last executing test programs: 1m29.630721277s ago: executing program 0 (id=134): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3314) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) setreuid(0xee00, 0xffffffffffffffff) poll(&(0x7f0000000080)=[{r1, 0x27}], 0x1, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x9cab835cfdc52675, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xda6, 0x0, &(0x7f0000000580)="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"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200a82, 0x0) 1m29.427620991s ago: executing program 0 (id=135): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x7) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) splice(r2, &(0x7f0000000080)=0xbc, r1, &(0x7f0000000200)=0x1, 0x0, 0x9) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40106309, 0x3}], 0xef, 0x0, &(0x7f0000000100)="6b3b2a1fa79af4b1e11057898b5a6f1f80d235118af39670eca5b9cd0ee0e32a377c6842f2467911096bab5133c9d11e7fb8afbbd4ceadf3d87337118eb51cbb0ba6eb0761a9e969aeb9e9634db8bfe988f63ccf51393194f2fbb4dd6a6717bb2abfa3bd96108c67b5de2f1ff6746574e02aee93abdd00f414fcecc96ec7419861016e7970c27293b030646bfc05de2a3ccc7dde4fcc0d3fe53a751eebf3ce775ac067bce4b0aa173e139a993806064d1f73712101bda9203242cfdc3364fc70c49dedf4b3c89c23f9c86138aa936c56c81c3c444572032f602279b7cf132385055d406958961105f4a946764f7805"}) socket$inet6_tcp(0xa, 0x1, 0x0) 1m29.353222142s ago: executing program 0 (id=136): socket(0x16, 0x2, 0x100) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r0, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x28011, r3, 0x80000) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x5, 0x11, r3, 0x1000) mmap(&(0x7f0000470000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x20000) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x16) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) 1m29.352516182s ago: executing program 0 (id=137): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000000000000150a0000dfff0000050000000000000066020000000000009da90000000000008e36d60922c7173b965dc1d5e1816e4da3b447496e09ef7cc587d14e566ac01dba087d2ac40719accfa818bbd638bdb5ed9175e07e06cb1440"]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x0, 0xe7) getpeername$packet(r1, 0x0, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000480)='cgroup.freeze\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000240)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00'}}, 0x118) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x802, 0x0) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000500)={0xa, {0x7, 0x0, 0x81}}, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000500)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x1000040c, 0xffff}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp6\x00') preadv(r7, &(0x7f0000000540)=[{&(0x7f0000000340)=""/187, 0xbb}], 0x1, 0x200036, 0x4) dup2(r6, r4) close_range(r6, r6, 0x2) r8 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) 1m26.332248522s ago: executing program 0 (id=165): ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000000)=0x4) r0 = socket$unix(0x1, 0x2, 0x0) getsockname$unix(r0, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000100)={0x8, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r1, 0x4018aee2, &(0x7f00000002c0)=@attr_pmu_filter={0x0, 0x1, 0x1, &(0x7f0000000280)={0x3, 0x6, 0x1}}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r3, 0x0, 0xc9, 0x0, 0x0) r4 = getuid() quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000340)=@nullb, r4, &(0x7f0000000380)) lsetxattr$trusted_overlay_redirect(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x8, 0x0) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000600, r4, &(0x7f0000000480)={0x871, 0x8000, 0x1, 0x6}) fcntl$getflags(r1, 0xb) lstat(&(0x7f0000000540)='./file1\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x1, &(0x7f0000000600)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0x1400}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@uid_gt={'uid>', r5}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}}) io_setup(0x1000, &(0x7f0000000700)=0x0) io_submit(r6, 0x1, &(0x7f00000007c0)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x5, r2, &(0x7f0000000740)="711e706d6293559abccbc86804fd8f98c37c", 0x12, 0x4}]) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000800)) fsetxattr$security_selinux(r2, &(0x7f0000000c00), &(0x7f0000000c40)='system_u:object_r:var_auth_t:s0\x00', 0x20, 0x2) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4010880) lstat(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000e40)=""/229, &(0x7f0000000f40)=0xe5) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000001000)={0xa, &(0x7f0000000f80)=[{0x80, 0x8, 0x1, 0x2}, {0x4, 0x9}, {0x8001, 0x5, 0x8, 0x4}, {0x5, 0x3b, 0x3e, 0x7}, {0x2, 0x7, 0x8, 0x3}, {0x2, 0x3, 0x1, 0x5}, {0xfffe, 0xc, 0x2}, {0xa90, 0x1, 0x32, 0xe6b}, {0x1000, 0xc5, 0xdb, 0x7f}, {0x9, 0xc, 0x2, 0xfffffffc}]}) io_getevents(r6, 0x80000000, 0x9, &(0x7f0000001040)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000001180)) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000011c0), 0x200) ioctl$SNDRV_TIMER_IOCTL_TRIGGER(r7, 0x54a6) mount$bind(&(0x7f0000001200)='./file0\x00', &(0x7f0000001240)='./file0\x00', &(0x7f0000001280), 0x800000, 0x0) 1m26.229140834s ago: executing program 0 (id=167): ptrace(0x10, 0x0) ptrace$cont(0x9, 0x0, 0x0, 0x2) 1m26.197975475s ago: executing program 32 (id=167): ptrace(0x10, 0x0) ptrace$cont(0x9, 0x0, 0x0, 0x2) 3.408985694s ago: executing program 1 (id=1175): r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000100)=0x6e, 0x80000) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000140)={0x0, r1, 0x3, 0x9, 0x29e6c0000000, 0xd}) mount$incfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x20000, &(0x7f00000002c0)={[{@rlog_pages={'rlog_pages', 0x3d, 0xd}}, {@rlog_pages={'rlog_pages', 0x3d, 0x7ff}}], [{@subj_role={'subj_role', 0x3d, './binderfs/binder0\x00'}}]}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0xa) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000240)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000340)=[@increfs, @request_death={0x400c630e, 0x3}], 0x0, 0x0, 0x0}) accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000100)=0x6e, 0x80000) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000140)={0x0, r1, 0x3, 0x9, 0x29e6c0000000, 0xd}) (async) mount$incfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x20000, &(0x7f00000002c0)={[{@rlog_pages={'rlog_pages', 