last executing test programs: 1m0.35004691s ago: executing program 3 (id=3463): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x28000, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000597000/0x3000)=nil, 0x3000, 0x9, 0x28011, r1, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) keyctl$join(0x1, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 1m0.32379822s ago: executing program 3 (id=3464): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x406, r0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0x1a, r1, 0xba, 0x0) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 1m0.199684382s ago: executing program 3 (id=3465): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, 0x0, 0x44) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @dev={0xfe, 0x80, '\x00', 0x14}}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) unshare(0x2040600) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='cpuset\x00') read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) close_range(r0, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_usb_connect$printer(0x2, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}}) 59.68219824s ago: executing program 3 (id=3475): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) chroot(&(0x7f0000000140)='./file0/../file0\x00') mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80ff, 0x1) (async) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x1) (async) fcntl$setlease(r1, 0x400, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 59.62553683s ago: executing program 3 (id=3476): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x2, 0x3, 0xff) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xdf) write$binfmt_elf64(r3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d0000f0ffffffffec08000000000000f0ffffffffffffff0000000000000000080000000000000003"], 0x5b0) (async) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000000)=0x97b, 0x4) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x2298, 0x4) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) (async) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async, rerun: 64) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)=ANY=[], 0x18}}, 0x4020) (async, rerun: 64) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x4a800}, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSF(r6, 0x5457, &(0x7f0000000000)={0x0, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) (async) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000040)={0x4, 0xe, 0x2, 0xfffffff7, 0xfe, "308d713e07c100dcddaf5de8345badfa5395e8", 0x0, 0x2}) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000200), 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) (async, rerun: 64) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) (async) sendmsg$IPCTNL_MSG_CT_GET_DYING(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) (async) setsockopt$inet6_int(r5, 0x29, 0x46, 0x0, 0x0) 59.380171664s ago: executing program 3 (id=3477): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x99b33000) io_setup(0x4, &(0x7f0000000100)) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000010c0)={{{@in6=@dev, @in6=@dev, 0x4e21, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffe}, {0x200, 0x4, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0xb7, 0x2}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/144, 0x90, 0x1, 0x29}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/43, 0x2b, 0x0, 0x3f}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 59.344074275s ago: executing program 32 (id=3477): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x99b33000) io_setup(0x4, &(0x7f0000000100)) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000010c0)={{{@in6=@dev, @in6=@dev, 0x4e21, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffe}, {0x200, 0x4, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0xb7, 0x2}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/144, 0x90, 0x1, 0x29}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/43, 0x2b, 0x0, 0x3f}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 42.407157837s ago: executing program 4 (id=3639): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000200)=@urb_type_control={0x2, {}, 0x0, 0x85, &(0x7f0000000080)={0x0, 0xb, 0x296b, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newspdinfo={0x1c, 0x24, 0x1, 0x70bd2c, 0x25dfdbfc, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x20000080) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[]) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, &(0x7f0000000380)={[{@mode={'mode', 0x3d, 0xffffffff}}]}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') chdir(&(0x7f0000000000)='./cgroup\x00') r4 = open(&(0x7f00000000c0)='./file2\x00', 0x189400, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r5, 0x0, 0x0) renameat2(r5, &(0x7f0000000100)='./file0\x00', r4, &(0x7f0000000180)='./file0\x00', 0x4) read$FUSE(r3, &(0x7f00000029c0)={0x2020}, 0x2020) 42.353895158s ago: executing program 4 (id=3640): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000180)={0x77c, [0x3, 0x7dffffff], 0x6}, 0x10) r1 = syz_clone(0x1222080, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902"], 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000500)='maps\x00') close_range(r0, 0xffffffffffffffff, 0x0) 39.382316512s ago: executing program 4 (id=3671): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x300000a, 0x11, r0, 0x147a5000) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x430, @empty, 0x9}, 0x1c) 39.311655833s ago: executing program 4 (id=3672): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x2, 0x0) fcntl$dupfd(r0, 0x406, r0) 39.308403153s ago: executing program 4 (id=3673): mount$tmpfs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000700), 0x8c03, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1be) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x252) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)={[{@stats}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0) r1 = syz_clone(0x280, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0xd8, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000002e00)="2210942272ce9a37c0fb001f95548ca7", 0x20) getsockopt$inet6_tcp_buf(r3, 0x6, 0x21, 0x0, &(0x7f0000000240)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="d78db2", @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$UHID_INPUT(r4, &(0x7f0000000740)={0x8, {"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", 0x1000}}, 0x1006) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000027000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 39.308085553s ago: executing program 4 (id=3674): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r4, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close_range(r3, 0xffffffffffffffff, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r8 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9da, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x58, 0x1, [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x0, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0xe, 0x5, {0x5, 0x21, "95353a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r7, 0xaece, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x20000000) close_range(r0, 0xffffffffffffffff, 0x0) 23.663436996s ago: executing program 33 (id=3674): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r4, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close_range(r3, 0xffffffffffffffff, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r8 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9da, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x58, 0x1, [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x0, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0xe, 0x5, {0x5, 0x21, "95353a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r7, 0xaece, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x20000000) close_range(r0, 0xffffffffffffffff, 0x0) 16.108073788s ago: executing program 0 (id=3868): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x1a1081, 0x18) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r1, &(0x7f00000003c0)=""/18, 0x12) write$khugepaged_scan(r0, &(0x7f0000000000), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x4000}, 0x10) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvfrom(r7, &(0x7f0000000140)=""/104, 0x68, 0x12020, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, &(0x7f0000000380)=ANY=[@ANYBLOB='mode=0000000000003777J4z\f777,\x00']) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r0, &(0x7f00000029c0)={0x2020}, 0xae0) 15.505339829s ago: executing program 0 (id=3870): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xc2, 0x0, &(0x7f0000000240)="7f15a8e60f432847109c515476dac5aef33492632120809d34aaa8244cab10f483a980ecc4f6d640c86b123efa131f5a810ab5b161f6211d35fa6d5328fb7e7fdeebdfe2111754ec5aeaec6510241a36950b544877661c265c83f6f3de2879e0e7dbb5c4335e434c6d8f42f75fc75d10d6f7da01da140ffd57cf696187efc0c35cecfeb6839374632c99b76479234ca7fc472792e6349a7e2f275a2361681d4d69881cd41da136fa1a5dba9f2451520d18d715554dd1a1a075f67f215a498e39ed80"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000140)=[@register_looper], 0x4, 0x0, &(0x7f00000001c0)="5e0fe26a"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)}) 15.45363372s ago: executing program 0 (id=3871): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x1c9800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000080)={0x0, &(0x7f0000002400)=ANY=[], 0x3d}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000180)={0x5, 0x0, [{0x8fe, 0x0, 0x6}, {0xd16, 0x0, 0xc}, {0xa25, 0x0, 0x9}, {0x212, 0x0, 0x8b3b}, {0x8c1, 0x0, 0x5}]}) r6 = syz_kvm_add_vcpu$x86(r1, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000088000000000000001000000000000000420000c744240233d8cecbc7442406000000000f011c24660f3881"], 0xa0}) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000000280)={{0x1, 0x0, 0xffffffffffffff36, {0xdddd1000, 0x5000}}, "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", "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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') r8 = signalfd4(r0, &(0x7f0000000100)={[0x6]}, 0x8, 0x80000) ioctl$UFFDIO_CONTINUE(r8, 0xc020aa07, &(0x7f0000000140)={{&(0x7f000012b000/0x3000)=nil, 0x3000}, 0x1}) preadv(r7, &(0x7f0000000280)=[{&(0x7f0000002a00)=""/4096, 0x1000}], 0x1, 0x1f2, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) add_key(&(0x7f0000000000)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 15.43204693s ago: executing program 0 (id=3872): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) setuid(0xee00) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r1, 0x0, 0x2, 0x0) lseek(0xffffffffffffffff, 0x8000003, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0xf) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002600), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000) 15.200832134s ago: executing program 0 (id=3873): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) mknodat(r0, &(0x7f0000000100)='./file0\x00', 0x2, 0xfdf8) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r5 = dup(r4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c6e6f6465766d61702c616e616d653db73956d9fe4f17a8d2e5d5569fce46851a079e0f7ab66ba9ad3fe74fb1c63754caec15c674d3a11ea4730719ac0b084e3b029a629a651a2f8593d3b6995db5c41de522e79c774b6ca29a9c780ca6662a64a07a9cc1b11801f8c12946bd60ac5b8630ffc78c185e841860ab0eb0e72f8f9587d6dba55d017915708e5c93c776963af07691b17bc3a039c84f4750498eaef25f47659ca7f49c91da7d00a22724c4f4b00b3d64a97a2751760113a6e9ebf9cfdce3c00a3d80591139bf2c00"]) r6 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) exit(0x6f6e) sendfile(r6, r2, 0x0, 0x80000000) 15.101405095s ago: executing program 0 (id=3875): r0 = socket(0x1e, 0x1, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x4000000, 0x1ffffffd, 0x100}}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES16=r3, @ANYRESOCT=r2], 0xf4}, 0x1, 0x0, 0x0, 0x2000c805}, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff}, &(0x7f0000000540)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0) 11.38571895s ago: executing program 2 (id=3899): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = userfaultfd(0x801) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x303}, "98ee6d2fb7984c0a", "f79a8fc44cd36a8208d9802b195f0f6e", "d0d96e9a", "9eb7ab7f3510ef33"}, 0x28) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x80}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000a30000/0x2000)=nil, 0x2000, 0xb) close_range(r0, 0xffffffffffffffff, 0x0) 11.137763484s ago: executing program 2 (id=3902): creat(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETA(r0, 0x802c542a, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008aec1, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) r2 = userfaultfd(0x801) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f9, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x1000)=nil, 0x1000, &(0x7f0000000000)='/dev/net/tun\x00') ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') unshare(0x22020600) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0xe1, 0x0, 0x7}]}) setsockopt$inet_buf(r4, 0x0, 0x30, 0x0, 0x90) lseek(r3, 0x10001, 0x0) 11.090654795s ago: executing program 2 (id=3903): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x14, &(0x7f00000001c0)="02", 0x1) (async) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) fchdir(r0) (async) r1 = socket$inet(0x2, 0x801, 0x0) sendto$inet(r1, 0x0, 0xe803, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r4, 0x4188aea7, &(0x7f00000000c0)=ANY=[]) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r5, 0x0, 0x7ffff000, 0x0) (async) r6 = open(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r8 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 64) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000200)={0x42, 0x3, 0x3}, 0x10) (async, rerun: 64) sendmsg$tipc(r8, &(0x7f0000002240)={&(0x7f0000000180)=@id={0x1e, 0x3, 0x2, {0x4e20, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4040010}, 0x4) (rerun: 64) read$FUSE(r6, &(0x7f0000002680)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) (async) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000840)=0x0) sendmsg$netlink(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000bc0)={0x188, 0x11, 0x100, 0x70bd28, 0x25dfdbfd, "", [@generic="efbcd2021a330493d1b0927ade5028b25e0a57eb38d8907b6279dd5a0fb2ea1c8cd2b310e12b8ed7411869eec0dd64c3142a7c0925448f0116d48e2ed9b7b0562a6ad9367e1fd70132ee22c5405bb02872d9f9659991a7306ab72a32732ea1bd104dffacfb2ca9570208c5f277eebefed5e207af0e90cdff760698e0c2f46983e2a74f8c3d88931c9d6257edb74d11e9deba73619131d256a991cb3b6b8e9eb2c89ec7272ca9bbc366692dcc1fb9fb3d11325f22646b709c87d1c09534154590830e90cd0b", @generic="9177ce6f532654315517daf3d42641948ad96b16f0ed1f0511ebecfee3ab6f7edffc80909b4c2ffa77cfea6d77a448d3190cc3bcc06b6c350b78f74fe40f61e5f8b959da", @generic="a7de15592e73636f6159804875f79f1f8e85e6eba65c6f4b1f7ca50d48055d53beaa2e3c3fefad4fa6108b097bc70978d430455aafe18714f32f416b2f346ebf0136a0e9826033ecc53b002f590cf318417dbadf9e4ba3000da3f7462a1c1b75fab992b2a7d4eb41ce53c951eb"]}, 0x188}, {&(0x7f00000004c0)={0x198, 0x36, 0x300, 0x70bd26, 0x25dfdbfb, "", [@generic="0768e2becb203d984b066231dc9b7c47796d925f2c69b1cb0c77b89d4d24327082917b5c4fc7e7d4c858a19233a6ab53df83a69b8b093ad64f090750a124719743239c97b081e738589a6ee77b528c6fd910e299e5b4fe660e0f2b54505aaebbef25144962f99e3a4a912c82514457cbb6a4d51bd5c04d", @typed={0x8, 0x60, 0x0, 0x0, @u32=0x5}, @typed={0xd5, 0x12, 0x0, 0x0, @binary="74b4065b65afbe52895a77a0c39b401c7df19bcab5aca69553d1ae06b38578ede6b696fac85e8486c5f1878721ab838e2a5d9425879b13d406359ed936b8bc1f2501cc48393a146548bc2560b93e8130494ebd7d85307a437134bc442b777a633d5ccbc5871db85071ba258413022b5259c24136f14e323b51e561a0dfc667c33be4d9ff25d06afb98dd102dc42fa684c47e9704f92c2e865513ac000f4efc55448c3e7a55bf15e1c28f52100a6f6709ffafc0cf983bed2498352a58d4c7c2aefdd216d059e96b46bd3428d603b5e2b30a"}, @typed={0x14, 0xcf, 0x0, 0x0, @ipv6=@remote}, @typed={0x11, 0xa4, 0x0, 0x0, @str='/dev/rnullb0\x00'}, @typed={0x8, 0xee, 0x0, 0x0, @fd=r7}]}, 0x198}, {&(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x13ac}, {&(0x7f0000000380)=ANY=[@ANYBLOB="df250000001a00000000000000000000abbde64482b9dcd4f4e504a4c43dfe01cfcb93183a504ccffe3de360795038504dda1081caacc0d2ac73feb9b3612d9c96ac6b57e3ff3f39cdc8583915fcf6b44f620095f8e7f358247423bffa786d2c653bde177028e8f7e511e3e0f144196c6bbd1f739d9b8b386200d2c955f99d37736d20bf6c93f25eae8a56b65e0f689d92f955cc6338d198648af138cc5f92210fe20674fdd53750e17134b388e18efe"], 0x10}, {&(0x7f0000000680)=ANY=[@ANYBLOB="000000001100000225bd7000fedbdf2500004c00", @ANYRES32=r9, @ANYBLOB="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"]}, {&(0x7f0000000800)={0x20, 0x14, 0x1, 0x70bd2d, 0x25dfdbfd, "", [@typed={0x8, 0x43, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x31}}, @typed={0x8, 0x14c, 0x0, 0x0, @uid=r11}]}, 0x20}, {&(0x7f0000000880)={0x2b0, 0x12, 0x100, 0x70bd2d, 0x25dfdbfb, "", [@nested={0x4, 0xf4}, @nested={0x3d, 0x82, 0x0, 0x1, [@nested={0x4, 0xe9}, @nested={0x4, 0x111}, @nested={0x4, 0x118}, @generic="03125e33ef9fda453a119aa5512260624e9067d30f311f9067", @typed={0x8, 0xa5, 0x0, 0x0, @uid=r9}, @nested={0x4, 0x87}, @typed={0x8, 0x2c, 0x0, 0x0, @pid=r12}]}, @nested={0x8, 0xf, 0x0, 0x1, [@nested={0x4, 0x109}]}, @typed={0x8, 0x100, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0xf1, 0x0, 0x0, @pid=r10}, @nested={0x144, 0x105, 0x0, 0x1, [@nested={0x4, 0xe3}, @nested={0x4, 0xb1}, @generic="f926ef2f72394aff1134de582cc225af0b4250e7934ecc2f01743033d4bde20235190f0b09ba38c9b143a332a6daa92f6cb817a0621883be534fdfd18d6289dd561b3e1a2ef33acbf53a6a6baf1ae61ac3957b1b3b7455c85366fc311fbe82583f8ce4b4a533822a1fb8179ef7224705b157ec68698063fd4e0aae351fb327501ee2cee1a0b07f49bad8f638668b1dbd5818035de5c9fb719deeef0b662e339ba3ae7de9a2d42ff5166d71b4f32f4787e71f56255ef53000a9fbb5ebd67bf53af19b01b4693a77db3b8ca16b2f9d713ad8275708e51c94f5a06a5ecc85699aebafe898c5e9b357ecf0a0aa84eb1d25cba70ccba90fea1a", @typed={0xc, 0x3d, 0x0, 0x0, @u64=0x1}, @nested={0x4, 0x41}, @nested={0x4, 0x2d}, @generic="9960d6d6831a9aeb23d45bc6b65650d85e4317ab19f135f3827d39adbf", @typed={0x8, 0xac, 0x0, 0x0, @uid=r11}, @typed={0x8, 0x104, 0x0, 0x0, @u32}]}, @typed={0x4, 0x113}, @generic="a32afd326eac9c9b2daeb8e619930737338d9d23533261935f6471cbbc88d7f960824387de1d76e8db59a58c8dca51a040cd41f5d1de4bf16597c9259f90445b2ca2048df4a7baad03ad5627330a82de1d5c20cbaef690424fa2d0d1124813870197de2a2e2a34cfcd4044625989030445d3e34a49b00b0a19eb9b3e24123633f87ff47da11873049d2f67309f7ec358c10cd336d793dced155e0bc87dffb556d782116db8412007e4fab8bef1f5c53a27224d3937b693b95c8b4c7852ef5c3211823b0ddbf2bac08b9f05734a517cb8a724605d800de041ea5abea6fe7b830daa3caad79b7dad6f7f809067f7e60a6367287e", @typed={0x8, 0xb5, 0x0, 0x0, @uid=r9}]}, 0x2b0}], 0x7}, 0x4040048) (async) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) r13 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r13, 0x0, 0x0) (async, rerun: 32) socket$inet6(0xa, 0x1, 0xd) (rerun: 32) 11.061458565s ago: executing program 2 (id=3904): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x800) (async) r2 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x800) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000540)="9a5934403fb02c99fb8d4bea407894504029a71a0c68857ad1173b2ceddf32352591d0325b9c2ef23142be58d4c7936d8daeae4be41502896fe18b50b698d98b774871d9d70ed7098d01156ae1fdf3eb769a1915dc3e3fb9d824bfbc174fa71bf2e60c73800f6500f44db0e39c94e425bd1d56b87fdda6575bab7db41a29f78d33c940bc61e925a84c5c806d7acdb67f6209f19de489d15e85ac2b9652d7895ce0bfd7d366ee26c741f6cf677189ed14aa8cb9", 0xb3}, {&(0x7f00000009c0)="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", 0x1000}, {&(0x7f0000001e40)="600ce36d1b5f81f536379454d64c0494b7fa93e1256ba23543120511716876018436eb421af0718989edd30948f6cea4dc1f5c20d1dca027c5c48be7c0cd2a481b344d6fb9df342b60a5938e58ab591004267d0f918c3aa206691449f37c4a925a4815487ef36e6f842262ef47c81f8313e5b8821235bc52172ea8efb1a648b5fd474bdc1b8dbfdf1d27a88950d380cf2f40f8227b5ac9b3c3d4e9e5c90c7a4ed7bb64eab25da09b6ec0ec4ed0b261f6a3a531a87abd5baee75543", 0xbb}, {&(0x7f00000003c0)="69d3d24a0aa09929f3d00395574a55796647364b672af1c44ac525c5985e47896cef90e0b703cfead8ceacf72a289669da175756cd", 0x35}, {&(0x7f0000000780)="442c50a1a401512f17fc963bd52df633f5a125869b79b5841706690a3f93ec09bc1d32c836b8bb9b5f957e816e5b0c0bd29842575a3ac81e49f9e9d336082353e5705a7e258b73fb79180413a74ab2e92954b067cf60be46170051e96d6da73f7dd33247af8800c7092af3c382de39c668949cb6629efe6bf03120002e13822d6ce3058ec9c334f554c55d4083a915710aeca9863683256414293b5d449f7d29992ec32d0ca45e7a34afb8b7db5a9270d4fe666c1716f66249f78284c65c75269010f8dc3a7b3830071b8195080b8efc3109c7f62316ba", 0xd7}, {&(0x7f0000000440)}, {&(0x7f00000019c0)="0b2c4db6b28ce4ae98943fc49cf94c45cf82a870acab32ded4442f50207b839c4f892bcc8cdb9e8c0c945006cebe68a85dd32121a6551ac0730a92a11d0f96704c8c68c6108cf8ec79f34e443684b45a352fc4b6f17dab585fc6cfe855b7d9fa04dc3777139e33345b3536164324ba869e8ba2f6974bfa04941e3f86fac46503aa16daed1aaa9a5c60d4bbaac84e1e724cef924603c63a6956a285d8a1a547278adc50abc2a1024adaa09e06503e046e4a720422a21a99e3a010388a0bc0f021a915b8a74dfeae97a7ec9b669860279f5f8feeb3231c9636549b2d1f10ce15d8ad37339799c2f254d7e421ab64", 