last executing test programs: 4m51.717934888s ago: executing program 1 (id=520): sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340), 0x10, &(0x7f0000000400)={&(0x7f0000000880)=@can={{0x2, 0x1}, 0x2, 0x1, 0x0, 0x0, "3e2583525232cb4e"}, 0x10}, 0x1, 0x0, 0x0, 0x484c0}, 0x1) (async, rerun: 32) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (rerun: 32) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/122, 0x7a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) (async, rerun: 32) r1 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) setsockopt$sock_linger(r1, 0x1, 0x34, &(0x7f0000000080)={0x1, 0x6}, 0x8) (async, rerun: 32) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x0, 0x200000000000}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) (async, rerun: 32) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (rerun: 32) socket$netlink(0x10, 0x3, 0x6) (async, rerun: 32) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0x127f, 0x0) (async, rerun: 32) socket$inet6(0xa, 0x3, 0xff) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x89e0, &(0x7f0000000000)) r4 = fsmount(r3, 0x0, 0x72) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) 4m51.651171929s ago: executing program 1 (id=521): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1100, 0xfffffffffffffffe}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000979000/0x3000)=nil, 0x2000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x0, 0x3}, @ptr={0x70742a85, 0x1, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 4m50.825642032s ago: executing program 1 (id=529): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x2b}, 0x12, r2}) syz_open_dev$usbfs(&(0x7f0000000140), 0xffffffffffffffff, 0x18f801) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xbf, 0x1430, 0x474c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x3, 0x40, {0x9, 0x21, 0x8, 0xa, 0x1, {0x22, 0x41}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x1, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x2, 0xf, 0x9}}]}}}]}}]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={0x0}}, 0x0) r6 = open$dir(&(0x7f0000000000)='./file0\x00', 0x105100, 0x83) mkdirat(r6, &(0x7f0000000040)='./file0\x00', 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4m50.23227191s ago: executing program 1 (id=536): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0xfffffffffffffffe}) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x73f) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x800000, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x88) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) process_vm_readv(r3, &(0x7f0000000140)=[{&(0x7f0000000100)=""/57, 0x39}], 0x1, &(0x7f0000000400)=[{&(0x7f00000029c0)=""/4096, 0x1000}], 0x1, 0x0) sched_setscheduler(r3, 0x1, &(0x7f0000000500)=0x2) getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000002e00)='setgroups\x00') write$eventfd(r4, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1430", @ANYBLOB="4a33395c3a140a2520c85131823f2359adde6ca64abf9618a584f05d2c3c9fb4852e0b04e952050b4c69c96814c22a124904cfc688fda92831ff6f613cd3d1ae4deebfbbc0f8a5fc543af5e08c33814021c623dc0db210488775ac553aba208bc42779d5d0", @ANYBLOB="010027bd7000fcdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x1000c011}, 0x1000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x2, 0x1, 0x37}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x4]}, 0x8, 0x80000) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x200}) 4m49.335436994s ago: executing program 1 (id=544): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000680)={'vcan0\x00', 0x1}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdir(&(0x7f0000000980)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000140), 0x1e) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100030010651fbe347b2c2b00000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x40090}, 0x880) r7 = eventfd2(0x9, 0x80800) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r8) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="03de0400000000fdff002a"], 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x4004) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000900)={0x4002, 0x0, 0x1, r7, 0x1}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x4002, 0x0, 0x1, r7, 0x5}) r10 = syz_open_procfs(0x0, &(0x7f0000000100)='net/bnep\x00') getdents64(r10, &(0x7f0000000040)=""/21, 0x15) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000080), 0x1004080, &(0x7f0000000000)=ANY=[@ANYBLOB='rln\x00_pages\b=']) openat$cgroup_ro(r10, &(0x7f0000000140)='freezer.parent_freezing\x00', 0x0, 0x0) pread64(r10, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 4m49.039597089s ago: executing program 1 (id=547): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x202, 0x0) write$UHID_INPUT(r1, &(0x7f00000010c0)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) prlimit64(0x0, 0x9, &(0x7f0000000140)={0xc, 0x8b}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) splice(r0, &(0x7f0000000040)=0x4, r0, &(0x7f0000000080)=0x9, 0xb7e, 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x6e, 0x800) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000180), &(0x7f0000000200)=0x68) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bind$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000000)) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SOCK_DESTROY(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x14, 0x15, 0x12b, 0x70bd28, 0x25dfdbfc, {0xa, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) 4m34.016960547s ago: executing program 32 (id=547): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x202, 0x0) write$UHID_INPUT(r1, &(0x7f00000010c0)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) prlimit64(0x0, 0x9, &(0x7f0000000140)={0xc, 0x8b}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) splice(r0, &(0x7f0000000040)=0x4, r0, &(0x7f0000000080)=0x9, 0xb7e, 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x6e, 0x800) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000180), &(0x7f0000000200)=0x68) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bind$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000000)) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SOCK_DESTROY(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x14, 0x15, 0x12b, 0x70bd28, 0x25dfdbfc, {0xa, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) 4m2.476205397s ago: executing program 0 (id=1067): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) sendto$inet6(r0, 0x0, 0x0, 0x20008000, &(0x7f00000001c0)={0xa, 0x4e22, 0x61c7, @private2, 0x5}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000240)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x200000000000000) 4m2.418844248s ago: executing program 0 (id=1069): write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a0000"], 0x38}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x6c, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @uid}, @generic="428184a477201ac90f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3db"]}, @nested={0x8, 0x5, 0x0, 0x1, [@nested={0x4, 0x75}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x804) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000100)={0xf773, 0x7}) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) sendmmsg(r1, &(0x7f0000000180), 0x3ef, 0x0) 4m2.418717398s ago: executing program 0 (id=1070): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB="f4010000100013070000000000000000fe8000000000000000000000000000bbac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000004d532000000ac1414170000000000000000000000001a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebffffff0000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba0014"], 0x1f4}}, 0x0) 4m2.418257718s ago: executing program 0 (id=1071): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0xc8402, 0x80) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$incfs(r1, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) (async) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000300)=ANY=[], 0x4b) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, &(0x7f0000001640), 0x400000000000062, 0x34000, 0x0) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x2) r6 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r6, &(0x7f0000000340)={&(0x7f0000000800), 0x3, &(0x7f0000000880)={&(0x7f0000000940)=@can={{0x3, 0x0, 0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, "049f636b2db9016c"}, 0x10}}, 0x0) (async) r7 = socket(0x840000000002, 0x3, 0x100) connect$inet(r7, &(0x7f0000000000)={0x2, 0x3, @remote}, 0x10) (async) sendmmsg$inet(r7, &(0x7f0000005240), 0x4000095, 0x0) (async) getsockopt$bt_hci(r7, 0x0, 0x33, 0x0, &(0x7f0000000180)) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './cgroup/pids.max\x00'}, 0x6e) (async) futex(&(0x7f000000cffc)=0x2, 0x5, 0x10000, 0x0, &(0x7f0000048000)=0xffffffff, 0x0) (async) r8 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) (async) r9 = fsmount(r8, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r9}}, 0x58) 4m2.378195909s ago: executing program 0 (id=1072): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) sendfile(r0, r1, 0x0, 0x800a121) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={[{@uuid_null}, {@metacopy_on}, {@uuid_off}, {@verity_off}, {@default_permissions}, {@nfs_export_off}], [{@subj_user={'subj_user', 0x3d, '+*'}}]}) setreuid(0x0, r3) (async) setreuid(0x0, r3) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="320000000400000000000000000000000500000000000000bf720011000000000a00"/50], 0x32) (async) write$FUSE_NOTIFY_STORE(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="320000000400000000000000000000000500000000000000bf720011000000000a00"/50], 0x32) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) (async) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x44642, 0x108) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) splice(r6, 0x0, r7, 0x0, 0x808, 0x0) (async) splice(r6, 0x0, r7, 0x0, 0x808, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000415000/0x2000)=nil, 0x2000}}) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)) (async) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getgid() r10 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000005140), &(0x7f0000005180)=0xc) (async) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000005140)={0x0, 0x0, 0x0}, &(0x7f0000005180)=0xc) setgid(r11) (async) setgid(r11) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x5}, [{0x2, 0x0, r3}], {0x4, 0x6}, [{0x8, 0x4}, {0x8, 0x3, r8}, {0x8, 0x3, r9}, {0x8, 0x3, r11}], {}, {0x20, 0x1}}, 0x4c, 0x3) 4m2.244240901s ago: executing program 0 (id=1073): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r1, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0xffffffffffffffff, {0xa40a, 0x0, 0x0, {0x0, 0x8000, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x2, 0xc000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) (rerun: 64) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000300)="cf36e1a8ad9d849bcbeb3c756d908b8b7fa9856b842b254199b35ed305f6c14a4d004006d8289c1727d1f58feae39dd7540c84e878f38529ccb860b8ee9ea833e5334824aa70867e8a97f5a445f0543ce3fc67bc6311d2ec2c69c5cb2782e91eb6bd9e3e5fa5227ebfbb11b190eade668005c2a77c3bef273eab1d63a7a6fec2c3c1ca93fad6b493c613637bd12e5922121d04dba903269adaf5835729dbc235721d46c8a0ea2d09c485e6f0c83a827556af543c197361bdd3f3f8babcf1aa4b7fad4fdacf83f4e62668b48214"}, {&(0x7f00000005c0)="7e84f3cd4b351e5933a247531da4be2866aaf30eb1700a7be48c206baa282cbade0551f7c992b54f77c1120870422bfa8390f1ed595085f64f5e2db80b8109de11f10f756a7652a95a2bfa5c126db18f3448652073849739793558dca8fcc41ebd12e06cd71b419fc86f549e26ec20b308e0bc26401a5675a6f27f013ec0985762a715986fb21eec15e9f28cf798c35ab82b6fa77ab03a69913de588a0e686fffda1a68a3cbb774cb12d9beca3b81e81f5c480b3d5"}, {&(0x7f0000000140)="5d0fb030e59b00"}, {&(0x7f00000001c0)="068f6708a5cc1aeaa683e0495e003a39"}, {&(0x7f0000000680)="ebf88d42647d6bc588476bae50bb6a60de44bd5ce505564ebb74f623929bb110633099cd3a70b3ffb703ec5f2ac417fe514f7bc50b5d76ca08e7a6926b797b596cf455b1b066190d7ccd072d327a023fc714c8175e8692153e93d5ef0da274e98fd282f25c51b58dcdaef5078e681bc582719afc9a8f55b49c0d0528d5f1c2b51f26c60ecc4731d1fa65ce5407d021ebfbe4cd78623bc0e1c276139312fddcdac80c68cc651c53e56a3fad7f51361233ae59862b6bfb0555198d688d434fc235f44eead8525f601d832343033e97f4d2a0f1d41cf0"}, {&(0x7f0000000400)="6131d4003da87eb2d8d29f1ea6bd86d0418f738e79adf9a65a54b0c0bdc79fce8dcee62bdd34b000ee8730640f8feb74348542fca1f6b796a8d725f70730a5eeafa7fe284c8f1b10825c03796d9696402d22f4fce53a17edff8b6e45ea9d1759fd7ac6ad29bebfeeb3e4168e28872fa5232bf9c39747237e8007cf4a350890"}, {&(0x7f0000000780)="3f2473fa1aed6cd0d84dfe4e4fcc97b4ea844349bbe74b4ca575eb170da638182da35768389eb9699803b11ca43d48528c891ba33cf7d4785968551f65d68f23cc7847158191f576c95998cee5e90e7d5419e409c66e8f188329de6d8d951064c33e713e8f62b9a5a8e5592407875ff89f599db9ba39889da815d2af71cece12588c695e0a786ada6b0975ccbae7437feee6e0a97f99f4789b0e7245e373f1f497544aa0ed13fdd0fba33fbf065f66e530"}], 0x22) (async) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f00000000c0)={0xfff, 0x0, 0x0, 0xafa, 0x0, "e32401186a9ed9a9"}) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0xa) (async) close_range(r0, 0xffffffffffffffff, 0x0) 4m2.133847352s ago: executing program 33 (id=1073): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r1, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0xffffffffffffffff, {0xa40a, 0x0, 0x0, {0x0, 0x8000, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x2, 0xc000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) (rerun: 64) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000300)="cf36e1a8ad9d849bcbeb3c756d908b8b7fa9856b842b254199b35ed305f6c14a4d004006d8289c1727d1f58feae39dd7540c84e878f38529ccb860b8ee9ea833e5334824aa70867e8a97f5a445f0543ce3fc67bc6311d2ec2c69c5cb2782e91eb6bd9e3e5fa5227ebfbb11b190eade668005c2a77c3bef273eab1d63a7a6fec2c3c1ca93fad6b493c613637bd12e5922121d04dba903269adaf5835729dbc235721d46c8a0ea2d09c485e6f0c83a827556af543c197361bdd3f3f8babcf1aa4b7fad4fdacf83f4e62668b48214"}, {&(0x7f00000005c0)="7e84f3cd4b351e5933a247531da4be2866aaf30eb1700a7be48c206baa282cbade0551f7c992b54f77c1120870422bfa8390f1ed595085f64f5e2db80b8109de11f10f756a7652a95a2bfa5c126db18f3448652073849739793558dca8fcc41ebd12e06cd71b419fc86f549e26ec20b308e0bc26401a5675a6f27f013ec0985762a715986fb21eec15e9f28cf798c35ab82b6fa77ab03a69913de588a0e686fffda1a68a3cbb774cb12d9beca3b81e81f5c480b3d5"}, {&(0x7f0000000140)="5d0fb030e59b00"}, {&(0x7f00000001c0)="068f6708a5cc1aeaa683e0495e003a39"}, {&(0x7f0000000680)="ebf88d42647d6bc588476bae50bb6a60de44bd5ce505564ebb74f623929bb110633099cd3a70b3ffb703ec5f2ac417fe514f7bc50b5d76ca08e7a6926b797b596cf455b1b066190d7ccd072d327a023fc714c8175e8692153e93d5ef0da274e98fd282f25c51b58dcdaef5078e681bc582719afc9a8f55b49c0d0528d5f1c2b51f26c60ecc4731d1fa65ce5407d021ebfbe4cd78623bc0e1c276139312fddcdac80c68cc651c53e56a3fad7f51361233ae59862b6bfb0555198d688d434fc235f44eead8525f601d832343033e97f4d2a0f1d41cf0"}, {&(0x7f0000000400)="6131d4003da87eb2d8d29f1ea6bd86d0418f738e79adf9a65a54b0c0bdc79fce8dcee62bdd34b000ee8730640f8feb74348542fca1f6b796a8d725f70730a5eeafa7fe284c8f1b10825c03796d9696402d22f4fce53a17edff8b6e45ea9d1759fd7ac6ad29bebfeeb3e4168e28872fa5232bf9c39747237e8007cf4a350890"}, {&(0x7f0000000780)="3f2473fa1aed6cd0d84dfe4e4fcc97b4ea844349bbe74b4ca575eb170da638182da35768389eb9699803b11ca43d48528c891ba33cf7d4785968551f65d68f23cc7847158191f576c95998cee5e90e7d5419e409c66e8f188329de6d8d951064c33e713e8f62b9a5a8e5592407875ff89f599db9ba39889da815d2af71cece12588c695e0a786ada6b0975ccbae7437feee6e0a97f99f4789b0e7245e373f1f497544aa0ed13fdd0fba33fbf065f66e530"}], 0x22) (async) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f00000000c0)={0xfff, 0x0, 0x0, 0xafa, 0x0, "e32401186a9ed9a9"}) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0xa) (async) close_range(r0, 0xffffffffffffffff, 0x0) 2m57.110564082s ago: executing program 4 (id=1851): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}, {&(0x7f0000000100)=""/103, 0x67}], 0x2, 0xe, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r2, 0xaec7) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r3) syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[], 0x0) (async) syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[], 0x0) ioctl$EVIOCRMFF(r3, 0x550c, 0x0) (async) ioctl$EVIOCRMFF(r3, 0x550c, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000100), 0xa, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x200) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x200) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000140)={"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"}) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x100000, 0x0, 0x0, 0xeffffdff, 0x0, [{0x2, 0x0, 0xfc, '\x00', 0xff}, {0x3, 0x9, 0x80, '\x00', 0x7c}, {0xfc, 0x12, 0x4, '\x00', 0xb9}, {0x11, 0xb}, {0x3, 0x0, 0x4}, {0x0, 0x0, 0xfe, '\x00', 0xb8}, {0xfa, 0x0, 0x6}, {}, {0x1, 0x8f, 0xd4, '\x00', 0xfc}, {0xa8, 0x6, 0x0, '\x00', 0x1}, {0xb}, {0x5, 0x99, 0x6, '\x00', 0xff}, {0x0, 0x0, 0x2, '\x00', 0x3}, {0x2, 0x2, 0x6}, {0xc3, 0x0, 0x0, '\x00', 0x49}, {0x0, 0x21, 0x80, '\x00', 0x5}, {0x3}, {0x0, 0x2, 0x6, '\x00', 0x10}, {0x48, 0x0, 0xf}, {0x1, 0x80}, {0x0, 0x2, 0x0, '\x00', 0x37}, {0xfd, 0x9, 0x0, '\x00', 0x5}, {0x0, 0x2, 0x9}, {0x80, 0xa, 0x3, '\x00', 0x7}]}}) (async) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x100000, 0x0, 0x0, 0xeffffdff, 0x0, [{0x2, 0x0, 0xfc, '\x00', 0xff}, {0x3, 0x9, 0x80, '\x00', 0x7c}, {0xfc, 0x12, 0x4, '\x00', 0xb9}, {0x11, 0xb}, {0x3, 0x0, 0x4}, {0x0, 0x0, 0xfe, '\x00', 0xb8}, {0xfa, 0x0, 0x6}, {}, {0x1, 0x8f, 0xd4, '\x00', 0xfc}, {0xa8, 0x6, 0x0, '\x00', 0x1}, {0xb}, {0x5, 0x99, 0x6, '\x00', 0xff}, {0x0, 0x0, 0x2, '\x00', 0x3}, {0x2, 0x2, 0x6}, {0xc3, 0x0, 0x0, '\x00', 0x49}, {0x0, 0x21, 0x80, '\x00', 0x5}, {0x3}, {0x0, 0x2, 0x6, '\x00', 0x10}, {0x48, 0x0, 0xf}, {0x1, 0x80}, {0x0, 0x2, 0x0, '\x00', 0x37}, {0xfd, 0x9, 0x0, '\x00', 0x5}, {0x0, 0x2, 0x9}, {0x80, 0xa, 0x3, '\x00', 0x7}]}}) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) getpeername$tipc(r5, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0) (async) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r9, 0x45809000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r10, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x14, "fee8a2ab78fc979fd1e00313005e7b0000009de2b7fb00ef9d3c298561edae7c01005000000000000000000000000000000000000000001700", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2]}}) ioctl$LOOP_CLR_FD(r4, 0x4c01) (async) ioctl$LOOP_CLR_FD(r4, 0x4c01) close_range(r0, 0xffffffffffffffff, 0x0) 2m55.871642991s ago: executing program 4 (id=1859): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mount$binderfs(0x0, &(0x7f0000001600)='./binderfs\x00', 0x0, 0x40000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffff9, 0x18, &(0x7f0000000600)={@flat=@weak_binder={0x77622a85, 0x200a}, @flat=@binder={0x73622a85, 0x1100, 0x3}, @fda={0x66646185, 0x8, 0x0, 0x16}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}}], 0x51, 0x0, &(0x7f0000000540)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b9a"}) 2m55.754793083s ago: executing program 4 (id=1861): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB="f4010000100013070000000000000000fe8000000000000000000000000000bbac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000004d532000000ac1414170080ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebffffff0000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480002"], 0x1f4}}, 0x0) 2m55.733839113s ago: executing program 4 (id=1863): syz_open_procfs(0x0, &(0x7f0000000080)='auxv\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) move_mount(r0, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000100)='./file0\x00') r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x800, 0x0) lseek(0xffffffffffffffff, 0x2, 0x3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x7000000) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x6, 0xa, 0x0, 0x9}) pipe2$9p(&(0x7f00000001c0), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$unix(0x1, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0/../file0\x00', &(0x7f0000000240)={0x141000, 0x4b, 0x1}, 0x18) r6 = open_tree(r2, &(0x7f0000000280)='./file0/../file0/../file0/../file0/../file0\x00', 0x2001) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0\x00', 0x176) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x50, 0x0, 0x0, 0x9}, {0x20, 0x1, 0x81, 0xfffff034}, {0x6, 0xfa, 0x0, 0x4}]}, 0x10) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000004a0001e000000000000000000a000003"], 0x1c}}, 0x0) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xfdef) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x4}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) 2m55.639168245s ago: executing program 4 (id=1865): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r3, 0x45809000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m55.538133826s ago: executing program 4 (id=1868): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) utimensat(0xffffffffffffff9c, 0x0, &(0x7f00000002c0), 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) madvise(&(0x7f00001f3000/0x1000)=nil, 0x1000, 0xf) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/125, 0x7d, 0x0, 0x1e}, @flat=@handle={0x73682a85, 0x100, 0x2}, @fda={0x66646185, 0xa, 0x0, 0xc}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000500)=0x3) recvfrom(r1, &(0x7f00000001c0)=""/61, 0x3d, 0x21, &(0x7f0000000440)=@pppoe={0x18, 0x0, {0x2, @multicast, 'veth1_to_bond\x00'}}, 0x80) socketpair(0x27, 0xa, 