last executing test programs: 1m26.60574684s ago: executing program 0 (id=1625): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0xc408655f104a227a, 0x4) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x23, &(0x7f0000000040)=""/43, &(0x7f0000000200)=0x2b) mount(&(0x7f0000000000)=@sg0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='securityfs\x00', 0x808021, 0x0) 1m25.745136244s ago: executing program 0 (id=1641): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='pstore\x00', 0xa1840c, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)={0x14, 0x23, 0x589220971c130acb, 0x70bd2b, 0x25dfdbff, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0xe5}, 0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x15, 0x0, 0x33}, @flat=@weak_binder={0x77622a85, 0x1, 0x1}}, &(0x7f0000000280)={0x0, 0x13, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x4, &(0x7f00000001c0)=[{0x0, 0x4, 0x8, 0x80000000}, {0x800, 0x9, 0xf, 0x8}, {0x3, 0x3, 0x0, 0x3}, {0x6, 0x3, 0x0, 0x69e}]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80000001}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) close_range(r0, r5, 0x0) ioctl$HIDIOCGFEATURE(r6, 0xc0404807, &(0x7f00000002c0)={0x0, "2c2d62481695c05bcaf7c82ec32b3dc7239906b7255453ae46e99cc2f1564768d807cccf26e54a03df38f4322cb76d817a623cf9d7534838a9678362e906de20"}) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000040)={0x101, 0x3, 0x3, 0xffff, 0x27}) 1m25.589397027s ago: executing program 0 (id=1642): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 1m25.588933016s ago: executing program 0 (id=1643): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030", @ANYBLOB, @ANYRESDEC, @ANYRES8=r0], 0x15) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000140)) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000002d00)='cgroup.threads\x00', 0x2, 0x0) read$FUSE(r5, &(0x7f0000000c80)={0x2020}, 0x2020) r6 = dup(r2) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) ioctl$BLKROSET(r7, 0x125d, &(0x7f0000000480)=0x1000) r8 = open(&(0x7f0000000100)='./file0\x00', 0x101540, 0x0) write$FUSE_BMAP(r6, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r6, &(0x7f00000000c0)={0x18}, 0x18) openat$cgroup_freezer_state(r8, &(0x7f00000004c0), 0x2, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x8814) write$FUSE_DIRENTPLUS(r6, &(0x7f00000005c0)=ANY=[@ANYBLOB="b9"], 0xb8) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r9, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x2}) fcntl$lock(r9, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x3, 0x1fd}) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',cache=fscache']) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) r11 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r11) 1m25.546855027s ago: executing program 0 (id=1646): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000000140)=""/186, 0xba}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f00000034c0)=""/211, 0xd3}, {&(0x7f00000035c0)=""/74, 0x4a}, {&(0x7f0000000400)=""/241, 0xf1}, {&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000000780)=""/83, 0x53}, {&(0x7f0000000800)=""/127, 0x7f}], 0xa}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x2100, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) (async) sendto$inet6(r2, 0x0, 0x0, 0x20008000, &(0x7f00000001c0)={0xa, 0x4e22, 0x61c7, @private2, 0x5}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000000c0)={@mcast2, 0x5f, r4}) (async) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000240)=0x1, 0x4) (async) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) (async) sendmmsg$inet6(r2, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f00005cf000/0x4000)=nil, 0x4000, 0x3000001, 0x12, r5, 0x45809000) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc004ae0a, &(0x7f0000000000)=""/1) 1m25.38241967s ago: executing program 0 (id=1649): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x28000, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='\x06') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) sendto(r1, &(0x7f0000000740)="1200000000f0ffa1", 0xffffffffffffff1b, 0x4040010, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r2, &(0x7f000000af40)={0xa000000a}) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0xfffffffffffffffe}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/92, 0x5c, 0x0, 0x3c}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 1m25.331189231s ago: executing program 32 (id=1649): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x28000, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='\x06') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) sendto(r1, &(0x7f0000000740)="1200000000f0ffa1", 0xffffffffffffff1b, 0x4040010, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r2, &(0x7f000000af40)={0xa000000a}) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0xfffffffffffffffe}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/92, 0x5c, 0x0, 0x3c}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 58.745235051s ago: executing program 2 (id=1966): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000050000106a05310300000000000109022400010000800009040002090300010009210000000122000509058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000005c0)={0x14, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1801}}}, &(0x7f0000000880)={0x34, &(0x7f0000000600)={0x20, 0x15, 0xba, "2c0a3ddb9ebb639ccfc88cdd7794b6f7d208b3bf4fc5bb2ab8fcf8b1f522eee3e822b90ff4823c7b10bb533bb173fc92595120ffce3e762b37f7897ff9d25401ee8c9c174d41f92c422151748fa418cdf40d6b91ddfeb1a27c8038bd32c8eb2b5e2dacfa2f4a8c23ac068c81de41af5da3d03b877373299d5febe80239b672f0b971fa00b87e1156d727b013a06570293b93c190469f8fba5bdc94d648222539d9e59703371bec7dfcb302e738bda6551aed0e0461654949d69c"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0xfb}, &(0x7f00000007c0)={0x20, 0x0, 0x5c, {0x5a, "83f9d9d8a7937d846370e350304ae59cc3679c9d89f16146e6ba2b5236a158a0c0da910db338fce6783cd5ef08d14aa7f2485cb1b4bde9f993911bc28db18ebc897d3110a247bdc97256a833640c074ed0c4fff587e1bf6d21f8"}}, &(0x7f0000000740)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000000840)={0x20, 0x0, 0x1, 0x8}}) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 57.145808636s ago: executing program 2 (id=1991): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000180)='./file0\x00', 0x1d0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000540)="a6aa", 0x2}], 0x1, 0x8, 0x8000, 0x4) 57.128025007s ago: executing program 2 (id=1992): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) listen(r1, 0x80000001) 57.064020907s ago: executing program 2 (id=1993): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0xc6) getdents64(r1, &(0x7f00000001c0)=""/167, 0xa7) lseek(r1, 0x4, 0x1) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="0e030e00c4e8120006491e0089", 0xd, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005a000d03"], 0x1c}], 0x1}, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = fcntl$getown(r1, 0x9) ptrace$cont(0x18, r4, 0x2060, 0x9) ptrace$getregset(0x4205, r2, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) ioctl$ASHMEM_SET_NAME(r0, 0x8008770b, 0x0) 57.056750978s ago: executing program 2 (id=1994): accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x80000) (async) accept$packet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x14) (async) socket$pptp(0x18, 0x1, 0x2) (async) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xb, 0x0, 0xfffffffffffffd98) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xca000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) 56.969535919s ago: executing program 2 (id=1995): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@flat=@handle={0x73682a85, 0x10b, 0x2}, @fd, @fda={0x66646185, 0x7, 0x2, 0x19}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 56.938398679s ago: executing program 33 (id=1995): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@flat=@handle={0x73682a85, 0x10b, 0x2}, @fd, @fda={0x66646185, 0x7, 0x2, 0x19}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 34.596139201s ago: executing program 3 (id=2283): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='reno\x00', 0x5) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000400)=0xfffffff8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r3 = socket$tipc(0x1e, 0x5, 0x0) getsockname$tipc(r3, &(0x7f0000000080)=@id, &(0x7f00000000c0)=0x10) mount(&(0x7f0000000040)=@md0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x808081, 0x0) 34.480486283s ago: executing program 3 (id=2284): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB="646566636f6e74060218aa756d635f75f72b726578743d22d5bda49fc855af97b7b0b4240b9c0b64ce3c2ba23253eb0bd48950998b08efb69a725fb9c5398255"]) 34.461402073s ago: executing program 3 (id=2285): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x14) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2) (async, rerun: 64) r3 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) (rerun: 64) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000100)={r3, 0x0, 0x1000, 0xa000}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0xc0086202, &(0x7f0000000080)=0x2) ioprio_set$uid(0x3, 0x0, 0x2004) (async) close_range(r1, 0xffffffffffffffff, 0x0) 34.387812274s ago: executing program 3 (id=2286): prlimit64(0x0, 0xe, 0x0, 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x3, 0x300) mkdir(&(0x7f0000000000)='./file0\x00', 0xb4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) (async) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0/../file0/file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='s\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0e022abd7000fedbdf250e000000280003801400020076657468315f746f5f6272696467650008000500ac1414bb08000300020000000800060000000000080004001000000040000180060002002100000014000300ac1414bb000000000000000000000000060004004e2400000800050002000000060001000200000008000900700000000800060005000000"], 0x94}, 0x1, 0x0, 0x0, 0x40810}, 0x20000000) (async) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='s\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0e022abd7000fedbdf250e000000280003801400020076657468315f746f5f6272696467650008000500ac1414bb08000300020000000800060000000000080004001000000040000180060002002100000014000300ac1414bb000000000000000000000000060004004e2400000800050002000000060001000200000008000900700000000800060005000000"], 0x94}, 0x1, 0x0, 0x0, 0x40810}, 0x20000000) chdir(&(0x7f00000001c0)='./bus\x00') r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io(r3, &(0x7f0000000640)={0x2c, &(0x7f0000000280)={0x20, 0x23, 0xc, {0xc, 0x30, "37ab4607e2bf3f41b9a9"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180a}}, &(0x7f0000000480)={0x0, 0xf, 0x173, {0x5, 0xf, 0x173, 0x5, [@generic={0x8e, 0x10, 0x1, "ae0703304416cfeebb31ae8b2134f15f2f3ad8a82bc6c3108f6d463c8696250b25b9e0f58ceb212dfd90a89ab8922884202bfc791be989f9b77c2bf578b226c6e0bacb5735f64068edb9745b7a011e02bce5cec23ceba569fcb1586ff9086dcb38f4a3aef5d5a5f3d4d9f84258243113aee47eb131abd029f867c3de21203d85eaf4ef1b23ab2b6b23fea1"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x29, 0x9, 0x8, 0x7, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "8aa171ee124af1427a352b72fe3e2342"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x6, 0x5}, @generic={0xba, 0x10, 0x2, "b9ca98f6604c9931b46329de64b37d5dfdb8828b104ee48ce1d9848656ba63c2f0aeb0bd9aabdc2459bf00574bece0e4e40e23386f33288d4fc512582ee4a7ffb8df8810754d0cfad2d1a83941d44b7bc83206bd612e88c6dd1bb62d0647992589f08b04169378fc9bd9008d3e0d211172394f63fd2f49a4d0ad272fd2e89aac2022864c8d090394909efdad1dd98350e1c1829c7fd4d2a9798a3740618393cc7e8ea5f7c6dc4d3ab229591b921bfaece662c604b83d07"}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x18, 0x8, 0x7, "24033f92", "5055d55f"}}, &(0x7f0000000600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x80, 0x8, 0x68, 0x0, 0xc, 0x90a}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000680)={0x0, 0x0, 0xa8, "a8fe7f2f1072148ac08003790ba1d43e9a09e2559580d6f5d71616810978d78e436aa460e1c14acb990c87558ad3c5259dd2f74cb3bb514e1331fdb19728eb1e31fe8967d4af65227d4dd3d35b17db58f84371ed1a525d887147760a765d8b99469600f541b2fb67074596e3417fffcc1d175c2cc953bffe5a83555c5e847c78d8eef2e27808f25ca81c72992ebc75852be8ce4ad713f97c7915c404f5fea6f2a621ca5a3b10f873"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000800)={0x20, 0x0, 0x8, {0x1, 0x8, [0xf00]}}, &(0x7f0000000840)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0x3}, &(0x7f00000008c0)={0x40, 0xb, 0x2, "bd3d"}, &(0x7f0000000900)={0x40, 0xf, 0x2}, &(0x7f0000000940)={0x40, 0x13, 0x6, @random="0944dd76ffc3"}, &(0x7f0000000980)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000009c0)={0x40, 0x19, 0x2, "1fb9"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0xfd}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x9}}) utime(&(0x7f0000000000)='./file0\x00', 0x0) rmdir(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) 31.412831122s ago: executing program 3 (id=2304): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x9) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x28011, r1, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x2bc, 0x1, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_MASK={0x10, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_NAT={0x24c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}}}}]}, @CTA_EXPECT_NAT_TUPLE={0xcc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_TUPLE={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_TUPLE={0x9c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_MASTER={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x200008c}, 0x4040080) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x100}, @ptr={0x70742a85, 0x1, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 31.306149044s ago: executing program 3 (id=2305): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$packet(0x11, 0x3, 0x300) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000140)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000001c0)="43297e8848278db59e9244350431e2b8479988b3", 0x14}], 0x1}}], 0x1, 0x200400c1) (async) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$cgroup_devices(r1, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000b0000000000000006d4eb658a12908125d16ef97c269e5a058fb3a0122752966d3db4570182771305f1a8bb5b335292c758f5d552ab34c16d626f45dcef17a73c5ffb1fb8e3f99334a100ce24681f8015a631d18b9"]) r6 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r7, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x541b, 0x0) (async) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) preadv(r8, &(0x7f0000000380)=[{&(0x7f0000000280)=""/71, 0x47}, {0x0}], 0x2, 0x1, 0x8) syz_clone3(0x0, 0x0) (async) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r9, 0x12, 0x3, &(0x7f0000000080)=0x4, 0x4) (async) getsockopt$bt_rfcomm_RFCOMM_LM(r9, 0x12, 0x3, &(0x7f0000003500), &(0x7f0000003540)) (async) r10 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$PTP_EXTTS_REQUEST2(r11, 0x40103d0b, &(0x7f0000000180)={0x800007, 0xc}) sendmsg$SOCK_DIAG_BY_FAMILY(r11, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001400110200000000fcdbdf25280068fdfa"], 0x28}}, 0x0) (async) readv(r11, &(0x7f0000000140)=[{&(0x7f0000000240)=""/116, 0x74}], 0x1) (async) fadvise64(r10, 0x10000, 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r6, 0xc1086201, &(0x7f0000000f00)={'binder0\x00'}) 31.301607684s ago: executing program 34 (id=2305): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$packet(0x11, 0x3, 0x300) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000140)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000001c0)="43297e8848278db59e9244350431e2b8479988b3", 0x14}], 0x1}}], 0x1, 0x200400c1) (async) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$cgroup_devices(r1, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000b0000000000000006d4eb658a12908125d16ef97c269e5a058fb3a0122752966d3db4570182771305f1a8bb5b335292c758f5d552ab34c16d626f45dcef17a73c5ffb1fb8e3f99334a100ce24681f8015a631d18b9"]) r6 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r7, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x541b, 0x0) (async) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) preadv(r8, &(0x7f0000000380)=[{&(0x7f0000000280)=""/71, 0x47}, {0x0}], 0x2, 0x1, 0x8) syz_clone3(0x0, 0x0) (async) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r9, 0x12, 0x3, &(0x7f0000000080)=0x4, 0x4) (async) getsockopt$bt_rfcomm_RFCOMM_LM(r9, 0x12, 0x3, &(0x7f0000003500), &(0x7f0000003540)) (async) r10 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$PTP_EXTTS_REQUEST2(r11, 0x40103d0b, &(0x7f0000000180)={0x800007, 0xc}) sendmsg$SOCK_DIAG_BY_FAMILY(r11, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001400110200000000fcdbdf25280068fdfa"], 0x28}}, 0x0) (async) readv(r11, &(0x7f0000000140)=[{&(0x7f0000000240)=""/116, 0x74}], 0x1) (async) fadvise64(r10, 0x10000, 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r6, 0xc1086201, &(0x7f0000000f00)={'binder0\x00'}) 4.022407465s ago: executing program 4 (id=2563): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x5b15, 0x100) ppoll(&(0x7f00000001c0)=[{r1, 0x8184}], 0x1, &(0x7f0000000200), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000380)="7f1588e601432847109c515476dac5aef33492632120f309692f69809d34aae8244cab10f483a980ecc4f6d640c86b123af859e8f62aad667ae85aaa0079263a01e872728559767b9335c600000080000000000000000000"}) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000000208"], 0x80}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x0, 0x62) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x40086602, &(0x7f0000000080)={@desc={0xffff8000, 0x0, @desc2}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) syz_io_uring_setup(0x1dc, &(0x7f0000000300)={0x0, 0xd9db, 0x10000, 0x3, 0x387, 0x0, r3}, &(0x7f0000000440), &(0x7f0000000480)) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/current\x00', 0x2, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), r4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x218}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r8, 0xc018ae85, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)=ANY=[@ANYBLOB="020100021000000000000600000000000800130000ffff400000d2a82be90000e592c30000ffff390000ff0f00000025e00073000000000000000000000035000000000000000000000e02ff00001000030006000000000002000004000000bb0000e00000000000030005000000000002"], 0x80}}, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmmsg(r9, &(0x7f0000000180), 0x400000000000002, 0x0) write$selinux_attr(r5, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r10 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x0) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRESOCT=r4, @ANYBLOB="010000000000001f0000540000000e0001006e657464657673696d0000000f0002"], 0x34}}, 0x40000) close_range(r2, 0xffffffffffffffff, 0x0) 3.900004477s ago: executing program 4 (id=2564): memfd_create(0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x20, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') 2.44413102s ago: executing program 1 (id=2586): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000050000106a05310300000000000109022400010000800009040002090300010009210000000122000509058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000005c0)={0x14, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1801}}}, &(0x7f0000000880)={0x34, &(0x7f0000000600)={0x20, 0x15, 0x33, "2c0a3ddb9ebb639ccfc88cdd7794b6f7d208b3bf4fc5bb2ab8fcf8b1f522eee3e822b90ff4823c7b10bb533bb173fc92595120"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 2.197760064s ago: executing program 5 (id=2593): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000108, 0x0, 0x6}]}) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="94000000120011"], 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x4000) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x8}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r8) close_range(r0, 0xffffffffffffffff, 0x0) 1.85171001s ago: executing program 5 (id=2594): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x181, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x1, 