f86dd0cab958a6b4e0f0604501b48d352118611e96a974e3642fa785538e7d5b3bc7a363ca95a98a0816e6179bb438f3c110036770da0978987ebcd241464136b2a8d45bf1c2b499b6dba8e44448c73163ae7df71d7c98b705af886dc195cc918c2552fc1696d6749222a4e83279a14001ccb540a64a713fa1691c30e99ae0bf8fdacaaf4aea9d4f89db7d4f364f7a30c80b782f5cd7af01347d78769902f2ed675b6b859b5467cad1bed59a64f13a4b5a827e029c9a3107b08e5f18b930855f7d85f1d78d45d7d3c909b87213158dbe5cfda90936388885a32a61529ab30bf31fcc1d6df9ead0f49ada899dc8be042d2289383f6d09411aea11e6002359ff2e36345b8454ec5f126db94349666a3666323ca164a0f72873b63c9dcc0c60785a66862655d4ab5749bc00bd98ba9e20325e78a572fc93739ce884f3398218c614f8ea33cdff4b797dc2c2874d20670733f30acf52ae4d14c9e83f54533acd42931ea42fcbf89f7a8e68c3c8ecefa4a1e1c693244d4604f9488df30718c455f719a6d93b30173305264c9bdb21e8a68a74e7310dbecdc27afc7b162466c444ce4bda0d937104e683349828a4f0ca8723d54fe13287286f7a6dbb8ece6a7ece355fbee7424e7e524ec33ed5fed03a1ea964af0830108c5e69a071606d9d28450977245cba4d0e1ed8177752526e218cb5e113dff2236c663808533c580da3d83ad502a3d5d30949ca2cea660ccb613cc7661d6857b3b70588976ac8ceed944f7f738e43101369bea05a26ff31692ab45b6c95f794a5c92d8bd42ce8803162cc730782e0c1e468c9d090488763d9d1f1471c2ab1cd8599e078d81a0e84707ea02a0f91c3d588bb54f1f5ba58845617b80263ab8fb2c6757d72eebe00591c7b6cffddb969f6fee2ef9f016f641aa2ccfd59c839ba40ac1a10bb9d94f96e1c6829dd4d2dcb9d0f71726c31d813fa78af8b7621fa47f4b0ed9d9d98e4209676969728a00a92dd592dfee41c806076f0e4100e371c7427f888ef91f03c5b16d87b2ade294f69b77afb199de38bfebfa3ec9285d1829c7c0714bd100c84efc8eb71146a1d4c7f659d77c42119b738d6bcfede23855780a6627d4a417aab498ec60bf69c44fc1f3fd4f99ed941a1234ad1f3120dcc71275c464be23453749841dc1c36a76b28b3659e809a1216aea67658ff76e99580cb202eedb9d4cab23e879723d11f8d4086362271f8f2e6816d47eaeaa5066c3c4338868fd3c8b832581490b6801278e9d1d59771dcc73eef6b9903ba9b9f5e565eece392568c878662ad9cbb931242a27d883fe7839e7e502c368e736f5dc057ed2e4b5c963c54712c772535e22e94c61a13ed50682c065cad0d861b3888ef332ed0236e2747720f97793b46eb39b51057b44f2b9e05de8c077cff7ef5afb56a5d28754d76161909a05573f8aaee5fdf260d80eda7e1b83539e09362a4f9aa0e8f069e0cf221eca87593457b342de27c99cf14c4bc0d8050aa19c8e4a56b3b5d2c3fcc23633f5ab20ec063270c9922292b645a5523f9bba5c6f66368c227bb4b2ad6c1f4c8927552f6b41a312a4bec49669e2968a7d6bf30cf09f8d3fb473ce5a839ed27fa906dbf504aec3a5a2884bf4c569235202dffa763b14f4501ecb8608e77aeb4fda0e4177fad0bc02da3224f183355ad62f6c50efa3c8f8e02bf3cf47ff31210606bb87ce4acb53ead7eff942d65d9905e9bf6acf5829eed4855da2488e0896ad346da16a5c988e31b0632592a2dc3030d28b6d62a3a4638a0a3736f5103ce5fe72baac7fa23d5295c42cd81075ca9f7a9a7fe3cf418f50f7eccd8a7c3e6fb1e8b30c5d8dbb0772a8b44f44cebd8249ce10eb24d1f668765796b4a56a482580456ac49db677284f3b2deaa9514973ad5c156bb4961b2ad05bcde1bcea522790765208eab6eb27777c2ef643ab0c85e9625d259ae29a3b2e864bf936cefd90b63ba2281f8bf8505ef6040335c258d338c014c31810a324dfe382699ac0b92a2747973a297e94fcd75ec7d156bd61cf848d7144f9a9dd89c72b9c323ed6f37110f722da90396816050ad800fb33a92651b0356fd15c4cf876a3509ab32cca3f5bd6906ce5ec186391effb13fac0a10525622023645bfb9742472695c81461db0298f84af1983b6e5e94ae355e0e790fb51fe558bd70e889744872c9ababf42b930340e192ab4295ee72e1392f2bbb137533a919d72e651cbafa37a88232d0f464bd4531e49c65abd629f3e8b920ae3bde61a3538514866f18a937848f7bd99e4a0fbea506b9ee5a0400000000000000020f91d65c88bf2251c617cfde3314ec540c8128adf417f1ee716473c3d3c049dc7714a832c128869bb4a9bad6f8be1b0a6bb5c0e40417d594a876a5fb50055e7c67e2519698e5ca89fada7c84032a811b0eb5c67364ea809c6be960c9a7b98afc8e6315e780d8f556b97ea65b7fd27ca6fab61164d60a109d182b9b8f7995ee915eb68be320000db4b0bb821ce13a8d55ff70629a5f2bb89a1c7a4b874b49bcb13105493a9560344f89877e7c5e409a15bcda6d27073c3b744b386b0b82098d307dc3aab1ead4306a73cf8382bd3451c0aaa14a8333c6f34e6b5e5d3b240e01243749b3938840c835e16129ddca5d9439511b4fd22752d904dcd60f9405467918e48fa17547493e51a14ccb47128c7449b51cef63178f32cb06155b9e9cb65dba65f8a6f9a45d8d49852609dd0cf8418f463cb15eaaea77c1c89f530c1f6c6c7820d66957ff2fe731628a328f4e7896d5cf6fcc0782c05c47b8f01d28908913e379334fa90ea01906e865202fc6386fc69fb683a1dfd037ec5bbdb368b3530a3cbbbecf2107faeaf32081c65b48a3bd352998df0a781dd86c7c8112407db1bf1ac6446a0c77e8f2e3374fb8217abd59b3d40c9582a3ab663f278a83b22685914b4b2bacc973ffb2dec5e6eb98d6c16463c1e9a896ca4e65206687ca4423c359b4e1ce06a57ecb083b750026719dff109a1d823b4ccff79e5ce416bf3756d913b31faad8c0bab1c62276a581ba8830da7c59c5224db7dd38b032db7cf7022502a8f3cef31dc8344a2d02af978d6f901b1b0097dc425f4f34b73c6ee02a8b48d7a23299c1c6e5190221f84c2ecfe5bdb67b36c5dc23455ae466722c5e4f52b07aa667a6cb55c6a411225e88cf513c7cdd2065a1e044c0008f8b6a5b28f3f00f14e7da47e944ca666cec951593ac26ce5e75f17ca2d438dd8f926ac57d1761a72024187a2f77ef42a7d246f906166afecdcdcf8db8cef6f8855ecd97185fda05bae717eaf3165b99021fbdcee50384a22c8c025c8f82d4839dcb0a6075642dc453c21a4dcdc997d70315dce9a3ac7eb0185924436965d1376624b5c08772ba59b142a066bcd0ad044628e463921d78f1efcf8e8cd1e0fcf525115ae2b104c31561574003770c21e847ab80b65d3a2b53e6ad4a3d5227e3bc82b58b5feabc9c70b55264b32b658227851518664baa871f8128bd826ce818be1edef708e033155ed69a0bd83b246d83ac85b33d7370dcc7f930c25609e2e5f86f1738ba266b079a3743180b9b84a24e4915b1743834ec319e5b238ba6942e4128348be821b21892477e4c5ad3a2031f0ef11d9d54cc90f87cf093e582b1384c8960c36421969f7ee247001f37c66f10ff6dc3edc7de984acb599e9b8bd3e792855ddc703698578edfe74bd27e967dbe77bd4cd0bcbe08ebfa7c5bf95745e670438097ee29215d3ecbde9e8e50e14ec41a9d746de20230140d854e36e95f7c13446db26715b9a30a3d3afa3a5645e0afd3eaf8457a87c528792241e99a415b8709ae334bfa81fd8508c77b50e3d1f2ecf8f7b6b1d187bbac0bd3d49f00fb5c21836a2bd79ea2839bd3a1d396422699dfe0958479c36964efdb2f602d25f202a534df612f347696de6fecffb673d2162f2572c6d04895fc22b638dbf54dfad4d6058683919ec47cc3d3d1f5e4528bae31632081b9b80770ce0e7d44287e18fde786801e7beda77c0b9ee3965f3a4956496fe8e892b65e137d9e47e8e164f7c6fe9c6ac9ece1b7eead32a5a188df5539537e1b736f1c5d67b604d064eda6b6730c51e182cae81e65290f12f68a7146888e438a799d04931f2a0b9b6c565d47d9d322e7358ccdbc08eafc2470414c44f97e33013b976b995bcf96409789bc2bc97d7add4b6eaaa84c18ea936f0eb332185f9de597d6f7793215df2c0be4b5b4085910adb83d248be16deeac399070ad00a24a67cebef51694726a612ea5763f1bbff03a77357d867ec5461c33d73a47db4a51b496be6960ca7c8cb92a51dd578f99e4b1d2b18ce406b2751aeb065ad0225aeb1eedce3b26e3feec915361cd6b4acc105a2962edcd6547691a557f4deb9ca96d39bd92ebc96e763b6139a0421f42c561a7a20ffebef94bc0b7538466064610134ede0221cde98d085531471c0e9761880904952234f0ae34502b3790aad682fe6e7fd7977816e21aa3f7793ca99312ee07ef9b34a31102710bbaa31dcd57d941e6d5fd6b6607d3449bbffb1434d67edc10727230c3283ab7e212152039e9403bc7ae082cb3934794468dc7549aa35cdf35d3c0f754b7fdf47dbb5bc5047923f6841b9a4054a0eef23de222f0ecc04410fccfe3779820d2ac659b84ea56eeefaae980f1bd43aef8e78705ce1995cee4f88400903f66e6d24307090e23d04387909a62a3394890118549baec01b6f2a5c416f68b71bfc2b7a0bf289587664a2b6194d4eccb51bd4177c9487b724f91d088ce68f20882a8dd633b17ad73584e68382877eba4fae1af839baca07f3adc4c9796e07dc69e90bd5efe3a84d3ca40fa8209c2bc9c9303ff2c7979a9508d925c021cea6c7f1483b5c5b00232c292f302fad79aa5fa4820b04a5aed1f9be4cbf4430bd2b6b559133979e5239f514e87559950808fd098792c0b1bd0b9cb94463b22be92962692dca35a8bd0fe0edc28e7e759d2d753177fc29860d419a29fd89c0a2c11e957483f9c13637e2f66e96bf3454b943b7dd368b71243ef58b0b3d469cdf5572a990a5c998c5796b80031f56bc98f5bf70a717cc5ff4febbfc32b29543548d8862f1ab57fbdbeda2a9901593c0d92d4eca205312c18ce649ed5a3263b66d8ca52734a16035daaa182c24e9ae2851e8dd153d2fe34978e8df50402f133190ada04cfaaac56ca6fa20771a195c76a84651ca4aa9c7c4eb16007ef1e965055ab6cb08a02db6c1a82f8c695ec370095c0afd535ed8abf17ff514451055854a99de69863f393e1679ddf5326e1f4de42220df3839ee71c8fab2c3faee9af0f5e9ee5a3c4c146ae7d36536064a11644a9a195290f3d75f64652050ca8a1ef17eed6f5077a651af1ce5304f2e6fa781a83df2a7c4f5e1c8337d35f93633d684803b7bec4fea60e1f9925580f9199f40f307bfd84de2d51f1df191eeb52a48ed4a19c4f524cc26f7043bbabb1c43c4f20d950e218dbcf09a8bda0e1ca1759466938dd764c85c3d8de92b3534ff5c492d024e6ca87952243fe8b6379ba189032926685afcd3839a4423ba19cb0c5488982ce7cad134c60bc329f855ba4be63475ade6110d6db66613c3c7647e76e3949f8e5299738014743523662fd6b1626bcc0cffdb3b757ddcbeefa2facc49da06d907d21888b9344a3167d143e5f8e022d8c75229fd491145c451ac92f000aeee43219215a8136c7c17327f6e0a3eef7fe1861930d143d92f33aa74984c89f9ba3e9ee887bef4f9b16654cbc739fd6b2eebb255596dfd6639896685b72b0e1ea92019884468f5c78d21a3a69df24a3d8d517cec2122417bad0ac7db0182cc87b8b752e7474a36acb8508d118d44d509cd8594dea3a3a611a6c1c0b3bcf48b4834d8bb5cd18f420ed7aea21810c0303ca2d5fc67b116491f1bbd055221c79ec0dfcfc22c17cba3eb4fea49127615fdcef9cbecba603dd2e01e07af17ab0f4a6179f54edb34db2dc0c937a0aa1151c8a9474afd1af7c0a83174aa1fdd8e4bfb9b10841df5ccf068a5612627c8724b1c68fd3879a57265836409a6d851f1baf0023ca", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0xfffffffffffffffc, {0x88, 0x0, 0x0, {0x4, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x4000, 0x25daa903, 0xffffffffffffffff, r9, 0xffffffff, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0xfffffffffffffff5, r8, {0x7, 0x21, 0xffffffff, 0x50339398, 0x2, 0x6, 0x0, 0xd9f, 0x0, 0x0, 0x40, 0x6}}, 0x50) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f00000001c0)={0x1, 0x0, 0x1000, 0x49, &(0x7f00000000c0)="0ce18599800d627b711575e7ed5d612e221b1e5b75a514bb8e5ca79cd1debb185016856460c60417dfc117d2757168808feaa05737a02173df0dd5dd2ada62f7f0c717ac7c0b1bbc10", 0x46, 0x0, &(0x7f0000000680)="5a1d2b0d4f626da4e1fec6269edc9068d47b6cbc3b674d1e2ca14af0a3170a7540522bfe424c43b70672a3ff586c08f7a5c37ddfdea4a628d6ff4f541f53bf0aedd84d978267"}) 1m10.133331659s ago: executing program 32 (id=1274): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0x0, 0xfffffffc}}, 0x30) chmod(&(0x7f0000000180)='./file0\x00', 0x1d0) creat(&(0x7f0000000300)='./file0\x00', 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, &(0x7f0000000500)}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.empty_time\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x0, 0x2, 0x1b9, 0x7fffffff}) fcntl$lock(r0, 0x1, &(0x7f0000000140)={0x0, 0x4, 0x9, 0x8da}) r4 = syz_clone(0x8400, &(0x7f0000000240)="c4b8a49a3d47eef05af103632026542b24779d8293d411f0d8b584833c50810dd68ef1c69ddb7a101cbbc8fd49fac9e4d46e1b9888cb7b0a3e2c085272e9065704556c1ce376813448a9232377b11e83a0f44b7864e008cd3ee24d93245897cef6da604d8d182bf0b7564a24d7e4900c5d1aec6a88", 0x75, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="b53e3cbfe090fcf642dd75d41daa012eb03c84cadee73872c2d7782898d5c282878b3cf8e74eac04849467e454755bc5ccfc6c9d6a267b974c60a5d5f76b954b73a547721782c7cdd65d995caec4f3d5b40ce06a688a35fbba015b543edab68ff0288667073b9270f1576d3c08bd99c764466fb9567c333647d3b3c967fbef9b229916a611bc0d75addf572bf3849b74") ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000580)={'\x00', 0x3, 0x40, 0x2, 0x1d, 0x68, r4}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r5, 0xc0046209, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket$packet(0x11, 0x3, 0x300) r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000007146810d21983ff50310102030109022400010100800109046b0202ffffff0009050402100000fa00090582022b476df000"], 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f00000004c0), 0x804, &(0x7f0000000700)=ANY=[@ANYRES64=r0, @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r3, @ANYBLOB="2cfa8c1ae4ab0542c73d", @ANYRESOCT=r7]) read$FUSE(r6, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0xfffffffffffffffc, {0x88, 0x0, 0x0, {0x4, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x4000, 0x25daa903, 0xffffffffffffffff, r9, 0xffffffff, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0xfffffffffffffff5, r8, {0x7, 0x21, 0xffffffff, 0x50339398, 0x2, 0x6, 0x0, 0xd9f, 0x0, 0x0, 0x40, 0x6}}, 0x50) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f00000001c0)={0x1, 0x0, 0x1000, 0x49, &(0x7f00000000c0)="0ce18599800d627b711575e7ed5d612e221b1e5b75a514bb8e5ca79cd1debb185016856460c60417dfc117d2757168808feaa05737a02173df0dd5dd2ada62f7f0c717ac7c0b1bbc10", 0x46, 0x0, &(0x7f0000000680)="5a1d2b0d4f626da4e1fec6269edc9068d47b6cbc3b674d1e2ca14af0a3170a7540522bfe424c43b70672a3ff586c08f7a5c37ddfdea4a628d6ff4f541f53bf0aedd84d978267"}) 42.302296812s ago: executing program 3 (id=1674): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x80, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x8, 0x9, 0x0, 0x1, [{0x4}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r3, 0x99b33000) (async) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000080)=@usbdevfs_disconnect={0x1}) 42.300190212s ago: executing program 3 (id=1675): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001800150000000000ffffffff0a0000000202000000000000240009801c"], 0x40}], 0x1, 0x0, 0x0, 0x40065}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 42.282246072s ago: executing program 3 (id=1677): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) geteuid() r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2000, 0x0) shutdown(r1, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x16e) write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x8000, &(0x7f0000000580)=ANY=[@ANYBLOB='mode000000005,\x00']) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000029c0)={0x2020}, 0x2020) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 42.183770294s ago: executing program 3 (id=1682): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_on}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./bus\x00', 0x0, 0x80) fchmodat(r1, &(0x7f0000000740)='./bus\x00', 0x10) getsockopt$inet6_tcp_int(r0, 0x6, 0xc, 0x0, &(0x7f0000000000)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040e7043000000000000001090224000100000000090400000103000000093e000000012207000905810300"], 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') getxattr(0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) fcntl$setstatus(r2, 0x4, 0x460c0) socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) dup(r3) r4 = socket$packet(0x11, 0x2, 0x300) setpriority(0x0, 0xffffffffffffffff, 0xd1f4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x4, 0x0, 0xd6}]}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r5, &(0x7f0000000080)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r5, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x6, 0x5b, &(0x7f0000000340)={{0x12, 0x1, 0x51, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x49, 0x1, 0x1, 0xd8, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x4, {{0x6, 0x24, 0x6, 0x0, 0x0, '\b'}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x6, 0x3, 0x3}, [@acm={0x4, 0x24, 0x2, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x6, 0xe3, 0x3f}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x5, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7, 0x9, 0xf8}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x9, 0x2, 0x3, 0x10, 0x5}, 0xfffffffffffffc30, &(0x7f00000003c0)={0x5, 0xf, 0x23, 0x5, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x4, 0x1, 0x919}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x33, 0x3, 0xfffe}, @ptm_cap={0x3}, @ext_cap={0x0, 0x10, 0x2, 0xc, 0x3, 0x6}]}, 0x6, [{0x46, &(0x7f0000000400)=@string={0x46, 0x3, "715467f57c2f9198e328b6a97273b186b36d87fadf7bd255833b1d63f09c9b3edab91a21d6df6025584c8b3f6328b93df0959ebb7cb184eec2363ecc1e8e332116767b73"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x421}}, {0xc, &(0x7f0000000500)=@string={0xc, 0x3, "8812461d44d6e3e3960e"}}, {0xab, &(0x7f0000000540)=@string={0xab, 0x3, "4c7f6cf129b7548c407fa18a6f3536b319fe3279da5ac274b29b56cd276b91681c226839f54bfac35f914a1987d6dfd56f01008d24db4d6b69bc9b79c9ee5df000e93c950caaba0c82b668f0f407366d8c19d9d2447934700898d93731ce96741c2476a9cdf6e042cfff53dcfb4cf1608ea651a7722cc773c9b0c1b96360f806d9ca0eca251c59be2cce19b7ccdf177675b9188d2b443937e8c98768e7e721f0c7ee26db806ffb6533"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x455}}]}) gettid() getpid() r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) 41.021396612s ago: executing program 3 (id=1703): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/255, 0xff, 0x0, 0x3a}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x34}}, &(0x7f0000000080)={0x0, 0x18, 0x40}}, 0x10}], 0x50, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed9ebe8efffffeffffffffff728b92de30415308030f0eab5b670b00000000000000f98d795a638622681df1ca222612051f61000000000000000000"}) 40.823010995s ago: executing program 3 (id=1706): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) (async) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000040)='cgroup2\x00', 0x0, r3) (rerun: 32) clock_settime(0x0, 0x0) (async) sendmmsg$inet6(r2, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}], 0x1, 0xc8040) (async) sendmmsg(r2, 0x0, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000340)=0x0) timer_settime(r4, 0x1, &(0x7f0000000380)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) (async) splice(r2, 0x0, r1, 0x0, 0x7ffff000, 0x6) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="6a3f3ba9", @ANYRES16=r5, @ANYBLOB="7be029bd7000fedbdf2509000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008084}, 0x40000040) (async, rerun: 64) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (rerun: 64) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0x7) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x0) 40.800997016s ago: executing program 33 (id=1706): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) (async) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000040)='cgroup2\x00', 0x0, r3) (rerun: 32) clock_settime(0x0, 0x0) (async) sendmmsg$inet6(r2, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}], 0x1, 0xc8040) (async) sendmmsg(r2, 0x0, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000340)=0x0) timer_settime(r4, 0x1, &(0x7f0000000380)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) (async) splice(r2, 0x0, r1, 0x0, 0x7ffff000, 0x6) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="6a3f3ba9", @ANYRES16=r5, @ANYBLOB="7be029bd7000fedbdf2509000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008084}, 0x40000040) (async, rerun: 64) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (rerun: 64) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0x7) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x0) 2.834062646s ago: executing program 1 (id=2360): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x5, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x400000f2}]}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000180)=@arm64={0x8c, 0xc, 0xc1, '\x00', 0x7fff}) pselect6(0x40, &(0x7f0000000000)={0xb, 0x100000000, 0x1, 0x9, 0xaae5, 0xffffffffffffffff, 0x400103}, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 2.822731176s ago: executing program 1 (id=2361): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async) unshare(0x62040200) (async) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) (async) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r1, 0x0, 0x2, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@loopback, @empty}, 0x8) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f00000000c0)="c82d58eea93375eb162386e1f7479c3979e67fe05230eb09b4d81b27f7af922416ed966e3a55212c405b05959d10c9c8ff82bd6659dabf93d56a64667e6197128e5c163f5433216c0c2c1202a9a473668c2225f0525242789c27e97398c4419fd55270912614ba3482c8f70cf037673c8ccb0a4a7e1ec5152933679b3c1a3f4d28ed75e8c982364b9493a6a3452f36d4891827d724a7aa1a5c21a6ea45f40bd60b904f10ffcdc9caf6447044210a46a257546f6e4851ee4f5ed8c466af20aec8b5cd9b3d62a9bea4f191019407841703c8523538144f22cf2285597e872f716fea4aef2c6c6d1e1bf46b13759338959775c29761866155007349fcd464b1f739") (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0306003c5c9801288363"], 0xffdd) (async) sendto$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe1a, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600), 0x4) (async) sendto$inet(0xffffffffffffffff, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1, 0x0, 0x46, 0x407006}, 0x104) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r3, 0x2000) 2.776258387s ago: executing program 1 (id=2364): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002b80)={&(0x7f0000001580)={0xa, 0x4e21, 0x6, @mcast2, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x1288}, 0x20000001) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2044, 0x0) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000080)={0x408, 0x7}) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x1) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) socket$inet6(0xa, 0x2, 0x0) (async) r6 = socket$inet6(0xa, 0x2, 0x0) accept(r4, &(0x7f0000000200)=@alg, &(0x7f0000000180)=0x80) (async) accept(r4, &(0x7f0000000200)=@alg, &(0x7f0000000180)=0x80) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000080)={@mcast1, 0xb, r8}) r9 = socket(0x11, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r9, &(0x7f0000000180)={0x11, 0x0, r11}, 0x14) (async) bind$packet(r9, &(0x7f0000000180)={0x11, 0x0, r11}, 0x14) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r9, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[], 0xdd12}], 0x1, 0x0, 0x0, 0x80}, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "468008000000e56c", "32a8849e278cc8d2658fe8667a252e6d", 'T U0', "bda13cef98438840"}, 0x28) close(r4) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r12 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r13 