0xfffffffe, &(0x7f0000000540)) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f00000004c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000140)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r0}, @flat=@handle={0x73682a85, 0x0, 0x1}, @flat=@binder={0x73622a85, 0x1, 0x4000000000000}}, &(0x7f0000000100)}, 0x1000}], 0xfffffffffffffe23, 0x700000000000000, 0x0}) 2m55.503380637s ago: executing program 34 (id=1868): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) utimensat(0xffffffffffffff9c, 0x0, &(0x7f00000002c0), 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) madvise(&(0x7f00001f3000/0x1000)=nil, 0x1000, 0xf) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/125, 0x7d, 0x0, 0x1e}, @flat=@handle={0x73682a85, 0x100, 0x2}, @fda={0x66646185, 0xa, 0x0, 0xc}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000500)=0x3) recvfrom(r1, &(0x7f00000001c0)=""/61, 0x3d, 0x21, &(0x7f0000000440)=@pppoe={0x18, 0x0, {0x2, @multicast, 'veth1_to_bond\x00'}}, 0x80) socketpair(0x27, 0xa, 0xfffffffe, &(0x7f0000000540)) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f00000004c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000140)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r0}, @flat=@handle={0x73682a85, 0x0, 0x1}, @flat=@binder={0x73622a85, 0x1, 0x4000000000000}}, &(0x7f0000000100)}, 0x1000}], 0xfffffffffffffe23, 0x700000000000000, 0x0}) 2m43.47807418s ago: executing program 6 (id=2021): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) madvise(&(0x7f00001a1000/0x4000)=nil, 0x4000, 0x8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000200)=@x86={0x7, 0x1, 0x7f, 0x0, 0x0, 0x8b, 0x9, 0xa, 0x3, 0x4, 0x5, 0xfa, 0x0, 0x8, 0x8, 0x8, 0x9, 0x6, 0x0, '\x00', 0x20, 0x6}) ioctl$KVM_RUN(r5, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) listxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=""/135, 0x87) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000129000/0x3000)=nil, &(0x7f00004ed000/0x4000)=nil, 0x3000, 0x2}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x3, r7, 0x1, 0x0, 0x6, @random="1cae96443b8d"}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@loopback, @loopback, r7}, 0xc) ioprio_set$pid(0x1, 0x0, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r9, 0x0, 0x4283cafe) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$UFFDIO_WRITEPROTECT(r8, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x6}) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKRRPART(r10, 0x125f, 0x0) 2m42.529086074s ago: executing program 6 (id=2026): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) socket$netlink(0x10, 0x3, 0xf) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x48, 0x0, &(0x7f0000000100)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x200a}, @flat, @flat=@weak_binder={0x77622a85, 0x100}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}}, @enter_looper], 0x50, 0x0, &(0x7f0000000540)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) 2m42.528925294s ago: executing program 6 (id=2027): mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x2, 0x4e22, @multicast2}, 0x85, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000240)='wg0\x00', 0x1000, 0x9, 0x7}) getxattr(&(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)=@random={'security.', '}}\x00'}, &(0x7f0000000140)=""/241, 0xf1) 2m42.502439714s ago: executing program 6 (id=2028): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20882, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x1}, 0x1c) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x400000000001, 0x180, 0x20ff, 0x6, 0x89, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x1}}, {0x0, 0x13}}}, 0xa0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) write$uinput_user_dev(r4, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0xaf6f, 0x0, 0xfffffffa, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xe], [0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4], [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc045, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x5]}, 0x45c) r6 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) ftruncate(r7, 0x4a0e876b) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) r9 = eventfd(0x4) openat$cgroup_ro(r3, &(0x7f0000000240)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r8, 0x4008af20, &(0x7f0000000040)={0x1, r9}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 2m42.460405845s ago: executing program 6 (id=2029): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0x3000480, &(0x7f0000000240)={[{@uuid_null}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@uuid_null}, {@default_permissions}, {@nfs_export_on}, {@xino_on}, {@uuid_off}, {@uuid_auto}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000000f00)={0x2020}, 0x2020) 2m42.319227998s ago: executing program 6 (id=2030): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) futex_waitv(0x0, 0x0, 0x2000000, 0x0, 0x1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, 0x0) 2m42.318985538s ago: executing program 35 (id=2030): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) futex_waitv(0x0, 0x0, 0x2000000, 0x0, 0x1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, 0x0) 1m2.2504145s ago: executing program 7 (id=3823): ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0x200001, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) statx(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x100, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002600)=ANY=[@ANYBLOB="881100001500000129bd7000fbdbdf25ff010000000000000000000000000001fe8000000000000000000000000000164e2100004e2100020200a0a087000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="bb6b6e0001000000cb0001007368613338342d61726d36340000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018040000aa6705789ad825913d7cf7fa7b8b77d259bab3b48c00d5e77ea4907cac9a8437dee317a3d557c6e425c8d19b0ae80a6f8d0599632fb7c3ed9880416a3e4c00e203cff93420ac84f8a724010c90c7ec901db4e29ff7d986759762a8c7ed381a080e8b6c895b103faaa1141adc9f8a45d0b909973d9b48222d79714ba2b49f1a260b33db8b28c5c3d3", @ANYRES32=0x0, @ANYBLOB="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"/4196], 0x1188}, 0x1, 0x0, 0x0, 0x6e73b38e6222b8b3}, 0x20000080) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}]}, 0x10) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004058041a504ef46973c1059352240001000000010904000003030000000921001473a91fa170fc000001220500090581f10000000000"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0xfffffffffffffffa) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) read(r0, &(0x7f0000000080)=""/93, 0xffffff6c) 1m1.762802308s ago: executing program 7 (id=3839): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) setfsgid(0xee00) r2 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = syz_open_procfs(r2, &(0x7f0000000040)='syscall\x00') pread64(r4, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff7) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000003c0)="bf86b37515d0fe41dfa0331fb5943bf784cdc549f04aa63d579d759bc14d02b1ec12316701117ec88b4bdbda2f064d83e36da87d778cbc7fac3155f1d1f1b10e785430394c0645d678f42b97b571bf99f0749c538b5800f6a85bf6b398dce945c28561d0d02b7f763911e7969836089d5ae8613861bd8ea26391e1e544c7e7630375f792474d89b2147dcf1837ab796eb7d40186", 0x94}], 0x1}}], 0x1, 0x48080) r6 = socket$netlink(0x10, 0x3, 0x0) read(r0, &(0x7f0000000180)=""/222, 0xde) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001800290200000000000000000a"], 0x20}}, 0x20010000) close_range(r0, 0xffffffffffffffff, 0x0) 1m1.729396628s ago: executing program 7 (id=3840): stat(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000003a000000000000000000000000000000421398a1baba7100b5611dd4dab9cee892da380d2941663f87fb8f4f5c9cfacebfa907cf5d754d16f4c04facb2af44d394af80ac2bb758c3315f5afad86eb609057a4945cd997bf0699b8a2c1369c23b7c207cde4022dd7cd520f49c52c0f93d352b3d0809182ba6f835022617b53ee9c496210f7e132254e0ea76d04bb4c70ad764045a4d96803e3fd88f2264541230049220a9c9aed988421ead04e4994dc82b71b01da324daef6c4591b2ca1ce0f3343c0fd6f5b8499e151b90d3bda8ec1110b603636d47fe3b6caa6d0e1ea0bd06cafe79fdce5fc9897d"]) r3 = getpid() (async, rerun: 64) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) (async, rerun: 64) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x8929, &(0x7f0000001b00)={'ip_vti0\x00', 0x0}) (async) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) (async) syz_io_uring_setup(0x18ac, &(0x7f00000000c0)={0x0, 0x321a, 0x70cd8410cfae05ea, 0xfffffffe, 0x38e}, 0x0, 0x0) (async) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x2}], 0x1, 0x0, 0x0, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x16) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000100)={0x8002, 0x7f, 0x2, 0x8d52, 0xd, "213a3e8a00000000000000000000000800"}) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000240)) r6 = syz_pidfd_open(r3, 0x0) (async, rerun: 64) setrlimit(0x9, &(0x7f0000000140)={0x7, 0x5}) (async, rerun: 64) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) (async) ioctl$TCSETA(r4, 0x5406, &(0x7f00000001c0)={0xc, 0x4, 0xfffb, 0x2, 0x6, "7c9ce76ede9078e4"}) syz_clone3(&(0x7f00000005c0)={0x11c103200, 0x0, 0x0, &(0x7f00000003c0), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) socket$inet_udp(0x2, 0x2, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x10000000) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffd, &(0x7f0000000080)='keyring\x00', &(0x7f0000000100)='}]%$:,)-!\x00') r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/power/wake_lock', 0x0, 0x118) write$tcp_mem(r9, &(0x7f0000000080)={0xc26d, 0x2d, 0xffffffffffffffff, 0x3a, 0x0, 0x2c}, 0x48) (async) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/time\x00') setns(r6, 0x24020000) (async, rerun: 64) umount2(&(0x7f0000000040)='.\x00', 0x2) (rerun: 64) 1m1.61904098s ago: executing program 7 (id=3841): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", "122000"}, 0x28) sendto$inet6(r2, &(0x7f0000000400)="830b", 0x2, 0x4000, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "2000a200009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) recvfrom$inet6(r2, &(0x7f0000000300)=""/19, 0x13, 0x40000041, 0x0, 0x0) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x4, 0x1, 0xe, 0xfffffff9, 0x0, @private0, @local, 0x7800, 0x10, 0x0, 0x8000}}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x8}) mknodat(r6, &(0x7f0000000100)='./file0\x00', 0x2, 0xfdf8) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0xa4, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x4}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0xc840) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 1m1.61874116s ago: executing program 7 (id=3842): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000000)=0xffffffff, 0x4) r4 = eventfd(0x8) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000100)={0x2, r4}) close_range(r0, 0xffffffffffffffff, 0x0) 1m1.557208171s ago: executing program 7 (id=3843): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x200000, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001b00)=ANY=[], 0x1280}, 0x1, 0x0, 0x0, 0x80000}, 0x0) mknod(&(0x7f00000000c0)='./cgroup\x00', 0x100, 0x7f) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x200000, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001b00)=ANY=[], 0x1280}, 0x1, 0x0, 0x0, 0x80000}, 0x0) (async) mknod(&(0x7f00000000c0)='./cgroup\x00', 0x100, 0x7f) (async) 1m1.516221472s ago: executing program 36 (id=3843): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x200000, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001b00)=ANY=[], 0x1280}, 0x1, 0x0, 0x0, 0x80000}, 0x0) mknod(&(0x7f00000000c0)='./cgroup\x00', 0x100, 0x7f) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x200000, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001b00)=ANY=[], 0x1280}, 0x1, 0x0, 0x0, 0x80000}, 0x0) (async) mknod(&(0x7f00000000c0)='./cgroup\x00', 0x100, 0x7f) (async) 1.810204235s ago: executing program 8 (id=5047): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000018c0)='/sys/kernel/fscaps', 0x40, 0x40) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000018c0)='/sys/kernel/fscaps', 0x40, 0x40) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000100)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0xe3}, 0x1c) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) (async) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x100010, r0, 0x45809000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x100010, r0, 0x45809000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) (async) setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x800, 0x0, 0x0) (async) sendto$inet6(r5, 0x0, 0x0, 0x800, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000530000/0x1000)=nil, 0x1000, 0x2000003, 0x30, r3, 0xfdef9000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="f0000000100007cef53e6956d4f1475b3ee83d23dad0000000000000000000ff020000000000000000000000000001e000000204000000009c82cf09692731cbff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fe8000000000000000000000000000aa0000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a0002007000000000000000"], 0xf0}}, 0x10) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="f0000000100007cef53e6956d4f1475b3ee83d23dad0000000000000000000ff020000000000000000000000000001e000000204000000009c82cf09692731cbff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fe8000000000000000000000000000aa0000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a0002007000000000000000"], 0xf0}}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) write(0xffffffffffffffff, &(0x7f0000000100)="240000001a005f0214f9df07000904000a000000fe000058dbef0fee76", 0x1d) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r6, &(0x7f0000000140), 0x2, 0x0) (async) r7 = openat$cgroup_freezer_state(r6, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r7, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r6, &(0x7f00000000c0)='syz1\x00', 0x1ff) getsockopt$netlink(r1, 0x10e, 0x2, &(0x7f00000001c0)=""/254, &(0x7f00000002c0)=0xfe) mkdirat$cgroup(r6, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r7, r7, 0x0, 0x9) fsopen(&(0x7f0000000000)='securityfs\x00', 0x1) (async) r8 = fsopen(&(0x7f0000000000)='securityfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) 1.795525706s ago: executing program 8 (id=5049): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00'], 0x40}}, 0x90) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000080)=0x4, 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xc, 0x0, 0x5, 0xff, 0x1f, 0x0, 0x10000}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9}, {0x0, 0x0, 0x3e, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.737262167s ago: executing program 8 (id=5052): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89f6, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x0, 0x2, 0x0, 0xb152, 0x1, 0x1ff, 0x0, 0x5}}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000)={0x60000}, 0x8) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x11, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x40, 0xe, 0xa7, {0xa7, 0xa, "028ce08120321fa3d010907901f8fa2d82467ba637ddda98493ac0d5e46fe9d6f93413214506f3b0d83b12759d59e778d41dedece575d0e6094a34cc9843e7916ed97024877634bb24ff22253587ef473e08a054e36930b347ec3946e0edd99b61d865999d8d04f8ffffff7ec73aa5816ad8ea3cfa94cad992c118746c3e88fea4ec48b853eb797d8fa615e59df4a1be095210883d47c3d4fc7a0c2482d6240ea7d04ea7b7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.422840751s ago: executing program 3 (id=5063): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x181041, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x3ff) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0xfffffffffffffffb, 0x2, 0x8, r3, 0x8}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x9, 0x3b3bb000, 0x2, r3, 0x8}) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r6 = socket(0x2, 0x3, 0x8) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r6, 0x89f6, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000002c0)={0xf, 0x0, [{0x4b564d02, 0x0, 0x7f}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1.317549093s ago: executing program 3 (id=5068): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x5) 1.305602234s ago: executing program 3 (id=5070): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r3, 0xfffff000) 1.161939006s ago: executing program 3 (id=5073): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x38a, 0x3}) r1 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r1, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat(0xffffffffffffffff, 0x0, 0x4000, 0x20) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) timerfd_create(0x8, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x2c011, r4, 0xd0eb4000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r6 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x2100434, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@fscache}], [{@fsname}, {@audit}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x33, 0x32, 0x31, 0x39, 0x5c, 0x37, 0x33], 0x2d, [0x30, 0x65, 0x38], 0x2d, [0xc2, 0x34, 0x62, 0x61], 0x2d, [0x33, 0x65, 0x66, 0x62], 0x2d, [0x36, 0x62, 0x65, 0x38, 0x37, 0x35, 0x63, 0x36]}}}, {@dont_appraise}, {@permit_directio}]}}) 1.095092876s ago: executing program 3 (id=5074): mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x100131, r0, 0xd5ecb000) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000034c0)='\x00\x00\x03\x86\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x94\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcbzA\x8e\xf6\x89\xc2\'\xdfn\x054Y\xd4\x91s\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xe0\\\x98\xe1%\x1c\xf4\xd0\xf5\xd5\x80\xc4\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\a\x00\x00\x00\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xa5a\xfb\xa6\xff\xfbj\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\x05\x00\xeb\xd8\t\x00\x00\x00CvNx461\x04Nl\xedV\xcet\xaa~\x01j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\f\x00\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg\xc52\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xdeZ%\xa7\x01\x00\x00\x00\x01\x00\x00\x00\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x1c\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\"Y\xad\xaf\x83\xaf\x93\xdaHg\xd4\x8c\xee\x0f\x00\x1c/\x9a\xf83\';:q\x92\x010g\\Ym\xd8,\x8d\b\xab\x9dq\xed\xcc\xba\x06\x1ej\xb7s33\xe5\xec\xe90M\xd1\xfd\xbb\xdf\xedc\xd1\xbbI\xa3\xbdqU\x02\x00\x00\x00\x00\x00\x00\x00\xee\xb0\v\x84\xc7\xac\xec\x92t\x00\x00\x00\x92\x1a\f\xbbM\x1cG\xb8\xa4\x05\x16\x06\xb6\x1a\tL\xe3C$K~\xf7\xa1mt\x87E\xc4\xb6h\xf3\x8cG=&\xbd\xa16\xaa\xa2N\xac\xad,Q\x97\xd6\x15\xc46v\x9a\x97\xa6\xb9`\x03\x8ff,V\xe8\xeb\x8bJn\x12o\x8b\xe7K)+\xe0\x06\x8a\\\xfc\nw\xf8\x01\xc4\xd8\x97\xd2\x9cF\xda6F\xfa6I\x03o\xa7\x15&*\xf6Wn\xb9\x00~Y\x17:\x03\xef\xf9\x03\xe7\x8d\x16\\/\xe3\xfcV\x9d\xf2g\xbcFy\xca\x8a\x10*\xbdU#\x7f\xbb\'6\x9e\x1d\n\x19\xff[\x92n\xe1\x81q\xfe\x10\xfd\xa6pL\xc6\x0fN\x06&W\xa2\x9dPWp\x94r\xe2\x92X\x12\x87\xe5\x94\xb3Aa\xb1/\\\xde\x9c\x93\xf5(,u|\f`\x8e\x86\xeb\xcb\x18J+\xdcv\x894\x01\xd0\xc6\x95\xea^j(x\xa5\x9b\xd6f1\x9d\x8fcr\x18\x1fs%\x91~\x19@\x84!u\xc8u\x8aL\x021k\xb4\b\xbb_#A{dw<\xb9\x9dR\xef\xaf]\xe0\xca\xd9x\xdab7@\xfd\x0e\x94\xf8\xab\x8c\xf4\xf1\xb0\xd6\xbe\x8e,\xa2Y\x000F\xe6q\xe3~\xc9\xaa!