0x4) (async) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000002c0)={0x1000000000000058, 0x0, [{0x93a, 0x0, 0xfffffffffffffffb}]}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) (async, rerun: 64) readahead(r4, 0x3, 0xffffffff) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/144, 0x90, 0x1, 0x29}, @fda={0x66646185, 0x3, 0x0, 0x4}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x3f}}, &(0x7f0000000280)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r4, 0x45809000) (async, rerun: 32) r8 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) getsockopt$inet_mtu(r8, 0x0, 0xa, 0x0, &(0x7f0000000200)) 1.640021913s ago: executing program 5 (id=2595): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="220a08090200000029bd7000ffdbdf25"], 0x10}}, 0x0) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r4) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@ignoreqv}]}}) getresuid(&(0x7f0000000280), &(0x7f0000000400), &(0x7f0000000440)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) unlinkat(r5, &(0x7f00000003c0)='./file2\x00', 0x200) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r6, &(0x7f0000000980)={0x2020}, 0x2020) 1.639374864s ago: executing program 5 (id=2596): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$poke(0x4, r2, &(0x7f0000001040), 0x282d) splice(r0, 0x0, r1, 0x0, 0x801100000000f336, 0x7) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, &(0x7f00000002c0)="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", 0xfc) r5 = socket(0x840000000002, 0x3, 0x100) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) read$FUSE(r6, 0x0, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x20000010304, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x4, {0x2, 0x4e20, @multicast1=0xe000cc02}}) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201f84a0cfce8fb3a90a810016cf9d310cb0400011f050102030109021200010600a00709042f06005cc31c08"], 0x0) r8 = dup(r3) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x4024854}, 0x4) recvmmsg(r9, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001840)=""/4080, 0xff0}, {&(0x7f00000014c0)=""/197, 0xc5}, {&(0x7f0000002bc0)=""/90, 0x5a}], 0x3}, 0x12}, {{0x0, 0x0, 0x0}, 0x2be9}], 0x2, 0x2, 0x0) 1.097003612s ago: executing program 5 (id=2598): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89fd, &(0x7f0000000000)={'gretap0\x00', @random="0e57c06c9bb2"}) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000240)={0x1fe, 0x2, 0x1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) write$P9_RLERRORu(r1, &(0x7f0000000040)={0x14, 0x7, 0x1, {{0x7, '{-&-+/-'}, 0x6}}, 0x14) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4138ae84, &(0x7f0000000240)=@x86={0x49, 0x3c, 0x5, 0x0, 0x401, 0x0, 0x4, 0x7f, 0xd, 0x6, 0x7, 0x2, 0x0, 0x200, 0x7, 0x1, 0x5, 0xc, 0x9, '\x00', 0xf5, 0x8}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0xf, 0x9, '\x00', 0x9}) socket$inet6(0xa, 0x4, 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000180), 0x8015, &(0x7f0000000480)=ANY=[@ANYRES8=r1]) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) ioprio_set$pid(0x2, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000100)={0x50, 0x0, r8, {0x7, 0x1f, 0xffffefff, 0x641009, 0x1, 0x1, 0x0, 0x6c9f, 0x0, 0x0, 0x20, 0x7}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000a3c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x0, {0x410000003, 0x10, 0x0, {0x0, 0x80002, 0xfffffffffffffffc, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8001, 0x0, r9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r10, &(0x7f0000003280)={0x10, 0x0, 0x25dfdbff, 0x4000000}, 0xc) bind$netlink(r10, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff}, 0xc) 900.258136ms ago: executing program 6 (id=2600): arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x9) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x10) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xb) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x4) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x10) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x7) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xe) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xa) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xe) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xe) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xf) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x0) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xa) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x6) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xc) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xa) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x8) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x10) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xc) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x0) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xa) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x65a6d86b, 0x74a1, 0x7, 0x2, 0x8, "7731731c9cd151ad624098f4ce9699fe3ea107", 0xdf, 0x8001}) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xa) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xf) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xb) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x7) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xd) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 899.968636ms ago: executing program 6 (id=2601): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000180)='./file0\x00', 0x1d0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000540)="a6aa", 0x2}], 0x1, 0x8, 0x8000, 0x4) (fail_nth: 3) 899.534565ms ago: executing program 4 (id=2602): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000180)='./file0\x00', 0x1d0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000540)="a6aa", 0x2}], 0x1, 0x8, 0x8000, 0x4) 778.608397ms ago: executing program 4 (id=2603): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000001c0)=@ethtool_sset_info={0x4a, 0x1, 0x101, [0x7]}}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000140)="670f009205000000baa000ec66b95c0b000066b80f00000066ba000000000f30660f3881b00000ff4a0a0f01f68fc94001545ebaf80c66b88ca1cd8b66efbafc0cb000eeba420066ed260f011d", 0x4d}], 0x1, 0x42, 0x0, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r1, 0x4068aea3, &(0x7f0000000080)={0xdb, 0x0, 0x1}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001480)={0x84, &(0x7f0000001000)=ANY=[@ANYBLOB="00015100000006513ef7fa0a73eee331e23d12014428ccddfd0300092b57b3cf383000b4bf496ff88e6cbbf576c581439c31fe394898ed94da316c4bfc6c919e3119aeb9fcea210eb572e655f8d0f485e69a50ee359ddd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 777.900368ms ago: executing program 1 (id=2604): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000900), 0x800, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x1100, 0x200000000003}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) (async) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 32) r4 = socket$unix(0x1, 0x2, 0x0) (async, rerun: 32) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fcntl$setlease(r5, 0x400, 0x0) syz_io_uring_setup(0x5d47, &(0x7f0000000480)={0x0, 0xc452, 0x20, 0x0, 0x19c, 0x0, r5}, &(0x7f0000000200), &(0x7f0000000700)) (async) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) getpeername$unix(r4, 0x0, &(0x7f0000000300)) (async) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x1, @local, 0xfd}, 0x1c) (async, rerun: 64) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22, 0xfffffff8}, 0x1c) (async, rerun: 64) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000940)={0x1, 0x1, 0x1000, 0xb3, &(0x7f0000000280)="1736ff4789d7937d99fece9cf65b3bdbee67623399ccf6ac514802847dfee9b8d1cd51d582147f2caae3f917eff093f1df3ca7335e0a5ccb5cfac4929bebeef0329c96b50b9ac9de32422aa21561469caa377e8323ee459df62820ea9eed9db7f2cc983813c7f485af87f8142fb203bbb8974c35caa54f8d7b5206c8dd791f50b327c462d76866d6e091afb3846eb47c0b9efbbb282617fc4bc467e35d59da27c2b4d451436fce1a5bd0e22194fb5ea13b8ec5", 0x8f, 0x0, &(0x7f00000003c0)="9f7495ccdf2e45369db430d473e0abfd92a97f3ff447b8a6f3784c8963e068ab42f36e6cb09a4cad8602bc893a535963e06458980983bd1c4645c0234aba75097fec455b0624c45c1fd9a72866ee3b767f776132e3e8b1ec06490d386bdb5b19390eea79906336abe32e5380f34c962bd95f2ff286aebc6a75b1440261185abd2c6ea91e9edb6621b7ba122abee3de"}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r6, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125b2ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb03bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2033aae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b85b7b26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1111c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c669bb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b2967cbfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d6748c2ce5bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4658098549646bd63175adf77b5cdcf102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4baea02fa76fb4830aebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f8426a9049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21abfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e0068607000000fb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9fb4000000f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002afea6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b46e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae66444a8f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0xdd52d6c}}, 0x1006) (async, rerun: 32) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) (async, rerun: 32) io_pgetevents(0x0, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0}) (async) socket$inet6(0xa, 0x2, 0x0) (async) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 777.755128ms ago: executing program 1 (id=2605): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$packet(0x11, 0x2, 0x300) futex(&(0x7f0000001cc0), 0x5, 0x0, 0x0, &(0x7f0000000100), 0x8ffffff8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'pim6reg0\x00', 0xc201}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) fstat(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r5) (async) setreuid(0x0, r5) r6 = gettid() r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, 0xffffffffffffffff, 0x0) (async) kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r3, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r3, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) (async) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) preadv(r8, &(0x7f0000000380)=[{&(0x7f0000000280)=""/71, 0x47}, {0x0}], 0x2, 0x1, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 724.161538ms ago: executing program 6 (id=2606): r0 = socket$tipc(0x1e, 0x5693281ecd8ba50f, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) getpeername$tipc(r0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r4, 0x45809000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 723.507508ms ago: executing program 1 (id=2607): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x2, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x3b, &(0x7f0000000000)={@flat=@weak_handle={0x77682a85, 0xb, 0x2}, @flat=@weak_handle={0x77682a85, 0x110b, 0x1}, @flat=@weak_binder={0x77622a85, 0x1, 0x3}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000540)={'erspan0\x00', 0x0, 0x8, 0x700, 0x60, 0x3, {{0x1c, 0x4, 0x1, 0x8, 0x70, 0x1069, 0x0, 0x6, 0x6, 0x0, @private=0xa010101, @rand_addr=0x64010102, {[@cipso={0x86, 0x5b, 0xfffffffffffffffe, [{0x5, 0x8, "e2871bfa1a54"}, {0x6, 0xe, "600afd0ee6e77676d6dd8170"}, {0x6, 0x4, "2bd1"}, {0x2, 0x12, "a003672906b7407d31a6dc6fc6631485"}, {0x1, 0xe, "f8f658946674e8adf1bb7361"}, {0x6, 0xe, "9d6198499e865326eabf5b2e"}, {0x5, 0xa, "46f5c92eec7cf0c0"}, {0x0, 0x3, '|'}]}]}}}}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f00000000c0)="c82d58eea93375eb162386e1f7479c3979e67fe05230eb09b4d81b27f7af922416ed966e3a55212c405b05959d10c9c8ff82bd6659dabf93d56a64667e6197128e5c163f5433216c0c2ca4e2a9a473668c2225f0525242789c27e97398c4419fd55270912614ba3456e89472f037673c8ccb0a4a7e1ec5152933679b3c1a3f4d28ed75e8c982364b9493a6a3452f36d4891827d724a7aa1a5c21a6ea45f40bd60b904f10ffcdc9caf6447000210a46a257546f6e4851ee4f5ed8c466af20aec8b5cd9b3d62a9bea4f191019407841703c8523538144f22cf2285597e872f716fea4aef2c6c6d1e1bf46b13759338959775c29761866155007349fcd464b1f739") r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0306003c5c9801288363"], 0xffdd) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r8 = dup(r7) ioctl$KVM_CHECK_EXTENSION_VM(r8, 0xae03, 0x42) (async) listen(r6, 0x1) (async) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, 0x0, 0x81) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000c00)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x200000c0}, 0xe8c488785cf1380b) (async) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x2000040, &(0x7f00000003c0)=ANY=[@ANYBLOB="7072616ec8733d66642c7266646e6f3d26357e0387be54da2fcea00b5f0a2ea5db519039b41016c5c4c55f7afc34593c5b0de4e3fefe07e7159d", @ANYRES16=r2, @ANYRESHEX=r3, @ANYRESHEX=r6]) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x4008004) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x8000, 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000600)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r11 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r11, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 642.20451ms ago: executing program 1 (id=2608): syz_usb_connect(0x6, 0x24, &(0x7f0000000880)={{0x12, 0x1, 0x110, 0x99, 0x5a, 0x24, 0x18, 0x7d1, 0x3c05, 0x6ef7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x60, 0x90, 0x8, [{{0x9, 0x4, 0x4b, 0x16, 0x0, 0x4b, 0xe5, 0x1f, 0xc}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x31, &(0x7f0000000300)=@string={0x31, 0x3, "2c9f68885256e877554ae3305791ff2fec5855107760e1e600c2a3c110f444b597ef843f6a32f92aabb9d3216406f5"}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=']) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) 630.55331ms ago: executing program 6 (id=2609): r0 = fsmount(0xffffffffffffffff, 0x0, 0x74) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000340)={0x60, 0x1, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000280)=[{0x7, 0x963, 0xeab}, {0x8, 0x1, 0x7}, {0x5, 0x1, 0xd}, {0x2, 0x7}, {0x100000000, 0x4, 0x46}, {0x40000000000000, 0x8000000000000000, 0x9}, {0xb, 0x7, 0x200}], 0x7, 0x3, 0x20, 0x1e, 0x8, 0x10}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x200c40e, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c65726f75705f69643de1d0807b792b18a5b924715456e9baf3f40d9fe54c82a549edbf8209bcdf94d4f66c10b737ac69930904d7200a487323ee9190207e423d2743d8", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x8a) (async, rerun: 32) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') (rerun: 32) read$FUSE(r3, &(0x7f0000000c40)={0x2020}, 0x2020) 559.915061ms ago: executing program 6 (id=2610): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./file0/file0\x00') ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x3) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000140)={0xdddd1000, 0x102000, 0x1}) r1 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000440), 0x801, 0x0) ioctl$USERFAULTFD_IOC_NEW(r1, 0xaa00) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_io_uring_setup(0x8062ce, &(0x7f00000008c0)={0x0, 0x1, 0x10, 0x6, 0x132}, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) unshare(0x62040200) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/udp6\x00') r2 = syz_init_net_socket$nl_generic(0xffffffffffffffff, 0x3, 0x10) close_range(r0, r0, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002900), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003280)={&(0x7f0000000580)=ANY=[@ANYBLOB="863b687112e4aa2b470fbfc14857c065a7b74e9290d04773ad4a85cf99b8b76a475620baf05124bfcc1f6eee4da35c6d37cbfcbe1dedc6eb3a34a8fb303141e59e574c26157356328885e583b4b1c3af4e3cc1984f5938fa95f55fc8bf3c2b54789698f838c141ba9f96219e48fbf83314621157ea4011b1026afdcb47a5f180d53aee75b91e2b8ecb8eaa64a20c5d95595022df7124229da6c8525fe9f3d90d5b1cc3d7dfb1773dc174c419c31d31633d126fea7e197655aa06c0f2632c5e7934a9138b21013435b74912a4d60f7e40357d8ab50ed9b56edde2f5a312516386b05c9c10cfbd0bdd", @ANYRES16=r4, @ANYBLOB="010028bd7000fddbdf252100000009001f007068793100000000"], 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x40c4) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000180)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES16=r4, @ANYBLOB="7000fbdbdf250d0000000500f50008000000050019000900000006000800a2aa000005001a00ff00000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x44}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x0, 0x43, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001b40)=ANY=[@ANYBLOB="0203690310010000ee412f6056348e6f5ca12ac911fc15ed32dee30200000087aec0b54d28015b7948ecfd499f50d1760e0000000000000002001000000004d4000004d30000000002000100000004d3000006020100002003000d000000000002000000ac1414000000000000000000000000000000000000000000000000006b2c8f749e0d6ef7a1d77dcdfb97386e0fdf414a8142a7202a26ba95a054ccf1c37a224c38f4f9670cbd3ddf031defb75ffa85b5791ef5c76eeec030e9eb79be47a933f14ba4a2ec745eec487671cbe68fda95ea10cc323dd23243a1de2ebc3faa0c8ed951323a281e64d9e284f0650246859dc40e3f311f6af2c66894c168836524bf7d38dcaf5d0cc7771813"], 0x80}, 0x1, 0x7}, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4d549b, 0x0, [0xffffffffffffffff, 0x7, 0x1000000, 0x0, 0x5, 0x3, 0xfffffffffffffffc, 0x20800000]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f00000ab000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x1a, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000004c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/248, 0xf8}, {&(0x7f0000000780)=""/239, 0xef}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/178, 0xb2}, {&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000001940)=""/197, 0xc5}, {&(0x7f0000001a40)=""/124, 0x7c}], 0x8}, 0xa}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40002100, 0x0) 536.502351ms ago: executing program 6 (id=2611): memfd_create(0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x20, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') 233.020996ms ago: executing program 5 (id=2612): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000050000106a05310300000000000109022400010000800009040002090300010009210000000122000509058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000005c0)={0x14, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1801}}}, &(0x7f0000000880)={0x34, &(0x7f0000000600)={0x20, 0x15, 0x33, "2c0a3ddb9ebb639ccfc88cdd7794b6f7d208b3bf4fc5bb2ab8fcf8b1f522eee3e822b90ff4823c7b10bb533bb173fc92595120"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 102.102668ms ago: executing program 4 (id=2613): r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x140c00) io_setup(0x1, &(0x7f0000000b80)=0x0) timer_create(0xb, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000700)=@hci={0x1f, 0x4, 0x3}, 0x80, 0x0}}], 0x1, 0x0) socket(0x28, 0x803, 0x7) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0xfffc, r0, 0x0}]) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x99b33000) timer_create(0x3, 0x0, &(0x7f0000000000)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f00000000c0)=0x1, 0x4) 94.246168ms ago: executing program 1 (id=2614): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f00000000c0)="b843008ed0b844000f00d80f01b30068650f01c8f2ab360f01d1660f3881b575d766b95e0b000066b83743a2c266ba8ab103630f30baf80c66b84aac478266efbafc0cb80010efba6100ed", 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x1000, 0x870726c94fd0099c}) ppoll(0x0, 0x0, &(0x7f0000001a00), &(0x7f0000001a40)={[0x1a1e]}, 0x8) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x28000, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xb1d4) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f0000000000)='\x06') r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) userfaultfd(0x80001) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}}, 0xf0}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001c"], 