last executing test programs: 7m59.68977129s ago: executing program 3 (id=88): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f000001a000/0x2000)=nil, 0x2000, 0xa, 0x13, r0, 0x5f454000) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) read$hidraw(r1, &(0x7f00000000c0)=""/67, 0x43) 7m58.862016615s ago: executing program 3 (id=93): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x1d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x339) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000020c0)={{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@private}}, &(0x7f00000021c0)=0xe8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000002200)={0x0, 0x0}, &(0x7f0000002240)=0xc) mount$binderfs(&(0x7f0000002000), &(0x7f0000002040)='./binderfs2\x00', &(0x7f0000002080), 0x10800, &(0x7f0000002280)={[{@max={'max', 0x3d, 0x6}}, {}, {@max={'max', 0x3d, 0x7ff}}], [{@obj_user={'obj_user', 0x3d, '\\\x1a+^'}}, {@fowner_lt={'fowner<', r7}}, {@fsmagic={'fsmagic', 0x3d, 0xe}}, {@euid_eq={'euid', 0x3d, r8}}, {@hash}, {@seclabel}]}) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x4) ioctl$KVM_CAP_HYPERV_SYNIC2(r9, 0x4068aea3, &(0x7f0000000140)) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000000000096000040"]) close_range(r0, 0xffffffffffffffff, 0x0) 7m58.690675216s ago: executing program 3 (id=97): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000240)="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", 0x2000, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setopts(0x4200, r2, 0x6, 0x17) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045503, &(0x7f0000000340)={0x1, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xe}, @fda={0x66646185, 0x1, 0x0, 0x38}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x50, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df"}) 7m58.688807436s ago: executing program 3 (id=98): mkdir(&(0x7f0000000240)='./file0\x00', 0x123) (async) symlink(0x0, 0x0) (async) mount$incfs(&(0x7f0000000080)='./file1\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000000), 0x88f001, 0x0) (async, rerun: 64) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) (async, rerun: 64) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file2'}}]}) (async) r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000006c0), 0x1, 0x0) pwrite64(r0, 0x0, 0x0, 0xffffffff) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async, rerun: 64) r2 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) (async) inotify_add_watch(0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', 0x0) (async) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000480)=@req3={0x0, 0x0, 0x7, 0x793afe80, 0xffffff7c, 0x3, 0xf7}, 0x1c) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000100)="09000000e700140000007e7bfbf7", 0xe, 0x24000801, &(0x7f0000000380)={0x11, 0x8100, r4, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0xa, 0x0, &(0x7f00000001c0)=[@free_buffer], 0x0, 0x0, 0x0}) (async) fstat(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) (async) ptrace$setregs(0xd, r6, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r7) (async, rerun: 32) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (rerun: 32) gettid() (async) r8 = syz_open_procfs(r6, &(0x7f0000000440)='fdinfo/4\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) (async) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f0000000100)={0x30}, 0x30) (async) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000280)=@loop={'/dev/loop', 0x0}, r5, &(0x7f00000002c0)='./file1\x00') 7m58.646359036s ago: executing program 3 (id=99): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) io_setup(0xf0, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) bind$bt_hci(r2, 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec0460f1c460041ae", 0x42}], 0x1, 0x74, 0x0, 0x0) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, &(0x7f00000001c0)={0x1, 0x5, 0x7}) (async, rerun: 64) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async, rerun: 64) close_range(r1, 0xffffffffffffffff, 0x0) 7m58.578493577s ago: executing program 3 (id=100): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}]}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2004cb, 0x200000000000, 0x0, 0x0, 0xfffffffffffffffd], 0x0, 0x200}) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078002e4fccfc"], 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000004) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) (async) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = dup2(r5, r5) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000000640)={@remote, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40000, 0x40, 0x5, 0x100, 0x2, 0x40fb0267, r8}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @flat=@weak_binder={0x77622a85, 0x30a}, @flat=@binder={0x73622a85, 0x14, 0x3}}, &(0x7f0000000000)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x410080, 0x0) 7m58.549342677s ago: executing program 32 (id=100): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}]}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2004cb, 0x200000000000, 0x0, 0x0, 0xfffffffffffffffd], 0x0, 0x200}) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078002e4fccfc"], 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000004) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) (async) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = dup2(r5, r5) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000000640)={@remote, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40000, 0x40, 0x5, 0x100, 0x2, 0x40fb0267, r8}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @flat=@weak_binder={0x77622a85, 0x30a}, @flat=@binder={0x73622a85, 0x14, 0x3}}, &(0x7f0000000000)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x410080, 0x0) 5m5.55379214s ago: executing program 0 (id=2165): r0 = socket$key(0xf, 0x3, 0x2) mkdir(&(0x7f0000000980)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@name={'name', 0x3d, 'lowerdir'}}, {@none}]}) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r5 = eventfd2(0x5, 0x80801) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) r6 = eventfd2(0x7, 0x80000) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000180)={0x1, r6}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000340000/0x1000)=nil, &(0x7f0000152000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ec1000/0x3000)=nil, &(0x7f0000ff0000/0x3000)=nil, 0x0}, 0x68) syz_io_uring_setup(0x37e2, &(0x7f0000000040)={0x0, 0xf527, 0x4000, 0x1, 0x323}, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x40000000}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) r8 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) 5m5.441114261s ago: executing program 0 (id=2166): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000740)=[{&(0x7f0000000480)="390000007b000318680907070000000f0000ff3f04000000170a001700000000040037000f003f0041010000aa11f6bbf44d00000000008984", 0x39}], 0x1) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_usb_connect$hid(0x2, 0x68, &(0x7f0000000140)=ANY=[@ANYBLOB="00204f045ab600000000dd010902240001000020090904000001030800000000000000012205000905a10310000c00fd"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "0da32f3e"}]}}, 0x0}, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000080)={[0x80000000, 0x7, 0x10000, 0xffffffffffffffff, 0x9, 0x10, 0x4, 0x1, 0x8, 0x5, 0xfffffffffffffff7, 0x2, 0x5, 0x8000, 0xfff, 0x9], 0x5000}) 5m4.912806794s ago: executing program 0 (id=2169): socket$tipc(0x1e, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x2, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x0, 0x3ff, 0xfffffffe, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xffffffef, 0x7, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x43, 0x2, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0xa, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x7, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x2, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x6, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x3a, 0x800003, 0xb, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x4001c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x5, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x8, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2f, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fadvise64(r0, 0x2400000, 0x2, 0x4) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x6a11, &(0x7f0000000080)={0x0, 0xb285, 0x20000, 0x1, 0x13f, 0x0, r2}, &(0x7f0000000140), &(0x7f0000000180)) ioprio_set$pid(0x2, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x1000007fd) 5m4.890072384s ago: executing program 0 (id=2170): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r1 = userfaultfd(0x80801) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r3) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010300000ae6f72087a003"], 0x3c}}, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005c00), 0x0, 0x0) ioctl$TIOCGSERIAL(r4, 0x541e, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000040)) r6 = socket$netlink(0x10, 0x3, 0x8000000004) statfs(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340)=""/254) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000002c0)={r8, 0x11, 0x6}, 0x10) setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f0000000180)={r8, 0x1, 0x6, @random="b3bef56bcd32"}, 0x10) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffa000/0x2000)=nil, 0x2000}) unlinkat(r0, &(0x7f0000000440)='./cgroup\x00', 0x0) sendmsg$nl_generic(r6, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="dc0000002800000429bd7000fedbdf251c000001bc0048009e0e2d0c5b48d96c24816c469adcef34e64cbaceafd63a47840538fb38b6364393ae25417b1b3609645bdc6adaf35b465ed2babc63e9588144134158b5447e7d9ec0ebd8d547e97c68bd5c0727e46487e37b999c770b3ac63024672933ab42ab427fdf3d33955760507734f6d95aeecb5fa6e213d662c6ba8fef3e2cbf34861e9b66b5db7b39c335df1865daac4d3eac3e8cd5446ae7003c887a2dd4b71f4f7852b79ebc81eebf3ca3bb97a12e408e7de155b03a2e7170ec0c002b000900000000000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x24008080) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x208003, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1}) 5m4.806034275s ago: executing program 0 (id=2171): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000001100)={0x4e, 0x1, 0x3, 0x9dff, 0xf, "800300eb00cbe600"}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r1, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000002c0)}, 0x22004055) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000d00)={0x2c, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_clone(0x20820000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000340)={0x0, 0x3, [0x4, 0x0, 0x200, 0x3bba, 0x2]}) ioprio_get$pid(0x2, r3) fcntl$setownex(r0, 0xf, &(0x7f0000000300)={0x0, 0xffffffffffffffff}) fcntl$lock(r1, 0x26, &(0x7f00000000c0)={0x1, 0x4, 0x65, 0xffffffffffffff50, r3}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(r0, 0xc0000) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000003c0)=ANY=[@ANYRES16, @ANYRES64, @ANYRESHEX=r0], 0x8) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x80600, 0x0) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000180)={0x10000, 0x2c31, 0x6b43850, 0x100, 0x5, "cca40cf26ddb090000007b64a7ad615cdc9de2", 0x5b24, 0x10000}) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) 5m4.510078436s ago: executing program 0 (id=2176): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x200400, 0xa4) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x303, 0x0, 0x0, {0x3, 0x0, 0x3}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2400889c}, 0x4000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1, 0x2}) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) 5m4.509826467s ago: executing program 33 (id=2176): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x200400, 0xa4) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x303, 0x0, 0x0, {0x3, 0x0, 0x3}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2400889c}, 0x4000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1, 0x2}) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.205997503s ago: executing program 4 (id=5443): creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001b00), 0x22000, 0x0) ioctl$PTP_EXTTS_REQUEST(r1, 0x40103d02, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x26, 0x12, 0xa01, 0x0, 0x0, {0x7, 0x0, 0x60}}, 0x26}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f, 0x3000}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000014000103f7000000010000000a"], 0x14}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x49) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x40806685, &(0x7f00000002c0)={{0x2, 0x4e21, @multicast2}, {0x0, @remote}, 0x2, {0x2, 0x0, @multicast2}, 'veth1_virt_wifi\x00'}) 4.194735543s ago: executing program 4 (id=5444): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x1000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) pread64(r0, &(0x7f0000000080)=""/89, 0x59, 0x2) r1 = socket$inet6(0xa, 0x3, 0x5) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a41, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r5, 0x0, 0xfdef) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0x4000, 0xb, 0xfffffffb, 0xfffffffc, 0x0, [{0xc, 0xfc, 0x3, '\x00', 0xb4}, {0x83, 0x9, 0x4, '\x00', 0x4b}, {0xf9, 0xe, 0x4, '\x00', 0xda}, {0x0, 0x1, 0xfc, '\x00', 0x8}, {0x8, 0x13, 0x8}, {0x1, 0x3, 0x6, '\x00', 0xff}, {0x6, 0xe, 0x47, '\x00', 0x7}, {0x5, 0x90, 0x4, '\x00', 0xe9}, {0xe, 0x4, 0xa7, '\x00', 0x1}, {0x9, 0xcc, 0x6, '\x00', 0x4}, {0x1, 0x9, 0x15, '\x00', 0x1}, {0x0, 0x3, 0x5, '\x00', 0x7}, {0x1, 0x8a, 0xa0, '\x00', 0x4}, {0x3, 0xf1, 0xa, '\x00', 0xb2}, {0x7, 0x4, 0x0, '\x00', 0xfd}, {0x6, 0x0, 0x4, '\x00', 0x9}, {0x7, 0x2, 0x4, '\x00', 0x3}, {0xee, 0x6, 0x4}, {0xf, 0x1, 0x6, '\x00', 0x1}, {0xa, 0x3, 0x54, '\x00', 0x4}, {0x1, 0x3, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0x6}, {0x5, 0xfd, 0x7, '\x00', 0x2}, {0x4, 0x6, 0xfa, '\x00', 0x42}]}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000000280)={'rose0\x00'}) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000180)=@phonet={0x23, 0x7, 0x8e, 0x8}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc050) r7 = syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0x5e9d, 0x3000, 0x3, 0x216}, &(0x7f0000000040), &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) ppoll(&(0x7f00000001c0)=[{r7, 0x20}], 0x1, 0x0, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xf9, 0x2, 0x4}, @fda={0x66646185, 0x7, 0x0, 0x12}, @fda={0x66646185, 0x4, 0x0, 0x23}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 3.22603887s ago: executing program 4 (id=5454): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) fremovexattr(r1, &(0x7f0000000000)=@known='user.incfs.id\x00') fsopen(&(0x7f00000001c0)='9p\x00', 0x1) fspick(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x1) r2 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r2, 0x127f, 0x3) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x0, 0x5) fchdir(r3) rename(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) flock(r3, 0x2) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f00000000c0)=0x4, 0x4) readv(r4, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}], 0x1) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r3) 3.22543146s ago: executing program 4 (id=5455): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x4, 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x400041c0}, 0x24000004) r3 = socket$inet(0x2, 0x1, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x6, 0x1b3}) r5 = socket(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000041c0)=[{0x6}]}, 0x10) r6 = syz_open_dev$loop(&(0x7f0000002c80), 0x8, 0x62400) ioctl$IOC_PR_PREEMPT(r6, 0x401870cb, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffc000) 3.20972881s ago: executing program 4 (id=5456): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000180)=0x80c00) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES16=r1], 0x48}, 0x1, 0x0, 0x0, 0x8000010}, 0x20004801) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000580)=0xd, 0x4) recvmmsg(r1, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)=""/124, 0x7c}], 0x2}, 0x6}], 0x1, 0x40000022, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=r4, @ANYRES64=r0], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x70a, 0x80200) close_range(r0, 0xffffffffffffffff, 0x0) 1.68329644s ago: executing program 4 (id=5471): ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, &(0x7f00000002c0)={0x40, 0x2, 0xa5, {0xa5, 0x10, "5359cbfed2900d36f32e848562ef09d3c0989b36a21482a77c68553a0f7cf8c6fdb16e4294ae91beb5a6f07313c87c18fdeb839f8f9e82bc0da609d37820ab30f402dd3d020ff3188d2e6a73932bee1b16107d3df91cffad9d3a607000cb23375b953b33b37a2338836a8150e1b3c7cac43a83bcff9b0dc647478cdba014cb7992a9dd458bffbd6adc6cb267908be49bb8dacf3c004308a9716068fe4bf7e42d4b3513"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}, &(0x7f00000000c0)={0x0, 0x22, 0x11, {[@global=@item_012={0x0, 0x1, 0x4}, @local=@item_012={0x1, 0x2, 0x3, "ae"}, @local=@item_4={0x3, 0x2, 0x1, "8a200464"}, @local=@item_012={0x0, 0x2, 0x1}, @main=@item_012={0x1, 0x0, 0xc, "8d"}, @main=@item_012={0x1, 0x0, 0xb, "84"}, @global=@item_012={0x0, 0x1, 0xb}, @main=@item_012={0x0, 0x0, 0xc}, @main=@item_012={0x1, 0x0, 0x8, 'f'}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8001, 0x9, 0x1, {0x22, 0x21f}}}}, &(0x7f0000000600)={0x2c, &(0x7f00000004c0)={0x40, 0x10, 0xf8, "867f176175e4c512c853e990e7f59c6206f4d34b28e924f3dad9badadc56af3687b922439b62f97f757988ba934b3873159a5371a83ba11c890b8724bd5f81d2407676419a117f084c942a1f2d0247c08ce4532e147ba2c875675a24dc775d41c7c70035628d5b13dab0ab4cb2dda453474fa5eb0d6e6f4111f59ecd29e2014cd7f1483695a6d8fd3916a076f57c7099a022bb7de8aca4d0e656768d16b0892c8009059879b204e324344c53cb4fed5930d5fddde37d4d896ec28e7f183e17ca0438392c4bd2a52a0c8206a5b6ad03583ac210478637092c442d0d92b7f1f79970be60ecbd80c23984184735c1b3bd162712942daa73e273"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x38}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000440)={0x20, 0x1, 0x2, "b60e"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x7}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r2, 