\xf3\'UF\xf0\xc0\x11\x11\xc2\xc9\x93#K\xea\xc2c\xb9\xe7)\xa4\xd9X\xb9\xaay\xd1\xc7\xab\xe9F\xc6r5\xdf\xa0\'y\r\xbf\xbd\x97\x9d\x8aS\xdb\rF\x9e99\xb4\xf7\x8c\xf9\xca;\xef\xc7]\xa4\xdd<6wc5\xc6\xdeS\xe5*H\xed\xc8^a-\xe8\xb1\xc2\xca\xfa\t\xd0\\\xfc\xe9\x90\x83oj\xa9E\xfb\x8du\x94\x97\x1cF\x0f\xe9d\xf2\xe4\fc\xdf\xde\x1c\xd8u\x9b\xd7\x9c\x11\xbe\b\xb5\x1e\x04\xa0\xdc\xe1Oxu\xd7O#\n%\x89+\xcc\x9f\x8e\xb2:\xa0\xb0\xdc\xd1\xba\xbd@\xf4\x00\x00\xfd\aqn:\x83\x84N\x83K\xbf^\xd8&\xde\x14\x17\x9d\xcd\xed\x19\xd0\xc1$*K\b$\x12\xf3\x88#\xb1#\xb6RX\x11\x86X\x94\x84\x8e\xdd\x82b\x19b\x9fQ\x91\x98\x9e\xf7\xf6`\x03\xb3\x8a\x86\xf9\x00\x00\x00\x00\x00P\x00'/1066) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') 1.031117196s ago: executing program 3 (id=5075): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x7]}, 0x8) ppoll(&(0x7f00000000c0)=[{r0, 0x1}], 0x1, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x802, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1f, &(0x7f00000002c0)=""/123, &(0x7f0000000080)=0x7b) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x11, r3) (async) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r3, 0x0, 0x0) (async) syz_open_procfs(r3, &(0x7f00000000c0)='net/udplite\x00') prctl$PR_SET_ENDIAN(0x14, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1299b502000000106a05620000000000000109022400010000a000090400000103000000092100000501220500090581030400f70000"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, 0x0) (async) syz_usb_control_io(r4, &(0x7f0000000580)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="20aa531c39277f830117000000172eab61c17ddc3fcb0bc4e9d03c9c42"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) r8 = getpid() ioprio_set$pid(0x3, r8, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) 295.164675ms ago: executing program 2 (id=5078): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200000, 0x0, 0x6, 0x7}) arch_prctl$ARCH_SET_GS(0x1001, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$FUSE(r1, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_clone3(&(0x7f0000002a80)={0x0, 0x0, 0x0, 0x0, {0x24}, 0x0, 0x0, 0x0, &(0x7f0000002a40)=[r2], 0x1}, 0x58) 294.179465ms ago: executing program 2 (id=5079): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x20, &(0x7f0000000340)=ANY=[]) r4 = dup(r1) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000140)=0x0) sched_setscheduler(r5, 0x0, &(0x7f0000000300)=0x2) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r4, 0x4068aea3, &(0x7f00000001c0)={0xdb, 0x0, 0x9}) (async) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) (async) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r2) (async) close_range(r0, 0xffffffffffffffff, 0x0) 293.900845ms ago: executing program 2 (id=5080): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) fcntl$setstatus(r3, 0x4, 0x800) waitid$P_PIDFD(0x3, r3, 0x0, 0x8, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x14, "fee8a2ab78fc979fd1e00313005e7b0000009de2b7fb00ef9d3c298561edae7c01005000000000000000000000000000000000000000001700", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0xfffffffffffffff2, 0x8]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) unshare(0x20040600) tgkill(0x0, 0x0, 0x21) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_REINJECT_CONTROL(r6, 0xae71, &(0x7f0000000180)={0x3}) r7 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r8 = dup(r7) write$FUSE_INIT(r8, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x86f, 0xffffffffa021b092, 0x7, 0x153, 0x7ffe, 0x4, 0x0, 0x0, 0x40, 0x3}}, 0x50) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, 0x0) 92.178289ms ago: executing program 2 (id=5086): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$key(0xf, 0x3, 0x2) socketpair(0x14, 0x0, 0x8000, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000600)=@flushsa={0x1194, 0x1c, 0x100, 0x70bd2c, 0x25dfdbff, {0x3c}, [@policy_type={0xa}, @lastused={0xc, 0xf, 0x7fff00000000000}, @algo_aead={0x104c, 0x12, {{'gcm_base(xts-serpent-sse2,blake2b-256-generic)\x00'}, 0x8000, 0x180, "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"}}, @algo_auth={0x112, 0x1, {{'rmd256-generic\x00'}, 0x650, "9104bd2d2c8cf5050505b86d3e896a2e94dd9b6828dc50b786aef922dc0261857f3fef329fd379e1f838d5f6fd0964e7d4fe27ad45293867ae62ef2b37179a66eb9ffa5f48762c5eb7686893759c3484aaaedd31cb9f74d8659dbeb26c8a0979c930ea8f5d730e40222a0607989caf936fd0948caefdce9446f18bb88dc5d79baa25dd707b6e6a4dd13bdf124b184f96090b756bdd1e227390ed1550e7447d99042e3438d81733b3c224eb80c4749920780399849316282e8fec26e19833557c69ccf8d059cbad41a753"}}, @etimer_thresh={0x8, 0xc, 0x9}]}, 0x1194}, 0x1, 0x0, 0x0, 0x40000}, 0x40011) socket$igmp(0x2, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000040)=0xffefff7c, 0x4) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) write(r3, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x84}}, [@migrate={0x50, 0x11, [{@in=@local, @in6=@local, @in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x4, 0x0, 0x3500, 0xa, 0xa}]}]}, 0xa0}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 91.968209ms ago: executing program 5 (id=5087): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0803000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) (async) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000040)) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000003140)={'sit0\x00', 0x0}) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x80032, 0x0) 91.714399ms ago: executing program 5 (id=5088): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000002, 0x10, r0, 0x4a08e000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) setsockopt(r3, 0x1, 0x10000000000009, &(0x7f00000000c0)="f5c89e1e", 0x4) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x50, 0x12, 0x1, 0x0, 0x0, {0xa, 0x3, 0x0, 0x0, {0x0, 0x4e22, [0x0, 0xffffffff], [], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x4, 0x3}]}, 0x50}}, 0x20004010) setsockopt$inet6_tcp_int(r3, 0x6, 0x4, &(0x7f0000000040)=0x3e, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e1e, 0x5, @empty, 0x6}, 0x1c) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0x3, 0x1, 0x14, "fea8a2ab78fc979fd1e003139d3c298561edae7c010050000000000000000000000000000000000000000017000000000500", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2]}}) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000000)) r5 = accept$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'team0\x00', &(0x7f0000000400)=@ethtool_regs={0x4, 0x2f3, 0x1000, "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"}}) close_range(r0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000002, 0x10, r0, 0x4a08e000) (async) syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) (async) setsockopt(r3, 0x1, 0x10000000000009, &(0x7f00000000c0)="f5c89e1e", 0x4) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x50, 0x12, 0x1, 0x0, 0x0, {0xa, 0x3, 0x0, 0x0, {0x0, 0x4e22, [0x0, 0xffffffff], [], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x4, 0x3}]}, 0x50}}, 0x20004010) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0x4, &(0x7f0000000040)=0x3e, 0x4) (async) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e1e, 0x5, @empty, 0x6}, 0x1c) (async) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0x3, 0x1, 0x14, "fea8a2ab78fc979fd1e003139d3c298561edae7c010050000000000000000000000000000000000000000017000000000500", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2]}}) (async) ioctl$LOOP_CLR_FD(r1, 0x4c01) (async) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000000)) (async) accept$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) (async) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'team0\x00', &(0x7f0000000400)=@ethtool_regs={0x4, 0x2f3, 0x1000, "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"}}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) pipe(&(0x7f0000000180)) (async) 91.565359ms ago: executing program 2 (id=5089): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f0000003680)={0x24, @none={0x300, 0x3}}, 0x14) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x300, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 91.475219ms ago: executing program 5 (id=5090): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000000600)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x2b, 0x7, 0x2000000, 0x5, 0x8, 0x7ff, 0x0, 0x0, 0x0, 0x80, 0xffff}}, 0x50) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0xa, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 55.594459ms ago: executing program 2 (id=5091): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) write$snapshot(r1, &(0x7f0000000100)="8dc80fa92d9de5500f0fd05d6640b8314afcfd312ca85371d2a50dbd7f420fc1aeaf71605e95337190a5bfbf97aadb765f61cadaeb36a0ca6a687249523db72341545ff120440d4e70ae604f5f4b3f0a024dd2d77eba99dfb7da9d1f6a768c2fb6a5b9bf18d0da752159e8ea80b1c4b29b7c774868969dbd247bdf302c0aa148c750e41736911c9262395c44bfe6057499df8abc7a98762fa29762a1529c6f65b02fc082361538ee8834865c09666f704d4ec1ae1dc82b", 0xb7) 55.267409ms ago: executing program 8 (id=5092): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f0000000000)={0x1}) fcntl$getown(r0, 0x9) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000540)=')}%!:\xb9+\xe4\x1f2\xba\xc3\x0ed\x93Z\xbf\xa6`\xa6\x84\xef\x18\x8d\x90@\x1bb\xff\x01\x8a%\xf6vl\x15GPFo\rAmW\xd7*F\xe6\az\x852\x92\x0e\xd9\x9a\x11\xd3\xa8\x96\xad\xcc\xf9\xb0\xcb\x8f\x1ao\xfd9\xa8\x03\xe0j\x81lM}\xf0\x1e\xfb\xd2\x84\xa0\xb1\xc0\x97\xc16\xf7@l%j\xc9\x11ll|\xc6x\xcdD\xd7\x94\xe2\x1c\x96\xa3\x88a\xd8?M\x8dA5q\x11Ou\xa0 LS\xff\x92Y\xee3\x8a0\b%\xe8:}\f\x14\x03\xc2S\x8a@\xf8w\xe1Z\xb7\xf5\x9c\xbbj\xb7g\xd1\x9dH\x18\x9a\x11\xc0f\xbd0\x9cD}\xf8\xff\x9d\x8b\xb2\xb2&\xbb(\xba\xe8f\xd6Qg\x9dT\xfa\xd01\xec\x12\xf4\xfb\xd4\xf1|/\xf3]\x03-\xe0\x93=O\xb3\xdcf:R\x11\t\x15\xc2\xfaV\x17\xc9b\x9b\x95\xd4@\xdb\xf0\xb5\x02\x8a\x91\xb0?\xc6g\x88\x1b\xd7\xd4!\x99\x02\x8b\xad \x90\xbciz\x99R\xa4\xca{H&\xa9\xd4C\xfd<,pAz\xf4_\x9d\xf8\x98\x8e\xd9M \xf4\x0f)O\xbf\x8d\xf9:$\f\xc7\xeb\x96Vpg\xb0\xea@q\x03\x87LZ\'\x93\x1e\xecY\xd3Lc\xfe\xbf\xafm_\aO\x96\x00\x89\xca\xb2\x0e9\x98\x8b\xbb\x84\xe0\xd8\xb2\xa1N\xd8o\xc0K\x85\x8f)\x00Lr\x00N!A\x86\xd4\xb2\x98\x86)Cr\x0e\xe4\x86\x970f\x9e\xba\xe9\xba\xd7\xb8W\xa5\xe9\xe3\xaf\x9fj0\n|\x8e\xbd\x9f\xef\xc7iq+\x0f\xcf\xd3\xb2>[2\x98\x7f\x14\x9c\x13\x83\x80\xf3xv\xd6\xd0]\xdb\x82S@\x92\xbb\x97\x8a\x850\x84\xd9~1l\x98\x90\xfb;\xde4\xba\xdc\x8a\xb7\x1f\x8f\x19Uz\x9c\xcc\a\x1e\x85=\xb3\x18s\xe2\xcf\x92\xc4\x05\xb6V\t\x06\x96\xfe\'x\x02ryX\xe6%U\x80;g\x0f\xa11\x12\xfb\xdf\x14\xff-b\x0f;\xb6\xf1R\xea\xfc\x97\x87\xbejB`\xa1\xe6,\xaa\xc4k\x02\xd5\xcc\x1bu\x96\x80\x81?\x87{\x06\xad:\x15\x93C\xab9\xb1\xaf\xd1\xcb\x8a\xeb\xdf\x9f+^\x7f\x06C\xe8\xc3\xbew6\x8f\xe7\xf0\x05x\xb7&p\xe0d\xea\x92DQm\t\xb9\xa8\xa5\x00\x00\x00\x00\x00\x00\x00\x00\x00$\xe4l\xb2\xc1.\xecu5f\xe1\xa4\xe1\xcf/\x00\xdfx\xa5\xc0\x83\xab\x1b\r\xc4\xd2\xb5\xd9\xbbs\x9a\xd8DG\xd1*t\x03\xaa\x1c\xa0Q\xd6a\xe7\xb64\r\xd9BH/\xa1\xfa/\xaa)\xe0\xdf1D\xd1\xb2\xd2\xabR\x9c\xdcrU\xf4M\xca^') r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000040)=0x80000001) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f0000000000)={0x1}) (async) fcntl$getown(r0, 0x9) (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000540)=')}%!:\xb9+\xe4\x1f2\xba\xc3\x0ed\x93Z\xbf\xa6`\xa6\x84\xef\x18\x8d\x90@\x1bb\xff\x01\x8a%\xf6vl\x15GPFo\rAmW\xd7*F\xe6\az\x852\x92\x0e\xd9\x9a\x11\xd3\xa8\x96\xad\xcc\xf9\xb0\xcb\x8f\x1ao\xfd9\xa8\x03\xe0j\x81lM}\xf0\x1e\xfb\xd2\x84\xa0\xb1\xc0\x97\xc16\xf7@l%j\xc9\x11ll|\xc6x\xcdD\xd7\x94\xe2\x1c\x96\xa3\x88a\xd8?M\x8dA5q\x11Ou\xa0 LS\xff\x92Y\xee3\x8a0\b%\xe8:}\f\x14\x03\xc2S\x8a@\xf8w\xe1Z\xb7\xf5\x9c\xbbj\xb7g\xd1\x9dH\x18\x9a\x11\xc0f\xbd0\x9cD}\xf8\xff\x9d\x8b\xb2\xb2&\xbb(\xba\xe8f\xd6Qg\x9dT\xfa\xd01\xec\x12\xf4\xfb\xd4\xf1|/\xf3]\x03-\xe0\x93=O\xb3\xdcf:R\x11\t\x15\xc2\xfaV\x17\xc9b\x9b\x95\xd4@\xdb\xf0\xb5\x02\x8a\x91\xb0?\xc6g\x88\x1b\xd7\xd4!\x99\x02\x8b\xad \x90\xbciz\x99R\xa4\xca{H&\xa9\xd4C\xfd<,pAz\xf4_\x9d\xf8\x98\x8e\xd9M \xf4\x0f)O\xbf\x8d\xf9:$\f\xc7\xeb\x96Vpg\xb0\xea@q\x03\x87LZ\'\x93\x1e\xecY\xd3Lc\xfe\xbf\xafm_\aO\x96\x00\x89\xca\xb2\x0e9\x98\x8b\xbb\x84\xe0\xd8\xb2\xa1N\xd8o\xc0K\x85\x8f)\x00Lr\x00N!A\x86\xd4\xb2\x98\x86)Cr\x0e\xe4\x86\x970f\x9e\xba\xe9\xba\xd7\xb8W\xa5\xe9\xe3\xaf\x9fj0\n|\x8e\xbd\x9f\xef\xc7iq+\x0f\xcf\xd3\xb2>[2\x98\x7f\x14\x9c\x13\x83\x80\xf3xv\xd6\xd0]\xdb\x82S@\x92\xbb\x97\x8a\x850\x84\xd9~1l\x98\x90\xfb;\xde4\xba\xdc\x8a\xb7\x1f\x8f\x19Uz\x9c\xcc\a\x1e\x85=\xb3\x18s\xe2\xcf\x92\xc4\x05\xb6V\t\x06\x96\xfe\'x\x02ryX\xe6%U\x80;g\x0f\xa11\x12\xfb\xdf\x14\xff-b\x0f;\xb6\xf1R\xea\xfc\x97\x87\xbejB`\xa1\xe6,\xaa\xc4k\x02\xd5\xcc\x1bu\x96\x80\x81?\x87{\x06\xad:\x15\x93C\xab9\xb1\xaf\xd1\xcb\x8a\xeb\xdf\x9f+^\x7f\x06C\xe8\xc3\xbew6\x8f\xe7\xf0\x05x\xb7&p\xe0d\xea\x92DQm\t\xb9\xa8\xa5\x00\x00\x00\x00\x00\x00\x00\x00\x00$\xe4l\xb2\xc1.\xecu5f\xe1\xa4\xe1\xcf/\x00\xdfx\xa5\xc0\x83\xab\x1b\r\xc4\xd2\xb5\xd9\xbbs\x9a\xd8DG\xd1*t\x03\xaa\x1c\xa0Q\xd6a\xe7\xb64\r\xd9BH/\xa1\xfa/\xaa)\xe0\xdf1D\xd1\xb2\xd2\xabR\x9c\xdcrU\xf4M\xca^') (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000040)=0x80000001) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) 55.150269ms ago: executing program 5 (id=5093): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) clock_adjtime(0x0, &(0x7f0000000200)={0x1000000000d1, 0x8000000000000001, 0x80004001, 0xd6, 0x9c7, 0x6, 0x100, 0xd5e3, 0x7, 0x8000, 0x3, 0x7, 0xf2e9, 0x8000000000000001, 0x6, 0x8, 0x9, 0x1fc00000000, 0x81, 0x6, 0x2, 0x4d8, 0x8, 0x200, 0x8001, 0x4}) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x1, 0x0, &(0x7f0000000040)) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) connect$packet(r2, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) 54.945809ms ago: executing program 8 (id=5094): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x1) (async) r1 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1ac) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0xa3b, @dev={0xfe, 0x80, '\x00', 0x35}, 0xff}, 0x1c) (async) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000ecffffff9202"]) (async) r8 = dup(r3) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000280)={0x2}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d86b05d506132389011538c16", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',afid=0x0000000000000033,privport,\x00']) (async) r9 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r9, r0, 0x0, 0x80000000) (async) mknod(&(0x7f0000000180)='./file1\x00', 0x800, 0x5a) 1.25002ms ago: executing program 5 (id=5095): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 1.02485ms ago: executing program 8 (id=5096): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r1, &(0x7f00000014c0)=ANY=[], 0x46b) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000580)="08414e553eb6d3b6e1f81377e5c06d4cf43ba743c199580588e0d0d8e61f5792efb7763f91503f8ab441f212d7b0ced9fcc7dd1de89d6db90d056f6b7da5dfd11758bf20707881273506bdf40e9f949ad6a015e5db13181bb42b02eb2b38389acd6eef2a0e700c31f1b721553e897c294b26380ebb8cf4c952bdc3a57c4b2be28c85d18656169ccc00b5bc7f093aa49c13f1a53efba29ebf4200"/163, 0xa3}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="80", 0xfffffddf}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000100)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)="ea", 0x1}], 0x5}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000000)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000240)="e5fda94c09db54b7556d597a090f537f24f4580b9b7a84a802d78ba2d4269461180c4c813590a6f28668146b3c4f5773da198e17996ca025e5c29760c5a3a3f78d5af92f33", 0x45}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=5097): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB="f4010000100013070000000000000000fe8000000000000000000000000000bbac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000004d532000000ac14141700000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebffffff0000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480002"], 0x1f4}}, 0x0) kernel console output (not intermixed with test programs): onfig 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.089395][ T1046] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 264.098493][ T1046] usb 4-1: config 1 has no interface number 1 [ 264.104771][ T1046] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 264.119265][ T1046] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 264.128418][ T1046] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.136440][ T1046] usb 4-1: Product: syz [ 264.140595][ T1046] usb 4-1: Manufacturer: syz [ 264.145256][ T1046] usb 4-1: SerialNumber: syz [ 264.540020][ T9536] tmpfs: Unknown parameter '00000000000000000004' [ 264.557314][ T1046] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 264.565488][ T1046] usb 4-1: found format II with max.bitrate = 8, frame size=9 [ 264.573320][ T1046] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 264.589896][ T1046] usb 4-1: USB disconnect, device number 58 [ 264.597530][ T9540] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3361'. [ 264.606915][ T9540] tipc: Invalid UDP bearer configuration [ 264.606941][ T9540] tipc: Enabling of bearer rejected, failed to enable media [ 264.888724][ T9549] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 264.888745][ T9549] rust_binder: Read failure Err(EFAULT) in pid:375 [ 264.897271][ T9549] rust_binder: Write failure EINVAL in pid:375 [ 265.144416][ T9568] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3371'. [ 265.166646][ T9568] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 265.339143][ T9613] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 265.339307][ T9613] rust_binder: Got transaction with invalid offset. [ 265.345913][ T9613] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 265.352582][ T9613] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1041 [ 265.501974][ T65] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 265.612005][ T1046] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 265.663111][ T65] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 265.672244][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.680994][ T65] usb 3-1: config 0 descriptor?? [ 265.751989][ T1046] usb 4-1: device descriptor read/64, error -71 [ 265.991983][ T1046] usb 4-1: device descriptor read/64, error -71 [ 266.089816][ T9593] rust_binder: Error while translating object. [ 266.089857][ T9593] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 266.096129][ T9593] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:397 [ 266.106063][ T65] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 266.125131][ T65] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 266.135384][ T65] asix 3-1:0.0: probe with driver asix failed with error -71 [ 266.143785][ T65] usb 3-1: USB disconnect, device number 76 [ 266.231989][ T1046] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 266.361967][ T1046] usb 4-1: device descriptor read/64, error -71 [ 266.602038][ T1046] usb 4-1: device descriptor read/64, error -71 [ 266.713234][ T1046] usb usb4-port1: attempt power cycle [ 267.061954][ T1046] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 267.093173][ T1046] usb 4-1: device descriptor read/8, error -71 [ 267.223299][ T1046] usb 4-1: device descriptor read/8, error -71 [ 267.260114][ T9720] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 267.260146][ T9720] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:421 [ 267.313695][ T9726] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 267.462025][ T1046] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 267.492960][ T1046] usb 4-1: device descriptor read/8, error -71 [ 267.623074][ T1046] usb 4-1: device descriptor read/8, error -71 [ 267.732142][ T1046] usb usb4-port1: unable to enumerate USB device [ 267.743153][ T9759] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 268.385365][ T9805] overlayfs: conflicting options: nfs_export=on,index=off [ 268.385365][ T9804] overlayfs: conflicting options: nfs_export=on,index=off [ 268.400355][ T9804] rust_binder: 9804: no such ref 0 [ 268.405634][ T9804] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1047 [ 268.450102][ T9809] kvm: pic: single mode not supported [ 268.459373][ T9809] kvm: pic: level sensitive irq not supported [ 268.464900][ T9809] kvm: pic: level sensitive irq not supported [ 268.471149][ T9809] kvm: pic: level sensitive irq not supported [ 268.477354][ T9809] kvm: pic: level sensitive irq not supported [ 268.638869][ T9817] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 268.645095][ T9817] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1060 [ 268.874814][ T9829] overlayfs: failed to clone upperpath [ 268.961955][ T306] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 269.069733][ T9851] rust_binder: Write failure EINVAL in pid:443 [ 269.112328][ T306] usb 4-1: too many configurations: 151, using maximum allowed: 8 [ 269.133239][ T306] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 269.142349][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 269.150538][ T306] usb 4-1: Product: syz [ 269.154733][ T306] usb 4-1: Manufacturer: syz [ 269.159348][ T306] usb 4-1: SerialNumber: syz [ 269.164787][ T306] usb 4-1: config 0 descriptor?? [ 269.170570][ T306] cdc_acm 4-1:0.0: Zero length descriptor references [ 269.177347][ T306] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22 [ 269.321992][ T402] usb 3-1: new low-speed USB device number 77 using dummy_hcd [ 269.398549][ T9819] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 269.398591][ T9819] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1062 [ 269.408283][ T9819] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 269.418060][ T9819] rust_binder: Read failure Err(EFAULT) in pid:1062 [ 269.473096][ T402] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 269.490786][ T402] usb 3-1: config 0 interface 0 has no altsetting 0 [ 269.497484][ T402] usb 3-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00 [ 269.506567][ T402] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.515303][ T402] usb 3-1: config 0 descriptor?? [ 269.540143][ T9864] fuse: Bad value for 'group_id' [ 269.545167][ T9864] fuse: Bad value for 'group_id' [ 269.554466][ T306] usb 4-1: USB disconnect, device number 63 [ 269.725739][ T402] wacom 0003:056A:032F.001D: unknown main item tag 0x7 [ 269.738528][ T402] wacom 0003:056A:032F.001D: item fetching failed at offset 7/8 [ 269.746599][ T402] wacom 0003:056A:032F.001D: parse failed [ 269.752466][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 269.752483][ T36] audit: type=1400 audit(1751583468.951:3924): avc: denied { create } for pid=9870 comm="syz.2.3477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 269.778898][ T402] wacom 0003:056A:032F.001D: probe with driver wacom failed with error -22 [ 269.788953][ T402] usb 3-1: USB disconnect, device number 77 [ 270.279636][ T9890] overlayfs: failed to clone upperpath [ 270.494985][ T9906] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3490'. [ 270.523499][ T9908] rust_binder: inc_ref_done called when no active inc_refs [ 270.523532][ T9908] rust_binder: Write failure EINVAL in pid:1070 [ 270.533450][ T9908] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1070 [ 270.582285][ T9911] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.762876][ T36] audit: type=1400 audit(1751583469.971:3925): avc: denied { mounton } for pid=9917 comm="syz.3.3495" path="/proc/1078/cgroup" dev="nsfs" ino=4026532301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 271.052010][ T306] usb 4-1: new low-speed USB device number 64 using dummy_hcd [ 271.070941][ T9931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3499'. [ 271.092352][ T9931] rust_binder: Error while translating object. [ 271.092387][ T9931] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 271.098617][ T9931] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:471 [ 271.221962][ T306] usb 4-1: Invalid ep0 maxpacket: 32 [ 271.382231][ T306] usb 4-1: new low-speed USB device number 65 using dummy_hcd [ 271.441961][ T1046] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 271.531990][ T306] usb 4-1: Invalid ep0 maxpacket: 32 [ 271.537595][ T306] usb