0x3d, 0xd}}, {@rlog_pages={'rlog_pages', 0x3d, 0x7ff}}], [{@subj_role={'subj_role', 0x3d, './binderfs/binder0\x00'}}]}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0xa) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000240)) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000340)=[@increfs, @request_death={0x400c630e, 0x3}], 0x0, 0x0, 0x0}) (async) 3.394394584s ago: executing program 1 (id=1176): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x3, 0x2}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000000c0)=0x220114, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000000c0)=0x220114, 0x4) r2 = eventfd2(0x1, 0x80c01) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000100)={0x1, r2}) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in=@local, @in=@broadcast, 0x4e21, 0x4, 0x4e22, 0x6, 0xa, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {0x169, 0x2, 0xfffffffffffffff9, 0xfffffffffffffffc, 0x0, 0x3, 0x92b7, 0x8}, {0x1ff, 0x800, 0x5, 0x7}, 0x1, 0x6e6bbf, 0x2, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d3, 0x33}, 0x2, @in6=@empty, 0x0, 0x1, 0x3, 0x90, 0x9, 0xa, 0x8000}}, 0xe8) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000240)={0xc021, 0x3}) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000280)=0x1000000, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001340)={0x44, 0x0, &(0x7f00000002c0)=[@increfs={0x40046304, 0x1}, @increfs_done={0x40106308, 0x3}, @clear_death, @acquire_done, @register_looper], 0x1000, 0x0, &(0x7f0000000340)="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"}) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001380)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, 0x10, &(0x7f00000014c0)=[{&(0x7f00000013c0)="4d36dd515910ed79047b1e373d285d6574ff6f136cefa0ce1d30cee2fd3f8fc32cb12f30e955b22d67e54a57207f96cd97d339e1e783e6010650969f64fa759e87662ff2d9f3fdfdb7494c0bcb1e54700342935b410d9b36e5b78607b121688526399d3cec3b042779daa3e6c8c14282ff53140c203e660f3d650175513efe5fc8ecf51eae871b5e9e2c30bd4a7b87993a9a1250599dc79d873721ef29d5ab2243b676e1c446508f1c4db8fe82e2eb0d7c18390973c47610666a2f836666bf935df9adf81d64208337369eed98d6a38f6ecd754035a3a5048d8451c9e3b016735e361b52ffabd4663f73a743a97825dcc3", 0xf1}], 0x1, &(0x7f0000001500)="524a4b7019dd3dfcf4a961f0c3be1b1ae12cf3daf0fdcc13b126b89f643577742446a83be3c0ab41bf81def4be86f95c20fbd9270fef1a64f13a91dc5cf91b2b60e548d9ff1cebf6ba948f841af5bf7e53ec4ba34cafac25fc0c77b631f1153f20fc073f86ecce041634f3aeea2ba2c4ac9afd510b8afb546982dc00951d46fabe8205650fc0b4f34790778efb0dae05244d4d4d524fcf64bfa56e76b6a332d2ddcf3fe33cd5dc8b93eaf53ae50ed459db328bbd8c9a8c304a586c4969d88301a49a", 0xc2, 0x4000}, 0x1) io_setup(0x6, &(0x7f0000001640)) (async) io_setup(0x6, &(0x7f0000001640)=0x0) r5 = eventfd2(0x9, 0x801) io_submit(r4, 0x3, &(0x7f0000001900)=[&(0x7f00000016c0)={0x0, 0x0, 0x0, 0x1, 0x1, r1, &(0x7f0000001680)="a807c84f17f9c594617a05f25272a94ea7f7ceeb4aad5e665355fc65ed43084517dc662e956452", 0x27, 0xc, 0x0, 0x1, r5}, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x5, 0x1, r0, &(0x7f0000001700)="0722322e4625c559b41de42ef2ee5aad93834b252c9901825dbe2af7617ca8f31dfe9792657ab82e20ee873be32dae8e30c5069bacece9ebb067e1348a15284bc7ddf531ec25549de4f1b4cada5d2dd5a5a87d26d0db86883047a1fae004ee37cd404fe2f412174344934bae99d07fa6e6a5c4bf05cb140de1515e42717f3adca7cf76397af9", 0x86, 0x9, 0x0, 0x3, r2}, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x7, 0xf5, r2, &(0x7f0000001800)="ce70a659a7cb950f9f2aa8d089e2dc6763e768d917cc0dcb58738cab7e9bf98c8f124ac944992997328908799c211567a12978fca02936f58151db2c0b98e089ee96c7f48fbd4b76f259b8eb6adb0bca2af6ae2b17e1ef59dba5dde5b341de24b044233c145a3900b55681319654ab8ebee20bf76f6cd5d4e4430900e9784071677a165ab88d3fa2c71d3a53787675090a87", 0x92, 0x9, 0x0, 0x3, r2}]) (async) io_submit(r4, 0x3, &(0x7f0000001900)=[&(0x7f00000016c0)={0x0, 0x0, 0x0, 0x1, 0x1, r1, &(0x7f0000001680)="a807c84f17f9c594617a05f25272a94ea7f7ceeb4aad5e665355fc65ed43084517dc662e956452", 0x27, 0xc, 0x0, 0x1, r5}, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x5, 0x1, r0, &(0x7f0000001700)="0722322e4625c559b41de42ef2ee5aad93834b252c9901825dbe2af7617ca8f31dfe9792657ab82e20ee873be32dae8e30c5069bacece9ebb067e1348a15284bc7ddf531ec25549de4f1b4cada5d2dd5a5a87d26d0db86883047a1fae004ee37cd404fe2f412174344934bae99d07fa6e6a5c4bf05cb140de1515e42717f3adca7cf76397af9", 0x86, 0x9, 0x0, 0x3, r2}, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x7, 0xf5, r2, &(0x7f0000001800)="ce70a659a7cb950f9f2aa8d089e2dc6763e768d917cc0dcb58738cab7e9bf98c8f124ac944992997328908799c211567a12978fca02936f58151db2c0b98e089ee96c7f48fbd4b76f259b8eb6adb0bca2af6ae2b17e1ef59dba5dde5b341de24b044233c145a3900b55681319654ab8ebee20bf76f6cd5d4e4430900e9784071677a165ab88d3fa2c71d3a53787675090a87", 0x92, 0x9, 0x0, 0x3, r2}]) close_range(r0, r0, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000001940)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) (async) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000001940)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r6, 0x8905, &(0x7f0000001980)) (async) ioctl$sock_inet_tcp_SIOCATMARK(r6, 0x8905, &(0x7f0000001980)) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000019c0)=0x4, 0x4) dup3(r2, r0, 0x0) (async) r7 = dup3(r2, r0, 0x0) ioctl$HIDIOCGDEVINFO(r7, 0x801c4803, &(0x7f0000001a00)=""/107) dup3(r2, r1, 0x80000) (async) r8 = dup3(r2, r1, 0x80000) fsetxattr(r8, &(0x7f0000001a80)=@random={'btrfs.', '/dev/vhost-vsock\x00'}, &(0x7f0000001ac0)='/dev/vhost-vsock\x00', 0x11, 0x1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001b00), 0x2, 0x0) (async) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001b00), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r9, 0x4004af61, &(0x7f0000001b40)=0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000001b80)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000001bc0)={0x1fe, 0x4, 0x4, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000001bc0)={0x1fe, 0x4, 0x4, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 3.143258248s ago: executing program 1 (id=1178): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000000)={0xc0, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xa8, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0xc0}, 0x1, 0x0, 0x0, 0x880}, 0x0) 3.142410998s ago: executing program 1 (id=1179): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x101040, 0x9, 0x4}, 