0x8d61ddcfedb48df, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) r3 = syz_usb_connect$cdc_ncm(0x2, 0x83, &(0x7f00000012c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x2, 0x1, 0xd6, 0x20, 0x10, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "8d68407d079c"}, {0x5, 0x24, 0x0, 0x10}, {0xd, 0x24, 0xf, 0x1, 0x31, 0x2ef3, 0x7, 0x9}, {0x6, 0x24, 0x1a, 0x620, 0x2b}, [@network_terminal={0x7, 0x24, 0xa, 0xfd, 0x80, 0x9, 0x80}, @country_functional={0x8, 0x24, 0x7, 0x8, 0x7fff, [0x2]}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xc, 0xd3, 0x10}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x10, 0x8, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7, 0x5, 0x5}}}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x200, 0x3c, 0x9, 0x7, 0x10, 0xf7}, 0x5, &(0x7f0000000700)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000740)=@lang_id={0x4}}, {0x2, &(0x7f0000000780)=@string={0x3a, 0x3, "15868b0cde7136f9b0a6a18a554ff4d91b12eec66de0b909eadb2b0e9323e5e0129ea4360f13545db23ae4e6fba33975b8c251b2abec3783"}}, {0x5c, &(0x7f00000007c0)=@string={0x5c, 0x3, "9110342ea0dbd367dc42208aa5ce82fd01e4eaa5c82aa540b3319f042ccdcb370b853769f91a71a394d38b49a38ea7c70805ff5d80287ff51af2c57f075e32b30d507e1ff878b6dea19bd6d6a910a48da71158efc070b6f55718"}}, {0x64, &(0x7f0000000840)=@string={0x64, 0x3, "7921bb9f3b34a10973e7c00ba96fb318686e512e38ae1d99635495917926aa8c18b274b59fc8cbac22132f4f6919ac3c5dedf1d90637416ba909369b4f4eca8db4385aceb2f10ec587f47146a7075c59c571b03bda7cb870618e61f7da8635c68074"}}, {0xc9, &(0x7f00000008c0)=@string={0xc9, 0x3, "aaae00630b60100ad503c1a6f997789ec62069a953f600752f6dc44361f1e90abb248f18ce6382c3dc440fc203c11a37e5985e52f8dfd02a6256611627d27cf81345f1f3d760a7193f560024fb10d2d028c6c4a93bcffdf4df0639adfe002742b8b141d7c3346258ed9ffef59c761e4d529dde4b84dbeb72bbe04ea9e5f4b23a8b7573ea5a5d6412221bddc3deef5d2fd23251b03e9e5d512a9396e6afd672277125ac8b53947da3ca6673a3454be8aa5893bfa21fc260922b6eb1fe2d9eb9c260e8d154ce3ca7"}}]}) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000b00)={0x14, &(0x7f0000000a40)={0x40, 0xe, 0x42, {0x42, 0x6, "5136c975fb4400611f1337b4eb243f2f71964e906a3b6f112a36a544b024c193e72ea620f195e460f4c6db3d846a2d729c6890e93541c1c507304c75ea4b3c1f"}}, &(0x7f0000000ac0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000e00)={0x44, &(0x7f0000000b40)={0x0, 0xa, 0xeb, "2d3da947d0bbcee7675beee218aaaeae475ca2826828e4478602516058cd2bb5dd289153a0630c15a84368f52f26819ce2125e3921295959e856b4d3a31b72c9ad9b80918ffdf2da4255a678aeb77d3d4c3318ad9218815631ebf6d3ed5ed9399dada0c74a4d1f6a6bfcdd271ed691e04bd507ca6fd4131dfe0ba69a2df25f29021fad9097cb9a7c3a51176560bcf299aa70969d7f297cb4e2c5ca375476ab0b0320d336ba042cfb39eae0deeb4794bbaeed547a00e1b27990efbf9472e9263c80cfe4dedddacdeb057018146b508b21b534a89352edcc9edd788412f6b0ed1fd8dafb567fd5599fb27dc4"}, &(0x7f0000000c40)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000c80)={0x0, 0x8, 0x1}, &(0x7f0000000cc0)={0x20, 0x80, 0x1c, {0x401, 0x8, 0xffffffff, 0x0, 0x8, 0x0, 0x206, 0x0, 0x1, 0x3, 0x3, 0x9}}, &(0x7f0000000d00)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000d40)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000d80)={0x20, 0x87, 0x2, 0x9cdb}, &(0x7f0000000dc0)={0x20, 0x89, 0x2}}) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$lock(r1, 0x26, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000001040)={0x1, 0x0, 0x8, 0x7fff, 0x19, "0062ba7d82000000000000000000f7ffffff00"}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000e80)={0x2, 0xffffffffffffffff}) r5 = syz_clone(0x83080880, &(0x7f0000000ec0)="ff7f7eaa20a2d52bc580a7e346c4d04fd5fdf0530809595b8e97f2dd34ec93ee28951f4a86496e8b39f548c9067fa315bb2f621ec7e46f7d1baeb76787af5eca3848aba6ddcacb1859ef3fe14cc34170d3114677671365ca8eb44cf55c2a1da367ffce2fec1ba84cd89dd677f770382731b9107f4b468bfa831e8f1c009b4e1917981347cddcac1c8236dd0107c23f346bc5719d4549af459ea9b088850c5696d687ceedae3d5140720bdbddd02063872604831449f2cfc8342439e7c2f4bd3f1d45bad424870c38f002da4119c68790", 0xd0, &(0x7f0000000fc0), &(0x7f0000001000), &(0x7f0000001380)="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") fcntl$setown(r4, 0x8, r5) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000003c0)=ANY=[], 0x8) mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x580a8, &(0x7f0000000080)=ANY=[@ANYBLOB='mode=00000000000000000000014,mode=00000000000000000003000,gid=', @ANYRESDEC]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000001140)=ANY=[@ANYBLOB="2600000037020001fc55697a000000000080000000000000", @ANYRES32=r5, @ANYBLOB="0800007486a4c966d30d"], 0x26) recvmmsg$unix(r6, 0x0, 0x0, 0x100, &(0x7f0000003400)={0x0, 0x989680}) r7 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80600, 0x0) ioctl$TCSETSW2(r7, 0x402c542c, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) 1.59126151s ago: executing program 2 (id=5473): r0 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000001580)={0x0, "e5cf9087c0bc4eecd575619bf7fe717b09a75040d67944bdf74658aa573ec7ec5fd9ecb3bf2ad2cceb6d2f7879709ab2db2fcfa073f7ab9055774346282c82cc", 0x17}, 0x48, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000001600)='a`h', 0x3) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) read(r1, &(0x7f0000000040)=""/141, 0x8d) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x80000000}, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000180)={r0, 0x0, 0x2d}, &(0x7f0000000280)={'enc=', 'pkcs1', ' hash=', {'cbcmac-aes-neon\x00'}}, &(0x7f0000000200), &(0x7f0000000300)=""/45) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xdb9, 0x0, 0x0, 0x4}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) close(0xffffffffffffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) 1.56057779s ago: executing program 2 (id=5474): openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00#']) read(r0, &(0x7f0000000100)=""/236, 0xec) 1.137901723s ago: executing program 5 (id=5479): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x8000000, 0xffff1000, 0xe, 0xf0, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x4000, 0xa, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0x3000, 0xe6e50002, 0xd, 0x8, 0x2, 0x7, 0x4, 0x5, 0x8, 0x2, 0x6, 0x5}, {0x8000000, 0x5000, 0x8, 0xfc, 0x1, 0x46, 0x2, 0x11, 0x6, 0x70, 0x0, 0x1}, {0x100000, 0x0, 0x10, 0x1, 0x3, 0x9, 0x9, 0xf9, 0x5, 0x44, 0xe, 0xc}, {0x2, 0xeeee8000, 0xe, 0x7, 0x3, 0xa1, 0x1, 0xff, 0x4, 0x80, 0x1, 0xf8}, {0x6000, 0xf000, 0x6, 0x9d, 0x3, 0xfd, 0xe, 0xb, 0x5, 0x80, 0x0, 0x78}, {0xffff1000, 0x8000000, 0x10, 0x5, 0x3, 0x3, 0xa, 0xd, 0x54, 0x6, 0x2, 0x7}, {0x8080000, 0x6}, {0x2, 0x6}, 0x40010000, 0x0, 0x5000, 0x300, 0xb, 0x0, 0xe6e70c00, [0xffffffffffffff47, 0x3, 0x5, 0xc5]}) prctl$PR_SET_MM_EXE_FILE(0x39, 0xd, 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0x31, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) init_module(&(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0xa3, 0x4, 0x9, 0x6, 0x2, 0x2, 0x3e, 0x10001, 0x29e, 0x40, 0x27b, 0x3, 0xf, 0x38, 0x1, 0xa, 0x40, 0xfffc}, [{0x1, 0xd, 0x0, 0x4, 0x3, 0xb7f, 0x1, 0x8}]}, 0x78, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x37, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0xffffffff, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x6, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00041, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x9, 0x5, 0xb, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0xfb2, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x7f, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x200005, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x17, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0xa, 0x80000001, 0x7777, 0x1, 0x6, 0x100, 0xd8cb, 0x7fffffff, 0x624dfaee, 0xc, 0x32d, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0x7, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x13ffd, 0x1, 0xbe24]}, 0x45c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 1.130736773s ago: executing program 5 (id=5480): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000680)={{{0x1}}, 0x0, 0x0, 0x0}) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1a, 0x4, 0x2) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r6}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r9}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @private0, 0x1, 0x6, 0x0, 0x100, 0x6, 0x180107, r9}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r4, 0xb08, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r4, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x88c}, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0x2d, &(0x7f0000002a00)=0x3, 0x4) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0xffd7, 0x0) r11 = dup3(r2, r1, 0x0) recvmmsg$unix(r11, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005140)=""/4111, 0x100f}], 0x1}}], 0x1, 0x58ca2280, 0x0) r12 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r12, 0x5f7b1000) 1.070973573s ago: executing program 5 (id=5481): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x161142, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2043, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000140)=0x0) setfsgid(r2) write$uinput_user_dev(r1, &(0x7f0000000cc0)={'syz0\x00', {}, 0x3, [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7e2d, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x3f9, 0x100, 0x0, 0x4, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x100000, 0xffffffff, 0x0, 0x3, 0xe, 0x721a2d63, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0xffffffff, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x8000, 0x6], [0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x8, 0x2007f, 0x0, 0x0, 0x6, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x400, 0x289, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xa46, 0x2000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6fff, 0x71, 0x0, 0x0, 0x0, 0xffffffff, 0x200000, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x9, 0x0, 0x0, 0x0, 0xa6e1, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x6, 0x0, 0x3ff, 0x0, 0x9b0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0xd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000008, 0xc7, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10000001, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1000, 0x10000, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x400, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x25, &(0x7f0000000000)=0x8, 0x4) close(r3) close_range(r0, 0xffffffffffffffff, 0x0) 953.794404ms ago: executing program 5 (id=5483): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) syz_open_dev$MSR(&(0x7f0000000140), 0x8000000000000001, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/stat\x00', 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r3, 0xc02063a0, &(0x7f0000000000)=[0x5, 0x26710661, 0x26efadac, 0x8, 0x9, 0x8, 0x5, 0x2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x181c800, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c756e616d653d696770fecb3a7176359102a8a9212c6e6f78617474722c76657273696f6e3d3955323030302e4c2c6b"]) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r5 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r5, r4, 0x0, 0xffffffff) 863.318825ms ago: executing program 5 (id=5484): openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async, rerun: 32) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) (rerun: 32) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xb, 0x30, r0, 0xacf5a000) (async, rerun: 64) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)='`', 0x1, 0x0, 0x0, 0x0) (rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r3, 0x7, 0x40000000, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (rerun: 32) 649.986186ms ago: executing program 2 (id=5486): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x3c, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x2c, 0x0, 0x0, 0x0, [@typed={0x25, 0x0, 0x0, 0x0, @binary="56ccabd869c2033840919fdc5a8d2527efc319e94cdc26f2f15645bd5601a1c5e3"}]}]}, 0x3c}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000175000/0x2000)=nil, 0x2000}, 0x4, 0x2}) r4 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f0000000000)={'raw\x00', 0x0, [0xc7f, 0x0, 0xb, 0x8, 0x1]}, &(0x7f0000000bc0)=0x54) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000004800010000000000000000000a00806e0805000000000001140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004880) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xff, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x80a0000, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xdddd0000, 0xdddd1000, 0x8, 0x3, 0x0, 0x7, 0x4, 0xd, 0x81, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x5, 0x46, 0x3, 0xd, 0x6, 0x3, 0x4f, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x2, 0x9, 0x4, 0x6, 0x5, 0x7f, 0x4, 0x4b}, {0xa2000, 0x8000000, 0xc, 0x6, 0x3, 0x70, 0x1, 0xff, 0xc, 0x90, 0x1, 0xfa}, {0x6000, 0x4000, 0x8, 0x9d, 0x3, 0x5, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x7, 0x54, 0x7b, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x1}, 0x0, 0x0, 0x4000, 0x300, 0x5, 0x3000, 0x8000000, [0x0, 0x401, 0x7, 0xc5]}) close_range(r2, 0xffffffffffffffff, 0x0) 648.258736ms ago: executing program 1 (id=5487): modify_ldt$write2(0x11, &(0x7f0000000680)={0x8, 0x100000, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1}, 0x10) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@private1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000180)=0xe8) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r4, r4, 0x0) (async) setresuid(0x0, 0x0, r4) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@private2}}, &(0x7f0000000200)=0xe8) (async) r6 = getegid() fsetxattr$system_posix_acl(r1, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000580)={{}, {0x1, 0x4}, [{0x2, 0x4, r2}, {0x2, 0x6, r3}, {0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x1, r4}, {0x2, 0x4, r5}], {0x4, 0x2}, [{0x8, 0x0, r6}], {}, {0x20, 0x3}}, 0x54, 0x1) (async) ptrace(0x10, r0) (async) ptrace$setregs(0xd, r0, 0x7fff, &(0x7f0000000240)="12d6cacc400cb28384641a92606ff1d67f7718dadaa571f32ee2eb179974146cb14384e0e9a430de36da9cfa0941cbdb45400dbbf771a9f0d840b73de0cb08d1d3be1afc468f2a26a39cdfba80aa009e0b6b4bab31776e6f4b3cbe471b323c3e805335edbad98b115636442e777dce7bc27e899b8bc13ebd3a9b22f3813b493bcddc5ecc46eada6853") (async) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000040)={&(0x7f0000000100)="023a3b32a800030000444f138d9c176b04f0f91de6b9fe513adb984dcb636b3f33825c376f2b590fc63b5760e50b8a147a10ffe643c81b55035cc00076f2e4229349ee5d", 0x44}) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r7, 0xc00c620f, &(0x7f00000000c0)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) syz_clone3(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r10, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 581.052306ms ago: executing program 1 (id=5488): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = gettid() clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) futex(&(0x7f00000001c0)=0x2, 0x80, 0x1, &(0x7f0000000240)={r4, r5+10000000}, &(0x7f00000002c0)=0x1, 0x1) write$P9_RGETLOCK(r2, &(0x7f0000000100)={0x20, 0x37, 0x1, {0x0, 0x1, 0x1, r3, 0x2, '{%'}}, 0x20) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000000)="17000000020001000003d68c5ee1768812002b08020300ecff3f0002000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ab65761407a681f009cee4a5acb3da400001fb700674f39b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)="86"}) 539.918397ms ago: executing program 1 (id=5489): socket$tipc(0x1e, 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/133, 0x85}], 0x1) (async, rerun: 32) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48801, 0x0) (rerun: 32) ioctl$BLKRRPART(r0, 0x125f, 0x0) 494.138527ms ago: executing program 2 (id=5490): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1083, 0x0) readahead(r0, 0x4, 0x4058) 466.543767ms ago: executing program 2 (id=5491): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc058671e, &(0x7f00000000c0)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x30) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) 428.746467ms ago: executing program 1 (id=5492): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="b70b0000007c7d04652538"], 0x14}}, 0x0) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x10, 0x0) setsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 345.054718ms ago: executing program 1 (id=5493): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)={'U-', 0x2460}, 0x16, 0x3) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x10a, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@weak_handle={0x77682a85, 0x1101, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 343.631118ms ago: executing program 2 (id=5494): r0 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$ARCH_GET_FS(0x1e, r0, &(0x7f0000000080), 0x1003) syz_usb_connect(0x6, 0x3f, &(0x7f0000000000)=ANY=[], 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r1 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write$binfmt_format(r1, &(0x7f0000001240)='-1\x00', 0x3) (async, rerun: 32) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='.