0xed}, {&(0x7f0000001ac0)="803ba951f0b68c6a922792400c41fea59997c89f3872db3f1792047ad5a085186cfe9abd3bd4eed4f660b4c2d782b2ce58045efb88da54228f7b8de54e68c760b8dc490beab48427dde01420350eb68b23b79cd5e57a3e84d0a87366736719370a768038caa5e44242f359957a82ebdf4cf97a8adbb71609a0e832be78366fdcc9efb505240ac85bcac4104e6d9af16db076d0cf4638f0fb55c3353c1c369a93fadd0b7b13a0451412e4ebc113d38eb15f55abaf79cbfcf324f1021a562314a33495afe9ed19fb3c13f8e998f024740c919e58747c204024569b8a518e1f673bd4923f0c57b5ce0f56ee039bb781cd95479e0c", 0xf3}, {&(0x7f0000000880)="cc1f361ca45712d451f312739fc8344f24915342d453cc645be476ada88d567f804f9f887c579e4cc5a8bb0aa2b548bfa95f657ba62db632e524959598c98068e192337095637b8e5e0c61c8d85c62f5f26b18f2c48567d22e23d5de6c5a03c7efff600de730a2cb16c219", 0x6b}, {&(0x7f0000001bc0)="9cdb9e543eb823cbd642552463582c32c5ae547cd781b7f68fc7c8ba62f56a27360e95ea4ed039533afcd3be66f5bc41e1c297d5ef1bcbdf0dd6424f40d297762460f96306e864534bb3a7e62063a41b080b8dbf0760292245c82ec3e1240c9d2d24235cb9f4da57d2301e187f6b0dc288204e5672490e2dbcaaaa13983394efc07624d44296228416f4221251ae8059b7f2122ee31198ccead5f41984d9e40f8820d422c2", 0xa5}], 0xa}, 0xc080) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7c, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001d40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000001e00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x28, r5, 0x974322bc533d79e9, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x3, 0x59}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc4}, 0x20008011) (async) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000001e00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x28, r5, 0x974322bc533d79e9, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x3, 0x59}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc4}, 0x20008011) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000500)="837a24", 0x3}], 0x1, &(0x7f0000000600), 0x0, 0x8000}, 0x4010001) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1f0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1f0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') chdir(&(0x7f0000000480)='./cgroup\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000180)=""/178, 0xb2) (async) getdents64(r7, &(0x7f0000000180)=""/178, 0xb2) waitid(0x1, 0x0, 0x0, 0x2, 0x0) (async) waitid(0x1, 0x0, 0x0, 0x2, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$cgroup2(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x3004000, &(0x7f0000004a00)={[{}]}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40086315, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 10.861626357s ago: executing program 2 (id=3905): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa08, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x3}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000000c0)="f7bc8cd30f01180f30d9d02de8000f01c566b80c0000000f23d00f21f86635100000020f23f8c4e215cfa0f00fdb994d4426f30f1c06b241", 0x38}], 0x1, 0x42, 0x0, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) sendmsg$inet(r9, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) setsockopt$inet_int(r7, 0x0, 0x6, &(0x7f0000000000)=0xa, 0x4) recvmmsg(r7, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r10 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r10, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r10, 0x29, 0xd3, &(0x7f0000000240)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x9001, &(0x7f00000001c0)=ANY=[@ANYRES16=r7, @ANYRESDEC=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRES8=r1, @ANYRES64=r8, @ANYRES16=r9, @ANYRESDEC=r5]) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1f, 0x4202812, r1, 0x7dffb000) 10.746187169s ago: executing program 2 (id=3906): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x2000) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSFLAGS(r2, 0x40047459, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10.69250846s ago: executing program 34 (id=3906): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x2000) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSFLAGS(r2, 0x40047459, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.421676354s ago: executing program 5 (id=3924): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000500)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x400, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2c00c0c4) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0xb, 0x20000}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000200)=[@acquire, @enter_looper], 0x53, 0x0, 0x0}) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(0xffffffffffffffff) ioctl$KVM_CHECK_EXTENSION(r7, 0xae01, 0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) write$P9_RGETLOCK(r5, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) tee(r4, r8, 0xfffffffffffffc01, 0x0) tee(r4, r8, 0x60000000000, 0x0) close(0x3) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)) 8.356645045s ago: executing program 5 (id=3926): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc9a, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0xfffffffffffffce6}}, 0x10}], 0x0, 0x0, 0x0}) 8.249836477s ago: executing program 5 (id=3928): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x420200, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@weak_binder={0x77622a85, 0x100}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 8.218584817s ago: executing program 5 (id=3930): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x8001, 0x0) mount$bind(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1b73404, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000004010040"]) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') prctl$PR_SET_TSC(0x1a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) write$P9_RUNLINKAT(r5, &(0x7f0000000100)={0x7, 0x4d, 0x1}, 0x7) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x34, r7, 0x1, 0x70bd26, 0x8, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xfffffffe}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x34}}, 0x0) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 7.954906821s ago: executing program 5 (id=3931): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) creat(0x0, 0x182) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) close_range(r0, 0xffffffffffffffff, 0x0) 7.753874524s ago: executing program 5 (id=3932): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1100, 0x1}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 7.722257025s ago: executing program 35 (id=3932): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1100, 0x1}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 4.120809318s ago: executing program 7 (id=3974): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r2, 0x9eb1eb0c17f2eba7, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20008030}, 0x8000) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r3) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000680)="aa", 0x1}], 0x1, 0x0, 0x0, 0x44000}, 0x4000) recvmsg(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x84}], 0x1, &(0x7f0000002f40)=""/244, 0xf4}, 0x0) close(r5) openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x125082, 0x0) syz_fuse_handle_req(r3, &(0x7f0000002800)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.307405931s ago: executing program 7 (id=3984): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x1400037e) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) rmdir(&(0x7f0000000040)='./bus\x00') r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000080)=""/61) 3.220911102s ago: executing program 7 (id=3986): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x81, 0xfffffdff, 0x5}) r1 = syz_clone(0x1120000, &(0x7f0000000140)="312ce951dae28f5a455d3a880de6f0a0a44e2c1e0c296f3cca2f8ebb39b050338d987283656a674f78140ca939e6eda8084a32ff8cf5766e242bea61308c93f59343c7f2bbad1ef9146dc65c467abea6a73a9c08560e0213f8b0f36127bb9ecbdfbcc12855de67f9d54e2f92caf32202e91f05562f049f5b7ec9b6a922067639cf8b9a75f26ddf54abd778d56ce83fdc9e3266997e2312", 0x97, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000400)="325a8427aec9821bf8211326398c45384a66061a6ce22e688bbacdabdf048e8870bcd97be96e2ff4c633748956a6d5b31beedbceeb83097f2ef6b321e319092158c12207351b9f07993f85b17c622f9b000c39a5e5968c7b1002d5adfde0474c1e383619a7f55c7368c28df5eff5dcbc563c95ee752033b45833") capget(&(0x7f0000000480)={0x20080522, r1}, &(0x7f00000004c0)={0x11f5eff3, 0x33bf, 0xc1, 0xa, 0x1, 0x18000}) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000080001000d0c100000000000224e0000", 0x58}], 0x1) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) recvmmsg(r3, &(0x7f0000009fc0)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x10000, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) prctl$PR_SET_KEEPCAPS(0x8, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @fda={0x66646185, 0x8, 0x2, 0x19}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}, 0x10}], 0x52, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"}) 3.104022334s ago: executing program 7 (id=3988): shutdown(0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x154}) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x0, @mcast2}, 0x1, {[0xffffffff, 0x5, 0x2, 0x0, 0x0, 0x9, 0xfffffffc, 0x4]}}, 0x5c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x11, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f000076f000/0x4000)=nil, 0x4000}, 0x1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x4c8c3, 0x0) socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfe, 0x28}, 0xc) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e23, 0xf17e, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) r5 = syz_io_uring_setup(0x2421, &(0x7f0000000440)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20000004, &(0x7f00000000c0)={0xa, 0x2}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="2c7766646e6f3ddf2ecf424be3685307bd666f280e47a536081afd5e00530d1b229701e19b53443b483811636ff7db199c04052aaadb11bd0b1f6be35798228ea73c4231f588f8fc5c3814c4c17e18355944a09f2410132a1a9458b132116bbf1536717f2db16449bde085", @ANYRESHEX=r5, @ANYBLOB=',privport,\x00']) openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) pwrite64(r6, &(0x7f0000000240)="e3ad8ea6a4023ebc5c6c55d25c46f81fd37976ec43c8c6caeab7ac3699bc8f91f7bbd74b6fbea554efa4ed5b78e4ea66489880b06227f475d35df50abffb55bc01c97d0118", 0x45, 0x10c) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000005c0)="e9fa979e03ddbd3e5a7c8717644278170b3e73d9ffc80e55b588d48324159fa1bf0385955750a3aafb0d099e0514846f70b92360bf61d86cfba46c50e1980e49db31afb15f1a8020793e7323a78f9660c6eaf23d0f7ea1ddd41e33f97a78402f8a357a3f4e349cc23267943465ae4244484535eca7ff9d71706417a1bf580c2890f002b1fd7d693dd1027e15f6fecb6bf4bd90017803943de8f0308a05c293c2c70b85519d38799d0cfcaee04740ec506ccda27a30191752e70100eecdebde75ee722892ae78a4c247c2a8f99b8aba7248ddccd5f4c0cddfa8", 0xd9}], 0x1, &(0x7f0000000400)=ANY=[], 0x18, 0x40800}}], 0x1, 0x400c090) r7 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000080)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0xfff, 0x3a, '^-%-\\xc$})\'!&}*', 0x3a, '', 0x3a, './file0'}, 0x36) io_setup(0xc, &(0x7f0000000180)) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r8) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYRES16=r2, @ANYRESHEX=r6, @ANYBLOB="fbe02cbd7000fddbdf25060000000c00018008000100", @ANYRES32, @ANYBLOB="300001800800030002000000080003000000000014000200776732000000000000000000000000000800030005000000"], 0x50}, 0x1, 0x0, 0x0, 0x4008801}, 0x880) 2.976030236s ago: executing program 7 (id=3990): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x6) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x1fe, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r3, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0xa, @media='ib\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) 2.916095797s ago: executing program 7 (id=3991): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x6, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syslog(0x4, &(0x7f0000000080)=""/242, 0xf2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockname(r2, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000400)={0x8, {"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", 0x1000}}, 0x1006) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="500100001a00130429bd7000000000000000000000000000000000000000000020010000000000000000000000000000000000004e2400000a0000203b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a0101020000000000000000000000000000000032000000e00000010000000000000000000009000000000000000000feffffffffffffff0000000000000000000000000000000008000000000000000000ee000000000081000000000000000000000000000000030000000000000005000000000000000400000000000000060000040000000000000000f9ffffff2000080000000000000000000200048168000000000000006000120072"], 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r4, 0xc038480a, &(0x7f0000001140)={0x3, 0x1, 0xb, 0x8, 0xc, 0x5, 0x0, 0x82, 0x0, 0x4000000, 0x8001, 0x7fffffff, 0x8, 0x9564}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r5, &(0x7f0000010140)={0x2020}, 0x2036) bind$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, 0x0) mmap(&(0x7f00004b8000/0x4000)=nil, 0x4000, 0x1000008, 0x1010, r0, 0x94d9c000) 1.891492102s ago: executing program 6 (id=4000): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000ac0)='\x00\x00\x03\x86\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x94\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcbzA\x8e\xf6\x89\xc2\'\xdfn\x054Y\xd4\x91s\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xe0\\\x98\xe1%\x1c\xf4\xd0\xf5\xd5\x80\xc4\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\a\x00\x00\x00\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xa5a\xfb\xa6\xff\xfbj\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\x05\x00\xeb\xd8\t\x00\x00\x00CvNx461\x04Nl\xedV\xcet\xaa~\x01j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\f\x00\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg\xc52\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xdeZ%\xa7\x01\x00\x00\x00\x01\x00\x00\x00\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\"Y\xad\xaf\x83\xaf\x93\xdaHg\xd4\x8c\xee\x0f\x00\x1c/\x9a\xf83\';:q\x92\x010g\\Ym\xd8,\x8d\b\xab\x9dq\xed\xcc\xba\x06\x1ej\xb7s33\xe5\xec\xe90M\xd1\xfd\xbb\xdf\xedc\xd1\xbbI\xa3\xbdqU\x02\x00\x00\x00\x00\x00\x00\x00\xee\xb0\v\x84\xc7\xac\xec\x92t\x00\x00\x00\x92\x1a\f\xbbM\x1cG\xb8\xa4\x05\x16\x06\xb6\x1a\tL\xe3C$K~\xf7\xa1mt\x87E\xc4\xb6h\xf3\x8cG=&\xbd\xa16\xaa\xa2N\xac\xad,Q\x97\xd6\x15\xc46v\x9a\x97\xa6\xb9`\x03\x8ff,V\xe8\xeb\x8bJn\x12o\x8b\xe7K)+\xe0\x06\x8a\\\xfc\nw\xf8\x01\xc4\xd8\x97\xd2\x9cF\xda6F\xfa6I\x03o\xa7\x15&*\xf6Wn\xb9\x00~Y\x17:\x03\xef\xf9\x03\xe7\x8d\x16\\/\xe3\xfcV\x9d\xf2g\xbcFy\xca\x8a\x10*\xbdU#\x7f\xbb\'6\x9e\x1d\n\x19\xff[\x92n\xe1\x81q\xfe\x10\xfd\xa6pL\xc6\x0fN\x06&W\xa2\x9dPWp\x94r\xe2\x92X\x12\x87\xe5\x94\xb3Aa\xb1/\\\xde\x9c\x93\xf5(,u|\f`\x8e\x86\xeb\xcb\x18J+\xdcv\x894\x01\xd0\xc6\x95\xea^j(x\xa5\x9b\xd6f1\x9d\x8fcr\x18\x1fs%\x91~\x19@\x84!u\xc8u\x8aL\x021k\xb4\b\xbb_#A{dw<\xb9\x9dR\xef\xaf]\xe0\xca\xd9x\xdab7@\xfd\x0e\x94\xf8\xab\x8c\xf4\xf1\xb0\xd6\xbe\x8e,\xa2Y\x000F\xe6q\xe3~\xc9\xaa!\xf3\'UF\xf0\xc0\x11\x11\xc2\xc9\x93#K\xea\xc2c\xb9\xe7)\xa4\xd9X\xb9\xaay\xd1\xc7\xab\xe9F\xc6r5\xdf\xa0\'y\r\xbf\xbd\x97\x9d\x8aS\xdb\rF\x9e99\xb4\xf7\x8c\xf9\xca;\xef\xc7]\xa4\xdd<6wc5\xc6\xdeS\xe5*H\xed\xc8^a-\xe8\xb1\xc2\xca\xfaE\xfb\x8du\x94\x97\x1cF\x0f\xe9d\xf2\xe4\fc\xdf\xde\x1c\xd8u\x9b\xd7\x9c\x11\xbe\b\xb5\x1e\x04\xa0\xdc\xe1Oxu\xd7O#\n%\x89+\xcc\x9f\x8e\xb2:\xa0\xb0\xdc\xd1\xba\xbd@\xf4\x00\x00\xfd\aqn:\x83\x84N\x83K\xbf^\xd8&\xde\x14\x17\x9d\xcd\xed\x19\xd0\xc1$*K\b$\x12\xf3\x88#\xb1#\xb6RX\x11\x86X\x94\x84\x8e\xdd\x82b\x19b\x9fQ\x91\x98\x9e\xf7\xf6`\x03\xb3\x8a\x86\xf9\x00\x00\x00\x00\x00P\x00'/1056) r1 = memfd_secret(0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) 1.833786872s ago: executing program 1 (id=4001): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.833437012s ago: executing program 6 (id=4002): mkdir(0x0, 0x9) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000140)=0xb, 0x4) chdir(0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x200) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r2 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=r0, @ANYRES32=r4, @ANYRES32=r4, @ANYRESDEC=r0], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="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"]) r6 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r6, 0x4010e501, &(0x7f0000000380)={r2}) sendfile(r6, r1, 0x0, 0x80000000) 1.776623693s ago: executing program 1 (id=4003): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xddccb000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x2}, {0x5002, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x8080000}, {0x11000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x84}, {0xeeee8000, 0x80a0000, 0x9}, {0x0, 0x0, 0x0, 0x82, 0x1, 0x0, 0x0, 0xe}, {0x6000, 0x8000}, {0x1, 0xfffe}, 0x80000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900, [0x0, 0x0, 0x10000, 0x3]}) (async) r6 = open$dir(&(0x7f0000000100)='./file0\x00', 0x150001, 0x1b2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000000)='/dev/vhost-vsock\x00', &(0x7f0000000080)='./file0\x00', r6) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r7 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000040)={0x1, r7}) getpeername$inet(r2, &(0x7f0000000280)={0x2, 0x0, @loopback}, &(0x7f00000002c0)=0x10) (async, rerun: 32) read$FUSE(r2, &(0x7f0000001600)={0x2020}, 0x2020) (async, rerun: 32) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000040)={'ip6gre0\x00', 0x5}) (async) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) (async) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') move_mount(r9, &(0x7f00000000c0)='./mnt\x00', r9, &(0x7f0000000080)='./mnt\x00', 0x63) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) (async) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r13, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000eeffffffb5000040000000000900000000000000"]) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 64) 1.707175695s ago: executing program 6 (id=4004): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5543, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x20, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x6, 0x80}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="002205000000a90f66"], 0x0}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x13, 0x7, 0x4, 0x3d6, 0x80000000, 0x4, 0x6e, 0x4}, 0x0) read(r1, &(0x7f0000000080)=""/84, 0x89) 1.573652336s ago: executing program 1 (id=4005): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) (async) unshare(0xc000600) (async, rerun: 64) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (rerun: 64) fcntl$notify(r2, 0x402, 0x2) fcntl$notify(r2, 0x402, 0x100000000) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) (async) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private0, 0x0, 0x6c}, 0x2, @in6=@empty, 0x3501, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe4) (async) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) (async) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x5c, 0x12, 0x1, 0x0, 0x0, {0xa, 0x3, 0x0, 0x0, {0x0, 0x4e22, [0x0, 0xffffffff], [], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x3, "90ad60547811000000"}]}, 0x5c}}, 0x20004010) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0x22, 0x4) (async) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 1.571526607s ago: executing program 1 (id=4006): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, &(0x7f00000000c0)={0x0, 0x11, 0x65, {0x65, 0xd, "f0080354c1f73619ee1537e9650f2201f93be461df4507f4e98666f0d709cc83ab65dfb3c6efe22c9e8a31846afc791602ecccca37f6c603ae1e6b399709fc2e57f0e18320ddfd71d0df661dfa437062a6200172a09235efd33b244aedda16ec6e7c37"}}, &(0x7f0000000000)={0x0, 0x3, 0x2b, @string={0x2b, 0x3, "39b2095c9998886c20e3d609b39633ac6841e90951489bef329947854b6360558c854d042a71b00fa1"}}, &(0x7f0000000480)={0x0, 0x22, 0xb, {[@main=@item_012={0x0, 0x0, 0xa}, @local=@item_4={0x3, 0x2, 0xa, "06ff4480"}, @local=@item_4={0x3, 0x2, 0x3, "8fbd9fb9"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0xc, 0xa, 0x1, {0x22, 0xb80}}}}, &(0x7f0000000300)={0x2c, &(0x7f0000000540)={0x40, 0x13, 0x7f, "22d598448fa6db0a6462cf0d7549a52da6b1deaf6ade7017e4733b7e4c9244afa1b580b58a1f96b9d112fb0266a281e277fedc1761941febcdd7aa8626e1880ed479c9ea6ad33a97f405e17bbf7e6b5d5e2c1e59301a9a4759ae8b1caea6b62131a554b9e37acf256fb234ae1d12df73bbf47c27f51c78de9092d6c1676536"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000600)={0x20, 0x1, 0xd5, "2a2431caa20cb9ef1913c47d49191a35da0105173d06ba8770ed5a8f9595bd845c000d996f030ff2b8803dc5ba49b406bcb15f13628e84e4ccf0ad7984615387cb4b1a1c70c17634aaf044e65becb03b10ef77b0685fbc20b22687d3955723211aace40338db40206c78af9e736f5faab87b3fef68fc5b826be9cac2110fb5339a7f2189f91cf3dde18c8fac9a419726ba523e14f957d7b4e73265e30d773103a925739bbbce09f6aac6d78a39c84f5c241dd5a90ebfe6d706e504fc5c0862f7d7ce2241999ab5a81658f47b09a1c07e7b03aeb4c6"}, &(0x7f00000002c0)={0x20, 