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000080)=@v1={0x0, @aes256, 0x8, @desc4}) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1}) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x3, 0x80080) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000140)={0x3, 0x1, 0x800, 0x6, 0x2, 0x9}) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) write$tun(r2, &(0x7f0000000180)={@val={0x0, 0x88e7}, @void, @llc={@snap={0xaa, 0xa9, "9b", "51f303", 0x6002, "4440a03abcc2acb40367306a911ce5d36ca3dfca46758b96e41ec3fdd2901e9b23cd0fb1528966bc1edb534d1ecb31ac7383f62545fad6163dfff2b1b01d636b456d833f2c5bd8499404c97095997adf1d0bca38a373c2152829a2041dbc714a1768c4abc2f85c91b6fba708b34cfa423ceacbb5d9e4a398b5cec5cd8f2b24dbedc5dca991dae78e32549abf445913df9d2c3356baef8ed66ebad86ad7173f956099f8ad29d92c2ef38036ac0d00268165bbf257b5c1f4f758ef26be4bd673c3"}}}, 0xcc) r3 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x7262, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x30, 0x9, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0xd58}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1, 0x0, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x7, 0x7, 0x8}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x50, 0x2, 0x3, 0xa0, 0x0, 0x81}, 0xf, &(0x7f0000000300)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0x2, 0xd5e0}, @ptm_cap={0x3}]}, 0x2, [{0x19, &(0x7f0000000340)=@string={0x19, 0x3, "94f6f07cdab4084a2b56273008b0151648bcda2c729d30"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x41e}}]}) syz_usb_control_io$hid(r3, &(0x7f00000005c0)={0x24, &(0x7f0000000400)={0x0, 0xf, 0x59, {0x59, 0x10, "579121027de57b1a11138d64c5f301d1497031a0b579cc269f91315470a25fcd4fd12e6d92a0dcb88659756cfaeef0b595aa6ead4d90adae989ab792144f7cabf26b5942f5c95f096f52727d1119cd4a233acf0992798b"}}, &(0x7f0000000480)={0x0, 0x3, 0x96, @string={0x96, 0x3, "8d984300830b46fa8c1210fffdbf2f44e4aaf32bd4479fdfb1b7880a2809fade41c4775618160d41dfaf3b93d7a6199f1668db7ec841ac5675bdd526e1fc759401674ed68b044170b66cfde1cb259da0502b5a3d4f52a4dc1c9c7eaa628b1afb5845dc36f688419fae247ff7769c0648d6aa10aad179918eb275340a24bfabd86dc5edf773dde99914acee25cc700ed7181f8c99"}}, &(0x7f0000000540)={0x0, 0x22, 0x24, {[@main=@item_4={0x3, 0x0, 0x9, "a721d448"}, @local=@item_4={0x3, 0x2, 0x5, "53420e3a"}, @global=@item_4={0x3, 0x1, 0x3, "c0cf07da"}, @global=@item_4={0x3, 0x1, 0x1, "bce3e70e"}, @local=@item_012={0x0, 0x2, 0xa}, @global=@item_4={0x3, 0x1, 0x2, "6d4c8952"}, @local=@item_4={0x3, 0x2, 0x9, "76ee624d"}, @local=@item_4={0x3, 0x2, 0x1, "9210f2bc"}]}}, &(0x7f0000000580)={0x0, 0x21, 0x9, {0x9, 0x21, 0xf, 0x94, 0x1, {0x22, 0x13a}}}}, &(0x7f0000000800)={0x2c, &(0x7f0000000600)={0x40, 0xd, 0xb8, "1af44ba046ad38fff2365614bc9c3e56d40ea4fd773528242eec2299b43dd98dee12b1217571ba280a3c5a145b71d601c416b122a634c0105d6aeeac68cd498981b7e570dbf7ac77a06eea26bc5d327d05ea8da0ef799d9bac6dd376e6c0c478595446b4ba6eb0cb9a5004eaf60e8f9e6e162fd8af2ffeac418dd00193b200b611e5656f5cec5d7214e418f260ca079b71ddac3b5707990f00ff361ed4fa39175281c0acb28eb00f86fbe4a3098ce207ed30f84710893b72"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000740)={0x20, 0x1, 0x65, "4823a605bf4b4c29a352c7a3637152779fb98c944767a78e18c67c50f4cbc268fbf6245f5fc3ea4fb9ee24f30b963aab9af9fe9e8eadd7add0e9fbba00917b0f0f2f248c7caa25398c035d23639e12c3bf52cd3d5990e4c52eb7e17013d4b6c8c2c1682e70"}, &(0x7f00000007c0)={0x20, 0x3, 0x1, 0x6}}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x680202, 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000880)={0x0, @initdev, @private}, &(0x7f00000008c0)=0xc) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000980)={0x15, 0x76, &(0x7f0000000900)="3b1f6b515abedc26d7a0578fd32b2b1d1878bbf2ab8843897883594333612435085c0275a5c30783beb59284ee7c7cd07c026ce730755ffdf77214076e0fe606774d31ba8aa7d09b1f62f5615afd092ea10a14fbb7ab10baed527c1475000d76f8dec3b1f5e3f0c6d1486b772d707a4b225ba1b73696"}) read$FUSE(r2, &(0x7f00000009c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r2, &(0x7f0000002a00)={0x20, 0x0, r5, {0x64, 0x4, 0x5, 0x1}}, 0x20) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) copy_file_range(r6, &(0x7f0000002a40)=0x3, r1, &(0x7f0000002a80)=0x3, 0x100000001, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000002cc0)={0x24, &(0x7f0000002ac0)={0x40, 0x24, 0xe7, {0xe7, 0x21, "4ba933f3c81169a8fef62a43bf3ea8a9f20b1cad1591e56543275c95dd0c83c91880ecfcc865d5ef42cf3a1ef0b3bce5ad7825eb268dbce3dc1b7937fa211d64766ee572efb66c82665d1cf1e684cb21ccd16d59d5cce6693a4d2c089f6b5541209f095904f0f96b1f5e7ab943f964ed9d8beee52f142b11f2dc673aaf0e67f7d4dfc3a8367ec9e257f85db3a8514697547282a946e95a5867408a89bb05b06c40a95528bcaeccb77daeca21d71d790804a500878ed744b17f6d109d3f5506c00b562a04cb74e54db9b82c3bef1892da15972c5bd60bf9f2a800e7c38f5900b0b5301fd5a1"}}, &(0x7f0000002bc0)={0x0, 0x3, 0x3b, @string={0x3b, 0x3, "71edfaac54c6deedcc77bdf4f685e8f6120ecbc52b52e48b71a5b227f705e951aec899f914483da43a17b8f7c84b1811cae00b81ff11d86239"}}, &(0x7f0000002c40)={0x0, 0x22, 0x20, {[@global=@item_012={0x0, 0x1, 0x9}, @global=@item_4={0x3, 0x1, 0x4, "5fbd818a"}, @main=@item_012={0x2, 0x0, 0x0, "7cdf"}, @global=@item_012={0x2, 0x1, 0x8, '\b6'}, @global=@item_4={0x3, 0x1, 0x5, "af32e732"}, @local=@item_4={0x3, 0x2, 0x8, "4cfc5da4"}, @local=@item_4={0x3, 0x2, 0x3, "f7992c2f"}, @main=@item_4={0x3, 0x0, 0x8, "ed6520e4"}]}}, &(0x7f0000002c80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x6, 0x1, {0x22, 0x6a6}}}}, &(0x7f0000002f80)={0x2c, &(0x7f0000002d00)={0x0, 0x1, 0xf0, "c686891755d061d0b571451463d64b8ba29eb783b9b7fb5887c2c5d9822d34f6562115fd8ee4bba95d30c1932245cd9153c2a1323bee316f145ae471856dcd3eeae2dd9edcf078d17f2d3c64759ec663d560ea9a6b5bd19f0aca53f4c70330ac8b014a7c64e9e3f3cc061ff1e6cac2319c2d4238383d4dc1d2c827a1e77b640cf1ec2e492e4fd566193929ea98d7d06cc3b48d2a53e5ef5e05a3aa081872d0be9f3a46adc119e9e1503e4153d1be470b1aa918d33d987491af42e1c52c08811ab7a063c9ee6ba3b5d976a6701e0b7cc1c172bfb796b1408501ef968ae52660fb05bdbffe021f5ee6beb70a2022b1e966"}, &(0x7f0000002e00)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000002e40)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000002e80)={0x20, 0x1, 0x9c, "8c599bfd61fe033561f67b4c4bcaae3f7c15fc205b55febe0aaffcbd10b069a5f7eb95fba2a87d24d75ad34105be3e6fcabfe43c502929a0d7971198e0d0fa1a19ad55fbf820fb1d462acdc80235b71dc13fc19329c7f93558b95c09e94214e1df6fb8fe1c996722d880692ca1706ed008d5ad139021c0166851036a4674f8a7d5185ca1f9b61e86f605ee0db84033c290fb394cc2394321f7d54edc"}, &(0x7f0000002f40)={0x20, 