\x00', &(0x7f0000000100)='anon_inodefs\x00', 0x40, 0x0) (async, rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x2) write$binfmt_format(r1, &(0x7f00000000c0)='0\x00', 0x2) 300.079419ms ago: executing program 1 (id=5495): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) fsetxattr$trusted_overlay_upper(r1, 0x0, &(0x7f00000004c0)={0x0, 0xfb, 0x15, 0x5, 0xd, "6e1994616a5da7db7d35cec7ccf564d3"}, 0x15, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = fsopen(&(0x7f0000000380)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r5 = syz_pidfd_open(r4, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) process_mrelease(r5, 0x0) r6 = fsmount(r3, 0x0, 0x0) fchdir(r6) accept4$unix(r6, &(0x7f0000000180)=@abs, &(0x7f0000000100)=0x6e, 0x800) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r8 = socket(0x2, 0x2, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x40, &(0x7f00000005c0)={[{}]}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000240)="280320000500140092d01feee5bbd788a5ca1cb3ba8400007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0x4e, 0x400c010, &(0x7f0000000080)={0x11, 0x16, r9, 0x1, 0xe5, 0x6, @random="01000800ae37"}, 0x14) r10 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bind$xdp(r6, &(0x7f00000000c0)={0x2c, 0x5, r9, 0x1f, r10}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffc000) 0s ago: executing program 5 (id=5496): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket$inet6(0xa, 0x5, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="0000086c8765f1000000a0"], 0x14}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = userfaultfd(0x801) r6 = dup(r4) setsockopt$packet_int(r6, 0x65, 0x10, 0x0, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000}) r7 = syz_open_dev$evdev(&(0x7f0000000280), 0x1, 0x80000) ioctl$EVIOCGABS0(r7, 0x80184520, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='sysfs\x00', 0x1214040, 0x0) read$FUSE(r6, &(0x7f0000000540)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f0000000040)=@sr0, r8, &(0x7f0000000240)={0x2, 0x8}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[], [], 0x2f}) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x191a461, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f00000001c0)={&(0x7f00004a3000/0x2000)=nil, &(0x7f00004af000/0x1000)=nil, 0x2000, 0x2}) mount$incfs(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x80, &(0x7f0000000340)={[{@rlog_pages={'rlog_pages', 0x3d, 0x8e5f}}]}) close_range(r5, r1, 0x0) kernel console output (not intermixed with test programs): idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 440.072112][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.073700][ T64] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 440.090935][ T64] usb 3-1: USB disconnect, device number 78 [ 440.118889][ T9] usb 5-1: config 0 descriptor?? [ 440.124970][T14688] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 440.200840][T14710] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 440.259239][T14713] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 440.335441][T14688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.345507][T14688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.359464][T14718] /dev/rnullb0: Can't open blockdev [ 440.584667][ T9] hid-generic 0003:04F3:0755.0044: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 440.828796][ T470] usb 5-1: USB disconnect, device number 55 [ 440.879855][T14735] rust_binder: Error while translating object. [ 440.879895][T14735] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 440.886093][T14735] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:295 [ 440.931411][T14748] rust_binder: Error while translating object. [ 440.940646][T14748] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 440.947058][T14748] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:64 [ 441.018084][T14751] rust_binder: Write failure EINVAL in pid:66 [ 441.147078][ T2174] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 441.307082][ T45] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 441.310195][ T2174] usb 3-1: unable to get BOS descriptor or descriptor too short [ 441.323175][ T2174] usb 3-1: not running at top speed; connect to a high speed hub [ 441.337500][ T2174] usb 3-1: config 4 has an invalid interface number: 56 but max is 0 [ 441.345981][ T2174] usb 3-1: config 4 has no interface number 0 [ 441.352861][ T2174] usb 3-1: config 4 interface 56 has no altsetting 0 [ 441.363544][ T2174] usb 3-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=61.74 [ 441.374541][ T2174] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.383508][ T2174] usb 3-1: Product: syz [ 441.388186][ T2174] usb 3-1: Manufacturer: syz [ 441.392823][ T2174] usb 3-1: SerialNumber: syz [ 441.450057][T14763] binder: Bad value for 'stats' [ 441.460465][T14763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4748'. [ 441.470036][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 441.485948][ T45] usb 2-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 441.504999][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.519517][ T45] usb 2-1: config 0 descriptor?? [ 441.605415][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 441.608056][ T2174] snd-usb-audio 3-1:4.56: probe with driver snd-usb-audio failed with error -71 [ 441.613579][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 441.656668][ T2174] usb 3-1: USB disconnect, device number 79 [ 441.949983][ T45] lenovo 0003:17EF:6067.0045: unknown main item tag 0x0 [ 441.967800][ T45] lenovo 0003:17EF:6067.0045: hidraw0: USB HID v0.00 Device [HID 17ef:6067] on usb-dummy_hcd.1-1/input0 [ 442.160322][ T45] usb 2-1: USB disconnect, device number 98 [ 442.180500][T14781] rust_binder: 312: no such ref 2 [ 442.309747][T14790] binder: Bad value for 'max' [ 442.391699][T14794] netlink: 'syz.2.4759': attribute type 3 has an invalid length. [ 442.399919][T14794] netlink: 944 bytes leftover after parsing attributes in process `syz.2.4759'. [ 442.416206][T14794] netlink: 'syz.2.4759': attribute type 3 has an invalid length. [ 442.439098][T14794] netlink: 944 bytes leftover after parsing attributes in process `syz.2.4759'. [ 442.806996][T14812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 443.286738][ T36] kauditd_printk_skb: 1252 callbacks suppressed [ 443.286757][ T36] audit: type=1400 audit(8000001389.034:41160): avc: denied { read } for pid=14830 comm="syz.1.4770" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 443.323714][ T36] audit: type=1400 audit(8000001389.034:41161): avc: denied { read open } for pid=14830 comm="syz.1.4770" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 443.347939][ T36] audit: type=1400 audit(8000001389.074:41162): avc: denied { map } for pid=14830 comm="syz.1.4770" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 443.373067][ T36] audit: type=1400 audit(8000001389.074:41163): avc: denied { read } for pid=14830 comm="syz.1.4770" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 443.399276][ T36] audit: type=1400 audit(8000001389.104:41164): avc: denied { read } for pid=14830 comm="syz.1.4770" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 443.432172][ T36] audit: type=1400 audit(8000001389.104:41165): avc: denied { read open } for pid=14830 comm="syz.1.4770" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 443.459115][ T36] audit: type=1400 audit(8000001389.114:41166): avc: denied { read write } for pid=11365 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 443.515777][T14835] 9pnet_fd: Insufficient options for proto=fd [ 443.530576][T14842] rust_binder: 14834 RLIMIT_NICE not set [ 443.530619][T14842] rust_binder: 586: no such ref 0 [ 443.546991][ T36] audit: type=1400 audit(8000001389.114:41167): avc: denied { read write open } for pid=11365 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 443.579495][ T36] audit: type=1400 audit(8000001389.114:41168): avc: denied { ioctl } for pid=11365 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 443.611372][T14845] rust_binder: Failed to allocate buffer. len:88, is_oneway:true [ 443.612102][T14847] audit: audit_backlog=65 > audit_backlog_limit=64 [ 443.612301][T14845] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 443.641591][T12814] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 443.642294][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 443.756263][T14853] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:590 [ 443.756797][T14853] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 443.780306][T14853] rust_binder: Read failure Err(EFAULT) in pid:590 [ 444.014840][T14880] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:721 [ 444.127397][T14884] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4784'. [ 444.203819][T14894] /dev/rnullb0: Can't open blockdev [ 444.307604][T14898] rust_binder: Write failure EFAULT in pid:597 [ 444.402066][ T2174] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 444.444036][T14902] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 444.486972][ T64] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 444.542957][T14907] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4792'. [ 444.581481][ T2174] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 444.594980][T14911] rust_binder: Write failure EINVAL in pid:608 [ 444.600232][ T2174] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 444.646984][ T2174] usb 5-1: can't read configurations, error -61 [ 444.651616][T14916] rust_binder: Error while translating object. [ 444.653272][T14916] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 444.659559][ T64] usb 2-1: Using ep0 maxpacket: 16 [ 444.677158][T14916] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:343 [ 444.689644][ T64] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.711487][ T64] usb 2-1: config 0 interface 0 has no altsetting 0 [ 444.718131][ T64] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 444.728281][ T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.728310][T14918] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:345 [ 444.741835][ T64] usb 2-1: config 0 descriptor?? [ 444.797108][ T2174] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 444.947707][ T2174] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 444.957527][ T2174] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 444.965112][ T2174] usb 5-1: can't read configurations, error -61 [ 444.971476][ T2174] usb usb5-port1: attempt power cycle [ 444.971780][ T64] usbhid 2-1:0.0: can't add hid device: -71 [ 444.987859][ T470] usb 6-1: new low-speed USB device number 54 using dummy_hcd [ 444.989473][ T64] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 445.005720][ T64] usb 2-1: USB disconnect, device number 99 [ 445.116965][ T470] usb 6-1: device descriptor read/64, error -71 [ 445.306961][ T2174] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 445.328438][ T2174] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 445.346486][ T2174] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 445.354152][ T2174] usb 5-1: can't read configurations, error -61 [ 445.361626][ T470] usb 6-1: device descriptor read/64, error -71 [ 445.448825][T14925] rust_binder: 618: no such ref 0 [ 445.454289][T14925] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:618 [ 445.497949][ T2174] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 445.533667][ T2174] usb 5-1: too many configurations: 27, using maximum allowed: 8 [ 445.544638][T14928] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:620 [ 445.549674][ T2174] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 445.569874][ T2174] usb 5-1: can't read configurations, error -61 [ 445.576714][ T2174] usb usb5-port1: unable to enumerate USB device [ 445.606938][ T470] usb 6-1: new low-speed USB device number 55 using dummy_hcd [ 445.746946][ T470] usb 6-1: device descriptor read/64, error -71 [ 445.765376][T14940] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 445.986916][ T470] usb 6-1: device descriptor read/64, error -71 [ 446.106989][ T470] usb usb6-port1: attempt power cycle [ 446.446956][ T470] usb 6-1: new low-speed USB device number 56 using dummy_hcd [ 446.468723][ T470] usb 6-1: device descriptor read/8, error -71 [ 446.597094][ T10] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 446.619216][ T470] usb 6-1: device descriptor read/8, error -71 [ 446.664832][T14948] loop2: detected capacity change from 0 to 8388607 [ 446.746878][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 446.758522][ T10] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.770325][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 446.777469][ T10] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 446.787362][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.796397][ T10] usb 3-1: config 0 descriptor?? [ 446.856917][ T470] usb 6-1: new low-speed USB device number 57 using dummy_hcd [ 446.878711][ T470] usb 6-1: device descriptor read/8, error -71 [ 446.956925][ T2174] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 447.009406][ T470] usb 6-1: device descriptor read/8, error -71 [ 447.021822][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 447.042369][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 447.057747][ T10] usb 3-1: USB disconnect, device number 80 [ 447.117007][ T470] usb usb6-port1: unable to enumerate USB device [ 447.124979][ T2174] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.139002][ T2174] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 447.148160][ T2174] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.166021][ T2174] usb 2-1: Product: syz [ 447.173116][ T2174] usb 2-1: Manufacturer: syz [ 447.178225][ T2174] usb 2-1: SerialNumber: syz [ 447.406904][ T10] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 447.546883][ T449] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 447.568714][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.579625][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 447.590506][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 447.600227][ T2174] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 447.606317][ T2174] cdc_ncm 2-1:1.0: bind() failure [ 447.614765][ T10] usb 3-1: New USB device found, idVendor=0025, idProduct=a4a1, bcdDevice= 0.40 [ 447.623854][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.631914][ T2174] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 447.638745][ T2174] cdc_ncm 2-1:1.1: bind() failure [ 447.643874][ T10] usb 3-1: Product: syz [ 447.649210][ T10] usb 3-1: Manufacturer: syz [ 447.653816][ T10] usb 3-1: SerialNumber: syz [ 447.680926][T14578] usb 2-1: USB disconnect, device number 100 [ 447.706870][ T449] usb 5-1: Using ep0 maxpacket: 32 [ 447.715333][ T449] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.727598][ T449] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.746243][ T449] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 447.766118][ T449] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.782115][ T449] usb 5-1: config 0 descriptor?? [ 447.790003][ T449] hub 5-1:0.0: USB hub found [ 447.830629][T14963] binder: Unknown parameter 'context[7' [ 447.992011][ T449] hub 5-1:0.0: 1 port detected [ 448.116944][ T2174] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 448.269383][ T2174] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.281749][ T2174] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.292354][ T2174] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 448.305822][ T2174] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 448.315255][ T2174] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.324931][ T2174] usb 6-1: config 0 descriptor?? [ 448.334632][ T36] kauditd_printk_skb: 975 callbacks suppressed [ 448.334644][ T36] audit: type=1400 audit(8000001394.084:42130): avc: denied { ioctl } for pid=14964 comm="syz.5.4813" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 448.365972][ T36] audit: type=1400 audit(8000001394.084:42131): avc: denied { ioctl } for pid=14964 comm="syz.5.4813" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 448.392071][ T36] audit: type=1400 audit(8000001394.084:42132): avc: denied { ioctl } for pid=14964 comm="syz.5.4813" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 448.402584][T14968] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:132 [ 448.417875][ T36] audit: type=1400 audit(8000001394.084:42133): avc: denied { ioctl } for pid=14964 comm="syz.5.4813" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 448.452363][ T36] audit: type=1400 audit(8000001394.084:42134): avc: denied { read write } for pid=14966 comm=7B2D2E29C9 name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 448.475595][ T36] audit: type=1400 audit(8000001394.084:42135): avc: denied { read write open } for pid=14966 comm=7B2D2E29C9 path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 448.499654][ T36] audit: type=1400 audit(8000001394.094:42136): avc: denied { ioctl } for pid=14966 comm=7B2D2E29C9 path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 448.524282][ T36] audit: type=1400 audit(8000001394.144:42137): avc: denied { ioctl } for pid=14966 comm=7B2D2E29C9 path="/dev/binderfs/binder0" dev="binder" ino=26 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 448.549728][ T36] audit: type=1400 audit(8000001394.154:42138): avc: denied { set_context_mgr } for pid=14966 comm=7B2D2E29C9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 448.569685][ T36] audit: type=1400 audit(8000001394.154:42139): avc: denied { map } for pid=14966 comm=7B2D2E29C9 path="/dev/binderfs/binder0" dev="binder" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 448.623966][ T449] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 448.624056][ T470] usb 5-1: USB disconnect, device number 60 [ 448.754424][ T2174] plantronics 0003:047F:FFFF.0046: No inputs registered, leaving [ 448.767581][ T2174] plantronics 0003:047F:FFFF.0046: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 448.891218][ T10] cdc_ncm 3-1:1.0: bind() failure [ 448.898723][ T10] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 448.913092][ T10] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 448.922667][ T10] usb 3-1: USB disconnect, device number 81 [ 448.983335][T14965] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 449.097468][T14578] usb 6-1: USB disconnect, device number 58 [ 449.310857][T14978] __vm_enough_memory: pid: 14978, comm: syz.4.4816, bytes: 18014402804453376 not enough memory for the allocation [ 449.392673][T14983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4818'. [ 449.500140][T14989] rust_binder: Read failure Err(EAGAIN) in pid:630 [ 449.581495][T14995] rust_binder: Failed to allocate buffer. len:18446744073709551592, is_oneway:true [ 449.653488][T15000] rust_binder: Write failure EFAULT in pid:351 [ 449.866806][ T10] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 450.031928][ T10] usb 5-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 450.041814][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.050580][ T10] usb 5-1: Product: syz [ 450.054762][ T10] usb 5-1: Manufacturer: syz [ 450.060063][ T10] usb 5-1: SerialNumber: syz [ 450.066995][ T10] usb 5-1: config 0 descriptor?? [ 