0x3, 0x1, 0x5}}) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) epoll_create(0x10000e9) memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') r2 = syz_usb_connect$cdc_ecm(0x3, 0x61, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x60, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x1, 0x1, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0x3, {{0x8, 0x24, 0x6, 0x0, 0x0, "e14ec9"}, {0x5, 0x24, 0x0, 0x3e9}, {0xd, 0x24, 0xf, 0x1, 0x7fff, 0x9, 0x3ff, 0x4}, [@country_functional={0x8, 0x24, 0x7, 0x10, 0x8, [0x0]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x9, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xff, 0x40, 0xb}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x2, 0x7, 0x9}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x300, 0x6, 0x1, 0x71, 0x20, 0x2}, 0xd1, &(0x7f0000000ac0)={0x5, 0xf, 0xd1, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0x4, 0x0, 0x3, 0x9}, @generic={0xb7, 0x10, 0xa, "4ed4d4d6ef0690c016f9e514b59edfd520f30ffec516a331a0c083060c3592359215aad9b0465ec376ccd1af5072de59d2ad7d9855538843aa65f7aa3a1df2afba66d3d10aff0dbf8abd2a74fe900cff7408b3ba43fbb2ab2207b66f4fc349845a82c81c73027883f9f0c360fac67390dec17c55f77f6c2ecda0bbb574630e8d1b8dd75d4a55afd03bed1401e07ae1fc0db42fb7c035f2cb9ba1f508111e167dd2ea7c954da1ed891756441d4c57a309a4e0fd24"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x0, 0xd, 0x100}]}, 0x2, [{0x8b, &(0x7f0000000bc0)=@string={0x8b, 0x3, "77c47dc0ddeef5fac5b6b0a557e41081e0a407d0677fb85d01c49b3f68e4fc92897b258dca51fce7e29a19d6ad3a90ade4bd30e5b8aea25ea7370ade431534acdabbf403ecc978f0bde3d8e0796fd69b2556b991add2603ffe0abbe959f3689ad54af8cc935b35f156169c62dcc1b70bd5b19924a74ec5bc147dfb4ddcb6baab533aea8df8d026a9de"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x457}}]}) syz_usb_control_io(r2, &(0x7f0000000e40)={0x2c, &(0x7f0000000cc0)={0x40, 0x9, 0x59, {0x59, 0xc, "c3242403ec7c5ad9cafc9ec3e221c0284a5e6a845eb2b208a696d05ac21403a5a961f901d9a0df637f36984f42701d496bd86fe0cb8787f36cdf56d64aba918781c3179d4f057a9f2ea9fe89ea2200f3312cbcb534c83c"}}, &(0x7f0000000d40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1004}}, &(0x7f0000000d80)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000dc0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x0, 0x1, 0x3, "febfc3c1", "6ddee7d1"}}, &(0x7f0000000e00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x60, 0x4, 0x2, 0xb, 0x0, 0x9}}}, &(0x7f0000001380)={0x84, &(0x7f0000000e80)={0x60, 0xb, 0xc0, "2979480e3795b1597f07d3987794aa97910807ea93fbae6330307f77a9d1dff049b2519bb18a909a5acaaba3f1b63a5f7dc8d6975b296bb1644126d0d7530403c764a04e2e805f57382b543af0f5b23dee38329daa1b5c3875486bf5c3622e99d0a4b761fda42bcd141164341f2375d831eb62f43e4b09866bd0f48ee0264f1b4ad177c7611ff3bdbd090a7ab4dbfd49ccee2f0d6b7adee2a16d21fecd786ba92c4a11e81e8dab786ddb0a942e5b62091fe78e984bc7591e75e3d753af4133cd"}, &(0x7f0000000f80)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000fc0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001000)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000001040)={0x20, 0x0, 0x8, {0x1e0, 0x2e, [0xf]}}, &(0x7f0000001080)={0x40, 0x7, 0x2, 0xca1}, &(0x7f0000001100)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000001140)={0x40, 0xb, 0x2, "1b97"}, &(0x7f0000001180)={0x40, 0xf, 0x2, 0xb}, &(0x7f00000011c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000001200)={0x40, 0x17, 0x6, @random="b5417a41e06c"}, &(0x7f0000001240)={0x40, 0x19, 0x2, "1a07"}, &(0x7f0000001280)={0x40, 0x1a, 0x2, 0x3}, &(0x7f00000012c0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000001300)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000001340)={0x40, 0x21, 0x1, 0xea}}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder0\x00', 0x4, 0x0) close(0x3) 1.060902734s ago: executing program 1 (id=4007): mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs\x00', 0x1ff) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0xfffc, 0x5}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) r1 = gettid() r2 = gettid() r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x40100, 0x0) fchown(r3, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) kcmp(r1, r2, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='sessionid\x00') exit(0x3) read$FUSE(r4, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000880200"/24]) r8 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x386c2) r9 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r9) keyctl$chown(0x4, r9, 0x0, 0x0) r10 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x80e05) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r10) r11 = socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_ro(r4, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'wg0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r11, 0x890b, &(0x7f0000000100)={@local, @local, @loopback, 0x0, 0x40, 0x0, 0x400, 0x2, 0xca0145, r12}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0) 124.643108ms ago: executing program 36 (id=3875): r0 = socket(0x1e, 0x1, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x4000000, 0x1ffffffd, 0x100}}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES16=r3, @ANYRESOCT=r2], 0xf4}, 0x1, 0x0, 0x0, 0x2000c805}, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff}, &(0x7f0000000540)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0) 118.045549ms ago: executing program 1 (id=4009): openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000001c0)={0x200000a, 0xfffffffa, 0x6}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r1}, @flat=@weak_binder={0x77622a85, 0x100}, @ptr={0x70742a85, 0x1, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r1}, @flat=@weak_binder={0x77622a85, 0x100}, @ptr={0x70742a85, 0x1, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 52.325249ms ago: executing program 6 (id=4010): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x10) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}) openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x125082, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002800)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 47.72153ms ago: executing program 6 (id=4011): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x20, 0x19, 0x1, 0x70bd27, 0x25dfdbfd, {0x2, 0x3}, [@typed={0xa, 0x120, 0x0, 0x0, @str='*\xc4\'\'%\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) r2 = userfaultfd(0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x12, r0, 0x4d75d000) 0s ago: executing program 6 (id=4012): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): phys_seg 1 prio class 0 [ 260.808410][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 260.814895][T10124] rust_binder: Write failure EINVAL in pid:1127 [ 260.817577][ C1] buffer_io_error: 2 callbacks suppressed [ 260.817595][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 260.824106][T10124] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 260.829607][ C1] I/O error, dev loop8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 260.854671][ C1] Buffer I/O error on dev loop8, logical block 1, async page read [ 260.862537][ C1] I/O error, dev loop8, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 260.871718][ C1] Buffer I/O error on dev loop8, logical block 2, async page read [ 260.882455][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 260.895814][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 260.904992][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 260.912875][ C0] I/O error, dev loop8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 260.922052][ C0] Buffer I/O error on dev loop8, logical block 1, async page read [ 260.929929][ C0] I/O error, dev loop8, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 260.939075][ C0] Buffer I/O error on dev loop8, logical block 2, async page read [ 260.947468][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 260.956654][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 260.957506][T10131] 9pnet_fd: Insufficient options for proto=fd [ 260.964494][ C0] I/O error, dev loop8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 260.979698][ C0] Buffer I/O error on dev loop8, logical block 1, async page read [ 260.987554][ C0] Buffer I/O error on dev loop8, logical block 2, async page read [ 260.995674][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 261.129048][T10137] 9pnet_fd: Insufficient options for proto=fd [ 261.135596][T10137] incfs: Can't find or create .index dir in ./cgroup [ 261.142352][T10137] incfs: mount failed -22 [ 261.161048][T10139] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742) [ 261.161068][T10139] rust_binder: Error while translating object. [ 261.173484][T10139] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 261.179881][T10139] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:79 [ 261.724428][T10151] /dev/rnullb0: Can't open blockdev [ 261.789218][T10153] rust_binder: Write failure EFAULT in pid:505 [ 261.795879][ T603] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 261.861951][T10169] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 261.862349][T10169] rust_binder: Error while translating object. [ 261.869879][T10169] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 261.878112][T10169] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:284 [ 261.879021][T10174] binder: Unknown parameter 'fow.er>18446744073709551615' [ 261.905488][T10176] binder: Unknown parameter 'fow.er>18446744073709551615' [ 261.965853][ T603] usb 3-1: Using ep0 maxpacket: 16 [ 261.982469][ T603] usb 3-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 262.001344][ T603] usb 3-1: config 1 interface 0 has no altsetting 0 [ 262.012162][ T603] usb 3-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.40 [ 262.018765][T10194] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3164'. [ 262.025163][ T603] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.040600][ T603] usb 3-1: Product: 숅ïŒïš ä¯›á¾žè¿³ãˆŠä‘˜á²©ë±ï€†íŽ’ [ 262.047793][ T603] usb 3-1: Manufacturer: à°‰ [ 262.052472][ T603] usb 3-1: SerialNumber: Ї [ 262.137896][T10212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.146320][T10211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.147235][T10212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.156116][T10211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.465143][T10149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.473751][T10149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.483156][T10149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.492097][T10149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.504145][ T603] usbhid 3-1:1.0: can't add hid device: -71 [ 262.510173][ T603] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 262.519769][ T603] usb 3-1: USB disconnect, device number 110 [ 262.768229][T10230] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 262.861872][T10233] kvm: pic: non byte write [ 263.008839][T10239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 263.008874][T10239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 263.038139][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 263.040983][T10246] 9pnet_fd: Insufficient options for proto=fd [ 263.057256][T10246] 9pnet_fd: Insufficient options for proto=fd [ 263.063457][T10246] 9pnet_fd: Insufficient options for proto=fd [ 263.069697][T10246] 9pnet_fd: Insufficient options for proto=fd [ 263.075938][T10246] 9pnet_fd: Insufficient options for proto=fd [ 263.082226][T10246] 9pnet_fd: Insufficient options for proto=fd [ 263.088520][T10246] 9pnet_fd: Insufficient options for proto=fd [ 263.094712][T10246] 9pnet_fd: Insufficient options for proto=fd [ 263.101617][T10246] 9pnet_fd: Insufficient options for proto=fd [ 263.107840][T10246] 9pnet_fd: Insufficient options for proto=fd [ 263.114051][T10246] 9pnet_fd: Insufficient options for proto=fd [ 263.120277][T10246] 9pnet_fd: Insufficient options for proto=fd [ 263.127176][T10246] 9pnet_fd: Insufficient options for proto=fd [ 263.133380][T10246] 9pnet_fd: Insufficient options for proto=fd [ 263.139611][T10246] 9pnet_fd: Insufficient options for proto=fd [ 263.145902][T10246] 9pnet_fd: Insufficient options for proto=fd [ 263.152132][T10246] 9pnet_fd: Insufficient options for proto=fd [ 263.158520][T10246] 9pnet_fd: Insufficient options for proto=fd [ 263.164701][T10246] 9pnet_fd: Insufficient options for proto=fd [ 263.171508][T10246] 9pnet_fd: Insufficient options for proto=fd [ 263.177824][T10246] 9pnet_fd: Insufficient options for proto=fd [ 263.184027][T10246] 9pnet_fd: Insufficient options for proto=fd [ 263.190396][T10246] 9pnet_fd: Insufficient options for proto=fd [ 263.196730][T10246] 9pnet_fd: Insufficient options for proto=fd [ 263.202931][T10246] 9pnet_fd: Insufficient options for proto=fd [ 263.209820][T10246] 9pnet_fd: Insufficient options for proto=fd [ 263.216188][T10246] 9pnet_fd: Insufficient options for proto=fd [ 263.222337][T10246] 9pnet_fd: Insufficient options for proto=fd [ 263.228533][T10246] 9pnet_fd: Insufficient options for proto=fd [ 263.234681][T10246] 9pnet_fd: Insufficient options for proto=fd [ 263.240908][T10246] 9pnet_fd: Insufficient options for proto=fd [ 263.247082][T10246] 9pnet_fd: Insufficient options for proto=fd [ 263.253218][T10246] 9pnet_fd: Insufficient options for proto=fd [ 263.515828][ T31] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 263.647938][T10253] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 263.647999][T10253] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 263.665828][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 263.678881][ T31] usb 3-1: config 5 has an invalid interface number: 143 but max is 2 [ 263.688083][ T31] usb 3-1: config 5 has an invalid interface number: 6 but max is 2 [ 263.696140][ T31] usb 3-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 263.704836][ T31] usb 3-1: config 5 has an invalid descriptor of length 166, skipping remainder of the config [ 263.715118][ T31] usb 3-1: config 5 has no interface number 1 [ 263.721228][ T31] usb 3-1: config 5 has no interface number 2 [ 263.728311][ T31] usb 3-1: config 5 interface 143 altsetting 30 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 263.741536][ T31] usb 3-1: too many endpoints for config 5 interface 6 altsetting 7: 122, using maximum allowed: 30 [ 263.752352][ T31] usb 3-1: config 5 interface 6 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 122 [ 263.765441][ T31] usb 3-1: too many endpoints for config 5 interface 0 altsetting 5: 36, using maximum allowed: 30 [ 263.776680][ T31] usb 3-1: config 5 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 36 [ 263.789751][ T31] usb 3-1: config 5 interface 143 has no altsetting 0 [ 263.796683][ T31] usb 3-1: config 5 interface 6 has no altsetting 0 [ 263.803401][ T31] usb 3-1: config 5 interface 0 has no altsetting 0 [ 263.811503][ T31] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=fc.f3 [ 263.820595][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.828622][ T31] usb 3-1: Product: syz [ 263.832778][ T31] usb 3-1: Manufacturer: syz [ 263.837408][ T31] usb 3-1: SerialNumber: syz [ 263.851561][T10259] overlayfs: missing 'lowerdir' [ 264.052616][ T31] usb 3-1: MIDIStreaming interface descriptor not found [ 264.062433][ T31] usb 3-1: USB disconnect, device number 111 [ 264.072515][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:5.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 264.752103][T10268] rust_binder: Write failure EFAULT in pid:1202 [ 264.763255][T10270] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 264.789312][T10272] rust_binder: Error while translating object. [ 264.789342][T10272] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 264.795595][T10272] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1206 [ 265.046555][ T995] Bluetooth: hci0: command 0x1003 tx timeout [ 265.047345][ T998] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 265.161479][ T36] audit: type=1326 audit(265.334:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10286 comm="syz.1.3195" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc3a98e929 code=0x0 [ 265.212336][T10289] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:535 [ 265.212367][T10289] rust_binder: Read failure Err(EFAULT) in pid:535 [ 265.815833][ T603] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 265.975819][ T603] usb 3-1: Using ep0 maxpacket: 16 [ 265.982059][ T603] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 265.990133][ T603] usb 3-1: config 0 has no interface number 0 [ 265.996344][ T603] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.008052][ T603] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.018714][ T603] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 266.027811][ T603] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.037363][ T603] usb 3-1: config 0 descriptor?? [ 266.305841][ T64] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 266.435847][ T64] usb 2-1: device descriptor read/64, error -71 [ 266.645164][ T603] uclogic 0003:28BD:0071.002A: pen parameters not found [ 266.662324][ T603] uclogic 0003:28BD:0071.002A: interface is invalid, ignoring [ 266.675171][T10308] rust_binder: Error while translating object. [ 266.675199][T10308] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 266.683163][ T64] usb 2-1: device descriptor read/64, error -71 [ 266.683174][T10308] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1220 [ 266.684987][ T603] usb 3-1: USB disconnect, device number 112 [ 266.722090][T10315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.730647][T10315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.955871][ T64] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 267.085852][ T64] usb 2-1: device descriptor read/64, error -71 [ 267.250724][T10322] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:109 [ 267.266509][T10326] futex_wake_op: syz.2.3207 tries to shift op by 144; fix this program [ 267.298265][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 267.325847][ T64] usb 2-1: device descriptor read/64, error -71 [ 267.423133][T10335] /dev/rnullb0: Can't open blockdev [ 267.435970][ T64] usb usb2-port1: attempt power cycle [ 267.468796][T10339] /dev/nullb0: Can't lookup blockdev [ 267.785842][ T64] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 267.806960][ T64] usb 2-1: device descriptor read/8, error -71 [ 267.918667][T10345] /dev/rnullb0: Can't open blockdev [ 267.937175][ T64] usb 2-1: device descriptor read/8, error -71 [ 268.041779][T10354] rust_binder: Error while translating object. [ 268.041806][T10354] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 268.048203][T10354] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:293 [ 268.049732][T10355] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 268.068048][T10355] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:137 [ 268.175819][ T64] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 268.206881][ T64] usb 2-1: device descriptor read/8, error -71 [ 268.251634][T10367] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742) [ 268.251662][T10367] rust_binder: Error while translating object. [ 268.264112][T10367] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 268.273221][T10367] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:304 [ 268.308952][ T9] kernel write not supported for file [eventfd] (pid: 9 comm: kworker/0:0) [ 268.346897][ T64] usb 2-1: device descriptor read/8, error -71 [ 268.455979][ T64] usb usb2-port1: unable to enumerate USB device [ 268.767307][T10384] rust_binder: Error while translating object. [ 268.767336][T10384] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 268.773542][T10384] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:150 [ 268.857907][T10391] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:157 [ 268.877473][T10393] rust_binder: Write failure EFAULT in pid:159 [ 268.909749][T10400] /dev/rnullb0: Can't open blockdev [ 268.941545][T10405] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3236'. [ 269.024602][T10411] binder: Unknown parameter 'fowner' [ 269.092829][T10413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3239'. [ 269.102926][T10413] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 269.365868][ T995] Bluetooth: hci0: command 0x1003 tx timeout [ 269.371976][ T998] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 269.393206][T10430] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 269.401899][T10430] rust_binder: Write failure EINVAL in pid:1231 [ 269.554360][T10440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.569215][T10440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.595837][ T603] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 269.746922][ T603] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.759403][ T603] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 269.768636][ T603] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.776669][ T603] usb 2-1: Product: syz [ 269.780889][ T603] usb 2-1: Manufacturer: syz [ 269.785483][ T603] usb 2-1: SerialNumber: syz [ 269.835205][T10444] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:181 [ 269.835837][T10444] rust_binder: Error while translating object. [ 269.845017][T10444] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 269.851236][T10444] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:181 [ 269.992230][ T36] audit: type=1326 audit(270.164:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10427 comm="syz.1.3244" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc3a98e929 code=0x0 [ 270.095032][T10452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.103647][T10452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.692260][T10464] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 270.716886][T10468] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3260'. [ 270.835680][T10481] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1261 [ 270.836610][T10480] rust_binder: Write failure EFAULT in pid:1261 [ 270.879250][T10486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.900924][T10492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.916086][T10492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.926977][T10490] netlink: 300 bytes leftover after parsing attributes in process `syz.3.3267'. [ 271.027099][T10498] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 271.049391][T10500] incfs: iterate_incfs_dir / -22 [ 271.313150][T10513] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1292 [ 271.314342][T10513] rust_binder: Error while translating object. [ 271.323680][T10513] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 271.331555][T10513] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1292 [ 271.358483][T10520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.386302][T10520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.388473][T10524] rust_binder: Failed to allocate buffer. len:120, is_oneway:true [ 271.410644][T10526] rust_binder: Write failure EFAULT in pid:204 [ 271.541347][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 271.735828][ T1343] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 271.885809][ T1343] usb 3-1: Using ep0 maxpacket: 16 [ 271.892102][ T1343] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 271.903486][ T1343] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 271.913657][T10537] /dev/sr0: Can't lookup blockdev [ 271.914193][ T1343] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 271.930870][ T1343] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 271.940051][ T1343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.948128][ T1343] usb 3-1: Product: syz [ 271.952332][ T1343] usb 3-1: Manufacturer: ᖄ떞說꧰á²áˆ—㇛骭ĭ䇨å©í๒怊婚Ⱘἰ䬡펯擧⣮꩛㼙꽋ﲖ碓⚙诳홖Ý祡ã­â‰–ࣘ殨ᗸé›è¢¤î¥èŽ¼ã—¦î™²ê°­è¯—틹䛎Ꮉ퓞牣襩磴躨༅౉䩥㨋¯ᘮ㮠ìšê¦ä罷놢쥡䩖èŠéœŸášî¹¯ë µè¸§ï¼ë‡¿ç‰¿ã±†â¯®á–€ê¯¨éŒ“ë¦ä–µë…’ë’ŠáŠá¦è¥«â†šæ¹Åˆï¤ àµ»çˆ© [ 271.982680][ T1343] usb 3-1: SerialNumber: syz [ 272.192337][ T1343] cdc_ncm 3-1:1.0: bind() failure [ 272.198444][ T1343] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 272.205381][ T1343] cdc_ncm 3-1:1.1: bind() failure [ 272.211987][ T1343] usb 3-1: USB disconnect, device number 113 [ 272.370119][ T36] audit: type=1326 audit(272.544:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10549 comm="syz.0.3287" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbfe58e929 code=0x0 [ 272.394863][ T603] cdc_ncm 2-1:1.0: bind() failure [ 272.401454][ T603] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 272.408470][ T36] audit: type=1326 audit(272.554:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10549 comm="syz.0.3287" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbfe58e929 code=0x0 [ 272.430990][ T603] cdc_ncm 2-1:1.1: bind() failure [ 272.437693][ T603] usb 2-1: USB disconnect, device number 88 [ 272.576851][T10559] overlayfs: missing 'lowerdir' [ 272.654425][T10568] xt_NFQUEUE: number of total queues is 0 [ 272.660975][T10569] xt_NFQUEUE: number of total queues is 0 [ 272.691755][T10573] overlayfs: failed to resolve './file0': -2 [ 272.700807][T10571] rust_binder: Write failure EFAULT in pid:568 [ 272.718328][T10573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.735400][T10573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.937773][T10590] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 272.937801][T10590] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 272.946395][T10590] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:572 [ 272.956593][T10591] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 272.966192][T10592] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 272.972159][T10592] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 272.980797][T10592] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:572 [ 273.015644][T10595] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1312600406 (21001606496 ns) > initial count (15862642304 ns). Using initial count to start timer. [ 273.094177][T10599] rust_binder: Error while translating object. [ 273.094208][T10599] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 273.100484][T10599] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:581 [ 273.170036][T10603] overlayfs: failed to resolve './file0': -2 [ 273.172201][T10602] overlayfs: failed to resolve './file0': -2 [ 273.179292][ T31] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 273.257657][T10605] overlayfs: disabling nfs_export due to verity=on [ 273.264199][T10605] overlayfs: missing 'lowerdir' [ 273.334316][T10613] rust_binder: Error while translating object. [ 273.334345][T10613] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 273.340614][T10613] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1323 [ 273.347051][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.368154][ T64] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 273.372427][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 273.385322][ T64] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 273.386571][ T31] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 273.419364][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 273.427521][ T31] usb 3-1: SerialNumber: syz [ 273.605859][ T998] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 273.605894][ T995] Bluetooth: hci0: command 0x1003 tx timeout [ 273.745640][ T31] usb 3-1: 0:2 : does not exist [ 273.750617][ T31] usb 3-1: unit 5: unexpected type 0x0a [ 273.758509][ T31] usb 3-1: USB disconnect, device number 114 [ 273.767064][ T886] udevd[886]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 273.795859][ T1343] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 273.947142][ T1343] usb 2-1: unable to get BOS descriptor or descriptor too short [ 273.955260][ T1343] usb 2-1: not running at top speed; connect to a high speed hub [ 273.963929][ T1343] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 273.972095][ T1343] usb 2-1: config 0 has no interface number 0 [ 273.978235][ T1343] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 273.989328][ T1343] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 273.999190][ T1343] usb 2-1: config 0 interface 88 has no altsetting 0 [ 274.006323][ T1343] usb 2-1: language id specifier not provided by device, defaulting to English [ 274.017909][ T1343] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 274.027006][ T1343] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 274.035089][ T1343] usb 2-1: Product: syz [ 274.039279][ T1343] usb 2-1: SerialNumber: syz [ 274.044517][ T1343] usb 2-1: config 0 descriptor?? [ 274.494486][T10654] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3321'. [ 274.505941][ T31] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 274.658299][ T31] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 274.667504][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.675520][ T31] usb 3-1: Product: syz [ 274.679783][ T31] usb 3-1: Manufacturer: syz [ 274.684410][ T31] usb 3-1: SerialNumber: syz [ 274.760864][ T1343] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input43 [ 274.774051][ T1343] usb 2-1: USB disconnect, device number 89 [ 274.796520][T10659] rust_binder: Write failure EFAULT in pid:602 [ 274.831541][T10664] /dev/rnullb0: Can't open blockdev [ 274.844945][T10666] /dev/rnullb0: Can't open blockdev [ 274.868453][T10668] /dev/rnullb0: Can't open blockdev [ 274.890390][T10670] /dev/nullb0: Can't lookup blockdev [ 275.255839][ T64] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 275.289718][ T12] bridge_slave_1: left allmulticast mode [ 275.295439][ T12] bridge_slave_1: left promiscuous mode [ 275.301163][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.308778][ T12] bridge_slave_0: left allmulticast mode [ 275.314525][ T12] bridge_slave_0: left promiscuous mode [ 275.320352][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.382130][T10681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.391171][T10681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.415844][ T64] usb 2-1: Using ep0 maxpacket: 16 [ 275.422899][ T64] usb 2-1: config 0 has no interfaces? [ 275.436249][ T64] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 275.445469][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.453834][ T64] usb 2-1: Product: syz [ 275.458741][ T64] usb 2-1: Manufacturer: syz [ 275.463402][ T64] usb 2-1: SerialNumber: syz [ 275.470358][ T64] usb 2-1: config 0 descriptor?? [ 275.475394][ T12] tipc: Left network mode [ 275.480961][ T12] veth1_macvtap: left promiscuous mode [ 275.486623][ T12] veth0_vlan: left promiscuous mode [ 275.677892][ T64] usb 2-1: USB disconnect, device number 90 [ 276.197369][T10709] can0: slcan on ttyS3. [ 276.216938][T10709] can0 (unregistered): slcan off ttyS3. [ 276.397917][T10744] binder: Binderfs stats mode cannot be changed during a remount [ 276.427573][T10747] input: syz0 as /devices/virtual/input/input44 [ 276.489546][T10754] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 276.489568][T10754] rust_binder: Read failure Err(EFAULT) in pid:1382 [ 276.551874][T10763] UHID_CREATE from different security context by process 1389 (syz.3.3347), this is not allowed. [ 276.851049][T10787] rust_binder: Error in use_page_slow: ESRCH [ 276.851073][T10787] rust_binder: use_range failure ESRCH [ 276.857158][T10787] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 276.862643][T10787] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 276.870587][T10787] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1405 [ 277.340275][T10799] SELinux: policydb version 1700189199 does not match my version range 15-33 [ 277.358391][T10799] SELinux: failed to load policy [ 277.615834][ T31] usb 2-1: new low-speed USB device number 91 using dummy_hcd [ 277.643916][T10804] binder: Unknown parameter 'fscontext?}' [ 277.767048][ T31] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 277.776239][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.785340][ T31] usb 2-1: config 0 descriptor?? [ 277.807345][ T36] audit: type=1400 audit(277.984:757): avc: denied { accept } for pid=10803 comm="syz.3.3361" path="socket:[80345]" dev="sockfs" ino=80345 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 278.067640][ T31] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 278.077726][ T31] asix 2-1:0.0: probe with driver asix failed with error -71 [ 278.086429][ T31] usb 2-1: USB disconnect, device number 91 [ 278.326880][ T31] usb 3-1: USB disconnect, device number 115 [ 278.353229][ T36] audit: type=1400 audit(278.524:758): avc: denied { append } for pid=10808 comm="syz.2.3362" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 278.502603][T10817] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=10817 comm=syz.3.3365 [ 278.517143][T10817] binder: Bad value for 'max' [ 278.582000][T10827] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 278.582502][T10826] rust_binder: Error while translating object. [ 278.593907][T10826] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 278.600486][T10826] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:227 [ 278.667395][T10841] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:663 [ 278.697001][T10844] overlayfs: failed to resolve './file0': -2 [ 278.732212][T10852] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 278.739481][T10852] rust_binder: Write failure EINVAL in pid:234 [ 278.751882][T10844] kvm: pic: non byte write [ 278.775515][T10859] /dev/rnullb0: Can't open blockdev [ 278.883735][T10868] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3383'. [ 278.951527][ T36] audit: type=1400 audit(279.124:759): avc: denied { write } for pid=10874 comm="syz.1.3386" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 278.957247][T10877] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 278.992688][T10881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.011505][T10881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.021436][T10881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.030708][T10881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.040378][T10881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.049796][T10881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.170931][T10891] kvm: pic: non byte write [ 279.234754][T10889] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:677 [ 279.507545][T10899] binder: Bad value for 'stats' [ 279.716695][ T36] audit: type=1400 audit(279.894:760): avc: denied { shutdown } for pid=10908 comm="syz.2.3396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 279.940953][T10925] fuse: Bad value for 'user_id' [ 279.945892][T10925] fuse: Bad value for 'user_id' [ 279.995821][ T31] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 280.067400][T10936] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:681 [ 280.157276][ T31] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 280.177498][ T31] usb 3-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0x4C, changing to 0xC [ 280.189316][ T31] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 108 [ 280.199441][ T31] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 280.208527][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.218884][T10911] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 280.305868][ T9] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 280.349056][T10948] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 280.397365][T10951] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 280.405361][T10951] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 280.412068][T10951] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 280.457317][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 280.472454][ T9] usb 2-1: config 1 interface 0 altsetting 151 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 280.483718][ T9] usb 2-1: config 1 interface 0 altsetting 151 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 280.495129][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 280.503197][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 280.512466][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.520564][ T9] usb 2-1: Product: ㅲ୥몭ä«åŒ“㑷傉î€âŸ·ã•æž¬ï•°ë•Ÿé…³á³Žë¿¢ã ¡î•¿æ¯œå¢ˆâžä®µç«€áªšäŒ¸æªî醆䟨⌇뒋ᕊå²ê”•ì¾¦ì¨»å¥¡ï€›ë­žé¡¶ï‚Šã‹³ [ 280.536014][ T9] usb 2-1: Manufacturer: ⧷⯛࠹糇ꋷ皤乲替谔튈刢߻í°æªŒå†î·Žë”¶ìŸšå‡ì‚‡æŠ¸ì¯Ÿã•‹à°ªëˆæ¸¶Ô¥é¿æ¹¶ì™«ìŸ½ë›¢î±¾å˜˜å—¡ë¦ƒç§§ì–¦ç¡Ÿ [ 280.550914][ T9] usb 2-1: SerialNumber: 驌㜽 [ 280.558359][T10936] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 280.565561][T10936] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 280.720006][ T64] usb 3-1: USB disconnect, device number 116 [ 280.785227][T10936] SELinux: failed to load policy [ 280.791042][T10936] rust_binder: Error while translating object. [ 280.791106][T10936] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 280.797314][T10936] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:681 [ 280.811721][ T9] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 92 if 0 alt 151 proto 1 vid 0x0525 pid 0xA4A8 [ 280.833462][ T9] usb 2-1: USB disconnect, device number 92 [ 280.840292][ T9] usblp0: removed [ 281.288411][T10968] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 281.297333][T10968] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 281.308917][T10968] overlayfs: missing 'lowerdir' [ 281.331520][T10970] deleting an unspecified loop device is not supported. [ 281.339064][T10970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3417'. [ 281.348236][T10970] rust_binder: Error while translating object. [ 281.348263][T10970] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 281.354456][T10970] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1486 [ 281.380048][T10976] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3419'. [ 281.411418][ T46] Bluetooth: hci1: Frame reassembly failed (-84) [ 281.417987][ T12] Bluetooth: hci2: Frame reassembly failed (-84) [ 281.435758][T10981] cgroup2: Unknown parameter 'net' [ 281.494716][ T36] audit: type=1400 audit(281.674:761): avc: denied { create } for pid=10980 comm="syz.1.3421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 281.765865][ T315] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 281.776580][T10986] binder: Unknown parameter 'dirsynC' [ 281.804510][T10990] sit0: entered promiscuous mode [ 281.810655][T10990] netlink: 'syz.2.3425': attribute type 1 has an invalid length. [ 281.818472][T10990] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3425'. [ 281.915948][ T315] usb 2-1: Using ep0 maxpacket: 32 [ 281.922257][ T315] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 281.930647][ T315] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 281.939622][ T315] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 281.948831][ T315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 281.958550][ T315] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 281.968272][ T315] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 281.981286][ T315] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 281.990341][ T315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.998907][ T315] usb 2-1: config 0 descriptor?? [ 282.065811][ T9] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 282.205526][ T315] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 93 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 282.219503][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 282.229514][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 251, changing to 11 [ 282.241060][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 282.252184][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 282.267386][ T9] usb 3-1: string descriptor 0 read error: -22 [ 282.273602][ T9] usb 3-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 282.282681][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.291938][T10990] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 282.446546][T10984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.455131][T10984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.464536][ T31] usb 2-1: USB disconnect, device number 93 [ 282.471321][ T31] usblp0: removed [ 282.501592][ T9] usbhid 3-1:1.0: can't add hid device: -71 [ 282.507611][ T9] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 282.516504][ T9] usb 3-1: USB disconnect, device number 117 [ 283.072130][T11003] rust_binder: Failed to allocate buffer. len:4232, is_oneway:true [ 283.072162][T11003] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 283.080138][T11003] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:692 [ 283.115940][T11006] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 283.343189][T11016] rust_binder: Write failure EINVAL in pid:353 [ 283.345876][ T31] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 283.445857][ T53] Bluetooth: hci2: command 0x1003 tx timeout [ 283.445877][ T995] Bluetooth: hci1: command 0x1003 tx timeout [ 283.445960][ T961] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 283.451928][ T998] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 283.506974][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.517972][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.528232][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 283.541419][ T31] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 283.550663][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.562715][ T31] usb 2-1: config 0 descriptor?? [ 283.593867][T11026] tipc: Enabled bearer , priority 0 [ 283.604313][T11026] tipc: Disabling bearer [ 283.686802][T11030] random: crng reseeded on system resumption [ 283.970186][ T31] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x2 [ 283.977717][ T31] plantronics 0003:047F:FFFF.002C: item fetching failed at offset 9/15 [ 283.986172][ T31] plantronics 0003:047F:FFFF.002C: parse failed [ 283.992480][ T31] plantronics 0003:047F:FFFF.002C: probe with driver plantronics failed with error -22 [ 284.144712][T11039] /dev/rnullb0: Can't open blockdev [ 284.179016][T11010] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:694 [ 