0x3, 0x1, 0x9}}) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000002fc0), &(0x7f0000003000)=0x30) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000003040)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000030c0)={'erspan0\x00', &(0x7f0000003080)={'syztnl1\x00', r7, 0x20, 0x8, 0x4000, 0x6, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x80, 0x29, 0x0, @loopback, @empty, {[@ra={0x94, 0x4, 0x1}]}}}}}) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_TSC_KHZ(r8, 0xaea3) r9 = openat(0xffffffffffffff9c, &(0x7f0000003100)='./file0\x00', 0x880, 0x100) ioctl$F2FS_IOC_DECOMPRESS_FILE(r9, 0xf517, 0x0) r10 = open_tree(r4, &(0x7f0000003140)='./file0\x00', 0x1101) ioctl$EVIOCSCLOCKID(r10, 0x400445a0, &(0x7f0000003180)=0x6) pread64(r4, &(0x7f00000031c0)=""/11, 0xb, 0x5) openat$kvm(0xffffffffffffff9c, &(0x7f0000003200), 0x8000, 0x0) recvmsg(r6, &(0x7f0000004340)={&(0x7f0000003240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000042c0)=[{&(0x7f00000032c0)=""/4096, 0x1000}], 0x1, &(0x7f0000004300)=""/36, 0x24}, 0x10000) 2.215208044s ago: executing program 3 (id=1182): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="2807bb00c35dae3b315e3ac5f00905d373e75b8dd1db490ac24cfd5f32291fb2ed191ec673dbdbd5cdb47024100136e7eaba88dbb2f40c030c9e49b7de08a64efaa563f1505d71a6839c7a216260e9b4cc19674744ab4a1dc4aef9d48687ee3b1ba184f0b96ffbeb27d0", @ANYRES16=r1, @ANYBLOB="01002dbd7000ffdbdf2501000000100002800c000180080001000700000004000180"], 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x4000004) 2.133271185s ago: executing program 3 (id=1183): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000840)={0x34, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x4000004) (fail_nth: 4) 1.81512642s ago: executing program 2 (id=1185): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000840)={0x34, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x14}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x4000004) 1.785155431s ago: executing program 4 (id=1186): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, r0, 0x0, 0x8, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000040)=ANY=[@ANYBLOB="636f79424c0d56a72269358edd1994c3f9d26e746578743d73797374656d5f752c"]) 1.784020901s ago: executing program 2 (id=1187): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x0, 0xfc}, @clear_death], 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) ioctl$TCXONC(r2, 0x540a, 0x3) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000500)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') r3 = open$dir(&(0x7f00000027c0)='./file1\x00', 0x200283, 0x0) linkat(0xffffffffffffffff, &(0x7f0000002780)='./bus/file0\x00', r3, &(0x7f0000002800)='./file1/file0\x00', 0x1400) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = accept$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f0000000140)=0x6e) sendmmsg(r4, &(0x7f0000002680)=[{{&(0x7f0000000180)=@pptp={0x18, 0x2, {0x2, @remote}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000280)="e03d73f7e34dc5e145a6f149e3ffea2a1c4b65c2a9eb6eda04129238dca3ea838e1e713278ef8b7da2dc20f88ea46360303e80ac74ba8f4acc8126d65077f56c498a077f8bbe3e6871518f433bed65e2", 0x50}], 0x1}}, {{&(0x7f0000000300)=@in6={0xa, 0x4e22, 0xffffec87, @private0, 0x5}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000540)="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", 0xfc}, {&(0x7f0000000640)="ee43e534f2ec09c05591ed9505ebf97c7cdfa8f2dd4730965b68f8e79b753599a993eff040f73a29f3d5a801e7c833f1def4139ec9c5aeeda903659100c914f1622226122a181399206d93abed7a4752aa4ab0dfa546e51c61f2f5382004fb2696af509440d929101407fb40ac4226dc8f86b4d51f24f8443801b0addc9363296537b95efb4db2afe48d060d0055da332ab2859ccec867fae16150bf2db9a5b11e097e2880a44f113a1731762c0e3a53736ed2274b4e85d27b702c39a0634ce3fe", 0xc1}, {&(0x7f0000000740)="5774c3b6018b1abc6a290ff0934e5138648c16842a50c7babfaf8dbd559f3f545f35f14020af1e3802a7092951e98cd45a379aa1e584873c9872767f695e6a89d92da5d357a24a3660dd4baee1e7d28997521c47400106a7244fb87aa2522f1fe74a90ba9ddbf3b62604e68728eccfdd56233c409cb8d6a76afceb02394f32642325b72d0f0c79c2073a51b0d84571718fe0e59435daa62580a3f6441a81c6dbbc404ad3197e4eeaf419366097e87d6e9273ee5d3f9eeec2b93502fd7a661ea39295858edfd140f717287768ce48b1ac74d84e0be51a03905b96869a5cb5c1f535", 0xe1}, {&(0x7f0000000840)="69c77d05364f1cc487953811df6c7e65e57f30b406414dfb2cb16091a0304d0f69139a6e52b259839be16d552ad3690589704ef85d729e6b9d8f94da6430739df2545f1dd3c3775fb89fe61effef5dc9f7fa336e11597d79c346f4516fa02c705d4243f272254e73f97eb87bb70547d75319e73b2700a306d124d7f0a3ded5ede559c0edba5b1965d177271430eaf649f68817ba7ba8648630fe5ddc5baca3fe1fede36e19d7d311901f3ddb7bd80b27ff57e2d86bdafb3ff3be79645d98a13a26226fac10791f7223c374a323edd6a53b1266ea5f2ab3dff487d9be66cd9ce232e89fd58a", 0xe5}, {&(0x7f0000000940)="f28e04e76940832e91446241c12b19da8af45bdbc487716e7979c6f00ba2e830e40d95673b1bce32d85fff9d0a3176b373d72979eb087d936de0c0ddf62c1ddc81e08680b6997585111ac17601b5dcbfbb544068a2dc824d938f7d4e4d38a6c91e222b62a3cb2a54fe43138cd77875956936c866c34f0198e129715f7d4badf1e7956d3fa0f573a8e0897ce355be094cce315f10f07bbc49626ed6526436f03654225d3c7dba62003dad14809d47186f0511cb8749222a16f815c0196184d1b56fbdd2b813f64e8882a62a7be08f573c6ffaa8170820ab62c94a8e42b5b789dd", 0xe0}, {&(0x7f0000000380)="11b67adfe13c2cca93fcc9f4c2c553e25cedb3a774812ec98cee46b1dbccc4652fe1a30e399a09900ad276ef5f2f24f3280d206d933b0b076a7b12dcf21ffc66eabca91ca74820", 0x47}, {&(0x7f0000000a40)="01e703b2abe952a886eee8b02749f4b740920e9cf146bcecda65bd315ba27912f82a98429f8418163b2754575211d89f791daa076c00b440f1e868689620d9e4d3d2037ee018611473b1941c7c494adcf33dfc2ba148a7d341b5e61811dd77a1ca47d9a248270e70ed05ddbb7bf7ce96af42a52e3b868ae3598145b9b06734c403a28dc6e8fdc16cf05755559ccae84414a7d10f", 0x94}], 0x7, &(0x7f00000028c0)=[{0xf0, 0x117, 0x3, "fd94fc630f42594067abcbc5989ca12e0351bb2775601d50f7ff7cb185b54358bd5b02feb6ebef8c67c53bfd1a84ee162ec639ec671346e4fd9dfc98e9443552cde2da2aa0c1dc84a12d277d77a9e2a5877f7e6dff6e0018486dea1de372447752cfb09860c4825ee442cab7ccafc1b3740bc6274e0c3f7e2c2afb1711a81f6a20879676afad8a89bc98a5d1312d6538d91d274787ee58996ab998b993d304b953a89f6248c53cb26062e12e872b7ccc04b6101447547de2a58af31c1a537c53a7b1d4551b34af51d422c6d8eed4a4bea7c8ba28c8dea7e57317f77df2f984"}, {0xb8, 0x10e, 0x9, "14d437ffb46c6acdc0b0f14ba08d974556996829a261b9aa1007d753f31a783fcd4a828b011d20d1e52a6aa3af38cde8483547a9ee5bab7bd1821a3766dbd9995a6d5203eaeb338f127e603a34a5528ca572507db8cc068534d70574b13570faf6b2bcb24bc806083d9fade2b4b72a0d23d451f9573939e2f67a2784088fac7b12b77860992ace557995f8aa173e623f216f944bc878b576395ea8833cc0e7f2ad59c4a3ffefd0"}, {0x0, 