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000010c0), 0x200, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r13, 0x401870cc, 0x0) (async) ioctl$IOC_PR_PREEMPT_ABORT(r13, 0x401870cc, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) 2.714286858s ago: executing program 1 (id=2368): ioprio_set$pid(0x1, 0x0, 0x4004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f00000001c0)={0x20080522, r0}, 0x0) (async) sched_setscheduler(r0, 0x3, &(0x7f0000000080)=0x10) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) (rerun: 64) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000000)={0x7, 0x64a, &(0x7f0000000280)="c9393b6ace0df6cfd118b60f5781d03ae34bc2b9d21bae69056a7217ce92ea154745e9cbd942adcd7289b9dbb9f53dba87b8550e0c7c5baafe40753e46fd38cac029f41fa7b5ea4ac43f8364edf59a24c35da511413077cd779063c0b49eed7fc458c22299d54ba306a469c2f9278064df8bb2ecd075b553a88440f51c9f23ca142a8bed271507ef2ae5d1d9721cd004be89e1fa345b2e4f4ccc1ff626afb0ee0638e856a3dcd8636efa875ede392908fdc570c2533a18fa1966ac6afed37db8", &(0x7f00000003c0)="cd8e843a3677a1a73a6f3bc99de1899df805db96ae06d4f62dc01e2bc869a8ee36788c4cb86b1ff618233341be65d75605c837022e39788465e01930ff966f71c48feab6fdd50a90bd364e2c18616abfcb96f57340839eb0ae05739fde4a47b8d1671a", 0xc0, 0x63}) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x103183, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000240)=@x86={0x10, 0x8, 0x5, 0x0, 0x3, 0xe, 0x6, 0x7, 0x0, 0xca, 0x6, 0x1, 0x0, 0x278c, 0x8, 0x3, 0x6, 0x5, 0x10, '\x00', 0x28, 0x80000001}) (async, rerun: 64) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async, rerun: 64) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100002000400100008", 0x51}], 0x1) (async, rerun: 32) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000680015"], 0x1c}], 0x1}, 0x4000080) (rerun: 32) ioctl$BLKRRPART(r1, 0x125f, 0x0) 2.707080418s ago: executing program 1 (id=2371): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@none, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x68, 0xffffffffffffffb9, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/255, 0xff, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x50, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f61"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x28, r3, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a00000000000000fc0200000700000000000000000000000000000000000000020001000000000000000218ff00000005000500000000000a"], 0x78}, 0x1, 0x7}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x1c, 0x0, &(0x7f0000000080)=[@increfs={0x40046304, 0x3}, @acquire_done={0x40106309, 0x1}], 0x3, 0x0, &(0x7f0000000240)="d820cb"}) 2.641316519s ago: executing program 1 (id=2375): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000000)=0x8) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000772904202404019957c20102030109022400010000100009044300020202"], 0x0) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r4, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', &(0x7f00000000c0), 0x2008846, &(0x7f0000000100)=ANY=[@ANYBLOB="6d18f83d00d748ea3d4177d6d313d4e76564dd0183a10332a2001e9b6608d98c9cf47010f7517c2eb522c10723bb99dee0de1381193c71979fe6396447a430756df5833786d37f8275bd604c2c6beccd47337d39ad00"/100]) 2.171229806s ago: executing program 0 (id=2395): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000000)={0x3, 0x7, 0xff, 0x1ff}, 0x10) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000001c0)=@x86={0x1, 0x5, 0xb, 0x0, 0x2, 0x6, 0x6, 0x9, 0x8, 0x8, 0x6, 0x2, 0x0, 0x6, 0x6, 0xe2, 0x1, 0x5b, 0x0, '\x00', 0x10, 0x6}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000002e00)="2210942272ce9a37c0fb001f95548ca7", 0x20) (async) close_range(r3, 0xffffffffffffffff, 0x0) 2.061282129s ago: executing program 0 (id=2397): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) sigaltstack(&(0x7f0000002180)={&(0x7f0000001180)=""/4096, 0x1, 0x1000}, 0x0) pselect6(0x40, &(0x7f0000000000)={0x5, 0x200, 0x1, 0x6, 0xfffffffffffffffb, 0x8000, 0x9, 0x2}, &(0x7f00000000c0)={0x7, 0x3, 0x5, 0x7, 0x2, 0x2, 0x100000001, 0x5}, &(0x7f0000000140)={0x7fffffff, 0xcc, 0x1, 0x7, 0x1, 0x2, 0xe0, 0x7}, &(0x7f0000000180), &(0x7f0000000240)={&(0x7f00000001c0)={[0x7fffffffffffffff]}, 0x3e}) r1 = socket$packet(0x11, 0x2, 0x300) fsetxattr$security_ima(r1, &(0x7f0000000080), 0x0, 0x0, 0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x369a02, 0x109) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f00000023c0)='fscrypt:', &(0x7f0000002400)='./file0\x00', r2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x15c, r3, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x100, 0xac, "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"}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_MFP={0x4}]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x15c}, 0x1, 0x0, 0x0, 0x400000d}, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) recvfrom$inet6(r5, &(0x7f0000000300)=""/218, 0xda, 0x120, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r5) shutdown(r5, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) prctl$PR_SET_SECUREBITS(0x1c, 0x26) sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0xf8, r3, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x9ed2}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7}, @NL80211_ATTR_IE={0xc4, 0x2a, [@gcr_ga={0xbd, 0x6}, @preq={0x82, 0x67, {{0x1, 0x1}, 0xfd, 0x7, 0x4, @broadcast, 0x0, @void, 0xdbb, 0xdd, 0x7, [{{0x1}, @broadcast, 0x3}, {{0x1, 0x0, 0x1}, @broadcast, 0x4000}, {{}, @broadcast, 0x4}, {{0x1}, @device_b}, {{0x1, 0x0, 0x1}, @device_a, 0x1}, {{0x0, 0x0, 0x1}, @device_a, 0x9}, {{0x1, 0x0, 0x1}, @device_a, 0x2}]}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x8, 0x8c, 0xc0}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xce, 0xc, @device_b, 0x2, @value=@broadcast, 0x2, 0x6, @device_a, 0x1}}, @preq={0x82, 0x20, {{0x1, 0x0, 0x1, 0x0, 0x1}, 0x5, 0x8, 0x8000, @broadcast, 0x9, @value=@device_b, 0x6, 0x5}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x800}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4040044}, 0x0) ioctl$FS_IOC_GETFSUUID(r2, 0x80111500, &(0x7f0000000040)) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000ac0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v\x0e\x1d\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c7\xa7\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\xfd\xba|\xa3\xd9\xb2].]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\b\x00\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16\x03\x00\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7P\xfb\xfc\xfa\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00\x03\xb6\ny\x8cP\xbcQ\x98wZ]\x9f\x16l\xd7\'\x06\xc9O{tSh\x8cWiD:\x1fDaqb\xc7\xf7+K:\xde\xa8U\xbcPw\xa4\xe5\x12\xea\xa2c\xdfX:\xf6') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000300)='\x00\x00\x03\v\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\x00\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r\xba\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00'/468) 1.96470409s ago: executing program 0 (id=2406): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x9c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}, @free_buffer={0x40086303, r1}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/221, 0xdd, 0x1, 0x1c}, @fda={0x66646185, 0xa, 0x1, 0x8}, @fd={0x66642a85, 0x0, r2}}, 0x0}}], 0x0, 0x0, 0x0}) 1.95965524s ago: executing program 0 (id=2407): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) getpgrp(0xffffffffffffffff) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) (async) ioctl$BLKRRPART(r1, 0x125f, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000040)=ANY=[@ANYRES64=r2], 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x40000) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1.94908622s ago: executing program 0 (id=2408): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffd}}, 0x10) sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24040855}, 0x4) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000140)={0x32, 0x2, {0x5, @struct={0x80000000, 0x100}, 0x0, 0x1, 0x8000000000000001, 0x100000000000000, 0x3, 0x401, 0x2, @usage=0xfffffffffffffffc, 0xb4b, 0x6, [0x5, 0x8, 0xd, 0x1, 0x3, 0x7fffffffffffffff]}, {0x0, @struct={0x7, 0x5}, 0x0, 0x2, 0x5, 0x0, 0xba, 0x1, 0x0, @usage=0x1, 0x4, 0x6, [0x80000000, 0x5, 0x100000001, 0x66, 0xf, 0x4]}, {0x800, @usage, 0x0, 0x101, 0x7, 0x76c0, 0x0, 0x3, 0x8, @struct={0x2, 0x1ff}, 0x1, 0x800, [0x1ff, 0x8001, 0x7ff, 0xfff, 0x100000001, 0x5]}, {0x3, 0xb1d6, 0x2c68}}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) 1.93231673s ago: executing program 0 (id=2409): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) ioprio_set$pid(0x2, r0, 0x2004) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f001e000900000009dca78e6b031000050000002e202ee50f000905", @ANYRES8], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0xc, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x1a, 0x0, &(0x7f0000000080)) ioctl$BLKRRPART(r4, 0x125f, 0x0) 1.378630289s ago: executing program 5 (id=2415): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x27) r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) wait4(r0, 0x0, 0xa, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103a42, 0x18) copy_file_range(r1, 0x0, r1, 0x0, 0xfffffffffffffffe, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x81}, 0x4c800) recvmmsg(r4, &(0x7f0000009100)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000dc0)=""/4096, 0x1000}], 0x1}, 0x8}], 0x1, 0x10140, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r8, 0x54a0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@dfltuid}]}}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) lseek(r2, 0x10001, 0x0) syz_fuse_handle_req(r1, &(0x7f0000001dc0)="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", 0x2000, &(0x7f00000064c0)={&(0x7f0000000200)={0x50, 0x0, 0x1, {0x7, 0x2b, 0x0, 0x4, 0x200, 0x800, 0x7f, 0x8, 0x0, 0x0, 0x10, 0x356}}, &(0x7f0000000180)={0x18, 0xfffffffffffffffe, 0x7fffffffffffffff, {0x7}}, &(0x7f0000000380)={0x18, 0x0, 0x3}, &(0x7f0000000400)={0x18, 0xffffffffffffffda, 0xdd, {0x7fff}}, &(0x7f0000000480)={0x18, 0x0, 0x4, {0x7}}, &(0x7f00000004c0)={0x28, 0x0, 0x3, {{0x3, 0x0, 0x1, r0}}}, &(0x7f0000000500)={0x60, 0x0, 0x66, {{0xfffffffffffffff9, 0x9, 0x0, 0x3, 0xffffffffffffffff, 0x7, 0x4, 0x6}}}, &(0x7f0000000580)={0x18, 0x0, 0x4, {0x2}}, &(0x7f00000005c0)={0x16, 0x0, 0x1, {'-\r,+:-'}}, &(0x7f0000000600)={0x20, 0x0, 0x5, {0x0, 0x4}}, &(0x7f0000000880)={0x78, 0x0, 0x8fb, {0x9, 0x6, 0x0, {0x5, 0xfff, 0x8, 0x7, 0x200, 0x7, 0x69b, 0x9, 0xb, 0xa000, 0x3, 0x0, 0x0, 0x1, 0x5}}}, &(0x7f0000000980)={0x90, 0x0, 0xffff, {0x3, 0x3, 0x9, 0x8000000000000001, 0x400, 0xa, {0x6, 0x3d0, 0x4, 0x4a, 0x3, 0x9, 0xb, 0xfffffff9, 0x4, 0x8000, 0xff, 0x0, 0x0, 0x6, 0x1}}}, &(0x7f0000000a40)={0xd8, 0xfffffffffffffffe, 0x1, [{0x3, 0x8000000000000001, 0x0, 0x8}, {0x2, 0xffffffff00000001, 0x5, 0x3, 'rfdno'}, {0x1, 0x4, 0x8, 0x101, 'w&dn\x02\xd8\xd0o'}, {0x2, 0x4, 0x3, 0x7, '9p\x00'}, {0x5, 0x100000001, 0x5, 0x0, 'wfdno'}, {0x3, 0x6, 0x0, 0x6}, {0x1, 0x7, 0x0, 0x8}]}, &(0x7f0000005f00)={0x1e8, 0x0, 0x8, [{{0x5, 0x2, 0x6, 0x1d42, 0x0, 0x1, {0x3, 0x8, 0x5, 0x1, 0xfe0a, 0x3ff, 0xfffffffb, 0x4, 0x0, 0xc000, 0x7, 0x0, 0x0, 0x7ebacf6b, 0xa46}}, {0x5, 0xffffffff, 0x2, 0xb26, '}\xb1'}}, {{0x3, 0x2, 0xfa6d, 0x40, 0x101, 0xaf, {0x1, 0x0, 0x1, 0x7ff, 0x7461, 0x200, 0x80000001, 0xc, 0x1, 0x2000, 0x4, 0xee01, 0x0, 0x8, 0xce6}}, {0x3, 0x4623b832, 0x3, 0xaa1f, '#).'}}, {{0x1, 0x1, 0x1, 0x0, 0xf, 0x7, {0x1, 0x7397, 0x4, 0x9, 0x0, 0x0, 0xfffffffa, 0xcf11, 0x4, 0x2000, 0xfffffff7, 0x0, 0x0, 0x7, 0x3}}, {0x1, 0xd133, 0x0, 0x1}}]}, &(0x7f0000006100)={0xa0, 0x0, 0xf, {{0x5, 0x3, 0xfffffffffffffffe, 0x67, 0x8, 0x0, {0x0, 0x1, 0x56cf, 0x8, 0x100000001, 0x9, 0x5, 0x3, 0x3, 0x2000, 0x5, 0x0, 0xffffffffffffffff, 0x8, 0x4}}}}, &(0x7f00000061c0)={0x20, 0x0, 0x4, {0xa0df, 0x4, 0x100}}, &(0x7f0000006380)={0x130, 0x0, 0x8000, {0x149, 0xf, 0x0, '\x00', {0x10, 0x0, 0x3cb, 0x1, 0x0, 0x0, 0x1000, '\x00', 0x9, 0x2, 0x100, 0xb75, {0x2, 0x80000001}, {0xffffffffffffff78, 0x4}, {0xd685, 0x61ea}, {0x9, 0x3b19}, 0x1, 0x2, 0x7, 0xffff}}}}) 1.30493587s ago: executing program 5 (id=2417): ioprio_set$uid(0x3, 0x0, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r1 = syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) (async) fchdir(0xffffffffffffffff) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/disk', 0x143a82, 0x33) fremovexattr(r2, &(0x7f0000000000)=@known='security.apparmor\x00') (async) mount(0x0, 0x0, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) write$FUSE_INIT(r3, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x2b, 0x0, 0x1000}}, 0x50) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) futimesat(r4, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="080027bd7000ffdbdf250d00400008003b020b000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_open_procfs(r1, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) fchown(r5, 0x0, 0x0) (async) sendfile(r0, r0, 0x0, 0x7ffff000) 357.807405ms ago: executing program 5 (id=2430): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000001) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002100)='./binderfs2/custom1\x00', 0x2, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) eventfd2(0x6, 0x0) syz_io_uring_setup(0x10278e, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0xc36, 0x400800) r5 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x1c) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0xffffffff, @empty}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000002c0)="1e4e", 0x2, 0x1, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000200)="66325500993385fbfeffffff9e10410353cb4fb75af647ec922d2595add8e37bdf7ba0f270f80d1767ff0054e292e2902cf762464c320af64dad21683760f2b5c1a209d519681ae7f1fdc189c231103faba693dbfe35aa58354afd276e6a823c2f1352ed39466ec53451d1a6e4cf11d164cc1c0a048b42da940c36894779a1d190400eb0df49a76b55fb6fe628bd7654d8034e62b770b89e5d976dc66f1564", 0xffffffffffffff31, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000006000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/218, 0xda, 0x0, 0x0}, &(0x7f0000000080)=0x40) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x1}) mmap(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x200000a, 0x12, r0, 0x2546c000) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000fc0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7xqg\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf25\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\xd4W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3\xc2\t\x1f\x9b\x1a\xff\xbb\x88\xce7\x15\x90\xf2\xd0la\x9d\x82\xb4\xad\\\x8d\a\x99\x17\x85\x9a\x05\xb1\x00'/712) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000300)='\x00\x00\x00\v\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') 186.569697ms ago: executing program 5 (id=2432): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r4) sendmsg$IEEE802154_LIST_IFACE(r3, 0x0, 0x20000000) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40880241}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x48854}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 184.354997ms ago: executing program 5 (id=2434): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f00000001c0)) vmsplice(r3, &(0x7f0000000080)=[{&(0x7f0000000440)="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", 0xfb}, {&(0x7f0000000640)="902ec791f65c4fe28bc613c06ca3430fa05863e20cb6f0a565cc3d2f521021027bc4e2f3d52c2b78abd2af183ddcdbe99bdc52871fb2af0a5c06a65b98885eac3bc32611c1ab790c650206b0ce0d5d2a0c685e7545f067c6d22d92576f53f4871b1ee38b1f2be58482304c136284fb9fc9e9f5f3ef605eb37f026ecc079138bfb89f4080aa7e2684e0170457477bc57b76bb366c3ad6dc373a68d4bbf44feb2cda50f5655b1db50ad641f845fae53f5f925514d20147dd8486e4ec647305a9a55553296d0cc19ada6c9dd90ace6120b92f", 0xd1}], 0x2, 0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/ip6_flowlabel\x00') statx(r5, 0x0, 0x7000, 0x200, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x3, 0x1, 0x100000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETTXFILTER(r7, 0x400454ca, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x1, 0x0, 0x10000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x11) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x1c, r9, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40840) close_range(r0, 0xffffffffffffffff, 0x0) 183.890628ms ago: executing program 4 (id=2435): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = dup2(r3, r2) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, &(0x7f00000003c0)) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)) 182.284168ms ago: executing program 4 (id=2436): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x82800, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r3 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) r4 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r4, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e24, 0x8be6, @dev={0xfe, 0x80, '\x00', 0xc}}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="7e6989d69fef83d0a78d21c222d50ad3422ac81f45e738c4909b2f8d9fe5f772cc807a7531027a8d68cc2fd3e9", 0x2d, 0x40000, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000001f00)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0xf, @mcast1, 0x4}, 0x1c, &(0x7f0000001540)=[{&(0x7f0000000040)="0c4f081a7479f5594bc7a13abc63bc04b0bdc44e8958e6852ae873063630", 0x1e}, {&(0x7f0000000300)="2546b7a4c147cfd23c26e6366edeb15de46a304ed5634095b39d3bd11c161a46161f48add7526ba4483e81df712566492d202fe6e8b31be98e69b064ff59dfed1b8f05", 0x43}, {&(0x7f0000000400)="47d8502088b4a7636e89fafce334f90af16d51e2874571ac8be7698ced04c411c78e3d97a2129b5ace46ea66a439aea39065df6e18c60edc468c3d2e9208ac897ca552d0abf60e6e7bfa66b043338255f226e0772a317aae189e807b2b7bbf47800b738569a76fe4d544feccfdf586610ef233e10c95240e5849b7200344d8f5dd3940b2fa87a9ae1437513b13933176e6fdcc33e4ac384f9010bebe650c2dac627b74620adaf4e6", 0xa8}, {&(0x7f0000000100)="30b1b5180c", 0x5}, {&(0x7f0000000200)="246fdf2c94f617400fb062217cc820b2d683db6ef91fbb612d2d44e96c816ee7", 0x20}, {&(0x7f00000004c0)="14812c98162ef93db7c3c34991f23f192897284abad2dfc55d00a5f8a22b4ddf00de9df8d56e7a8d3dd4be26abfcfdb98f2d2bfdb95d6d79bb720a82fc1603278ee4e4a7de4f195f408d9c9e35aa8d0f94df5373652d", 0x56}, {&(0x7f0000000540)="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", 0x1000}], 0x7, &(0x7f00000015c0)=[@rthdrdstopts={{0x48, 0x29, 0x37, {0x32, 0x5, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @jumbo={0xc2, 0x4, 0x6}, @generic={0x8, 0x20, "295396846230776f74576de4b985a793f77be5feb34e6fe23aa9ed024a63c372"}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}, @rthdr={{0x58, 0x29, 0x39, {0x76, 0x8, 0x1, 0x2, 0x0, [@mcast1, @private1, @private0, @mcast1]}}}], 0xd0}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000002000)="b4a2348abc8103440e", 0x9}, {&(0x7f00000016c0)="bd869b8b863664ebc71d14e8d58dbe", 0xf}, {&(0x7f0000001700)="642c8bd93843c75c1bdc0f224fc20000000000000005654a292952d908f739051e6b19011cd379649d78bbbdf203021bc8978536d8a6ae56875e80e13abad19a4b2a629c2121f9a6ad52eae5ac76a285a836757757cc83d7573b23d8a0e06bcd7979", 0x62}], 0x100000000000029f, &(0x7f00000017c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x4}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x32, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @jumbo={0xc2, 0x4, 0x1}]}}}, @rthdr={{0x78, 0x29, 0x39, {0x2, 0xc, 0x1, 0x1, 0x0, [@dev={0xfe, 0x80, '\x00', 0x23}, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @mcast1]}}}], 0xb8}}, {{&(0x7f0000001880)={0xa, 0x4e22, 0x67f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8e}, 0x1c, &(0x7f0000001a80)=[{&(0x7f00000018c0)="78fee81972ae2bea10cbc47f605777426d1060a12e0b09e6ad8808efecf2e9f6f72fa3cb9c77de1ef8949232c43ccc583263e6d6e6446465a0d89ba1e40084e6a03956efe0b160e284392f90edeafaacf82781a3f1453195cfb13c4b8ebe707028f46f4b5eee1776d56c9169ba78b00976cbcdbf9987d0d0f842f32f5ec1caaee6d8c0cc493523393d6d2caa69bcf53db86c89ba85b174b497419e80ff4556780722ef08eb7d77", 0xa7}, {&(0x7f0000001980)="1c0fa25e68de413211a3223b25f4f492f6270a8e1e9dac850cd8a4c1582f9568f57507540d0e491e75269507702afdf03586af7418594b5c475d5d213d29d147b423e2acd9883e37d9a430419445f91639569b", 0x53}, {&(0x7f0000001a00)="841b2bafd227a88c33e568e8a5e6124087dd7cf25123cf543da64f26af0bd91f62731441b5231a27d69f01619287bb3e5bd4249fe532ee2f60ea897ef72443bb1bdde937cee74195c8211457f7eea239e4e5cd1f8200aed04c10e66c35947d3afaa09b0fc28a17b97925", 0x6a}], 0x3, &(0x7f0000001ac0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @hoplimit={{0x14, 0x29, 0x34, 0x9}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8c02}}, @hopopts_2292={{0x58, 0x29, 0x36, {0x84, 0x7, '\x00', [@calipso={0x7, 0x30, {0x3, 0xa, 0x6, 0x5, [0xffffffffffff83dc, 0x2, 0x1, 0x8, 0x0]}}, @enc_lim={0x4, 0x1, 0x5}, @ra={0x5, 0x2, 0x1ff}, @jumbo]}}}, @hopopts_2292={{0x60, 0x29, 0x36, {0x87, 0x8, '\x00', [@ra={0x5, 0x2, 0x3}, @jumbo={0xc2, 0x4, 0x9}, @pad1, @pad1, @jumbo={0xc2, 0x4, 0x575}, @calipso={0x7, 0x18, {0x1, 0x4, 0xc, 0x0, [0x4, 0x1]}}, @pad1, @hao={0xc9, 0x10, @local}, @padn]}}}, @rthdr={{0x98, 0x29, 0x39, {0x32, 0x10, 0x2, 0x0, 