450.366583][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 450.525735][T15020] rust_binder: Error while translating object. [ 450.525774][T15020] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 450.532402][T15020] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:641 [ 450.624700][T15022] rust_binder: 643: no such ref 0 [ 450.639373][T15022] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 450.646589][T15022] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 450.793365][T15028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4834'. [ 451.116782][ T470] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 451.127885][ T10] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 451.137908][ T10] asix 5-1:0.0: probe with driver asix failed with error -71 [ 451.146042][ T10] usb 5-1: USB disconnect, device number 61 [ 451.273706][ T470] usb 3-1: not running at top speed; connect to a high speed hub [ 451.283091][ T470] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 451.292362][ T470] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 4 [ 451.301285][ T470] usb 3-1: config 1 has no interface number 0 [ 451.307387][ T470] usb 3-1: config 1 interface 3 altsetting 162 endpoint 0xC has invalid maxpacket 96, setting to 64 [ 451.313285][T15034] rust_binder: 135: no such ref 3 [ 451.319101][ T470] usb 3-1: config 1 interface 3 altsetting 162 has 4 endpoint descriptors, different from the interface descriptor's value: 1 [ 451.323441][T15034] rust_binder: inc_ref_done called when no active inc_refs [ 451.336646][T15034] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 451.337354][ T470] usb 3-1: config 1 interface 3 has no altsetting 0 [ 451.344241][T15034] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:135 [ 451.354607][ T470] usb 3-1: New USB device found, idVendor=1c9e, idProduct=9b01, bcdDevice=b6.ec [ 451.376894][ T470] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.384883][ T470] usb 3-1: Product: syz [ 451.389800][ T470] usb 3-1: Manufacturer: Ќ [ 451.394314][ T470] usb 3-1: SerialNumber: syz [ 451.626943][ T470] usb 3-1: USB disconnect, device number 82 [ 451.674013][T15046] rust_binder: 756: no such ref 2 [ 451.679226][T15046] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:756 [ 451.792488][T15054] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4842'. [ 452.013799][T15063] netlink: 'syz.1.4845': attribute type 4 has an invalid length. [ 452.022771][T15062] netlink: 'syz.1.4845': attribute type 4 has an invalid length. [ 452.436716][T12814] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 452.436727][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 452.547649][T15084] loop7: detected capacity change from 0 to 7 [ 452.556863][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.566011][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 452.573962][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.583097][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 452.591133][T15084] loop7: unable to read partition table [ 452.596889][T15084] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 452.598026][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.626682][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.635852][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 452.646677][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.655830][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 452.664930][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.674082][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 452.683023][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.692208][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 452.700988][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.710144][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 452.771179][T15093] /dev/rnullb0: Can't open blockdev [ 453.083199][T15105] 9pnet_fd: Insufficient options for proto=fd [ 453.307482][T15114] /dev/rnullb0: Can't open blockdev [ 453.326898][T15114] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4861'. [ 453.361679][ T36] kauditd_printk_skb: 842 callbacks suppressed [ 453.361696][ T36] audit: type=1400 audit(8000001399.115:42982): avc: denied { read write } for pid=13047 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 453.426625][ T36] audit: type=1400 audit(8000001399.115:42983): avc: denied { read write open } for pid=13047 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 453.472036][ T36] audit: type=1400 audit(8000001399.115:42984): avc: denied { ioctl } for pid=13047 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 453.514110][ T36] audit: type=1400 audit(8000001399.125:42985): avc: denied { read write } for pid=15115 comm="syz.5.4862" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 453.538045][ T36] audit: type=1400 audit(8000001399.125:42986): avc: denied { read write open } for pid=15115 comm="syz.5.4862" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 453.562813][ T36] audit: type=1400 audit(8000001399.125:42987): avc: denied { ioctl } for pid=15115 comm="syz.5.4862" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x55c9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 453.588167][ T36] audit: type=1400 audit(8000001399.125:42988): avc: denied { read write } for pid=15115 comm="syz.5.4862" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 453.630623][ T36] audit: type=1400 audit(8000001399.125:42989): avc: denied { read write open } for pid=15115 comm="syz.5.4862" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 453.656673][ T64] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 453.674588][ T36] audit: type=1400 audit(8000001399.125:42990): avc: denied { ioctl } for pid=15115 comm="syz.5.4862" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 453.699753][ T36] audit: type=1400 audit(8000001399.125:42991): avc: denied { ioctl } for pid=15115 comm="syz.5.4862" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 453.818579][ T64] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.829493][ T64] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 453.841856][ T64] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 453.850914][ T64] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.858904][ T64] usb 6-1: Product: syz [ 453.863058][ T64] usb 6-1: Manufacturer: syz [ 453.867656][ T64] usb 6-1: SerialNumber: syz [ 454.079023][T15116] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 454.370206][T15141] netlink: 596 bytes leftover after parsing attributes in process `syz.4.4870'. [ 454.694346][T15116] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 454.906663][ T64] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 454.913167][ T64] cdc_ncm 6-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 454.921049][ T64] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 455.105942][T15116] binder: Unknown parameter '0x0000000000000004' [ 455.116311][ T64] cdc_ncm 6-1:1.0: setting tx_max = 184 [ 455.123964][ T64] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 455.137417][ T64] usb 6-1: USB disconnect, device number 59 [ 455.143631][ T64] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 455.225228][T15148] overlayfs: workdir and upperdir must be separate subtrees [ 455.249167][T15148] rust_binder: Error while translating object. [ 455.249213][T15148] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 455.255523][T15148] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:657 [ 455.304970][T15150] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 455.348166][T15154] rust_binder: Write failure EFAULT in pid:659 [ 455.374085][T15156] exFAT-fs (rnullb0): invalid boot record signature [ 455.387548][T15156] exFAT-fs (rnullb0): failed to read boot sector [ 455.397972][T15156] exFAT-fs (rnullb0): failed to recognize exfat type [ 455.463841][T15157] rust_binder: 15156 RLIMIT_NICE not set [ 455.463961][T15157] rust_binder: 800: no such ref 0 [ 455.499533][T15165] rust_binder: Write failure EFAULT in pid:666 [ 455.683114][T15176] rust_binder: Write failure EFAULT in pid:377 [ 455.848910][T15185] rust_binder: Error while translating object. [ 455.855594][T15185] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 455.862455][T15185] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:383 [ 456.014174][T15191] rust_binder: Error while translating object. [ 456.023576][T15191] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 456.030649][T15191] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:387 [ 456.065407][T15193] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 456.276721][T14578] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 456.313413][ T6490] Bluetooth: hci0: Frame reassembly failed (-84) [ 456.366608][ T10] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 456.436599][T14578] usb 6-1: Using ep0 maxpacket: 8 [ 456.443571][T14578] usb 6-1: config 0 has an invalid interface number: 193 but max is 1 [ 456.452968][T14578] usb 6-1: config 0 has an invalid interface number: 4 but max is 1 [ 456.461841][T14578] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.472563][T14578] usb 6-1: config 0 has no interface number 0 [ 456.478847][T14578] usb 6-1: config 0 has no interface number 1 [ 456.484936][T14578] usb 6-1: config 0 interface 193 altsetting 147 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 456.498173][T14578] usb 6-1: config 0 interface 4 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 456.511422][T14578] usb 6-1: config 0 interface 193 has no altsetting 0 [ 456.519086][T14578] usb 6-1: config 0 interface 4 has no altsetting 0 [ 456.527211][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 456.532545][T14578] usb 6-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=7d.6a [ 456.535062][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.541702][T14578] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.554358][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.562705][T14578] usb 6-1: Product: syz [ 456.571516][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 456.574467][T14578] usb 6-1: Manufacturer: syz [ 456.584418][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.588098][T14578] usb 6-1: SerialNumber: syz [ 456.602214][T14578] usb 6-1: config 0 descriptor?? [ 456.602217][ T10] usb 5-1: config 0 descriptor?? [ 456.604263][ T10] hub 5-1:0.0: USB hub found [ 456.806623][ T10] hub 5-1:0.0: 1 port detected [ 456.819670][T14578] usb 6-1: unknown interface protocol 0x4f, assuming v1 [ 456.835990][T14578] usb 6-1: 193:2 : does not exist [ 456.853765][T14578] usb 6-1: unknown interface protocol 0x5, assuming v1 [ 456.874265][T14578] usb 6-1: 4:0 : does not exist [ 456.892439][T14578] usb 6-1: USB disconnect, device number 60 [ 457.017787][T12853] udevd[12853]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.193/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 457.201739][T15217] kernel read not supported for file /policy (pid: 15217 comm: syz.1.4896) [ 457.456162][ T10] hub 5-1:0.0: activate --> -90 [ 457.660618][ T10] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 457.667697][ T10] usb 5-1: USB disconnect, device number 62 [ 458.214895][T15263] FAT-fs (rnullb0): bogus number of reserved sectors [ 458.241864][T15263] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 458.316557][ T2174] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 458.356546][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 458.357329][T12814] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 458.387032][ T36] kauditd_printk_skb: 766 callbacks suppressed [ 458.387048][ T36] audit: type=1400 audit(8000001404.145:43758): avc: denied { read write } for pid=14570 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 458.418145][ T36] audit: type=1400 audit(8000001404.145:43759): avc: denied { read write open } for pid=14570 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 458.443819][ T36] audit: type=1400 audit(8000001404.145:43760): avc: denied { ioctl } for pid=14570 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 458.472643][ T36] audit: type=1400 audit(8000001404.175:43761): avc: denied { ioctl } for pid=15255 comm="syz.5.4908" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 458.498097][ T36] audit: type=1400 audit(8000001404.225:43762): avc: denied { mounton } for pid=15273 comm="syz.1.4914" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 458.522965][ T36] audit: type=1400 audit(8000001404.255:43763): avc: denied { write } for pid=15273 comm="syz.1.4914" name="mcfilter6" dev="proc" ino=4026532971 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 458.546373][T15274] exFAT-fs (rnullb0): invalid boot record signature [ 458.547943][ T36] audit: type=1400 audit(8000001404.255:43764): avc: denied { write } for pid=15273 comm="syz.1.4914" path="/proc/242/net/mcfilter6" dev="proc" ino=4026532971 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 458.577414][ T2174] usb 6-1: Using ep0 maxpacket: 16 [ 458.579732][ T2174] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.582586][T15274] exFAT-fs (rnullb0): failed to read boot sector [ 458.594869][ T2174] usb 6-1: config 0 interface 0 has no altsetting 0 [ 458.599863][ T36] audit: type=1400 audit(8000001404.335:43765): avc: denied { ioctl } for pid=15255 comm="syz.5.4908" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 458.608503][ T2174] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 458.631615][T15274] exFAT-fs (rnullb0): failed to recognize exfat type [ 458.642827][ T2174] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.647796][ T36] audit: type=1400 audit(8000001404.335:43766): avc: denied { ioctl } for pid=15255 comm="syz.5.4908" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 458.681102][ T36] audit: type=1400 audit(8000001404.335:43767): avc: denied { ioctl } for pid=15255 comm="syz.5.4908" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 458.707973][ T2174] usb 6-1: config 0 descriptor?? [ 458.837207][T15289] rust_binder: 829: no such ref 0 [ 458.844752][T15289] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 458.857704][T15289] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 458.865221][T15289] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 458.872745][T15289] rust_binder: 829: no such ref 0 [ 458.939524][ T2174] usbhid 6-1:0.0: can't add hid device: -71 [ 458.966534][ T2174] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 459.006097][T15296] netlink: 'syz.1.4919': attribute type 4 has an invalid length. [ 459.014190][ T2174] usb 6-1: USB disconnect, device number 61 [ 459.486891][T14578] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 459.487485][T15328] netlink: 'syz.4.4929': attribute type 1 has an invalid length. [ 459.502829][T15329] netlink: 'syz.4.4929': attribute type 1 has an invalid length. [ 459.666485][T14578] usb 3-1: Using ep0 maxpacket: 32 [ 459.674288][T14578] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.687778][T14578] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.698404][T14578] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 459.708160][T14578] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.719159][T14578] usb 3-1: config 0 descriptor?? [ 459.727261][T14578] hub 3-1:0.0: USB hub found [ 459.928374][T14578] hub 3-1:0.0: 1 port detected [ 459.946536][T14969] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 460.098820][T14969] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 460.107305][T14969] usb 5-1: config 0 has an invalid descriptor of length 230, skipping remainder of the config [ 460.117694][T14969] usb 5-1: config 0 has no interface number 0 [ 460.126673][T14969] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 460.136104][T14969] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.144180][T14969] usb 5-1: Product: syz [ 460.148381][T14969] usb 5-1: Manufacturer: syz [ 460.152972][T14969] usb 5-1: SerialNumber: syz [ 460.159188][T14969] usb 5-1: config 0 descriptor?? [ 460.542119][ T64] hub 3-1:0.0: activate --> -90 [ 460.577743][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 460.596526][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 460.748287][T14578] usb 3-1: USB disconnect, device number 83 [ 460.754255][ T64] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 460.893963][T15350] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 460.901151][T15350] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 460.910669][T15350] rust_binder: pid 15350 performed invalid decrement on ref [ 460.920173][T15351] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 460.927547][T15351] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 460.936025][T15351] rust_binder: pid 15351 performed invalid decrement on ref [ 460.981471][T15356] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 460.982675][T15355] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 461.151835][T15366] /dev/sr0: Can't lookup blockdev [ 461.454179][T15385] binder: Unknown parameter 'fscontext?