usb4-port1: attempt power cycle [ 271.591947][ T1046] usb 3-1: Using ep0 maxpacket: 8 [ 271.598606][ T1046] usb 3-1: config 5 has an invalid interface number: 143 but max is 2 [ 271.607571][ T1046] usb 3-1: config 5 has an invalid interface number: 6 but max is 2 [ 271.616803][ T1046] usb 3-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 271.626172][ T1046] usb 3-1: config 5 has an invalid descriptor of length 166, skipping remainder of the config [ 271.636969][ T1046] usb 3-1: config 5 has no interface number 1 [ 271.643962][ T1046] usb 3-1: config 5 has no interface number 2 [ 271.650328][ T1046] usb 3-1: config 5 interface 143 altsetting 30 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 271.665972][ T1046] usb 3-1: too many endpoints for config 5 interface 6 altsetting 7: 122, using maximum allowed: 30 [ 271.677175][ T1046] usb 3-1: config 5 interface 6 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 122 [ 271.690633][ T1046] usb 3-1: too many endpoints for config 5 interface 0 altsetting 5: 36, using maximum allowed: 30 [ 271.711773][ T1046] usb 3-1: config 5 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 36 [ 271.729163][ T1046] usb 3-1: config 5 interface 143 has no altsetting 0 [ 271.736236][ T1046] usb 3-1: config 5 interface 6 has no altsetting 0 [ 271.743150][ T1046] usb 3-1: config 5 interface 0 has no altsetting 0 [ 271.751651][ T1046] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=fc.f3 [ 271.761117][ T1046] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.769456][ T1046] usb 3-1: Product: syz [ 271.773884][ T1046] usb 3-1: Manufacturer: syz [ 271.792050][ T1046] usb 3-1: SerialNumber: syz [ 271.832923][ T9961] overlayfs: failed to clone upperpath [ 271.881973][ T306] usb 4-1: new low-speed USB device number 66 using dummy_hcd [ 271.912336][ T306] usb 4-1: Invalid ep0 maxpacket: 32 [ 272.012442][ T1046] usb 3-1: MIDIStreaming interface descriptor not found [ 272.030702][ T1046] usb 3-1: USB disconnect, device number 78 [ 272.042211][ T306] usb 4-1: new low-speed USB device number 67 using dummy_hcd [ 272.073204][ T306] usb 4-1: Invalid ep0 maxpacket: 32 [ 272.078938][ T306] usb usb4-port1: unable to enumerate USB device [ 272.465575][ T9966] netlink: 'syz.5.3510': attribute type 5 has an invalid length. [ 272.485941][ T9968] 9p: Unknown Cache mode or invalid value 딊 [ 272.582106][ T9974] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3514'. [ 272.790869][ T9989] 9pnet_fd: Insufficient options for proto=fd [ 273.124224][ T9991] netlink: 'syz.5.3518': attribute type 16 has an invalid length. [ 273.132447][ T9991] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.3518'. [ 273.167868][ T9994] 9pnet_fd: Insufficient options for proto=fd [ 273.191928][ T9997] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3520'. [ 273.219163][ T9999] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3521'. [ 273.422117][T10011] binder: Unknown parameter 'didZrc' [ 273.709204][T10021] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3529'. [ 273.797122][T10026] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 273.800145][T10026] rust_binder: Error in use_page_slow: ESRCH [ 273.821978][T10026] rust_binder: use_range failure ESRCH [ 273.851975][T10026] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 273.871995][T10026] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 273.889398][T10026] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1080 [ 274.024704][T10046] tmpfs: Unknown parameter 'usrquota' [ 274.221951][ T65] usb 4-1: new low-speed USB device number 68 using dummy_hcd [ 274.225967][T10056] rust_binder: Write failure EFAULT in pid:519 [ 274.243279][T10056] rust_binder: Write failure EFAULT in pid:519 [ 274.261140][T10056] /dev/rnullb0: Can't open blockdev [ 274.373014][ T65] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 274.384939][ T65] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 274.396794][ T65] usb 4-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 274.419894][ T65] usb 4-1: config 0 interface 0 has no altsetting 0 [ 274.428883][ T65] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 274.445376][T10071] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3547'. [ 274.454867][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.471463][ T65] usb 4-1: config 0 descriptor?? [ 274.479464][T10044] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 274.497699][T10081] binder: Bad value for 'defcontext' [ 274.523411][T10059] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.533436][T10059] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.540551][ T36] audit: type=1326 audit(1751583473.741:3926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10084 comm="syz.2.3551" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f1f78e929 code=0x0 [ 274.563654][T10059] bridge_slave_0: entered allmulticast mode [ 274.570102][T10059] bridge_slave_0: entered promiscuous mode [ 274.576428][T10089] netlink: 'syz.7.3554': attribute type 12 has an invalid length. [ 274.584810][T10059] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.592029][T10059] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.599123][T10059] bridge_slave_1: entered allmulticast mode [ 274.605571][T10059] bridge_slave_1: entered promiscuous mode [ 274.667667][T10059] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.674746][T10059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.682070][T10059] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.689213][T10059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.716316][ T7223] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.723895][ T7223] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.735144][ T7228] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.742233][ T7228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.751715][ T7223] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.758831][ T7223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.792195][T10059] veth0_vlan: entered promiscuous mode [ 274.806089][T10059] veth1_macvtap: entered promiscuous mode [ 274.867949][T10097] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 274.897718][T10101] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 274.897744][T10101] rust_binder: Read failure Err(EFAULT) in pid:1084 [ 274.899338][ T65] hid-generic 0003:1B1C:1C0D.001E: item fetching failed at offset 6/8 [ 274.921215][ T65] hid-generic 0003:1B1C:1C0D.001E: probe with driver hid-generic failed with error -22 [ 275.418102][T10107] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3560'. [ 275.427179][T10107] tipc: Invalid UDP bearer configuration [ 275.427207][T10107] tipc: Enabling of bearer rejected, failed to enable media [ 275.442571][T10109] netlink: 1599 bytes leftover after parsing attributes in process `syz.7.3561'. [ 275.452328][T10109] t: renamed from tunl0 (while UP) [ 275.792127][ T1046] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 275.943017][ T1046] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.954050][ T1046] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.963879][ T1046] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 275.973104][ T1046] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.982109][ T1046] usb 3-1: config 0 descriptor?? [ 276.389305][ T1046] isku 0003:1E7D:319C.001F: unknown main item tag 0x0 [ 276.396414][ T1046] isku 0003:1E7D:319C.001F: unknown main item tag 0x0 [ 276.404215][ T1046] isku 0003:1E7D:319C.001F: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 276.543983][T10133] 9pnet_fd: Insufficient options for proto=fd [ 276.572696][T10135] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3571'. [ 276.581820][T10135] tipc: Invalid UDP bearer configuration [ 276.581854][T10135] tipc: Enabling of bearer rejected, failed to enable media [ 276.797438][ T1046] usb 3-1: USB disconnect, device number 79 [ 276.992490][ T65] usb 4-1: USB disconnect, device number 68 [ 284.525207][T10165] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3581'. [ 284.652205][T10192] tipc: Invalid UDP bearer configuration [ 284.652233][T10192] tipc: Enabling of bearer rejected, failed to enable media [ 284.849917][T10220] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 284.850379][T10220] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 21) [ 284.857020][T10220] rust_binder: Error while translating object. [ 284.867644][T10220] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 284.873875][T10220] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1100 [ 284.895597][T10222] tipc: Invalid UDP bearer configuration [ 284.904940][T10222] tipc: Enabling of bearer rejected, failed to enable media [ 284.929797][T10225] tmpfs: Unknown parameter 'Kg*qwzbΫR9)iM3 {A' [ 285.009230][T10236] rust_binder: Write failure EINVAL in pid:1115 [ 285.129273][ T36] audit: type=1400 audit(1751583484.331:3927): avc: denied { map } for pid=10237 comm="syz.3.3609" path="/dev/ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 285.432068][T10260] KVM: debugfs: duplicate directory 10260-6 [ 285.546543][T10266] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3619'. [ 285.569249][ T306] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 285.577353][ T306] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 285.624730][ T36] audit: type=1326 audit(1751583484.831:3928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10267 comm="syz.2.3620" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3f1f78e929 code=0x0 [ 285.879623][T10289] vlan1: entered allmulticast mode [ 285.884867][T10289] veth0_vlan: entered allmulticast mode [ 285.892060][T10289] netlink: 'syz.5.3627': attribute type 58 has an invalid length. [ 285.909069][T10288] vlan1: left allmulticast mode [ 285.914093][T10288] veth0_vlan: left allmulticast mode [ 285.934179][ T36] audit: type=1326 audit(1751583485.141:3929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10291 comm="syz.5.3628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9143f8e929 code=0x7ffc0000 [ 285.957813][ T36] audit: type=1326 audit(1751583485.141:3930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10291 comm="syz.5.3628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9143f8e929 code=0x7ffc0000 [ 285.981352][ T36] audit: type=1326 audit(1751583485.141:3931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10291 comm="syz.5.3628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f9143f8e929 code=0x7ffc0000 [ 286.005096][ T36] audit: type=1326 audit(1751583485.191:3932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10291 comm="syz.5.3628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9143f8e929 code=0x7ffc0000 [ 286.024773][T10299] overlayfs: failed to clone upperpath [ 286.029197][ T36] audit: type=1326 audit(1751583485.191:3933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10291 comm="syz.5.3628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9143f8e929 code=0x7ffc0000 [ 286.059397][T10299] overlayfs: failed to clone upperpath [ 286.799247][T10354] rust_binder: 10354: no such ref 0 [ 286.804742][T10354] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 286.804767][T10354] rust_binder: Read failure Err(EFAULT) in pid:572 [ 286.981588][T10361] tipc: Invalid UDP bearer configuration [ 286.988269][T10361] tipc: Enabling of bearer rejected, failed to enable media [ 287.074131][T10365] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3656'. [ 287.582703][T10379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3661'. [ 287.719312][T10381] 8021q: VLANs not supported on vcan0 [ 287.962912][T10383] tipc: Invalid UDP bearer configuration [ 287.962935][T10383] tipc: Enabling of bearer rejected, failed to enable media [ 287.988716][T10385] 9pnet_fd: Insufficient options for proto=fd [ 287.990475][T10386] 9pnet_fd: Insufficient options for proto=fd [ 288.094144][T10407] tipc: Invalid UDP bearer configuration [ 288.094165][T10407] tipc: Enabling of bearer rejected, failed to enable media [ 288.106155][T10408] overlayfs: missing 'lowerdir' [ 288.255010][T10425] netlink: 'syz.7.3681': attribute type 21 has an invalid length. [ 288.263038][T10425] netlink: 388 bytes leftover after parsing attributes in process `syz.7.3681'. [ 288.342502][T10430] tipc: Invalid UDP bearer configuration [ 288.342539][T10430] tipc: Enabling of bearer rejected, failed to enable media [ 288.478224][T10456] tipc: Invalid UDP bearer configuration [ 288.478246][T10456] tipc: Enabling of bearer rejected, failed to enable media [ 288.691971][ T306] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 288.841940][ T306] usb 3-1: Using ep0 maxpacket: 32 [ 288.848221][ T306] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 288.856322][ T306] usb 3-1: config 0 has no interface number 0 [ 288.862517][ T306] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.873430][ T306] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.883294][ T306] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 288.892390][ T306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.901234][ T306] usb 3-1: config 0 descriptor?? [ 289.099645][T10476] tipc: Invalid UDP bearer configuration [ 289.099675][T10476] tipc: Enabling of bearer rejected, failed to enable media [ 289.227657][T10488] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 89) [ 289.227692][T10488] rust_binder: Error while translating object. [ 289.238446][T10488] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 289.244922][T10488] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1135 [ 289.283736][T10492] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 289.318306][T10497] netlink: 5308 bytes leftover after parsing attributes in process `syz.5.3710'. [ 289.318661][ T306] input: HID 28bd:0094 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0094.0021/input/input46 [ 289.369383][ T306] uclogic 0003:28BD:0094.0021: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.2-1/input1 [ 289.371212][T10501] tipc: Invalid UDP bearer configuration [ 289.381383][T10501] tipc: Enabling of bearer rejected, failed to enable media [ 289.416174][T10504] rust_binder: 10504: no such ref 2 [ 289.421416][T10504] rust_binder: 10504: no such ref 3 [ 289.516439][T10451] rust_binder: Error while translating object. [ 289.516481][T10451] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 289.522969][T10451] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:589 [ 289.532845][ T9] usb 3-1: USB disconnect, device number 80 [ 289.671972][ T306] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 289.822990][ T306] usb 4-1: config 0 has an invalid descriptor of length 70, skipping remainder of the config [ 289.833298][ T306] usb 4-1: too many endpoints for config 0 interface 0 altsetting 233: 113, using maximum allowed: 30 [ 289.844338][ T306] usb 4-1: config 0 interface 0 altsetting 233 has 0 endpoint descriptors, different from the interface descriptor's value: 113 [ 289.857615][ T306] usb 4-1: config 0 interface 0 has no altsetting 0 [ 289.864298][ T306] usb 4-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 289.873399][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.886705][ T306] usb 4-1: config 0 descriptor?? [ 290.018062][T10526] incfs: Error accessing: ./file0. [ 290.023447][T10526] incfs: mount failed -20 [ 290.059573][T10535] tipc: Invalid UDP bearer configuration [ 290.059602][T10535] tipc: Enabling of bearer rejected, failed to enable media [ 290.081353][T10542] netlink: 92 bytes leftover after parsing attributes in process `syz.7.3724'. [ 290.096023][ T306] usb 4-1: USB disconnect, device number 69 [ 290.103720][T10544] tipc: Started in network mode [ 290.110676][T10544] tipc: Node identity d28884c2e06, cluster identity 4711 [ 290.118488][T10544] tipc: Enabled bearer , priority 0 [ 290.126695][T10544] tipc: Disabling bearer [ 290.203344][T10560] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 290.225214][T10562] tipc: Enabled bearer , priority 0 [ 290.313347][T10562] tipc: Disabling bearer [ 290.357465][T10567] netlink: 'syz.2.3734': attribute type 11 has an invalid length. [ 290.365940][T10567] /dev/nullb0: Can't lookup blockdev [ 290.735558][T10601] fuse: Bad value for 'fd' [ 290.952169][ T36] audit: type=1400 audit(1751583490.151:3934): avc: denied { unmount } for pid=4610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 290.978208][ T36] audit: type=1400 audit(1751583490.181:3935): avc: denied { remount } for pid=10610 comm="syz.3.3750" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 291.204788][T10627] batadv_slave_1: entered promiscuous mode [ 291.260312][T10627] batadv_slave_1: left promiscuous mode [ 291.322052][T10645] binder: Unknown parameter 'maxY0000000000017777777777' [ 291.344329][T10648] cgroup: Unknown parameter './binderfs/binder0' [ 291.355367][T10645] 9pnet: Could not find request transport: xen [ 291.468787][T10660] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 291.484699][T10660] SELinux: failed to load policy [ 291.593600][T10667] tipc: Invalid UDP bearer configuration [ 291.593633][T10667] tipc: Enabling of bearer rejected, failed to enable media [ 291.632557][ T36] audit: type=1400 audit(1751583490.841:3936): avc: denied { map } for pid=10668 comm="syz.5.3770" path="socket:[66933]" dev="sockfs" ino=66933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 291.987387][ T3819] Bluetooth: hci0: Frame reassembly failed (-84) [ 292.436951][T10712] rust_binder: 10712: no such ref 0 [ 292.442311][T10713] rust_binder: Write failure EINVAL in pid:653 [ 292.442458][T10714] rust_binder: Write failure EINVAL in pid:653 [ 293.147922][T10752] netlink: 'syz.5.3802': attribute type 58 has an invalid length. [ 293.200242][ T36] audit: type=1400 audit(1751583492.401:3937): avc: denied { shutdown } for pid=10758 comm="syz.5.3805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 293.299302][ T36] audit: type=1400 audit(1751583492.501:3938): avc: denied { map } for pid=10768 comm="syz.5.3810" path="socket:[67275]" dev="sockfs" ino=67275 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 293.388723][ T36] audit: type=1326 audit(1751583492.591:3939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10783 comm="syz.5.3817" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9143f8e929 code=0x0 [ 294.032015][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 294.033225][ T1180] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 294.081068][T10803] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 294.090575][T10803] overlayfs: failed to get uuid (439/file1, err=-13); falling back to uuid=null. [ 294.312325][T10827] rust_binder: 10827: no such ref 0 [ 294.317862][T10827] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 294.325273][T10827] rust_binder: Write failure EINVAL in pid:676 [ 294.501404][T10842] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3839'. [ 294.641945][ T402] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 294.793089][ T402] usb 3-1: too many endpoints for config 0 interface 0 altsetting 2: 65, using maximum allowed: 30 [ 294.804016][ T402] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.814299][ T402] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 294.827548][ T402] usb 3-1: config 0 interface 0 has no altsetting 0 [ 294.834542][ T402] usb 3-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 294.843903][ T402] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.854793][ T402] usb 3-1: config 0 descriptor?? [ 294.871311][T10852] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.878409][T10852] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.885749][T10852] bridge_slave_0: entered allmulticast mode [ 294.892228][T10852] bridge_slave_0: entered promiscuous mode [ 294.898857][T10852] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.905952][T10852] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.913151][T10852] bridge_slave_1: entered allmulticast mode [ 294.919512][T10852] bridge_slave_1: entered promiscuous mode [ 294.985768][T10852] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.992883][T10852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.000171][T10852] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.007237][T10852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.038371][ T7227] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.046612][ T7227] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.057928][ T7227] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.065117][ T7227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.075612][ T7227] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.082707][ T7227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.119000][T10852] veth0_vlan: entered promiscuous mode [ 295.133730][T10852] veth1_macvtap: entered promiscuous mode [ 295.217581][T10877] rust_binder: Error in use_page_slow: ESRCH [ 295.217603][T10877] rust_binder: use_range failure ESRCH [ 295.229423][T10877] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 295.229449][T10877] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 295.239058][T10877] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:6 [ 295.283311][T10884] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3854'. [ 295.284278][T10885] rust_binder: Write failure EINVAL in pid:10 [ 295.292678][T10884] netlink: 'syz.3.3854': attribute type 6 has an invalid length. [ 295.306701][T10884] netlink: 'syz.3.3854': attribute type 5 has an invalid length. [ 295.313067][T10889] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 295.314552][T10884] netlink: 'syz.3.3854': attribute type 4 has an invalid length. [ 295.332806][T10890] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 