0x0, [@mcast2, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @local, @local, @dev={0xfe, 0x80, '\x00', 0x18}, @mcast1]}}}, @dstopts={{0x30, 0x29, 0x37, {0x4, 0x3, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x2}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}], 0x1e0}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000002040)="bf1684caa6198c49afa94c7fda77f13d5c71879a419d63e783a98bfcb5740eb1a8c996c572e6feeaf0178d57ddf398469f768316fdeb1c3b914127e5987ea7c73090aff1b5f488d63a78efaad85f2e23c41ad87f8a5166aa4e43bcd9542a758db601549db199c6f15c2af30098c2c89ecc3237a4", 0x74}, {&(0x7f0000001d40)="bbc668052b72c352c021c015f163f584ac1946257e280ccab4af0d7cfbf31e21f7edec56905b47f5f5b4c87013ffc4714fd94261561ab4beeadb4e6723140f07d20cdd1bed1071aa32", 0x49}, {&(0x7f0000001dc0)="8132f6d4114f0dae01046af8863a00a214d57b445f9e7c06f1f3909e7c218498b702a17e37b6f963cc72b8c02a307dd9dd052364d3d86d9fee3b427290d2f8e5cba02b10adac5da88378dc92a8523c09d5ed756ec9efffd0fc56a0638c18518baf70e09ec57a0a65c9588a98ae96dbb7c6265c707ce1145a4873baddcf1586b819df1e00f8b14b9ec05f9440d53288879e93eed86ea359fbf059a9ab3e09304f6cfdc44c07465e0647f10da39a58dffc5c7da2f54a4cefcb1a40acfe574bfcebbe5bdadbf041c700ffec98ba8c8132c5aa97b4f5cd", 0xd5}], 0x3}}], 0x4, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x0, 0x0, 0x9e25}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) userfaultfd(0x801) 106.204199ms ago: executing program 4 (id=2437): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)='\x00', 0x1}], 0x1}, 0x8040) ioctl$SIOCSIFHWADDR(r2, 0x8905, &(0x7f0000000340)={'pim6reg0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x14, "fee8a2ab78fc979fd1e00313005e7b0000009de2b7fb00ef9d3c298561edae7c01005000000000000000000000000000000000000000001700", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2]}}) (async, rerun: 64) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r7) (rerun: 64) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) (async, rerun: 64) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f0000000100)={0x20000014}) (async) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r1, &(0x7f0000000000)={0xa0000001}) (async) ppoll(&(0x7f0000000200)=[{r8, 0x1}], 0x1, 0x0, 0x0, 0x3) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) (async) r10 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_provisioning(&(0x7f0000000080), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000000ec58"], 0x29, r10) (async) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x7fc00000) (async, rerun: 64) read(r9, &(0x7f0000000080)=""/93, 0xffffff6c) (rerun: 64) 2.62972ms ago: executing program 4 (id=2438): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)=ANY=[]) ioprio_set$pid(0x2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x3, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x19}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0xacc0}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x400) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) read(r5, &(0x7f0000000080)=""/93, 0xffffff6c) 2.11995ms ago: executing program 4 (id=2439): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x10000, 0xd57, 0x7, 0x1000, 0x10, "e9078cf709847c3484ab2466ac1d5efa3ae711"}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x11) close_range(r0, 0xffffffffffffffff, 0x0) 1.35554ms ago: executing program 5 (id=2440): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000017c0)={'batadv_slave_1\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000001800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001840)=0x14) sendmmsg$inet6(r1, &(0x7f00000020c0)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x6919, @private0, 0x7}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000400)}, {&(0x7f0000001580)="6cd9b37546a8d23aaa9ee65518ff8a3cf14b4cb1bb6f1b7938dc911a47eb9730bfb1f1a621c2b15df5408f8cddb5a10e29f18fc6ac3590b013ec5e8692e1d5842899063308939c6b2df84d212e10a19880a0dfcd7c1072dac30b90b817145774a4419ed4853b05bcfe54e787034006d33945326de9f98f1c37b01800c3caab398015638d1f7ff0d7d17fe094469326fb3c0c431e1a14", 0x96}, {&(0x7f0000000440)}, {&(0x7f0000001640)="a2484cd22209752aeb788b1fa3564866028ae781fd8abb5db831cbbb47ac1b5b26355719489008197005e4161169b1b9c02f3639a1e2070d1cb7c7868bf33765edd31e92ab81fc0818e0b4106a0ff71823037d73e0e26a9d65251f06a5288158dcc349b65d9773f39c6e989ae001377f3b5569dc4a9378bddf316371f8625499a881007a40ab17f94a26ec55ee608742de113445918723d3c754660617c8fa22bdf29b339d2d329f86a7c43887890e", 0xaf}], 0x4}}, {{&(0x7f0000001700)={0xa, 0x4e23, 0x0, @private1, 0x525}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000001740)="add8d74700515dadf5839cb4f447781b062612c7683803b0c3d3abec85cf981eccb6d27e7f4e37ee5dbecc16", 0x2c}], 0x1, &(0x7f0000001880)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1, r2}}}, @dstopts_2292={{0x60, 0x29, 0x4, {0x87, 0x9, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0xb}, @ra={0x5, 0x2, 0x49}, @pad1, @jumbo={0xc2, 0x4, 0x8}, @enc_lim={0x4, 0x1, 0x2}, @calipso={0x7, 0x18, {0x3, 0x4, 0x1, 0x11, [0x7fffffffffffffff, 0x4]}}, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r3}}}, @hoplimit={{0x14, 0x29, 0x34, 0xfff00000}}, @rthdr_2292={{0x88, 0x29, 0x39, {0xff, 0xe, 0x2, 0x0, 0x0, [@empty, @local, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback]}}}, @hopopts_2292={{0xf0, 0x29, 0x36, {0x75, 0x1a, '\x00', [@generic={0x1, 0xd1, "75eccee5e07a1c8f2de8e03cf9ffd9bb1160ed70cbc2e15d6c8ac8ed21130e0aebc42c40d2fc1a2a2f17a18e146d9460d6bf0a7318b06da3f450d8b188e1d3598ab71a38f654f1cb446dbcb19be10b6891368c13a20b141eda009ffe683f579a1d3600926cf4f15a2bf75375ca8a8ae68c617bdfa90682dbe9a7180fe9b8a91e5fac3c618c86ba8f484c12c6783c77f60b7e33cf95652ce5698def291ec4448787c8f38814d0c746124511bc724f86f2761f5d5643c51aa69c31a77db4e21bc7d8b77a061260d119ccd27c5915c7c960ab"}]}}}, @rthdrdstopts={{0x60, 0x29, 0x37, {0x3b, 0x8, '\x00', [@ra={0x5, 0x2, 0x3}, @pad1, @ra={0x5, 0x2, 0x7979}, @calipso={0x7, 0x28, {0x0, 0x8, 0x5, 0x6, [0x2a, 0x8, 0x9, 0x8979]}}, @hao={0xc9, 0x10, @empty}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xc}}], 0x2b8}}, {{&(0x7f0000001b40)={0xa, 0x4e23, 0x228aa6c7, @mcast2, 0x1}, 0x1c, &(0x7f0000001cc0)=[{&(0x7f0000001b80)="22b3be4ffec4984ec75d4a4115bc31cce75fcea13b", 0x15}, {&(0x7f0000001bc0)="08ae5748671fac21411a8095ca4a918d5fcfab4c6eddba8fc3e7b9645ccfb9ecf52200f05c1535db37d12b470b87fa176df3608b787a4d5d9279e64b78c7d239ae68276646d81568ea757580b1bf4b876c2b6ae35f050aa2f366092a8c3f9bebe69370f37bfde226a09231a7729bc279671a26a3b73ca437555605992de52fac5a1ffbe036fb6f4823a5fc6d99a56b11e87430a308fc697343cbb0f96ebf23093d3ae61dd4bfe525b8bbd40b4f6e0a7844b2a66427499546923c7604bc73f4831fba04122528ce3d2220228553e88fb5e8a8b2d9d8e99e459ff2964acfbef2ac6ce21821", 0xe4}], 0x2, &(0x7f0000001d00)=[@rthdr={{0x98, 0x29, 0x39, {0x32, 0x10, 0x2, 0x4, 0x0, [@private2, @mcast1, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}]}}}, @dstopts={{0x60, 0x29, 0x37, {0x33, 0x8, '\x00', [@jumbo={0xc2, 0x4, 0x9a}, @calipso={0x7, 0x30, {0x2, 0xa, 0x3, 0x1, [0xf, 0x1, 0x5d3, 0x6, 0x7]}}, @jumbo={0xc2, 0x4, 0x5}, @ra={0x5, 0x2, 0x200}]}}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x1a, 0xe, 0x0, 0x87, 0x0, [@ipv4={'\x00', '\xff\xff', @loopback}, @loopback, @dev={0xfe, 0x80, '\x00', 0x40}, @dev={0xfe, 0x80, '\x00', 0x37}, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1]}}}, @tclass={{0x14, 0x29, 0x43, 0xce}}, @dstopts={{0x188, 0x29, 0x37, {0x33, 0x2d, '\x00', [@pad1, @ra={0x5, 0x2, 0x2}, @generic={0x8, 0x90, "b4c637b8f540f0a7f49d2635e625025b876402c7a0a24a4a027c81422655812d5f3dfd6f228d92e95fc16fa3d12cb6a3ec4a2ab354234e53037dbba539cb48148346b2b0eb882c83d13ed93542c244004afdf7ee22dbeabbf94e778cc48c7da998751a93c53775423dd8dfa7611d651b1a245ac5977e7f43d35eb311c2db747a877a50973129d9c183ec3e299265ca73"}, @hao={0xc9, 0x10, @mcast1}, @pad1, @generic={0x4, 0xb6, "6630eb5f9f754be27ffa318292e3d67bef8d5498ec77eeee67aecfd187e83025977c63e2d145086a7b9fb6ab7f1dae7772e96f817bd975bdad4904446ae0b7483fdaa1dfc8df9baee922e6dafba22886fb868b200720df03c53fe7ff2053b6849e8f1c37e4f9255658e591626b89bf9ff98374b0b0a66eb46489144cf10ac0db5137ebd0b8080bc409158d16b376f001495ebf67465bd22e08b34aa533ccbe12dba4fb5593ae52fdea6ae18f7a8277192d4e67ce8859"}, @enc_lim={0x4, 0x1, 0x8}]}}}, @hopopts_2292={{0x78, 0x29, 0x36, {0x62, 0xb, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @generic={0x7, 0x4b, "b638e98cb196f41815d5714236b34e6fb11d69d9bb12aac4a928880592f89bd9809d853dbf5ee96be12ac3e2b0ca3bfb36f6ff9454852f71c1154983b901ab5e8f25a62c6c45c1927b4aeb"}, @pad1, @padn={0x1, 0x1, [0x0]}]}}}], 0x398}}], 0x3, 0x8001) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000002c0)={"4641e80227ae8ec3e879ddc1c8ab5122", 0x0, 0x0, {0x200, 0xef10}, {0x5, 0x401}, 0x1, [0x10000, 0x4, 0xfffffffffffffd39, 0x5, 0x9, 0x6, 0x9, 0x4, 0x3, 0x59, 0x0, 0x2, 0x6, 0x3, 0xd, 0x37]}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000580)={{r0}, r4, 0x18, @inherit={0x78, &(0x7f0000000140)={0x0, 0x6, 0x4, 0x1, {0x39, 0x10001, 0x1, 0x7, 0xfffffffffffffffe}, [0x0, 0x0, 0xb, 0xdb83, 0x1, 0x8]}}, @name="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"}) r5 = socket(0x10, 0x807, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001e00010026bd706e6e24139e074c2100"], 0x40}}, 0x90) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r9 = dup(r8) r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r10]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r7}, @ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x2, 0x40}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=2441): ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$bind(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x840075, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$bind(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x840075, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) kernel console output (not intermixed with test programs): led with error -71 [ 113.375300][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 113.379746][ T10] usb 1-1: USB disconnect, device number 40 [ 113.465199][ T307] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 113.616623][ T307] usb 4-1: unable to get BOS descriptor or descriptor too short [ 113.624706][ T307] usb 4-1: not running at top speed; connect to a high speed hub [ 113.625400][ T4470] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 113.633363][ T307] usb 4-1: config 14 has an invalid interface number: 18 but max is 0 [ 113.641645][ T4470] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 113.650053][ T307] usb 4-1: config 14 has no interface number 0 [ 113.659045][ T4470] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 113.665635][ T307] usb 4-1: config 14 interface 18 has no altsetting 0 [ 113.681651][ T307] usb 4-1: New USB device found, idVendor=3980, idProduct=0003, bcdDevice=de.62 [ 113.691204][ T307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.699422][ T307] usb 4-1: Product: syz [ 113.703801][ T307] usb 4-1: Manufacturer: syz [ 113.708513][ T307] usb 4-1: SerialNumber: syz [ 113.739097][ T4475] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1375'. [ 113.881964][ T4477] rust_binder: Write failure EINVAL in pid:683 [ 113.900764][ T4480] rust_binder: Write failure EINVAL in pid:686 [ 113.938637][ T4486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 113.946725][ T4463] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4463 comm=syz.3.1370 [ 113.967080][ T4486] rust_binder: Error in use_page_slow: ESRCH [ 113.967104][ T4486] rust_binder: use_range failure ESRCH [ 113.973556][ T4486] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 113.987745][ T4486] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 113.995808][ T4486] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:690 [ 114.029114][ T307] rtl8150 4-1:14.18: couldn't find required endpoints [ 114.031087][ T4489] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 114.045270][ T307] rtl8150 4-1:14.18: probe with driver rtl8150 failed with error -5 [ 114.064890][ T307] usb 4-1: USB disconnect, device number 37 [ 114.131736][ T4499] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 114.135702][ T4499] rust_binder: Error in use_page_slow: ESRCH [ 114.146495][ T4499] rust_binder: use_range failure ESRCH [ 114.152624][ T4499] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 114.158280][ T4499] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 114.166427][ T4499] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:702 [ 114.255278][ T31] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 114.435158][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 114.446307][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.450402][ T4520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 114.456831][ T31] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 4 [ 114.483862][ T31] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 114.493423][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.494107][ T4524] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 114.501741][ T31] usb 5-1: Product: syz [ 114.504419][ T4524] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:724 [ 114.512439][ T31] usb 5-1: Manufacturer: syz [ 114.535181][ T31] usb 5-1: SerialNumber: syz [ 114.542427][ T31] usb 5-1: config 0 descriptor?? [ 114.617641][ T4537] netlink: 'syz.3.1395': attribute type 64 has an invalid length. [ 114.625559][ T4537] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1395'. [ 114.635714][ T4537] rust_binder: Error while translating object. [ 114.635930][ T4537] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 114.642125][ T4537] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:729 [ 114.718027][ T4540] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 114.757802][ T64] usb 5-1: USB disconnect, device number 2 [ 114.770543][ T4542] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 114.770721][ T4543] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 115.035155][ T31] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 115.055432][ T64] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 115.186138][ T31] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 115.197749][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 115.208973][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 115.216465][ T64] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.219152][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 115.229623][ T64] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.242400][ T31] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 115.252376][ T64] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 115.260413][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.269896][ T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 115.278858][ T31] usb 1-1: config 0 descriptor?? [ 115.286642][ T64] usb 5-1: SerialNumber: syz [ 115.548304][ T64] usb 5-1: 0:2 : does not exist [ 115.557044][ T64] usb 5-1: USB disconnect, device number 3 [ 115.564308][ T571] udevd[571]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 115.698981][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 115.705121][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 115.716473][ T31] usb 1-1: USB disconnect, device number 41 [ 116.124425][ T4553] exFAT-fs (rnullb0): invalid boot record signature [ 116.131158][ T4553] exFAT-fs (rnullb0): failed to read boot sector [ 116.137660][ T4553] exFAT-fs (rnullb0): failed to recognize exfat type [ 116.241542][ T4561] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 116.248819][ T4561] rust_binder: Write failure EINVAL in pid:97 [ 116.361872][ T4577] rust_binder: Error while translating object. [ 116.368069][ T4577] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 116.374306][ T4577] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:105 [ 116.422091][ T4583] incfs: Error accessing: ./file1. [ 116.436643][ T4583] incfs: mount failed -2 [ 116.457222][ T36] audit: type=1326 audit(2000000313.942:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4584 comm="syz.4.1414" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc1a4d8e929 code=0x0 [ 116.558834][ T4587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 116.602845][ T4592] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 116.679370][ T4595] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 116.684915][ T64] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 116.704315][ T4602] binder: Unknown parameter 'maxsl local_address rem_address st tx_queue rx_queue tr tm->when retrnsmt uid timeout inode ref pointer drops [ 116.704315][ T4602] iۅߕ󵽕rlOAWCGX?vb89ơ#ЉY' [ 116.845107][ T64] usb 1-1: Using ep0 maxpacket: 16 [ 116.851644][ T64] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.861770][ T64] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 4 [ 116.872081][ T64] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 116.881233][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.889675][ T64] usb 1-1: Product: syz [ 116.893813][ T64] usb 1-1: Manufacturer: syz [ 116.898433][ T64] usb 1-1: SerialNumber: syz [ 116.903628][ T64] usb 1-1: config 0 descriptor?? [ 116.974861][ T10] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 117.115123][ T49] usb 1-1: USB disconnect, device number 42 [ 117.126195][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 117.137299][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.147056][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 117.156138][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.164673][ T10] usb 5-1: config 0 descriptor?? [ 117.299111][ T31] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=31 comm=kworker/1:0 [ 117.404824][ T49] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 117.555995][ T49] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.566262][ T49] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 117.575924][ T49] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 117.585108][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 117.593153][ T49] usb 1-1: SerialNumber: syz [ 117.777299][ T4604] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.777719][ T4604] rust_binder: Error in use_page_slow: ESRCH [ 117.784157][ T4613] rust_binder: Error while translating object. [ 117.784198][ T4613] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 117.784219][ T4613] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:737 [ 117.790308][ T4604] rust_binder: use_range failure ESRCH [ 117.814937][ T4604] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 117.820432][ T4604] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 117.828814][ T4604] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:130 [ 117.852050][ T10] usb 5-1: USB disconnect, device number 4 [ 117.927815][ T49] usb 1-1: 0:2 : does not exist [ 117.941621][ T49] usb 1-1: USB disconnect, device number 43 [ 118.004394][ T4622] can0: slcan on ttyS3. [ 118.038247][ T4622] can0 (unregistered): slcan off ttyS3. [ 118.142290][ T4645] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:747 [ 118.331089][ T4660] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:754 [ 118.341257][ T4660] rust_binder: Read failure Err(EFAULT) in pid:754 [ 118.361243][ T4664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.375353][ T4666] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1432'. [ 118.376514][ T4664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.485263][ T4674] binder: Bad value for 'max' [ 118.491108][ T36] audit: type=1400 audit(2000000315.972:516): avc: denied { mounton } for pid=4673 comm="syz.0.1435" path="/259/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 118.503264][ T4678] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 118.513763][ T4674] fuse: Unknown parameter '00000000000000000000000' [ 118.517204][ T4678] overlayfs: conflicting options: metacopy=off,verity=on [ 118.541026][ T4681] tmpfs: Bad value for 'nr_blocks' [ 118.557724][ T4681] /dev/loop0: Can't lookup blockdev [ 118.594787][ T49] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 118.633657][ T4689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 118.634029][ T4689] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:768 [ 118.670069][ T45] Bluetooth: hci0: Frame reassembly failed (-84) [ 118.744421][ T4699] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 118.744647][ T4699] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:142 [ 118.754671][ T49] usb 4-1: Using ep0 maxpacket: 8 [ 118.770040][ T49] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 118.778337][ T49] usb 4-1: config 179 has no interface number 0 [ 118.784626][ T49] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 118.795670][ T49] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 118.807063][ T49] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 118.818263][ T49] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 118.829680][ T49] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 118.842962][ T49] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 118.852115][ T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.861160][ T4662] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 119.069864][ T49] usb 4-1: USB disconnect, device number 38 [ 119.069903][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 119.084159][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 119.605535][ T4711] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.605831][ T4711] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 119.619479][ T4711] rust_binder: Write failure EINVAL in pid:145 [ 119.623835][ T36] audit: type=1326 audit(2000000317.103:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.1.