0x10d, 0x7ff, "6dba9182bcf92e0e7afc9e952f900c94ec6720b45d7a3054dc2641e12d0fc4579c2d4f90c9cee2efa0eb5994aa78933302d2746b0e42d060fda73532fc59a768a82de32b4fa64e4678a64d78a8c6db4f933c8d1cf1a75489e689c9e271d310198b90f3556de71306bab0efed8b3506a716ab0368c8529cd4964b6805ca99016a53e3ec4862bb211373394fdf7d38c224ac461590a412dcaadb5cb68b630d255b98a63deffb"}], 0x1a8}}, {{&(0x7f0000000cc0)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000d40)="1a70940fc62ca5c49f230fe5e0ac72a4064d056e585aa98280751b2d63cfb761fa66efda6bcb56b13c11d2940e6143a31b11080e150e067e695101cdce57e9683f", 0x41}, {&(0x7f0000000dc0)="cf39cb6909559172a21d766afa23e51a4fce10aaf510e3883e", 0x5f}, {&(0x7f00000011c0)="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", 0x1000}, {&(0x7f0000000e00)="488e3f590d96ede97cbe3cb72e30bb10ae85f56c9192e87eab728628ebd6eeb65d7cee1ed74af4763a6f39a54ee234962af6e693d28fc7ed37ffa00f5979f36d1a47608850003783fbcd5b392cbaa1c4e1c510af7018869d177e186e27b74335fe054538a7f7c407eb9e028314b2902e9fbb23605c8a097449bf0419fff3b04f71803d1ccffc2dba26028e5557f7cbd17ef428486e56930e0c0d2d06db3503224bf541", 0xa3}, {&(0x7f0000002840)="f9169e484411b172cbad79253f88eef58d4cf21b15bf5223d5dd016d9afc331fd9ce00000000e584c749462c9c490b8abdfed4d4058bd51106ce84cdd6660d7f5da019540e0d14f2dbc89919b2efe46bbca0e36fe0dc8f89d85a9a1b0215de182d9ec6d96a0e6dd02788a5cf2e33c9b7", 0x70}, {&(0x7f0000000f40)="bbf06e5f9b0d5e042dbf69e4b8a3f528f77a3147f2ce14cdbbbfe077164c629ccb621bb29a10a76d477e2de9627414d6aa77c6f48e667f6a67845da7772fa598d7eab92eee1c7e618fa1d4cda0bbfe10679a4dd0167d5deef4de1575868a2547505467", 0x63}], 0x6, &(0x7f00000021c0)=[{0xf8, 0x107, 0x4, "0492ce6c846ad0681136041693b71c100aafb49155ba55cf58f32fc8398079631b4e7e0094479fb83a12de3a161687c8393b36d6528443aaad62188274afd83cb0f6505e2254b47f63c93e9b10e1888025db59ddff507801a51aa2a8d61abf50123e4488b4088c2c44cf012e4aca01ebfc807cdfb828e10c0bab571d7b4c48731d5c07118e35777b89c24478e3fab794b1096cea33ac6e3034aa87088020d3751dcbd9c69c9d4b28d0a45027a7215e00ec7f336ae1680db06fae46934b1ff8b274098a9a53db3e7f5176704a677368e96e09fad4edb3c550452d8100ef056effa66dd7a2aaac58"}, {0x98, 0x118, 0x81, "cb7b880386d9cacdcbd30379431f9a49de6bab81ed22a08c4bfbc6cfb7ba9359bba4840be0c28a2a7231db18a5610ae7378d23168efc1395f3a9ff9128d334d51c1812600de0f25613391c5cbf6f31ff3dc2f087c7be5ff3462230d339993affc5a8e259ce7f577a8d0d911ea54f2208140402dfce599ce67326cb4307be69d25295c2"}, {0x78, 0xff, 0x6, "7a927e006df2be7e770596a18bd06213e95403a94a37cdad972279b1e4e823f2eff1b27cf39bcc7eb511c67ef4a77ba9a0eacd6b2219ff37b2cf85473ab30ef9932645a90127625f92b24fec02689350991472ad76598266548978063a41547d77cbfb755895"}, {0x28, 0x10f, 0x4, "cd73af09b085f5f9a41688714da7e4d34176998f56"}, {0x10, 0x108, 0x3}, {0xa0, 0x119, 0x5, "efc0109c792f8088e82223ee73651f31a1a1d774ef8f1a39d5540b85a530d0e135aea810f9c32004eb99750054ecf568dd9e5e64ac14d7623b850ac4441e732fc32f4617d7cb67a7842f784b6a05836d0e442aa2285404b45ecf59d137c188651ff4a02f5f553d69669a347b70a5e6b4e93b020845f3e23dcc17c1ab1a55d600ebb46fde3cc6b2710c"}, {0x18, 0x108, 0x7fffffff, '2\n'}, {0x48, 0x120, 0x4, "8bd94c4e27b50dd2ba7c0efe975f20c49a612749ea29ff1cc7df37832f9aec4bc068aa776aa68d3f0681775a577986f5c9dc6a"}], 0x340}}, {{&(0x7f0000000ec0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha224-asm\x00'}, 0x80, &(0x7f0000001140)=[{&(0x7f00000010c0)="3927183e22dea740c56d8c4d8d0211e8134e30d59fbf2d926a3fdd9af16328f90b832a54759be87434a0e72020a70fd61a5c67bce481ac4015658eb65d5a5e12b2f347ec80749dfbda1fb9c13be017a283475eb6cee706f8e6e5aabe2b8afefed16b25224b083b590df42ff59fe95ccf0332", 0x72}, {&(0x7f0000002500)="81e5e8ce4b567c0f1f85c903932b598179fa415c62fcfaee0597c27876f320ffbd9e896a79481d221b88a87777c67819ee0286a8057b98563921a7822dcc91d4f0", 0x41}, {&(0x7f0000002580)="359ce24d58708c8e70b812c61828ed9fe0ba25e13da53fdf9dae1e574cbc19748b4abf13b08968c233aeee65d19421f6acb3e959e96818bddf3ab11a276b06720cf51847f54efef42f96b3a9d5331431b9dc14a693729a8132ba3e83cce0cfa225ff3e9c7a05797b64e744474d358715d1936612f89d694e88faf550eaf47df3ac9720a5250f39c7302adb6ced3232350f09a43ecfa706f68634bd860fcb5c4194619dda71805c47be9442a5e100cf64366f9a7f3b27782e52f30d456ff7aebe2d26d197765d4b5f1e6b11904c078b189e2c8c2ab72f7e", 0xd7}], 0x3}}], 0x4, 0x28004044) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x0, 0xfc}, @clear_death], 0x0, 0x0, 0x0}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) (async) ioctl$TCXONC(r2, 0x540a, 0x3) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000500)='./file1/file0\x00', 0x0, 0x201008, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f0000001180)='./bus\x00') (async) open$dir(&(0x7f00000027c0)='./file1\x00', 0x200283, 0x0) (async) linkat(0xffffffffffffffff, &(0x7f0000002780)='./bus/file0\x00', r3, &(0x7f0000002800)='./file1/file0\x00', 0x1400) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) accept$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f0000000140)=0x6e) (async) sendmmsg(r4, &(0x7f0000002680)=[{{&(0x7f0000000180)=@pptp={0x18, 0x2, {0x2, @remote}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000280)="e03d73f7e34dc5e145a6f149e3ffea2a1c4b65c2a9eb6eda04129238dca3ea838e1e713278ef8b7da2dc20f88ea46360303e80ac74ba8f4acc8126d65077f56c498a077f8bbe3e6871518f433bed65e2", 0x50}], 0x1}}, {{&(0x7f0000000300)=@in6={0xa, 0x4e22, 0xffffec87, @private0, 0x5}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000540)="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", 0xfc}, {&(0x7f0000000640)="ee43e534f2ec09c05591ed9505ebf97c7cdfa8f2dd4730965b68f8e79b753599a993eff040f73a29f3d5a801e7c833f1def4139ec9c5aeeda903659100c914f1622226122a181399206d93abed7a4752aa4ab0dfa546e51c61f2f5382004fb2696af509440d929101407fb40ac4226dc8f86b4d51f24f8443801b0addc9363296537b95efb4db2afe48d060d0055da332ab2859ccec867fae16150bf2db9a5b11e097e2880a44f113a1731762c0e3a53736ed2274b4e85d27b702c39a0634ce3fe", 0xc1}, {&(0x7f0000000740)="5774c3b6018b1abc6a290ff0934e5138648c16842a50c7babfaf8dbd559f3f545f35f14020af1e3802a7092951e98cd45a379aa1e584873c9872767f695e6a89d92da5d357a24a3660dd4baee1e7d28997521c47400106a7244fb87aa2522f1fe74a90ba9ddbf3b62604e68728eccfdd56233c409cb8d6a76afceb02394f32642325b72d0f0c79c2073a51b0d84571718fe0e59435daa62580a3f6441a81c6dbbc404ad3197e4eeaf419366097e87d6e9273ee5d3f9eeec2b93502fd7a661ea39295858edfd140f717287768ce48b1ac74d84e0be51a03905b96869a5cb5c1f535", 