295.333424][T10889] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 295.395555][T10901] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 295.406884][T10900] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 295.406885][T10901] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 295.406937][T10900] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:26 [ 295.414469][T10901] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:26 [ 295.481988][ T402] usb 3-1: string descriptor 0 read error: -71 [ 295.498710][ T402] uclogic 0003:5543:004D.0022: failed retrieving string descriptor #200: -71 [ 295.507576][ T402] uclogic 0003:5543:004D.0022: failed retrieving pen parameters: -71 [ 295.520096][ T402] uclogic 0003:5543:004D.0022: failed probing pen v2 parameters: -71 [ 295.528353][ T402] uclogic 0003:5543:004D.0022: failed probing parameters: -71 [ 295.536161][ T402] uclogic 0003:5543:004D.0022: probe with driver uclogic failed with error -71 [ 295.547154][ T402] usb 3-1: USB disconnect, device number 81 [ 295.690749][T10917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3863'. [ 295.699783][T10917] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3863'. [ 295.699795][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 295.709227][T10917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3863'. [ 295.861972][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 295.868383][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.880682][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.890506][ T9] usb 9-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 295.899765][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.911451][ T9] usb 9-1: config 0 descriptor?? [ 296.121359][ T9] playstation 0003:054C:05C4.0023: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.8-1/input0 [ 296.192304][ T9] playstation 0003:054C:05C4.0023: Failed to retrieve feature with reportID 18: -71 [ 296.201935][ T9] playstation 0003:054C:05C4.0023: Failed to retrieve DualShock4 pairing info: -71 [ 296.211263][ T9] playstation 0003:054C:05C4.0023: Failed to get MAC address from DualShock4 [ 296.220954][ T9] playstation 0003:054C:05C4.0023: Failed to create dualshock4. [ 296.229687][ T9] playstation 0003:054C:05C4.0023: probe with driver playstation failed with error -71 [ 296.241748][ T9] usb 9-1: USB disconnect, device number 2 [ 296.325004][T10951] rust_binder: 10951: no such ref 2 [ 296.340975][T10951] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1251 [ 296.353075][T10969] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 296.378789][ T402] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 296.389282][ T402] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 296.570876][T10993] netlink: 188 bytes leftover after parsing attributes in process `syz.5.3889'. [ 296.669818][T11005] 9pnet_fd: Insufficient options for proto=fd [ 296.871840][T11026] tipc: Invalid UDP bearer configuration [ 296.871861][T11026] tipc: Enabling of bearer rejected, failed to enable media [ 296.900127][T11028] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 296.942100][ T1046] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 296.947768][T11035] input: syz1 as /devices/virtual/input/input47 [ 296.957897][T11035] rust_binder: Write failure EFAULT in pid:730 [ 297.093251][ T1046] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.115370][ T1046] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 297.126581][ T1046] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 297.135865][ T1046] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.144048][ T1046] usb 9-1: Product: syz [ 297.148231][ T1046] usb 9-1: Manufacturer: syz [ 297.154310][ T1046] usb 9-1: SerialNumber: syz [ 297.360952][ T1046] usb 9-1: 0:2 : does not exist [ 297.374129][ T1046] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 297.385651][ T1046] usb 9-1: USB disconnect, device number 3 [ 297.395437][T10171] udevd[10171]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 297.879215][ T36] audit: type=1400 audit(1751583497.081:3940): avc: denied { append } for pid=11102 comm="syz.3.3931" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 297.916665][T11110] fuseblk: Unknown parameter '-L%xQ|dC!sQ:>G&;k7HvM&[oĮ[ůpȽ ' [ 297.920989][T11111] binder: Unknown parameter 'contexte' [ 297.958673][T11117] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3937'. [ 297.969338][T11119] IPv6: syztnl0: Disabled Multicast RS [ 298.016207][T11130] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3942'. [ 298.022957][T11119] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:744 [ 298.088802][T11140] syzkaller0: entered promiscuous mode [ 298.103533][T11140] syzkaller0: entered allmulticast mode [ 298.380440][T11167] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:756 [ 298.463228][T11172] binder: Bad value for 'max' [ 298.774225][T11180] tipc: Invalid UDP bearer configuration [ 298.774246][T11180] tipc: Enabling of bearer rejected, failed to enable media [ 298.810982][T11185] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3961'. [ 298.820040][T11185] netlink: 'syz.5.3961': attribute type 6 has an invalid length. [ 298.827916][T11185] netlink: 'syz.5.3961': attribute type 5 has an invalid length. [ 298.835870][T11185] netlink: 'syz.5.3961': attribute type 4 has an invalid length. [ 298.927218][T11199] tipc: Invalid UDP bearer configuration [ 298.927239][T11199] tipc: Enabling of bearer rejected, failed to enable media [ 299.294829][T11226] tipc: Invalid UDP bearer configuration [ 299.294880][T11226] tipc: Enabling of bearer rejected, failed to enable media [ 299.321959][ T9] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 299.382147][T11234] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3982'. [ 299.424871][T11240] FAULT_INJECTION: forcing a failure. [ 299.424871][T11240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.438095][T11240] CPU: 0 UID: 0 PID: 11240 Comm: syz.2.3985 Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 e1c904518e9113895a28c59b25a6002cdacb68bf [ 299.438135][T11240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 299.438150][T11240] Call Trace: [ 299.438158][T11240] [ 299.438168][T11240] __dump_stack+0x21/0x30 [ 299.438250][T11240] dump_stack_lvl+0x10c/0x190 [ 299.438276][T11240] ? __cfi_dump_stack_lvl+0x10/0x10 [ 299.438309][T11240] dump_stack+0x19/0x20 [ 299.438333][T11240] should_fail_ex+0x3d9/0x530 [ 299.438376][T11240] should_fail+0xf/0x20 [ 299.438400][T11240] should_fail_usercopy+0x1e/0x30 [ 299.438427][T11240] _copy_to_user+0x24/0xa0 [ 299.438462][T11240] simple_read_from_buffer+0xed/0x160 [ 299.438494][T11240] proc_fail_nth_read+0x19e/0x210 [ 299.438519][T11240] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 299.438542][T11240] ? bpf_lsm_file_permission+0xd/0x20 [ 299.438575][T11240] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 299.438597][T11240] vfs_read+0x278/0xb60 [ 299.438629][T11240] ? __cfi_vfs_read+0x10/0x10 [ 299.438654][T11240] ? __kasan_check_write+0x18/0x20 [ 299.438685][T11240] ? mutex_lock+0x92/0x1c0 [ 299.438727][T11240] ? __cfi_mutex_lock+0x10/0x10 [ 299.438751][T11240] ? __fget_files+0x2c5/0x340 [ 299.438785][T11240] ksys_read+0x141/0x250 [ 299.438812][T11240] ? __cfi_ksys_read+0x10/0x10 [ 299.438832][T11240] ? __cfi___x64_sys_epoll_wait+0x10/0x10 [ 299.438858][T11240] ? __kasan_check_read+0x15/0x20 [ 299.438877][T11240] __x64_sys_read+0x7f/0x90 [ 299.438897][T11240] x64_sys_call+0x2638/0x2ee0 [ 299.438919][T11240] do_syscall_64+0x58/0xf0 [ 299.438941][T11240] ? clear_bhb_loop+0x50/0xa0 [ 299.438979][T11240] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 299.439005][T11240] RIP: 0033:0x7f3f1f78d33c [ 299.439024][T11240] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 299.439046][T11240] RSP: 002b:00007f3f2059e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 299.439064][T11240] RAX: ffffffffffffffda RBX: 00007f3f1f9b5fa0 RCX: 00007f3f1f78d33c [ 299.439077][T11240] RDX: 000000000000000f RSI: 00007f3f2059e0a0 RDI: 0000000000000007 [ 299.439087][T11240] RBP: 00007f3f2059e090 R08: 0000000000000000 R09: 0000000000000000 [ 299.439098][T11240] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 299.439108][T11240] R13: 0000000000000000 R14: 00007f3f1f9b5fa0 R15: 00007ffcc1b47a38 [ 299.439122][T11240] [ 299.746258][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.754134][ T1046] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 299.756544][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 299.775112][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.784954][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 299.797837][ T9] usb 9-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 299.806918][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.815806][ T9] usb 9-1: config 0 descriptor?? [ 299.873976][T11249] tipc: Invalid UDP bearer configuration [ 299.874019][T11249] tipc: Enabling of bearer rejected, failed to enable media [ 299.902514][T11252] overlayfs: failed to clone upperpath [ 299.922766][T11254] netlink: 188 bytes leftover after parsing attributes in process `syz.5.3991'. [ 299.932293][ T1046] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 299.943221][ T1046] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 299.952880][ T1046] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.962455][T11255] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 299.962480][T11255] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 299.970479][T11255] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:784 [ 299.981623][ T1046] usb 4-1: config 0 descriptor?? [ 300.024682][ T9] usbhid 9-1:0.0: can't add hid device: -71 [ 300.030817][ T9] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 300.039931][ T9] usb 9-1: USB disconnect, device number 4 [ 300.461945][ T1046] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 300.631973][ T1046] usb 9-1: Using ep0 maxpacket: 32 [ 300.638272][ T1046] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.648449][ T1046] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.659367][ T1046] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.669143][ T1046] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 300.682244][ T1046] usb 9-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 300.691296][ T1046] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.700291][ T1046] usb 9-1: config 0 descriptor?? [ 300.840976][T11269] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=11269 comm=syz.5.3996 [ 301.112790][ T36] audit: type=1326 audit(1751583500.321:3941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11217 comm="syz.8.3974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245518e929 code=0x7ffc0000 [ 301.136484][ T36] audit: type=1326 audit(1751583500.321:3942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11217 comm="syz.8.3974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245518e929 code=0x7ffc0000 [ 301.160266][ T36] audit: type=1326 audit(1751583500.321:3943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11217 comm="syz.8.3974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f245518e929 code=0x7ffc0000 [ 301.184539][ T36] audit: type=1326 audit(1751583500.321:3944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11217 comm="syz.8.3974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245518e929 code=0x7ffc0000 [ 301.212237][ T36] audit: type=1326 audit(1751583500.321:3945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11217 comm="syz.8.3974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f245518e929 code=0x7ffc0000 [ 301.222000][T11218] netlink: 'syz.8.3974': attribute type 63 has an invalid length. [ 301.236420][ T36] audit: type=1326 audit(1751583500.321:3946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11217 comm="syz.8.3974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245518e929 code=0x7ffc0000 [ 301.254512][T11218] netlink: 5 bytes leftover after parsing attributes in process `syz.8.3974'. [ 301.276539][ T36] audit: type=1326 audit(1751583500.321:3947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11217 comm="syz.8.3974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f245518e929 code=0x7ffc0000 [ 301.278697][ T1046] betop 0003:20BC:5500.0025: unknown main item tag 0x0 [ 301.303230][ T36] audit: type=1326 audit(1751583500.321:3948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11217 comm="syz.8.3974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 301.309071][ T1046] betop 0003:20BC:5500.0025: unknown main item tag 0x0 [ 301.332169][ T36] audit: type=1326 audit(1751583500.321:3949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11217 comm="syz.8.3974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245518e929 code=0x7ffc0000 [ 301.338336][ T1046] betop 0003:20BC:5500.0025: unknown main item tag 0x0 [ 301.375756][ T1046] betop 0003:20BC:5500.0025: hidraw0: USB HID v0.00 Device [HID 20bc:5500] on usb-dummy_hcd.8-1/input0 [ 301.386893][ T1046] betop 0003:20BC:5500.0025: no inputs found [ 301.512230][ T1046] usb 9-1: USB disconnect, device number 5 [ 302.166697][T11310] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 302.166734][T11310] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:798 [ 302.457190][ T1046] usb 4-1: USB disconnect, device number 70 [ 302.589571][T11326] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4015'. [ 302.657911][T11330] rust_binder: Failed copying remainder into alloc: EFAULT [ 302.657942][T11330] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 302.665369][T11330] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 302.673728][T11330] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:814 [ 302.774550][T11355] netlink: 188 bytes leftover after parsing attributes in process `syz.5.4023'. [ 302.881004][T11381] netlink: 188 bytes leftover after parsing attributes in process `syz.8.4033'. [ 302.967663][ T36] kauditd_printk_skb: 47 callbacks suppressed [ 302.967687][ T36] audit: type=1326 audit(1751583502.171:3997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11397 comm="syz.8.4038" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f245518e929 code=0x0 [ 303.132606][T11413] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4043'. [ 303.342132][T11417] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 303.359577][ T36] audit: type=1400 audit(1751583502.561:3998): avc: denied { lock } for pid=11420 comm="syz.2.4047" path="socket:[71712]" dev="sockfs" ino=71712 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 303.391914][T11421] vlan0: entered promiscuous mode [ 303.397143][T11421] vlan0: entered allmulticast mode [ 303.402431][T11421] veth0_vlan: entered allmulticast mode [ 303.507881][T11432] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4052'. [ 303.531777][T11434] tmpfs: Bad value for 'uid' [ 303.531793][ T36] audit: type=1400 audit(1751583502.731:3999): avc: denied { getopt } for pid=11433 comm="syz.2.4053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 303.536448][T11434] tmpfs: Bad value for 'uid' [ 303.651987][ T9] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 303.728663][ T36] audit: type=1400 audit(1751583502.931:4000): avc: denied { relabelfrom } for pid=11448 comm="syz.5.4059" name="" dev="pipefs" ino=71389 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 303.782224][ T9] usb 4-1: device descriptor read/64, error -71 [ 304.021946][ T9] usb 4-1: device descriptor read/64, error -71 [ 304.111947][ T402] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 304.263067][ T402] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.273327][ T9] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 304.281003][ T402] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 304.291649][ T402] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 304.300772][ T402] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.308823][ T402] usb 9-1: Product: syz [ 304.313015][ T402] usb 9-1: Manufacturer: syz [ 304.317610][ T402] usb 9-1: SerialNumber: syz [ 304.415049][ T9] usb 4-1: device descriptor read/64, error -71 [ 304.506225][T11486] syzkaller0: entered promiscuous mode [ 304.511846][T11486] syzkaller0: entered allmulticast mode [ 304.524812][ T402] usb 9-1: 0:2 : does not exist [ 304.533129][ T402] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 304.545191][ T402] usb 9-1: USB disconnect, device number 6 [ 304.563893][T10171] udevd[10171]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 304.651974][ T9] usb 4-1: device descriptor read/64, error -71 [ 304.762037][ T9] usb usb4-port1: attempt power cycle [ 304.891954][ T10] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 305.044903][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 305.054821][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 305.066129][ T10] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 305.075234][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.083266][ T10] usb 3-1: Product: syz [ 305.087426][ T10] usb 3-1: Manufacturer: syz [ 305.092053][ T10] usb 3-1: SerialNumber: syz [ 305.097356][ T10] usb 3-1: config 0 descriptor?? [ 305.102387][ T9] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 305.110299][T11509] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 305.117644][T11509] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 305.123049][ T9] usb 4-1: device descriptor read/8, error -71 [ 305.262993][ T9] usb 4-1: device descriptor read/8, error -71 [ 305.281961][ T1046] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 305.332416][T11509] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 305.339623][T11509] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 305.431943][ T1046] usb 9-1: Using ep0 maxpacket: 32 [ 305.438346][ T1046] usb 9-1: config 0 has an invalid interface number: 74 but max is 1 [ 305.446784][ T1046] usb 9-1: config 0 has no interface number 1 [ 305.462385][ T1046] usb 9-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 305.471661][ T1046] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.480508][ T1046] usb 9-1: Product: syz [ 305.484894][ T1046] usb 9-1: Manufacturer: syz [ 305.489753][ T1046] usb 9-1: SerialNumber: syz [ 305.496992][ T1046] usb 9-1: config 0 descriptor?? [ 305.511081][ T1046] snd-usb-audio 9-1:0.74: probe with driver snd-usb-audio failed with error -22 [ 305.521942][ T9] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 305.535284][T10452] udevd[10452]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.74/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 305.563125][ T9] usb 4-1: device descriptor read/8, error -71 [ 305.693072][ T9] usb 4-1: device descriptor read/8, error -71 [ 305.706476][T11512] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4083'. [ 305.717088][T11512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.726071][T11512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.735311][ T1046] usb 9-1: USB disconnect, device number 7 [ 305.802113][ T9] usb usb4-port1: unable to enumerate USB device [ 306.153998][ T10] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 306.358182][T11509] syz.2.4082 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 306.379459][ T10] usb 3-1: USB disconnect, device number 82 [ 306.459148][T11536] netlink: 92 bytes leftover after parsing attributes in process `syz.5.4094'. [ 306.922961][T11556] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 306.922997][T11556] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:881 [ 307.191941][ T1046] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 307.292022][ T45] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 307.361946][ T1046] usb 3-1: Using ep0 maxpacket: 16 [ 307.368608][ T1046] usb 3-1: unable to get BOS descriptor or descriptor too short [ 307.370504][T11578] tipc: Invalid UDP bearer configuration [ 307.376609][T11578] tipc: Enabling of bearer rejected, failed to enable media [ 307.377484][ T1046] usb 3-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config [ 307.402419][ T1046] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 307.411457][ T1046] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 307.427104][ T1046] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 307.436466][ T1046] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.444792][ T1046] usb 3-1: Product: syz [ 307.449074][ T1046] usb 3-1: Manufacturer: syz [ 307.453961][ T1046] usb 3-1: SerialNumber: syz [ 307.463533][ T45] usb 9-1: unable to get BOS descriptor or descriptor too short [ 307.471609][ T45] usb 9-1: not running at top speed; connect to a high speed hub [ 307.480511][ T45] usb 9-1: config 129 has an invalid interface number: 135 but max is 0 [ 307.489417][ T45] usb 9-1: config 129 has an invalid interface number: 5 but max is 0 [ 307.498198][ T45] usb 9-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 307.507772][ T45] usb 9-1: config 129 has no interface number 0 [ 307.514322][ T45] usb 9-1: config 129 has no interface number 1 [ 307.520657][ T45] usb 9-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 307.533960][ T45] usb 9-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 307.544922][ T45] usb 9-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 307.558186][ T2690] usb 4-1: new low-speed USB device number 75 using dummy_hcd [ 307.566173][ T45] usb 9-1: config 129 interface 135 has no altsetting 0 [ 307.573612][ T45] usb 9-1: config 129 interface 5 has no altsetting 0 [ 307.582072][ T45] usb 9-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 307.591298][ T45] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.599553][ T45] usb 9-1: Product: syz [ 307.603938][ T45] usb 9-1: Manufacturer: syz [ 307.608580][ T45] usb 9-1: SerialNumber: syz [ 307.656675][ T36] audit: type=1400 audit(1751583506.861:4001): avc: denied { lock } for pid=11596 comm="syz.5.4114" path="socket:[71957]" dev="sockfs" ino=71957 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 307.656832][T11597] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4114'. [ 307.685092][ T1046] cdc_ncm 3-1:1.0: skipping garbage [ 307.696759][ T1046] cdc_ncm 3-1:1.0: skipping garbage [ 307.702241][ T1046] cdc_ncm 3-1:1.0: skipping garbage [ 307.707715][ T1046] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 307.714860][ T1046] cdc_ncm 3-1:1.0: bind() failure [ 307.722049][ T2690] usb 4-1: Invalid ep0 maxpacket: 16 [ 307.730285][ T1046] usb 3-1: USB disconnect, device number 83 [ 307.862097][ T2690] usb 4-1: new low-speed USB device number 76 using dummy_hcd [ 307.872353][T11613] binfmt_misc: register: failed to install interpreter file ./file0 [ 308.043612][ T2690] usb 4-1: Invalid ep0 maxpacket: 16 [ 308.064051][ T2690] usb usb4-port1: attempt power cycle [ 308.193936][T11623] fuse: Bad value for 'user_id' [ 308.200263][T11623] fuse: Bad value for 'user_id' [ 308.283200][T11636] netlink: 64 bytes leftover after parsing attributes in process `syz.8.4127'. [ 308.331015][ T45] usb 9-1: MIDIStreaming interface descriptor not found [ 308.362597][ T45] usb 9-1: USB disconnect, device number 8 [ 308.375972][T11641] 9pnet_fd: Insufficient options for proto=fd [ 308.441942][ T2690] usb 4-1: new low-speed USB device number 77 using dummy_hcd [ 308.462761][T10452] udevd[10452]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:129.5/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 308.502759][ T2690] usb 4-1: Invalid ep0 maxpacket: 16 [ 308.533968][ T36] audit: type=1326 audit(1751583507.741:4002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11646 comm="syz.5.4133" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9143f8e929 code=0x0 [ 308.631945][ T2690] usb 4-1: new low-speed USB device number 78 using dummy_hcd [ 308.652300][ T2690] usb 4-1: Invalid ep0 maxpacket: 16 [ 308.657725][ T2690] usb usb4-port1: unable to enumerate USB device [ 308.948749][T11660] rust_binder: got new transaction with bad transaction stack [ 308.948774][T11660] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:898 [ 309.100053][ T36] audit: type=1400 audit(1751583764.301:4003): avc: denied { append } for pid=11674 comm="syz.2.4144" name="event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 309.106482][T11675] 9pnet_fd: Insufficient options for proto=fd [ 309.290104][T11685] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 309.462719][ T9] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 309.663295][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 309.681935][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 309.692283][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.702526][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 309.714602][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 309.724316][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.732604][ T9] usb 3-1: Product: syz [ 309.736796][ T9] usb 3-1: Manufacturer: syz [ 309.741414][ T9] usb 3-1: SerialNumber: syz [ 309.833211][T11725] tipc: Invalid UDP bearer configuration [ 309.833233][T11725] tipc: Enabling of bearer rejected, failed to enable media [ 309.861955][ T1046] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 309.957637][ T9] usb 3-1: 0:2 : does not exist [ 309.962919][ T9] usb 3-1: unit 6 not found! [ 309.969627][ T9] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 309.979664][ T9] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 309.989619][ T9] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 310.002679][ T9] usb 3-1: USB disconnect, device number 84 [ 310.011519][T10171] udevd[10171]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 310.029043][ T1046] usb 9-1: unable to get BOS descriptor or descriptor too short [ 310.037459][ T1046] usb 9-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.047309][ T1046] usb 9-1: config 1 interface 0 has no altsetting 0 [ 310.055261][ T1046] usb 9-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40 [ 310.064377][ T1046] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.072448][ T1046] usb 9-1: Product: syz [ 310.076635][ T1046] usb 9-1: Manufacturer: syz [ 310.081238][ T1046] usb 9-1: SerialNumber: syz [ 310.290693][ T1046] usbhid 9-1:1.0: couldn't find an input interrupt endpoint [ 310.300951][ T1046] usb 9-1: USB disconnect, device number 9 [ 311.208512][T11808] rust_binder: 11808: no such ref 0 [ 311.214810][T11808] rust_binder: Write failure EINVAL in pid:1331 [ 311.214946][T11808] rust_binder: Read failure Err(EAGAIN) in pid:1331 [ 311.224666][T11809] rust_binder: Write failure EINVAL in pid:173 [ 311.229236][ T36] audit: type=1400 audit(1751583766.431:4004): avc: denied { connect } for pid=11801 comm="syz.8.4187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 311.270710][T11811] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4108172345 (131461515040 ns) > initial count (92395681632 ns). Using initial count to start timer. [ 312.144274][T11829] 9pnet_fd: Insufficient options for proto=fd [ 312.238893][T11834] rust_binder: Error while translating object. [ 312.238926][T11834] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 312.245199][T11834] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1340 [ 312.268036][T11838] fuse: Bad value for 'fd' [ 312.362019][ T9] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 312.385347][T11852] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 312.511941][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 312.524029][ T9] usb 3-1: too many configurations: 236, using maximum allowed: 8 [ 312.533091][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 312.540722][ T9] usb 3-1: can't read configurations, error -61 [ 312.672099][ T9] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 312.707584][T11855] binder: Unknown parameter '0xffffffffffffffff01777777777777777777777' [ 312.812294][T11860] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 312.812329][T11860] rust_binder: Error in use_page_slow: EBUSY [ 312.822050][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 312.822798][T11860] rust_binder: use_range failure EBUSY [ 312.829582][ T9] usb 3-1: too many configurations: 236, using maximum allowed: 8 [ 312.833809][T11860] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 312.842059][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 312.847779][T11860] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 312.855320][ T9] usb 3-1: can't read configurations, error -61 [ 312.863311][T11860] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:193 [ 312.872430][ T9] usb usb3-port1: attempt power cycle [ 312.905428][T11862] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 312.905688][T11862] rust_binder: Write failure EFAULT in pid:1361 [ 313.231951][ T45] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 313.231975][ T9] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 313.252391][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 313.259048][ T9] usb 3-1: too many configurations: 236, using maximum allowed: 8 [ 313.268040][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 313.275758][ T9] usb 3-1: can't read configurations, error -61 [ 313.401945][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 313.408206][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 313.418430][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 313.421989][ T9] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 313.428984][ T45] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 313.444012][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.452075][ T45] usb 4-1: Product: syz [ 313.456275][ T45] usb 4-1: Manufacturer: syz [ 313.460888][ T45] usb 4-1: SerialNumber: syz [ 313.462349][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 313.470960][ T9] usb 3-1: too many configurations: 236, using maximum allowed: 8 [ 313.480133][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 313.487862][ T9] usb 3-1: can't read configurations, error -61 [ 313.494304][ T9] usb usb3-port1: unable to enumerate USB device [ 313.672035][T11864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.680681][T11864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.772045][ T1046] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 313.891964][ T45] usb 4-1: 0:2 : does not exist [ 313.902659][ T45] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 313.916730][ T45] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 313.924792][ T1046] usb 9-1: Using ep0 maxpacket: 32 [ 313.932876][ T1046] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 313.944754][ T1046] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 313.956663][ T1046] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 313.968174][ T1046] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 313.977412][ T1046] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.987572][ T45] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 313.995639][ T1046] usb 9-1: config 0 descriptor?? [ 314.001181][T11878] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 314.010008][ T1046] hub 9-1:0.0: USB hub found [ 314.016507][ T45] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 314.026489][ T45] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 314.036628][ T45] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 314.048561][ T45] usb 4-1: 5:0: cannot get min/max values for control 8 (id 5) [ 314.058580][ T45] usb 4-1: 5:0: cannot get min/max values for control 8 (id 5) [ 314.072076][ T45] usb 4-1: USB disconnect, device number 79 [ 314.126069][T11885] : renamed from lo (while UP) [ 314.150062][ T36] audit: type=1400 audit(1751583769.354:4005): avc: denied { map } for pid=11886 comm="syz.5.4218" path="socket:[72620]" dev="sockfs" ino=72620 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 314.174786][ T36] audit: type=1400 audit(1751583769.354:4006): avc: denied { accept } for pid=11886 comm="syz.5.4218" path="socket:[72620]" dev="sockfs" ino=72620 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 314.184609][T11889] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4219'. [ 314.216387][ T1046] hub 9-1:0.0: config failed, hub has too many ports! (err -19) [ 314.417344][ T36] audit: type=1400 audit(1751583769.624:4007): avc: denied { nlmsg_tty_audit } for pid=11877 comm="syz.8.4215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 314.445730][ T1046] usbhid 9-1:0.0: can't add hid device: -71 [ 314.451812][ T1046] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 314.475668][ T1046] usb 9-1: USB disconnect, device number 10 [ 315.192017][ T402] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 315.341963][ T402] usb 9-1: Using ep0 maxpacket: 16 [ 315.348329][ T402] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 315.357237][ T402] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 315.371912][ T402] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 315.383956][ T402] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 315.393068][ T402] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.395806][T11938] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4239'. [ 315.401081][ T402] usb 9-1: Product: syz [ 315.401103][ T402] usb 9-1: Manufacturer: syz [ 315.401122][ T402] usb 9-1: SerialNumber: syz [ 315.650650][T11975] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 315.657209][T11975] rust_binder: 11975: no such ref 0 [ 315.828597][ T402] usb 9-1: 0:2 : does not exist [ 315.841049][ T402] usb 9-1: 1:0: cannot get min/max values for control 4 (id 1) [ 315.855046][ T402] usb 9-1: USB disconnect, device number 11 [ 316.324449][T12007] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 316.324491][T12007] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:972 [ 316.334075][T12007] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 316.343336][T12007] rust_binder: Read failure Err(EFAULT) in pid:972 [ 316.679817][T12025] veth1_macvtap: left promiscuous mode [ 316.694379][T12025] macsec0: entered allmulticast mode [ 316.747804][T12029] tipc: Invalid UDP bearer configuration [ 316.747840][T12029] tipc: Enabling of bearer rejected, failed to enable media [ 316.961950][ T402] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 317.101942][ T402] usb 9-1: device descriptor read/64, error -71 [ 317.341967][ T402] usb 9-1: device descriptor read/64, error -71 [ 317.456999][T12054] tipc: Invalid UDP bearer configuration [ 317.457044][T12054] tipc: Enabling of bearer rejected, failed to enable media [ 317.582170][ T1046] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 317.586800][ T402] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 317.711938][ T1046] usb 3-1: device descriptor read/64, error -71 [ 317.731949][ T402] usb 9-1: device descriptor read/64, error -71 [ 317.951968][ T1046] usb 3-1: device descriptor read/64, error -71 [ 317.971975][ T402] usb 9-1: device descriptor read/64, error -71 [ 318.082035][ T402] usb usb9-port1: attempt power cycle [ 318.191970][ T1046] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 318.321947][ T1046] usb 3-1: device descriptor read/64, error -71 [ 318.421980][ T402] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 318.426794][T12074] tipc: Invalid UDP bearer configuration [ 318.429608][T12074] tipc: Enabling of bearer rejected, failed to enable media [ 318.443152][ T402] usb 9-1: device descriptor read/8, error -71 [ 318.458877][T12076] 9pnet_fd: Insufficient options for proto=fd [ 318.571962][ T1046] usb 3-1: device descriptor read/64, error -71 [ 318.572959][ T402] usb 9-1: device descriptor read/8, error -71 [ 318.682058][ T1046] usb usb3-port1: attempt power cycle [ 318.831934][ T402] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 318.863012][ T402] usb 9-1: device descriptor read/8, error -71 [ 318.993061][ T402] usb 9-1: device descriptor read/8, error -71 [ 319.021981][ T1046] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 319.043061][ T1046] usb 3-1: device descriptor read/8, error -71 [ 319.102034][ T402] usb usb9-port1: unable to enumerate USB device [ 319.176813][ T1046] usb 3-1: device descriptor read/8, error -71 [ 319.272382][T12107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4303'. [ 319.421976][ T1046] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 319.453006][ T1046] usb 3-1: device descriptor read/8, error -71 [ 319.575236][ T36] audit: type=1400 audit(1751583774.784:4008): avc: denied { execute } for pid=12133 comm="syz.5.4313" path="/bus" dev="ramfs" ino=74513 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 319.599284][ T1046] usb 3-1: device descriptor read/8, error -71 [ 319.617911][T12136] overlayfs: failed to clone upperpath [ 319.624590][ T36] audit: type=1326 audit(1751583774.834:4009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12135 comm="syz.5.4314" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9143f8e929 code=0x0 [ 319.712096][ T1046] usb usb3-port1: unable to enumerate USB device [ 319.733032][T12139] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 319.733069][T12139] rust_binder: Error in use_page_slow: EBUSY [ 319.743506][T12139] rust_binder: use_range failure EBUSY [ 319.749518][T12139] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 319.755138][T12139] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 319.763014][T12139] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:220 [ 320.389412][T12159] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4324'. [ 320.415325][T12160] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1456 [ 320.756572][T12172] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 320.766001][T12172] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:226 [ 321.006278][T12187] netlink: 188 bytes leftover after parsing attributes in process `syz.8.4334'. [ 321.211828][T12191] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 321.212420][T12191] rust_binder: Error in use_page_slow: ESRCH [ 321.218901][T12191] rust_binder: use_range failure ESRCH [ 321.224963][T12191] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 321.230453][T12191] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 321.238689][T12191] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1459 [ 321.659161][T12216] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4348'. [ 321.897180][T12222] netlink: 188 bytes leftover after parsing attributes in process `syz.8.4351'. [ 321.939500][T12226] netlink: 80 bytes leftover after parsing attributes in process `syz.8.4353'. [ 322.283629][T12252] 9pnet_fd: Insufficient options for proto=fd [ 322.321702][T12256] fuse: blksize only supported for fuseblk [ 322.338729][T12256] 9p: Unknown access argument 00000000000000000000: -22 [ 322.368407][T12256] fuse: Bad value for 'group_id' [ 322.378394][T12256] fuse: Bad value for 'group_id' [ 322.405017][T12263] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 322.410921][T12265] rust_binder: Write failure EINVAL in pid:1476 [ 322.416590][T12269] fuse: Bad value for 'rootmode' [ 322.427903][T12266] rust_binder: 12266: no such ref 0 [ 322.472594][T12277] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1480 [ 322.496461][T12278] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1480 [ 322.552493][T12288] netlink: 'syz.5.4376': attribute type 4 has an invalid length. [ 323.325999][T12345] new mount options do not match the existing superblock, will be ignored [ 323.446184][T12352] overlayfs: failed to clone upperpath [ 323.508117][T12354] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4400'. [ 323.753552][T12379] netlink: 188 bytes leftover after parsing attributes in process `syz.5.4410'. [ 324.139440][T12405] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4419'. [ 324.162682][T12407] erofs: (device rnullb0): erofs_read_superblock: cannot find valid erofs superblock [ 324.199949][T12412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4422'. [ 324.269797][T12419] binder: Unknown parameter 'context' [ 324.354275][T12426] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 324.354301][T12426] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:278 [ 324.364483][T12427] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 324.491974][ T45] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 324.632012][ T45] usb 4-1: device descriptor read/64, error -71 [ 324.776901][T12461] tipc: Invalid UDP bearer configuration [ 324.776922][T12461] tipc: Enabling of bearer rejected, failed to enable media [ 324.838325][T12471] netlink: 'syz.5.4444': attribute type 7 has an invalid length. [ 324.871975][ T45] usb 4-1: device descriptor read/64, error -71 [ 325.111981][ T45] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 325.241949][ T45] usb 4-1: device descriptor read/64, error -71 [ 325.275105][T12480] batadv_slave_1: entered promiscuous mode [ 325.281279][T12479] batadv_slave_1: left promiscuous mode [ 325.314899][T12489] tipc: Invalid UDP bearer configuration [ 325.314927][T12489] tipc: Enabling of bearer rejected, failed to enable media [ 325.372235][T12500] netlink: 'syz.8.4453': attribute type 13 has an invalid length. [ 325.410347][T12506] overlayfs: failed to resolve './file1': -2 [ 325.481938][ T45] usb 4-1: device descriptor read/64, error -71 [ 325.592125][ T45] usb usb4-port1: attempt power cycle [ 325.602869][ T36] audit: type=1326 audit(1751583780.814:4010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12518 comm="syz.8.4460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245518e929 code=0x7ff00000 [ 325.607870][T12521] tipc: Invalid UDP bearer configuration [ 325.626612][T12521] tipc: Enabling of bearer rejected, failed to enable media [ 325.633308][ T36] audit: type=1326 audit(1751583780.814:4011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12518 comm="syz.8.4460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245518e929 code=0x7ff00000 [ 325.665942][ T36] audit: type=1326 audit(1751583780.834:4012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12518 comm="syz.8.4460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245518e929 code=0x7ff00000 [ 325.689465][ T36] audit: type=1326 audit(1751583780.834:4013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12518 comm="syz.8.4460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245518e929 code=0x7ff00000 [ 325.713374][ T36] audit: type=1326 audit(1751583780.834:4014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12518 comm="syz.8.4460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245518e929 code=0x7ff00000 [ 325.737425][ T36] audit: type=1326 audit(1751583780.834:4015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12518 comm="syz.8.4460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245518e929 code=0x7ff00000 [ 325.760995][ T36] audit: type=1326 audit(1751583780.834:4016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12518 comm="syz.8.4460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245518e929 code=0x7ff00000 [ 325.784671][ T36] audit: type=1326 audit(1751583780.834:4017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12518 comm="syz.8.4460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245518e929 code=0x7ff00000 [ 325.808568][ T36] audit: type=1326 audit(1751583780.834:4018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12518 comm="syz.8.4460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245518e929 code=0x7ff00000 [ 325.833983][ T36] audit: type=1326 audit(1751583780.834:4019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12518 comm="syz.8.4460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245518e929 code=0x7ff00000 [ 325.912087][T12546] tipc: Invalid UDP bearer configuration [ 325.912113][T12546] tipc: Enabling of bearer rejected, failed to enable media [ 325.932060][ T45] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 325.973320][ T45] usb 4-1: device descriptor read/8, error -71 [ 326.105198][ T45] usb 4-1: device descriptor read/8, error -71 [ 326.154492][T12568] 9pnet_fd: Insufficient options for proto=fd [ 326.341951][ T45] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 326.372934][ T45] usb 4-1: device descriptor read/8, error -71 [ 326.502911][ T45] usb 4-1: device descriptor read/8, error -71 [ 326.612096][ T45] usb usb4-port1: unable to enumerate USB device [ 326.682856][T12579] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2570 sclass=netlink_route_socket pid=12579 comm=syz.5.4482 [ 327.331615][T12625] rust_binder: Write failure EINVAL in pid:1515 [ 327.353399][T12627] /dev/loop0: Can't lookup blockdev [ 327.731940][ T402] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 327.891947][ T402] usb 4-1: Using ep0 maxpacket: 32 [ 327.900787][ T402] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 327.909106][ T402] usb 4-1: config 0 has no interface number 0 [ 327.917869][ T402] usb 4-1: config 0 interface 184 has no altsetting 0 [ 327.930054][ T402] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 327.939572][ T402] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.952094][ T402] usb 4-1: Product: syz [ 327.959962][ T402] usb 4-1: Manufacturer: syz [ 327.965899][ T402] usb 4-1: SerialNumber: syz [ 327.974580][ T402] usb 4-1: config 0 descriptor?? [ 327.983285][ T402] smsc75xx v1.0.0 [ 328.681322][T12691] rust_binder: 12691: no such ref 3 [ 328.884780][T12710] overlayfs: failed to clone upperpath [ 328.992019][ T45] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 329.142584][ T45] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 329.157668][ T45] usb 9-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 329.167017][ T45] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.177356][ T45] usb 9-1: Product: syz [ 329.181716][ T45] usb 9-1: Manufacturer: syz [ 329.187334][ T45] usb 9-1: SerialNumber: syz [ 329.193366][ T45] usb 9-1: config 0 descriptor?? [ 329.195723][ T402] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 329.199776][ T45] usb 9-1: Waiting for MOTU Microbook II to boot up... [ 329.214769][ T402] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 329.222430][ T45] usb 9-1: failed setting the sample rate for Motu MicroBook II: -22 [ 329.228735][ T402] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 329.234084][ T45] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 329.267958][ T402] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 329.277835][ T402] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 329.288308][ T402] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 329.298474][ T402] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 329.308598][ T402] usb 4-1: USB disconnect, device number 84 [ 329.400298][T12722] tipc: Invalid UDP bearer configuration [ 329.400328][T12722] tipc: Enabling of bearer rejected, failed to enable media [ 329.412257][ T45] usb 9-1: USB disconnect, device number 16 [ 329.696614][T12751] tipc: Invalid UDP bearer configuration [ 329.696636][T12751] tipc: Enabling of bearer rejected, failed to enable media [ 329.978584][T12766] tmpfs: Unknown parameter 'O~' [ 330.294124][T12775] tipc: Invalid UDP bearer configuration [ 330.294154][T12775] tipc: Enabling of bearer rejected, failed to enable media [ 330.318009][T12777] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 330.326675][T12777] netlink: 37 bytes leftover after parsing attributes in process `syz.2.4561'. [ 330.419533][T12796] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12796 comm=syz.5.4568 [ 330.473627][T12804] tipc: Invalid UDP bearer configuration [ 330.473647][T12804] tipc: Enabling of bearer rejected, failed to enable media [ 330.528705][T12813] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4574'. [ 330.560509][T12819] netlink: 'syz.5.4576': attribute type 6 has an invalid length. [ 330.892259][T12828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4580'. [ 330.931966][ T2927] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 331.083168][ T2927] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 331.083431][ T402] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 331.093471][ T2927] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 331.112951][ T2927] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 331.124083][ T2927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.132332][ T2927] usb 4-1: Product: syz [ 331.136574][ T2927] usb 4-1: Manufacturer: syz [ 331.141177][ T2927] usb 4-1: SerialNumber: syz [ 331.253166][ T402] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 331.263426][ T402] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 331.273837][ T402] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 331.282947][ T402] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.290954][ T402] usb 9-1: Product: syz [ 331.295171][ T402] usb 9-1: Manufacturer: syz [ 331.299789][ T402] usb 9-1: SerialNumber: syz [ 331.349549][ T2927] usb 4-1: 0:2 : does not exist [ 331.356334][ T2927] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 331.367508][ T2927] usb 4-1: USB disconnect, device number 85 [ 331.507309][ T402] usb 9-1: 0:2 : does not exist [ 331.514187][ T402] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 331.525546][ T402] usb 9-1: USB disconnect, device number 17 [ 331.537099][T12715] udevd[12715]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 331.539037][T10171] udevd[10171]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 331.866926][T12847] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 331.867432][T12847] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1533 [ 332.045120][T12863] 9pnet_fd: Insufficient options for proto=fd [ 332.126176][ T36] kauditd_printk_skb: 24067 callbacks suppressed [ 332.126198][ T36] audit: type=1326 audit(1751583787.334:28087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12865 comm="syz.5.4593" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9143f8e929 code=0x0 [ 332.155684][ T36] audit: type=1326 audit(1751583787.344:28088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12865 comm="syz.5.4593" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9143f8e929 code=0x0 [ 332.178744][ T36] audit: type=1326 audit(1751583787.344:28089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12865 comm="syz.5.4593" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9143f8e929 code=0x0 [ 332.677669][T12884] rust_binder: 12884: no such ref 3 [ 332.682997][T12884] rust_binder: Error while translating object. [ 332.683015][T12884] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 332.689176][T12884] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 332.698596][T12884] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:327 [ 332.721948][ T2927] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 332.781424][T12897] bridge_slave_0: left allmulticast mode [ 332.787155][T12897] bridge_slave_0: left promiscuous mode [ 332.792920][T12897] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.893002][ T2927] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.903320][ T2927] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 332.914033][ T2927] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 332.923146][ T2927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.931155][ T2927] usb 4-1: Product: syz [ 332.935347][ T2927] usb 4-1: Manufacturer: syz [ 332.939967][ T2927] usb 4-1: SerialNumber: syz [ 333.149672][ T2927] usb 4-1: 0:2 : does not exist [ 333.156964][ T2927] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 333.168456][ T2927] usb 4-1: USB disconnect, device number 86 [ 333.398035][T12919] tipc: Invalid UDP bearer configuration [ 333.398057][T12919] tipc: Enabling of bearer rejected, failed to enable media [ 333.678433][T12935] FAULT_INJECTION: forcing a failure. [ 333.678433][T12935] name failslab, interval 1, probability 0, space 0, times 0 [ 333.691181][T12935] CPU: 1 UID: 0 PID: 12935 Comm: syz.8.4616 Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 e1c904518e9113895a28c59b25a6002cdacb68bf [ 333.691218][T12935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 333.691232][T12935] Call Trace: [ 333.691241][T12935] [ 333.691250][T12935] __dump_stack+0x21/0x30 [ 333.691285][T12935] dump_stack_lvl+0x10c/0x190 [ 333.691311][T12935] ? __cfi_dump_stack_lvl+0x10/0x10 [ 333.691338][T12935] dump_stack+0x19/0x20 [ 333.691362][T12935] should_fail_ex+0x3d9/0x530 [ 333.691391][T12935] should_failslab+0xac/0x100 [ 333.691423][T12935] kmem_cache_alloc_noprof+0x42/0x3a0 [ 333.691465][T12935] ? getname_flags+0xc6/0x710 [ 333.691496][T12935] getname_flags+0xc6/0x710 [ 333.691525][T12935] ? build_open_flags+0x487/0x600 [ 333.691552][T12935] getname+0x1b/0x30 [ 333.691574][T12935] do_sys_openat2+0xcb/0x1c0 [ 333.691590][T12935] ? fput+0x1a5/0x240 [ 333.691604][T12935] ? do_sys_open+0x100/0x100 [ 333.691620][T12935] ? ksys_write+0x1ef/0x250 [ 333.691640][T12935] ? __cfi_ksys_write+0x10/0x10 [ 333.691660][T12935] ? __kasan_check_write+0x18/0x20 [ 333.691679][T12935] __x64_sys_openat+0x13a/0x170 [ 333.691697][T12935] x64_sys_call+0xe69/0x2ee0 [ 333.691718][T12935] do_syscall_64+0x58/0xf0 [ 333.691734][T12935] ? clear_bhb_loop+0x50/0xa0 [ 333.691753][T12935] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 333.691772][T12935] RIP: 0033:0x7f245518d290 [ 333.691786][T12935] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 333.691800][T12935] RSP: 002b:00007f2456055f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 333.691818][T12935] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f245518d290 [ 333.691830][T12935] RDX: 0000000000000002 RSI: 00007f2456055fa0 RDI: 00000000ffffff9c [ 333.691841][T12935] RBP: 00007f2456055fa0 R08: 0000000000000000 R09: 0000000000000000 [ 333.691854][T12935] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 333.691869][T12935] R13: 0000000000000000 R14: 00007f24553b5fa0 R15: 00007ffe7997f818 [ 333.691883][T12935] [ 334.116946][T12945] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4621'. [ 334.328638][T12965] overlayfs: failed to clone upperpath [ 334.334658][T12965] overlayfs: failed to clone upperpath [ 334.533883][ T36] audit: type=1400 audit(1751583789.744:28090): avc: denied { lock } for pid=12980 comm="syz.8.4636" path="socket:[79303]" dev="sockfs" ino=79303 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 334.602408][T12996] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.602742][T12996] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 334.609295][T12996] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1555 [ 334.653882][T13002] SELinux: failed to load policy [ 335.147939][T13007] tmpfs: Bad value for 'nr_inodes' [ 335.395414][ T36] audit: type=1400 audit(1751583790.604:28091): avc: denied { create } for pid=13027 comm="syz.2.4655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 335.486177][T13030] random: crng reseeded on system resumption [ 335.492316][ T36] audit: type=1400 audit(1751583790.694:28092): avc: denied { append } for pid=13029 comm="syz.8.4656" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 335.615477][T13034] rust_binder: Error while translating object. [ 335.615554][T13034] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 335.623383][T13034] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:367 [ 335.740042][T13051] tipc: Invalid UDP bearer configuration [ 335.749628][T13051] tipc: Enabling of bearer rejected, failed to enable media [ 335.753161][T13054] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 335.764892][T13054] rust_binder: Error while translating object. [ 335.771440][T13054] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 335.777746][T13054] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:374 [ 336.046723][T13095] rust_binder: 13095: no such ref 7 [ 336.061381][T13095] rust_binder: Read failure Err(EAGAIN) in pid:386 [ 336.181995][T13105] rust_binder: Error while translating object. [ 336.188600][T13105] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 336.195686][T13105] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:394 [ 336.228748][T13109] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4689'. [ 336.252199][T13109] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4689'. [ 336.261953][T13109] rust_binder: Error while translating object. [ 336.261994][T13109] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 336.268194][T13109] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:396 [ 336.351608][T13129] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.4694'. [ 336.379781][T13134] incfs: Options parsing error. -22 [ 336.385192][T13134] incfs: mount failed -22 [ 336.404672][T13138] tipc: Invalid UDP bearer configuration [ 336.404701][T13138] tipc: Enabling of bearer rejected, failed to enable media [ 336.472715][ T36] audit: type=1400 audit(1751583791.684:28093): avc: denied { create } for pid=13111 comm="syz.3.4681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 336.741944][ T45] usb 9-1: new low-speed USB device number 18 using dummy_hcd [ 336.858863][T13163] netlink: 'syz.5.4706': attribute type 27 has an invalid length. [ 336.879170][T13163] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.886538][T13163] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.895824][ T45] usb 9-1: No LPM exit latency info found, disabling LPM. [ 336.904149][ T45] usb 9-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 336.915315][ T45] usb 9-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 336.929345][ T45] usb 9-1: config 1 interface 0 has no altsetting 0 [ 336.989758][T13163] macsec0: left allmulticast mode [ 337.289839][T13198] cgroup: Unknown subsys name 'measure' [ 337.339033][T13203] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 337.339078][T13203] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1578 [ 337.357615][T13207] fuse: Unknown parameter 'Xft' [ 337.388946][T13209] rust_binder: Write failure EFAULT in pid:1580 [ 337.402369][T13207] 9pnet_fd: Insufficient options for proto=fd [ 337.458168][T13215] netlink: 5308 bytes leftover after parsing attributes in process `syz.5.4728'. [ 338.327216][ T36] audit: type=1400 audit(1751583793.534:28094): avc: denied { setattr } for pid=13264 comm="syz.2.4746" path="socket:[80942]" dev="sockfs" ino=80942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 338.463257][T13273] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 338.463572][T13273] rust_binder: 13273: no such ref 3 [ 338.927030][T13295] syzkaller0: entered promiscuous mode [ 338.932666][T13295] syzkaller0: entered allmulticast mode [ 339.007152][T13300] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 339.408260][ T36] audit: type=1326 audit(1751583794.614:28095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13303 comm="syz.2.4758" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3f1f78e929 code=0x0 [ 339.456509][ T45] usb 9-1: New USB device found, idVendor=17ef, idProduct=6004, bcdDevice= 0.40 [ 339.470335][ T45] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.480606][ T45] usb 9-1: can't set config #1, error -71 [ 339.489742][ T45] usb 9-1: USB disconnect, device number 18 [ 339.682089][T13311] 8021q: VLANs not supported on vcan0 [ 339.687797][T13311] binder: Unknown parameter '&*7Mszf7cm*ӕwS҃h9-_tKwn~7]:~) D{ݸ0ŧȿ7O.oڰ/HJg8t77)}a#?65Fu7`#9HUҬEM5AOR [ 339.687797][T13311] lĥ.'' [ 339.781790][T13316] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 339.930431][ T36] audit: type=1400 audit(1751583795.134:28096): avc: denied { map } for pid=13323 comm="syz.8.4763" path="socket:[80212]" dev="sockfs" ino=80212 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 340.191949][ T45] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 340.328080][ T36] audit: type=1400 audit(1751583795.534:28097): avc: denied { create } for pid=13343 comm="syz.2.4770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 340.349521][ T45] usb 9-1: Using ep0 maxpacket: 32 [ 340.357677][ T45] usb 9-1: config 1 interface 0 altsetting 106 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.369164][ T45] usb 9-1: config 1 interface 0 altsetting 106 bulk endpoint 0x82 has invalid maxpacket 16 [ 340.379843][ T45] usb 9-1: config 1 interface 0 altsetting 106 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 340.393948][ T45] usb 9-1: config 1 interface 0 has no altsetting 0 [ 340.403207][ T45] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 340.417528][ T45] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.426987][ T45] usb 9-1: Product: ᰉ [ 340.428105][T13350] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4773'. [ 340.431321][ T45] usb 9-1: Manufacturer: ퟅ㐯扃⃾亭㮝㕱ȧ⡚䔻凘飉糉ᬼ꿽玧Ł⦌륞簴捻헫ꎕ∥弄邱縕쏔몷ꓴ᧨㍤쏋蹭ퟶ쾪✍⣿ᢍꄁ滳戕쐃嬶⿬࢒薭鏅뱰澒ཽ⪓秷踽ྵ㗢ꭇᱢᵕ哲繘䜺䤹④言ᆬ㵩ᦢ퍹쐎閄缀怰蛜ᐪᓌ뢤檦씏帚 [ 340.468572][ T45] usb 9-1: SerialNumber: syz [ 340.474752][T13326] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 340.482081][T13326] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 340.724826][T13364] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4779'. [ 340.815798][T13381] tipc: Invalid UDP bearer configuration [ 340.815820][T13381] tipc: Enabling of bearer rejected, failed to enable media [ 340.890673][ T36] audit: type=1400 audit(1751583796.094:28098): avc: denied { create } for pid=13390 comm="syz.5.4789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 340.892253][T13326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.916571][ T36] audit: type=1400 audit(1751583796.124:28099): avc: denied { sys_admin } for pid=13390 comm="syz.5.4789" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 340.940606][T13326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.955510][ T45] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 340.966924][ T45] usb 9-1: USB disconnect, device number 19 [ 340.983904][T13397] netlink: 'syz.5.4791': attribute type 58 has an invalid length. [ 341.023102][T13411] tipc: Invalid UDP bearer configuration [ 341.023142][T13411] tipc: Enabling of bearer rejected, failed to enable media [ 341.054554][T13416] incfs: Error accessing: ./file0. [ 341.059918][T13416] incfs: mount failed -20 [ 341.116417][T13418] 9pnet_fd: Insufficient options for proto=fd [ 341.500980][T13420] netlink: 9 bytes leftover after parsing attributes in process `syz.8.4798'. [ 341.510232][T13420] gretap0: entered promiscuous mode [ 341.516033][T13420] netlink: 5 bytes leftover after parsing attributes in process `syz.8.4798'. [ 341.524982][T13420] 0{X: renamed from gretap0 [ 341.530780][T13420] 0{X: left promiscuous mode [ 341.536040][T13420] 0{X: entered allmulticast mode [ 341.542431][T13420] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 341.580545][T13424] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 341.881957][ T45] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 341.909850][T13445] 9pnet_fd: Insufficient options for proto=fd [ 341.930580][T13449] 9pnet_fd: Insufficient options for proto=fd [ 342.041920][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 342.048388][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 342.057048][ T45] usb 4-1: config 1 has an invalid interface descriptor of length 4, skipping [ 342.066042][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.076497][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 342.085712][ T45] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 342.100153][ T45] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 342.109283][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.117438][ T45] usb 4-1: Product: syz [ 342.121758][ T45] usb 4-1: Manufacturer: syz [ 342.126456][ T45] usb 4-1: SerialNumber: syz [ 342.498137][ T45] usb 4-1: 0:2 : does not exist [ 342.507801][ T45] usb 4-1: USB disconnect, device number 87 [ 343.085275][T13499] /dev/sg0: Can't lookup blockdev [ 343.119830][T13507] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 343.315194][T13512] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.328752][T13512] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.335884][T13512] bridge_slave_0: entered allmulticast mode [ 343.342948][T13512] bridge_slave_0: entered promiscuous mode [ 343.349641][T13512] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.356794][ T45] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 343.357136][T13512] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.371488][T13512] bridge_slave_1: entered allmulticast mode [ 343.377890][T13512] bridge_slave_1: entered promiscuous mode [ 343.428236][T13512] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.435325][T13512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.442677][T13512] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.449719][T13512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.473343][ T3819] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.480763][ T3819] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.490579][ T7224] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.497697][ T7224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.506724][ T3819] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.513828][ T3819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.523324][ T45] usb 9-1: Using ep0 maxpacket: 32 [ 343.531296][ T45] usb 9-1: config 6 has an invalid interface number: 111 but max is 0 [ 343.539653][ T45] usb 9-1: config 6 has no interface number 0 [ 343.545797][ T45] usb 9-1: config 6 interface 111 has no altsetting 0 [ 343.556135][ T45] usb 9-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice=fa.e9 [ 343.565428][ T45] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.573650][ T45] usb 9-1: Product: syz [ 343.577321][T13512] veth0_vlan: entered promiscuous mode [ 343.578180][ T45] usb 9-1: Manufacturer: syz [ 343.588435][ T45] usb 9-1: SerialNumber: syz [ 343.592694][T13512] veth1_macvtap: entered promiscuous mode [ 343.601362][ T45] usbhid 9-1:6.111: couldn't find an input interrupt endpoint [ 343.700652][T13521] binder: Bad value for 'max' [ 343.706400][T13522] binder: Bad value for 'max' [ 343.964795][ T36] audit: type=1400 audit(1751583799.174:28100): avc: denied { shutdown } for pid=13504 comm="syz.8.4833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 344.028806][ T36] audit: type=1400 audit(1751583799.234:28101): avc: denied { setattr } for pid=13539 comm="syz.2.4845" path="socket:[80644]" dev="sockfs" ino=80644 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 344.545042][T13549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4848'. [ 344.975785][T13563] netlink: 196 bytes leftover after parsing attributes in process `syz.5.4853'. [ 345.110970][T13575] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4858'. [ 345.354845][ T36] audit: type=1326 audit(1751583800.566:28103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.5.4867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9143f8e929 code=0x50000 [ 345.378317][ T36] audit: type=1326 audit(1751583800.566:28102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.5.4867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9143f8e929 code=0x50000 [ 345.402424][ T36] audit: type=1326 audit(1751583800.566:28104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.5.4867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9143f8e929 code=0x50000 [ 345.426090][ T36] audit: type=1326 audit(1751583800.566:28105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.5.4867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9143f8e929 code=0x50000 [ 345.449583][ T36] audit: type=1326 audit(1751583800.566:28106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.5.4867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9143f8e929 code=0x50000 [ 345.473264][ T36] audit: type=1326 audit(1751583800.566:28107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.5.4867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9143f8e929 code=0x50000 [ 345.496754][ T36] audit: type=1326 audit(1751583800.566:28108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.5.4867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9143f8e929 code=0x50000 [ 345.520225][ T36] audit: type=1326 audit(1751583800.566:28109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.5.4867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9143f8e929 code=0x50000 [ 346.134503][ T45] usb 9-1: USB disconnect, device number 20 [ 346.237550][T13625] rust_binder: Write failure EFAULT in pid:448 [ 346.261764][T13627] tipc: Started in network mode [ 346.281945][T13627] tipc: Node identity b23126d1ae4a, cluster identity 4711 [ 346.289278][T13627] tipc: Enabled bearer , priority 0 [ 346.303246][T13627] tipc: Disabling bearer [ 346.454285][T13637] syzkaller0: entered promiscuous mode [ 346.467642][T13637] syzkaller0: entered allmulticast mode [ 346.696381][T13671] rust_binder: Failed to allocate buffer. len:296, is_oneway:true [ 346.828537][T13673] SELinux: failed to load policy [ 346.852351][T13673] rust_binder: Write failure EFAULT in pid:467 [ 346.895517][T13676] rust_binder: Write failure EFAULT in pid:470 [ 347.803396][T13692] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4897'. [ 347.926953][T13692] overlayfs: failed to resolve './file0': -2 [ 348.071045][T13704] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 348.100099][T13708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4903'. [ 348.352055][ T10] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 348.375935][T13722] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 348.393284][T13724] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 348.482015][ T10] usb 9-1: device descriptor read/64, error -71 [ 348.721952][ T10] usb 9-1: device descriptor read/64, error -71 [ 348.727895][T13747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=13747 comm=syz.3.4916 [ 348.961933][ T10] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 349.102267][ T10] usb 9-1: device descriptor read/64, error -71 [ 349.341922][ T10] usb 9-1: device descriptor read/64, error -71 [ 349.452097][ T10] usb usb9-port1: attempt power cycle [ 349.541674][T13778] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 349.541713][T13778] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:54 [ 349.543322][T13775] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 349.551696][T13778] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 349.560912][T13775] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 349.569482][T13778] rust_binder: Read failure Err(EFAULT) in pid:54 [ 349.577185][T13775] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 349.600795][T13775] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 349.609499][T13775] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 349.618189][T13775] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 349.627016][T13775] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 349.636210][T13775] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 349.645295][T13775] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 349.654003][T13775] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 349.682717][T13780] overlayfs: missing 'lowerdir' [ 349.748544][T13796] cgroup: release_agent respecified [ 349.788723][T13802] /dev/rnullb0: Can't lookup blockdev [ 349.791964][ T10] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 349.822928][ T10] usb 9-1: device descriptor read/8, error -71 [ 349.953170][ T10] usb 9-1: device descriptor read/8, error -71 [ 349.971950][ T402] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 350.122969][ T402] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.133187][ T402] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 350.142302][ T402] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 350.156965][ T402] usb 4-1: New USB device found, idVendor=0525, idProduct=85a1, bcdDevice= 0.40 [ 350.166096][ T402] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.174139][ T402] usb 4-1: Product: syz [ 350.178301][ T402] usb 4-1: Manufacturer: syz [ 350.182931][ T402] usb 4-1: SerialNumber: syz [ 350.201948][ T10] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 350.223390][ T10] usb 9-1: device descriptor read/8, error -71 [ 350.353036][ T10] usb 9-1: device descriptor read/8, error -71 [ 350.400881][ T402] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 350.407823][ T402] cdc_ncm 4-1:1.0: bind() failure [ 350.427393][ T402] usb 4-1: USB disconnect, device number 88 [ 350.462555][ T10] usb usb9-port1: unable to enumerate USB device [ 350.680043][T13839] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.689891][T13839] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.699704][T13839] bridge_slave_0: entered allmulticast mode [ 350.717113][T13839] bridge_slave_0: entered promiscuous mode [ 350.732788][T13839] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.739954][T13839] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.748620][T13839] bridge_slave_1: entered allmulticast mode [ 350.755329][T13839] bridge_slave_1: entered promiscuous mode [ 350.761362][T13840] netlink: 'syz.5.4952': attribute type 4 has an invalid length. [ 350.769219][T13840] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.4952'. [ 350.846216][T13839] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.853359][T13839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.860708][T13839] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.867794][T13839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.900102][ T7219] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.908416][ T7219] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.919842][ T7219] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.926949][ T7219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.937285][ T7219] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.944753][ T7219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.984620][T13839] veth0_vlan: entered promiscuous mode [ 351.008454][T13839] veth1_macvtap: entered promiscuous mode [ 351.498196][ T36] kauditd_printk_skb: 40438 callbacks suppressed [ 351.498219][ T36] audit: type=1326 audit(1751583806.705:68548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13900 comm="syz.2.4974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15aa18e929 code=0x7ffc0000 [ 351.499333][T13901] rust_binder: Error while translating object. [ 351.513008][ T36] audit: type=1326 audit(1751583806.705:68549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13900 comm="syz.2.4974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15aa18e929 code=0x7ffc0000 [ 351.532025][T13901] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 351.535397][ T36] audit: type=1326 audit(1751583806.705:68550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13900 comm="syz.2.4974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f15aa18e929 code=0x7ffc0000 [ 351.579162][T13901] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:23 [ 351.592275][ T2690] usb 9-1: new low-speed USB device number 25 using dummy_hcd [ 351.594256][ T36] audit: type=1326 audit(1751583806.705:68551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13900 comm="syz.2.4974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15aa18e929 code=0x7ffc0000 [ 351.633433][ T36] audit: type=1326 audit(1751583806.705:68552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13900 comm="syz.2.4974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15aa18e929 code=0x7ffc0000 [ 351.657521][ T36] audit: type=1326 audit(1751583806.705:68553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13900 comm="syz.2.4974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f15aa18e929 code=0x7ffc0000 [ 351.683419][ T36] audit: type=1326 audit(1751583806.705:68554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13900 comm="syz.2.4974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15aa18e929 code=0x7ffc0000 [ 351.707060][ T36] audit: type=1326 audit(1751583806.705:68555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13900 comm="syz.2.4974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f15aa18e929 code=0x7ffc0000 [ 351.731063][ T36] audit: type=1326 audit(1751583806.705:68556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13900 comm="syz.2.4974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 351.755659][ T36] audit: type=1326 audit(1751583806.705:68557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13900 comm="syz.2.4974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15aa18e929 code=0x7ffc0000 [ 351.759191][T13910] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13910 comm=syz.2.4977 [ 351.792259][ T2690] usb 9-1: Invalid ep0 maxpacket: 32 [ 351.921935][ T2690] usb 9-1: new low-speed USB device number 26 using dummy_hcd [ 352.081928][ T2690] usb 9-1: Invalid ep0 maxpacket: 32 [ 352.092073][ T2690] usb usb9-port1: attempt power cycle [ 352.426771][T13954] netlink: 165 bytes leftover after parsing attributes in process `syz.5.4994'. [ 352.433952][ T2690] usb 9-1: new low-speed USB device number 27 using dummy_hcd [ 352.437164][T13954] overlayfs: failed to clone upperpath [ 352.462290][ T2690] usb 9-1: Invalid ep0 maxpacket: 32 [ 352.592040][ T2690] usb 9-1: new low-speed USB device number 28 using dummy_hcd [ 352.612318][ T2690] usb 9-1: Invalid ep0 maxpacket: 32 [ 352.617872][ T2690] usb usb9-port1: unable to enumerate USB device [ 352.661324][T13967] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:86 [ 353.338291][T13997] syz.5.5011 (13997): attempted to duplicate a private mapping with mremap. This is not supported. [ 353.398158][T14007] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742) [ 353.398203][T14007] rust_binder: Error while translating object. [ 353.410590][T14007] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 353.416927][T14007] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:37 [ 353.455327][T14017] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 353.464616][T14017] rust_binder: Read failure Err(EFAULT) in pid:39 [ 353.722112][ T1046] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 353.882809][ T1046] usb 3-1: not running at top speed; connect to a high speed hub [ 353.891360][ T1046] usb 3-1: config 95 has an invalid interface number: 1 but max is 0 [ 353.899530][ T1046] usb 3-1: config 95 has no interface number 0 [ 353.905806][ T1046] usb 3-1: config 95 interface 1 has no altsetting 0 [ 353.914436][ T1046] usb 3-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 353.923630][ T1046] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.931672][ T1046] usb 3-1: Product: syz [ 353.935932][ T1046] usb 3-1: Manufacturer: syz [ 353.948464][ T1046] usb 3-1: SerialNumber: syz [ 354.065807][T14052] /dev/rnullb0: Can't lookup blockdev [ 354.379163][T14078] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 354.395227][ T1046] usb 3-1: USB disconnect, device number 93 [ 354.565689][T14105] binder: Unknown parameter 'seclabel' [ 354.753032][ T10] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 354.812538][T14126] 9pnet_fd: Insufficient options for proto=fd [ 354.842788][ T1046] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 354.943002][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.958539][T14147] batadv_slave_1: entered promiscuous mode [ 354.964839][T14146] batadv_slave_1: left promiscuous mode [ 354.970596][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.983149][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 355.000386][ T10] usb 9-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 355.009467][ T1046] usb 3-1: Using ep0 maxpacket: 8 [ 355.015125][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.015966][ T1046] usb 3-1: unable to get BOS descriptor or descriptor too short [ 355.028850][ T10] usb 9-1: config 0 descriptor?? [ 355.032077][ T1046] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 355.045776][ T1046] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 355.060800][ T1046] usb 3-1: string descriptor 0 read error: -22 [ 355.067099][ T1046] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 355.076428][ T1046] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.095453][T14153] rust_binder: Failed to vm_insert_page(35184388853760): vma_addr:35184388849664 i:1 err:EFAULT [ 355.095489][T14153] rust_binder: Error in use_page_slow: EFAULT [ 355.097195][T14103] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 355.106430][T14153] rust_binder: use_range failure EFAULT [ 355.119393][T14153] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 355.125086][T14153] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 355.133227][T14153] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:157 [ 355.318392][ T1046] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 355.338697][ T1046] usb 3-1: USB disconnect, device number 94 [ 355.440342][ T10] dragonrise 0003:0079:0011.0026: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.8-1/input0 [ 355.491974][ T65] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 355.631933][ T65] usb 4-1: device descriptor read/64, error -71 [ 355.653673][ T10] usb 9-1: USB disconnect, device number 29 [ 355.871975][ T65] usb 4-1: device descriptor read/64, error -71 [ 355.900983][T14165] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:61 [ 356.039725][T14182] netlink: 'syz.5.5082': attribute type 27 has an invalid length. [ 356.070599][T14184] overlayfs: failed to clone upperpath [ 356.077001][T14184] tmpfs: Unknown parameter 'no' [ 356.112120][ T65] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 356.210993][T14220] TCP: out of memory -- consider tuning tcp_mem [ 356.218012][T14220] ------------[ cut here ]------------ [ 356.223569][T14220] WARNING: CPU: 1 PID: 14220 at net/ipv4/af_inet.c:157 inet_sock_destruct+0x681/0x790 [ 356.233208][T14220] Modules linked in: [ 356.233731][T14224] netlink: 188 bytes leftover after parsing attributes in process `syz.5.5097'. [ 356.237190][T14220] CPU: 1 UID: 0 PID: 14220 Comm: syz.8.5096 Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 e1c904518e9113895a28c59b25a6002cdacb68bf SYZFAIL: failed to recv rpc fd=3 want=1412 recv=1404 n=-1 (errno 104: Connection reset by peer) [ 356.237227][T14220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 356.237241][T14220] RIP: 0010:inet_sock_destruct+0x681/0x790 [ 356.251959][ T65] usb 4-1: device descriptor read/64, error -71 [ 356.260125][T14220] Code: a3 e8 d3 e6 c8 fc 0f 0b e9 53 fe ff ff e8 c7 e6 c8 fc 0f 0b e9 92 fe ff ff e8 bb e6 c8 fc 0f 0b e9 c4 fe ff ff e8 af e6 c8 fc <0f> 0b e9 f6 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 65 fc ff [ 356.303501][T14220] RSP: 0018:ffffc90004ba7be8 EFLAGS: 00010283 [ 356.309818][T14220] RAX: ffffffff84bcbc81 RBX: 0000000080004000 RCX: 0000000000080000 [ 356.318222][T14220] RDX: ffffc90002e25000 RSI: 0000000000001bbb RDI: 0000000000001bbc [ 356.326316][T14220] RBP: ffffc90004ba7c30 R08: ffff888124d6477f R09: 1ffff110249ac8ef [ 356.334352][T14220] R10: dffffc0000000000 R11: ffffed10249ac8f0 R12: ffff888124d64600 [ 356.342397][T14220] R13: ffff888124d64600 R14: ffff888124d64764 R15: 1ffff110249ac8c2 [ 356.350526][T14220] FS: 00007f24560566c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 356.359730][T14220] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 356.366496][T14220] CR2: 0000200000001000 CR3: 000000011ecbc000 CR4: 00000000003526b0 [ 356.374551][T14220] Call Trace: [ 356.377858][T14220] [ 356.380818][T14220] ? __cfi_inet_sock_destruct+0x10/0x10 [ 356.386456][T14220] __sk_destruct+0x68/0x6a0 [ 356.390996][T14220] ? __sk_free+0x304/0x410 [ 356.395503][T14220] __sk_free+0x313/0x410 [ 356.399792][T14220] sk_free+0x58/0xb0 [ 356.403797][T14220] tcp_close+0xc4/0x120 [ 356.408001][T14220] inet_release+0x1b4/0x2c0 [ 356.412567][T14220] sock_close+0xda/0x280 [ 356.416850][T14220] ? __cfi_sock_close+0x10/0x10 [ 356.421742][T14220] __fput+0x1fe/0xa00 [ 356.425787][T14220] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 356.431376][T14220] ____fput+0x20/0x30 [ 356.435581][T14220] task_work_run+0x1e3/0x250 [ 356.440234][T14220] ? __cfi_task_work_run+0x10/0x10 [ 356.445529][T14220] ? __kasan_check_write+0x18/0x20 [ 356.450703][T14220] resume_user_mode_work+0x36/0x50 [ 356.456504][T14220] syscall_exit_to_user_mode+0x64/0xb0 [ 356.462074][T14220] do_syscall_64+0x64/0xf0 [ 356.466713][T14220] ? clear_bhb_loop+0x50/0xa0 [ 356.471438][T14220] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 356.477524][T14220] RIP: 0033:0x7f245518e929 [ 356.482015][T14220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.501742][T14220] RSP: 002b:00007f2456056038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 356.510233][T14220] RAX: 0000000000000000 RBX: 00007f24553b5fa0 RCX: 00007f245518e929 [ 356.518435][T14220] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 356.526662][T14220] RBP: 00007f2455210b39 R08: 0000000000000000 R09: 0000000000000000 [ 356.534716][T14220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.542770][T14220] R13: 0000000000000000 R14: 00007f24553b5fa0 R15: 00007ffe7997f818 [ 356.550954][T14220] [ 356.554037][T14220] ---[ end trace 0000000000000000 ]--- [ 356.662909][ T3819] bridge_slave_1: left allmulticast mode [ 356.668631][ T3819] bridge_slave_1: left promiscuous mode [ 356.696740][ T3819] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.704966][ T3819] bridge_slave_0: left allmulticast mode [ 356.710676][ T3819] bridge_slave_0: left promiscuous mode [ 356.716621][ T3819] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.864053][ T3819] veth1_macvtap: left promiscuous mode [ 356.869603][ T3819] veth0_vlan: left promiscuous mode [ 357.185075][ T3819] bridge_slave_1: left allmulticast mode [ 357.190761][ T3819] bridge_slave_1: left promiscuous mode [ 357.196463][ T3819] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.205149][ T3819] bridge_slave_1: left allmulticast mode [ 357.210839][ T3819] bridge_slave_1: left promiscuous mode [ 357.216502][ T3819] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.224206][ T3819] bridge_slave_0: left allmulticast mode [ 357.229862][ T3819] bridge_slave_0: left promiscuous mode [ 357.235658][ T3819] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.384071][ T3819] tipc: Left network mode [ 357.390050][ T3819] veth1_macvtap: left promiscuous mode [ 357.395641][ T3819] veth0_vlan: left promiscuous mode [ 357.401048][ T3819] veth1_macvtap: left promiscuous mode [ 357.406624][ T3819] veth0_vlan: left promiscuous mode [ 359.151943][ C0] TCP: out of memory -- consider tuning tcp_mem [ 359.160115][ T7224] bridge_slave_1: left allmulticast mode [ 359.165873][ T7224] bridge_slave_1: left promiscuous mode [ 359.171514][ T7224] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.179073][ T7224] bridge_slave_0: left allmulticast mode [ 359.184755][ T7224] bridge_slave_0: left promiscuous mode [ 359.190368][ T7224] bridge0: port 1(bridge_slave_0) entered disabled state