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20ff8e929 code=0x7ffc0000 [ 119.648481][ T4718] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1449'. [ 119.653688][ T36] audit: type=1326 audit(2000000317.103:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.1.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd20ff8e929 code=0x7ffc0000 [ 119.685931][ T4718] tipc: Started in network mode [ 119.686439][ T36] audit: type=1326 audit(2000000317.103:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.1.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20ff8e929 code=0x7ffc0000 [ 119.690787][ T4718] tipc: Node identity , cluster identity 4711 [ 119.690803][ T4718] tipc: Failed to obtain node identity [ 119.690817][ T4718] tipc: Enabling of bearer rejected, failed to enable media [ 119.720436][ T36] audit: type=1326 audit(2000000317.103:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.1.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd20ff8e929 code=0x7ffc0000 [ 119.757572][ T36] audit: type=1326 audit(2000000317.103:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.1.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20ff8e929 code=0x7ffc0000 [ 119.781523][ T36] audit: type=1326 audit(2000000317.103:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.1.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd20ff8d290 code=0x7ffc0000 [ 119.805064][ T36] audit: type=1326 audit(2000000317.103:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.1.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20ff8e929 code=0x7ffc0000 [ 119.829112][ T36] audit: type=1326 audit(2000000317.113:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4717 comm="syz.1.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20ff8e929 code=0x7ffc0000 [ 120.065466][ T4739] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.066843][ T4739] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.085503][ T4741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.093594][ T4741] rust_binder: Write failure EFAULT in pid:156 [ 120.100510][ T4741] rust_binder: Write failure EFAULT in pid:156 [ 120.112378][ T4742] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.266001][ T4749] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.512836][ T4763] mmap: syz.1.1464 (4763): VmData 29077504 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 120.724483][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 120.724484][ T2099] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 120.830083][ T4787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.830387][ T4787] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 120.837061][ T4787] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:169 [ 120.941083][ T4793] rust_binder: Write failure EINVAL in pid:175 [ 121.004422][ T353] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 121.164354][ T353] usb 1-1: Using ep0 maxpacket: 32 [ 121.170537][ T353] usb 1-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 121.180207][ T353] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.188722][ T353] usb 1-1: config 0 descriptor?? [ 121.194620][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 121.344326][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 121.350797][ T10] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 121.359051][ T10] usb 5-1: config 0 has no interface number 0 [ 121.365188][ T10] usb 5-1: config 0 interface 184 has no altsetting 0 [ 121.373326][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 121.382413][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.390411][ T10] usb 5-1: Product: syz [ 121.394604][ T10] usb 5-1: Manufacturer: syz [ 121.399199][ T10] usb 5-1: SerialNumber: syz [ 121.404516][ T10] usb 5-1: config 0 descriptor?? [ 121.410247][ T10] smsc75xx v1.0.0 [ 121.600064][ T353] input: HID 28bd:1903 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:1903.000F/input/input15 [ 121.614377][ T353] uclogic 0003:28BD:1903.000F: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:1903] on usb-dummy_hcd.0-1/input0 [ 121.670550][ T4801] overlayfs: missing 'lowerdir' [ 121.677344][ T36] kauditd_printk_skb: 228 callbacks suppressed [ 121.677361][ T36] audit: type=1400 audit(2000000319.163:753): avc: denied { map } for pid=4800 comm="syz.3.1480" path="/proc/777/task/778/mounts" dev="proc" ino=31984 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 121.703912][ T4803] overlay: Unknown parameter 'pcr' [ 121.707213][ T36] audit: type=1400 audit(2000000319.163:754): avc: denied { execute } for pid=4800 comm="syz.3.1480" path="/proc/777/task/778/mounts" dev="proc" ino=31984 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 121.799767][ T4779] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 121.800044][ T4779] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:779 [ 121.807981][ T49] usb 1-1: USB disconnect, device number 44 [ 121.858422][ T36] audit: type=1400 audit(2000000319.343:755): avc: denied { ioctl } for pid=4811 comm="syz.3.1485" path="socket:[32015]" dev="sockfs" ino=32015 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 121.897993][ T36] audit: type=1400 audit(2000000319.383:756): avc: denied { ioctl } for pid=4813 comm="syz.3.1486" path="/268/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 121.985163][ T4817] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 121.987905][ T4817] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:793 [ 122.013441][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 122.023808][ T36] audit: type=1400 audit(2000000319.513:757): avc: denied { name_bind } for pid=4822 comm="syz.1.1490" src=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 122.040658][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 122.064132][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 122.075117][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 122.085512][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 122.095933][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 122.105468][ T10] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 122.628358][ T36] audit: type=1400 audit(2000000320.113:758): avc: denied { write } for pid=4792 comm="syz.4.1477" path="socket:[31199]" dev="sockfs" ino=31199 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 122.651980][ T4839] rust_binder: Write failure EINVAL in pid:175 [ 123.194510][ T4855] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.201179][ T4855] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.207991][ T4855] rust_binder: Error in use_page_slow: ESRCH [ 123.214535][ T4855] rust_binder: use_range failure ESRCH [ 123.220606][ T4855] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 123.226088][ T4855] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 123.233921][ T4855] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:783 [ 123.251696][ T4859] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1503'. [ 123.555992][ T4864] bpf: Bad value for 'mode' [ 123.589716][ T4868] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.629937][ T4877] binder: Unknown parameter 'fscontext?}' [ 123.934238][ T49] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 123.945565][ T353] usb 5-1: USB disconnect, device number 5 [ 123.973703][ T4894] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1514'. [ 123.983129][ T4894] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1514'. [ 124.029847][ T4905] FAT-fs (rnullb0): bogus number of reserved sectors [ 124.036642][ T4905] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 124.051567][ T4908] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.063998][ T31] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 124.071218][ T4912] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.094049][ T49] usb 4-1: Using ep0 maxpacket: 16 [ 124.106665][ T49] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.117035][ T49] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 4 [ 124.127489][ T49] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 124.130951][ T4913] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:200 [ 124.136693][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.138908][ T4913] rust_binder: Error while translating object. [ 124.146032][ T49] usb 4-1: Product: syz [ 124.154023][ T4913] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 124.160648][ T49] usb 4-1: Manufacturer: syz [ 124.165171][ T4913] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:200 [ 124.174413][ T49] usb 4-1: SerialNumber: syz [ 124.193604][ T49] usb 4-1: config 0 descriptor?? [ 124.224053][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 124.230166][ T31] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 124.239244][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.247953][ T31] usb 1-1: config 0 descriptor?? [ 124.405876][ T10] usb 4-1: USB disconnect, device number 39 [ 124.458715][ T4918] 9pnet_fd: Insufficient options for proto=fd [ 124.693939][ T10] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 124.844988][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.855303][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.864922][ T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 124.874216][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 124.882243][ T10] usb 4-1: SerialNumber: syz [ 125.097613][ T4935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1529'. [ 125.127748][ T10] usb 4-1: 0:2 : does not exist [ 125.135073][ T10] usb 4-1: USB disconnect, device number 40 [ 125.144706][ T571] udevd[571]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 125.697144][ T4944] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:831 [ 126.409208][ T4953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.428322][ T4953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.561921][ T4953] binder: Unknown parameter 'sclabel' [ 126.574385][ T4956] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 126.574411][ T4956] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 126.582542][ T4956] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:838 [ 126.717075][ T4969] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1538'. [ 126.735450][ T4969] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1538'. [ 126.766197][ T31] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 126.778688][ T31] asix 1-1:0.0: probe with driver asix failed with error -71 [ 126.790396][ T31] usb 1-1: USB disconnect, device number 45 [ 127.056835][ T4978] tipc: Invalid UDP bearer configuration [ 127.056852][ T4978] tipc: Enabling of bearer rejected, failed to enable media [ 127.063648][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 127.095650][ T4983] rust_binder: Write failure EFAULT in pid:854 [ 127.177300][ T36] audit: type=1400 audit(2000000324.664:759): avc: denied { setopt } for pid=4991 comm="syz.3.1550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 127.233665][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 127.240074][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.250402][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 4 [ 127.260958][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 127.270139][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.278179][ T9] usb 5-1: Product: syz [ 127.282347][ T9] usb 5-1: Manufacturer: syz [ 127.287357][ T9] usb 5-1: SerialNumber: syz [ 127.293819][ T9] usb 5-1: config 0 descriptor?? [ 127.314933][ T4994] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 127.315604][ T4994] overlayfs: failed to resolve './file1/file0': -2 [ 127.328747][ T4994] rust_binder: Error in use_page_slow: ESRCH [ 127.328762][ T4994] rust_binder: use_range failure ESRCH [ 127.334776][ T4994] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 127.340232][ T4994] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 127.348150][ T4994] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:798 [ 127.365032][ T36] audit: type=1400 audit(2000000324.854:760): avc: denied { append } for pid=4997 comm="syz.0.1552" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.413581][ T10] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 127.418115][ T5001] random: crng reseeded on system resumption [ 127.504775][ T31] usb 5-1: USB disconnect, device number 6 [ 127.505635][ T5004] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 127.512316][ T5004] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:808 [ 127.563607][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 127.579955][ T10] usb 4-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 127.591132][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 127.599271][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=b30b, bcdDevice= 0.40 [ 127.608363][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.616434][ T10] usb 4-1: Product: 벉㨑Ἷ㻨䦀쭚姳왲䵔ᩭ肚쭒獪㨍䯪皲跪ኔ韫⳰迟 [ 127.626436][ T10] usb 4-1: Manufacturer: 斝ꗌ袿뷦掙﬏潐䄦⇴釒䫁쇈躛F⎈좮⟎佚﵃깻焣㷬멈ീ忿砘勄㸋榇鑾Ⱊ乥垛﬙렎腙혟뉋往衔ﴯ텟篋〄ଐꛩ䭶侈垿쏁檍䬾뮽禣稟뒐ᓗㄗ걍孖尩✭螻붐⮁㗮삨ඐ㩹펠থ㋔溥尼嬬傛숺Ⴑ菲䶌ꎰ騗ႎ掕후ᴹ⭊뾕⫑鴀廨䖙仍㠫葕ྗ䢢䣔⫈שׂ沫 [ 127.661534][ T10] usb 4-1: SerialNumber: syz [ 127.803575][ T49] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 127.823563][ T31] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 127.877871][ T10] usbhid 4-1:1.0: can't add hid device: -71 [ 127.884032][ T10] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 127.894215][ T10] usb 4-1: USB disconnect, device number 41 [ 127.964696][ T49] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 127.972970][ T49] usb 1-1: config 0 has no interface number 0 [ 127.979180][ T49] usb 1-1: config 0 interface 41 has no altsetting 0 [ 127.986961][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.997142][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 128.006414][ T49] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 128.015580][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.023721][ T49] usb 1-1: Product: syz [ 128.027973][ T31] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 128.037156][ T49] usb 1-1: Manufacturer: syz [ 128.041763][ T49] usb 1-1: SerialNumber: syz [ 128.046380][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 128.054671][ T31] usb 5-1: SerialNumber: syz [ 128.060166][ T49] usb 1-1: config 0 descriptor?? [ 128.269503][ T31] usb 5-1: 0:2 : does not exist [ 128.276344][ T31] usb 5-1: USB disconnect, device number 7 [ 128.405021][ T5009] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 176, size: 202) [ 128.405049][ T5009] rust_binder: Error while translating object. [ 128.415697][ T5009] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 128.421978][ T5009] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:867 [ 128.673460][ T10] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 128.800720][ T5013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1558'. [ 128.833412][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 128.840080][ T10] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 128.848487][ T10] usb 4-1: config 0 has no interface number 0 [ 128.854667][ T10] usb 4-1: config 0 interface 184 has no altsetting 0 [ 128.862881][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 128.872009][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.880075][ T10] usb 4-1: Product: syz [ 128.884343][ T10] usb 4-1: Manufacturer: syz [ 128.888962][ T10] usb 4-1: SerialNumber: syz [ 128.896984][ T10] usb 4-1: config 0 descriptor?? [ 128.903194][ T10] smsc75xx v1.0.0 [ 129.206022][ T5021] syz.4.1561 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 129.217238][ T5021] FAT-fs (rnullb0): bogus number of reserved sectors [ 129.224103][ T5021] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 129.504850][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 129.515769][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 130.087875][ T304] tipc: Subscription rejected, illegal request [ 130.111484][ T5040] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.514575][ T49] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 130.542546][ T49] usb 1-1: USB disconnect, device number 46 [ 130.543294][ T5056] fuseblk: Bad value for 'source' [ 130.565119][ T5065] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.728198][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 130.739060][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 130.748752][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 130.758389][ T10] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 130.770314][ T5074] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.822386][ T5075] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:233 [ 131.250956][ T5110] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 131.416950][ T36] audit: type=1326 audit(2000000328.904:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5122 comm="syz.0.1599" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f29d278e929 code=0x0 [ 131.439945][ T36] audit: type=1326 audit(2000000328.904:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5122 comm="syz.0.1599" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f29d278e929 code=0x0 [ 131.495089][ T5134] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 131.729026][ T36] audit: type=1400 audit(2000000329.214:763): avc: denied { write } for pid=5140 comm="syz.4.1604" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 131.730262][ T5141] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 131.735625][ T353] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 131.758435][ T36] audit: type=1400 audit(2000000329.214:764): avc: denied { mounton } for pid=5140 comm="syz.4.1604" path="/80/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 131.848018][ T5144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5144 comm=syz.4.1605 [ 131.850570][ T5143] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 131.860608][ T5144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5144 comm=syz.4.1605 [ 131.879629][ T5144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5144 comm=syz.4.1605 [ 131.892439][ T5144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5144 comm=syz.4.1605 [ 131.905021][ T5144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5144 comm=syz.4.1605 [ 131.917552][ T5144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5144 comm=syz.4.1605 [ 131.929999][ T5144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5144 comm=syz.4.1605 [ 131.942500][ T5144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5144 comm=syz.4.1605 [ 131.955063][ T5144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5144 comm=syz.4.1605 [ 131.967943][ T5144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5144 comm=syz.4.1605 [ 131.981573][ T353] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 57343, setting to 64 [ 131.992894][ T353] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 131.994373][ T5146] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 132.009609][ T353] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 132.009979][ T5146] rust_binder: Write failure EINVAL in pid:869 [ 132.019495][ T5148] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 132.025864][ T5148] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:246 [ 132.035288][ T353] usb 1-1: New USB device strings: Mfr=1, Product=66, SerialNumber=3 [ 132.035665][ T5148] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 132.044476][ T353] usb 1-1: Product: syz [ 132.053055][ T5148] rust_binder: Read failure Err(EFAULT) in pid:246 [ 132.060802][ T353] usb 1-1: Manufacturer: syz [ 132.076461][ T353] usb 1-1: SerialNumber: syz [ 132.082293][ T353] usb 1-1: config 0 descriptor?? [ 132.084391][ T5150] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 132.089533][ T5134] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 132.216591][ T5152] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 132.216640][ T5152] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 132.224955][ T5152] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:248 [ 132.346069][ T5163] netlink: 'syz.1.1612': attribute type 12 has an invalid length. [ 132.371662][ T5164] rust_binder: Error in use_page_slow: ESRCH [ 132.371694][ T5164] rust_binder: use_range failure ESRCH [ 132.378438][ T5164] rust_binder: Failed to allocate buffer. len:104, is_oneway:false [ 132.384401][ T5164] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 132.392501][ T5164] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:832 [ 132.422847][ T5171] netlink: 'syz.1.1615': attribute type 4 has an invalid length. [ 132.842962][ T353] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 132.994123][ T353] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 133.003881][ T353] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 133.013771][ T353] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.030475][ T353] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 133.050730][ T750] usb 4-1: USB disconnect, device number 42 [ 133.056840][ T353] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 133.073595][ T353] usb 5-1: Product: syz [ 133.081317][ T353] usb 5-1: Manufacturer: syz [ 133.086228][ T353] usb 5-1: SerialNumber: syz [ 133.131721][ T36] audit: type=1400 audit(2000000330.614:765): avc: denied { setattr } for pid=5200 comm="syz.3.1626" name="tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 133.172876][ T36] audit: type=1400 audit(2000000330.644:766): avc: denied { listen } for pid=5200 comm="syz.3.