0x104}}, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) 0s ago: executing program 4 (id=2615): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000180)='./file0\x00', 0x1d0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000540)="a6aa", 0x2}], 0x1, 0x8, 0x8000, 0x4) (fail_nth: 4) kernel console output (not intermixed with test programs): 341][ T407] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 144.058148][ T407] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.068400][ T407] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 144.078763][ T407] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 144.087849][ T407] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.095902][ T407] usb 3-1: Product: syz [ 144.100087][ T407] usb 3-1: Manufacturer: syz [ 144.104721][ T407] usb 3-1: SerialNumber: syz [ 144.266504][ T5825] 9pnet_fd: Insufficient options for proto=fd [ 144.514912][ T5815] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 144.514955][ T5815] rust_binder: Read failure Err(EFAULT) in pid:166 [ 144.523522][ T5815] pim6reg1: entered promiscuous mode [ 144.535398][ T5815] pim6reg1: entered allmulticast mode [ 144.542032][ T407] usb 3-1: 0:2 : does not exist [ 144.560120][ T36] audit: type=1400 audit(1751642717.454:602): avc: denied { name_bind } for pid=5829 comm="syz.3.1854" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 144.833056][ T305] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 144.984009][ T305] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 50660, setting to 1024 [ 144.995396][ T305] usb 4-1: config 0 interface 0 has no altsetting 0 [ 145.002121][ T305] usb 4-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 145.011221][ T305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.019891][ T305] usb 4-1: config 0 descriptor?? [ 145.025357][ T5832] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 145.333044][ T394] Bluetooth: hci0: command 0x1003 tx timeout [ 145.333046][ T393] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 145.436786][ T305] nintendo 0003:057E:200E.0013: hidraw0: USB HID v81.04 Device [HID 057e:200e] on usb-dummy_hcd.3-1/input0 [ 145.503050][ T305] nintendo 0003:057E:200E.0013: Failed charging grip handshake [ 145.510643][ T305] nintendo 0003:057E:200E.0013: Failed to initialize controller; ret=-110 [ 145.520239][ T305] nintendo 0003:057E:200E.0013: probe - fail = -110 [ 145.526946][ T305] nintendo 0003:057E:200E.0013: probe with driver nintendo failed with error -110 [ 145.569987][ T407] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 145.582203][ T407] usb 3-1: USB disconnect, device number 26 [ 145.590154][ T310] udevd[310]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 145.635847][ T5832] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 145.645021][ T5832] rust_binder: Write failure EINVAL in pid:1077 [ 145.645407][ T312] usb 4-1: USB disconnect, device number 46 [ 145.920121][ T5845] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1860'. [ 146.413079][ T312] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 146.564124][ T312] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 146.575759][ T312] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 146.586732][ T312] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 146.597966][ T312] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 146.607013][ T312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.616138][ T5862] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 146.884314][ T5880] incfs: Options parsing error. -22 [ 146.889668][ T5880] incfs: mount failed -22 [ 147.440128][ T5890] netlink: 'syz.3.1878': attribute type 21 has an invalid length. [ 147.448019][ T5890] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1878'. [ 147.624596][ T5900] rust_binder: Error while translating object. [ 147.624623][ T5900] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 147.630795][ T5900] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1094 [ 147.653142][ T36] audit: type=1400 audit(1751642720.554:603): avc: denied { execute } for pid=5901 comm="syz.3.1882" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 147.720347][ T36] audit: type=1326 audit(1751642720.614:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5909 comm="syz.3.1886" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efded58e929 code=0x0 [ 148.129025][ T127] Bluetooth: hci0: Frame reassembly failed (-84) [ 148.129260][ T312] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 148.137138][ T127] Bluetooth: hci0: Frame reassembly failed (-84) [ 148.149672][ T312] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input21 [ 148.163801][ T312] usb 3-1: USB disconnect, device number 27 [ 148.169755][ C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 148.388154][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 148.650248][ T36] audit: type=1400 audit(1751642721.544:605): avc: denied { accept } for pid=5949 comm="syz.1.1901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 149.323388][ T5967] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 150.133047][ T393] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 150.133061][ T586] Bluetooth: hci0: command 0x1003 tx timeout [ 150.166869][ T5979] x_tables: duplicate underflow at hook 1 [ 150.310293][ T36] audit: type=1400 audit(1751642723.204:606): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 150.392361][ T6003] ip_vti0: mtu less than device minimum [ 150.453052][ T393] Bluetooth: hci1: command 0x1003 tx timeout [ 150.454139][ T394] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 150.513027][ T407] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 150.542028][ T6013] syzkaller0: entered promiscuous mode [ 150.547563][ T6013] syzkaller0: entered allmulticast mode [ 150.663253][ T407] usb 3-1: Using ep0 maxpacket: 8 [ 150.670299][ T407] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 150.678471][ T407] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.681617][ T6020] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1925'. [ 150.688639][ T407] usb 3-1: config 0 has no interface number 0 [ 150.705063][ T407] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 150.714306][ T407] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.722377][ T407] usb 3-1: Product: syz [ 150.726568][ T407] usb 3-1: Manufacturer: syz [ 150.731184][ T407] usb 3-1: SerialNumber: syz [ 150.736439][ T407] usb 3-1: config 0 descriptor?? [ 150.751225][ T6021] syz.4.1925: attempt to access beyond end of device [ 150.751225][ T6021] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 150.764220][ T6021] FAT-fs (loop4): unable to read boot sector [ 150.942428][ T407] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 150.942455][ T5997] SELinux: security_context_str_to_sid () failed with errno=-22 [ 150.942480][ T407] usb 3-1: No valid video chain found. [ 151.535980][ T6031] netlink: 57 bytes leftover after parsing attributes in process `syz.4.1929'. [ 151.558812][ T6033] 9pnet_fd: Insufficient options for proto=fd [ 151.582002][ T6035] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 151.591199][ T36] audit: type=1400 audit(1751642724.484:607): avc: denied { execute } for pid=6034 comm="syz.4.1931" path="/51/bus/bus/bus" dev="overlay" ino=324 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysfs_t tclass=file permissive=1 [ 151.787043][ T6040] syzkaller0: entered promiscuous mode [ 151.792539][ T6040] syzkaller0: entered allmulticast mode [ 151.860538][ T6044] kvm: kvm [6043]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000068) [ 151.871975][ T6044] netlink: 37 bytes leftover after parsing attributes in process `syz.3.1934'. [ 151.881099][ T6044] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 151.888380][ T6044] IPv6: NLM_F_CREATE should be set when creating new route [ 151.895662][ T6044] IPv6: NLM_F_CREATE should be set when creating new route [ 151.903924][ T36] audit: type=1400 audit(1751642724.804:608): avc: denied { connect } for pid=6043 comm="syz.3.1934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 152.061451][ T6067] syz.3.1942: vmalloc error: size 17179873280, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 152.076537][ T6067] CPU: 0 UID: 0 PID: 6067 Comm: syz.3.1942 Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 e1c904518e9113895a28c59b25a6002cdacb68bf [ 152.076564][ T6067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 152.076578][ T6067] Call Trace: [ 152.076583][ T6067] [ 152.076589][ T6067] __dump_stack+0x21/0x30 [ 152.076616][ T6067] dump_stack_lvl+0x10c/0x190 [ 152.076632][ T6067] ? __cfi_dump_stack_lvl+0x10/0x10 [ 152.076651][ T6067] dump_stack+0x19/0x20 [ 152.076666][ T6067] warn_alloc+0x1bc/0x2a0 [ 152.076686][ T6067] ? stack_depot_save_flags+0x38/0x800 [ 152.076705][ T6067] ? __cfi_warn_alloc+0x10/0x10 [ 152.076718][ T6067] ? kasan_save_track+0x4f/0x80 [ 152.076737][ T6067] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 152.076755][ T6067] ? xskq_create+0x68/0x2a0 [ 152.076771][ T6067] ? xsk_init_queue+0xb6/0x120 [ 152.076785][ T6067] ? xsk_setsockopt+0x43f/0x6f0 [ 152.076798][ T6067] ? do_sock_setsockopt+0x26a/0x400 [ 152.076813][ T6067] ? __x64_sys_setsockopt+0x1b8/0x250 [ 152.076827][ T6067] ? x64_sys_call+0x2adc/0x2ee0 [ 152.076846][ T6067] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 152.076862][ T6067] __vmalloc_node_range_noprof+0x135/0x1420 [ 152.076881][ T6067] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 152.076897][ T6067] ? avc_has_perm+0x144/0x220 [ 152.076911][ T6067] ? kasan_save_alloc_info+0x40/0x50 [ 152.076926][ T6067] ? __kasan_kmalloc+0x96/0xb0 [ 152.076946][ T6067] vmalloc_user_noprof+0x77/0x90 [ 152.076961][ T6067] ? xskq_create+0xdb/0x2a0 [ 152.076976][ T6067] xskq_create+0xdb/0x2a0 [ 152.076991][ T6067] xsk_init_queue+0xb6/0x120 [ 152.077005][ T6067] xsk_setsockopt+0x43f/0x6f0 [ 152.077019][ T6067] ? __cfi_xsk_setsockopt+0x10/0x10 [ 152.077033][ T6067] ? do_futex+0x309/0x500 [ 152.077053][ T6067] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 152.077066][ T6067] ? security_socket_setsockopt+0x33/0xd0 [ 152.077084][ T6067] ? __cfi_xsk_setsockopt+0x10/0x10 [ 152.077097][ T6067] do_sock_setsockopt+0x26a/0x400 [ 152.077112][ T6067] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 152.077129][ T6067] __x64_sys_setsockopt+0x1b8/0x250 [ 152.077144][ T6067] x64_sys_call+0x2adc/0x2ee0 [ 152.077162][ T6067] do_syscall_64+0x58/0xf0 [ 152.077174][ T6067] ? clear_bhb_loop+0x50/0xa0 [ 152.077190][ T6067] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 152.077206][ T6067] RIP: 0033:0x7efded58e929 [ 152.077221][ T6067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.077232][ T6067] RSP: 002b:00007efdee488038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 152.077246][ T6067] RAX: ffffffffffffffda RBX: 00007efded7b5fa0 RCX: 00007efded58e929 [ 152.077256][ T6067] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 152.077265][ T6067] RBP: 00007efded610b39 R08: 0000000000000004 R09: 0000000000000000 [ 152.077273][ T6067] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 152.077283][ T6067] R13: 0000000000000000 R14: 00007efded7b5fa0 R15: 00007ffff4a8f808 [ 152.077294][ T6067] [ 152.077301][ T6067] Mem-Info: [ 152.377939][ T6067] active_anon:10342 inactive_anon:6 isolated_anon:0 [ 152.377939][ T6067] active_file:22001 inactive_file:2513 isolated_file:0 [ 152.377939][ T6067] unevictable:16878 dirty:113 writeback:0 [ 152.377939][ T6067] slab_reclaimable:5782 slab_unreclaimable:74614 [ 152.377939][ T6067] mapped:24803 shmem:3241 pagetables:1161 [ 152.377939][ T6067] sec_pagetables:3 bounce:0 [ 152.377939][ T6067] kernel_misc_reclaimable:0 [ 152.377939][ T6067] free:1499990 free_pcp:3713 free_cma:0 [ 152.424058][ T6067] Node 0 active_anon:41368kB inactive_anon:24kB active_file:88004kB inactive_file:10052kB unevictable:67512kB isolated(anon):0kB isolated(file):0kB mapped:99212kB dirty:452kB writeback:0kB shmem:12964kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:6144kB writeback_tmp:0kB kernel_stack:5056kB pagetables:4644kB sec_pagetables:12kB all_unreclaimable? no [ 152.457612][ T6067] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2966000kB mlocked:0kB bounce:0kB free_pcp:5788kB local_pcp:5720kB free_cma:0kB [ 152.487647][ T6067] lowmem_reserve[]: 0 3921 3921 [ 152.492594][ T6067] Normal free:3044120kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41368kB inactive_anon:24kB active_file:88004kB inactive_file:10052kB unevictable:67512kB writepending:452kB present:5242880kB managed:4016120kB mlocked:6144kB bounce:0kB free_pcp:5396kB local_pcp:5252kB free_cma:0kB [ 152.524562][ T6067] lowmem_reserve[]: 0 0 0 [ 152.528934][ T6067] DMA32: 3*4kB (M) 1*8kB (M) 4*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 152.544529][ T6067] Normal: 1816*4kB (UME) 809*8kB (UME) 567*16kB (UME) 492*32kB (UME) 410*64kB (UME) 34*128kB (UME) 27*256kB (UME) 45*512kB (UME) 24*1024kB (UME) 4*2048kB (UM) 711*4096kB (UM) = 3044120kB [ 152.563289][ T6067] 43102 total pagecache pages [ 152.568063][ T6067] 9 pages in swap cache [ 152.572511][ T6067] Free swap = 124440kB [ 152.577080][ T6067] Total swap = 124996kB [ 152.581615][ T6067] 2097051 pages RAM [ 152.585579][ T6067] 0 pages HighMem/MovableOnly [ 152.590529][ T6067] 351521 pages reserved [ 152.594777][ T6067] 0 pages cma reserved [ 152.600928][ T6067] Memory allocations: [ 152.605070][ T6067] 0 B 0 init/main.c:1370 func:do_initcalls [ 152.612399][ T6067] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 152.620659][ T6067] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 152.628416][ T6067] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 152.636671][ T6067] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 152.644725][ T6067] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 152.653420][ T6067] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 152.661327][ T6067] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 152.669607][ T6067] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 152.677550][ T6067] 0 B 0 init/initramfs.c:101 func:find_link [ 152.725144][ T6080] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 152.725709][ T6080] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 152.732215][ T6080] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 152.740303][ T6080] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1158 [ 153.287607][ T9] usb 3-1: USB disconnect, device number 28 [ 153.302483][ T6108] SELinux: policydb version 1686908053 does not match my version range 15-33 [ 153.311720][ T6108] SELinux: failed to load policy [ 153.358569][ T6112] /dev/sg0: Can't lookup blockdev [ 153.569654][ T6128] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 153.569679][ T6128] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:202 [ 153.579232][ T6128] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 153.588627][ T6128] rust_binder: Read failure Err(EFAULT) in pid:202 [ 153.843046][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 154.003042][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 154.009386][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.020408][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.030177][ T9] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 154.042966][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 154.049600][ T9] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 154.058685][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.067240][ T9] usb 3-1: config 0 descriptor?? [ 154.482193][ T9] hid (null): global environment stack underflow [ 154.612048][ T6152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1975'. [ 154.662076][ T6162] fuseblk: Unknown parameter '' [ 154.677138][ T9] usb 3-1: USB disconnect, device number 29 [ 154.768535][ T6171] 9pnet_fd: Insufficient options for proto=fd [ 154.834131][ T12] tipc: Subscription rejected, illegal request [ 155.206766][ T6198] 9pnet_fd: Insufficient options for proto=fd [ 155.224434][ T6200] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 155.224980][ T36] audit: type=1400 audit(2000000000.610:609): avc: denied { listen } for pid=6199 comm="syz.2.1992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 155.517433][ T12] bridge_slave_1: left allmulticast mode [ 155.523169][ T12] bridge_slave_1: left promiscuous mode [ 155.528881][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.536838][ T12] bridge_slave_0: left allmulticast mode [ 155.542500][ T12] bridge_slave_0: left promiscuous mode [ 155.548189][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.618598][ T6212] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.626176][ T6212] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.633285][ T6212] bridge_slave_0: entered allmulticast mode [ 155.639606][ T6212] bridge_slave_0: entered promiscuous mode [ 155.646470][ T6212] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.655019][ T6212] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.662099][ T6212] bridge_slave_1: entered allmulticast mode [ 155.668480][ T6212] bridge_slave_1: entered promiscuous mode [ 155.675514][ T12] veth1_macvtap: left promiscuous mode [ 155.681051][ T12] veth0_vlan: left promiscuous mode [ 155.765713][ T6212] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.772786][ T6212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.780063][ T6212] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.787124][ T6212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.808279][ T127] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.815538][ T127] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.825007][ T323] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.832045][ T323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.840864][ T127] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.847940][ T127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.871836][ T6212] veth0_vlan: entered promiscuous mode [ 155.882423][ T6212] veth1_macvtap: entered promiscuous mode [ 156.134937][ T6235] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 156.134963][ T6235] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1177 [ 156.144486][ T6235] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 156.153745][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 156.153751][ T6235] rust_binder: Read failure Err(EFAULT) in pid:1177 [ 156.304099][ T10] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 156.321010][ T10] usb 6-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 156.330084][ T10] usb 6-1: config 220 interface 0 has no altsetting 0 [ 156.343780][ T10] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 156.352882][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.361163][ T10] usb 6-1: Product: syz [ 156.365422][ T10] usb 6-1: Manufacturer: syz [ 156.370116][ T10] usb 6-1: SerialNumber: syz [ 156.519749][ T6251] overlayfs: failed to clone upperpath [ 156.546638][ T36] audit: type=1326 audit(2000000001.930:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6260 comm="syz.3.2013" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efded58e929 code=0x0 [ 156.556879][ T6264] fuse: Bad value for 'fd' [ 156.569426][ T36] audit: type=1326 audit(2000000001.930:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6260 comm="syz.3.2013" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efded58e929 code=0x0 [ 156.658788][ T10] usb 6-1: Found UVC 0.00 device syz (8086:0b07) [ 156.665205][ T10] usb 6-1: No valid video chain found. [ 156.671350][ T10] usb 6-1: USB disconnect, device number 2 [ 157.423057][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 157.575220][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 157.583583][ T10] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 157.592295][ T10] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 157.601064][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.611213][ T10] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 157.620202][ T10] usb 6-1: config 1 has no interface number 1 [ 157.626511][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 