}' [ 461.577779][T15387] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 461.601890][T15387] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 461.773689][T15392] rust_binder: Write failure EFAULT in pid:443 [ 462.596441][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 462.596486][T12814] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 462.626602][T14969] usb 5-1: Found UVC 0.00 device syz (046d:0823) [ 462.632972][T14969] usb 5-1: No valid video chain found. [ 462.652414][T14969] usb 5-1: USB disconnect, device number 63 [ 462.918313][T15414] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 462.983004][T15419] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 463.376418][T14969] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 463.416902][ T36] kauditd_printk_skb: 856 callbacks suppressed [ 463.416922][ T36] audit: type=1400 audit(8016778854.173:44624): avc: denied { ioctl } for pid=15424 comm="syz.2.4961" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 463.470937][ T36] audit: type=1400 audit(8016778854.173:44625): avc: denied { read write } for pid=13047 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 463.486654][T15439] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 463.497037][ T36] audit: type=1400 audit(8016778854.173:44626): avc: denied { read write open } for pid=13047 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 463.532022][ T36] audit: type=1400 audit(8016778854.173:44627): avc: denied { ioctl } for pid=13047 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 463.586370][ T64] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 463.588744][ T36] audit: type=1400 audit(8016778854.213:44628): avc: denied { ioctl } for pid=15424 comm="syz.2.4961" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 463.623887][ T36] audit: type=1400 audit(8016778854.223:44629): avc: denied { ioctl } for pid=15424 comm="syz.2.4961" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 463.649068][ T36] audit: type=1400 audit(8016778854.223:44630): avc: denied { ioctl } for pid=15433 comm="syz.4.4964" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 463.667146][T15439] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 463.674372][ T36] audit: type=1400 audit(8016778854.223:44631): avc: denied { read } for pid=15438 comm="syz.5.4966" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 463.681254][T15443] audit: audit_backlog=65 > audit_backlog_limit=64 [ 463.705118][ T36] audit: type=1400 audit(8016778854.223:44632): avc: denied { read open } for pid=15438 comm="syz.5.4966" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 463.752887][T15442] /dev/rnullb0: Can't open blockdev [ 463.756387][T14969] usb 3-1: unable to get BOS descriptor or descriptor too short [ 463.767214][T14969] usb 3-1: not running at top speed; connect to a high speed hub [ 463.777263][T14969] usb 3-1: string descriptor 0 read error: -22 [ 463.783852][T14969] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 463.792985][T14969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.807534][T15445] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 463.809691][ T64] usb 5-1: config 0 has no interfaces? [ 463.875199][ T64] usb 5-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 463.904534][ T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 463.924724][ T64] usb 5-1: SerialNumber: syz [ 463.936557][ T64] usb 5-1: config 0 descriptor?? [ 464.026415][T15426] rust_binder: Write failure EFAULT in pid:699 [ 464.027786][T14969] cdc_ncm 3-1:1.0: bind() failure [ 464.053354][T14969] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 464.076345][T14969] cdc_ncm 3-1:1.1: bind() failure [ 464.088708][T14969] usb 3-1: USB disconnect, device number 84 [ 464.089344][T15458] /dev/rnullb0: Can't open blockdev [ 464.209795][T15435] input: syz0 as /devices/virtual/input/input87 [ 464.300564][ T64] usb 5-1: USB disconnect, device number 64 [ 464.673436][T15471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4975'. [ 464.759377][ T64] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 464.916387][ T64] usb 6-1: Using ep0 maxpacket: 16 [ 464.924237][ T64] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 464.934729][ T64] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 464.947611][ T64] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 464.952360][T15482] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 464.957142][ T64] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.965883][T15482] rust_binder: Write failure EINVAL in pid:859 [ 464.973338][ T64] usb 6-1: Product: syz [ 464.983743][ T64] usb 6-1: Manufacturer: syz [ 464.988390][ T64] usb 6-1: SerialNumber: syz [ 465.011164][T15484] rust_binder: 861: no such ref 3 [ 465.047005][T15486] rust_binder: Write failure EFAULT in pid:863 [ 465.066355][ T31] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 465.234107][ T331] Bluetooth: hci0: Frame reassembly failed (-84) [ 465.247971][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 465.262985][T15498] kvm: MWAIT instruction emulated as NOP! [ 465.270734][ T31] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 465.283700][ T31] usb 3-1: can't read configurations, error -71 [ 465.887164][T15517] SELinux: security_context_str_to_sid () failed with errno=-22 [ 465.902766][T15517] overlayfs: overlapping lowerdir path [ 466.133543][T15523] kernel profiling enabled (shift: 63) [ 466.139140][T15523] profiling shift: 63 too large [ 466.225740][T15530] loop7: detected capacity change from 0 to 7 [ 466.234937][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 466.244170][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 466.258751][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 466.267945][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 466.279612][T15530] loop7: unable to read partition table [ 466.280717][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 466.285363][T15530] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 466.319722][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 466.329240][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 466.338851][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 466.347995][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 466.356866][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 466.366078][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 466.375578][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 466.384742][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 466.393571][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 466.402732][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 466.622116][T15542] SELinux: security_context_str_to_sid () failed with errno=-22 [ 466.641814][T15544] SELinux: security_context_str_to_sid () failed with errno=-22 [ 466.678512][T15546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15546 comm=syz.4.4999 [ 466.692927][T15546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15546 comm=syz.4.4999 [ 466.811646][T15555] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5001'. [ 466.821293][T15555] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 466.828702][T15555] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 466.871047][T15562] binder: Unknown parameter 'defcontext01777777777777777777777' [ 466.962261][T15568] netlink: 200 bytes leftover after parsing attributes in process `syz.4.5007'. [ 466.971375][T15568] tc_dump_action: action bad kind [ 466.987375][T15568] 9p filesystem being mounted at /290/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 467.126271][T14969] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 467.236274][T12814] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 467.278715][T14969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 467.290126][T14969] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 467.300326][T14969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.310175][T14969] usb 2-1: config 0 descriptor?? [ 467.317191][T15564] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 467.351460][ T64] usb 6-1: 0:2 : does not exist [ 467.384155][ T331] Bluetooth: hci0: Frame reassembly failed (-84) [ 467.386690][ T64] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 467.397776][T15583] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5013'. [ 467.419423][ T64] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 467.438488][ T64] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 467.473192][ T64] usb 6-1: USB disconnect, device number 62 [ 467.539482][T12853] udevd[12853]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 467.796262][ T64] usb 6-1: new full-speed USB device number 63 using dummy_hcd [ 467.809920][T15593] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 467.809952][T15593] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:710 [ 467.912759][T15600] rust_binder: Write failure EFAULT in pid:717 [ 467.936733][T14969] usbhid 2-1:0.0: can't add hid device: -71 [ 467.953495][T14969] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 467.964004][T14969] usb 2-1: USB disconnect, device number 101 [ 467.968417][ T64] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 467.983456][ T64] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 467.999816][ T64] usb 6-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 468.026218][ T64] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.034344][ T64] usb 6-1: Product: syz [ 468.039932][ T64] usb 6-1: Manufacturer: syz [ 468.044653][ T64] usb 6-1: SerialNumber: syz [ 468.054952][ T64] usb 6-1: config 0 descriptor?? [ 468.067058][ T64] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -90 [ 468.379878][T14969] usb 6-1: USB disconnect, device number 63 [ 468.451615][ T36] kauditd_printk_skb: 1164 callbacks suppressed [ 468.451633][ T36] audit: type=1400 audit(8016778859.203:45699): avc: denied { read write } for pid=14570 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 468.512740][ T36] audit: type=1400 audit(8016778859.203:45700): avc: denied { read write open } for pid=14570 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 468.547101][ T36] audit: type=1400 audit(8016778859.203:45701): avc: denied { ioctl } for pid=14570 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 468.589415][T15621] 9p filesystem being mounted at /106/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 468.603850][ T36] audit: type=1400 audit(8016778859.253:45702): avc: denied { create } for pid=15615 comm="syz.1.5024" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 468.665450][ T36] audit: type=1400 audit(8016778859.263:45703): avc: denied { ioctl } for pid=15615 comm="syz.1.5024" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=75148 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 468.696323][ T36] audit: type=1400 audit(8016778859.263:45704): avc: denied { create } for pid=15615 comm="syz.1.5024" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 468.719817][T15624] audit: audit_backlog=65 > audit_backlog_limit=64 [ 468.733654][T15624] audit: audit_lost=58 audit_rate_limit=0 audit_backlog_limit=64 [ 468.742109][T15624] audit: backlog limit exceeded [ 468.751276][ T36] audit: type=1400 audit(8016778859.263:45705): avc: denied { ioctl } for pid=15615 comm="syz.1.5024" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=75149 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 469.026234][T14578] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 469.176312][T14578] usb 5-1: Using ep0 maxpacket: 32 [ 469.186031][T14578] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.194934][T15650] __vm_enough_memory: pid: 15650, comm: syz.2.5032, bytes: 18014402804453376 not enough memory for the allocation [ 469.215769][T14578] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.216699][T15649] __vm_enough_memory: pid: 15649, comm: syz.2.5032, bytes: 18014402804453376 not enough memory for the allocation [ 469.235703][T14578] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 469.273899][T14578] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.288610][T14578] usb 5-1: config 0 descriptor?? [ 469.306797][T14578] hub 5-1:0.0: USB hub found [ 469.329805][T15654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5034'. [ 469.396198][T12814] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 469.402352][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 469.501576][T15663] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15663 comm=syz.2.5037 [ 469.502579][T14578] hub 5-1:0.0: 1 port detected [ 469.517168][T15663] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15663 comm=syz.2.5037 [ 469.666237][ T2174] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 469.818342][ T2174] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 469.828481][ T2174] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 469.839776][ T2174] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 469.848939][ T2174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 469.857048][ T2174] usb 2-1: SerialNumber: syz [ 470.107632][T14578] hub 5-1:0.0: activate --> -90 [ 470.128128][T15668] rust_binder: 15667 RLIMIT_NICE not set [ 470.128167][T15668] rust_binder: 743: no such ref 0 [ 470.138997][T15668] rust_binder: 743: no such ref 3 [ 470.144047][T15668] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 470.186183][T14969] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 470.265438][T15675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5042'. [ 470.278026][T15675] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 470.278720][T15675] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 470.288298][T15675] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 470.288400][T15676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5042'. [ 470.316041][T14578] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 470.323887][ T64] usb 5-1: USB disconnect, device number 65 [ 470.362473][T14969] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.381638][T15680] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 470.396165][T14969] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.396645][T15680] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 470.422281][T14969] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 470.428989][T15680] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 470.435249][T14969] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 470.452877][T14969] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.468786][T14969] usb 6-1: config 0 descriptor?? [ 470.591734][T15688] rust_binder: Got transaction with invalid offset. [ 470.591772][T15688] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 470.598490][T15688] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:764 [ 470.653852][T15690] /dev/sr0: Can't lookup blockdev [ 470.774505][T15696] /dev/rnullb0: Can't open blockdev [ 470.923404][T15708] rust_binder: 954: no such ref 6 [ 470.928514][T15708] rust_binder: 954: no such ref 3 [ 470.933557][T15708] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 470.943806][T15708] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 470.945160][T15709] rust_binder: Write failure EINVAL in pid:954 [ 471.002333][T15714] /dev/rnullb0: Can't open blockdev [ 471.053964][T15716] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5056'. [ 471.145846][T15723] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 471.250586][T14969] usbhid 6-1:0.0: can't add hid device: -71 [ 471.276878][T14969] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 471.292799][T14969] usb 6-1: USB disconnect, device number 64 [ 471.902928][T15733] rust_binder: Write failure EFAULT in pid:505 [ 471.936156][T15735] EXT4-fs: dax option not supported [ 471.964244][T15735] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 471.969860][T15735] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 471.980896][T15735] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:507 [ 472.093394][T15741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 472.104482][T15744] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 472.119418][T15739] rust_binder: Failed to allocate buffer. len:1120, is_oneway:true [ 472.139364][T15741] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 472.178716][T15739] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 472.185911][T15739] rust_binder: Write failure EINVAL in pid:966 [ 472.387643][ T2174] usb 2-1: 0:2 : does not exist [ 472.423572][ T2174] usb 2-1: USB disconnect, device number 102 [ 472.480978][T15768] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 472.494258][T15768] overlayfs: missing 'lowerdir' [ 472.563337][T12853] udevd[12853]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 472.566153][ T64] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 472.632626][T15777] input: syz0 as /devices/virtual/input/input89 [ 472.832955][ T64] usb 5-1: Using ep0 maxpacket: 32 [ 472.840029][ T64] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.851434][ T64] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.861252][ T64] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 472.870295][ T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.879597][ T64] usb 5-1: config 0 descriptor?? [ 472.886860][ T64] hub 5-1:0.0: USB hub found [ 472.956102][T14578] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 473.088663][ T64] hub 5-1:0.0: 1 port detected [ 473.106061][T14578] usb 2-1: Using ep0 maxpacket: 8 [ 473.114359][T14578] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 473.123778][T14578] usb 2-1: config 1 has an invalid interface descriptor of length 3, skipping [ 473.132674][T14578] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 473.142791][T14578] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 473.158427][T14578] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 473.167548][T14578] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.175559][T14578] usb 2-1: Product: 陀뛧䞽䋩콑秜儨뾈拹䈣ю麭蘽涃솇㐘៕ꗓ阍這苄洡㪍쪊⍢䩒ᝉ䵨办䵬쮁䯻斍팳䋕彝寓좡䋥꧅펨鷌䙞ত [ 473.192321][T14578] usb 2-1: Manufacturer: ࠉ [ 473.196969][T14578] usb 2-1: SerialNumber: ч [ 473.249655][T15784] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 473.257356][T15785] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 473.464437][ T36] kauditd_printk_skb: 831 callbacks suppressed [ 473.464455][ T36] audit: type=1400 audit(8016778864.213:46528): avc: denied { read } for pid=15795 comm="syz.5.5079" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 473.501728][T15798] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 473.525579][ T36] audit: type=1400 audit(8016778864.233:46529): avc: denied { ioctl } for pid=15759 comm="syz.4.5070" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 473.560025][ T36] audit: type=1400 audit(8016778864.233:46530): avc: denied { ioctl } for pid=15759 comm="syz.4.5070" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 473.585709][ T36] audit: type=1400 audit(8016778864.263:46531): avc: denied { read open } for pid=15795 comm="syz.5.5079" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 473.640028][ T36] audit: type=1400 audit(8016778864.263:46532): avc: denied { ioctl } for pid=15795 comm="syz.5.5079" path="/dev/binderfs/binder1" dev="binder" ino=8 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 473.675695][ T36] audit: type=1400 audit(8016778864.263:46533): avc: denied { call } for