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 133.295649][ T353] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 133.482851][ T750] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 133.557938][ T9] usb 5-1: USB disconnect, device number 8 [ 133.566234][ T9] usblp0: removed [ 133.643892][ T750] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 133.656633][ T750] usb 4-1: config 1 has no interface number 0 [ 133.668341][ T750] usb 4-1: config 1 interface 105 has no altsetting 0 [ 133.684257][ T750] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 133.699947][ T750] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.716746][ T750] usb 4-1: Product: syz [ 133.725372][ T750] usb 4-1: Manufacturer: syz [ 133.735623][ T750] usb 4-1: SerialNumber: syz [ 134.004721][ T750] aqc111 4-1:1.105: probe with driver aqc111 failed with error -71 [ 134.016837][ T750] usb 4-1: USB disconnect, device number 43 [ 134.153269][ T5247] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 134.153341][ T5247] rust_binder: Write failure EFAULT in pid:264 [ 134.185653][ T5247] binder: Bad value for 'stats' [ 134.205605][ T36] audit: type=1400 audit(2000000331.684:767): avc: denied { unmount } for pid=4180 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 134.506092][ T64] usb 1-1: USB disconnect, device number 47 [ 134.517866][ T5263] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 134.543022][ T5265] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 134.550909][ T5266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.566084][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 134.567288][ T5266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.582714][ T5269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 134.599085][ T5276] syzkaller0: entered promiscuous mode [ 134.611443][ T5276] syzkaller0: entered allmulticast mode [ 134.693225][ T5281] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 134.702711][ T9] usb 5-1: device descriptor read/64, error -71 [ 134.726350][ T5289] binder: Bad value for 'stats' [ 134.732451][ T5291] binder: Bad value for 'stats' [ 134.794408][ T5302] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1660'. [ 134.952749][ T9] usb 5-1: device descriptor read/64, error -71 [ 135.062728][ T750] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 135.192667][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 135.212719][ T750] usb 1-1: Using ep0 maxpacket: 16 [ 135.219080][ T750] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.229205][ T750] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 4 [ 135.239728][ T750] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 135.248910][ T750] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.256943][ T750] usb 1-1: Product: syz [ 135.261103][ T750] usb 1-1: Manufacturer: syz [ 135.265826][ T750] usb 1-1: SerialNumber: syz [ 135.271582][ T750] usb 1-1: config 0 descriptor?? [ 135.322695][ T9] usb 5-1: device descriptor read/64, error -71 [ 135.479651][ T49] usb 1-1: USB disconnect, device number 48 [ 135.562622][ T9] usb 5-1: device descriptor read/64, error -71 [ 135.682671][ T9] usb usb5-port1: attempt power cycle [ 135.832598][ T49] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 135.993758][ T49] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.004153][ T49] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 136.014345][ T49] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 136.023918][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 136.025951][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 136.032177][ T49] usb 1-1: SerialNumber: syz [ 136.073623][ T9] usb 5-1: device descriptor read/8, error -71 [ 136.143878][ T5324] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 136.143903][ T5324] rust_binder: Read failure Err(EFAULT) in pid:902 [ 136.190292][ T5332] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:910 [ 136.203473][ T9] usb 5-1: device descriptor read/8, error -71 [ 136.251229][ T49] usb 1-1: 0:2 : does not exist [ 136.261482][ T49] usb 1-1: USB disconnect, device number 49 [ 136.270653][ T5340] IPv6: NLM_F_CREATE should be specified when creating new route [ 136.278887][ T5340] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 136.286179][ T5340] rust_binder: Write failure EINVAL in pid:918 [ 136.325058][ T36] audit: type=1400 audit(2000000333.815:768): avc: denied { create } for pid=5347 comm="syz.1.1679" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 136.352738][ T36] audit: type=1400 audit(2000000333.815:769): avc: denied { rename } for pid=5347 comm="syz.1.1679" name="file0" dev="tmpfs" ino=874 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 136.403558][ T5360] overlayfs: failed to clone upperpath [ 136.475017][ T36] audit: type=1400 audit(2000000333.965:770): avc: denied { watch watch_reads } for pid=5373 comm="syz.1.1689" path="/163/file0" dev="tmpfs" ino=926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 136.498789][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 136.513395][ T36] audit: type=1400 audit(2000000334.005:771): avc: denied { write } for pid=5376 comm="syz.1.1690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 136.523528][ T9] usb 5-1: device descriptor read/8, error -71 [ 136.534068][ T36] audit: type=1400 audit(2000000334.005:772): avc: denied { read } for pid=5376 comm="syz.1.1690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 136.642505][ T750] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 136.663479][ T9] usb 5-1: device descriptor read/8, error -71 [ 136.773267][ T9] usb usb5-port1: unable to enumerate USB device [ 136.793690][ T750] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.804704][ T750] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.814636][ T750] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 136.823739][ T750] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.834774][ T750] usb 4-1: config 0 descriptor?? [ 136.835473][ T36] audit: type=1400 audit(2000000334.325:773): avc: denied { shutdown } for pid=5380 comm="syz.0.1691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 136.870137][ T5384] random: crng reseeded on system resumption [ 137.206680][ T306] bridge_slave_1: left allmulticast mode [ 137.212402][ T306] bridge_slave_1: left promiscuous mode [ 137.218096][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.225699][ T306] bridge_slave_0: left allmulticast mode [ 137.231350][ T306] bridge_slave_0: left promiscuous mode [ 137.237153][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.323982][ T306] veth1_macvtap: left promiscuous mode [ 137.329742][ T306] veth0_vlan: left promiscuous mode [ 137.430527][ T5403] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 137.518407][ T5415] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 137.522981][ T36] audit: type=1400 audit(2000000335.015:774): avc: denied { listen } for pid=5414 comm="syz.0.1702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 137.565121][ T5418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 137.565388][ T5418] rust_binder: Error in use_page_slow: ESRCH [ 137.571855][ T5418] rust_binder: use_range failure ESRCH [ 137.578642][ T5418] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 137.584895][ T5418] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 137.592873][ T5418] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:874 [ 137.613827][ T5422] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 137.672502][ T9] usb 4-1: USB disconnect, device number 45 [ 137.847134][ T5425] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.854441][ T5425] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.861561][ T5425] bridge_slave_0: entered allmulticast mode [ 137.867951][ T5425] bridge_slave_0: entered promiscuous mode [ 137.874493][ T5425] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.881628][ T5425] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.888864][ T5425] bridge_slave_1: entered allmulticast mode [ 137.895100][ T5425] bridge_slave_1: entered promiscuous mode [ 137.935838][ T5425] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.942900][ T5425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.950133][ T5425] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.957219][ T5425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.976261][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.983808][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.993877][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.001014][ T306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.011116][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.018392][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.051124][ T5425] veth0_vlan: entered promiscuous mode [ 138.066062][ T5425] veth1_macvtap: entered promiscuous mode [ 138.104712][ T5446] netlink: 'syz.1.1715': attribute type 4 has an invalid length. [ 138.113736][ T5446] netlink: 'syz.1.1715': attribute type 4 has an invalid length. [ 138.615928][ T5481] FAT-fs (rnullb0): bogus number of reserved sectors [ 138.622756][ T5481] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 138.816709][ T5498] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 138.870372][ T5498] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:896 [ 138.885861][ T5501] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 138.900344][ T5501] rust_binder: Error in use_page_slow: ESRCH [ 138.907027][ T5501] rust_binder: use_range failure ESRCH [ 138.913356][ T5501] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 138.918919][ T5501] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 138.927244][ T5501] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:899 [ 139.032905][ T5506] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.044145][ T5506] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1735'. [ 139.060541][ T5506] rust_binder: Error in use_page_slow: ESRCH [ 139.060559][ T5506] rust_binder: use_range failure ESRCH [ 139.066705][ T5506] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 139.072690][ T5506] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 139.081097][ T5506] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:902 [ 139.394498][ T5518] random: crng reseeded on system resumption [ 139.464140][ T5537] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.464542][ T5537] rust_binder: Error in use_page_slow: ESRCH [ 139.471296][ T5537] rust_binder: use_range failure ESRCH [ 139.478427][ T5537] rust_binder: Failed to allocate buffer. len:144, is_oneway:true [ 139.485753][ T5537] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 139.499867][ T5537] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:916 [ 139.586750][ T5544] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.670678][ T5562] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.683393][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 139.683408][ T36] audit: type=1400 audit(2000000337.175:778): avc: denied { append } for pid=5561 comm="syz.0.1754" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 139.852380][ T5570] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.853092][ T5571] rust_binder: Error in use_page_slow: ESRCH [ 139.859746][ T5571] rust_binder: use_range failure ESRCH [ 139.865857][ T5571] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 139.871397][ T5571] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 139.879611][ T5571] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:930 [ 139.898947][ T5573] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.908693][ T5573] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 139.915512][ T5573] rust_binder: Read failure Err(EFAULT) in pid:933 [ 139.945487][ T5579] SELinux: failed to load policy [ 139.974806][ T5586] input: syz0 as /devices/virtual/input/input17 [ 139.993918][ T36] audit: type=1400 audit(2000000337.485:779): avc: denied { append } for pid=5585 comm="syz.0.1763" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 140.003989][ T5586] kvm: pic: non byte write [ 140.025468][ T5586] random: crng reseeded on system resumption [ 140.100490][ T5592] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 140.111534][ T5592] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 140.120552][ T5592] rust_binder: Error in use_page_slow: ESRCH [ 140.127078][ T5592] rust_binder: use_range failure ESRCH [ 140.133257][ T5592] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 140.138760][ T5592] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 140.146710][ T5592] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:950 [ 140.156297][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 140.319717][ T36] audit: type=1400 audit(2000000337.805:780): avc: denied { create } for pid=5596 comm="syz.1.1767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 140.341909][ T9] usb 6-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 140.351065][ T9] usb 6-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 140.359240][ T9] usb 6-1: Product: syz [ 140.363462][ T9] usb 6-1: Manufacturer: syz [ 140.368100][ T9] usb 6-1: SerialNumber: syz [ 140.373584][ T9] usb 6-1: config 0 descriptor?? [ 140.402409][ T750] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 140.488457][ T5619] sit0: entered promiscuous mode [ 140.495001][ T5619] netlink: 'syz.4.1776': attribute type 1 has an invalid length. [ 140.503657][ T5619] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1776'. [ 140.552060][ T750] usb 1-1: Using ep0 maxpacket: 32 [ 140.558500][ T750] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 140.567178][ T750] usb 1-1: config 0 has no interface number 0 [ 140.569170][ T5619] kvm: pic: non byte write [ 140.573565][ T750] usb 1-1: config 0 interface 184 has no altsetting 0 [ 140.580459][ T5619] random: crng reseeded on system resumption [ 140.585766][ T5575] binder: Unknown parameter 'fsconconfined_u' [ 140.597132][ T750] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 140.608203][ T9] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 140.610493][ T750] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.625289][ T9] asix 6-1:0.0: probe with driver asix failed with error -71 [ 140.627846][ T750] usb 1-1: Product: syz [ 140.638384][ T750] usb 1-1: Manufacturer: syz [ 140.639603][ T9] usb 6-1: USB disconnect, device number 2 [ 140.647799][ T750] usb 1-1: SerialNumber: syz [ 140.654519][ T750] usb 1-1: config 0 descriptor?? [ 140.660231][ T750] smsc75xx v1.0.0 [ 140.684136][ T36] audit: type=1400 audit(2000000338.175:781): avc: denied { read } for pid=5622 comm="syz.4.1777" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 140.706002][ T36] audit: type=1400 audit(2000000338.175:782): avc: denied { open } for pid=5622 comm="syz.4.1777" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 140.750538][ T5628] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 140.801411][ T5629] rust_binder: Error in use_page_slow: ESRCH [ 140.808054][ T5629] rust_binder: use_range failure ESRCH [ 140.814331][ T5629] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 140.820054][ T5629] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 140.828392][ T5629] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:289 [ 140.837800][ T5629] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 140.846909][ T5629] rust_binder: Read failure Err(EFAULT) in pid:289 [ 140.853094][ T5630] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 140.869463][ T5633] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 140.890210][ T5638] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 140.898384][ T5638] rust_binder: Error in use_page_slow: ESRCH [ 140.904894][ T5638] rust_binder: use_range failure ESRCH [ 140.910911][ T5638] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 140.916435][ T5638] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 140.924511][ T5638] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:299 [ 141.031974][ T5645] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 141.041110][ T5645] rust_binder: Error while translating object. [ 141.052449][ T5645] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 141.059266][ T5645] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:306 [ 141.084472][ T5649] FAT-fs (rnullb0): bogus number of reserved sectors [ 141.100432][ T5649] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 141.108852][ T36] audit: type=1326 audit(2000000338.595:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5652 comm="syz.1.1786" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd20ff8e929 code=0x0 [ 141.165153][ T5660] SELinux: security_context_str_to_sid () failed with errno=-22 [ 141.175674][ T5662] rust_binder: Error in use_page_slow: ESRCH [ 141.175698][ T5662] rust_binder: use_range failure ESRCH [ 141.181926][ T5662] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 141.187599][ T5662] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 141.197701][ T5662] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:312 [ 141.262267][ T750] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 141.286375][ T750] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 141.296206][ T750] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 141.308406][ T750] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 141.318687][ T750] usb 1-1: USB disconnect, device number 50 [ 141.521889][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 141.671870][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 141.678141][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.689088][ T9] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 4 [ 141.699379][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 141.708492][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.716510][ T9] usb 6-1: Product: syz [ 141.720682][ T9] usb 6-1: Manufacturer: syz [ 141.725303][ T9] usb 6-1: SerialNumber: syz [ 141.730408][ T9] usb 6-1: config 0 descriptor?? [ 141.938456][ T750] usb 6-1: USB disconnect, device number 3 [ 141.967434][ T36] audit: type=1400 audit(2000000339.455:784): avc: denied { accept } for pid=5677 comm="syz.0.1795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 142.065219][ T45] tipc: Subscription rejected, illegal request [ 142.080089][ T5685] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.084728][ T5685] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 176, size: 163) [ 142.091233][ T5685] rust_binder: Error while translating object. [ 142.101922][ T5685] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 142.108290][ T5685] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:319 [ 142.231822][ T750] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 142.393016][ T750] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.403164][ T750] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 142.412940][ T750] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 142.422027][ T750] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 142.430013][ T750] usb 6-1: SerialNumber: syz [ 142.434931][ T353] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 142.469520][ T36] audit: type=1400 audit(2000000339.955:785): avc: denied { sys_module } for pid=5693 comm="syz.1.1801" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 142.542248][ T5706] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1805'. [ 142.551937][ T5706] selinux_netlink_send: 56 callbacks suppressed [ 142.551953][ T5706] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=5706 comm=syz.1.1805 [ 142.585941][ T5708] fuse: Bad value for 'user_id' [ 142.590844][ T5708] fuse: Bad value for 'user_id' [ 142.597278][ T353] usb 5-1: not running at top speed; connect to a high speed hub [ 142.606080][ T353] usb 5-1: config 255 has an invalid interface number: 103 but max is 3 [ 142.615273][ T353] usb 5-1: config 255 has an invalid interface number: 251 but max is 3 [ 142.623668][ T353] usb 5-1: config 255 contains an unexpected descriptor of type 0x1, skipping [ 142.632600][ T353] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 142.642912][ T353] usb 5-1: config 255 has 2 interfaces, different from the descriptor's value: 4 [ 142.652219][ T353] usb 5-1: config 255 has no interface number 0 [ 142.658542][ T353] usb 5-1: config 255 has no interface