157.640652][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 157.649754][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.657784][ T10] usb 6-1: Product: syz [ 157.661950][ T10] usb 6-1: Manufacturer: syz [ 157.666599][ T10] usb 6-1: SerialNumber: syz [ 157.689448][ T6289] 9pnet_fd: Insufficient options for proto=fd [ 158.030963][ T10] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 158.038866][ T10] usb 6-1: found format II with max.bitrate = 8, frame size=9 [ 158.046536][ T10] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 158.055069][ T10] usb 6-1: USB disconnect, device number 3 [ 158.064414][ T310] udevd[310]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 158.483189][ T6318] overlayfs: failed to clone upperpath [ 158.558018][ T6329] new mount options do not match the existing superblock, will be ignored [ 159.125738][ T6345] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2045'. [ 159.135155][ T36] audit: type=1400 audit(2000000004.520:612): avc: denied { connect } for pid=6344 comm="syz.1.2045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 159.356502][ T6369] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.363606][ T6369] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.370656][ T6369] bridge_slave_0: entered allmulticast mode [ 159.377049][ T6369] bridge_slave_0: entered promiscuous mode [ 159.383482][ T6369] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.390531][ T6369] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.397685][ T6369] bridge_slave_1: entered allmulticast mode [ 159.404010][ T6369] bridge_slave_1: entered promiscuous mode [ 159.473064][ T6369] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.480145][ T6369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.487452][ T6369] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.494505][ T6369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.516590][ T323] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.523940][ T323] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.536396][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.543455][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.550960][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.558010][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.578370][ T6376] fuse: Bad value for 'group_id' [ 159.583584][ T6376] fuse: Bad value for 'group_id' [ 159.591007][ T6369] veth0_vlan: entered promiscuous mode [ 159.602398][ T6369] veth1_macvtap: entered promiscuous mode [ 159.780159][ T292] cgroup: fork rejected by pids controller in /syz3 [ 159.820357][ T6396] rust_binder: 6396: no such ref 0 [ 159.827022][ T6396] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 159.834577][ T6396] rust_binder: Write failure EINVAL in pid:12 [ 159.834754][ T6396] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 159.847934][ T6396] rust_binder: Write failure EINVAL in pid:12 [ 159.865418][ T36] audit: type=1400 audit(2000000005.240:613): avc: denied { append } for pid=6397 comm="syz.1.2061" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 159.985339][ T6403] incfs: Can't find or create .index dir in ./cgroup [ 159.992100][ T6403] incfs: mount failed -22 [ 160.066882][ T6404] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.077335][ T6404] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.089555][ T6404] bridge_slave_0: entered allmulticast mode [ 160.107649][ T6404] bridge_slave_0: entered promiscuous mode [ 160.124862][ T6404] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.144642][ T6404] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.151800][ T6404] bridge_slave_1: entered allmulticast mode [ 160.158290][ T6404] bridge_slave_1: entered promiscuous mode [ 160.236576][ T6404] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.243662][ T6404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.250956][ T6404] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.258012][ T6404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.297498][ T323] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.305312][ T323] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.314273][ T127] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.321307][ T127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.328839][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 160.331166][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.343568][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.367503][ T6404] veth0_vlan: entered promiscuous mode [ 160.378649][ T6404] veth1_macvtap: entered promiscuous mode [ 160.503041][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 160.509578][ T9] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.520633][ T9] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.530489][ T9] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 160.533072][ T407] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 160.543782][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 160.557718][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 160.566837][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.575562][ T9] usb 2-1: config 0 descriptor?? [ 160.694226][ T407] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 160.706772][ T407] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 160.715885][ T407] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.723903][ T407] usb 6-1: Product: syz [ 160.728071][ T407] usb 6-1: Manufacturer: syz [ 160.732678][ T407] usb 6-1: SerialNumber: syz [ 160.908874][ T6424] rust_binder: Failed to allocate buffer. len:5232, is_oneway:true [ 160.908887][ T6425] rust_binder: Failed to allocate buffer. len:5232, is_oneway:true [ 160.908901][ T6425] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 160.917389][ T6424] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 160.925087][ T6425] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:187 [ 160.934847][ T6424] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:187 [ 160.946027][ T6415] rust_binder: Error while translating object. [ 160.962214][ T6415] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 160.969370][ T6415] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:28 [ 160.982567][ T407] usb 6-1: 2:1 : no UAC_FORMAT_TYPE desc [ 161.000097][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 161.004419][ T407] usb 6-1: USB disconnect, device number 4 [ 161.014579][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 161.023817][ T310] udevd[310]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 161.040699][ T9] usb 2-1: USB disconnect, device number 30 [ 161.106551][ T6435] rust_binder: Error while translating object. [ 161.106593][ T6435] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 161.112909][ T6435] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:197 [ 161.145514][ T6439] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 161.168832][ T6439] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 161.211738][ T6443] rust_binder: Read failure Err(EAGAIN) in pid:205 [ 161.289252][ T36] audit: type=1400 audit(2000000006.670:614): avc: denied { create } for pid=6453 comm="syz.3.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 161.467566][ T36] audit: type=1400 audit(2000000006.850:615): avc: denied { map } for pid=6467 comm="syz.3.2082" path="socket:[38353]" dev="sockfs" ino=38353 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 161.468295][ T6468] overlay: ./file0 is not a directory [ 161.567277][ T6476] rust_binder: Failed copying remainder into alloc: EFAULT [ 161.567306][ T6476] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 161.577750][ T6476] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 161.581330][ T6474] tipc: Enabling of bearer rejected, failed to enable media [ 161.586338][ T6476] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:21 [ 161.597302][ T6474] binder: Unknown parameter 'func' [ 161.746793][ T6488] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2090'. [ 161.956904][ T6498] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:42 [ 162.210487][ T6503] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:46 [ 162.843028][ T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 163.003049][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 163.009970][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 163.018422][ T10] usb 2-1: config 143 has an invalid interface number: 213 but max is 1 [ 163.026868][ T10] usb 2-1: config 143 has an invalid interface number: 2 but max is 1 [ 163.035060][ T10] usb 2-1: config 143 has an invalid descriptor of length 53, skipping remainder of the config [ 163.045459][ T10] usb 2-1: config 143 has no interface number 0 [ 163.051822][ T10] usb 2-1: config 143 has no interface number 1 [ 163.058127][ T10] usb 2-1: config 143 interface 213 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 163.071343][ T10] usb 2-1: config 143 interface 2 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 163.084373][ T10] usb 2-1: config 143 interface 213 has no altsetting 0 [ 163.091319][ T10] usb 2-1: config 143 interface 2 has no altsetting 0 [ 163.099645][ T10] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=aa.f8 [ 163.108803][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.116937][ T10] usb 2-1: Product: syz [ 163.121131][ T10] usb 2-1: Manufacturer: syz [ 163.125766][ T10] usb 2-1: SerialNumber: syz [ 163.332223][ T6518] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2098'. [ 163.341960][ T6518] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 163.344875][ T10] asix 2-1:143.213 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 163.363192][ T10] asix 2-1:143.213: probe with driver asix failed with error -71 [ 163.371787][ T10] asix 2-1:143.2 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 163.381934][ T10] asix 2-1:143.2: probe with driver asix failed with error -71 [ 163.392557][ T10] usb 2-1: USB disconnect, device number 31 [ 163.663671][ T6532] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 89) [ 163.663697][ T6532] rust_binder: Error while translating object. [ 163.674222][ T6532] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 163.680387][ T6532] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:59 [ 163.701361][ T6535] bridge0: port 3(vlan0) entered blocking state [ 163.716688][ T6535] bridge0: port 3(vlan0) entered disabled state [ 163.723022][ T6535] vlan0: entered allmulticast mode [ 163.728149][ T6535] veth0_vlan: entered allmulticast mode [ 163.734108][ T6535] vlan0: entered promiscuous mode [ 163.739297][ T6535] bridge0: port 3(vlan0) entered blocking state [ 163.745590][ T6535] bridge0: port 3(vlan0) entered forwarding state [ 163.887330][ T6546] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 163.887355][ T6546] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:33 [ 163.952082][ T6565] binder: Unknown parameter 'fscontext?}' [ 163.980862][ T36] audit: type=1400 audit(2000000009.360:616): avc: denied { create } for pid=6566 comm="syz.1.2116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 163.981172][ T6567] binder: Unknown parameter 'uid' [ 164.005442][ T31] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 164.143143][ T31] usb 6-1: device descriptor read/64, error -71 [ 164.247852][ T6591] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 164.251520][ T6591] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 164.251521][ T6590] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 164.258108][ T6590] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:209 [ 164.268103][ T6591] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:209 [ 164.286290][ T718] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 164.420209][ T6601] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 164.434390][ T6601] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 164.434713][ T31] usb 6-1: device descriptor read/64, error -71 [ 164.464111][ T718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.475287][ T718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.485083][ T718] usb 2-1: New USB device found, idVendor=056a, idProduct=010f, bcdDevice= 0.00 [ 164.494206][ T718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.502717][ T718] usb 2-1: config 0 descriptor?? [ 164.582531][ T36] audit: type=1326 audit(2000000009.960:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6604 comm="syz.3.2126" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f02bf18e929 code=0x0 [ 164.605475][ T36] audit: type=1326 audit(2000000009.970:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6604 comm="syz.3.2126" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f02bf18e929 code=0x0 [ 164.683070][ T31] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 164.708734][ T6570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.717271][ T6570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.726106][ T6570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.734622][ T6570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.753200][ T718] usbhid 2-1:0.0: can't add hid device: -71 [ 164.765517][ T718] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 164.777036][ T718] usb 2-1: USB disconnect, device number 32 [ 164.833064][ T31] usb 6-1: device descriptor read/64, error -71 [ 165.063038][ T407] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 165.073049][ T31] usb 6-1: device descriptor read/64, error -71 [ 165.123051][ T718] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 165.183109][ T31] usb usb6-port1: attempt power cycle [ 165.214183][ T407] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 165.223862][ T407] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 165.233578][ T407] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 165.247757][ T407] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 165.257487][ T407] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.265527][ T407] usb 4-1: Product: syz [ 165.269696][ T407] usb 4-1: Manufacturer: syz [ 165.274324][ T718] usb 2-1: Using ep0 maxpacket: 8 [ 165.279492][ T407] usb 4-1: SerialNumber: syz [ 165.285487][ T718] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.296004][ T407] hub 4-1:1.0: bad descriptor, ignoring hub [ 165.301915][ T407] hub 4-1:1.0: probe with driver hub failed with error -5 [ 165.309055][ T718] usb 2-1: config 1 has no interfaces? [ 165.314692][ T718] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 165.323758][ T718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.487851][ T407] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 48 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 165.523031][ T31] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 165.544053][ T31] usb 6-1: device descriptor read/8, error -71 [ 165.674010][ T31] usb 6-1: device descriptor read/8, error -71 [ 165.923054][ T31] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 165.964007][ T31] usb 6-1: device descriptor read/8, error -71 [ 165.975022][ T6654] rust_binder: Write failure EFAULT in pid:243 [ 166.036511][ T718] usb 2-1: string descriptor 0 read error: -71 [ 166.055834][ T718] usb 2-1: USB disconnect, device number 33 [ 166.094373][ T31] usb 6-1: device descriptor read/8, error -71 [ 166.203122][ T31] usb usb6-port1: unable to enumerate USB device [ 166.353031][ T718] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 166.503043][ T718] usb 2-1: Using ep0 maxpacket: 16 [ 166.509249][ T718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.520184][ T718] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 166.533047][ T718] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 166.542242][ T718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.551349][ T718] usb 2-1: config 0 descriptor?? [ 166.762923][ T127] tipc: Subscription rejected, illegal request [ 166.769192][ T6668] loop8: detected capacity change from 0 to 8 [ 166.781469][ T36] audit: type=1326 audit(2000000012.160:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6667 comm="syz.4.2148" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f21aef8e929 code=0x0 [ 166.862695][ T36] audit: type=1400 audit(2000000012.240:620): avc: denied { listen } for pid=6679 comm="syz.4.2151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 166.883476][ T36] audit: type=1400 audit(2000000012.250:621): avc: denied { accept } for pid=6679 comm="syz.4.2151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 167.059479][ T6685] fuseblk: Bad value for 'fd' [ 167.064324][ T6685] fuseblk: Bad value for 'fd' [ 167.069139][ T6685] fuseblk: Bad value for 'fd' [ 167.073977][ T6685] fuseblk: Bad value for 'fd' [ 167.078888][ T6685] fuseblk: Bad value for 'fd' [ 167.083715][ T6685] fuseblk: Bad value for 'fd' [ 167.088473][ T6685] fuseblk: Bad value for 'fd' [ 167.093247][ T6685] fuseblk: Bad value for 'fd' [ 167.099214][ T6685] fuseblk: Bad value for 'fd' [ 167.104040][ T6685] fuseblk: Bad value for 'fd' [ 167.108840][ T6685] fuseblk: Bad value for 'fd' [ 167.113824][ T6685] fuseblk: Bad value for 'fd' [ 167.118661][ T6685] fuseblk: Bad value for 'fd' [ 167.123592][ T6685] fuseblk: Bad value for 'fd' [ 167.128448][ T6685] fuseblk: Bad value for 'fd' [ 167.133267][ T6685] fuseblk: Bad value for 'fd' [ 167.138067][ T6685] fuseblk: Bad value for 'fd' [ 167.142969][ T6685] fuseblk: Bad value for 'fd' [ 167.147779][ T6685] fuseblk: Bad value for 'fd' [ 167.152563][ T6685] fuseblk: Bad value for 'fd' [ 167.157446][ T6685] fuseblk: Bad value for 'fd' [ 167.162197][ T6685] fuseblk: Bad value for 'fd' [ 167.166964][ T6685] fuseblk: Bad value for 'fd' [ 167.171747][ T6685] fuseblk: Bad value for 'fd' [ 167.176980][ T6685] fuseblk: Bad value for 'fd' [ 167.181713][ T6685] fuseblk: Bad value for 'fd' [ 167.186636][ T6685] fuseblk: Bad value for 'fd' [ 167.191381][ T6685] fuseblk: Bad value for 'fd' [ 167.196165][ T6685] fuseblk: Bad value for 'fd' [ 167.200903][ T6685] fuseblk: Bad value for 'fd' [ 167.205685][ T6685] fuseblk: Bad value for 'fd' [ 167.210438][ T6685] fuseblk: Bad value for 'fd' [ 167.215206][ T6685] fuseblk: Bad value for 'fd' [ 167.220004][ T6685] fuseblk: Bad value for 'fd' [ 167.224793][ T6685] fuseblk: Bad value for 'fd' [ 167.229549][ T6685] fuseblk: Bad value for 'fd' [ 167.234351][ T6685] fuseblk: Bad value for 'fd' [ 167.239115][ T6685] fuseblk: Bad value for 'fd' [ 167.243907][ T6685] fuseblk: Bad value for 'fd' [ 167.248662][ T6685] fuseblk: Bad value for 'fd' [ 167.253441][ T6685] fuseblk: Bad value for 'fd' [ 167.258180][ T6685] fuseblk: Bad value for 'fd' [ 167.262910][ T6685] fuseblk: Bad value for 'fd' [ 167.267691][ T6685] fuseblk: Bad value for 'fd' [ 167.272438][ T6685] fuseblk: Bad value for 'fd' [ 167.277199][ T6685] fuseblk: Bad value for 'fd' [ 167.281929][ T6685] fuseblk: Bad value for 'fd' [ 167.286712][ T6685] fuseblk: Bad value for 'fd' [ 167.291451][ T6685] fuseblk: Bad value for 'fd' [ 167.296414][ T6685] fuseblk: Bad value for 'fd' [ 167.301262][ T6685] fuseblk: Bad value for 'fd' [ 167.306230][ T6685] fuseblk: Bad value for 'fd' [ 167.311259][ T6685] fuseblk: Bad value for 'fd' [ 167.316084][ T6685] fuseblk: Bad value for 'fd' [ 167.320826][ T6685] fuseblk: Bad value for 'fd' [ 167.325588][ T6685] fuseblk: Bad value for 'fd' [ 167.330338][ T6685] fuseblk: Bad value for 'fd' [ 167.335113][ T6685] fuseblk: Bad value for 'fd' [ 167.339875][ T6685] fuseblk: Bad value for 'fd' [ 167.344705][ T6685] fuseblk: Bad value for 'fd' [ 167.349444][ T6685] fuseblk: Bad value for 'fd' [ 167.354205][ T6685] fuseblk: Bad value for 'fd' [ 167.358948][ T6685] fuseblk: Bad value for 'fd' [ 167.363697][ T6685] fuseblk: Bad value for 'fd' [ 167.368480][ T6685] fuseblk: Bad value for 'fd' [ 167.895234][ T6703] binder: Bad value for 'stats' [ 167.963145][ T10] usb 4-1: USB disconnect, device number 48 [ 167.969954][ T10] usblp0: removed [ 168.273062][ T31] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 168.323053][ T305] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 168.424012][ T31] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 168.433828][ T31] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 168.443505][ T31] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.458074][ T31] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 168.467155][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.475201][ T31] usb 6-1: Product: syz [ 168.479385][ T31] usb 6-1: Manufacturer: syz [ 168.484147][ T31] usb 6-1: SerialNumber: syz [ 168.489244][ T305] usb 4-1: config 1 interface 0 altsetting 98 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 168.502580][ T305] usb 4-1: config 1 interface 0 has no altsetting 0 [ 168.509825][ T31] hub 6-1:1.0: bad descriptor, ignoring hub [ 168.515791][ T31] hub 6-1:1.0: probe with driver hub failed with error -5 [ 168.524140][ T305] usb 4-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.40 [ 168.533212][ T305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.541221][ T305] usb 4-1: Product: 倊 [ 168.545418][ T305] usb 4-1: Manufacturer: 䠊 [ 168.550034][ T305] usb 4-1: SerialNumber: 턗巤ﾃ㉟䊹須矃᷒뎷绅䝓泲朱閵闈﷼潰녮’ᷩ泇츱ቺ鑭뙯筌೎㭃덒嬮ᖿ条쏃⓴털ꦺ㫅뼄㯰鈝鷊찏맖箓ੋ쯆᷷䳄캥닽儔멧촳龕⎰ޙ叩龗㋵㒤礬듀䓖聓巡翥磰쐘験叺ꓔ駁߭㌠緙맡ંꗚ땶 [ 168.710541][ T31] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 168.849601][ T6740] random: crng reseeded on system resumption [ 168.937801][ T6745] __vm_enough_memory: pid: 6745, comm: syz.4.2173, bytes: 70373039144960 not enough memory for the allocation [ 169.080826][ T718] usbhid 2-1:0.0: can't add hid device: -71 [ 169.102129][ T718] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 169.120860][ T718] usb 2-1: USB disconnect, device number 34 [ 169.124991][ T6754] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 169.129039][ T6754] rust_binder: Read failure Err(EFAULT) in pid:68 [ 169.206196][ T6756] tipc: Can't bind to reserved service type 1 [ 169.225306][ T6756] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 169.258450][ T6756] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 169.328274][ T6764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2181'. [ 169.613030][ T718] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 169.763045][ T718] usb 2-1: Using ep0 maxpacket: 16 [ 169.769272][ T718] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.780279][ T718] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.790081][ T718] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 169.802891][ T718] usb 2-1: config 0 interface 0 has no altsetting 0 [ 169.809517][ T718] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 169.818654][ T718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.827404][ T718] usb 2-1: config 0 descriptor?? [ 170.435549][ T718] usb 2-1: USB disconnect, device number 35 [ 170.960930][ T6780] tmpfs: Unknown parameter 'buge' [ 170.987513][ T6784] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:81 [ 171.061500][ T305] usbhid 4-1:1.0: can't add hid device: -71 [ 171.103133][ T305] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 171.128597][ T305] usb 4-1: USB disconnect, device number 49 [ 171.162730][ T6802] rust_binder: Error while translating object. [ 171.162769][ T6802] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 171.180371][ T6802] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:93 [ 171.223393][ T10] usb 6-1: USB disconnect, device number 9 [ 171.243253][ T6805] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2196'. [ 171.250619][ T10] usblp0: removed [ 171.457364][ T6817] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 171.474275][ T312] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 171.492436][ T6817] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 171.550961][ T6825] rust_binder: 6825: no such ref 0 [ 171.564546][ T6825] rust_binder: Write failure EINVAL in pid:101 [ 171.633680][ T312] usb 2-1: Using ep0 maxpacket: 16 [ 171.659375][ T312] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.683023][ T312] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.702932][ T312] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 171.723023][ T312] usb 2-1: config 0 interface 0 has no altsetting 0 [ 171.739821][ T312] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 171.753027][ T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.771977][ T312] usb 2-1: config 0 descriptor?? [ 171.883079][ T305] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 172.043018][ T305] usb 6-1: Using ep0 maxpacket: 16 [ 172.054356][ T305] usb 6-1: config 247 has an invalid interface number: 79 but max is 0 [ 172.054493][ T6840] overlayfs: missing 'lowerdir' [ 172.072804][ T305] usb 6-1: config 247 has no interface number 0 [ 172.085055][ T6840] netlink: 'syz.4.2209': attribute type 16 has an invalid length. [ 172.088115][ T305] usb 6-1: config 247 interface 79 has no altsetting 0 [ 172.101138][ T6840] netlink: 'syz.4.2209': attribute type 3 has an invalid length. [ 172.110438][ T305] usb 6-1: New USB device found, idVendor=03eb, idProduct=2002, bcdDevice= 1.18 [ 172.111803][ T6840] netlink: 64054 bytes leftover after parsing attributes in process `syz.4.2209'. [ 172.130144][ T305] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.149554][ T305] usb 6-1: Product: syz [ 172.155460][ T305] usb 6-1: Manufacturer: syz [ 172.160083][ T305] usb 6-1: SerialNumber: syz [ 172.246327][ T6848] netlink: 'syz.4.2212': attribute type 27 has an invalid length. [ 172.265678][ T6848] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.267353][ T6844] SELinux: security_context_str_to_sid () failed with errno=-22 [ 172.272935][ T6848] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.376339][ T305] usb 6-1: USB disconnect, device number 10 [ 172.386557][ T718] usb 2-1: USB disconnect, device number 36 [ 172.489769][ T6868] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6868 comm=syz.3.2217 [ 172.507410][ T6869] 9pnet_fd: Insufficient options for proto=fd [ 172.524914][ T36] audit: type=1400 audit(2000000017.910:622): avc: denied { create } for pid=6871 comm="syz.3.2218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 172.952314][ T36] audit: type=1400 audit(2000000018.330:623): avc: denied { read write } for pid=6879 comm="syz.1.2221" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 172.977228][ T36] audit: type=1400 audit(2000000018.330:624): avc: denied { open } for pid=6879 comm="syz.1.2221" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 173.031792][ T6887] rust_binder: Failed to allocate buffer. len:18446744073709551512, is_oneway:true [ 173.031821][ T6887] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 173.042943][ T6887] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:108 [ 173.069514][ T6892] netlink: 393 bytes leftover after parsing attributes in process `syz.1.2224'. [ 173.092993][ T6892] netlink: 'syz.1.2224': attribute type 4 has an invalid length. [ 173.100940][ T6892] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.2224'. [ 173.139600][ T6896] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 173.139625][ T6896] rust_binder: Read failure Err(EFAULT) in pid:106 [ 173.147796][ T6896] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:106 [ 173.413031][ T718] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 173.446849][ T6903] binder: Bad value for 'defcontext' [ 173.463888][ T6906] input: syz0 as /devices/virtual/input/input22 [ 173.471410][ T6906] tmpfs: Unknown parameter '' [ 173.492064][ T36] audit: type=1400 audit(2000000018.870:625): avc: denied { map } for pid=6907 comm="syz.3.2232" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 173.594389][ T718] usb 2-1: Using ep0 maxpacket: 16 [ 173.602031][ T718] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.612960][ T718] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.622796][ T718] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 173.635690][ T718] usb 2-1: config 0 interface 0 has no altsetting 0 [ 173.642313][ T718] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 173.651350][ T718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.659931][ T718] usb 2-1: config 0 descriptor?? [ 173.853038][ T312] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 174.003051][ T312] usb 4-1: Using ep0 maxpacket: 16 [ 174.009302][ T312] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.021978][ T312] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.031746][ T312] usb 4-1: config 0 interface 0 has no altsetting 0 [ 174.038384][ T312] usb 4-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.18 [ 174.047456][ T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.056561][ T312] usb 4-1: config 0 descriptor?? [ 174.062395][ T312] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 174.079306][ T718] hid (null): global environment stack underflow [ 174.266690][ T312] usb 4-1: USB disconnect, device number 50 [ 174.280141][ T10] usb 2-1: USB disconnect, device number 37 [ 174.786223][ T6919] bridge0: port 3(veth0_vlan) entered blocking state [ 174.793061][ T6919] bridge0: port 3(veth0_vlan) entered disabled state [ 174.801290][ T6919] veth0_vlan: entered allmulticast mode [ 174.806986][ T6921] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2237'. [ 174.807819][ T6919] bridge0: port 3(veth0_vlan) entered blocking state [ 174.816169][ T6921] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2237'. [ 174.822680][ T6919] bridge0: port 3(veth0_vlan) entered forwarding state [ 174.831707][ T6921] netlink: 'syz.1.2237': attribute type 6 has an invalid length. [ 174.846318][ T6921] netlink: 'syz.1.2237': attribute type 5 has an invalid length. [ 174.854442][ T6921] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2237'. [ 174.903589][ T6932] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=43 sclass=netlink_xfrm_socket pid=6932 comm=syz.5.2240 [ 174.922507][ T6933] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 174.922527][ T6933] rust_binder: Read failure Err(EFAULT) in pid:172 [ 174.933875][ T36] audit: type=1400 audit(2000000020.320:626): avc: denied { append } for pid=6937 comm="syz.5.2242" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 174.963082][ T36] audit: type=1400 audit(2000000020.320:627): avc: denied { ioctl } for pid=6937 comm="syz.5.2242" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 175.168808][ T6945] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 175.169091][ T6946] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 175.244228][ T36] audit: type=1400 audit(2000000020.630:628): avc: denied { sys_module } for pid=6949 comm="syz.3.2245" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 175.289709][ T36] audit: type=1326 audit(2000000020.670:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6953 comm="syz.3.2247" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f02bf18e929 code=0x0 [ 175.823077][ T312] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 175.973022][ T312] usb 2-1: Using ep0 maxpacket: 8 [ 175.979397][ T312] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.990198][ T312] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 176.004634][ T312] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 176.013846][ T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.021998][ T312] usb 2-1: Product: syz [ 176.026284][ T312] usb 2-1: Manufacturer: syz [ 176.030947][ T312] usb 2-1: SerialNumber: syz [ 176.040411][ T312] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 176.144932][ T6984] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2257'. [ 176.252114][ T312] usb 2-1: USB disconnect, device number 38 [ 176.454123][ T6994] rust_binder: Write failure EFAULT in pid:192 [ 176.464744][ T305] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 176.483975][ T312] kernel write not supported for file /uinput (pid: 312 comm: kworker/0:3) [ 176.568547][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 176.595614][ T7026] fuse: Unknown parameter '' [ 176.601274][ T7026] binder: Unknown parameter 'context' [ 176.625038][ T305] usb 6-1: Using ep0 maxpacket: 16 [ 176.631269][ T305] usb 6-1: config 247 has an invalid interface number: 79 but max is 0 [ 176.639679][ T305] usb 6-1: config 247 has no interface number 0 [ 176.649119][ T305] usb 6-1: config 247 interface 79 has no altsetting 0 [ 176.657376][ T305] usb 6-1: New USB device found, idVendor=03eb, idProduct=2002, bcdDevice= 1.18 [ 176.666548][ T305] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.674672][ T305] usb 6-1: Product: syz [ 176.678842][ T305] usb 6-1: Manufacturer: syz [ 176.683481][ T305] usb 6-1: SerialNumber: syz [ 176.733094][ T718] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 176.883038][ T718] usb 4-1: Using ep0 maxpacket: 32 [ 176.889351][ T718] usb 4-1: config index 0 descriptor too short (expected 20704, got 36) [ 176.897793][ T718] usb 4-1: config 193 has too many interfaces: 86, using maximum allowed: 32 [ 176.906675][ T718] usb 4-1: config 193 has an invalid descriptor of length 199, skipping remainder of the config [ 176.917291][ T718] usb 4-1: config 193 has 0 interfaces, different from the descriptor's value: 86 [ 176.926742][ T718] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 176.937163][ T718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.973539][ T305] usb 6-1: USB disconnect, device number 11 [ 177.029609][ T7049] veth0_to_bond: mtu greater than device maximum [ 177.053699][ T7052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 177.151523][ T718] usb 4-1: string descriptor 0 read error: -71 [ 177.164759][ T718] usb 4-1: USB disconnect, device number 51 [ 177.303035][ T312] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 177.453987][ T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.464928][ T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.474842][ T312] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 177.484024][ T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.493867][ T312] usb 2-1: config 0 descriptor?? [ 177.512207][ T7054] netlink: 'syz.5.2281': attribute type 12 has an invalid length. [ 177.666575][ T36] audit: type=1400 audit(2000000023.050:630): avc: denied { ioctl } for pid=7055 comm="syz.3.2282" path="socket:[43020]" dev="sockfs" ino=43020 ioctlcmd=0x6205 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 177.666644][ T7056] rust_binder: Write failure EFAULT in pid:199 [ 177.835603][ T7059] /dev/md0: Can't lookup blockdev [ 177.870887][ T7062] binder: Unknown parameter 'defcontumc_u+rext' [ 177.889025][ T36] audit: type=1400 audit(2000000023.270:631): avc: denied { bind } for pid=7063 comm="syz.3.2285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 178.137461][ T7072] Invalid ELF header len 16 [ 178.145741][ T7072] can: request_module (can-proto-6) failed. [ 178.153354][ T718] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 178.207014][ T7076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.215636][ T7076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.223726][ T7076] netlink: 'syz.5.2288': attribute type 27 has an invalid length. [ 178.313021][ T718] usb 4-1: Using ep0 maxpacket: 16 [ 178.319218][ T718] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.330220][ T718] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.340071][ T718] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 178.353508][ T718] usb 4-1: config 0 interface 0 has no altsetting 0 [ 178.360149][ T718] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 178.369200][ T718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.377822][ T718] usb 4-1: config 0 descriptor?? [ 178.443082][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 178.510444][ T312] uclogic 0003:256C:006D.0018: interface is invalid, ignoring [ 178.613050][ T393] Bluetooth: hci0: command 0x1003 tx timeout [ 178.613945][ T394] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 178.786572][ T718] hid (null): invalid report_size 29797 [ 178.964636][ T7084] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 178.964659][ T7084] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:165 [ 179.849395][ T305] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 179.867263][ T305] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 179.894548][ T7106] fido_id[7106]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 179.959293][ T7110] rust_binder: Write failure EFAULT in pid:179 [ 179.959495][ T36] audit: type=1400 audit(2000000025.340:632): avc: denied { setattr } for pid=7109 comm="syz.5.2298" name="binder0" dev="binder" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 180.313059][ T10] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 180.429272][ T312] usb 2-1: USB disconnect, device number 39 [ 180.464048][ T10] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 180.473224][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.481774][ T10] usb 6-1: config 0 descriptor?? [ 180.510725][ T7115] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 180.581900][ T7118] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 180.590810][ T7118] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 180.689778][ T10] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 180.721942][ T7126] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.731172][ T7126] SELinux: security_context_str_to_sid (sytem_uGй :e) failed with errno=-22 [ 180.871718][ T7129] @: renamed from veth0_vlan (while UP) [ 180.924340][ T332] usb 4-1: USB disconnect, device number 52 [ 180.986527][ T13] veth0_vlan: left allmulticast mode [ 180.991966][ T13] bridge0: port 3(veth0_vlan) entered disabled state [ 180.999598][ T13] bridge_slave_1: left allmulticast mode [ 181.005373][ T13] bridge_slave_1: left promiscuous mode [ 181.011063][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.019015][ T13] bridge_slave_0: left allmulticast mode [ 181.024843][ T13] bridge_slave_0: left promiscuous mode [ 181.030524][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.123053][ T305] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 181.145582][ T13] veth1_macvtap: left promiscuous mode [ 181.151135][ T13] veth0_vlan: left promiscuous mode [ 181.209226][ T7131] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.216312][ T7131] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.223420][ T7131] bridge_slave_0: entered allmulticast mode [ 181.229617][ T7131] bridge_slave_0: entered promiscuous mode [ 181.236067][ T7131] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.243128][ T7131] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.250182][ T7131] bridge_slave_1: entered allmulticast mode [ 181.256503][ T7131] bridge_slave_1: entered promiscuous mode [ 181.283449][ T305] usb 2-1: Using ep0 maxpacket: 32 [ 181.289597][ T305] usb 2-1: too many configurations: 128, using maximum allowed: 8 [ 181.300658][ T305] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 181.308298][ T305] usb 2-1: can't read configurations, error -61 [ 181.329400][ T7131] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.336483][ T7131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.343772][ T7131] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.350820][ T7131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.372130][ T127] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.379579][ T127] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.389451][ T323] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.396508][ T323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.405409][ T323] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.412456][ T323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.438805][ T7131] veth0_vlan: entered promiscuous mode [ 181.450208][ T7131] veth1_macvtap: entered promiscuous mode [ 181.454509][ T305] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 181.612346][ T7152] overlayfs: failed to resolve 'dont_hash': -2 [ 181.613201][ T305] usb 2-1: Using ep0 maxpacket: 32 [ 181.624309][ T305] usb 2-1: too many configurations: 128, using maximum allowed: 8 [ 181.635300][ T305] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 181.642927][ T305] usb 2-1: can't read configurations, error -61 [ 181.649372][ T305] usb usb2-port1: attempt power cycle [ 181.772752][ T7163] tipc: Enabling of bearer rejected, failed to enable media [ 181.781447][ T7163] input: syz0 as /devices/virtual/input/input24 [ 181.993036][ T305] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 182.013417][ T305] usb 2-1: Using ep0 maxpacket: 32 [ 182.020744][ T305] usb 2-1: too many configurations: 128, using maximum allowed: 8 [ 182.030057][ T305] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 182.037824][ T305] usb 2-1: can't read configurations, error -61 [ 182.077321][ T7169] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2316'. [ 182.173091][ T305] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 182.193433][ T305] usb 2-1: Using ep0 maxpacket: 32 [ 182.198928][ T305] usb 2-1: too many configurations: 128, using maximum allowed: 8 [ 182.207825][ T305] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 182.215625][ T305] usb 2-1: can't read configurations, error -61 [ 182.222015][ T305] usb usb2-port1: unable to enumerate USB device [ 182.658785][ T7172] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 182.658818][ T7172] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:38 [ 182.668734][ T7173] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 182.691029][ T36] audit: type=1400 audit(2000000028.070:633): avc: denied { module_load } for pid=7176 comm="syz.6.2318" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=43768 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1 [ 182.776406][ T7186] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2322'. [ 182.787686][ T10] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 182.810880][ T10] asix 6-1:0.0: probe with driver asix failed with error -71 [ 182.823153][ T10] usb 6-1: USB disconnect, device number 13 [ 182.993041][ T305] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 183.143033][ T305] usb 7-1: Using ep0 maxpacket: 16 [ 183.149247][ T305] usb 7-1: config 0 has an invalid interface number: 225 but max is 0 [ 183.157506][ T305] usb 7-1: config 0 has no interface number 0 [ 183.163630][ T305] usb 7-1: config 0 interface 225 has no altsetting 0 [ 183.171744][ T305] usb 7-1: New USB device found, idVendor=0b95, idProduct=1720, bcdDevice=23.b4 [ 183.181109][ T305] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.189127][ T305] usb 7-1: Product: syz [ 183.193301][ T305] usb 7-1: Manufacturer: syz [ 183.197875][ T305] usb 7-1: SerialNumber: syz [ 183.203011][ T305] usb 7-1: config 0 descriptor?? [ 184.173117][ T31] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 184.215058][ T7184] binder: Unknown parameter 'fscontext?