284.179531][T11010] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:694 [ 284.191872][ T315] usb 2-1: USB disconnect, device number 94 [ 284.312545][T11048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.321358][T11048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.938938][T11079] rust_binder: Write failure EFAULT in pid:1519 [ 285.030231][ T36] audit: type=1326 audit(285.204:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11090 comm="syz.3.3461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180918e929 code=0x7ff00000 [ 285.053165][ T36] audit: type=1326 audit(285.204:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11090 comm="syz.3.3461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180918e929 code=0x7ff00000 [ 285.075888][ T411] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 285.076558][ T36] audit: type=1326 audit(285.204:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11090 comm="syz.3.3461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180918e929 code=0x7ff00000 [ 285.106681][ T36] audit: type=1326 audit(285.204:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11090 comm="syz.3.3461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180918e929 code=0x7ff00000 [ 285.137818][ T36] audit: type=1326 audit(285.204:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11090 comm="syz.3.3461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180918e929 code=0x7ff00000 [ 285.163573][ T36] audit: type=1326 audit(285.204:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11090 comm="syz.3.3461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180918e929 code=0x7ff00000 [ 285.186604][ T36] audit: type=1326 audit(285.204:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11090 comm="syz.3.3461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180918e929 code=0x7ff00000 [ 285.212303][ T36] audit: type=1326 audit(285.204:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11090 comm="syz.3.3461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180918e929 code=0x7ff00000 [ 285.238341][ T36] audit: type=1326 audit(285.204:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11090 comm="syz.3.3461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180918e929 code=0x7ff00000 [ 285.261269][ T36] audit: type=1326 audit(285.204:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11090 comm="syz.3.3461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180918e929 code=0x7ff00000 [ 285.262014][ T411] usb 2-1: Using ep0 maxpacket: 16 [ 285.293170][ T411] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 285.301285][ T411] usb 2-1: can't read configurations, error -22 [ 285.349151][T11120] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 285.438512][ T411] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 285.520283][T11133] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 285.543968][T11137] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 285.544398][T11140] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:321 [ 285.553756][T11133] kvm: pic: level sensitive irq not supported [ 285.565952][T11133] picdev_read: 77 callbacks suppressed [ 285.565973][T11133] kvm: pic: non byte read [ 285.603249][T11133] kvm: pic: single mode not supported [ 285.603268][T11133] kvm: pic: level sensitive irq not supported [ 285.608879][ T411] usb 2-1: Using ep0 maxpacket: 16 [ 285.620678][T11133] kvm: pic: non byte read [ 285.625244][T11133] kvm: pic: level sensitive irq not supported [ 285.625305][T11133] kvm: pic: non byte read [ 285.638265][ T411] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 285.646378][ T411] usb 2-1: can't read configurations, error -22 [ 285.652873][ T411] usb usb2-port1: attempt power cycle [ 285.995866][ T411] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 286.007022][ T45] usb 4-1: USB disconnect, device number 26 [ 286.016332][ T411] usb 2-1: Using ep0 maxpacket: 16 [ 286.026270][ T411] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 286.034308][ T411] usb 2-1: can't read configurations, error -22 [ 286.175967][ T411] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 286.203993][ T411] usb 2-1: Using ep0 maxpacket: 16 [ 286.211464][ T411] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 286.219796][ T411] usb 2-1: can't read configurations, error -22 [ 286.226528][ T411] usb usb2-port1: unable to enumerate USB device [ 286.280935][T11151] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.288009][T11151] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.295073][T11151] bridge_slave_0: entered allmulticast mode [ 286.301444][T11151] bridge_slave_0: entered promiscuous mode [ 286.307931][T11151] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.314960][T11151] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.322151][T11151] bridge_slave_1: entered allmulticast mode [ 286.328478][T11151] bridge_slave_1: entered promiscuous mode [ 286.390308][T11151] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.397470][T11151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.404786][T11151] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.411889][T11151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.437137][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.444497][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.455748][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.462871][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.472158][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.479286][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.507391][T11151] veth0_vlan: entered promiscuous mode [ 286.521199][T11151] veth1_macvtap: entered promiscuous mode [ 286.528138][T11157] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 286.528164][T11157] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:329 [ 286.564962][T11160] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 287.412543][T11169] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3483'. [ 287.431107][T11169] binder: Bad value for 'max' [ 287.451285][T11171] fuse: blksize only supported for fuseblk [ 287.461821][T11173] 9pnet: Could not find request transport: dno= [ 287.493646][T11180] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 287.493682][T11180] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:13 [ 287.530588][T11184] binder: Unknown parameter 'fscontext?}ê' [ 287.901988][T11187] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3489'. [ 287.987446][T11192] binder: Bad value for 'stats' [ 288.001807][T11197] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3491'. [ 288.300811][T11221] fuse: Unknown parameter 'çroup_id' [ 288.375846][ T31] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 288.385872][ T45] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 288.525864][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 288.532230][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.539617][T11248] rtc_cmos 00:00: Alarms can be up to one day in the future [ 288.543397][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 288.554218][T11247] rtc_cmos 00:00: Alarms can be up to one day in the future [ 288.555637][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.573038][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 288.580082][T11251] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:385 [ 288.582536][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.600473][ T603] rtc_cmos 00:00: Alarms can be up to one day in the future [ 288.607865][ T45] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 288.616083][ T45] usb 3-1: config 0 has no interface number 0 [ 288.622198][ T45] usb 3-1: config 0 interface 184 has no altsetting 0 [ 288.629467][ T603] rtc_cmos 00:00: Alarms can be up to one day in the future [ 288.637124][ T603] rtc_cmos 00:00: Alarms can be up to one day in the future [ 288.644798][ T603] rtc_cmos 00:00: Alarms can be up to one day in the future [ 288.653349][ T31] usb 2-1: config 0 descriptor?? [ 288.658498][ T603] rtc rtc0: __rtc_set_alarm: err=-22 [ 288.664782][ T45] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 288.674218][ T31] hub 2-1:0.0: USB hub found [ 288.678929][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.687097][ T45] usb 3-1: Product: syz [ 288.691297][ T45] usb 3-1: Manufacturer: syz [ 288.695986][ T45] usb 3-1: SerialNumber: syz [ 288.701439][ T45] usb 3-1: config 0 descriptor?? [ 288.709640][ T45] smsc75xx v1.0.0 [ 288.782331][T11262] rust_binder: Error while translating object. [ 288.782372][T11262] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 288.788765][T11262] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:62 [ 288.849188][T11267] fuse: Unknown parameter '' [ 288.864507][T11267] fuse: Unknown parameter '' [ 288.866951][ T31] hub 2-1:0.0: 1 port detected [ 288.902034][T11274] rust_binder: Write failure EFAULT in pid:74 [ 289.056813][T11293] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 289.063044][T11293] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:93 [ 289.129429][T11295] tmpfs: Unknown parameter 'usrquota_inode_hardlimit' [ 289.315865][ T45] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 289.326815][ T45] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 289.479745][ T603] hub 2-1:0.0: activate --> -90 [ 289.569323][T11318] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 289.680777][T11209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.689396][T11209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.698605][ T603] usb 2-1-port1: config error [ 289.877668][T11331] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 289.902532][ T31] usb 2-1: USB disconnect, device number 99 [ 289.979451][T11332] binder: Unknown parameter 'defcontextaK' [ 290.671721][T11336] rust_binder: Write failure EFAULT in pid:134 [ 290.791262][T11343] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:347 [ 291.165831][ T315] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 291.325833][ T315] usb 2-1: Using ep0 maxpacket: 32 [ 291.332317][ T315] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 291.340555][ T315] usb 2-1: config 0 has no interface number 0 [ 291.346700][ T315] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 291.356772][ T315] usb 2-1: config 0 interface 196 has no altsetting 0 [ 291.365057][ T315] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 291.374188][ T315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.382265][ T315] usb 2-1: Product: syz [ 291.386477][ T315] usb 2-1: Manufacturer: syz [ 291.391089][ T315] usb 2-1: SerialNumber: syz [ 291.396592][ T315] usb 2-1: config 0 descriptor?? [ 291.401895][T11349] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 291.500451][T11356] binder: Bad value for 'max' [ 291.506439][T11358] binder: Bad value for 'max' [ 291.543502][T11363] 8021q: VLANs not supported on vcan0 [ 291.549960][T11363] fuse: Unknown parameter 'vd' [ 291.835646][ T45] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 291.877511][ T45] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 291.893238][ T45] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 291.904248][T11386] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3545'. [ 291.912984][ T45] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 291.930621][ T45] usb 3-1: USB disconnect, device number 118 [ 292.013213][T11349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.032344][T11349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.148415][T11406] SELinux: security_context_str_to_sid (unconWined_u) failed with errno=-22 [ 292.166122][T11406] SELinux: security_context_str_to_sid (unconWined_u) failed with errno=-22 [ 292.180664][T11406] SELinux: security_context_str_to_sid (unconWined_u) failed with errno=-22 [ 292.191011][T11406] SELinux: security_context_str_to_sid (unconWined_u) failed with errno=-22 [ 292.200440][T11406] SELinux: security_context_str_to_sid (unconWined_u) failed with errno=-22 [ 292.209939][T11406] SELinux: security_context_str_to_sid (unconWined_u) failed with errno=-22 [ 292.212038][T11410] rust_binder: Error while translating object. [ 292.219013][T11406] SELinux: security_context_str_to_sid (unconWined_u) failed with errno=-22 [ 292.225884][T11410] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 292.234253][T11406] SELinux: security_context_str_to_sid (unconWined_u) failed with errno=-22 [ 292.243851][T11410] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:169 [ 292.252849][T11406] SELinux: security_context_str_to_sid (unconWined_u) failed with errno=-22 [ 292.278848][T11406] SELinux: security_context_str_to_sid (unconWined_u) failed with errno=-22 [ 292.288186][T11406] SELinux: security_context_str_to_sid (unconWined_u) failed with errno=-22 [ 292.300833][T11406] SELinux: security_context_str_to_sid (unconWined_u) failed with errno=-22 [ 292.310099][T11406] SELinux: security_context_str_to_sid (unconWined_u) failed with errno=-22 [ 292.319439][ T315] ipheth 2-1:0.196: ipheth_enable_ncm: usb_control_msg: -110 [ 292.327511][T11406] SELinux: security_context_str_to_sid (unconWined_u) failed with errno=-22 [ 292.338724][ T315] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached [ 292.346744][T11406] SELinux: security_context_str_to_sid (unconWined_u) failed with errno=-22 [ 292.359636][T11406] SELinux: security_context_str_to_sid (unconWined_u) failed with errno=-22 [ 292.369023][T11406] SELinux: security_context_str_to_sid (unconWined_u) failed with errno=-22 [ 292.378375][T11406] SELinux: security_context_str_to_sid (unconWined_u) failed with errno=-22 [ 292.388963][T11406] SELinux: security_context_str_to_sid (unconWined_u) failed with errno=-22 [ 292.399002][T11416] rust_binder: Write failure EFAULT in pid:175 [ 292.422155][T11406] SELinux: security_context_str_to_sid (unconWined_u) failed with errno=-22 [ 292.449328][T11406] SELinux: security_context_str_to_sid (unconWined_u) failed with errno=-22 [ 292.462903][T11406] SELinux: security_context_str_to_sid (unconWined_u) failed with errno=-22 [ 292.474763][T11406] SELinux: security_context_str_to_sid (unconWined_u) failed with errno=-22 [ 292.485956][T11406] SELinux: security_context_str_to_sid (unconWined_u) failed with errno=-22 [ 292.498720][T11406] SELinux: security_context_str_to_sid (unconWined_u) failed with errno=-22 [ 292.510198][T11406] SELinux: security_context_str_to_sid (unconWined_u) failed with errno=-22 [ 292.519944][T11406] SELinux: security_context_str_to_sid (unconWined_u) failed with errno=-22 [ 292.528922][T11406] SELinux: security_context_str_to_sid (unconWined_u) failed with errno=-22 [ 292.537945][T11406] SELinux: security_context_str_to_sid (unconWined_u) failed with errno=-22 [ 292.546889][T11406] SELinux: security_context_str_to_sid (unconWined_u) failed with errno=-22 [ 292.558071][T11406] SELinux: security_context_str_to_sid (unconWined_u) failed with errno=-22 [ 292.572178][T11406] SELinux: security_context_str_to_sid (unconWined_u) failed with errno=-22 [ 292.585974][T11406] SELinux: security_context_str_to_sid (unconWined_u) failed with errno=-22 [ 292.648900][T11442] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 292.649253][T11442] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 292.670802][ C1] ipheth 2-1:0.196: ipheth_rcvbulk_callback: urb status: -75 [ 292.673089][T11442] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 292.687119][T11442] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:412 [ 292.725916][T11448] binder: Bad value for 'stats' [ 292.853670][T11459] netlink: 'syz.0.3564': attribute type 4 has an invalid length. [ 292.877273][T11464] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 292.880447][ T64] usb 2-1: USB disconnect, device number 100 [ 292.936336][ T64] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected [ 293.074584][T11490] Invalid logical block size (524288) [ 293.335860][ T9] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 293.496918][ T9] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 293.506221][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.514972][ T9] usb 3-1: config 0 descriptor?? [ 293.715839][ T64] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 293.865814][ T64] usb 2-1: Using ep0 maxpacket: 16 [ 293.871975][ T64] usb 2-1: config 0 has no interfaces? [ 293.878908][ T64] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 293.887988][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.896000][ T64] usb 2-1: Product: syz [ 293.900180][ T64] usb 2-1: Manufacturer: syz [ 293.904792][ T64] usb 2-1: SerialNumber: syz [ 293.910222][ T64] usb 2-1: config 0 descriptor?? [ 293.925130][ T9] usb 3-1: Cannot set autoneg [ 293.929895][ T9] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 294.117291][ T45] usb 2-1: USB disconnect, device number 101 [ 294.229287][T11517] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 294.250569][T11521] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 294.258549][T11521] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:754 [ 294.281901][ T31] usb 3-1: USB disconnect, device number 119 [ 294.364731][T11528] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 294.364790][T11528] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:385 [ 294.415722][T11530] rust_binder: Write failure EINVAL in pid:759 [ 294.425216][T11530] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:759 [ 294.845814][ T9] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 295.005843][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 295.012223][ T9] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 295.020729][ T9] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 295.029432][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 295.038435][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 295.048143][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 295.057832][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 295.070847][ T9] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 295.079928][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.088619][ T9] usb 2-1: config 0 descriptor?? [ 295.180116][T11557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3587'. [ 295.296952][ T9] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 102 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 295.309322][ T9] usb 2-1: USB disconnect, device number 102 [ 295.316202][ T9] usblp0: removed [ 295.435974][ T315] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 295.587537][ T315] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.597718][ T315] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 295.608099][ T315] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 295.617396][ T315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.625433][ T315] usb 3-1: Product: syz [ 295.629641][ T315] usb 3-1: Manufacturer: syz [ 295.634620][ T315] usb 3-1: SerialNumber: syz [ 296.099293][ T315] usb 3-1: 0:2 : does not exist [ 296.107143][ T315] usb 3-1: USB disconnect, device number 120 [ 296.119885][ T886] udevd[886]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 296.515824][ T64] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 296.655825][ T64] usb 2-1: device descriptor read/64, error -71 [ 296.726093][T11594] fuse: Unknown parameter ' ' [ 296.845833][ T31] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 296.895827][ T64] usb 2-1: device descriptor read/64, error -71 [ 296.995816][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 297.002024][ T31] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 297.010390][ T31] usb 3-1: config 0 has no interface number 0 [ 297.016529][ T31] usb 3-1: config 0 interface 184 has no altsetting 0 [ 297.024706][ T31] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 297.033803][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.041827][ T31] usb 3-1: Product: syz [ 297.046360][ T31] usb 3-1: Manufacturer: syz [ 297.050958][ T31] usb 3-1: SerialNumber: syz [ 297.056333][ T31] usb 3-1: config 0 descriptor?? [ 297.062146][ T31] smsc75xx v1.0.0 [ 297.135835][ T64] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 297.265838][ T64] usb 2-1: device descriptor read/64, error -71 [ 297.505835][ T64] usb 2-1: device descriptor read/64, error -71 [ 297.615975][ T64] usb usb2-port1: attempt power cycle [ 297.663364][ T31] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 297.674304][ T31] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 297.955853][ T64] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 297.976925][ T64] usb 2-1: device descriptor read/8, error -71 [ 298.106926][ T64] usb 2-1: device descriptor read/8, error -71 [ 298.345925][ T64] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 298.367114][ T64] usb 2-1: device descriptor read/8, error -71 [ 298.497140][ T64] usb 2-1: device descriptor read/8, error -71 [ 298.605893][ T64] usb usb2-port1: unable to enumerate USB device [ 298.623597][ T36] kauditd_printk_skb: 59 callbacks suppressed [ 298.623616][ T36] audit: type=1400 audit(299.795:831): avc: denied { write } for pid=45 comm="kworker/1:1" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=87156 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 298.626815][T11605] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3602'. [ 298.664306][T11605] rust_binder: Error while translating object. [ 298.664331][T11605] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 298.670591][T11605] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:190 [ 298.795128][T11611] tmpfs: Unknown parameter 'hug%;Ñys' [ 298.830704][T11616] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3606'. [ 299.304291][T11622] binder: Bad value for 'max' [ 299.338094][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 299.338483][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 299.345150][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 299.351325][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 299.357664][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 299.363706][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 299.371504][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 299.375917][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 299.382474][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 299.388706][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 299.488373][T11589] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:396 [ 299.490257][ T31] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000300: -71 [ 299.510381][ T31] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write ADDR_FILTX: -71 [ 299.520410][ T31] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 299.529929][ T31] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 299.539393][ T31] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 299.548713][ T31] usb 3-1: USB disconnect, device number 121 [ 299.695959][ T9] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 299.847623][ T9] usb 2-1: unable to get BOS descriptor set [ 299.853948][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 299.862590][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 299.874798][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 299.883889][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.891913][ T9] usb 2-1: Product: syz [ 299.896144][ T9] usb 2-1: Manufacturer: ÑŠ [ 299.900667][ T9] usb 2-1: SerialNumber: syz [ 299.906305][T11631] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 300.008513][T11640] bpf: Bad value for 'mode' [ 300.114877][ T36] audit: type=1400 audit(301.285:832): avc: denied { execheap } for pid=11630 comm="syz.1.3611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 300.116642][T11631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.142236][T11631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.152619][ T9] cdc_ncm 2-1:1.0: bind() failure [ 300.158656][ T9] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 300.165461][ T9] cdc_ncm 2-1:1.1: bind() failure [ 300.173087][ T9] usb 2-1: USB disconnect, device number 107 [ 300.610564][T11645] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:472 [ 300.610776][T11645] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3616'. [ 300.660816][T11652] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3618'. [ 300.898761][T11661] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3622'. [ 300.908076][T11661] rust_binder: Error while translating object. [ 300.908110][T11661] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 300.914290][T11661] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:405 [ 300.925904][ T31] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 300.950749][T11664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.959694][T11664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.076058][ T31] usb 2-1: device descriptor read/64, error -71 [ 301.107169][ T46] tipc: Subscription rejected, illegal request [ 301.315871][ T31] usb 2-1: device descriptor read/64, error -71 [ 301.555849][ T31] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 301.686026][ T31] usb 2-1: device descriptor read/64, error -71 [ 301.925046][T11683] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 301.925283][T11683] rust_binder: Failed to allocate buffer. len:4192, is_oneway:false [ 301.931855][ T31] usb 2-1: device descriptor read/64, error -71 [ 301.932322][T11683] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 301.946299][T11683] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:203 [ 301.955828][ T9] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 301.964042][T11683] rust_binder: Write failure EFAULT in pid:203 [ 302.046011][ T31] usb usb2-port1: attempt power cycle [ 302.082615][T11692] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 302.095849][ T9] usb 3-1: device descriptor read/64, error -71 [ 302.345946][ T9] usb 3-1: device descriptor read/64, error -71 [ 302.395839][ T31] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 302.416854][ T31] usb 2-1: device descriptor read/8, error -71 [ 302.546846][ T31] usb 2-1: device descriptor read/8, error -71 [ 302.586028][ T9] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 302.715966][ T9] usb 3-1: device descriptor read/64, error -71 [ 302.785929][ T31] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 302.806880][ T31] usb 2-1: device descriptor read/8, error -71 [ 302.936921][ T31] usb 2-1: device descriptor read/8, error -71 [ 302.955852][ T9] usb 3-1: device descriptor read/64, error -71 [ 303.055828][ T31] usb usb2-port1: unable to enumerate USB device [ 303.067351][ T9] usb usb3-port1: attempt power cycle [ 303.405975][ T9] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 303.426951][ T9] usb 3-1: device descriptor read/8, error -71 [ 303.557490][ T9] usb 3-1: device descriptor read/8, error -71 [ 303.805830][ T9] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 303.827258][ T9] usb 3-1: device descriptor read/8, error -71 [ 303.962682][T11733] binder: Unknown parameter '00000000000000000000' [ 303.976831][ T9] usb 3-1: device descriptor read/8, error -71 [ 304.075318][ T36] audit: type=1400 audit(305.245:833): avc: denied { create } for pid=11741 comm="syz.0.3648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 304.094575][ T9] usb usb3-port1: unable to enumerate USB device [ 304.096179][ T31] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 304.255912][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 304.262116][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.272254][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 304.282564][ T31] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 304.291651][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.299663][ T31] usb 2-1: Product: syz [ 304.303814][ T31] usb 2-1: Manufacturer: syz [ 304.308438][ T31] usb 2-1: SerialNumber: syz [ 304.515542][T11722] tipc: Enabled bearer , priority 8 [ 304.522424][T11722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 304.522782][T11722] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 304.531288][ T31] usb 2-1: 0:2 : does not exist [ 304.545939][ T31] usb 2-1: USB disconnect, device number 112 [ 304.729760][T11747] binder: Unknown parameter '00000000000000000000000' [ 304.748149][T11749] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 304.753996][T11750] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 305.048305][T11774] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:454 [ 305.158533][T11783] fuse: Unknown parameter '0xffffffffffffffff' [ 305.230592][T11790] binder: Unknown parameter 'Àlór|¥O' [ 305.264246][T11779] overlayfs: missing 'lowerdir' [ 305.515692][T11802] binder: Unknown parameter 'defcontext01777777777777777777777' [ 305.524938][T11802] 9pnet: Could not find request transport: rdma [ 305.625891][ T315] tipc: Node number set to 2832816340 [ 306.137501][T11813] fuse: Unknown parameter 'ײ0x0000000000000007' [ 306.150271][ T36] audit: type=1400 audit(307.325:834): avc: denied { setattr } for pid=11151 comm="syz-executor" path="/75/binderfs2/binder_logs/proc/11812" dev="binder" ino=1048943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 306.195858][ T315] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 306.355853][ T315] usb 3-1: Using ep0 maxpacket: 32 [ 306.362289][ T315] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 306.370852][ T315] usb 3-1: config 0 has no interface number 0 [ 306.384545][ T315] usb 3-1: config 0 interface 184 has no altsetting 0 [ 306.400259][ T315] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 306.415819][ T315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.434176][ T315] usb 3-1: Product: syz [ 306.440230][ T315] usb 3-1: Manufacturer: syz [ 306.456306][ T315] usb 3-1: SerialNumber: syz [ 306.462496][ T315] usb 3-1: config 0 descriptor?? [ 306.476491][ T315] smsc75xx v1.0.0 [ 306.588490][T11823] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 306.588532][T11823] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:836 [ 307.035838][ T1343] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 307.207901][ T1343] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.218883][ T1343] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.228888][ T1343] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 307.241972][ T1343] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 307.251221][ T1343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.266089][ T1343] usb 2-1: config 0 descriptor?? [ 307.488199][ T315] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 307.500093][ T315] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 307.577748][ T315] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 307.590696][ T315] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 307.600738][ T315] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 307.611394][ T315] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 307.620997][ T315] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 307.633897][ T315] usb 3-1: USB disconnect, device number 126 [ 307.677682][ T1343] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x6 [ 307.685373][ T1343] plantronics 0003:047F:FFFF.002D: No inputs registered, leaving [ 307.698958][ T1343] plantronics 0003:047F:FFFF.002D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 307.938930][ T1343] usb 2-1: USB disconnect, device number 113 [ 308.601702][T11860] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:480 [ 308.745818][ T1343] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 308.915812][ T1343] usb 2-1: Using ep0 maxpacket: 16 [ 308.922183][ T1343] usb 2-1: config 0 has no interfaces? [ 308.929386][ T1343] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 308.938528][ T1343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.946781][ T1343] usb 2-1: Product: syz [ 308.950959][ T1343] usb 2-1: Manufacturer: syz [ 308.955570][ T1343] usb 2-1: SerialNumber: syz [ 308.966312][ T1343] usb 2-1: config 0 descriptor?? [ 308.975925][ T64] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 309.145800][ T64] usb 3-1: Using ep0 maxpacket: 32 [ 309.152099][ T64] usb 3-1: config 0 has an invalid interface number: 97 but max is 0 [ 309.160497][ T64] usb 3-1: config 0 has no interface number 0 [ 309.166787][ T64] usb 3-1: config 0 interface 97 has no altsetting 0 [ 309.174398][ T1343] usb 2-1: USB disconnect, device number 114 [ 309.174936][ T64] usb 3-1: New USB device found, idVendor=04e6, idProduct=000a, bcdDevice= 2.00 [ 309.190695][ T64] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.198886][ T64] usb 3-1: Product: syz [ 309.203075][ T64] usb 3-1: Manufacturer: syz [ 309.216221][ T64] usb 3-1: SerialNumber: syz [ 309.221899][ T64] usb 3-1: config 0 descriptor?? [ 309.454454][ T64] usb-storage 3-1:0.97: USB Mass Storage device detected [ 309.529970][ T64] usb 3-1: USB disconnect, device number 127 [ 309.537194][ T886] udevd[886]: setting owner of /dev/bus/usb/003/127 to uid=0, gid=0 failed: No such file or directory [ 309.819728][T11873] rust_binder: Write failure EINVAL in pid:855 [ 309.820496][T11874] rust_binder: Write failure EINVAL in pid:855 [ 309.844660][ T884] Bluetooth: hci1: Frame reassembly failed (-84) [ 310.123713][T11882] rust_binder: Write failure EFAULT in pid:489 [ 310.316280][T11890] netlink: 'syz.2.3698': attribute type 16 has an invalid length. [ 310.355892][T11890] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.3698'. [ 311.399719][T11905] binder: Bad value for 'defcontext' [ 311.538853][T11918] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 311.562322][T11918] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:514 [ 311.629342][T11921] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 311.845825][ T995] Bluetooth: hci1: command 0x1003 tx timeout [ 311.845819][ T998] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 311.882599][T11935] rust_binder: Write failure EINVAL in pid:862 [ 312.135836][ T1343] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 312.281325][ T1343] usb 2-1: device descriptor read/64, error -71 [ 312.548139][ T1343] usb 2-1: device descriptor read/64, error -71 [ 312.795864][ T1343] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 312.935843][ T1343] usb 2-1: device descriptor read/64, error -71 [ 313.195838][ T1343] usb 2-1: device descriptor read/64, error -71 [ 313.305935][ T1343] usb usb2-port1: attempt power cycle [ 313.609352][T11943] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 313.655839][ T1343] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 313.696907][ T1343] usb 2-1: device descriptor read/8, error -71 [ 313.826922][ T1343] usb 2-1: device descriptor read/8, error -71 [ 313.989660][ T36] audit: type=1400 audit(315.165:835): avc: denied { mounton } for pid=11950 comm="syz.2.3717" path="/175/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 314.075873][ T1343] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 314.096930][ T1343] usb 2-1: device descriptor read/8, error -71 [ 314.226948][ T1343] usb 2-1: device descriptor read/8, error -71 [ 314.336839][ T1343] usb usb2-port1: unable to enumerate USB device [ 314.875386][T11958] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 314.875618][T11958] rust_binder: Error while translating object. [ 314.882387][T11958] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 314.888794][T11958] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:544 [ 314.913895][T11962] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 314.940198][T11966] netlink: 'syz.2.3720': attribute type 4 has an invalid length. [ 314.957506][T11968] rust_binder: Write failure EFAULT in pid:869 [ 315.012272][ T36] audit: type=1400 audit(316.185:836): avc: denied { read } for pid=11971 comm="syz.2.3724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 315.050720][T11974] binder: Binderfs stats mode cannot be changed during a remount [ 315.056342][T11976] SELinux: policydb table sizes (0,7) do not match mine (8,7) [ 315.067086][T11976] SELinux: failed to load policy [ 315.075886][T11977] SELinux: policydb table sizes (0,7) do not match mine (8,7) [ 315.086911][T11977] SELinux: failed to load policy [ 315.166699][T11985] rust_binder: Failed to allocate buffer. len:18446744073709551064, is_oneway:false [ 315.166728][T11985] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 315.176264][T11985] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:877 [ 315.211038][T11989] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 316.296856][ T1343] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 316.455794][ T1343] usb 3-1: Using ep0 maxpacket: 8 [ 316.461970][ T1343] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 316.484796][ T1343] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 316.495747][ T1343] usb 3-1: config 1 has no interface number 1 [ 316.502966][ T1343] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 316.517327][ T1343] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 316.526566][ T1343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.534583][ T1343] usb 3-1: Product: syz [ 316.539107][ T1343] usb 3-1: Manufacturer: syz [ 316.543728][ T1343] usb 3-1: SerialNumber: syz [ 316.760942][ T1343] usb 3-1: 2:1 : unsupported format bits 0x80 [ 316.777267][ T1343] usb 3-1: USB disconnect, device number 3 [ 316.791672][ T886] udevd[886]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 317.300097][T12037] rust_binder: Error in use_page_slow: ESRCH [ 317.300124][T12037] rust_binder: use_range failure ESRCH [ 317.307426][T12037] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 317.314689][T12037] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 317.324504][T12037] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:572 [ 317.436227][T12052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 317.469796][T12055] SELinux: Context system_u:object_r:etc_mail_t:s0 is not valid (left unmapped). [ 317.493309][T12045] rust_binder: Error while translating object. [ 317.493340][T12045] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 317.499866][T12045] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:541 [ 317.509468][ T36] audit: type=1400 audit(2000000002.380:837): avc: denied { relabelto } for pid=12054 comm="syz.2.3755" name="file0" dev="tmpfs" ino=1053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:etc_mail_t:s0" [ 317.552086][ T36] audit: type=1400 audit(2000000002.380:838): avc: denied { associate } for pid=12054 comm="syz.2.3755" name="file0" dev="tmpfs" ino=1053 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:etc_mail_t:s0" [ 317.749056][T12055] rust_binder: Write failure EFAULT in pid:582 [ 318.261607][ T36] audit: type=1400 audit(2000000003.130:839): avc: denied { unlink } for pid=9645 comm="syz-executor" name="file0" dev="tmpfs" ino=1053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:etc_mail_t:s0" [ 318.299706][T12062] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 318.299986][T12062] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:584 [ 319.066810][ T36] audit: type=1400 audit(2000000003.940:840): avc: denied { setattr } for pid=12077 comm="syz.0.3763" name="IEEE-802.15.4-RAW" dev="sockfs" ino=90795 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 319.576197][T12094] fuse: Bad value for 'fd' [ 319.724644][T12097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.749439][T12097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.955872][ T45] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 320.031572][T12103] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 320.036011][T12103] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 320.052594][T12103] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 320.062158][T12103] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:563 [ 320.115801][ T45] usb 3-1: device descriptor read/64, error -71 [ 320.395816][ T45] usb 3-1: device descriptor read/64, error -71 [ 320.508301][T12122] kvm: pic: non byte write [ 320.645814][ T45] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 320.716330][T12127] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 320.716371][T12127] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:921 [ 320.785818][ T45] usb 3-1: device descriptor read/64, error -71 [ 321.046019][ T45] usb 3-1: device descriptor read/64, error -71 [ 321.065817][ T315] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 321.165976][ T45] usb usb3-port1: attempt power cycle [ 321.216245][ T315] usb 2-1: too many configurations: 166, using maximum allowed: 8 [ 321.225242][ T315] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 321.233173][ T315] usb 2-1: can't read configurations, error -61 [ 321.385865][ T315] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 321.535800][ T45] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 321.556914][ T45] usb 3-1: device descriptor read/8, error -71 [ 321.566177][ T315] usb 2-1: too many configurations: 166, using maximum allowed: 8 [ 321.575135][ T315] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 321.583034][ T315] usb 2-1: can't read configurations, error -61 [ 321.589628][ T315] usb usb2-port1: attempt power cycle [ 321.686855][ T45] usb 3-1: device descriptor read/8, error -71 [ 321.925837][ T45] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 321.945819][ T315] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 321.946841][ T45] usb 3-1: device descriptor read/8, error -71 [ 321.965378][T12132] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.972505][T12132] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.979922][T12132] bridge_slave_0: entered allmulticast mode [ 321.986101][ T315] usb 2-1: too many configurations: 166, using maximum allowed: 8 [ 321.986567][T12132] bridge_slave_0: entered promiscuous mode [ 321.995144][ T315] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 322.001104][T12132] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.007651][ T315] usb 2-1: can't read configurations, error -61 [ 322.015210][T12132] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.027952][T12132] bridge_slave_1: entered