number 1 [ 142.665455][ T750] usb 6-1: 0:2 : does not exist [ 142.670840][ T353] usb 5-1: config 255 interface 103 altsetting 254 endpoint 0x5 has invalid maxpacket 1056, setting to 64 [ 142.683205][ T750] usb 6-1: USB disconnect, device number 4 [ 142.689125][ T353] usb 5-1: config 255 interface 103 altsetting 254 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 142.700718][ T353] usb 5-1: config 255 interface 103 altsetting 254 has an endpoint descriptor with address 0x23, changing to 0x3 [ 142.713761][ T353] usb 5-1: config 255 interface 103 altsetting 254 endpoint 0x3 has invalid maxpacket 30926, setting to 64 [ 142.714179][ T571] udevd[571]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 142.725781][ T353] usb 5-1: config 255 interface 103 altsetting 254 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 142.752290][ T353] usb 5-1: config 255 interface 103 altsetting 254 has a duplicate endpoint with address 0x5, skipping [ 142.763422][ T353] usb 5-1: config 255 interface 103 altsetting 254 has an endpoint descriptor with address 0x13, changing to 0x3 [ 142.775400][ T353] usb 5-1: config 255 interface 103 altsetting 254 has a duplicate endpoint with address 0x3, skipping [ 142.786529][ T353] usb 5-1: config 255 interface 103 altsetting 254 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 142.800555][ T353] usb 5-1: config 255 interface 251 altsetting 248 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 142.814065][ T353] usb 5-1: config 255 interface 103 has no altsetting 0 [ 142.821158][ T353] usb 5-1: config 255 interface 251 has no altsetting 0 [ 142.827734][ T36] audit: type=1400 audit(2000000340.305:786): avc: denied { lock } for pid=5709 comm="syz.0.1807" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 142.830189][ T353] usb 5-1: New USB device found, idVendor=2019, idProduct=ed06, bcdDevice= e.bf [ 142.860320][ T353] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.868354][ T353] usb 5-1: Product: 、 [ 142.872544][ T353] usb 5-1: Manufacturer: Џ [ 142.875675][ T5712] binder: Bad value for 'defcontext' [ 142.877065][ T353] usb 5-1: SerialNumber: 䰊 [ 143.252177][ T36] audit: type=1400 audit(2000000340.746:787): avc: denied { setcheckreqprot } for pid=5721 comm="syz.5.1812" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 143.551640][ T10] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 143.736237][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 143.761234][ T10] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 143.763877][ T353] usb 5-1: USB disconnect, device number 13 [ 143.789010][ T10] usb 6-1: config 1 has an invalid descriptor of length 29, skipping remainder of the config [ 143.809061][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 143.818377][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 143.833074][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 143.842804][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.850826][ T10] usb 6-1: Product: syz [ 143.855198][ T10] usb 6-1: Manufacturer: ఉ [ 143.859855][ T10] usb 6-1: SerialNumber: syz [ 143.865737][ T5722] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 144.284121][ T10] usb 6-1: 0:2 : does not exist [ 144.292230][ T10] usb 6-1: USB disconnect, device number 5 [ 144.301515][ T571] udevd[571]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 144.534005][ T5752] rust_binder: Write failure EINVAL in pid:347 [ 144.552236][ T5759] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:354 [ 144.566348][ T5761] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 144.577730][ T5761] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 144.584255][ T5761] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:356 [ 144.649377][ T5766] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 144.659652][ T5766] rust_binder: Error in use_page_slow: ESRCH [ 144.666153][ T5766] rust_binder: use_range failure ESRCH [ 144.672171][ T5766] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 144.677635][ T5766] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 144.685580][ T5766] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:973 [ 144.695012][ T5766] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:973 [ 144.700576][ T5767] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:973 [ 144.719941][ T5772] rust_binder: Error in use_page_slow: ESRCH [ 144.720103][ T5773] rust_binder: Error in use_page_slow: ESRCH [ 144.729454][ T5772] rust_binder: use_range failure ESRCH [ 144.735738][ T5773] rust_binder: use_range failure ESRCH [ 144.741842][ T5772] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 144.748917][ T5773] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 144.753586][ T5772] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 144.760898][ T5773] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 144.768781][ T5772] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:976 [ 144.778608][ T5773] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:976 [ 144.798954][ T5772] fuse: Unknown parameter '0x000000000000000a' [ 144.817872][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 144.817889][ T36] audit: type=1400 audit(2000000342.306:791): avc: denied { accept } for pid=5771 comm="syz.0.1829" lport=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 144.851162][ T5777] overlayfs: failed to clone upperpath [ 144.962655][ T5786] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1834'. [ 144.975988][ T5790] rust_binder: inc_ref_done called when no active inc_refs [ 145.014973][ T5786] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 145.031473][ T5786] rust_binder: Write failure EINVAL in pid:981 [ 145.052109][ T5796] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 145.058830][ T5796] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:60 [ 145.090177][ T5800] rust_binder: Error while translating object. [ 145.099486][ T5800] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 145.105779][ T5800] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:64 [ 145.129570][ T36] audit: type=1400 audit(2000000342.616:792): avc: denied { create } for pid=5801 comm="syz.5.1841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 145.129746][ T5802] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:66 [ 145.411411][ T9] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 145.411411][ T353] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 145.493769][ T5821] tmpfs: Unsupported parameter 'mpol' [ 145.562558][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 145.570629][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 145.579812][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.588223][ T9] usb 1-1: Product: syz [ 145.591369][ T353] usb 6-1: Using ep0 maxpacket: 16 [ 145.592702][ T9] usb 1-1: Manufacturer: syz [ 145.600212][ T353] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.603369][ T9] usb 1-1: SerialNumber: syz [ 145.620042][ T353] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.630115][ T353] usb 6-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 145.640153][ T353] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.649056][ T353] usb 6-1: config 0 descriptor?? [ 145.903794][ T353] usbhid 6-1:0.0: can't add hid device: -71 [ 145.910581][ T353] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 145.923816][ T353] usb 6-1: USB disconnect, device number 6 [ 146.011942][ T5840] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 146.019809][ T5840] rust_binder: Write failure EINVAL in pid:88 [ 146.032794][ T5842] netlink: 596 bytes leftover after parsing attributes in process `syz.5.1856'. [ 146.049406][ T5843] netlink: 596 bytes leftover after parsing attributes in process `syz.5.1856'. [ 146.212532][ T9] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 51 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 146.214026][ T5850] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.223764][ T5851] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.230510][ T5851] rust_binder: Error in use_page_slow: ESRCH [ 146.237127][ T5851] rust_binder: use_range failure ESRCH [ 146.243233][ T5851] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 146.248769][ T5851] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 146.256886][ T5851] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:369 [ 146.274743][ T5853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.286555][ T36] audit: type=1400 audit(2000000343.776:793): avc: denied { write } for pid=5852 comm="syz.4.1859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 146.286712][ T5853] rust_binder: Error while translating object. [ 146.316716][ T5853] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 146.323662][ T5853] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:372 [ 146.353277][ T5857] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.362873][ T5857] rust_binder: Error in use_page_slow: ESRCH [ 146.369623][ T5857] rust_binder: use_range failure ESRCH [ 146.375820][ T5857] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 146.381657][ T5857] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 146.389831][ T5857] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:376 [ 146.435336][ T5867] : renamed from bond_slave_0 [ 146.615751][ C1] usblp0: nonzero write bulk status received: -71 [ 146.615822][ T9] usb 1-1: USB disconnect, device number 51 [ 146.701280][ T353] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 146.825515][ T5804] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1843'. [ 146.852498][ T353] usb 5-1: config 0 has no interfaces? [ 146.859303][ T353] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 146.869725][ T353] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 146.878093][ T353] usb 5-1: SerialNumber: syz [ 146.883773][ T353] usb 5-1: config 0 descriptor?? [ 146.963796][ T5872] rust_binder: Error while translating object. [ 146.963840][ T5872] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 146.970069][ T5872] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:98 [ 147.071202][ T9] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 147.098471][ T353] usb 5-1: USB disconnect, device number 14 [ 147.241009][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 147.249560][ T9] usb 1-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 147.252438][ T5881] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 147.262989][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 147.278922][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c088, bcdDevice= 0.40 [ 147.289062][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.297261][ T9] usb 1-1: Product: syz [ 147.301779][ T9] usb 1-1: Manufacturer: ꧭ帬稶ⷽ㿼笺풠倨탥뚍셵ವᇈደ佞杤濧Ꝿ㺰뺂箁퓯괰䪚躢杘』괻閻캳ዤꇩ⑏↟๜酫뢖샅支颌∵ᇽ纲Ἑ뿠琴烥ᬶ陼䂦㔘浝鼡耙础䎉඲脣啀ߍ⒗렔ァ૜ [ 147.326164][ T9] usb 1-1: SerialNumber: syz [ 147.333634][ T5804] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 147.392302][ T5888] rust_binder: Failed to allocate buffer. len:144, is_oneway:true [ 147.429969][ T5895] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 147.447222][ T5895] overlay: filesystem on ./bus not supported as upperdir [ 147.456226][ T5895] overlay: filesystem on ./bus not supported as upperdir [ 147.464059][ T5895] overlay: filesystem on ./bus not supported as upperdir [ 147.471802][ T5895] overlay: filesystem on ./bus not supported as upperdir [ 147.478996][ T5895] overlay: filesystem on ./bus not supported as upperdir [ 147.486632][ T5895] overlay: Unknown parameter 'mounts' [ 147.492524][ T5895] overlay: Unknown parameter 'mounts' [ 147.498324][ T5895] overlay: Unknown parameter 'mounts' [ 147.503972][ T5895] overlay: Unknown parameter 'mounts' [ 147.509918][ T5895] overlay: Unknown parameter 'mounts' [ 147.515483][ T5895] overlay: Unknown parameter 'mounts' [ 147.521220][ T5895] overlay: Unknown parameter 'mounts' [ 147.526811][ T5895] overlay: Unknown parameter 'mounts' [ 147.532496][ T5895] overlay: Unknown parameter 'mounts' [ 147.538038][ T5895] overlay: Unknown parameter 'mounts' [ 147.543886][ T5895] overlay: Unknown parameter 'mounts' [ 147.546671][ T5803] usblp0: removed [ 147.552120][ T9] usbhid 1-1:1.0: can't add hid device: -71 [ 147.560160][ T5895] overlay: Unknown parameter 'mounts' [ 147.565765][ T9] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 147.568483][ T5895] overlay: Unknown parameter 'mounts' [ 147.578024][ T9] usb 1-1: USB disconnect, device number 52 [ 147.585123][ T5895] overlay: Unknown parameter 'mounts' [ 147.590751][ T5895] overlay: Unknown parameter 'mounts' [ 147.596316][ T5895] overlay: Unknown parameter 'mounts' [ 147.601852][ T5895] overlay: Unknown parameter 'mounts' [ 147.607344][ T5895] overlay: Unknown parameter 'mounts' [ 147.612923][ T5895] overlay: Unknown parameter 'mounts' [ 147.618420][ T5895] overlay: Unknown parameter 'mounts' [ 147.624061][ T5895] overlay: Unknown parameter 'mounts' [ 147.629719][ T5895] overlay: Unknown parameter 'mounts' [ 147.635367][ T5895] overlay: Unknown parameter 'mounts' [ 147.641206][ T5895] overlay: Unknown parameter 'mounts' [ 147.646701][ T5895] overlay: Unknown parameter 'mounts' [ 147.652492][ T5895] overlay: Unknown parameter 'mounts' [ 147.658111][ T5895] overlay: Unknown parameter 'mounts' [ 147.663992][ T5895] overlay: Unknown parameter 'mounts' [ 147.670095][ T5895] overlay: Unknown parameter 'mounts' [ 147.675633][ T5895] overlay: Unknown parameter 'mounts' [ 147.681207][ T5895] overlay: Unknown parameter 'mounts' [ 147.686717][ T5895] overlay: Unknown parameter 'mounts' [ 147.692314][ T5895] overlay: Unknown parameter 'mounts' [ 147.698047][ T5895] overlay: Unknown parameter 'mounts' [ 147.703810][ T5895] overlay: Unknown parameter 'mounts' [ 147.709329][ T5895] overlay: Unknown parameter 'mounts' [ 147.715036][ T5895] overlay: Unknown parameter 'mounts' [ 147.721155][ T5895] overlay: Unknown parameter 'mounts' [ 147.726675][ T5895] overlay: Unknown parameter 'mounts' [ 147.732204][ T5895] overlay: Unknown parameter 'mounts' [ 147.737849][ T5895] overlay: Unknown parameter 'mounts' [ 147.744199][ T5895] overlay: Unknown parameter 'mounts' [ 147.750068][ T5895] overlay: Unknown parameter 'mounts' [ 147.756323][ T5895] overlay: Unknown parameter 'mounts' [ 147.762052][ T5895] overlay: Unknown parameter 'mounts' [ 147.767646][ T5895] overlay: Unknown parameter 'mounts' [ 147.773199][ T5895] overlay: Unknown parameter 'mounts' [ 147.778726][ T5895] overlay: Unknown parameter 'mounts' [ 147.784287][ T5895] overlay: Unknown parameter 'mounts' [ 147.789818][ T5895] overlay: Unknown parameter 'mounts' [ 147.795486][ T5895] overlay: Unknown parameter 'mounts' [ 147.801102][ T5895] overlay: Unknown parameter 'mounts' [ 147.806653][ T5895] overlay: Unknown parameter 'mounts' [ 147.812362][ T5895] overlay: Unknown parameter 'mounts' [ 147.818256][ T5895] overlay: Unknown parameter 'mounts' [ 147.824039][ T5895] overlay: Unknown parameter 'mounts' [ 147.829791][ T5895] overlay: Unknown parameter 'mounts' [ 147.830130][ T5902] rust_binder: Error in use_page_slow: ESRCH [ 147.835286][ T5902] rust_binder: use_range failure ESRCH [ 147.841492][ T5902] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 147.841570][ T5895] overlay: Unknown parameter 'mounts' [ 147.846957][ T5902] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 147.846984][ T5902] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:394 [ 147.869961][ T5895] overlay: Unknown parameter 'mounts' [ 147.882048][ T5904] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 147.884901][ T5904] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 147.891613][ T5904] rust_binder: Error while translating object. [ 147.900457][ T5904] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 147.906876][ T5904] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:396 [ 147.918130][ T5905] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.181062][ T750] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 148.245212][ T5927] overlayfs: failed to clone upperpath [ 148.311416][ T5931] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.311837][ T5932] rust_binder: Error in use_page_slow: ESRCH [ 148.318376][ T5932] rust_binder: use_range failure ESRCH [ 148.326794][ T5932] rust_binder: Failed to allocate buffer. len:1024, is_oneway:true [ 148.333002][ T5932] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 148.345951][ T5932] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:995 [ 148.352053][ T750] usb 6-1: config 1 interface 0 altsetting 253 bulk endpoint 0x3 has invalid maxpacket 1023 [ 148.385966][ T750] usb 6-1: config 1 interface 0 altsetting 253 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 148.402644][ T750] usb 6-1: config 1 interface 0 has no altsetting 0 [ 148.410124][ T750] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 148.420212][ T750] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 148.428643][ T750] usb 6-1: SerialNumber: syz [ 148.437166][ T5909] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 148.518718][ T36] audit: type=1326 audit(2000000345.996:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5942 comm="syz.0.1889" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f29d278e929 code=0x0 [ 148.587282][ T5954] overlayfs: failed to clone upperpath [ 148.851424][ T750] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 148.861341][ T750] usb 6-1: USB disconnect, device number 7 [ 149.105809][ T36] audit: type=1326 audit(2000000346.586:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.4.1894" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc1a4d8e929 code=0x0 [ 149.370289][ T5970] incfs: Error accessing: /dev/rnullb0. [ 149.375988][ T5970] incfs: mount failed -20 [ 149.598945][ T5983] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 149.621747][ T5985] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 149.660813][ T9] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=9 comm=kworker/0:0 [ 149.880903][ T10] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 149.930892][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 149.946627][ T36] audit: type=1400 audit(2000000347.426:796): avc: denied { map } for pid=6003 comm="syz.4.1912" path="pipe:[37459]" dev="pipefs" ino=37459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 149.970203][ T36] audit: type=1400 audit(2000000347.426:797): avc: denied { execute } for pid=6003 comm="syz.4.1912" path="pipe:[37459]" dev="pipefs" ino=37459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 150.011049][ T10] usb 1-1: device descriptor read/64, error -71 [ 150.090896][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 150.097668][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.108789][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.118593][ T9] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 150.127720][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.139659][ T9] usb 6-1: config 0 descriptor?? [ 150.144619][ T6027] netlink: 'syz.4.1920': attribute type 4 has an invalid length. [ 150.157714][ T6027] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6027 comm=syz.4.1920 [ 150.260845][ T10] usb 1-1: device descriptor read/64, error -71 [ 150.298370][ T6038] overlayfs: failed to clone lowerpath [ 150.500811][ T10] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 150.560148][ T9] hid-multitouch 0003:1FD2:6007.0010: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.5-1/input0 [ 150.641153][ T10] usb 1-1: device descriptor read/64, error -71 [ 150.758313][ T5996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.766886][ T5996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.778553][ T5996] SELinux: security_context_str_to_sid () failed with errno=-22 [ 150.786709][ T750] usb 6-1: USB disconnect, device number 8 [ 150.880772][ T10] usb 1-1: device descriptor read/64, error -71 [ 150.990850][ T10] usb usb1-port1: attempt power cycle [ 151.092545][ T36] audit: type=1400 audit(2000000348.576:798): avc: denied { map } for pid=6073 comm="syz.1.1937" path="socket:[38324]" dev="sockfs" ino=38324 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 151.208403][ T6088] cgroup: fork rejected by pids controller in /syz1 [ 151.330676][ T10] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 151.361724][ T10] usb 1-1: device descriptor read/8, error -71 [ 151.434481][ T6296] random: crng reseeded on system resumption [ 151.438348][ T6295] kvm: pic: non byte write [ 151.501845][ T10] usb 1-1: device descriptor read/8, error -71 [ 151.529987][ T6312] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 151.530347][ T6312] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:159 [ 151.575243][ T36] audit: type=1400 audit(2000000349.057:799): avc: denied { setattr } for pid=6313 comm="syz.5.1958" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 151.575453][ T6314] rust_binder: validate_parent_fixup: fixup_min_offset=50, parent_offset=26 [ 151.607264][ T6314] rust_binder: Error while translating object. [ 151.616099][ T6314] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 151.622370][ T6314] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:161 [ 