}' [ 184.263702][ T305] asix 7-1:0.225 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 184.273912][ T305] asix 7-1:0.225: probe with driver asix failed with error -71 [ 184.282646][ T305] usb 7-1: USB disconnect, device number 2 [ 184.324026][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 184.333711][ T31] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 184.343384][ T31] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 184.357522][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 184.366654][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.374686][ T31] usb 2-1: Product: syz [ 184.378828][ T31] usb 2-1: Manufacturer: syz [ 184.383430][ T31] usb 2-1: SerialNumber: syz [ 184.389580][ T31] hub 2-1:1.0: bad descriptor, ignoring hub [ 184.395537][ T31] hub 2-1:1.0: probe with driver hub failed with error -5 [ 184.590667][ T31] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 44 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 185.018321][ T36] audit: type=1400 audit(2000000030.400:634): avc: denied { watch watch_reads } for pid=7223 comm="syz.6.2334" path="/20/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 185.553036][ T31] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 185.703066][ T31] usb 7-1: Using ep0 maxpacket: 16 [ 185.709264][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 185.720491][ T31] usb 7-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 185.729554][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.738480][ T31] usb 7-1: config 0 descriptor?? [ 185.888693][ T36] audit: type=1400 audit(2000000031.270:635): avc: denied { map } for pid=7237 comm="syz.4.2339" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 186.014814][ T36] audit: type=1400 audit(2000000031.400:636): avc: denied { read } for pid=7245 comm="syz.4.2341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 186.148125][ T31] wacom 0003:056A:033B.001B: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 186.158854][ T31] wacom 0003:056A:033B.001B: hidraw0: USB HID v20.00 Device [HID 056a:033b] on usb-dummy_hcd.6-1/input0 [ 186.180979][ T31] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:033B.001B/input/input25 [ 186.347518][ T7232] rust_binder: Error while translating object. [ 186.347554][ T7232] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 186.354015][ T7232] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:75 [ 186.367314][ T31] usb 7-1: USB disconnect, device number 3 [ 186.545061][ T7260] cgroup: Bad value for 'name' [ 186.733020][ T305] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 186.835200][ T7278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2351'. [ 186.844408][ T7278] syzkaller0: entered promiscuous mode [ 186.849875][ T7278] syzkaller0: entered allmulticast mode [ 186.884090][ T305] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 186.897333][ T7283] devpts: called with bogus options [ 186.898162][ T36] audit: type=1400 audit(2000000032.270:637): avc: denied { lock } for pid=7282 comm="syz.6.2353" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 186.926257][ T305] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 186.927000][ T36] audit: type=1400 audit(2000000032.280:638): avc: denied { remount } for pid=7282 comm="syz.6.2353" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 186.937684][ T305] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 186.958660][ T36] audit: type=1400 audit(2000000032.340:639): avc: denied { mounton } for pid=7282 comm="syz.6.2353" path="/24/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 186.991779][ T7283] rust_binder: Failed copying remainder into alloc: EFAULT [ 186.991801][ T7283] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 187.000264][ T7283] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 187.013794][ T7283] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:79 [ 187.023769][ T305] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 187.050876][ T305] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.059062][ T305] usb 6-1: Product: syz [ 187.064339][ T305] usb 6-1: Manufacturer: syz [ 187.068961][ T305] usb 6-1: SerialNumber: syz [ 187.076777][ T305] hub 6-1:1.0: bad descriptor, ignoring hub [ 187.082701][ T305] hub 6-1:1.0: probe with driver hub failed with error -5 [ 187.087804][ T7294] 9pnet_fd: Insufficient options for proto=fd [ 187.114022][ T31] usb 2-1: USB disconnect, device number 44 [ 187.120840][ T31] usblp0: removed [ 187.276914][ T7304] random: crng reseeded on system resumption [ 187.277520][ T305] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 187.307716][ T36] audit: type=1326 audit(2000000032.690:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7303 comm="syz.6.2360" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc71018e929 code=0x0 [ 187.582362][ T305] usb 6-1: USB disconnect, device number 14 [ 187.801023][ T7258] usblp0: removed [ 187.853041][ T10] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 188.003019][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 188.009210][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 49, changing to 9 [ 188.020343][ T10] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c07, bcdDevice= 0.00 [ 188.029416][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.038018][ T10] usb 2-1: config 0 descriptor?? [ 188.273893][ T36] audit: type=1400 audit(2000000033.660:641): avc: granted { setsecparam } for pid=7316 comm="syz.6.2365" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 188.405416][ T7327] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 188.446843][ T10] usb 2-1: string descriptor 0 read error: -71 [ 188.456770][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 188.462786][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 188.473749][ T10] usb 2-1: USB disconnect, device number 45 [ 188.497360][ T7331] netlink: 260 bytes leftover after parsing attributes in process `syz.5.2368'. [ 188.783392][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 188.935935][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 188.945255][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.953342][ T9] usb 6-1: Product: syz [ 188.957539][ T9] usb 6-1: Manufacturer: syz [ 188.962139][ T9] usb 6-1: SerialNumber: syz [ 189.213035][ T31] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 189.363023][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 189.369161][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.379393][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 189.388279][ T31] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 189.401161][ T31] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 189.410209][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.420360][ T31] hub 2-1:1.0: bad descriptor, ignoring hub [ 189.426346][ T31] hub 2-1:1.0: probe with driver hub failed with error -5 [ 189.433661][ T31] cdc_wdm 2-1:1.0: skipping garbage [ 189.438954][ T31] cdc_wdm 2-1:1.0: skipping garbage [ 189.444212][ T31] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 189.970305][ T9] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 189.976783][ T9] cdc_ncm 6-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 189.984362][ T9] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 190.053434][ T312] usb 2-1: USB disconnect, device number 46 [ 190.172731][ T9] cdc_ncm 6-1:1.0: setting tx_max = 136 [ 190.179934][ T9] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 190.192690][ T9] usb 6-1: USB disconnect, device number 15 [ 190.200022][ T9] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 190.343051][ T312] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 190.363028][ T31] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 190.494178][ T312] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.504353][ T312] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 190.513277][ T312] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 190.523027][ T31] usb 7-1: Using ep0 maxpacket: 16 [ 190.526228][ T312] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 190.532440][ T31] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.540354][ T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.551714][ T31] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.564756][ T312] hub 2-1:1.0: bad descriptor, ignoring hub [ 190.569172][ T31] usb 7-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 190.579960][ T312] hub 2-1:1.0: probe with driver hub failed with error -5 [ 190.587852][ T31] usb 7-1: config 0 interface 0 has no altsetting 0 [ 190.595358][ T312] cdc_wdm 2-1:1.0: skipping garbage [ 190.601592][ T31] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 190.606941][ T312] cdc_wdm 2-1:1.0: skipping garbage [ 190.615841][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.621221][ T312] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 190.630499][ T31] usb 7-1: config 0 descriptor?? [ 190.933043][ T312] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 191.051283][ T31] hid (null): global environment stack underflow [ 191.083118][ T312] usb 6-1: Using ep0 maxpacket: 8 [ 191.090075][ T312] usb 6-1: config 1 interface 0 altsetting 80 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 191.103081][ T312] usb 6-1: config 1 interface 0 has no altsetting 0 [ 191.111208][ T312] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 191.120398][ T312] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.128441][ T312] usb 6-1: Product: ࠠ [ 191.132688][ T312] usb 6-1: Manufacturer: ࠾ [ 191.137316][ T312] usb 6-1: SerialNumber: Л [ 191.143060][ T7387] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 191.173156][ T10] usb 2-1: USB disconnect, device number 47 [ 191.248925][ T10] usb 7-1: USB disconnect, device number 4 [ 191.551287][ T36] audit: type=1400 audit(2000000036.930:642): avc: denied { create } for pid=7386 comm="syz.5.2379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 191.552610][ T7387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.586577][ T7387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.604772][ T36] audit: type=1400 audit(2000000036.990:643): avc: denied { map } for pid=7396 comm="syz.1.2382" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 191.624784][ T312] usb 6-1: USB disconnect, device number 16 [ 191.657123][ T7399] netlink: 'syz.1.2384': attribute type 3 has an invalid length. [ 191.664988][ T7399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2384'. [ 191.710827][ T7405] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 191.716594][ T7405] pim6reg0: linktype set to 769 [ 191.983070][ T305] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 192.133188][ T305] usb 2-1: Using ep0 maxpacket: 16 [ 192.140183][ T305] usb 2-1: unable to get BOS descriptor or descriptor too short [ 192.148899][ T305] usb 2-1: config 1 has an invalid descriptor of length 176, skipping remainder of the config [ 192.162595][ T305] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 192.172817][ T305] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 192.181910][ T305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.189924][ T305] usb 2-1: Product: syz [ 192.194113][ T305] usb 2-1: Manufacturer: syz [ 192.198702][ T305] usb 2-1: SerialNumber: syz [ 192.423530][ T305] usb 2-1: invalid UAC_HEADER (v1) [ 192.438753][ T305] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 192.453375][ T305] usb 2-1: USB disconnect, device number 48 [ 192.487055][ T310] udevd[310]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 192.988292][ T7430] binder: Bad value for 'max' [ 193.025052][ T7434] binder: Unknown parameter '1777777' [ 193.044253][ T7436] syz_tun: entered promiscuous mode [ 193.049491][ T7436] syz_tun: entered allmulticast mode [ 193.068207][ T7438] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 193.068226][ T7438] rust_binder: Read failure Err(EFAULT) in pid:134 [ 193.149599][ T7446] rust_binder: Error while translating object. [ 193.156267][ T7446] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 193.162445][ T7446] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:189 [ 193.453037][ T9] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 193.614185][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.625194][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.634949][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 193.649905][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 193.659133][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.670510][ T9] usb 2-1: config 0 descriptor?? [ 193.741945][ T36] audit: type=1400 audit(2000000039.120:644): avc: denied { name_bind } for pid=7463 comm="syz.6.2407" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 193.877492][ T36] audit: type=1326 audit(2000000039.260:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7475 comm="syz.6.2410" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc71018e929 code=0x0 [ 193.927334][ T7479] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 193.927354][ T7478] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 193.927357][ T7479] rust_binder: Read failure Err(EFAULT) in pid:236 [ 193.929216][ T7484] rust_binder: 7484: no such ref 0 [ 193.936054][ T7478] rust_binder: Read failure Err(EFAULT) in pid:236 [ 193.943538][ T7484] rust_binder: Write failure EINVAL in pid:159 [ 193.963850][ T7484] rust_binder: Write failure EINVAL in pid:159 [ 194.111666][ T9] plantronics 0003:047F:FFFF.001D: unknown main item tag 0xd [ 194.127114][ T9] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving [ 194.136277][ T9] plantronics 0003:047F:FFFF.001D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 194.364207][ T36] audit: type=1400 audit(2000000039.750:646): avc: denied { write } for pid=7449 comm="syz.1.2402" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 194.613084][ T305] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 194.763025][ T305] usb 6-1: Invalid ep0 maxpacket: 16 [ 194.903197][ T305] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 195.073107][ T305] usb 6-1: Invalid ep0 maxpacket: 16 [ 195.078860][ T305] usb usb6-port1: attempt power cycle [ 195.080378][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2425'. [ 195.185754][ T36] audit: type=1400 audit(2000000040.570:647): avc: denied { accept } for pid=7523 comm="syz.6.2426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 195.421035][ T7531] netlink: 596 bytes leftover after parsing attributes in process `syz.6.2428'. [ 195.433465][ T305] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 195.453734][ T305] usb 6-1: Invalid ep0 maxpacket: 16 [ 195.563081][ T31] usb 2-1: reset high-speed USB device number 49 using dummy_hcd [ 195.571335][ T7537] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 195.572350][ T7537] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 195.581502][ T7536] rust_binder: validate_parent_fixup: fixup_min_offset=68, parent_offset=63 [ 195.583777][ T7537] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 195.599151][ T305] usb 6-1: new low-speed USB device number 20 using dummy_hcd [ 195.599666][ T7536] rust_binder: Error while translating object. [ 195.616486][ T7536] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 195.617011][ T7537] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:478 [ 195.632939][ T7536] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:478 [ 195.643605][ T305] usb 6-1: Invalid ep0 maxpacket: 16 [ 195.658495][ T305] usb usb6-port1: unable to enumerate USB device [ 195.993216][ T305] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 196.049305][ T7544] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2432'. [ 196.143037][ T305] usb 7-1: device descriptor read/64, error -71 [ 196.703094][ T305] usb 7-1: device descriptor read/64, error -71 [ 196.913023][ T31] usb 2-1: device descriptor read/64, error -71 [ 196.943028][ T305] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 197.023369][ T31] usb 2-1: device reset changed ep0 maxpacket size! [ 197.030134][ T718] usb 2-1: USB disconnect, device number 49 [ 197.073057][ T305] usb 7-1: device descriptor read/64, error -71 [ 197.163039][ T718] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 197.313046][ T305] usb 7-1: device descriptor read/64, error -71 [ 197.323140][ T718] usb 2-1: Using ep0 maxpacket: 16 [ 197.329361][ T718] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.340350][ T718] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.350110][ T718] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 197.362988][ T718] usb 2-1: config 0 interface 0 has no altsetting 0 [ 197.369586][ T718] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 197.378719][ T718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.387256][ T718] usb 2-1: config 0 descriptor?? [ 197.423098][ T305] usb usb7-port1: attempt power cycle [ 197.763017][ T305] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 197.783996][ T305] usb 7-1: device descriptor read/8, error -71 [ 197.801870][ T718] hid (null): global environment stack underflow [ 197.914104][ T305] usb 7-1: device descriptor read/8, error -71 [ 197.995702][ T718] usb 2-1: USB disconnect, device number 50 [ 198.153081][ T305] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 198.174043][ T305] usb 7-1: device descriptor read/8, error -71 [ 198.304115][ T305] usb 7-1: device descriptor read/8, error -71 [ 198.413146][ T305] usb usb7-port1: unable to enumerate USB device [ 198.509119][ T36] audit: type=1400 audit(2000000043.890:648): avc: denied { create } for pid=7567 comm="syz.1.2442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 