0xe1}, {&(0x7f0000000840)="69c77d05364f1cc487953811df6c7e65e57f30b406414dfb2cb16091a0304d0f69139a6e52b259839be16d552ad3690589704ef85d729e6b9d8f94da6430739df2545f1dd3c3775fb89fe61effef5dc9f7fa336e11597d79c346f4516fa02c705d4243f272254e73f97eb87bb70547d75319e73b2700a306d124d7f0a3ded5ede559c0edba5b1965d177271430eaf649f68817ba7ba8648630fe5ddc5baca3fe1fede36e19d7d311901f3ddb7bd80b27ff57e2d86bdafb3ff3be79645d98a13a26226fac10791f7223c374a323edd6a53b1266ea5f2ab3dff487d9be66cd9ce232e89fd58a", 0xe5}, {&(0x7f0000000940)="f28e04e76940832e91446241c12b19da8af45bdbc487716e7979c6f00ba2e830e40d95673b1bce32d85fff9d0a3176b373d72979eb087d936de0c0ddf62c1ddc81e08680b6997585111ac17601b5dcbfbb544068a2dc824d938f7d4e4d38a6c91e222b62a3cb2a54fe43138cd77875956936c866c34f0198e129715f7d4badf1e7956d3fa0f573a8e0897ce355be094cce315f10f07bbc49626ed6526436f03654225d3c7dba62003dad14809d47186f0511cb8749222a16f815c0196184d1b56fbdd2b813f64e8882a62a7be08f573c6ffaa8170820ab62c94a8e42b5b789dd", 0xe0}, {&(0x7f0000000380)="11b67adfe13c2cca93fcc9f4c2c553e25cedb3a774812ec98cee46b1dbccc4652fe1a30e399a09900ad276ef5f2f24f3280d206d933b0b076a7b12dcf21ffc66eabca91ca74820", 0x47}, {&(0x7f0000000a40)="01e703b2abe952a886eee8b02749f4b740920e9cf146bcecda65bd315ba27912f82a98429f8418163b2754575211d89f791daa076c00b440f1e868689620d9e4d3d2037ee018611473b1941c7c494adcf33dfc2ba148a7d341b5e61811dd77a1ca47d9a248270e70ed05ddbb7bf7ce96af42a52e3b868ae3598145b9b06734c403a28dc6e8fdc16cf05755559ccae84414a7d10f", 0x94}], 0x7, &(0x7f00000028c0)=[{0xf0, 0x117, 0x3, "fd94fc630f42594067abcbc5989ca12e0351bb2775601d50f7ff7cb185b54358bd5b02feb6ebef8c67c53bfd1a84ee162ec639ec671346e4fd9dfc98e9443552cde2da2aa0c1dc84a12d277d77a9e2a5877f7e6dff6e0018486dea1de372447752cfb09860c4825ee442cab7ccafc1b3740bc6274e0c3f7e2c2afb1711a81f6a20879676afad8a89bc98a5d1312d6538d91d274787ee58996ab998b993d304b953a89f6248c53cb26062e12e872b7ccc04b6101447547de2a58af31c1a537c53a7b1d4551b34af51d422c6d8eed4a4bea7c8ba28c8dea7e57317f77df2f984"}, {0xb8, 0x10e, 0x9, "14d437ffb46c6acdc0b0f14ba08d974556996829a261b9aa1007d753f31a783fcd4a828b011d20d1e52a6aa3af38cde8483547a9ee5bab7bd1821a3766dbd9995a6d5203eaeb338f127e603a34a5528ca572507db8cc068534d70574b13570faf6b2bcb24bc806083d9fade2b4b72a0d23d451f9573939e2f67a2784088fac7b12b77860992ace557995f8aa173e623f216f944bc878b576395ea8833cc0e7f2ad59c4a3ffefd0"}, {0x0, 0x10d, 0x7ff, "6dba9182bcf92e0e7afc9e952f900c94ec6720b45d7a3054dc2641e12d0fc4579c2d4f90c9cee2efa0eb5994aa78933302d2746b0e42d060fda73532fc59a768a82de32b4fa64e4678a64d78a8c6db4f933c8d1cf1a75489e689c9e271d310198b90f3556de71306bab0efed8b3506a716ab0368c8529cd4964b6805ca99016a53e3ec4862bb211373394fdf7d38c224ac461590a412dcaadb5cb68b630d255b98a63deffb"}], 0x1a8}}, {{&(0x7f0000000cc0)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000d40)="1a70940fc62ca5c49f230fe5e0ac72a4064d056e585aa98280751b2d63cfb761fa66efda6bcb56b13c11d2940e6143a31b11080e150e067e695101cdce57e9683f", 0x41}, {&(0x7f0000000dc0)="cf39cb6909559172a21d766afa23e51a4fce10aaf510e3883e", 0x5f}, {&(0x7f00000011c0)="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", 0x1000}, {&(0x7f0000000e00)="488e3f590d96ede97cbe3cb72e30bb10ae85f56c9192e87eab728628ebd6eeb65d7cee1ed74af4763a6f39a54ee234962af6e693d28fc7ed37ffa00f5979f36d1a47608850003783fbcd5b392cbaa1c4e1c510af7018869d177e186e27b74335fe054538a7f7c407eb9e028314b2902e9fbb23605c8a097449bf0419fff3b04f71803d1ccffc2dba26028e5557f7cbd17ef428486e56930e0c0d2d06db3503224bf541", 0xa3}, {&(0x7f0000002840)="f9169e484411b172cbad79253f88eef58d4cf21b15bf5223d5dd016d9afc331fd9ce00000000e584c749462c9c490b8abdfed4d4058bd51106ce84cdd6660d7f5da019540e0d14f2dbc89919b2efe46bbca0e36fe0dc8f89d85a9a1b0215de182d9ec6d96a0e6dd02788a5cf2e33c9b7", 0x70}, {&(0x7f0000000f40)="bbf06e5f9b0d5e042dbf69e4b8a3f528f77a3147f2ce14cdbbbfe077164c629ccb621bb29a10a76d477e2de9627414d6aa77c6f48e667f6a67845da7772fa598d7eab92eee1c7e618fa1d4cda0bbfe10679a4dd0167d5deef4de1575868a2547505467", 0x63}], 0x6, &(0x7f00000021c0)=[{0xf8, 0x107, 0x4, "0492ce6c846ad0681136041693b71c100aafb49155ba55cf58f32fc8398079631b4e7e0094479fb83a12de3a161687c8393b36d6528443aaad62188274afd83cb0f6505e2254b47f63c93e9b10e1888025db59ddff507801a51aa2a8d61abf50123e4488b4088c2c44cf012e4aca01ebfc807cdfb828e10c0bab571d7b4c48731d5c07118e35777b89c24478e3fab794b1096cea33ac6e3034aa87088020d3751dcbd9c69c9d4b28d0a45027a7215e00ec7f336ae1680db06fae46934b1ff8b274098a9a53db3e7f5176704a677368e96e09fad4edb3c550452d8100ef056effa66dd7a2aaac58"}, {0x98, 0x118, 0x81, "cb7b880386d9cacdcbd30379431f9a49de6bab81ed22a08c4bfbc6cfb7ba9359bba4840be0c28a2a7231db18a5610ae7378d23168efc1395f3a9ff9128d334d51c1812600de0f25613391c5cbf6f31ff3dc2f087c7be5ff3462230d339993affc5a8e259ce7f577a8d0d911ea54f2208140402dfce599ce67326cb4307be69d25295c2"}, {0x78, 0xff, 0x6, "7a927e006df2be7e770596a18bd06213e95403a94a37cdad972279b1e4e823f2eff1b27cf39bcc7eb511c67ef4a77ba9a0eacd6b2219ff37b2cf85473ab30ef9932645a90127625f92b24fec02689350991472ad76598266548978063a41547d77cbfb755895"}, {0x28, 0x10f, 0x4, "cd73af09b085f5f9a41688714da7e4d34176998f56"}, {0x10, 0x108, 0x3}, {0xa0, 0x119, 0x5, "efc0109c792f8088e82223ee73651f31a1a1d774ef8f1a39d5540b85a530d0e135aea810f9c32004eb99750054ecf568dd9e5e64ac14d7623b850ac4441e732fc32f4617d7cb67a7842f784b6a05836d0e442aa2285404b45ecf59d137c188651ff4a02f5f553d69669a347b70a5e6b4e93b020845f3e23dcc17c1ab1a55d600ebb46fde3cc6b2710c"}, {0x18, 0x108, 0x7fffffff, '2\n'}, {0x48, 0x120, 0x4, "8bd94c4e27b50dd2ba7c0efe975f20c49a612749ea29ff1cc7df37832f9aec4bc068aa776aa68d3f0681775a577986f5c9dc6a"}], 0x340}}, {{&(0x7f0000000ec0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha224-asm\x00'}, 0x80, &(0x7f0000001140)=[{&(0x7f00000010c0)="3927183e22dea740c56d8c4d8d0211e8134e30d59fbf2d926a3fdd9af16328f90b832a54759be87434a0e72020a70fd61a5c67bce481ac4015658eb65d5a5e12b2f347ec80749dfbda1fb9c13be017a283475eb6cee706f8e6e5aabe2b8afefed16b25224b083b590df42ff59fe95ccf0332", 0x72}, {&(0x7f0000002500)="81e5e8ce4b567c0f1f85c903932b598179fa415c62fcfaee0597c27876f320ffbd9e896a79481d221b88a87777c67819ee0286a8057b98563921a7822dcc91d4f0", 0x41}, {&(0x7f0000002580)="359ce24d58708c8e70b812c61828ed9fe0ba25e13da53fdf9dae1e574cbc19748b4abf13b08968c233aeee65d19421f6acb3e959e96818bddf3ab11a276b06720cf51847f54efef42f96b3a9d5331431b9dc14a693729a8132ba3e83cce0cfa225ff3e9c7a05797b64e744474d358715d1936612f89d694e88faf550eaf47df3ac9720a5250f39c7302adb6ced3232350f09a43ecfa706f68634bd860fcb5c4194619dda71805c47be9442a5e100cf64366f9a7f3b27782e52f30d456ff7aebe2d26d197765d4b5f1e6b11904c078b189e2c8c2ab72f7e", 