pid=15795 comm="syz.5.5079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 473.695640][ T36] audit: type=1400 audit(8016778864.313:46534): avc: denied { name_bind } for pid=15800 comm="syz.2.5080" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 473.718121][ T64] hub 5-1:0.0: activate --> -90 [ 473.728216][ T36] audit: type=1400 audit(8016778864.313:46535): avc: denied { node_bind } for pid=15800 comm="syz.2.5080" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 473.756041][ T36] audit: type=1400 audit(8016778864.343:46536): avc: denied { mounton } for pid=15800 comm="syz.2.5080" path="/274/file0" dev="tmpfs" ino=1477 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 473.793287][T15814] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 473.800755][ T36] audit: type=1400 audit(8016778864.373:46537): avc: denied { ioctl } for pid=15776 comm="syz.1.5074" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 473.806924][T15814] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 473.834398][T15814] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 473.836107][T14578] usb 2-1: 0:2 : does not exist [ 473.843099][T15814] rust_binder: pid 15814 performed invalid decrement on ref [ 473.876234][T14578] usb 2-1: USB disconnect, device number 103 [ 473.940879][T12853] udevd[12853]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 473.958487][ T64] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 473.965523][ T64] usb 5-1: USB disconnect, device number 66 [ 473.971576][ T449] usb 5-1: Failed to suspend device, error -19 [ 481.495828][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 481.495846][ T36] audit: type=1400 audit(8016778872.243:46567): avc: denied { read } for pid=15815 comm="syz.5.5084" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 481.525515][T15819] rust_binder: Write failure EFAULT in pid:537 [ 481.575072][ T36] audit: type=1400 audit(8016778872.243:46568): avc: denied { read open } for pid=15815 comm="syz.5.5084" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 481.660426][T13047] audit: audit_backlog=65 > audit_backlog_limit=64 [ 481.692209][ T36] audit: type=1400 audit(8016778872.273:46569): avc: denied { ioctl } for pid=15815 comm="syz.5.5084" path="/dev/binderfs/binder1" dev="binder" ino=8 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 481.720666][T13047] audit: audit_lost=62 audit_rate_limit=0 audit_backlog_limit=64 [ 481.738722][T13047] audit: backlog limit exceeded [ 481.765197][T14570] audit: audit_backlog=65 > audit_backlog_limit=64 [ 481.782292][ T36] audit: type=1400 audit(8016778872.283:46570): avc: denied { ioctl } for pid=15815 comm="syz.5.5084" path="/dev/binderfs/binder1" dev="binder" ino=8 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 481.809693][T15837] audit: audit_backlog=65 > audit_backlog_limit=64 [ 481.824058][T14570] audit: audit_lost=63 audit_rate_limit=0 audit_backlog_limit=64 [ 481.845136][T15837] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 482.153304][T15842] overlay: Unknown parameter 'obj_role' [ 482.175799][T14969] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 482.255173][T15845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5094'. [ 482.375779][T14969] usb 2-1: Using ep0 maxpacket: 32 [ 482.401724][T14969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.415807][T14969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.433799][T14969] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 482.462277][T14969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.507364][T14969] usb 2-1: config 0 descriptor?? [ 482.535107][T14969] hub 2-1:0.0: USB hub found [ 482.602122][T15864] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 482.673347][T15871] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 482.682754][T15864] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 482.698897][T15864] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 482.732071][T15873] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:986 [ 482.750916][T14969] hub 2-1:0.0: 1 port detected [ 482.807954][T15875] rust_binder: Failed to allocate buffer. len:88, is_oneway:true [ 483.085772][ T10] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 483.247624][ T10] usb 6-1: config 0 has an invalid interface number: 190 but max is 0 [ 483.255829][ T10] usb 6-1: config 0 has no interface number 0 [ 483.261899][ T10] usb 6-1: New USB device found, idVendor=19d2, idProduct=1111, bcdDevice= 7.75 [ 483.270974][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.280271][ T10] usb 6-1: config 0 descriptor?? [ 483.358492][T14969] hub 2-1:0.0: activate --> -90 [ 483.411251][T15880] overlayfs: failed to clone upperpath [ 483.420169][T15880] 9pnet_fd: Insufficient options for proto=fd [ 483.495800][ T10] usb 6-1: string descriptor 0 read error: -71 [ 483.526576][ T10] usb 6-1: bad CDC descriptors [ 483.532527][ T10] usb 6-1: USB disconnect, device number 65 [ 483.564084][ T449] usb 2-1: USB disconnect, device number 104 [ 483.593421][T15895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5108'. [ 483.671195][T15905] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 483.690964][T15905] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 483.693024][T15907] binder: Unknown parameter 'defcontext01777777777777777777777' [ 483.757118][T15911] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5112'. [ 483.766268][T15911] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5112'. [ 483.821706][T15915] binder: Unknown parameter 'fscontext?}' [ 483.919440][T15920] fuse: Bad value for 'fd' [ 484.115782][T14969] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 484.282972][T14969] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 484.303388][T14969] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 484.315875][T14969] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.325446][T14969] usb 6-1: config 0 descriptor?? [ 484.332864][T15918] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 484.420553][T15940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5123'. [ 484.757871][T14969] hid-generic 0003:04F3:0755.0047: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 484.959820][T15918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.968340][T15918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.977038][T14969] usb 6-1: USB disconnect, device number 66 [ 485.107740][T15952] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5127'. [ 485.395869][T14578] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 485.493109][T15952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.525906][T15952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.625725][ T449] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 485.662974][T15973] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2 sclass=netlink_xfrm_socket pid=15973 comm=syz.2.5136 [ 485.788725][ T449] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 485.803075][ T449] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 485.816095][ T31] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 485.826832][ T449] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 485.847870][ T449] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 485.869190][ T449] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 485.885860][ T449] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 485.897205][ T449] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.909279][ T449] usb 2-1: config 0 descriptor?? [ 485.915784][T15962] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 485.995674][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 486.014273][ T31] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 486.033905][ T31] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 486.043447][ T31] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 486.053871][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 486.065446][ T31] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 486.079911][ T31] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 486.094181][ T31] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 486.105728][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.116825][ T31] usb 6-1: config 0 descriptor?? [ 486.208911][T15993] binder: Unknown parameter 'sFӌAEM' [ 486.307095][T16000] sock: sock_timestamping_bind_phc: sock not bind to device [ 486.332485][ T31] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 67 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 486.351555][ T449] plantronics 0003:047F:FFFF.0048: unknown main item tag 0xd [ 486.362195][ T31] usb 6-1: USB disconnect, device number 67 [ 486.369811][ T449] plantronics 0003:047F:FFFF.0048: No inputs registered, leaving [ 486.383261][ T31] usblp0: removed [ 486.391132][ T449] plantronics 0003:047F:FFFF.0048: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 486.527679][ T36] kauditd_printk_skb: 681 callbacks suppressed [ 486.527695][ T36] audit: type=1400 audit(8016778877.283:47243): avc: denied { read write } for pid=15967 comm="syz.5.5134" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 486.557752][T15970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.572227][ T36] audit: type=1400 audit(8016778877.283:47244): avc: denied { read write } for pid=15967 comm="syz.5.5134" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 486.574600][T15970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.601284][ T36] audit: type=1400 audit(8016778877.283:47245): avc: denied { read write open } for pid=15967 comm="syz.5.5134" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 486.630297][ T449] usb 2-1: USB disconnect, device number 105 [ 486.635659][ T36] audit: type=1400 audit(8016778877.283:47246): avc: denied { read write open } for pid=15967 comm="syz.5.5134" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 486.675887][ T36] audit: type=1400 audit(8016778877.283:47247): avc: denied { ioctl } for pid=15967 comm="syz.5.5134" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 486.713894][ T36] audit: type=1400 audit(8016778877.283:47248): avc: denied { ioctl } for pid=15967 comm="syz.5.5134" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 486.747530][ T36] audit: type=1400 audit(8016778877.283:47250): avc: denied { ioctl } for pid=15967 comm="syz.5.5134" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 486.774477][ T36] audit: type=1400 audit(8016778877.283:47249): avc: denied { ioctl } for pid=15967 comm="syz.5.5134" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 486.786639][T16025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5150'. [ 486.801141][ T36] audit: type=1400 audit(8016778877.283:47251): avc: denied { ioctl } for pid=15967 comm="syz.5.5134" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 486.836386][ T36] audit: type=1400 audit(8016778877.283:47252): avc: denied { ioctl } for pid=15967 comm="syz.5.5134" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 486.851142][T16027] 9pnet_fd: Insufficient options for proto=fd [ 487.089256][T16037] netlink: 'syz.4.5155': attribute type 16 has an invalid length. [ 487.097150][T16037] netlink: 16170 bytes leftover after parsing attributes in process `syz.4.5155'. [ 487.248802][T16040] bridge0: port 3(syz_tun) entered blocking state [ 487.255246][T16040] bridge0: port 3(syz_tun) entered disabled state [ 487.261783][T16040] syz_tun: entered allmulticast mode [ 487.267527][T16040] syz_tun: entered promiscuous mode [ 487.285113][T16040] bridge0: port 3(syz_tun) entered blocking state [ 487.291693][T16040] bridge0: port 3(syz_tun) entered forwarding state [ 487.354322][T16042] tmpfs: Invalid uid '0x00000000ffffffff' [ 487.365647][T14578] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 487.520828][T14578] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 487.541097][T16051] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5161'. [ 487.555804][T14578] usb 5-1: config 1 interface 0 has no altsetting 0 [ 487.590273][T14578] usb 5-1: language id specifier not provided by device, defaulting to English [ 487.600142][T16053] rust_binder: Write failure EFAULT in pid:580 [ 487.608668][T14578] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40 [ 487.624920][T14578] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.633897][T14578] usb 5-1: Product: syz [ 487.643497][T14578] usb 5-1: Manufacturer: ޿ṕ즒꡴婵皰磈㠁缥鉓堫췟芄嶦ꓡ᧼啠㌂座∺티먌ꭖ쓻╝㈺﵁債隥굄糶䵎孜 [ 487.660173][T14578] usb 5-1: SerialNumber: syz [ 487.702954][T16060] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 487.768277][T16062] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 487.878217][T16037] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1025 [ 487.887750][T14578] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 487.906113][T14578] usb 5-1: USB disconnect, device number 68 [ 487.908737][T14969] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 488.055652][T14969] usb 2-1: device descriptor read/64, error -71 [ 488.295629][T14969] usb 2-1: device descriptor read/64, error -71 [ 488.380325][T16067] fuseblk: Unknown parameter 'rootmodd' [ 488.456234][T16069] tc_dump_action: action bad kind [ 488.535670][T14969] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 488.617215][T16074] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 488.666162][T14969] usb 2-1: device descriptor read/64, error -71 [ 488.682328][T16084] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 488.721673][T16085] tipc: Started in network mode [ 488.734485][T16085] tipc: Node identity 22df12209686, cluster identity 4711 [ 488.741866][T16085] tipc: Enabled bearer , priority 0 [ 488.753746][T16085] tipc: Resetting bearer [ 488.766216][T16085] tipc: Disabling bearer [ 488.822043][T16097] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 488.832153][T16097] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 488.946407][T14969] usb 2-1: device descriptor read/64, error -71 [ 488.967483][T16113] netlink: 'syz.2.5182': attribute type 12 has an invalid length. [ 488.979507][T16114] netlink: 'syz.2.5182': attribute type 12 has an invalid length. [ 489.065890][T14969] usb usb2-port1: attempt power cycle [ 489.095914][T16119] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 489.103164][T16122] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 4294967293 [ 489.120404][T16122] rust_binder: Write failure EINVAL in pid:594 [ 489.364775][T16130] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 489.377724][T16130] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 489.415603][T14969] usb 2-1: new full-speed USB device number 108 using dummy_hcd [ 489.447626][T14969] usb 2-1: device descriptor read/8, error -71 [ 489.482511][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 489.577475][T14969] usb 2-1: device descriptor read/8, error -71 [ 489.765568][ T10] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 489.815573][T14969] usb 2-1: new full-speed USB device number 109 using dummy_hcd [ 489.822255][T16152] overlayfs: failed to resolve './file0/file0': -2 [ 489.838194][T14969] usb 2-1: device descriptor read/8, error -71 [ 489.907395][T16163] 9pnet_fd: Insufficient options for proto=fd [ 489.915988][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 489.925151][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.936438][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.946429][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 489.957494][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.968278][T14969] usb 2-1: device descriptor read/8, error -71 [ 489.974998][ T10] usb 6-1: config 0 descriptor?? [ 489.983822][ T10] hub 6-1:0.0: USB hub found [ 490.076040][T14969] usb usb2-port1: unable to enumerate USB device [ 490.101952][T16181] fuse: Bad value for 'group_id' [ 490.106951][T16181] fuse: Bad value for 'group_id' [ 490.185727][ T10] hub 6-1:0.0: 1 port detected [ 490.794907][ T10] hub 6-1:0.0: activate --> -90 [ 491.000418][T16138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.009145][T16138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.018821][ T10] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 491.018887][ T31] usb 6-1: USB disconnect, device number 69 [ 491.549044][ T36] kauditd_printk_skb: 592 callbacks suppressed [ 491.549062][ T36] audit: type=1400 audit(8016778882.303:47845): avc: denied { read write } for pid=13047 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 491.574879][T16208] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 491.579589][T12814] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 491.586631][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 491.599312][T16208] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 491.637504][ T36] audit: type=1400 audit(8016778882.303:47846): avc: denied { read write open } for pid=13047 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 491.709556][ T36] audit: type=1400 audit(8016778882.303:47847): avc: denied { ioctl } for pid=13047 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 491.758296][ T36] audit: type=1400 audit(8016778882.303:47848): avc: denied { read } for pid=16207 comm="syz.5.5217" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 491.810239][ T36] audit: type=1400 audit(8016778882.303:47849): avc: denied { read open } for pid=16207 comm="syz.5.5217" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 491.844393][ T36] audit: type=1400 audit(8016778882.303:47850): avc: denied { map } for pid=16207 comm="syz.5.5217" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 491.869275][ T36] audit: type=1400 audit(8016778882.303:47851): avc: denied { read } for pid=16207 comm="syz.5.5217" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 491.894227][ T36] audit: type=1400 audit(8016778882.303:47852): avc: denied { ioctl } for pid=16207 comm="syz.5.5217" path="/dev/binderfs/binder1" dev="binder" ino=8 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 491.915964][T16229] binder: Bad value for 'max' [ 491.922397][ T36] audit: type=1400 audit(8016778882.343:47853): avc: denied { ioctl } for pid=16207 comm="syz.5.5217" path="/dev/binderfs/binder1" dev="binder" ino=8 ioctlcmd=0x620b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 491.950028][ T36] audit: type=1400 audit(8016778882.353:47854): avc: denied { ioctl } for pid=16207 comm="syz.5.5217" path="/dev/binderfs/binder1" dev="binder" ino=8 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 492.141827][T16231] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 492.475505][T14969] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 492.524811][T16254] binder: Unknown parameter 'defcontext01777777777777777777777' [ 492.625493][T14969] usb 5-1: Using ep0 maxpacket: 32 [ 492.632657][T14969] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 492.641670][T14969] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 492.651469][T14969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.660968][T14969] usb 5-1: config 0 descriptor?? [ 493.551654][T16276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16276 comm=syz.1.5237 [ 493.855454][ T10] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 493.985467][ T10] usb 2-1: device descriptor read/64, error -71 [ 494.225469][ T10] usb 2-1: device descriptor read/64, error -71 [ 494.465444][ T10] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 494.605445][ T10] usb 2-1: device descriptor read/64, error -71 [ 494.845411][ T10] usb 2-1: device descriptor read/64, error -71 [ 494.959319][ T10] usb usb2-port1: attempt power cycle [ 495.053892][T16324] /dev/rnullb0: Can't open blockdev [ 495.205649][T16333] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 495.208695][T16333] rust_binder: Error in use_page_slow: ESRCH [ 495.215215][T16333] rust_binder: use_range failure ESRCH [ 495.221267][T16333] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 495.226839][T16333] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 495.234769][T16333] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:624 [ 495.307547][ T10] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 495.348764][ T10] usb 2-1: device descriptor read/8, error -71 [ 495.477790][ T10] usb 2-1: device descriptor read/8, error -71 [ 495.644380][ T470] usb 5-1: USB disconnect, device number 69 [ 495.647030][T16348] tipc: Started in network mode [ 495.655374][T16348] tipc: Node identity ac14142f, cluster identity 4711 [ 495.673946][T16348] tipc: New replicast peer: 0.0.0.0 [ 495.698797][T16348] tipc: Enabled bearer , priority 10 [ 495.705049][T16351] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0002 [ 495.716220][T16348] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5260'. [ 495.725237][T16348] z00X: renamed from gretap0 (while UP) [ 495.731112][ T10] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 495.739900][T16348] z00X: entered allmulticast mode [ 495.777954][ T10] usb 2-1: device descriptor read/8, error -71 [ 495.784809][T16355] futex_wake_op: syz.2.5262 tries to shift op by 144; fix this program [ 495.917756][ T10] usb 2-1: device descriptor read/8, error -71 [ 496.025460][ T10] usb usb2-port1: unable to enumerate USB device [ 496.328783][T16383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5271'. [ 496.453985][T16395] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 496.461104][T16395] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 496.468239][T16395] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 496.476683][T16395] rust_binder: pid 16395 performed invalid decrement on ref [ 496.495413][ T10] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 496.536885][T16400] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 496.561219][ T36] kauditd_printk_skb: 706 callbacks suppressed [ 496.561246][ T36] audit: type=1400 audit(8016778887.314:48561): avc: denied { ioctl } for pid=16401 comm="syz.4.5278" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 496.601200][ T36] audit: type=1400 audit(8016778887.354:48562): avc: denied { ioctl } for pid=16380 comm="syz.5.5270" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 496.641224][ T36] audit: type=1400 audit(8016778887.394:48563): avc: denied { read write } for pid=14570 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 496.667090][ T36] audit: type=1400 audit(8016778887.394:48564): avc: denied { read write open } for pid=14570 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 496.696056][ T10] usb 6-1: too many configurations: 72, using maximum allowed: 8 [ 496.713257][ T36] audit: type=1400 audit(8016778887.394:48565): avc: denied { ioctl } for pid=14570 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 496.736342][ T10] usb 6-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 496.750255][ T36] audit: type=1400 audit(8016778887.394:48566): avc: denied { read append } for pid=16406 comm="syz.1.5279" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 496.754112][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.774648][ T36] audit: type=1400 audit(8016778887.394:48567): avc: denied { read open } for pid=16406 comm="syz.1.5279" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 496.794445][ T10] usb 6-1: config 0 descriptor?? [ 496.805440][ T36] audit: type=1400 audit(8016778887.394:48568): avc: denied { map } for pid=16406 comm="syz.1.5279" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 496.827013][ T10] usb 6-1: bad CDC descriptors [ 496.833521][ T31] tipc: Node number set to 2886997039 [ 496.842502][ T36] audit: type=1400 audit(8016778887.394:48569): avc: denied { read } for pid=16406 comm="syz.1.5279" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 496.877903][ T36] audit: type=1400 audit(8016778887.394:48570): avc: denied { read write } for pid=16406 comm="syz.1.5279" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 496.942943][T16413] rust_binder: Write failure EFAULT in pid:1094 [ 497.010273][T16420] netlink: 'syz.2.5284': attribute type 11 has an invalid length. [ 497.024331][T16420] netlink: 'syz.2.5284': attribute type 2 has an invalid length. [ 497.075361][ T470] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 497.241330][ T470] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 497.251249][ T470] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.261562][ T470] usb 2-1: Product: syz [ 497.266386][ T470] usb 2-1: Manufacturer: syz [ 497.271017][ T470] usb 2-1: SerialNumber: syz [ 497.305342][T14578] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 497.474478][T14578] usb 5-1: Using ep0 maxpacket: 32 [ 497.482659][T14578] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.493932][T14578] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.503781][T14578] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 497.512873][T14578] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.533520][T14578] usb 5-1: config 0 descriptor?? [ 497.540549][T14578] hub 5-1:0.0: USB hub found [ 497.713753][ T470] rtl8150 2-1:1.0: couldn't reset the device [ 497.719909][ T470] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 497.732185][ T470] usb 2-1: USB disconnect, device number 114 [ 497.756144][T14578] hub 5-1:0.0: 1 port detected [ 497.924350][T16428] netlink: 'syz.2.5287': attribute type 15 has an invalid length. [ 498.365729][T14578] hub 5-1:0.0: activate --> -90 [ 498.424488][T16440] fuse: Bad value for 'group_id' [ 498.429553][T16440] fuse: Bad value for 'group_id' [ 498.580396][T16422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.612539][T16422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.634795][T14578] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 498.635206][ T10] usb 5-1: USB disconnect, device number 70 [ 498.878837][T16454] incfs: Options parsing error. -22 [ 498.884083][T16454] incfs: mount failed -22 [ 499.215285][ T10] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 499.226704][T16470] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5303'. [ 499.293280][ T2174] usb 6-1: USB disconnect, device number 70 [ 499.351600][T16480] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 499.354990][T16480] rust_binder: Error in use_page_slow: ESRCH [ 499.362053][T16480] rust_binder: use_range failure ESRCH [ 499.368671][T16480] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 499.374277][T16480] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 499.390121][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 499.395125][T16480] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:641 [ 499.401737][ T10] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 499.430281][T16481] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 499.430347][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.438988][T16481] rust_binder: 641: no such ref 1 [ 499.452303][T16481] rust_binder: Error in use_page_slow: ESRCH [ 499.452323][T16481] rust_binder: use_range failure ESRCH [ 499.454913][ T10] usb 2-1: config 0 descriptor?? [ 499.470127][T16481] rust_binder: Failed to allocate buffer. len:3160, is_oneway:true [ 499.470153][T16481] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 499.479100][T16460] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 499.497221][T16481] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:641 [ 499.565273][ T449] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 499.745239][ T449] usb 5-1: Using ep0 maxpacket: 32 [ 499.758540][ T449] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 499.770592][ T449] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 499.779340][ T449] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 499.788325][ T449] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 499.798084][ T449] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 499.807762][ T449] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 499.820823][ T449] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 499.829887][ T449] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.846967][ T449] usb 5-1: config 0 descriptor?? [ 499.913094][ T10] hid-generic 0003:04F3:0755.0049: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 499.975282][ T470] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 500.069493][ T449] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 71 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 500.081545][ T449] usb 5-1: USB disconnect, device number 71 [ 500.090552][ T449] usblp0: removed [ 500.115701][T16460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.126039][T16460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.139341][ T470] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.141365][ T31] usb 2-1: USB disconnect, device number 115 [ 500.165838][ T470] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.195233][ T470] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 500.211701][ T470] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 500.224591][ T470] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.234943][ T470] usb 6-1: config 0 descriptor?? [ 500.505223][ T10] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 500.655205][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 500.662337][ T10] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 500.671400][ T10] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 500.681218][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 500.690276][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 500.699969][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 500.709879][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 500.722888][ T10] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 500.731942][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.741422][ T10] usb 5-1: config 0 descriptor?? [ 500.853618][ T470] usbhid 6-1:0.0: can't add hid device: -71 [ 500.859716][ T470] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 500.868786][ T470] usb 6-1: USB disconnect, device number 71 [ 500.954238][ T10] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 72 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 501.133907][T16528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5322'. [ 501.313990][T16542] input: syz0 as /devices/virtual/input/input92 [ 501.324992][ T470] usb 5-1: USB disconnect, device number 72 [ 501.342504][ T470] usblp0: removed [ 501.532066][T16550] loop7: detected capacity change from 0 to 7 [ 501.563903][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.573066][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 501.582376][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.591531][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 501.596511][ T36] kauditd_printk_skb: 677 callbacks suppressed [ 501.596540][ T36] audit: type=1400 audit(8016778892.344:49248): avc: denied { ioctl } for pid=16551 comm="syz.5.5329" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 501.636097][ T36] audit: type=1400 audit(8016778892.344:49249): avc: denied { map } for pid=16551 comm="syz.5.5329" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 501.657405][T16550] loop7: unable to read partition table [ 501.661414][ T36] audit: type=1400 audit(8016778892.344:49250): avc: denied { ioctl } for pid=16551 comm="syz.5.5329" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 501.691872][ T36] audit: type=1400 audit(8016778892.344:49251): avc: denied { read } for pid=16551 comm="syz.5.5329" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 501.691882][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.716084][ T36] audit: type=1400 audit(8016778892.344:49252): avc: denied { ioctl } for pid=16551 comm="syz.5.5329" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x770a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 501.746009][T16550] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 501.759185][T16558] /dev/rnullb0: Can't open blockdev [ 501.774093][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.781486][ T36] audit: type=1400 audit(8016778892.364:49253): avc: denied { ioctl } for pid=16551 comm="syz.5.5329" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 501.783243][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 501.821906][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.831082][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 501.835269][ T36] audit: type=1400 audit(8016778892.364:49254): avc: denied { ioctl } for pid=16551 comm="syz.5.5329" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 501.845176][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.872684][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 501.875843][ T36] audit: type=1400 audit(8016778892.364:49255): avc: denied { ioctl } for pid=16551 comm="syz.5.5329" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 501.881554][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.906854][T16560] rust_binder: Write failure EFAULT in pid:672 [ 501.914258][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 501.928997][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.938164][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 501.944677][ T36] audit: type=1400 audit(8016778892.364:49256): avc: denied { ioctl } for pid=16551 comm="syz.5.5329" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 501.978841][ T36] audit: type=1400 audit(8016778892.364:49257): avc: denied { ioctl } for pid=16551 comm="syz.5.5329" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 502.325179][T14969] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 502.356986][T14578] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 502.477679][T14969] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 502.488303][T14969] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 502.498986][T14969] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 502.508574][T14969] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 502.516662][T14969] usb 6-1: SerialNumber: syz [ 502.530364][T14578] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 502.541351][T14578] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.551112][T14578] usb 5-1: config 0 interface 0 has no altsetting 0 [ 502.557737][T14578] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 502.566796][T14578] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.576284][T14578] usb 5-1: config 0 descriptor?? [ 502.731573][T14969] usb 6-1: 0:2 : does not exist [ 502.740982][T14969] usb 6-1: USB disconnect, device number 72 [ 502.785445][T15858] udevd[15858]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 502.986364][T14578] hid-steam 0003:28DE:1102.004A: unknown main item tag 0x0 [ 502.993678][T14578] hid-steam 0003:28DE:1102.004A: unknown main item tag 0x0 [ 503.001414][T14578] hid-steam 0003:28DE:1102.004A: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 503.065148][T14578] hid-steam 0003:28DE:1102.004A: Steam Controller 'XXXXXXXXXX' connected [ 503.074089][T14578] input: Steam Controller as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1102.004A/input/input93 [ 503.095506][T14578] hid-steam 0003:28DE:1102.004B: unknown main item tag 0x0 [ 503.115142][T14578] hid-steam 0003:28DE:1102.004B: unknown main item tag 0x0 [ 503.131065][T14578] hid-steam 0003:28DE:1102.004B: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 503.201084][ T449] usb 5-1: USB disconnect, device number 73 [ 503.314947][T16605] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5343'. [ 503.323869][T16594] fido_id[16594]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 503.344662][ T449] hid-steam 0003:28DE:1102.004A: Steam Controller 'XXXXXXXXXX' disconnected [ 503.408663][T16607] netlink: 'syz.1.5345': attribute type 27 has an invalid length. [ 503.474024][T16607] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 503.515018][T16625] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 503.527044][T16625] rust_binder: Failed to allocate buffer. len:4200, is_oneway:false [ 503.615163][T14969] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 503.633368][T16631] bridge0: port 3(dummy0) entered blocking state [ 503.639715][T16631] bridge0: port 3(dummy0) entered disabled state [ 503.646145][T16631] dummy0: entered allmulticast mode [ 503.652946][T16631] dummy0: entered promiscuous mode [ 503.658714][T16631] bridge0: port 3(dummy0) entered blocking state [ 503.665055][T16631] bridge0: port 3(dummy0) entered forwarding state [ 503.786817][T14969] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 