allmulticast mode [ 322.034294][T12132] bridge_slave_1: entered promiscuous mode [ 322.083089][T12132] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.090162][T12132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.096907][ T45] usb 3-1: device descriptor read/8, error -71 [ 322.097484][T12132] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.110568][T12132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.133036][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.140341][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.149937][ T884] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.157006][ T884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.166510][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.173552][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.181325][ T315] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 322.204292][T12132] veth0_vlan: entered promiscuous mode [ 322.210520][ T315] usb 2-1: too many configurations: 166, using maximum allowed: 8 [ 322.216133][ T45] usb usb3-port1: unable to enumerate USB device [ 322.219640][ T315] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 322.229316][T12132] veth1_macvtap: entered promiscuous mode [ 322.232318][ T315] usb 2-1: can't read configurations, error -61 [ 322.245048][ T315] usb usb2-port1: unable to enumerate USB device [ 322.435557][T12144] rust_binder: inc_ref_done called when no active inc_refs [ 322.591080][T12146] can: request_module (can-proto-0) failed. [ 323.130678][T12159] Unsupported ieee802154 address type: 0 [ 323.358248][ T884] Bluetooth: hci1: Frame reassembly failed (-84) [ 323.922993][ T36] audit: type=1400 audit(2000000008.790:841): avc: denied { watch } for pid=12190 comm="syz.1.3799" path="/327/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 324.255844][ T64] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 324.379017][T12198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3801'. [ 324.387976][ T64] usb 2-1: device descriptor read/64, error -71 [ 324.399783][T12198] rust_binder: Write failure EINVAL in pid:630 [ 324.407543][T12198] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 324.413747][T12198] rust_binder: Read failure Err(EFAULT) in pid:630 [ 324.625811][ T64] usb 2-1: device descriptor read/64, error -71 [ 324.886725][ T64] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 325.015811][ T64] usb 2-1: device descriptor read/64, error -71 [ 325.087143][T12214] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.087471][T12214] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 325.087968][T12213] netlink: 'syz.2.3807': attribute type 4 has an invalid length. [ 325.094007][T12214] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 325.102534][T12213] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3807'. [ 325.110734][T12214] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:585 [ 325.144385][T12217] /dev/md0: Can't lookup blockdev [ 325.159125][T12216] /dev/md0: Can't lookup blockdev [ 325.186986][T12229] fuseblk: Bad value for 'blksize' [ 325.255843][ T64] usb 2-1: device descriptor read/64, error -71 [ 325.280457][T12256] binder: Unknown parameter 'defcontext01777777777777777777777' [ 325.365825][ T998] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 325.365862][ T995] Bluetooth: hci1: command 0x1003 tx timeout [ 325.373820][ T64] usb usb2-port1: attempt power cycle [ 325.745808][ T64] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 325.766869][ T64] usb 2-1: device descriptor read/8, error -71 [ 325.834266][T12294] /dev/rnullb0: Can't open blockdev [ 325.874896][T12299] rust_binder: Error in use_page_slow: ESRCH [ 325.874917][T12299] rust_binder: use_range failure ESRCH [ 325.882203][T12299] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 325.887836][T12299] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 325.895829][T12299] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:661 [ 325.905962][ T64] usb 2-1: device descriptor read/8, error -71 [ 326.034406][T12307] netlink: 'syz.2.3839': attribute type 4 has an invalid length. [ 326.045111][T12307] netlink: 'syz.2.3839': attribute type 4 has an invalid length. [ 326.165967][ T64] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 326.206794][ T64] usb 2-1: device descriptor read/8, error -71 [ 326.346899][ T64] usb 2-1: device descriptor read/8, error -71 [ 326.465913][ T64] usb usb2-port1: unable to enumerate USB device [ 326.659852][T12319] rust_binder: Failed copying remainder into alloc: EFAULT [ 326.659882][T12319] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 326.667291][T12319] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 326.675567][T12319] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:51 [ 326.875707][T12331] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 326.946446][T12331] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 326.955310][T12333] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 326.984978][T12335] rust_binder: Error while translating object. [ 326.985012][T12335] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 326.991301][T12335] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:933 [ 327.295817][ T31] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 327.455811][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 327.462246][ T31] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 193, changing to 11 [ 327.474333][ T31] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.484354][ T31] usb 2-1: config 0 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 327.497632][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 327.504316][ T31] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 327.513731][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.523862][ T31] usb 2-1: config 0 descriptor?? [ 327.733622][T12337] netlink: 2885 bytes leftover after parsing attributes in process `syz.1.3849'. [ 327.748829][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 327.754932][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 327.765060][ T31] usb 2-1: USB disconnect, device number 127 [ 327.995510][T12342] rust_binder: Error while translating object. [ 327.995552][T12342] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 328.002114][T12342] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:69 [ 328.036604][T12344] overlayfs: failed to resolve '?': -2 [ 328.051980][T12344] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:71 [ 328.052100][T12344] rust_binder: Write failure EINVAL in pid:71 [ 328.061421][T12344] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 328.075090][T12344] rust_binder: Write failure EINVAL in pid:71 [ 328.405821][ T31] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 328.566936][ T31] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 328.575272][ T31] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 328.587076][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 328.604812][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 328.618780][ T31] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 328.632284][ T31] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 328.641591][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.650743][ T31] usb 6-1: config 0 descriptor?? [ 328.657125][T12348] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 328.768757][T12360] kvm: pic: non byte write [ 328.835194][ T36] audit: type=1400 audit(2000000013.700:842): avc: denied { mounton } for pid=12362 comm="syz.0.3859" path="/file0" dev="ramfs" ino=94376 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 329.066457][ T31] plantronics 0003:047F:FFFF.002E: unknown main item tag 0xd [ 329.075612][ T31] plantronics 0003:047F:FFFF.002E: No inputs registered, leaving [ 329.086480][ T31] plantronics 0003:047F:FFFF.002E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 329.178118][T12379] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 329.381050][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 329.436375][T12390] bpf: Bad value for 'mode' [ 329.456147][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 329.515816][ T45] usb 2-1: device descriptor read/64, error -71 [ 329.618983][T12394] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 329.619005][T12394] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 329.627031][T12394] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:75 [ 329.755833][ T45] usb 2-1: device descriptor read/64, error -71 [ 330.005824][ T45] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 330.135832][ T45] usb 2-1: device descriptor read/64, error -71 [ 330.326669][T12392] Bluetooth: hci0: Opcode 0x1003 failed: -4 [ 330.360175][T12409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3876'. [ 330.376390][ T45] usb 2-1: device descriptor read/64, error -71 [ 330.495903][ T45] usb usb2-port1: attempt power cycle [ 330.625796][ T315] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 330.786920][ T315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 330.796690][ T315] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 330.808477][ T315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 97, changing to 7 [ 330.819572][ T315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 24929, setting to 1024 [ 330.832346][ T315] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 330.841640][ T315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.845104][ T45] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 330.849909][ T315] usb 3-1: Product: syz [ 330.861458][ T315] usb 3-1: Manufacturer: syz [ 330.866221][ T315] usb 3-1: SerialNumber: syz [ 330.872199][ T315] usb 3-1: config 0 descriptor?? [ 330.880742][ T315] usb 3-1: 0:0 : invalid sync pipe. bmAttributes 61, bLength 9, bSynchAddress 61 [ 330.886818][ T45] usb 2-1: device descriptor read/8, error -71 [ 331.026949][ T45] usb 2-1: device descriptor read/8, error -71 [ 331.194242][ T315] usb 3-1: USB disconnect, device number 8 [ 331.224899][ T1035] usb 6-1: USB disconnect, device number 2 [ 331.275804][ T45] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 331.296879][ T45] usb 2-1: device descriptor read/8, error -71 [ 331.436799][ T45] usb 2-1: device descriptor read/8, error -71 [ 331.545907][ T45] usb usb2-port1: unable to enumerate USB device [ 332.334691][T12437] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.334783][T12436] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.537416][ T36] audit: type=1326 audit(2000000017.410:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12423 comm="syz.2.3881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750dd8e929 code=0x7fc00000 [ 332.567555][ T45] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 332.577040][ T36] audit: type=1326 audit(2000000017.410:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12423 comm="syz.2.3881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f750dd8e929 code=0x7fc00000 [ 332.603209][ T36] audit: type=1326 audit(2000000017.410:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12423 comm="syz.2.3881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750dd8e929 code=0x7fc00000 [ 332.626868][ T36] audit: type=1326 audit(2000000017.410:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12423 comm="syz.2.3881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750dd8e929 code=0x7fc00000 [ 332.650658][ T36] audit: type=1326 audit(2000000017.410:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12423 comm="syz.2.3881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750dd8e929 code=0x7fc00000 [ 332.674812][ T36] audit: type=1326 audit(2000000017.410:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12423 comm="syz.2.3881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750dd8e929 code=0x7fc00000 [ 332.698486][ T36] audit: type=1326 audit(2000000017.410:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12423 comm="syz.2.3881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750dd8e929 code=0x7fc00000 [ 332.699298][T12451] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 332.722113][ T36] audit: type=1326 audit(2000000017.410:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12423 comm="syz.2.3881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750dd8e929 code=0x7fc00000 [ 332.753353][ T36] audit: type=1326 audit(2000000017.410:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12423 comm="syz.2.3881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750dd8e929 code=0x7fc00000 [ 332.776985][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 332.783409][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.794425][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.806107][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 332.819859][ T45] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 332.829519][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.841003][ T45] usb 2-1: config 0 descriptor?? [ 333.256368][ T45] microsoft 0003:045E:07DA.002F: unexpected long global item [ 333.264732][ T45] microsoft 0003:045E:07DA.002F: parse failed [ 333.271064][ T45] microsoft 0003:045E:07DA.002F: probe with driver microsoft failed with error -22 [ 333.336733][ T1035] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 333.466951][T12432] rust_binder: Error while translating object. [ 333.466990][T12432] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 333.473268][T12432] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:953 [ 333.483577][ T9] usb 2-1: USB disconnect, device number 6 [ 333.498939][ T1035] usb 6-1: Using ep0 maxpacket: 32 [ 333.508368][ T1035] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 333.528451][ T1035] usb 6-1: config 0 has no interface number 0 [ 333.534580][ T1035] usb 6-1: config 0 interface 184 has no altsetting 0 [ 333.542987][ T1035] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 333.575812][ T1035] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.583871][ T1035] usb 6-1: Product: syz [ 333.591932][ T1035] usb 6-1: Manufacturer: syz [ 333.596607][ T1035] usb 6-1: SerialNumber: syz [ 333.604762][ T1035] usb 6-1: config 0 descriptor?? [ 333.612940][ T1035] smsc75xx v1.0.0 [ 334.222307][ T1035] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 334.235842][ T1035] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 334.439859][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 334.439879][ T36] audit: type=1400 audit(2000000019.310:859): avc: denied { getattr } for pid=12494 comm="syz.2.3904" name="/" dev="incremental-fs" ino=1364 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 334.445829][ T315] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 334.477648][T12469] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.478133][T12469] rust_binder: Error in use_page_slow: ESRCH [ 334.484615][T12469] rust_binder: use_range failure ESRCH [ 334.490855][T12469] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 334.496433][T12469] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 334.504421][T12469] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:106 [ 334.515613][ T1035] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 334.536105][ T1035] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 334.553769][ T1035] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 334.564170][ T1035] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 334.573678][ T1035] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 334.586404][ T1035] usb 6-1: USB disconnect, device number 3 [ 334.655826][ T315] usb 2-1: Using ep0 maxpacket: 16 [ 334.662195][ T315] usb 2-1: config 0 has no interfaces? [ 334.674618][ T315] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 334.696071][ T315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.704104][ T315] usb 2-1: Product: syz [ 334.708524][ T315] usb 2-1: Manufacturer: syz [ 334.713154][ T315] usb 2-1: SerialNumber: syz [ 334.722042][ T315] usb 2-1: config 0 descriptor?? [ 334.931341][T12499] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.938482][T12499] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.945568][T12499] bridge_slave_0: entered allmulticast mode [ 334.951996][T12499] bridge_slave_0: entered promiscuous mode [ 334.960919][T12499] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.968069][T12499] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.975166][T12499] bridge_slave_1: entered allmulticast mode [ 334.981838][T12499] bridge_slave_1: entered promiscuous mode [ 335.015223][ T31] usb 2-1: USB disconnect, device number 7 [ 335.084753][T12499] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.091866][T12499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.099259][T12499] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.106395][T12499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.146846][ T884] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.154301][ T884] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.171299][ T884] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.178452][ T884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.190902][ T884] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.198008][ T884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.231979][T12499] veth0_vlan: entered promiscuous mode [ 335.248368][T12499] veth1_macvtap: entered promiscuous mode [ 335.300531][T12507] rust_binder: Error in use_page_slow: ESRCH [ 335.300559][T12507] rust_binder: use_range failure ESRCH [ 335.306713][T12507] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 335.312267][T12507] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 335.320303][T12507] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:2 [ 335.618045][T12517] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3912'. [ 335.785832][ T45] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 335.863540][T12525] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:118 [ 335.907223][ T36] audit: type=1326 audit(2000000020.780:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12528 comm="syz.5.3914" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2631f8e929 code=0x0 [ 335.955811][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 335.962490][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.985121][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 336.009991][ T45] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 336.024623][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.032908][ T45] usb 2-1: Product: syz [ 336.038641][ T45] usb 2-1: Manufacturer: syz [ 336.043342][ T45] usb 2-1: SerialNumber: syz [ 336.085569][T12530] kvm: pic: non byte write [ 336.252011][ T45] usb 2-1: 0:2 : does not exist [ 336.267215][ T45] usb 2-1: USB disconnect, device number 8 [ 336.284057][ T886] udevd[886]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 336.305105][T12533] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 336.472581][ T36] audit: type=1400 audit(2000000021.340:861): avc: denied { accept } for pid=12534 comm="syz.6.3916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 336.758364][ T36] audit: type=1400 audit(2000000021.630:862): avc: denied { execute } for pid=12552 comm="syz.5.3920" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 336.782877][T12553] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.783025][T12553] rust_binder: Error in use_page_slow: ESRCH [ 336.790020][T12553] rust_binder: use_range failure ESRCH [ 336.797142][T12553] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 336.802651][T12553] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 336.811036][T12553] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:126 [ 336.860651][T12557] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 336.925857][ T45] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 337.034469][T12564] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 337.034744][T12564] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 337.041272][T12564] rust_binder: Read failure Err(EFAULT) in pid:133 [ 337.065809][ T45] usb 7-1: device descriptor read/64, error -71 [ 337.150246][T12569] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 337.150277][T12569] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 337.159877][T12569] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:136 [ 337.169617][T12571] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:973 [ 337.211321][T12576] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 337.221139][T12576] rust_binder: Error in use_page_slow: ESRCH [ 337.228313][T12576] rust_binder: use_range failure ESRCH [ 337.234382][T12576] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 337.240306][T12576] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 337.248550][T12576] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:138 [ 337.283879][ T36] audit: type=1400 audit(2000000022.150:863): avc: denied { search } for pid=12577 comm="syz.5.3930" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 337.326058][ T45] usb 7-1: device descriptor read/64, error -71 [ 337.475801][ T31] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 337.575846][ T45] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 337.617833][ T13] bridge_slave_1: left allmulticast mode [ 337.623554][ T13] bridge_slave_1: left promiscuous mode [ 337.639805][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.647660][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.657868][ T31] usb 2-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 337.667424][ T13] bridge_slave_0: left allmulticast mode [ 337.673179][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.681294][ T13] bridge_slave_0: left promiscuous mode [ 337.689379][ T31] usb 2-1: config 0 descriptor?? [ 337.698476][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.725819][ T45] usb 7-1: device descriptor read/64, error -71 [ 337.881818][ T13] veth1_macvtap: left promiscuous mode [ 337.887509][ T13] veth0_vlan: left promiscuous mode [ 337.990007][T12581] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.997172][ T45] usb 7-1: device descriptor read/64, error -71 [ 338.003557][T12581] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.011643][T12581] bridge_slave_0: entered allmulticast mode [ 338.021947][T12581] bridge_slave_0: entered promiscuous mode [ 338.029293][T12581] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.036712][T12581] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.044053][T12581] bridge_slave_1: entered allmulticast mode [ 338.050913][T12581] bridge_slave_1: entered promiscuous mode [ 338.097229][ T31] betop 0003:11C0:5506.0030: collection stack underflow [ 338.104245][ T31] betop 0003:11C0:5506.0030: item 0 4 0 12 parsing failed [ 338.112440][ T45] usb usb7-port1: attempt power cycle [ 338.131071][ T31] betop 0003:11C0:5506.0030: parse failed [ 338.145796][ T31] betop 0003:11C0:5506.0030: probe with driver betop failed with error -22 [ 338.189545][T12581] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.196706][T12581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.204020][T12581] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.211120][T12581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.238355][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.245730][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.259035][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.266220][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.276967][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.284030][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.312527][T12573] rust_binder: Error while translating object. [ 338.312569][T12573] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 338.320627][T12581] veth0_vlan: entered promiscuous mode [ 338.325980][T12574] rust_binder: Error while translating object. [ 338.335580][T12573] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:975 [ 338.340500][T12581] veth1_macvtap: entered promiscuous mode [ 338.355856][T12574] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 338.356646][T12574] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:975 [ 338.367499][ T31] usb 2-1: USB disconnect, device number 9 [ 338.424673][T12586] rust_binder: Write failure EFAULT in pid:2 [ 338.465851][ T45] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 338.516942][ T45] usb 7-1: device descriptor read/8, error -71 [ 338.545299][T12588] overlay: filesystem on ./bus not supported as upperdir [ 338.564242][T12588] netlink: 112 bytes leftover after parsing attributes in process `syz.7.3934'. [ 338.646816][ T45] usb 7-1: device descriptor read/8, error -71 [ 338.653802][T12592] netlink: 'syz.7.3935': attribute type 16 has an invalid length. [ 338.661784][T12592] netlink: 64138 bytes leftover after parsing attributes in process `syz.7.3935'. [ 338.890606][ T45] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 338.916803][ T45] usb 7-1: device descriptor read/8, error -71 [ 339.056838][ T45] usb 7-1: device descriptor read/8, error -71 [ 339.165969][ T45] usb usb7-port1: unable to enumerate USB device [ 339.285652][T12619] rust_binder: Error in use_page_slow: ESRCH [ 339.285677][T12619] rust_binder: use_range failure ESRCH [ 339.293275][T12619] rust_binder: Failed to allocate buffer. len:128, is_oneway:true [ 339.299541][T12619] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 339.308997][T12619] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:23 [ 339.451069][T12632] rust_binder: Error while translating object. [ 339.451103][T12632] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 339.457432][T12632] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:36 [ 339.494581][T12634] net_ratelimit: 10 callbacks suppressed [ 339.494608][T12634] sock: sock_set_timeout: `syz.7.3948' (pid 12634) tries to set negative timeout [ 339.570924][T12640] /dev/nbd1: Can't lookup blockdev [ 339.831382][ T315] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 339.969492][T12665] input: syz0 as /devices/virtual/input/input54 [ 339.995845][ T315] usb 2-1: Using ep0 maxpacket: 16 [ 340.002605][ T315] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 340.013495][ T315] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 340.025242][ T315] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 340.034632][ T315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.042850][ T315] usb 2-1: Product: syz [ 340.047263][ T315] usb 2-1: Manufacturer: syz [ 340.051886][ T315] usb 2-1: SerialNumber: syz [ 340.137319][T12672] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 340.215828][ T64] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 340.237782][T12678] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=12678 comm=syz.7.3966 [ 340.375794][ T64] usb 7-1: Using ep0 maxpacket: 16 [ 340.386571][ T64] usb 7-1: config index 0 descriptor too short (expected 12336, got 155) [ 340.395252][ T64] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.405543][ T64] usb 7-1: config 0 has no interfaces? [ 340.412876][ T64] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 340.422402][ T64] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.430695][ T64] usb 7-1: Product: syz [ 340.435031][ T64] usb 7-1: Manufacturer: syz [ 340.439973][ T64] usb 7-1: SerialNumber: syz [ 340.445605][ T64] usb 7-1: config 0 descriptor?? [ 340.655442][ T64] usb 7-1: USB disconnect, device number 6 [ 340.667555][T12667] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3961'. [ 340.795856][T12682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.805422][T12682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.016811][T12682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.026393][T12682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.189739][T12694] syzkaller0: entered promiscuous mode [ 341.195291][T12694] syzkaller0: entered allmulticast mode [ 341.492570][ T36] audit: type=1400 audit(2000000026.360:864): avc: denied { create } for pid=12712 comm="syz.6.3977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 341.665786][T12732] tun0: tun_chr_ioctl cmd 1074025675 [ 341.680345][T12732] tun0: persist disabled [ 341.689057][T12734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.698078][T12734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.769708][ T36] audit: type=1326 audit(2000000026.640:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12735 comm="syz.6.3983" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efedf58e929 code=0x0 [ 342.254403][T12743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3985'. [ 342.342543][T12741] rust_binder: Error while translating object. [ 342.342593][T12741] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 342.350318][T12741] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:75 [ 342.409506][T12751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.427371][T12749] 9pnet_fd: Insufficient options for proto=fd [ 342.436417][T12751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.529240][T12754] tipc: Started in network mode [ 342.536253][T12754] tipc: Node identity 4, cluster identity 4711 [ 342.542632][T12754] tipc: Node number set to 4 [ 342.905830][ T64] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 343.057015][ T64] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.073818][ T64] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 343.083323][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.095926][ T64] usb 7-1: config 0 descriptor?? [ 343.303023][T12761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.316179][T12761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.324449][T12761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.348485][T12761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.357917][T12761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.367700][T12761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.377197][T12761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.387145][T12761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.397734][T12761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.409689][T12761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.432873][ T64] usbhid 7-1:0.0: can't add hid device: -71 [ 343.461086][ T64] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 343.482417][ T64] usb 7-1: USB disconnect, device number 7 [ 343.529861][T12779] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 343.529892][T12779] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 343.539018][T12779] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:84 [ 343.723673][ T36] audit: type=1400 audit(2000000028.590:866): avc: denied { mounton } for pid=12792 comm="syz.1.4003" path="/proc/1037/ns/mnt" dev="proc" ino=98467 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lnk_file permissive=1 [ 343.896570][T12807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.905648][T12807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.065847][ T64] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 344.215812][ T64] usb 7-1: Using ep0 maxpacket: 8 [ 344.222189][ T64] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 344.235425][ T64] usb 7-1: config 0 interface 0 has no altsetting 0 [ 344.242325][ T64] usb 7-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 344.251689][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.261316][ T64] usb 7-1: config 0 descriptor?? [ 344.674002][ T64] uclogic 0003:5543:0042.0031: unbalanced delimiter at end of report description [ 344.694697][ T64] uclogic 0003:5543:0042.0031: parse failed [ 344.707823][ T64] uclogic 0003:5543:0042.0031: probe with driver uclogic failed with error -22 [ 344.870679][ T64] usb 7-1: USB disconnect, device number 8 [ 345.138130][ T315] usb 2-1: skipping empty audio interface (v1) [ 345.147514][ T315] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 345.163300][ T886] udevd[886]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 345.385651][T12813] rust_binder: Error while translating object. [ 345.385697][T12813] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 345.405984][T12814] rust_binder: Error while translating object. [ 345.425296][T12813] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1053 [ 345.446767][T12818] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4011'. [ 345.453690][T12814] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 345.502562][T12814] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1053 [ 345.515820][ T315] ================================================================== [ 345.533111][ T315] BUG: KASAN: null-ptr-deref in down_write+0x83/0x2a0 [ 345.539923][ T315] Write of size 8 at addr 0000000000000098 by task kworker/0:3/315 [ 345.547843][ T315] [ 345.550198][ T315] CPU: 0 UID: 0 PID: 315 Comm: kworker/0:3 Not tainted 6.12.30-syzkaller-g68f4f0b0690a #0 d2d57a621586a6800997b547ec5ef233d70fc6ad [ 345.550233][ T315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 345.550251][ T315] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ [ 345.550344][ T315] Call Trace: [ 345.550353][ T315] [ 345.550363][ T315] __dump_stack+0x21/0x30 [ 345.550394][ T315] dump_stack_lvl+0x10c/0x190 [ 345.550420][ T315] ? __cfi_dump_stack_lvl+0x10/0x10 [ 345.550451][ T315] print_report+0x3d/0x70 [ 345.550473][ T315] kasan_report+0x163/0x1a0 [ 345.550508][ T315] ? down_write+0x83/0x2a0 [ 345.550538][ T315] ? __cfi_resched_curr+0x10/0x10 [ 345.550567][ T315] ? down_write+0x83/0x2a0 [ 345.550597][ T315] kasan_check_range+0x299/0x2a0 [ 345.550632][ T315] __kasan_check_write+0x18/0x20 [ 345.550671][ T315] down_write+0x83/0x2a0 [ 345.550699][ T315] ? __cfi_down_write+0x10/0x10 [ 345.550727][ T315] ? _raw_spin_lock+0x8c/0x120 [ 345.550761][ T315] ? __cfi__raw_spin_lock+0x10/0x10 [ 345.550795][ T315] ? mutex_unlock+0x8b/0x240 [ 345.550820][ T315] ? __cfi_mutex_unlock+0x10/0x10 [ 345.550848][ T315] rust_binderfs_remove_file+0x6c/0x110 [ 345.550877][ T315] _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860 [ 345.550926][ T315] ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10 [ 345.550970][ T315] ? unwind_next_frame+0x3c2/0x750 [ 345.550994][ T315] ? __kernel_text_address+0x11/0x40 [ 345.551030][ T315] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 345.551061][ T315] ? arch_stack_walk+0x139/0x170 [ 345.551092][ T315] ? ret_from_fork_asm+0x1a/0x30 [ 345.551123][ T315] ? stack_depot_save_flags+0x38/0x800 [ 345.551151][ T315] ? kasan_save_track+0x4f/0x80 [ 345.551181][ T315] ? kasan_save_track+0x4f/0x80 [ 345.551210][ T315] ? kasan_save_track+0x3e/0x80 [ 345.551237][ T315] ? kasan_save_free_info+0x4a/0x60 [ 345.551263][ T315] ? __kasan_slab_free+0x5f/0x80 [ 345.551294][ T315] ? kfree+0x156/0x400 [ 345.551317][ T315] ? release_one_tty+0x2a3/0x2d0 [ 345.551342][ T315] ? process_scheduled_works+0x7d2/0x1020 [ 345.551371][ T315] ? worker_thread+0xc58/0x1250 [ 345.551400][ T315] ? kthread+0x2ca/0x370 [ 345.551433][ T315] ? ret_from_fork+0x64/0xa0 [ 345.551459][ T315] ? ret_from_fork_asm+0x1a/0x30 [ 345.551515][ T315] ? __kasan_check_write+0x18/0x20 [ 345.551543][ T315] ? pwq_dec_nr_in_flight+0x6c7/0xc60 [ 345.551573][ T315] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 345.551609][ T315] ? kick_pool+0xb9/0x550 [ 345.551631][ T315] process_scheduled_works+0x7d2/0x1020 [ 345.551667][ T315] worker_thread+0xc58/0x1250 [ 345.551699][ T315] kthread+0x2ca/0x370 [ 345.551731][ T315] ? __cfi_worker_thread+0x10/0x10 [ 345.551762][ T315] ? __cfi_kthread+0x10/0x10 [ 345.551796][ T315] ret_from_fork+0x64/0xa0 [ 345.551824][ T315] ? __cfi_kthread+0x10/0x10 [ 345.551859][ T315] ret_from_fork_asm+0x1a/0x30 [ 345.551893][ T315] [ 345.551902][ T315] ================================================================== [ 345.838685][ T36] audit: type=1400 audit(2000000030.710:867): avc: denied { create } for pid=12839 comm="syz.1.4018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 345.840115][ T315] Disabling lock debugging due to kernel taint [ 345.854621][ T36] audit: type=1400 audit(2000000030.720:868): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[2608]" dev="pipefs" ino=2608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 345.857029][ T315] BUG: kernel NULL pointer dereference, address: 0000000000000098 [ 345.908077][ T36] audit: type=1400 audit(2000000030.780:869): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 345.914355][ T315] #PF: supervisor write access in kernel mode [ 345.914371][ T315] #PF: error_code(0x0002) - not-present page [ 345.928725][ T36] audit: type=1400 audit(2000000030.780:870): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 345.943851][ T315] PGD 8000000116b76067 P4D 8000000116b76067 PUD 0 [ 345.943886][ T315] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 345.943913][ T315] CPU: 0 UID: 0 PID: 315 Comm: kworker/0:3 Tainted: G B 6.12.30-syzkaller-g68f4f0b0690a #0 d2d57a621586a6800997b547ec5ef233d70fc6ad SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 345.963323][ T36] audit: type=1400 audit(2000000030.780:871): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 345.977231][ T315] Tainted: [B]=BAD_PAGE [ 345.977245][ T315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 345.977262][ T315] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ [ 345.984197][ T36] audit: type=1400 audit(2000000030.780:872): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 345.989860][ T315] [ 345.989872][ T315] RIP: 0010:down_write+0x9a/0x2a0 [ 345.989909][ T315] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 fd b6 54 fc 4c 89 f7 be 08 00 00 00 e8 f0 b6 54 fc 48 8b 44 24 20 b9 01 00 00 00 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03 [ 346.005354][ T36] audit: type=1400 audit(2000000030.780:873): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 346.026020][ T315] RSP: 0018:ffffc9000b837500 EFLAGS: 00010256 [ 346.026047][ T315] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001 [ 346.026064][ T315] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc9000b837520 [ 346.026079][ T315] RBP: ffffc9000b837598 R08: ffffc9000b837527 R09: 1ffff92001706ea4 [ 346.026098][ T315] R10: dffffc0000000000 R11: fffff52001706ea5 R12: dffffc0000000000 [ 346.163007][ T315] R13: 1ffff92001706ea0 R14: ffffc9000b837520 R15: 0000000000000000 [ 346.170996][ T315] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 346.179952][ T315] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 346.186545][ T315] CR2: 0000000000000098 CR3: 000000013b3d4000 CR4: 00000000003526b0 [ 346.194535][ T315] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 346.202516][ T315] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 346.210496][ T315] Call Trace: [ 346.213780][ T315] [ 346.216719][ T315] ? __cfi_down_write+0x10/0x10 [ 346.221586][ T315] ? _raw_spin_lock+0x8c/0x120 [ 346.226384][ T315] ? __cfi__raw_spin_lock+0x10/0x10 [ 346.231600][ T315] ? mutex_unlock+0x8b/0x240 [ 346.236198][ T315] ? __cfi_mutex_unlock+0x10/0x10 [ 346.241238][ T315] rust_binderfs_remove_file+0x6c/0x110 [ 346.246832][ T315] _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860 [ 346.259610][ T315] ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10 [ 346.272829][ T315] ? unwind_next_frame+0x3c2/0x750 [ 346.277961][ T315] ? __kernel_text_address+0x11/0x40 [ 346.283265][ T315] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 346.289436][ T315] ? arch_stack_walk+0x139/0x170 [ 346.294399][ T315] ? ret_from_fork_asm+0x1a/0x30 [ 346.299359][ T315] ? stack_depot_save_flags+0x38/0x800 [ 346.304844][ T315] ? kasan_save_track+0x4f/0x80 [ 346.310140][ T315] ? kasan_save_track+0x4f/0x80 [ 346.315019][ T315] ? kasan_save_track+0x3e/0x80 [ 346.319878][ T315] ? kasan_save_free_info+0x4a/0x60 [ 346.325086][ T315] ? __kasan_slab_free+0x5f/0x80 [ 346.330036][ T315] ? kfree+0x156/0x400 [ 346.334116][ T315] ? release_one_tty+0x2a3/0x2d0 [ 346.339064][ T315] ? process_scheduled_works+0x7d2/0x1020 [ 346.344798][ T315] ? worker_thread+0xc58/0x1250 [ 346.349661][ T315] ? kthread+0x2ca/0x370 [ 346.353925][ T315] ? ret_from_fork+0x64/0xa0 [ 346.358534][ T315] ? ret_from_fork_asm+0x1a/0x30 [ 346.363588][ T315] ? __kasan_check_write+0x18/0x20 [ 346.368709][ T315] ? pwq_dec_nr_in_flight+0x6c7/0xc60 [ 346.374096][ T315] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 346.379662][ T315] ? kick_pool+0xb9/0x550 [ 346.384000][ T315] process_scheduled_works+0x7d2/0x1020 [ 346.389571][ T315] worker_thread+0xc58/0x1250 [ 346.394266][ T315] kthread+0x2ca/0x370 [ 346.398353][ T315] ? __cfi_worker_thread+0x10/0x10 [ 346.403478][ T315] ? __cfi_kthread+0x10/0x10 [ 346.408085][ T315] ret_from_fork+0x64/0xa0 [ 346.412514][ T315] ? __cfi_kthread+0x10/0x10 [ 346.417119][ T315] ret_from_fork_asm+0x1a/0x30 [ 346.421901][ T315] [ 346.424925][ T315] Modules linked in: [ 346.428861][ T315] CR2: 0000000000000098 [ 346.433023][ T315] ---[ end trace 0000000000000000 ]--- [ 346.438566][ T315] RIP: 0010:down_write+0x9a/0x2a0 [ 346.443604][ T315] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 fd b6 54 fc 4c 89 f7 be 08 00 00 00 e8 f0 b6 54 fc 48 8b 44 24 20 b9 01 00 00 00 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03 [ 346.463216][ T315] RSP: 0018:ffffc9000b837500 EFLAGS: 00010256 [ 346.469290][ T315] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001 [ 346.477268][ T315] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc9000b837520 [ 346.485244][ T315] RBP: ffffc9000b837598 R08: ffffc9000b837527 R09: 1ffff92001706ea4 [ 346.493226][ T315] R10: dffffc0000000000 R11: fffff52001706ea5 R12: dffffc0000000000 [ 346.501208][ T315] R13: 1ffff92001706ea0 R14: ffffc9000b837520 R15: 0000000000000000 [ 346.509198][ T315] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 346.518147][ T315] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 346.524744][ T315] CR2: 0000000000000098 CR3: 000000013b3d4000 CR4: 00000000003526b0 [ 346.532729][ T315] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 346.540726][ T315] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 346.548718][ T315] Kernel panic - not syncing: Fatal exception [ 346.555200][ T315] Kernel Offset: disabled [ 346.559527][ T315] Rebooting in 86400 seconds..