0xd7}], 0x3}}], 0x4, 0x28004044) (async) 1.733323292s ago: executing program 3 (id=1188): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r1, &(0x7f00000001c0)=""/243, 0xf3, 0x10103, 0x0, 0x0) 1.732869732s ago: executing program 2 (id=1189): r0 = socket$can_bcm(0x1d, 0x2, 0x2) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYRES32, @ANYBLOB="080005000700ff"], 0x24}}, 0x0) (async) write$rfkill(r2, &(0x7f0000000000)={0x9da, 0x2, 0x1, 0x0, 0x1}, 0x8) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r5}, 0xffffffffffffffd1) (async) splice(r0, &(0x7f0000000000)=0x8, 0xffffffffffffffff, &(0x7f0000000040)=0xc, 0x800000000000800, 0x5) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) (async) r7 = syz_open_procfs$pagemap(0x0, &(0x7f00000002c0)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000240)={0x60, 0x4000000, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x4, 0x0, 0x0, 0x8, 0x40, 0x15, 0x4d}) (async) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000001040)={0xfc, {"a2e3ad09edfc09f91b44090987f70e06d038e7ff7fc6e5539b303d0e8b089b07323068090890e0879b0a0ac6e70a9b3361959b4b9a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b35070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2d8160f94e35f2d2d12913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc1943cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) (async) close(r9) (async) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) (async) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r10, 0xc00c620f, 0x0) (async) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000300)=ANY=[@ANYBLOB="080000000000000001800000000000000100000000000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28]) (async) r11 = gettid() fcntl$setown(r6, 0x8, r11) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r12 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r12, &(0x7f0000000080)={0x80000002}) (async) r13 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000200), 0x301201, 0x0) ioctl$BLKBSZSET(r13, 0x40081271, &(0x7f00000001c0)) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 1.732592952s ago: executing program 4 (id=1190): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0xb, 0x1000, 0x4, 0xffffffffffffffff, 0x1}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x4800, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x80040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000500)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r5, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000000000843fdf6010020000000000004d52f71c860dc6ce78e19f7e90cfcb946a0758b9353518342b60e67932b9551522b1d1aaaf64dcf8582c221fde2143c8fe39b4aafbeebad718336af2f38e6981"]) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x6, 0xfffffffffffffffd, 0x2bf9, 0x1, 0x2, 0x0, 0x400, 0x5, 0x0, 0x6, 0x2, 0x0, 0x2, 0x6, 0x0, 0x4], 0x2000, 0x2c0242}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000eeff97000040"]) 1.725187362s ago: executing program 2 (id=1191): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902"], 0x0) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x4, 0x0, 0x80}}}}}]}}]}}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000840)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x4000004) 924.227115ms ago: executing program 3 (id=1192): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = add_key$user(&(0x7f0000000040), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000100)="389d82", 0x3, 0xffffffffffffffff) keyctl$read(0xb, r1, &(0x7f0000000280)=""/130, 0x82) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000063c0)=""/1024, 0x400) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0) 865.333436ms ago: executing program 3 (id=1193): r0 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r0, r0, 0x80000) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000840)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1400}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x4000004) 864.556776ms ago: executing program 3 (id=1194): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x1000)=nil, 0x1000, &(0x7f0000000000)='/dev/net/tun\x00') r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040c50f80b000000000000109022400010000000009040000010300000009210000000300090581030000000000cffff0030ee2593636dd11713e508b3dfccc0a59d4b3b0c3f7d640b49a550c4c1c28fd6c00f9efdc8994850ef76161074cdee3240269c4"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x161283, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a40100c3"], 0x0}, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) unshare(0x28000600) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), r7) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000000), 0x4) sendmsg$TIPC_CMD_GET_NETID(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r8, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040080) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f0000000100)=0x18, 0x4) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r10, 0x400448df, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000000e3ff000100c0"]) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r7) r11 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x22201, 0x0) write$UHID_INPUT(r11, &(0x7f0000000040)={0x8, {"725ea20fcad57cf5a67e19c14bc3a1c4bc047bee70b4ad22e046bff7e159a7119881d23305f8d35bee3444e4ea783d44794d1f56accd4fb02cf63b52da3032c9f53175e2e38ddb7df0fb7f3125fb76b26cee660f3862842bf61f2e003c661b61d8277fbd60c237447da2a4dd64497235d2ee3b48384fb92be687a1b97fb00cf84793ff6e30433e9b6b9cc677a950e80b7dc5aa23b26e2e405713ccde6ab115988305343666143df6c0caf53c2dcdbfa9c4bdadd092c75e761cab6603f2d66b518ecb267d2e90026d2c1d8d84a10a9cb4267dec27cd50bd698ea2f756d272c1c722252370e538f68be9202a512b2c02decdaab75a4c5da563f35f2b2bf36fea24158c52970bd475efc56342c61483a82538d8f650810a5749f55df8e6b90eb8289b525d45696f4c3a8c7c975d03bd2f78023d57ffabe20dac2cbf3ce899644992217ac10bfecf76d931875451da53bb457f7eca6da882e1883a6ba05f3a2e452d09b0d85a4b74c44d740aaa1bdb7f5e5b437ad554cdb4beb4a636ea490d61f813451b1278c86d3776a6cc64ee7f96d705698c3a6e593e9ac6e54c9a56eef63f9212ddeaba6e0fee9470e5895052c0af2308381d449d30b07b55c83d3fc90f0108267f38caee85041bad735a9f6b26a4f898ab83e28a04c46af305e9bbad154bfffdfa016d65db07ebae685ac6c03e35ee29e9e71b96807b4ef14ed212ff5b6edc56366a2197146b3f4973f88c946070c94ae546b3c705bf44bbaa4d5be476f34c551b99333497012559a4196138afefc1f2a9a8cddb4c9dee3877c260d77460336c055762b2e9e4d4a0cb332ff5a422d94113279424afe3299