198.537557][ T7570] overlayfs: missing 'lowerdir' [ 198.993025][ T9] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 199.123018][ T9] usb 7-1: device descriptor read/64, error -71 [ 199.244017][ T7584] kvm: kvm [7583]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x1 [ 199.253605][ T7584] cgroup: Invalid name [ 199.258462][ T7584] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:259 [ 199.349458][ T7589] rust_binder: Write failure EFAULT in pid:261 [ 199.363032][ T9] usb 7-1: device descriptor read/64, error -71 [ 199.623039][ T9] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 199.723007][ T718] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 199.753027][ T9] usb 7-1: device descriptor read/64, error -71 [ 199.883034][ T718] usb 2-1: Using ep0 maxpacket: 16 [ 199.889333][ T718] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.913137][ T718] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.922880][ T718] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 199.953014][ T718] usb 2-1: config 0 interface 0 has no altsetting 0 [ 199.959641][ T718] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 199.993012][ T718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.001798][ T718] usb 2-1: config 0 descriptor?? [ 200.023085][ T9] usb 7-1: device descriptor read/64, error -71 [ 200.143113][ T9] usb usb7-port1: attempt power cycle [ 200.442286][ T718] hid (null): global environment stack underflow [ 200.463018][ T305] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 200.476000][ T7625] rust_binder: Error while translating object. [ 200.476021][ T7625] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 200.482202][ T7625] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:518 [ 200.483042][ T9] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 200.524108][ T9] usb 7-1: device descriptor read/8, error -71 [ 200.637210][ T718] usb 2-1: USB disconnect, device number 51 [ 200.643221][ T305] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 200.652906][ T305] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.655619][ T9] usb 7-1: device descriptor read/8, error -71 [ 200.670110][ T305] usb 6-1: config 0 descriptor?? [ 200.923074][ T9] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 200.944077][ T9] usb 7-1: device descriptor read/8, error -71 [ 201.094087][ T9] usb 7-1: device descriptor read/8, error -71 [ 201.203135][ T9] usb usb7-port1: unable to enumerate USB device [ 201.482751][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 201.563030][ T332] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 201.693038][ T332] usb 2-1: device descriptor read/64, error -71 [ 201.933035][ T332] usb 2-1: device descriptor read/64, error -71 [ 202.079655][ T7673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.088170][ T31] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 202.088961][ T7673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.173040][ T332] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 202.243070][ T31] usb 7-1: Using ep0 maxpacket: 16 [ 202.248260][ T305] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 202.258423][ T305] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 202.268674][ T305] asix 6-1:0.0: probe with driver asix failed with error -71 [ 202.276824][ T31] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.288259][ T305] usb 6-1: USB disconnect, device number 21 [ 202.295391][ T31] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.305226][ T31] usb 7-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 202.318035][ T332] usb 2-1: device descriptor read/64, error -71 [ 202.324360][ T31] usb 7-1: config 0 interface 0 has no altsetting 0 [ 202.331011][ T31] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 202.340129][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.348739][ T31] usb 7-1: config 0 descriptor?? [ 202.563016][ T332] usb 2-1: device descriptor read/64, error -71 [ 202.673105][ T332] usb usb2-port1: attempt power cycle [ 202.762858][ T31] hid (null): global environment stack underflow [ 202.963172][ T31] usb 7-1: USB disconnect, device number 13 [ 202.980990][ T7683] rust_binder: Error while translating object. [ 202.981023][ T7683] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 202.981160][ T7684] rust_binder: Error while translating object. [ 202.987478][ T7683] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:278 [ 202.996657][ T7684] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 203.011891][ T7684] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:278 [ 203.021352][ T332] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 203.054011][ T332] usb 2-1: device descriptor read/8, error -71 [ 203.184045][ T332] usb 2-1: device descriptor read/8, error -71 [ 203.385446][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.385897][ T36] audit: type=1400 audit(2000000048.770:649): avc: denied { getattr } for pid=7714 comm="syz.5.2489" name="/" dev="incremental-fs" ino=589 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 203.415521][ T36] audit: type=1400 audit(2000000048.770:650): avc: denied { mounton } for pid=7714 comm="syz.5.2489" path="/102/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 203.422344][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.438485][ T332] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 203.452479][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.459144][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.472882][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.479844][ T332] usb 2-1: device descriptor read/8, error -71 [ 203.487929][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.493012][ T7650] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 203.494494][ T394] Bluetooth: hci0: command tx timeout [ 203.506130][ T7720] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:210 [ 203.506211][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.523224][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.536862][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.543540][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.559336][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.576129][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.589903][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.607662][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.617250][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.623959][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.634179][ T332] usb 2-1: device descriptor read/8, error -71 [ 203.640691][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.653544][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.671859][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.679251][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.686291][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.693521][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.700199][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.707005][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.713806][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.720329][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.727116][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.743151][ T332] usb usb2-port1: unable to enumerate USB device [ 203.743277][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.756399][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.763118][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.769855][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.776542][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.786780][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.793521][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.800162][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.807583][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.814356][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.821142][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.827834][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.835068][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.841918][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.848647][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.863400][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.869978][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.876689][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.883875][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.890457][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.898173][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.906518][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.913593][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.920134][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.926899][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.934514][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.941083][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.947779][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.954487][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.962156][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.968904][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.975481][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.981942][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.988565][ T7716] overlayfs: maximum fs stacking depth exceeded [ 203.995038][ T7716] overlayfs: maximum fs stacking depth exceeded [ 204.001495][ T7716] overlayfs: maximum fs stacking depth exceeded [ 204.008265][ T7716] overlayfs: maximum fs stacking depth exceeded [ 204.046769][ T36] audit: type=1400 audit(2000000049.430:651): avc: denied { accept } for pid=7728 comm="syz.4.2493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 204.075843][ T36] audit: type=1400 audit(2000000049.460:652): avc: denied { mounton } for pid=7730 comm="syz.4.2494" path="/syzcgroup/unified/syz4" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 204.278228][ T7749] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2498'. [ 204.288173][ T7749] x_tables: duplicate underflow at hook 2 [ 204.298081][ T36] audit: type=1400 audit(2000000049.680:653): avc: denied { map } for pid=7748 comm="syz.6.2498" path="pipe:[48819]" dev="pipefs" ino=48819 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 204.410916][ T7757] binder: Bad value for 'max' [ 204.428959][ T7759] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 204.428981][ T7759] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:232 [ 204.489505][ T7773] SELinux: failed to load policy [ 204.589657][ T36] audit: type=1400 audit(2000000049.970:654): avc: denied { execute } for pid=7778 comm="syz.4.2510" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 204.642328][ T7791] binder: Bad value for 'stats' [ 204.643515][ T7792] binder: Bad value for 'stats' [ 204.859591][ T36] audit: type=1400 audit(2000000050.240:655): avc: denied { mounton } for pid=7815 comm="syz.4.2520" path="/194/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 204.883081][ T312] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 204.894493][ T7823] rust_binder: Failed to allocate buffer. len:296, is_oneway:true [ 205.040676][ T7852] cgroup: Invalid name [ 205.052640][ T312] usb 7-1: Using ep0 maxpacket: 8 [ 205.059155][ T312] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 205.069190][ T312] usb 7-1: config 179 has no interface number 0 [ 205.075596][ T312] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 205.086726][ T312] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 205.098397][ T312] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 205.109622][ T312] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 205.121130][ T312] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 205.134450][ T312] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 205.143581][ T312] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.152865][ T7791] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 205.319845][ T7869] fuse: Bad value for 'fd' [ 205.361271][ T312] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input31 [ 205.397871][ T7871] rust_binder: Error while translating object. [ 205.397892][ T7871] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 205.404354][ T7871] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:288 [ 205.574085][ T7791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.591830][ T7791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.600010][ T332] usb 7-1: USB disconnect, device number 14 [ 205.600012][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 205.600146][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 205.622572][ T332] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 205.676969][ T7883] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2544'. [ 205.943032][ T312] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 206.093023][ T312] usb 6-1: Using ep0 maxpacket: 16 [ 206.099241][ T312] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.110258][ T312] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.120087][ T312] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 206.132908][ T312] usb 6-1: config 0 interface 0 has no altsetting 0 [ 206.144429][ T312] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 206.153613][ T312] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.162221][ T312] usb 6-1: config 0 descriptor?? [ 206.173021][ T332] usb 2-1: new low-speed USB device number 56 using dummy_hcd [ 206.324042][ T332] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 206.333232][ T332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.341848][ T332] usb 2-1: config 0 descriptor?? [ 206.577794][ T312] hid (null): global environment stack underflow [ 206.660413][ T7910] kernel profiling enabled (shift: 63) [ 206.665951][ T7910] profiling shift: 63 too large [ 206.713156][ T7914] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2553'. [ 206.722174][ T7914] tc_dump_action: action bad kind [ 206.770595][ T312] usb 6-1: USB disconnect, device number 22 [ 207.123038][ T31] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 207.274016][ T31] usb 7-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 207.283167][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.292604][ T31] usb 7-1: config 0 descriptor?? [ 207.513229][ T332] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 207.523361][ T332] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 207.533665][ T332] asix 2-1:0.0: probe with driver asix failed with error -71 [ 207.542391][ T332] usb 2-1: USB disconnect, device number 56 [ 207.544034][ T312] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 207.703041][ T312] usb 6-1: Using ep0 maxpacket: 32 [ 207.705427][ T31] elecom 0003:056E:00E6.0022: unknown main item tag 0x0 [ 207.709629][ T312] usb 6-1: config 0 has an invalid interface number: 97 but max is 0 [ 207.716023][ T31] elecom 0003:056E:00E6.0022: unknown main item tag 0x0 [ 207.723662][ T312] usb 6-1: config 0 has no interface number 0 [ 207.730786][ T31] elecom 0003:056E:00E6.0022: unknown main item tag 0x0 [ 207.736709][ T312] usb 6-1: config 0 interface 97 has no altsetting 0 [ 207.743836][ T31] elecom 0003:056E:00E6.0022: unknown main item tag 0x0 [ 207.751882][ T312] usb 6-1: New USB device found, idVendor=04e6, idProduct=000a, bcdDevice= 2.00 [ 207.757449][ T31] elecom 0003:056E:00E6.0022: unknown main item tag 0x0 [ 207.766332][ T312] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.774963][ T31] elecom 0003:056E:00E6.0022: hidraw0: USB HID v1.01 Device [HID 056e:00e6] on usb-dummy_hcd.6-1/input0 [ 207.785198][ T312] usb 6-1: Product: syz [ 207.796848][ T312] usb 6-1: Manufacturer: syz [ 207.801517][ T312] usb 6-1: SerialNumber: syz [ 207.807104][ T312] usb 6-1: config 0 descriptor?? [ 207.817353][ T312] usb-storage 6-1:0.97: USB Mass Storage device detected [ 207.907636][ T31] usb 7-1: USB disconnect, device number 15 [ 208.021782][ T332] usb 6-1: USB disconnect, device number 23 [ 208.158525][ T7930] rust_binder: Write failure EFAULT in pid:592 [ 208.282685][ T7943] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2562'. [ 208.299071][ T7943] rust_binder: Error while translating object. [ 208.299096][ T7943] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 208.305309][ T7943] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:603 [ 208.329189][ T36] audit: type=1401 audit(2000000053.710:656): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 208.485069][ T7949] binder: Unknown parameter '' [ 208.501763][ T36] audit: type=1400 audit(2000000053.880:657): avc: denied { bind } for pid=7950 comm="syz.6.2566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 208.570351][ T7951] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2566'. [ 208.580138][ T7951] rust_binder: Error while translating object. [ 208.580177][ T7951] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 208.586391][ T7951] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:245 [ 208.823053][ T7966] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 208.840500][ T7966] rust_binder: Write failure EINVAL in pid:255 [ 208.870736][ T7975] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 209.648851][ T7995] binder: Bad value for 'max' [ 209.693056][ T8000] rust_binder: Write failure EFAULT in pid:337 [ 209.693237][ T8000] rust_binder: 8000: no such ref 3 [ 209.795982][ T8004] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 209.806911][ T8006] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 209.810211][ T8004] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 209.818919][ T8006] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 209.868228][ T8010] netlink: 'syz.6.2585': attribute type 10 has an invalid length. [ 209.877836][ T8010] overlayfs: missing 'workdir' [ 209.909968][ T8015] binder: Bad value for 'stats' [ 210.037164][ T8023] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 210.048378][ T8025] FAULT_INJECTION: forcing a failure. [ 210.048378][ T8025] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 210.069673][ T8025] CPU: 1 UID: 0 PID: 8025 Comm: syz.5.2592 Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 e1c904518e9113895a28c59b25a6002cdacb68bf [ 210.069704][ T8025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 210.069714][ T8025] Call Trace: [ 210.069719][ T8025] [ 210.069724][ T8025] __dump_stack+0x21/0x30 [ 210.069746][ T8025] dump_stack_lvl+0x10c/0x190 [ 210.069762][ T8025] ? __cfi_dump_stack_lvl+0x10/0x10 [ 210.069780][ T8025] ? kasan_save_alloc_info+0x40/0x50 [ 210.069796][ T8025] dump_stack+0x19/0x20 [ 210.069811][ T8025] should_fail_ex+0x3d9/0x530 [ 210.069829][ T8025] should_fail_alloc_page+0xeb/0x110 [ 210.069858][ T8025] __alloc_pages_noprof+0x19d/0x6c0 [ 210.069885][ T8025] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 210.069899][ T8025] ? filemap_get_entry+0x3fb/0x460 [ 210.069914][ T8025] ? _raw_spin_unlock+0x45/0x60 [ 210.069927][ T8025] __folio_alloc_noprof+0x14/0x80 [ 210.069940][ T8025] __filemap_get_folio+0x461/0x7c0 [ 210.069954][ T8025] netfs_perform_write+0x4a0/0x1e00 [ 210.069971][ T8025] ? __cfi_avc_has_perm+0x10/0x10 [ 210.069988][ T8025] ? __cfi_selinux_file_open+0x10/0x10 [ 210.070009][ T8025] ? __cfi_netfs_perform_write+0x10/0x10 [ 210.070029][ T8025] ? __cfi_downgrade_write+0x10/0x10 [ 210.070043][ T8025] ? down_write_killable+0xe9/0x2d0 [ 210.070062][ T8025] ? file_update_time+0xa3/0x220 [ 210.070080][ T8025] netfs_buffered_write_iter_locked+0xa3/0x1c0 [ 210.070106][ T8025] ? netfs_file_write_iter+0x173/0x440 [ 210.070129][ T8025] netfs_file_write_iter+0x189/0x440 [ 210.070146][ T8025] v9fs_file_write_iter+0xac/0xe0 [ 210.070161][ T8025] do_iter_readv_writev+0x4f5/0x6a0 [ 210.070179][ T8025] ? vfs_iter_read+0x5f0/0x5f0 [ 210.070198][ T8025] ? bpf_lsm_file_permission+0xd/0x20 [ 210.070214][ T8025] vfs_writev+0x485/0xcf0 [ 210.070226][ T8025] ? do_writev+0x2d0/0x2d0 [ 210.070237][ T8025] ? vfs_write+0x8ba/0xe80 [ 210.070257][ T8025] __se_sys_pwritev2+0x1ad/0x2b0 [ 210.070275][ T8025] ? __x64_sys_pwritev2+0xf0/0xf0 [ 210.070294][ T8025] __x64_sys_pwritev2+0xc3/0xf0 [ 210.070313][ T8025] x64_sys_call+0x2938/0x2ee0 [ 210.070331][ T8025] do_syscall_64+0x58/0xf0 [ 210.070342][ T8025] ? clear_bhb_loop+0x50/0xa0 [ 210.070358][ T8025] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 210.070373][ T8025] RIP: 0033:0x7fed3398e929 [ 210.070384][ T8025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.070396][ T8025] RSP: 002b:00007fed3480e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 210.070411][ T8025] RAX: ffffffffffffffda RBX: 00007fed33bb5fa0 RCX: 00007fed3398e929 [ 210.070422][ T8025] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000007 [ 210.070431][ T8025] RBP: 00007fed3480e090 R08: 0000000000008000 R09: 0000000000000004 [ 210.070439][ T8025] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 210.070448][ T8025] R13: 0000000000000000 R14: 00007fed33bb5fa0 R15: 00007fff7e6269c8 [ 210.070459][ T8025] [ 210.133054][ T345] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 210.412813][ T8027] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2593'. [ 210.499974][ T8030] rust_binder: Error in use_page_slow: ESRCH [ 210.499993][ T8030] rust_binder: use_range failure ESRCH [ 210.511530][ T8030] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 210.511552][ T8030] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 210.519599][ T345] usb 2-1: Using ep0 maxpacket: 16 [ 210.534621][ T8030] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:365 [ 210.537935][ T345] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.554909][ T345] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.565020][ T345] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 210.565053][ T345] usb 2-1: config 0 interface 0 has no altsetting 0 [ 210.584527][ T345] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 210.593607][ T345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.604041][ T345] usb 2-1: config 0 descriptor?? [ 211.011254][ T345] usbhid 2-1:0.0: can't add hid device: -71 [ 211.017442][ T345] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 211.027295][ T345] usb 2-1: USB disconnect, device number 57 [ 211.299152][ T8049] FAULT_INJECTION: forcing a failure. [ 211.299152][ T8049] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 211.312318][ T8049] CPU: 1 UID: 0 PID: 8049 Comm: syz.6.2601 Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 e1c904518e9113895a28c59b25a6002cdacb68bf [ 211.312353][ T8049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 211.312367][ T8049] Call Trace: [ 211.312372][ T8049] [ 211.312379][ T8049] __dump_stack+0x21/0x30 [ 211.312400][ T8049] dump_stack_lvl+0x10c/0x190 [ 211.312418][ T8049] ? __cfi_dump_stack_lvl+0x10/0x10 [ 211.312435][ T8049] ? xas_nomem+0x71/0x2d0 [ 211.312452][ T8049] dump_stack+0x19/0x20 [ 211.312468][ T8049] should_fail_ex+0x3d9/0x530 [ 211.312488][ T8049] should_fail+0xf/0x20 [ 211.312504][ T8049] should_fail_usercopy+0x1e/0x30 [ 211.312523][ T8049] copy_page_from_iter_atomic+0x346/0x1730 [ 211.312547][ T8049] ? __cfi_copy_page_from_iter_atomic+0x10/0x10 [ 211.312571][ T8049] ? zero_user_segment+0x267/0x2e0 [ 211.312589][ T8049] netfs_perform_write+0x952/0x1e00 [ 211.312610][ T8049] ? __cfi_selinux_file_open+0x10/0x10 [ 211.312635][ T8049] ? __cfi_netfs_perform_write+0x10/0x10 [ 211.312658][ T8049] ? __cfi_downgrade_write+0x10/0x10 [ 211.312674][ T8049] ? down_write_killable+0xe9/0x2d0 [ 211.312695][ T8049] ? file_update_time+0xa3/0x220 [ 211.312711][ T8049] netfs_buffered_write_iter_locked+0xa3/0x1c0 [ 211.312731][ T8049] ? netfs_file_write_iter+0x173/0x440 [ 211.312749][ T8049] netfs_file_write_iter+0x189/0x440 [ 211.312767][ T8049] v9fs_file_write_iter+0xac/0xe0 [ 211.312783][ T8049] do_iter_readv_writev+0x4f5/0x6a0 [ 211.312804][ T8049] ? vfs_iter_read+0x5f0/0x5f0 [ 211.312825][ T8049] ? bpf_lsm_file_permission+0xd/0x20 [ 211.312843][ T8049] vfs_writev+0x485/0xcf0 [ 211.312856][ T8049] ? do_writev+0x2d0/0x2d0 [ 211.312869][ T8049] ? vfs_write+0x8ba/0xe80 [ 211.312891][ T8049] __se_sys_pwritev2+0x1ad/0x2b0 [ 211.312912][ T8049] ? __x64_sys_pwritev2+0xf0/0xf0 [ 211.312935][ T8049] __x64_sys_pwritev2+0xc3/0xf0 [ 211.312956][ T8049] x64_sys_call+0x2938/0x2ee0 [ 211.312980][ T8049] do_syscall_64+0x58/0xf0 [ 211.312994][ T8049] ? clear_bhb_loop+0x50/0xa0 [ 211.313013][ T8049] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 211.313030][ T8049] RIP: 0033:0x7fc71018e929 [ 211.313042][ T8049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.313062][ T8049] RSP: 002b:00007fc7110c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 211.313079][ T8049] RAX: ffffffffffffffda RBX: 00007fc7103b5fa0 RCX: 00007fc71018e929 [ 211.313091][ T8049] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000007 [ 211.313102][ T8049] RBP: 00007fc7110c8090 R08: 0000000000008000 R09: 0000000000000004 [ 211.313123][ T8049] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 211.313132][ T8049] R13: 0000000000000000 R14: 00007fc7103b5fa0 R15: 00007ffc05af5c98 [ 211.313144][ T8049] [ 211.560575][ T8058] futex_wake_op: syz.1.2605 tries to shift op by -1; fix this program [ 211.717584][ T8073] 9pnet_fd: Insufficient options for proto=fd [ 211.718695][ T8075] fuseblk: Unknown parameter 'eroup_id' [ 212.043028][ T31] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 212.193013][ T31] usb 7-1: Using ep0 maxpacket: 16 [ 212.199372][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.210424][ T31] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 212.224356][ T31] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 212.239147][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.251291][ T31] usb 7-1: config 0 descriptor?? [ 212.281413][ T8086] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2614'. [ 212.305779][ T8089] FAULT_INJECTION: forcing a failure. [ 212.305779][ T8089] name failslab, interval 1, probability 0, space 0, times 0 [ 212.318456][ T8089] CPU: 0 UID: 0 PID: 8089 Comm: syz.4.2615 Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 e1c904518e9113895a28c59b25a6002cdacb68bf [ 212.318485][ T8089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 212.318497][ T8089] Call Trace: [ 212.318504][ T8089] [ 212.318511][ T8089] __dump_stack+0x21/0x30 [ 212.318535][ T8089] dump_stack_lvl+0x10c/0x190 [ 212.318554][ T8089] ? __cfi_dump_stack_lvl+0x10/0x10 [ 212.318578][ T8089] ? cgroup_rstat_updated+0x132/0x7f0 [ 212.318601][ T8089] dump_stack+0x19/0x20 [ 212.318621][ T8089] should_fail_ex+0x3d9/0x530 [ 212.318641][ T8089] should_failslab+0xac/0x100 [ 212.318661][ T8089] __kmalloc_cache_noprof+0x41/0x3c0 [ 212.318679][ T8089] ? netfs_buffer_make_space+0x139/0x580 [ 212.318700][ T8089] netfs_buffer_make_space+0x139/0x580 [ 212.318725][ T8089] netfs_buffer_append_folio+0x69/0x330 [ 212.318748][ T8089] netfs_write_folio+0x949/0x19b0 [ 212.318776][ T8089] netfs_end_writethrough+0x62/0x2f0 [ 212.318796][ T8089] netfs_perform_write+0x1b2d/0x1e00 [ 212.318815][ T8089] ? __cfi_selinux_file_open+0x10/0x10 [ 212.318837][ T8089] ? __cfi_netfs_perform_write+0x10/0x10 [ 212.318866][ T8089] ? __cfi_downgrade_write+0x10/0x10 [ 212.318886][ T8089] ? down_write_killable+0xe9/0x2d0 [ 212.318912][ T8089] ? file_update_time+0xa3/0x220 [ 212.318929][ T8089] netfs_buffered_write_iter_locked+0xa3/0x1c0 [ 212.318952][ T8089] ? netfs_file_write_iter+0x173/0x440 [ 212.318969][ T8089] netfs_file_write_iter+0x189/0x440 [ 212.318987][ T8089] v9fs_file_write_iter+0xac/0xe0 [ 212.319008][ T8089] do_iter_readv_writev+0x4f5/0x6a0 [ 212.319034][ T8089] ? vfs_iter_read+0x5f0/0x5f0 [ 212.319059][ T8089] ? bpf_lsm_file_permission+0xd/0x20 [ 212.319077][ T8089] vfs_writev+0x485/0xcf0 [ 212.319090][ T8089] ? do_writev+0x2d0/0x2d0 [ 212.319101][ T8089] ? vfs_write+0x8ba/0xe80 [ 212.319121][ T8089] __se_sys_pwritev2+0x1ad/0x2b0 [ 212.319147][ T8089] ? __x64_sys_pwritev2+0xf0/0xf0 [ 212.319175][ T8089] __x64_sys_pwritev2+0xc3/0xf0 [ 212.319201][ T8089] x64_sys_call+0x2938/0x2ee0 [ 212.319221][ T8089] do_syscall_64+0x58/0xf0 [ 212.319233][ T8089] ? clear_bhb_loop+0x50/0xa0 [ 212.319248][ T8089] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 212.319263][ T8089] RIP: 0033:0x7f21aef8e929 [ 212.319275][ T8089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.319294][ T8089] RSP: 002b:00007f21afdcc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 212.319315][ T8089] RAX: ffffffffffffffda RBX: 00007f21af1b5fa0 RCX: 00007f21aef8e929 [ 212.319330][ T8089] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000007 [ 212.319346][ T8089] RBP: 00007f21afdcc090 R08: 0000000000008000 R09: 0000000000000004 [ 212.319358][ T8089] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 212.319367][ T8089] R13: 0000000000000000 R14: 00007f21af1b5fa0 R15: 00007ffe1c757738 [ 212.319378][ T8089] [ 212.319561][ T8089] ------------[ cut here ]------------ [ 212.373007][ T332] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 212.373149][ T8089] WARNING: CPU: 0 PID: 8089 at lib/iov_iter.c:255 _copy_from_iter+0x2b0/0x14b0 [ 212.533017][ T332] usb 6-1: Using ep0 maxpacket: 16 [ 212.536030][ T8089] Modules linked in: [ 212.557238][ T332] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.564091][ T8089] CPU: 0 UID: 0 PID: 8089 Comm: syz.4.2615 Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 e1c904518e9113895a28c59b25a6002cdacb68bf [ 212.572402][ T332] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.580065][ T8089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 212.580081][ T8089] RIP: 0010:_copy_from_iter+0x2b0/0x14b0 [ 212.588395][ T332] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 212.596035][ T8089] Code: 48 3b 84 24 00 01 00 00 0f 85 ef 04 00 00 4c 89 f8 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 c0 f0 e2 fe <0f> 0b 45 31 ff 48 bb 00 00 00 00 00 fc ff df eb 94 e8 aa f0 e2 fe [ 212.604379][ T332] usb 6-1: config 0 interface 0 has no altsetting 0 [ 212.607056][ T8089] RSP: 0018:ffffc9000d89ed00 EFLAGS: 00010293 [ 212.607079][ T8089] RAX: ffffffff82a2b270 RBX: ffff88812ff1b23a RCX: ffff888128dd5f00 [ 212.612576][ T332] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 212.620330][ T8089] RDX: 0000000000000000 RSI: 000000000000000a RDI: ffff888128ebf517 [ 212.629782][ T332] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.634463][ T8089] RBP: ffffc9000d89ee50 R08: ffff888128dd5f00 R09: 0000000000000002 [ 212.640619][ T332] usb 6-1: config 0 descriptor?? [ 212.649203][ T8089] R10: 0000000000000001 R11: 0000000000000000 R12: 1ffff110218f5671 [ 212.649221][ T8089] R13: ffff88812ff1b238 R14: 000000000000000a R15: dffffc0000000000 [ 212.649253][ T8089] FS: 00007f21afdcc6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 212.804550][ T8089] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 212.811155][ T8089] CR2: 0000001b32b5ffff CR3: 0000000133cb8000 CR4: 00000000003526b0 [ 212.819250][ T8089] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 212.827250][ T8089] DR3: 0000000000000001 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 212.835257][ T8089] Call Trace: [ 212.838564][ T8089] [ 212.841532][ T8089] ? p9pdu_writef+0xdb/0x130 [ 212.846155][ T8089] ? __cfi__copy_from_iter+0x10/0x10 [ 212.851484][ T8089] ? p9pdu_vwritef+0x2720/0x2720 [ 212.856477][ T8089] ? radix_tree_node_alloc+0x1af/0x400 [ 212.861969][ T8089] ? check_stack_object+0x82/0x140 [ 212.867122][ T8089] ? __virt_addr_valid+0x2a6/0x380 [ 212.872255][ T8089] ? __check_object_size+0x455/0x620 [ 212.877582][ T8089] p9pdu_vwritef+0x1b2f/0x2720 [ 212.882363][ T8089] ? p9pdu_writef+0xdb/0x130 [ 212.886976][ T8089] ? __cfi_p9pdu_vwritef+0x10/0x10 [ 212.892099][ T8089] ? p9pdu_vwritef+0x2720/0x2720 [ 212.897064][ T8089] ? _raw_spin_lock_irq+0x8d/0x120 [ 212.902188][ T8089] p9_client_prepare_req+0x6b6/0xa10 [ 212.907512][ T8089] ? trace_raw_output_9p_fid_ref+0x190/0x190 [ 212.913535][ T8089] ? kmem_cache_alloc_noprof+0x131/0x3a0 [ 212.919182][ T8089] ? netfs_advance_write+0x36e/0xb10 [ 212.924497][ T8089] ? netfs_write_folio+0xdb7/0x19b0 [ 212.930157][ T8089] ? netfs_end_writethrough+0x62/0x2f0 [ 212.935687][ T8089] ? netfs_perform_write+0x1b2d/0x1e00 [ 212.941173][ T8089] ? netfs_buffered_write_iter_locked+0xa3/0x1c0 [ 212.947552][ T8089] ? vfs_writev+0x485/0xcf0 [ 212.952071][ T8089] ? __se_sys_pwritev2+0x1ad/0x2b0 [ 212.957221][ T8089] ? __x64_sys_pwritev2+0xc3/0xf0 [ 212.962272][ T8089] ? x64_sys_call+0x2938/0x2ee0 [ 212.967159][ T8089] ? do_syscall_64+0x58/0xf0 [ 212.971767][ T8089] p9_client_rpc+0x189/0xb40 [ 212.976432][ T8089] ? p9_fid_create+0x3d0/0x3d0 [ 212.981237][ T8089] ? irqentry_exit+0x4a/0x60 [ 212.985869][ T8089] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 212.991711][ T8089] ? kasan_save_alloc_info+0x40/0x50 [ 212.997030][ T8089] ? __kasan_slab_alloc+0x73/0x90 [ 213.002071][ T8089] p9_client_write+0x33b/0x790 [ 213.006887][ T8089] ? mempool_alloc_slab+0x21/0x30 [ 213.011932][ T8089] ? __cfi_mempool_alloc_slab+0x10/0x10 [ 213.017546][ T8089] ? mempool_alloc_noprof+0x136/0x4a0 [ 213.022949][ T8089] ? __cfi_p9_client_write+0x10/0x10 [ 213.028300][ T8089] ? __kasan_check_write+0x18/0x20 [ 213.033472][ T8089] ? _raw_spin_lock_bh+0x90/0x120 [ 213.038521][ T8089] v9fs_issue_write+0xd8/0x150 [ 213.043319][ T8089] ? __cfi_v9fs_issue_write+0x10/0x10 [ 213.048708][ T8089] ? netfs_advance_write+0xdc/0xb10 [ 213.053941][ T8089] netfs_issue_write+0x114/0x260 [ 213.058904][ T8089] netfs_write_folio+0x10af/0x19b0 [ 213.064069][ T8089] netfs_end_writethrough+0x62/0x2f0 [ 213.069388][ T8089] netfs_perform_write+0x1b2d/0x1e00 [ 213.072134][ T332] usbhid 6-1:0.0: can't add hid device: -71 [ 213.074729][ T8089] ? __cfi_selinux_file_open+0x10/0x10 [ 213.082011][ T332] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 213.086138][ T8089] ? __cfi_netfs_perform_write+0x10/0x10 [ 213.086180][ T8089] ? __cfi_downgrade_write+0x10/0x10 [ 213.104919][ T8089] ? down_write_killable+0xe9/0x2d0 [ 213.110158][ T8089] ? file_update_time+0xa3/0x220 [ 213.115177][ T8089] netfs_buffered_write_iter_locked+0xa3/0x1c0 [ 213.116231][ T332] usb 6-1: USB disconnect, device number 24 [ 213.121357][ T8089] ? netfs_file_write_iter+0x173/0x440 [ 213.121387][ T8089] netfs_file_write_iter+0x189/0x440 [ 213.138061][ T8089] v9fs_file_write_iter+0xac/0xe0 [ 213.143118][ T8089] do_iter_readv_writev+0x4f5/0x6a0 [ 213.148334][ T8089] ? vfs_iter_read+0x5f0/0x5f0 [ 213.153136][ T8089] ? bpf_lsm_file_permission+0xd/0x20 [ 213.158628][ T8089] vfs_writev+0x485/0xcf0 [ 213.163014][ T8089] ? do_writev+0x2d0/0x2d0 [ 213.167441][ T8089] ? vfs_write+0x8ba/0xe80 [ 213.171885][ T8089] __se_sys_pwritev2+0x1ad/0x2b0 [ 213.176886][ T8089] ? __x64_sys_pwritev2+0xf0/0xf0 [ 213.181951][ T8089] __x64_sys_pwritev2+0xc3/0xf0 [ 213.186873][ T8089] x64_sys_call+0x2938/0x2ee0 [ 213.191587][ T8089] do_syscall_64+0x58/0xf0 [ 213.196062][ T8089] ? clear_bhb_loop+0x50/0xa0 [ 213.200767][ T8089] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 213.206866][ T8089] RIP: 0033:0x7f21aef8e929 [ 213.211328][ T8089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.230990][ T8089] RSP: 002b:00007f21afdcc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 213.239475][ T8089] RAX: ffffffffffffffda RBX: 00007f21af1b5fa0 RCX: 00007f21aef8e929 [ 213.247495][ T8089] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000007 [ 213.256031][ T8089] RBP: 00007f21afdcc090 R08: 0000000000008000 R09: 0000000000000004 [ 213.264258][ T8089] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 213.272285][ T8089] R13: 0000000000000000 R14: 00007f21af1b5fa0 R15: 00007ffe1c757738 [ 213.280286][ T8089] [ 213.283334][ T8089] ---[ end trace 0000000000000000 ]--- [ 213.289947][ T12] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI [ 213.302637][ T12] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 213.311038][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G W 6.12.30-syzkaller-ge2bf362ee23b #0 e1c904518e9113895a28c59b25a6002cdacb68bf [ 213.325968][ T12] Tainted: [W]=WARN [ 213.329760][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 213.339805][ T12] Workqueue: events_unbound netfs_write_collection_worker [ 213.346983][ T12] RIP: 0010:netfs_write_collection_worker+0x138b/0x49b0 [ 213.353945][ T12] Code: 1e 0f 87 80 04 00 00 e8 f3 b6 75 ff 48 89 5c 24 48 4c 89 b4 24 b0 00 00 00 4b 8d 5c f7 08 48 89 d8 48 c1 e8 03 48 89 44 24 40 <42> 80 3c 28 00 74 08 48 89 df e8 e6 ae cb ff 48 89 9c 24 a8 00 00 [ 213.373552][ T12] RSP: 0018:ffffc900000c79e0 EFLAGS: 00010202 [ 213.379614][ T12] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff888102652600 [ 213.387587][ T12] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000001f [ 213.395552][ T12] RBP: ffffc900000c7c98 R08: ffff88810b65e353 R09: 1ffff110216cbc6a [ 213.403532][ T12] R10: dffffc0000000000 R11: ffffed10216cbc6b R12: 0000000000000000 [ 213.411504][ T12] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 213.419472][ T12] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 213.428400][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 213.434994][ T12] CR2: 0000001b2fc1cff8 CR3: 0000000128bd8000 CR4: 00000000003526b0 [ 213.443052][ T12] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 213.451013][ T12] DR3: 00000000000072f4 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 213.458975][ T12] Call Trace: [ 213.462251][ T12] [ 213.465186][ T12] ? __cfi_netfs_write_collection_worker+0x10/0x10 [ 213.471705][ T12] ? __switch_to_asm+0x3d/0x70 [ 213.476469][ T12] ? __schedule+0x1463/0x1f10 [ 213.481187][ T12] ? kick_pool+0xb9/0x550 [ 213.485516][ T12] process_scheduled_works+0x7d5/0x1020 [ 213.491068][ T12] worker_thread+0xc58/0x1250 [ 213.495752][ T12] kthread+0x2c7/0x370 [ 213.499828][ T12] ? __cfi_worker_thread+0x10/0x10 [ 213.504933][ T12] ? __cfi_kthread+0x10/0x10 [ 213.509533][ T12] ret_from_fork+0x64/0xa0 [ 213.513973][ T12] ? __cfi_kthread+0x10/0x10 [ 213.518569][ T12] ret_from_fork_asm+0x1a/0x30 [ 213.523329][ T12] [ 213.526341][ T12] Modules linked in: [ 213.530321][ T12] ---[ end trace 0000000000000000 ]--- [ 213.532078][ T36] audit: type=1400 audit(2000000058.910:658): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 213.536515][ T12] RIP: 0010:netfs_write_collection_worker+0x138b/0x49b0 [ 213.559724][ T36] audit: type=1400 audit(2000000058.910:659): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.564765][ T12] Code: 1e 0f 87 80 04 00 00 e8 f3 b6 75 ff 48 89 5c 24 48 4c 89 b4 24 b0 00 00 00 4b 8d 5c f7 08 48 89 d8 48 c1 e8 03 48 89 44 24 40 <42> 80 3c 28 00 74 08 48 89 df e8 e6 ae cb ff 48 89 9c 24 a8 00 00 [ 213.586173][ T36] audit: type=1400 audit(2000000058.910:660): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.605743][ T12] RSP: 0018:ffffc900000c79e0 EFLAGS: 00010202 [ 213.634387][ T36] audit: type=1400 audit(2000000058.910:661): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.634589][ T12] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff888102652600 [ 213.656946][ T36] audit: type=1400 audit(2000000058.910:662): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 213.663041][ T12] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000001f [ 213.683536][ T36] audit: type=1400 audit(2000000058.910:663): avc: denied { append open } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 213.691971][ T12] RBP: ffffc900000c7c98 R08: ffff88810b65e353 R09: 1ffff110216cbc6a [ 213.714610][ T36] audit: type=1400 audit(2000000058.910:664): avc: denied { getattr } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 213.722809][ T12] R10: dffffc0000000000 R11: ffffed10216cbc6b R12: 0000000000000000 [ 213.753178][ T12] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 213.761165][ T12] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 213.770124][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 213.777062][ T12] CR2: 0000001b32b5ffff CR3: 000000010bbc0000 CR4: 00000000003526b0 [ 213.785240][ T12] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 213.793582][ T12] DR3: 00000000000072f4 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 213.801648][ T12] Kernel panic - not syncing: Fatal exception [ 213.808046][ T12] Kernel Offset: disabled [ 213.812369][ T12] Rebooting in 86400 seconds..