151.750691][ T10] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 151.781745][ T10] usb 1-1: device descriptor read/8, error -71 [ 151.911884][ T10] usb 1-1: device descriptor read/8, error -71 [ 151.930666][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 152.020775][ T10] usb usb1-port1: unable to enumerate USB device [ 152.077444][ T6329] 9pnet_fd: Insufficient options for proto=fd [ 152.085087][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.095632][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 152.104821][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.114169][ T9] usb 6-1: config 0 descriptor?? [ 152.130433][ T36] audit: type=1326 audit(2000000349.607:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.1.1965" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd20ff8e929 code=0x0 [ 152.523940][ T9] logitech-djreceiver 0003:046D:C71F.0011: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.5-1/input0 [ 152.648263][ T6346] rust_binder: Error in use_page_slow: ESRCH [ 152.648287][ T6346] rust_binder: use_range failure ESRCH [ 152.654407][ T6346] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 152.660089][ T6346] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 152.668185][ T6346] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1023 [ 152.733932][ T307] usb 6-1: USB disconnect, device number 9 [ 152.748486][ T6361] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 152.851055][ T6364] rust_binder: Error in use_page_slow: ESRCH [ 152.857526][ T6364] rust_binder: use_range failure ESRCH [ 152.863566][ T6364] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 152.869040][ T6364] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 152.877152][ T6364] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1031 [ 153.590077][ T6404] rust_binder: Write failure EFAULT in pid:1035 [ 153.944341][ T6415] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.951166][ T6419] rust_binder: Error while translating object. [ 153.952456][ T6416] rust_binder: Error while translating object. [ 153.957613][ T6419] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 153.970213][ T6416] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 153.975441][ T6419] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:181 [ 153.979791][ T6416] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:181 [ 154.012331][ T6421] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 154.030855][ T6421] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 154.088994][ T6441] incfs: Options parsing error. -22 [ 154.116175][ T6441] incfs: mount failed -22 [ 154.219213][ T6469] exFAT-fs (rnullb0): invalid boot record signature [ 154.229207][ T6469] exFAT-fs (rnullb0): failed to read boot sector [ 154.236255][ T6469] exFAT-fs (rnullb0): failed to recognize exfat type [ 154.240832][ T6477] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 154.246070][ T6477] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 154.288155][ T6484] fuseblk: Unknown parameter 'subj_type' [ 154.307753][ T6494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6494 comm=syz.4.2016 [ 154.317976][ T6469] FAT-fs (rnullb0): bogus number of reserved sectors [ 154.326882][ T6469] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 154.359299][ T6506] overlayfs: failed to resolve './bus': -2 [ 154.369446][ T6509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 154.370749][ T6511] overlayfs: failed to resolve './bus': -2 [ 154.374804][ T6510] rust_binder: Error in use_page_slow: ESRCH [ 154.383762][ T6500] netlink: 'syz.4.2019': attribute type 15 has an invalid length. [ 154.401113][ T6510] rust_binder: use_range failure ESRCH [ 154.401140][ T6510] rust_binder: Failed to allocate buffer. len:104, is_oneway:false [ 154.407027][ T6510] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 154.423156][ T6510] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1044 [ 154.557174][ T6545] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 154.618351][ T6548] rust_binder: Error in use_page_slow: ESRCH [ 154.630276][ T6548] rust_binder: use_range failure ESRCH [ 154.650371][ T6548] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 154.655905][ T6548] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 154.674118][ T6548] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1053 [ 154.692167][ T36] audit: type=1400 audit(2000000352.177:801): avc: denied { map } for pid=6552 comm="syz.1.2035" path="socket:[39353]" dev="sockfs" ino=39353 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 154.725236][ T36] audit: type=1400 audit(2000000352.177:802): avc: denied { read } for pid=6552 comm="syz.1.2035" path="socket:[39353]" dev="sockfs" ino=39353 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 154.778131][ T6558] fuse: Unknown parameter '_b%;Pi&>b5vsm~cT9} t?' [ 154.852341][ T6568] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 155.093558][ T6577] netlink: 57 bytes leftover after parsing attributes in process `syz.4.2044'. [ 155.328190][ T6583] overlayfs: failed to clone upperpath [ 155.500752][ T6589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2050'. [ 156.257570][ T36] audit: type=1400 audit(2000000353.737:803): avc: denied { relabelfrom } for pid=6603 comm="syz.5.2056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 156.310194][ T36] audit: type=1400 audit(2000000353.737:804): avc: denied { relabelto } for pid=6603 comm="syz.5.2056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 156.347913][ T6612] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:220 [ 156.590055][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 156.780005][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 156.788877][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.819982][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 156.829055][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.850693][ T9] usb 6-1: config 0 descriptor?? [ 156.881483][ T6614] overlayfs: failed to clone upperpath [ 157.088450][ T6641] overlayfs: failed to resolve './file1': -2 [ 157.092671][ T6643] overlayfs: failed to clone upperpath [ 157.115215][ T6629] kvm: pic: non byte write [ 157.121651][ T6629] random: crng reseeded on system resumption [ 157.263841][ T9] appleir 0003:05AC:8241.0012: unknown main item tag 0x0 [ 157.272439][ T9] appleir 0003:05AC:8241.0012: unknown main item tag 0x0 [ 157.279766][ T9] appleir 0003:05AC:8241.0012: unknown main item tag 0x0 [ 157.287410][ T9] appleir 0003:05AC:8241.0012: unknown main item tag 0x0 [ 157.294623][ T9] appleir 0003:05AC:8241.0012: unknown main item tag 0x0 [ 157.301958][ T9] appleir 0003:05AC:8241.0012: No inputs registered, leaving [ 157.314026][ T9] appleir 0003:05AC:8241.0012: hiddev96,hidraw0: USB HID v0.05 Device [HID 05ac:8241] on usb-dummy_hcd.5-1/input0 [ 157.530218][ T6612] rust_binder: Error while translating object. [ 157.530249][ T6612] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 157.536530][ T6612] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:220 [ 157.546693][ T307] usb 6-1: USB disconnect, device number 10 [ 157.949535][ T6715] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 157.951577][ T6715] rust_binder: Error in use_page_slow: ESRCH [ 157.958035][ T6715] rust_binder: use_range failure ESRCH [ 157.964083][ T6715] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 157.969565][ T6715] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 157.977807][ T6715] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1073 [ 158.068401][ T6725] rust_binder: Write failure EINVAL in pid:222 [ 158.078387][ T6729] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 158.097111][ T6729] rust_binder: Error in use_page_slow: ESRCH [ 158.104215][ T6729] rust_binder: use_range failure ESRCH [ 158.116031][ T6729] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 158.127517][ T6729] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 158.135646][ T6729] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1082 [ 158.150142][ T6725] rust_binder: Read failure Err(EAGAIN) in pid:222 [ 158.172893][ T6734] binder: Bad value for 'stats' [ 158.294252][ T6743] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 158.366770][ T6747] fuse: Bad value for 'user_id' [ 158.371780][ T6747] fuse: Bad value for 'user_id' [ 158.443384][ T36] audit: type=1400 audit(2000000355.927:805): avc: denied { shutdown } for pid=6748 comm="syz.0.2104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 159.059744][ T9] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 159.189792][ T9] usb 6-1: device descriptor read/64, error -71 [ 159.237992][ T6814] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 159.255157][ T6816] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 176, size: 254) [ 159.255178][ T6816] rust_binder: Error while translating object. [ 159.266196][ T6816] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 159.272426][ T6816] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1104 [ 159.282656][ T6817] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 159.301136][ T6822] netlink: 'syz.0.2128': attribute type 11 has an invalid length. [ 159.315459][ T6822] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2128'. [ 159.387218][ T6832] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 159.387251][ T6832] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 159.393787][ T6832] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 159.407722][ T36] audit: type=1400 audit(2000000356.887:806): avc: denied { read write } for pid=6835 comm="syz.0.2131" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 159.437906][ T9] usb 6-1: device descriptor read/64, error -71 [ 159.438185][ T36] audit: type=1400 audit(2000000356.887:807): avc: denied { open } for pid=6835 comm="syz.0.2131" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 159.467309][ T36] audit: type=1400 audit(2000000356.887:808): avc: denied { map } for pid=6835 comm="syz.0.2131" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 159.649685][ T307] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 159.679694][ T9] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 159.779676][ T307] usb 1-1: device descriptor read/64, error -71 [ 160.019677][ T307] usb 1-1: device descriptor read/64, error -71 [ 160.039672][ T9] usb 6-1: device descriptor read/64, error -71 [ 160.259604][ T307] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 160.279636][ T9] usb 6-1: device descriptor read/64, error -71 [ 160.389623][ T307] usb 1-1: device descriptor read/64, error -71 [ 160.389731][ T9] usb usb6-port1: attempt power cycle [ 160.480051][ T6861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2141'. [ 160.629540][ T307] usb 1-1: device descriptor read/64, error -71 [ 160.739587][ T9] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 160.739686][ T307] usb usb1-port1: attempt power cycle [ 160.760605][ T9] usb 6-1: device descriptor read/8, error -71 [ 160.890708][ T9] usb 6-1: device descriptor read/8, error -71 [ 161.089559][ T307] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 161.110627][ T307] usb 1-1: device descriptor read/8, error -71 [ 161.129529][ T9] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 161.150471][ T9] usb 6-1: device descriptor read/8, error -71 [ 161.240512][ T307] usb 1-1: device descriptor read/8, error -71 [ 161.280623][ T9] usb 6-1: device descriptor read/8, error -71 [ 161.389601][ T9] usb usb6-port1: unable to enumerate USB device [ 161.479477][ T307] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 161.500469][ T307] usb 1-1: device descriptor read/8, error -71 [ 161.630500][ T307] usb 1-1: device descriptor read/8, error -71 [ 161.739540][ T307] usb usb1-port1: unable to enumerate USB device [ 161.855465][ T36] audit: type=1400 audit(2000000359.338:809): avc: denied { lock } for pid=6897 comm="syz.5.2156" path="socket:[41197]" dev="sockfs" ino=41197 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 161.887832][ T36] audit: type=1400 audit(2000000359.368:810): avc: denied { checkpoint_restore } for pid=6902 comm="syz.5.2157" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 161.888328][ T6903] FAT-fs (rnullb0): bogus number of reserved sectors [ 161.916473][ T6903] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 161.966737][ T6909] rust_binder: Write failure EINVAL in pid:248 [ 161.991648][ T6917] rust_binder: Error while translating object. [ 161.997871][ T6917] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 162.004225][ T6917] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:256 [ 162.259393][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 162.274194][ T36] audit: type=1400 audit(2000000359.758:811): avc: denied { audit_read } for pid=6920 comm="syz.4.2165" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 162.418557][ T6925] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 162.419335][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 162.433475][ T9] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 162.441781][ T9] usb 6-1: config 0 has no interface number 0 [ 162.449241][ T9] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 162.458395][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.466476][ T9] usb 6-1: Product: syz [ 162.470724][ T9] usb 6-1: Manufacturer: syz [ 162.475354][ T9] usb 6-1: SerialNumber: syz [ 162.482571][ T9] usb 6-1: config 0 descriptor?? [ 162.486199][ T6928] rust_binder: Error while translating object. [ 162.487569][ T6928] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 162.488631][ T9] asix 6-1:0.251: probe with driver asix failed with error -22 [ 162.494218][ T6928] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1130 [ 162.517310][ T6932] exFAT-fs (rnullb0): invalid boot record signature [ 162.533373][ T6932] exFAT-fs (rnullb0): failed to read boot sector [ 162.539755][ T6932] exFAT-fs (rnullb0): failed to recognize exfat type [ 162.547567][ T6932] exFAT-fs (rnullb0): invalid boot record signature [ 162.554633][ T6932] exFAT-fs (rnullb0): failed to read boot sector [ 162.560980][ T6932] exFAT-fs (rnullb0): failed to recognize exfat type [ 162.578571][ T36] audit: type=1326 audit(2000000360.058:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6936 comm="syz.1.2169" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd20ff8e929 code=0x0 [ 162.691808][ T6919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.700821][ T6919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.762716][ T6919] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:258 [ 162.801706][ T304] bridge_slave_1: left allmulticast mode [ 162.816584][ T304] bridge_slave_1: left promiscuous mode [ 162.817421][ T9] usb 6-1: USB disconnect, device number 15 [ 162.822410][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.835677][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.962040][ T304] veth1_macvtap: left promiscuous mode [ 162.967569][ T304] >: left promiscuous mode [ 163.098273][ T6958] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2176'. [ 163.246150][ T36] audit: type=1400 audit(2000000360.728:813): avc: denied { execute } for pid=6967 comm="syz.0.2179" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 163.339948][ T6978] rust_binder: Write failure EINVAL in pid:1162 [ 163.355787][ T36] audit: type=1400 audit(2000000360.838:814): avc: denied { map } for pid=6981 comm="syz.5.2184" path="/dev/ttyS3" dev="devtmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 163.585497][ T9] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 163.662020][ T6991] rust_binder: Error while translating object. [ 163.662066][ T6991] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 163.668312][ T6991] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:270 [ 163.692867][ T7005] overlay: Unknown parameter 'mounts' [ 163.707810][ T7005] overlay: Unknown parameter 'mounts' [ 163.713704][ T7005] overlay: Unknown parameter 'mounts' [ 163.719635][ T7005] overlay: Unknown parameter 'mounts' [ 163.725233][ T7005] overlay: Unknown parameter 'mounts' [ 163.730966][ T7005] overlay: Unknown parameter 'mounts' [ 163.736577][ T7005] overlay: Unknown parameter 'mounts' [ 163.742102][ T7005] overlay: Unknown parameter 'mounts' [ 163.748019][ T7005] overlay: Unknown parameter 'mounts' [ 163.753803][ T7005] overlay: Unknown parameter 'mounts' [ 163.759480][ T7005] overlay: Unknown parameter 'mounts' [ 163.764998][ T7005] overlay: Unknown parameter 'mounts' [ 163.770681][ T7005] overlay: Unknown parameter 'mounts' [ 163.776361][ T7005] overlay: Unknown parameter 'mounts' [ 163.781869][ T7005] overlay: Unknown parameter 'mounts' [ 163.787355][ T7005] overlay: Unknown parameter 'mounts' [ 163.792980][ T7005] overlay: Unknown parameter 'mounts' [ 163.798962][ T7005] overlay: Unknown parameter 'mounts' [ 163.804399][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 163.809657][ T7005] overlay: Unknown parameter 'mounts' [ 163.810653][ T9] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 163.823737][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.823872][ T7005] overlay: Unknown parameter 'mounts' [ 163.833993][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.848215][ T7005] overlay: Unknown parameter 'mounts' [ 163.849739][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 163.862755][ T7005] overlay: Unknown parameter 'mounts' [ 163.862873][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.876153][ T9] usb 1-1: Product: syz [ 163.876228][ T7005] overlay: Unknown parameter 'mounts' [ 163.880451][ T9] usb 1-1: Manufacturer: syz [ 163.890434][ T7005] overlay: Unknown parameter 'mounts' [ 163.890560][ T9] usb 1-1: SerialNumber: syz [ 163.900524][ T7005] overlay: Unknown parameter 'mounts' [ 163.906817][ T7005] overlay: Unknown parameter 'mounts' [ 163.912305][ T7005] overlay: Unknown parameter 'mounts' [ 163.917738][ T7005] overlay: Unknown parameter 'mounts' [ 163.923227][ T7005] overlay: Unknown parameter 'mounts' [ 163.928681][ T7005] overlay: Unknown parameter 'mounts' [ 163.934145][ T7005] overlay: Unknown parameter 'mounts' [ 163.939605][ T7005] overlay: Unknown parameter 'mounts' [ 163.945021][ T7005] overlay: Unknown parameter 'mounts' [ 163.950510][ T7005] overlay: Unknown parameter 'mounts' [ 163.955954][ T7005] overlay: Unknown parameter 'mounts' [ 163.961877][ T7005] overlay: Unknown parameter 'mounts' [ 163.967407][ T7005] overlay: Unknown parameter 'mounts' [ 163.972945][ T7005] overlay: Unknown parameter 'mounts' [ 163.978433][ T7005] overlay: Unknown parameter 'mounts' [ 163.984059][ T7005] overlay: Unknown parameter 'mounts' [ 163.989701][ T7005] overlay: Unknown parameter 'mounts' [ 163.995492][ T7005] overlay: Unknown parameter 'mounts' [ 163.998191][ T7019] rust_binder: Error while translating object. [ 164.000914][ T7019] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 164.007093][ T7019] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:283 [ 164.007183][ T7005] overlay: Unknown parameter 'mounts' [ 164.031784][ T7005] overlay: Unknown parameter 'mounts' [ 164.037415][ T7005] overlay: Unknown parameter 'mounts' [ 164.043220][ T7005] overlay: Unknown parameter 'mounts' [ 164.048991][ T7005] overlay: Unknown parameter 'mounts' [ 164.054568][ T7005] overlay: Unknown parameter 'mounts' [ 164.060214][ T7005] overlay: Unknown parameter 'mounts' [ 164.065766][ T7005] overlay: Unknown parameter 'mounts' [ 164.071300][ T7005] overlay: Unknown parameter 'mounts' [ 164.076798][ T7005] overlay: Unknown parameter 'mounts' [ 164.082911][ T7005] overlay: Unknown parameter 'mounts' [ 164.088703][ T7005] overlay: Unknown parameter 'mounts' [ 164.094490][ T7005] overlay: Unknown parameter 'mounts' [ 164.099981][ T7005] overlay: Unknown parameter 'mounts' [ 164.105770][ T7005] overlay: Unknown parameter 'mounts' [ 164.112871][ T7005] overlay: Unknown parameter 'mounts' [ 164.118755][ T7005] overlay: Unknown parameter 'mounts' [ 164.124329][ T7005] overlay: Unknown parameter 'mounts' [ 164.130027][ T7005] overlay: Unknown parameter 'mounts' [ 164.135584][ T7005] overlay: Unknown parameter 'mounts' [ 164.136879][ T7031] rust_binder: Got transaction with invalid offset. [ 164.141056][ T7031] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 164.147724][ T7031] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:295 [ 164.147832][ T7005] overlay: Unknown parameter 'mounts' [ 164.171879][ T7005] overlay: Unknown parameter 'mounts' [ 164.177423][ T7005] overlay: Unknown parameter 'mounts' [ 164.193454][ T7033] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 164.203379][ T7033] 9pnet: p9_errstr2errno: server reported unknown error pA;KZ4 [ 164.240689][ T36] audit: type=1326 audit(2000000361.728:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7035 comm="syz.4.2201" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc1a4d8e929 code=0x0 [ 164.263418][ T36] audit: type=1326 audit(2000000361.728:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7035 comm="syz.4.2201" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc1a4d8e929 code=0x0 [ 164.311808][ T9] usb 1-1: 0:2 : does not exist [ 164.964685][ T7063] overlayfs: failed to resolve './file0': -2 [ 165.153837][ T36] audit: type=1326 audit(2000000362.638:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7060 comm="syz.4.2210" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc1a4d8e929 code=0x0 [ 165.254643][ T7067] bridge0: port 3(erspan0) entered blocking state [ 165.261254][ T7067] bridge0: port 3(erspan0) entered disabled state [ 165.267773][ T7067] erspan0: entered allmulticast mode [ 165.273864][ T7067] erspan0: entered promiscuous mode [ 165.279415][ T7067] bridge0: port 3(erspan0) entered blocking state [ 165.285884][ T7067] bridge0: port 3(erspan0) entered forwarding state [ 165.313238][ T6978] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.313369][ T6978] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 165.327543][ T6978] rust_binder: Write failure EINVAL in pid:1162 [ 165.845124][ T7072] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2214'. [ 165.873911][ T9] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 165.895411][ T9] usb 1-1: USB disconnect, device number 61 [ 166.106915][ T36] audit: type=1400 audit(2000000363.588:818): avc: denied { audit_write } for pid=7087 comm="syz.5.2219" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 166.128903][ T7090] rust_binder: validate_parent_fixup: fixup_min_offset=69, parent_offset=26 [ 166.128926][ T7090] rust_binder: Error while translating object. [ 166.138360][ T7090] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 166.149636][ T7090] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:319 [ 166.159173][ T7090] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 166.168388][ T7090] rust_binder: Read failure Err(EFAULT) in pid:319 [ 166.320129][ T7104] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7104 comm=syz.1.2227 [ 166.367129][ T7108] overlayfs: failed to clone upperpath [ 166.677869][ T353] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 166.852207][ T7092] rust_binder: Error while translating object. [ 166.852251][ T7092] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 166.858469][ T7092] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:321 [ 166.887551][ T353] usb 6-1: unable to get BOS descriptor or descriptor too short [ 166.904891][ T353] usb 6-1: no configurations [ 166.909510][ T353] usb 6-1: can't read configurations, error -22 [ 167.030663][ T64] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 167.192062][ T64] usb 1-1: config 1 has an invalid descriptor of length 68, skipping remainder of the config [ 167.202312][ T64] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 167.211188][ T64] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 167.225486][ T64] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 167.234553][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.242514][ T64] usb 1-1: Product: syz [ 167.246674][ T64] usb 1-1: Manufacturer: syz [ 167.251256][ T64] usb 1-1: SerialNumber: syz [ 167.433971][ T7128] binder: Bad value for 'max' [ 167.503772][ T64] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 167.510625][ T64] cdc_ncm 1-1:1.0: bind() failure [ 167.516737][ T64] usb 1-1: USB disconnect, device number 62 [ 167.542414][ T7134] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7134 comm=syz.1.2239 [ 167.800672][ T353] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 167.962222][ T353] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 167.973874][ T353] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 167.985480][ T353] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 167.996732][ T353] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 168.009943][ T353] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 168.019128][ T353] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.030661][ T353] usb 6-1: config 0 descriptor?? [ 168.037363][ T7130] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 168.056537][ T45] bridge_slave_1: left allmulticast mode [ 168.062334][ T45] bridge_slave_1: left promiscuous mode [ 168.065563][ T7152] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 168.068606][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.086423][ T45] bridge_slave_0: left allmulticast mode [ 168.092503][ T45] bridge_slave_0: left promiscuous mode [ 168.100590][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.123746][ T7156] SELinux: security_context_str_to_sid () failed with errno=-22 [ 168.221178][ T7160] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1177 [ 168.268294][ T45] tipc: Disabling bearer [ 168.283807][ T45] tipc: Left network mode [ 168.302022][ T45] veth1_macvtap: left promiscuous mode [ 168.481180][ T353] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 168.489277][ T353] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 168.505823][ T353] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 168.516068][ T353] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 168.533580][ T353] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 168.545174][ T353] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 168.577710][ T353] plantronics 0003:047F:FFFF.0013: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 168.851489][ T7204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.856062][ T7212] fuse: Bad value for 'user_id' [ 168.860728][ T7204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.864842][ T7212] fuse: Bad value for 'user_id' [ 169.168431][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 169.168447][ T36] audit: type=1400 audit(2000000366.460:821): avc: denied { setattr } for pid=7219 comm="syz.0.2270" name="/" dev="incremental-fs" ino=2229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 170.024004][ T353] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 170.162987][ T353] usb 1-1: device descriptor read/64, error -71 [ 170.415089][ T7310] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:328 [ 170.419563][ T353] usb 1-1: device descriptor read/64, error -71 [ 170.446159][ T7313] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2298'. [ 170.457329][ T7312] rust_binder: Error in use_page_slow: ESRCH [ 170.457347][ T7312] rust_binder: use_range failure ESRCH [ 170.463645][ T7312] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 170.478801][ T7312] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 170.497325][ T7312] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:330 [ 170.515801][ T7312] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 170.534492][ T7312] rust_binder: Read failure Err(EFAULT) in pid:330 [ 170.708263][ T353] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 170.857920][ T353] usb 1-1: device descriptor read/64, error -71 [ 171.115041][ T353] usb 1-1: device descriptor read/64, error -71 [ 171.232187][ T353] usb usb1-port1: attempt power cycle [ 171.595548][ T353] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 171.618061][ T353] usb 1-1: device descriptor read/8, error -71 [ 171.757007][ T353] usb 1-1: device descriptor read/8, error -71 [ 172.012490][ T353] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 172.034957][ T353] usb 1-1: device descriptor read/8, error -71 [ 172.173894][ T353] usb 1-1: device descriptor read/8, error -71 [ 172.290649][ T353] usb usb1-port1: unable to enumerate USB device [ 173.520546][ T7343] fuse: Bad value for 'fd' [ 173.540373][ T7347] tmpfs: Unknown parameter 'գR' [ 173.843919][ T7366] netlink: 37 bytes leftover after parsing attributes in process `syz.1.2317'. [ 174.417786][ T750] usb 6-1: USB disconnect, device number 17 [ 174.438405][ T36] audit: type=1400 audit(2000000371.389:822): avc: denied { append } for pid=7369 comm="syz.5.2321" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 174.490919][ T7371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.492110][ T7371] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 174.498804][ T7371] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1221 [ 174.502572][ T7386] overlayfs: failed to clone upperpath [ 174.508291][ T7371] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 174.523199][ T7371] rust_binder: Read failure Err(EFAULT) in pid:1221 [ 174.632108][ T7414] rust_binder: Error in use_page_slow: ESRCH [ 174.647814][ T7414] rust_binder: use_range failure ESRCH [ 174.662457][ T7414] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 174.673262][ T7414] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 174.692641][ T7414] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1225 [ 174.768757][ T7434] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2340'. [ 174.796959][ T7406] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 174.927766][ T7441] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:354 [ 174.979665][ T7445] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:358 [ 175.043604][ T7447] rust_binder: Write failure EINVAL in pid:358 [ 175.519726][ T7460] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 175.604528][ T36] audit: type=1400 audit(2000000372.483:823): avc: denied { ioctl } for pid=7467 comm="syz.0.2352" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 175.666606][ T7480] binder: Unknown parameter '' [ 175.691577][ T7483] tmpfs: Unknown parameter '01777777777777777777777' [ 175.816316][ T7506] rust_binder: Error in use_page_slow: ESRCH [ 175.816342][ T7506] rust_binder: use_range failure ESRCH [ 175.822594][ T7506] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 175.830113][ T7506] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 175.838697][ T7506] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1240 [ 175.896733][ T7535] overlayfs: failed to clone upperpath [ 175.912407][ T7539] overlay: Unknown parameter 'mounts' [ 175.948062][ T36] audit: type=1326 audit(2000000372.811:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7547 comm="syz.5.2378" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe86898e929 code=0x0 [ 175.978454][ T7554] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 175.978883][ T7554] rust_binder: Error while translating object. [ 175.985526][ T7554] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 175.991721][ T7554] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1248 [ 176.009700][ T7556] netlink: 'syz.0.2380': attribute type 12 has an invalid length. [ 176.090945][ T7569] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 176.092490][ T7569] rust_binder: Error while translating object. [ 176.098986][ T7569] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 176.105136][ T7569] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1260 [ 176.123836][ T7572] fuse: Unknown parameter '' [ 176.299845][ T36] audit: type=1400 audit(2000000373.138:825): avc: denied { write } for pid=7589 comm="syz.5.2391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 176.371179][ T7595] overlayfs: failed to resolve './file0': -2 [ 176.482227][ T36] audit: type=1400 audit(2000000373.307:826): avc: denied { setattr } for pid=7610 comm="syz.0.2397" name="PACKET" dev="sockfs" ino=45418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 176.564189][ T7629] xfrm0: mtu less than device minimum [ 176.569657][ T7631] 9p: Unknown Cache mode or invalid value ;j~.rM09]~ށa΋!B\nz\A/ [ 176.598285][ T7634] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 176.598598][ T7634] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1278 [ 176.623052][ T7641] rust_binder: Write failure EINVAL in pid:1284 [ 176.887384][ T7308] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 177.037080][ T7308] usb 1-1: device descriptor read/64, error -71 [ 177.123340][ T36] audit: type=1326 audit(2000000373.915:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7646 comm="syz.4.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a4d8e929 code=0x7ffc0000 [ 177.150704][ T36] audit: type=1326 audit(2000000373.915:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7646 comm="syz.4.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a4d8e929 code=0x7ffc0000 [ 177.194413][ T36] audit: type=1326 audit(2000000373.915:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7646 comm="syz.4.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fc1a4d8e929 code=0x7ffc0000 [ 177.218210][ T36] audit: type=1326 audit(2000000373.915:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7646 comm="syz.4.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a4d8e929 code=0x7ffc0000 [ 177.241799][ T36] audit: type=1326 audit(2000000373.915:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7646 comm="syz.4.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fc1a4d8e929 code=0x7ffc0000 [ 177.265521][ T36] audit: type=1326 audit(2000000373.915:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7646 comm="syz.4.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a4d8e929 code=0x7ffc0000 [ 177.629196][ T7308] usb 1-1: device descriptor read/64, error -71 [ 177.881634][ T7308] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 178.031279][ T7308] usb 1-1: device descriptor read/64, error -71 [ 178.309231][ T7308] usb 1-1: device descriptor read/64, error -71 [ 178.347903][ T7696] 9pnet_virtio: no channels available for device syz [ 178.393833][ T7703] can0: slcan on ttyS3. [ 178.431105][ T7308] usb usb1-port1: attempt power cycle [ 178.526252][ T7703] can0 (unregistered): slcan off ttyS3. [ 178.568535][ T7742] rust_kernel: panicked at rust/kernel/sync/poll.rs:54:18: [ 178.568535][ T7742] null pointer dereference occurred [ 178.575168][ T7744] overlayfs: failed to clone upperpath [ 178.582818][ T7742] ------------[ cut here ]------------ [ 178.591796][ T7742] kernel BUG at rust/helpers/bug.c:7! [ 178.597703][ T7742] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 178.604654][ T7742] CPU: 0 UID: 0 PID: 7742 Comm: syz.5.2440 Not tainted 6.12.30-syzkaller-g9d80e3254812 #0 0af3bb1b2b1f0d17039a87b1bb907b41f79d5270 [ 178.618113][ T7742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 178.628172][ T7742] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 178.633473][ T7742] Code: 3e ca e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 64 24 4a 8b 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 2e e0 03 07 90 90 90 90 90 90 90 90 90 [ 178.653081][ T7742] RSP: 0018:ffffc90007f2f1b0 EFLAGS: 00010246 [ 178.659154][ T7742] RAX: 000000000000005a RBX: 1ffff92000fe5e38 RCX: 4fb3429cdb174700 [ 178.667107][ T7742] RDX: ffffc90001e63000 RSI: 00000000000040cb RDI: 00000000000040cc [ 178.675063][ T7742] RBP: ffffc90007f2f1b0 R08: ffffc90007f2eea7 R09: 1ffff92000fe5dd4 [ 178.683015][ T7742] R10: dffffc0000000000 R11: fffff52000fe5dd5 R12: 0000000000000000 [ 178.690967][ T7742] R13: dffffc0000000000 R14: ffffc90007f2f1e0 R15: ffffc90007f2f210 [ 178.698931][ T7742] FS: 00007fe8698366c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 178.707838][ T7742] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 178.714403][ T7742] CR2: 00007ffce88a84b8 CR3: 000000012a264000 CR4: 00000000003526b0 [ 178.722359][ T7742] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 178.730311][ T7742] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 178.738261][ T7742] Call Trace: [ 178.741521][ T7742] [ 178.744437][ T7742] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 178.751901][ T7742] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 178.759861][ T7742] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 178.773387][ T7742] ? p9pdu_vwritef+0x2720/0x2720 [ 178.778311][ T7742] ? radix_tree_node_alloc+0x1af/0x400 [ 178.783750][ T7742] ? _RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0xa2/0xf0 [ 178.791975][ T7742] ? __asan_memcpy+0x5a/0x80 [ 178.796569][ T7742] _RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0xec/0xf0 [ 178.804617][ T7742] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0x10/0x10 [ 178.813362][ T7742] ? p9pdu_writef+0xdb/0x130 [ 178.817935][ T7742] ? p9pdu_vwritef+0x2720/0x2720 [ 178.822860][ T7742] _RNvNtCs9jEwPDbx20M_4core9panicking30panic_null_pointer_dereference+0x49/0x4c [ 178.831955][ T7742] _RNvMNtNtCs43vyB533jt3_6kernel4sync4pollNtB2_9PollTable8from_ptr+0x40/0x40 [ 178.840787][ T7742] ? _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xce/0x570 [ 178.848585][ T7742] _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xe2/0x570 [ 178.856205][ T7742] ? p9_client_prepare_req+0x732/0xa10 [ 178.861647][ T7742] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 178.869872][ T7742] ? __kasan_check_write+0x18/0x20 [ 178.874964][ T7742] ? _raw_spin_lock+0x8c/0x120 [ 178.879708][ T7742] ? tun_chr_poll+0x127/0x770 [ 178.884363][ T7742] ? _raw_spin_lock+0x8c/0x120 [ 178.889129][ T7742] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 178.897341][ T7308] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 178.897356][ T7742] p9_fd_request+0x440/0x500 [ 178.909455][ T7742] p9_client_rpc+0x2f9/0xb40 [ 178.914045][ T7742] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 178.922274][ T7742] ? p9_fid_create+0x3d0/0x3d0 [ 178.927030][ T7742] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 178.935270][ T7742] ? p9_conn_create+0x4c9/0x570 [ 178.940101][ T7742] ? p9_fd_create+0x2f3/0x4c0 [ 178.944756][ T7742] p9_client_create+0x96a/0x1190 [ 178.949678][ T7742] ? __cfi_p9_client_create+0x10/0x10 [ 178.951685][ T7308] usb 1-1: device descriptor read/8, error -71 [ 178.955042][ T7742] ? kasan_save_alloc_info+0x40/0x50 [ 178.955071][ T7742] ? __kasan_kmalloc+0x96/0xb0 [ 178.971183][ T7742] ? kstrdup+0x7b/0x140 [ 178.975323][ T7742] ? __kasan_check_write+0x18/0x20 [ 178.980418][ T7742] v9fs_session_init+0x1e1/0x1820 [ 178.985427][ T7742] ? __cfi_v9fs_session_init+0x10/0x10 [ 178.990867][ T7742] ? kasan_save_alloc_info+0x40/0x50 [ 178.996132][ T7742] ? __kasan_kmalloc+0x96/0xb0 [ 179.000893][ T7742] ? v9fs_mount+0xbd/0xa00 [ 179.005288][ T7742] v9fs_mount+0xd7/0xa00 [ 179.009516][ T7742] ? __cfi_v9fs_mount+0x10/0x10 [ 179.014359][ T7742] ? selinux_capable+0x38/0x50 [ 179.019132][ T7742] legacy_get_tree+0x103/0x1b0 [ 179.023876][ T7742] ? __cfi_v9fs_mount+0x10/0x10 [ 179.028707][ T7742] vfs_get_tree+0x9e/0x290 [ 179.033105][ T7742] do_new_mount+0x251/0xb40 [ 179.037591][ T7742] ? security_capable+0xcf/0xf0 [ 179.042442][ T7742] path_mount+0x688/0x1050 [ 179.046839][ T7742] ? putname+0x113/0x150 [ 179.051071][ T7742] __se_sys_mount+0x2bd/0x480 [ 179.055731][ T7742] ? __x64_sys_mount+0xf0/0xf0 [ 179.060475][ T7742] ? __kasan_check_write+0x18/0x20 [ 179.065564][ T7742] ? fpregs_restore_userregs+0x11d/0x260 [ 179.071195][ T7742] __x64_sys_mount+0xc3/0xf0 [ 179.075783][ T7742] x64_sys_call+0x2021/0x2ee0 [ 179.080453][ T7742] do_syscall_64+0x58/0xf0 [ 179.084848][ T7742] ? clear_bhb_loop+0x50/0xa0 [ 179.089507][ T7742] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 179.095380][ T7742] RIP: 0033:0x7fe86898e929 [ 179.099786][ T7742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.119381][ T7742] RSP: 002b:00007fe869836038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 179.127803][ T7742] RAX: ffffffffffffffda RBX: 00007fe868bb5fa0 RCX: 00007fe86898e929 [ 179.135770][ T7742] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 0000000000000000 [ 179.143719][ T7742] RBP: 00007fe868a10b39 R08: 0000200000000240 R09: 0000000000000000 [ 179.151666][ T7742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.159614][ T7742] R13: 0000000000000000 R14: 00007fe868bb5fa0 R15: 00007ffe4f61cd58 [ 179.167566][ T7742] [ 179.170564][ T7742] Modules linked in: [ 179.174574][ T7742] ---[ end trace 0000000000000000 ]--- [ 179.176892][ T7308] usb 1-1: device descriptor read/8, error -71 [ 179.180425][ T7742] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 179.186798][ T7752] rust_binder: Error while translating object. [ 179.191570][ T7742] Code: 3e ca e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 64 24 4a 8b 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 2e e0 03 07 90 90 90 90 90 90 90 90 90 [ 179.191592][ T7742] RSP: 0018:ffffc90007f2f1b0 EFLAGS: 00010246 [ 179.198090][ T7752] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 179.217377][ T7742] [ 179.223734][ T7752] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:422 [ 179.232857][ T7742] RAX: 000000000000005a RBX: 1ffff92000fe5e38 RCX: 4fb3429cdb174700 [ 179.252281][ T7742] RDX: ffffc90001e63000 RSI: 00000000000040cb RDI: 00000000000040cc [ 179.260251][ T7742] RBP: ffffc90007f2f1b0 R08: ffffc90007f2eea7 R09: 1ffff92000fe5dd4 [ 179.268252][ T7742] R10: dffffc0000000000 R11: fffff52000fe5dd5 R12: 0000000000000000 [ 179.276233][ T7742] R13: dffffc0000000000 R14: ffffc90007f2f1e0 R15: ffffc90007f2f210 [ 179.284219][ T7742] FS: 00007fe8698366c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 179.293269][ T7742] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 179.299849][ T7742] CR2: 00007ffce88a84b8 CR3: 000000012a264000 CR4: 00000000003526b0 [ 179.307828][ T7742] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 179.315812][ T7742] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 179.323767][ T7742] Kernel panic - not syncing: Fatal exception [ 179.330163][ T7742] Kernel Offset: disabled [ 179.334470][ T7742] Rebooting in 86400 seconds..