503.801805][T14969] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 503.811545][T14969] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 503.819836][T14969] usb 6-1: SerialNumber: syz [ 503.945123][ T10] usb 2-1: new full-speed USB device number 116 using dummy_hcd [ 504.034460][T16611] binder: Bad value for 'defcontext' [ 504.097400][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 504.108381][ T10] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 504.118546][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.129221][ T10] usb 2-1: config 0 descriptor?? [ 504.146441][T16633] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 504.254528][T14969] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 504.276852][T14969] usb 6-1: USB disconnect, device number 73 [ 504.588843][ T10] hid-generic 0003:04F3:0755.004C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 504.694295][T16652] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 504.710954][T16652] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 504.717503][T16652] rust_binder: Read failure Err(EFAULT) in pid:1131 [ 504.765619][T16658] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 504.776637][T16658] rust_binder: Read failure Err(EFAULT) in pid:1133 [ 504.783435][T14578] usb 2-1: USB disconnect, device number 116 [ 504.798825][T16662] /dev/rnullb0: Can't open blockdev [ 505.009803][T16676] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=16676 comm=syz.5.5368 [ 505.034957][T16676] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5368'. [ 505.047850][T16676] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 505.048593][T16676] rust_binder: Failed to allocate buffer. len:1184, is_oneway:true [ 505.140259][T16686] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 505.153820][T16686] rust_binder: Failed to allocate buffer. len:1168, is_oneway:false [ 505.323402][T16695] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5375'. [ 505.555074][T14578] usb 2-1: new full-speed USB device number 117 using dummy_hcd [ 505.706999][T14578] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 505.718075][T14578] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 505.727168][T14578] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.737212][T14578] usb 2-1: config 0 descriptor?? [ 505.743270][T16694] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 505.876333][T16698] pim6reg1: entered promiscuous mode [ 505.881665][T16698] pim6reg1: entered allmulticast mode [ 505.888479][T16697] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 505.888590][T16699] rust_binder: Failed to allocate buffer. len:1152, is_oneway:false [ 506.163454][T14578] hid-generic 0003:04F3:0755.004D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 506.282379][T16726] binder: Unknown parameter '' [ 506.672398][ T36] kauditd_printk_skb: 1017 callbacks suppressed [ 506.672416][ T36] audit: type=1400 audit(8016778897.424:50275): avc: denied { read write } for pid=13047 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 506.704009][ T36] audit: type=1400 audit(8016778897.424:50276): avc: denied { read write open } for pid=13047 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 506.731935][ T36] audit: type=1400 audit(8016778897.424:50277): avc: denied { ioctl } for pid=13047 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 506.757815][ T36] audit: type=1400 audit(8016778897.444:50278): avc: denied { read write } for pid=16761 comm="syz.5.5400" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 506.781556][ T36] audit: type=1400 audit(8016778897.444:50279): avc: denied { read write open } for pid=16761 comm="syz.5.5400" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 506.806914][ T36] audit: type=1400 audit(8016778897.444:50280): avc: denied { ioctl } for pid=16761 comm="syz.5.5400" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 506.832075][ T36] audit: type=1400 audit(8016778897.444:50281): avc: denied { ioctl } for pid=16761 comm="syz.5.5400" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 506.857157][ T36] audit: type=1400 audit(8016778897.444:50282): avc: denied { ioctl } for pid=16761 comm="syz.5.5400" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 506.882461][ T36] audit: type=1400 audit(8016778897.444:50283): avc: denied { ioctl } for pid=16761 comm="syz.5.5400" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 506.907485][ T36] audit: type=1400 audit(8016778897.484:50284): avc: denied { write } for pid=16693 comm="syz.1.5376" name="hidraw0" dev="devtmpfs" ino=1443 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 506.935553][ T10] usb 6-1: new full-speed USB device number 74 using dummy_hcd [ 507.086936][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 507.097920][ T10] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 507.106988][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.116180][ T10] usb 6-1: config 0 descriptor?? [ 507.122434][T16762] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 507.410563][T16772] 8021q: VLANs not supported on syzkaller1 [ 507.536205][ T10] hid-generic 0003:04F3:0755.004E: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 507.754730][T14969] usb 6-1: USB disconnect, device number 74 [ 507.788247][T16789] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=62931 sclass=netlink_xfrm_socket pid=16789 comm=syz.2.5408 [ 507.872289][T16794] /dev/rnullb0: Can't open blockdev [ 507.927198][T16798] /dev/rnullb0: Can't open blockdev [ 507.949886][T16797] 9pnet_fd: Insufficient options for proto=fd [ 507.950726][ T470] usb 2-1: USB disconnect, device number 117 [ 508.294589][T16822] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 508.297559][T16824] rust_binder: Error in use_page_slow: ESRCH [ 508.304141][T16824] rust_binder: use_range failure ESRCH [ 508.310256][T16824] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 508.316021][T16824] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 508.323989][T16824] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:695 [ 508.334089][T16822] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 508.350386][T16822] rust_binder: 695: no such ref 1 [ 508.356306][T16822] rust_binder: Error in use_page_slow: ESRCH [ 508.356322][T16822] rust_binder: use_range failure ESRCH [ 508.362346][T16822] rust_binder: Failed to allocate buffer. len:3160, is_oneway:true [ 508.367904][T16822] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 508.376086][T16822] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:695 [ 508.413758][T16826] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 508.428904][T16826] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 508.532205][T16828] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 508.834343][T16833] netlink: 'syz.4.5421': attribute type 46 has an invalid length. [ 509.022494][T16844] 9pnet_fd: Insufficient options for proto=fd [ 509.077991][T16848] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 509.081894][T16846] rust_binder: Error while translating object. [ 509.081976][T16848] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 509.094996][T16846] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 509.101663][T16846] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:531 [ 509.412820][T16876] netlink: 'syz.1.5438': attribute type 3 has an invalid length. [ 510.121542][T16890] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 510.193865][T16896] fuse: Bad value for 'fd' [ 510.211107][T16896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5443'. [ 510.220023][T16896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5443'. [ 510.253039][T16898] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 510.372836][T16904] SELinux: security_context_str_to_sid (syste_uGй :B8) failed with errno=-22 [ 510.467117][T16898] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 510.485246][T16911] fuse: Unknown parameter '' [ 510.734925][ T470] usb 2-1: new full-speed USB device number 118 using dummy_hcd [ 510.864933][ T470] usb 2-1: device descriptor read/64, error -71 [ 511.104910][ T470] usb 2-1: device descriptor read/64, error -71 [ 511.344915][ T470] usb 2-1: new full-speed USB device number 119 using dummy_hcd [ 511.474889][ T470] usb 2-1: device descriptor read/64, error -71 [ 511.474889][T14578] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 511.629247][T14578] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.640601][T14578] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.651310][T14578] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 511.664903][T14578] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 511.674017][T14578] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.687699][T14578] usb 5-1: config 0 descriptor?? [ 511.695950][ T36] kauditd_printk_skb: 583 callbacks suppressed [ 511.695964][ T36] audit: type=1400 audit(8016778902.454:50868): avc: denied { ioctl } for pid=16931 comm="syz.4.5456" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 511.734814][ T36] audit: type=1400 audit(8016778902.454:50869): avc: denied { ioctl } for pid=16931 comm="syz.4.5456" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 511.735358][ T470] usb 2-1: device descriptor read/64, error -71 [ 511.766686][ T36] audit: type=1400 audit(8016778902.454:50870): avc: denied { ioctl } for pid=16931 comm="syz.4.5456" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 511.791816][ T36] audit: type=1400 audit(8016778902.454:50871): avc: denied { ioctl } for pid=16931 comm="syz.4.5456" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 511.817010][ T36] audit: type=1400 audit(8016778902.554:50872): avc: denied { unmount } for pid=13047 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 511.838556][ T36] audit: type=1400 audit(8016778902.574:50873): avc: denied { read write } for pid=13047 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 511.863565][ T36] audit: type=1400 audit(8016778902.574:50874): avc: denied { read write open } for pid=13047 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 511.907201][ T470] usb usb2-port1: attempt power cycle [ 511.921138][ T36] audit: type=1400 audit(8016778902.574:50875): avc: denied { ioctl } for pid=13047 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 511.952986][ T36] audit: type=1400 audit(8016778902.644:50876): avc: denied { read write } for pid=16940 comm="syz.5.5458" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 511.978262][ T36] audit: type=1400 audit(8016778902.644:50877): avc: denied { read write open } for pid=16940 comm="syz.5.5458" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 512.096765][T16952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 512.131905][T14578] usbhid 5-1:0.0: can't add hid device: -71 [ 512.144457][T14578] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 512.153123][T14578] usb 5-1: USB disconnect, device number 74 [ 512.244896][ T470] usb 2-1: new full-speed USB device number 120 using dummy_hcd [ 512.266633][ T470] usb 2-1: device descriptor read/8, error -71 [ 512.397209][ T470] usb 2-1: device descriptor read/8, error -71 [ 512.563127][T16966] netlink: 488 bytes leftover after parsing attributes in process `syz.2.5467'. [ 512.644875][ T470] usb 2-1: new full-speed USB device number 121 using dummy_hcd [ 512.671395][ T470] usb 2-1: device descriptor read/8, error -71 [ 512.817150][ T470] usb 2-1: device descriptor read/8, error -71 [ 512.934965][ T470] usb usb2-port1: unable to enumerate USB device [ 513.004845][ T10] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 513.072041][T16991] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 513.080716][T16991] SELinux: failed to load policy [ 513.174822][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 513.182103][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.193108][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.203218][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 513.212598][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.233760][T16995] binder: Unknown parameter 'se"label' [ 513.234825][ T10] usb 5-1: config 0 descriptor?? [ 513.261466][ T10] hub 5-1:0.0: USB hub found [ 513.271403][T16997] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 513.385865][T17004] input: syz0 as /devices/virtual/input/input94 [ 513.411313][T17004] TCP: TCP_TX_DELAY enabled [ 513.466201][ T10] hub 5-1:0.0: 1 port detected [ 513.515050][T17006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5482'. [ 513.550609][T17008] 9pnet: Unknown protocol version 9U2000.L [ 513.699170][T17006] rust_binder: Error while translating object. [ 513.699211][T17006] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 513.705448][T17006] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:549 [ 513.755746][T17015] /dev/rnullb0: Can't open blockdev [ 513.803413][T17018] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5486'. [ 513.855027][T17018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5486'. [ 513.871380][T17025] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 513.871401][T17025] rust_binder: Read failure Err(EFAULT) in pid:560 [ 514.003644][T17032] 9pnet_fd: Insufficient options for proto=fd [ 514.023930][T17034] /dev/rnullb0: Can't open blockdev [ 514.066780][T17039] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 514.077174][T17038] rust_binder: Error in use_page_slow: ESRCH [ 514.077207][T17038] rust_binder: use_range failure ESRCH [ 514.084610][T17038] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 514.094820][ T10] hub 5-1:0.0: activate --> -90 [ 514.113642][T17038] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 514.113694][T17038] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:567 [ 514.493883][T16980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.511414][T16980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.522670][T17047] overlay: Unknown parameter '/' [ 514.527073][ T470] usb 5-1: USB disconnect, device number 75 [ 514.536967][T17047] ------------[ cut here ]------------ [ 514.542532][T17047] WARNING: CPU: 1 PID: 17047 at mm/page_alloc.c:5234 __alloc_pages_noprof+0xe8/0x7b0 [ 514.552221][T17047] Modules linked in: [ 514.556152][T17047] CPU: 1 UID: 0 PID: 17047 Comm: syz.5.5496 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 514.567834][T17047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 514.577938][T17047] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 514.583848][T17047] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 32 0f ee 05 00 0f 85 be 00 00 00 c6 05 25 0f ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 514.603507][T17047] RSP: 0018:ffffc90004bd7860 EFLAGS: 00010246 [ 514.609615][T17047] RAX: 0000000000000000 RBX: 000000000000000e RCX: 0000000000000000 [ 514.617620][T17047] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90004bd7918 [ 514.625637][T17047] RBP: ffffc90004bd7988 R08: ffffc90004bd7917 R09: 0000000000000000 [ 514.633630][T17047] R10: ffffc90004bd7900 R11: fffff5200097af23 R12: ffffc90004bd78a0 [ 514.641646][T17047] R13: dffffc0000000000 R14: 1ffff9200097af10 R15: 0000000000000000 [ 514.649653][T17047] FS: 00007f81dcff86c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 514.658621][T17047] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 514.665278][T17047] CR2: 00007f81dcff7f98 CR3: 000000012b114000 CR4: 00000000003526b0 [ 514.673335][T17047] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 514.681410][T17047] DR3: 3a810b1eb6134bdc DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 514.689415][T17047] Call Trace: [ 514.692683][T17047] [ 514.695623][T17047] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 514.701796][T17047] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 514.707539][T17047] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 514.713259][T17047] ___kmalloc_large_node+0x81/0x220 [ 514.718587][T17047] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 514.724248][T17047] __kmalloc_large_node_noprof+0x1e/0xe0 [ 514.729900][T17047] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 514.735600][T17047] __kmalloc_noprof+0x336/0x530 [ 514.740453][T17047] ? __cfi_lockref_get+0x10/0x10 [ 514.745546][T17047] incfs_realloc_mount_info+0xa7/0x4d0 [ 514.751008][T17047] ? incfs_add_sysfs_node+0x118/0x240 [ 514.756587][T17047] incfs_alloc_mount_info+0x479/0x600 [ 514.761991][T17047] incfs_mount_fs+0x3ca/0x960 [ 514.766699][T17047] ? __cfi_incfs_mount_fs+0x10/0x10 [ 514.771908][T17047] ? vfs_parse_fs_string+0x102/0x170 [ 514.777282][T17047] ? selinux_capable+0x38/0x50 [ 514.782146][T17047] legacy_get_tree+0x106/0x1b0 [ 514.787078][T17047] ? __cfi_incfs_mount_fs+0x10/0x10 [ 514.792289][T17047] vfs_get_tree+0x9e/0x290 [ 514.796894][T17047] do_new_mount+0x251/0xb40 [ 514.801444][T17047] ? security_capable+0xcf/0xf0 [ 514.806372][T17047] path_mount+0x688/0x1050 [ 514.810789][T17047] ? putname+0x113/0x150 [ 514.815093][T17047] __se_sys_mount+0x2bd/0x480 [ 514.819769][T17047] ? __x64_sys_mount+0xf0/0xf0 [ 514.824520][T17047] ? __kasan_check_write+0x18/0x20 [ 514.829740][T17047] ? fpregs_restore_userregs+0x11d/0x260 [ 514.835442][T17047] __x64_sys_mount+0xc3/0xf0 [ 514.840036][T17047] x64_sys_call+0x2021/0x2ee0 [ 514.844769][T17047] do_syscall_64+0x58/0xf0 [ 514.849299][T17047] ? clear_bhb_loop+0x50/0xa0 [ 514.853970][T17047] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 514.859967][T17047] RIP: 0033:0x7f81dc18f6c9 [ 514.864388][T17047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.884026][T17047] RSP: 002b:00007f81dcff8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 514.892471][T17047] RAX: ffffffffffffffda RBX: 00007f81dc3e6090 RCX: 00007f81dc18f6c9 [ 514.900502][T17047] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080 [ 514.908510][T17047] RBP: 00007f81dc211f91 R08: 0000200000000340 R09: 0000000000000000 [ 514.916559][T17047] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000000 [ 514.924537][T17047] R13: 00007f81dc3e6128 R14: 00007f81dc3e6090 R15: 00007ffc4efbf2e8 [ 514.932552][T17047] [ 514.935609][T17047] ---[ end trace 0000000000000000 ]--- [ 514.942077][T17047] incfs: Error allocating mount info. -12 [ 514.948574][T17047] incfs: mount failed -12