ffe72573b8f3a2ea3228d954225778706532deb23dbf30132859f480ef997a49433028c748290f6dd15aeda4da010ace8ea1bd5c24aa671616471bf46171e646ce11e3f1eb15fcd36df6f1efb35bb8bc2657dc05264a8ab8179ec231df23ae4b39ee6c6b76d22874b87f67d07d4752e1df9a6a1883c44d4f661c77019a8b1eba34f2cda50781feb8b971ab325c8a03007b97c920b9520c8c4a71eb4dc931b5efe7a46c478d5d7b9f35d1f4d2fd3763b18e78b00e0be0433990306fde8f68a88ebaf76eb6300b2fe9570627543c973ec61492fef66812b19c942436683f20090c751faebd3fa7711e7161a8d05d2d7860f63c8ed8dda522edd245fa3bf584cd834ccf6279ee0c8386693aa32699a9ea98ce2c587dbe3b472079a720ea09a6f6de5ff3ae6fadc048e5490cb08b75b3423212b910549a4fb9233341459bd5b4d3d6c25d3b5390bdcc7ec22706f8ebcf14febc133f992daf7de4b014d18a0dcbdf6f662c5b8ee9792b15c59d43897e140aeef5ebac14515c9650220dcc332c5891c640843b403805089ef08da8fde511e58b7083dac71277d8978c60573f1c08f867ca20f6a884b2833a5af628cc4cb278b4487ca988528f9dff110a2bc7ee04fcb045626550fe1c62bb2d2cdf583ed1138fb464fe21107f84baa1853ed79083467f24a04dc04b1802813cbafa8428bddaff82218bb2909e8a0fbce31b00d8020c9d5e175c848fcb6a8644845f7b82b98964b2c598b880fa9121dad46723829de5953da3ea9fece2f0a8da0cda7a6a1c0c811fe607396ea9ef738fc5da655554a6c9be38c6979aad767988b96c743a12fee08a054c9595ce51ddb13b7951e72e5904e5d196e88cc089b00d997903d1864c449234ee894e198c537fba2e2312e85d5e2f2ea2f44d60ca67bb1fb2964427271067fdd05fea9f2b1ee60c720a7fcb58b39d6475b5ed1f4b468e7e401a8ad4b51ebfa6262cf31f6aaad92d27f7ffeb0db2a2a4e8106a7b04466e78ea991f30e6dc5aaf8ae9153b5bc8d7a43e79e34d8b48728219f5a31f384e3c4cc78b61a393c206edd1071257a45d032808c3c5ee9db293ee6909000c2dcfe1b1c618484bc39b060e256864d2f50ac6b462eed42b38346c217bc8b3b0d3e837f228a3bab1540a282c9a42a29e7f94cd0075099a73188190ce9346d0dfc850d528a62792ddb59d063d11943cbd8b58bf82f5520907963bbfec7f3a922944bb08646212fbd1c727213e5f4513d3e0f3573e8372bad854ac4830a49c49970ec5502045a3e6552a70073f734d33f683fdb8f0bb885b27fde96da341711da71dfd45fd056dc984ca04c6ccfd93655af40b6b50084de66a342b4b1b251f962e3530381cb6a60bfada039e4ec9497d00db26542abc16f1a0f7275085efb2fe1dda5c5670a2139bd8d8fbdc5d492c6d8ba6c4ae838be3945a0b5de30d9655b9a5920f432be445864e92e63f4d76cb88ae0b4eda0d89a41d450c08fd7b6f1374d78e1237961c91bfe7baec995a529c48386b756d66d9c927012078ba75fcd56aa51fbc5fc7949dc765629aa31c7133d56adf7543f0398e39af6b03a452b1915fa743dfed1efe780b826c490148a4f025235b2f9f7f87e4a0d176f4cb0bce3c28147ccaf031a8ed9eb75974825f7a0336290a9e9b2a859af88d2ed8b8ddc71dfaaa701cb71574e5ab4a0887feba38e73f6f84cf38cf4efc8c2299afe65db58a53ef0b0194d463e9d432bed660299463392271a4fa664fc98e6948f922413306aa3778863606c1003e28c16f2530e5da42193cb068c88b11eee48c66604213263bb8c23542feae16b85978cb04092a996524406b2c6b13d42083f1458b176dd1368ce469c7c4a698e4f41156b87854745ed0a065b6661fffef4b303d6eb34ff5ab808697c234f23b6cbac337668b7d0f3d0f0212e4589b5a7c5517f6891c258140033ab1271a0871c9fd3a7111d9cb267454a20a944ffdc29343b6d87a7d1158b1090b9321b81342a5f4eb9f21655e70caa7a939cb754b3350a738fa3325965ad2fe89efc731522868ae1a2515ca7203db76033f9fac777dfd3185b8746de4cb10842a9d339ad23ace5349cade3592d95e44e2624018571eb228df070704b5ee0a37e7c1c5300a262eb8d95038a58e770d3e352176e19f1c283c122f0276a1f381601672ad6e2654a6a8f943335de578813fc42d954b4c8480fc74b3d62928c0b79a548877d3112fdf0a879f944450dae201b3389483db9849dc2b71eca82b5292293cf6d66879abc8b8470c8ab7dfbd815245252b4e1886857818a6450cd126b4cf0e454ec89e11a91f4b4733ffd7ae2f4b5204cea0be15b6c5f637fc70ed300e0266d9a0b0d1bdba4e205022cd0969911c8e7909fb814a43d67d96151e3ab925ea63f8f1601302a8b341dc16b4597bb5b273dddff0bf8bc7d3b1ce87d75bd1ab1f55e04e9e1482f0698a8701196e19ee7ba3ba0cbb8f731c354814d6ac71caedcb0fe293e905e5c60bad51668107fc1704d672fc5adaf2b35d81823e0fc379117d4aec46ebd73a6620b400d94b5dd163063f4f31ec5ab2773058dfa0f8d849579c415901f92510b74fc2d4ed7a9c51e3394f4eeeb7ac9f892803a9d0c75b0b025a87e94f658419b10b4b40a2d2727d6bcee995cf517a6890551ea75e9dee1b7643878823c954c0dffe331cbf7f96464af52a3ab062acce95aa64c66ea1c11e3b13b529c96549a319d82cbea040e54c10ae682d3fb0a0b0f8ea8b9f0372c2b4ea17a440ae0c26edf5070de411822d67b8280d48518cba9f67b0b9caf83c35998ee0739ae7e87289890254c39842fdd0265d29fa204c60a7d6b732050412621f22fa1ec5722ffe2577f7d4697a251d3c7296f4db57ef2c669d0f05d0770cdbeafaa0f4adb44e7343a0cd82a75ca0139eff14acea88ce69c47bfbe9286ece067e558da362da14172905b0fb371543c2268e39fe81715907d7498646d9d9a3589699dafb048ee8eddb5862883c5f5f4e5839378c0edade81bc45d32a5dc744c5f3dd823186f3e5a6210189a851f534066f5b3a711cd3605dd5cd54b21945d8305de0af7da21dc1828bc91d39f91acf7cb32fee5c49ad950d838f354a1956db9377654d953e85b95c79693ff70656e32044073f4ccf9ec692bc661dbd52e0f2b8d236c66d4c10ef9e63aea307fdbacfea64d4e0f5324ba60e394f8f3a41348582fbd29d26caab020a1af5f70754c20d7c033ba17318b0f36a420bf58de987b4ee3326e69ff63b6ae1c519eeeb1c94c08881ad6e7ed49e63da3b27529c0a7eb871bebe5504fb889d515a2e0682fa41dce7f4fa0947b02e6987236e5dd5c1d3870eafe19e1c927a874edde2e6e7ad5ae19f7fab604de75f59db9128e9f4b64c12d85fc58423c2fab218f7ed09d403992526290a1cc173735ea82d516a69494add7d6e0b9c937315f881051580299f83e23a13872ffe5c69ca611ba3ccc70ac065ca8f0da7d79bbf31aece8eca85fcebc9590f465ee364900011ecde87d74594350e96879ec76098e38772ba993a7cc28738f3c761012daecdae340e0369669f8bde15888a0abea7854918017c3dea9229d1a3aa3aba667b5bb2f30581961ad784c2662adff22114d7e16f5909d99f7ba52ca65b243ee172f5fa5975d3a9d358da6a077220f956bd00ed634d7c26345d6c88980bd84f2547e9452811600b971ca3fc0aef08ceb9d02c8f0f2b32c74ff6e0c38146e669747196edebdce8c75eba26dc8a10900e0235c2ad8c6eab8141665fa1d774726eac91548684f3c63242c1af938bb6ad7fab979a87bdee5c918e8d0d03fba7fa2e04dc1ddfca9b6c6a0342ec88c3ee82247d455795b98e3c09266a0ebdf3c689b6b27a30edf491b9284d41b1cd368177d5e74a4621237676e9dc89aaa459d108bb9ad0e6c954c76ca28054f2d529a345031eff31597751380c84360c3efe03d4d3b853a518c85d5b8584c635a146f14f79402fd7c52c330c87ed0df7c8c99567af80e7a794478d066cca922487536cc8605fc11159a8fc8dc164a3433f4ef87763450cbb4a3ce277cd6ab9e0685b2532a2ea2741f44b2f28b4cda498b727ac52117fbd4a6e9af4a92c4ef4d523ea67d6dca4df636c07cab8055c2f32b889f88f64ac66000dc4defab5fff9d81e602c797de749f2bea48b86b0741fb9948d84fe6d9e051ecde61bb41e65159bbcf599c49ca89c2aebb2a17319b4f4d25c24343c6983d710e8ce9372e25539326e8377ea5cb1648338cafe65ccb16267dac74352fb5935f263829ddfc024b9f708aff6648bc19351fbeed4f10c36628f165c5991a17cd9504d0d341832cce9f09b4ca5db7092ea0263a782e348715e1f44e795d4a4095041b4a3a41a522c220c9e50586cd848747f1a4ee0b7832f41cb285eb46df61f2d7f4567bc65f450f08158c7d8f3260aca45d34bb920625f948b940285efa92e35ea4509ccc5439c5266fed1f7ae7336579ea9b7a4ce4897f4117b7f1e96c85faad9bce1db749b6e26994a3aaae1e621bd53634b31052f136c82701a486baeb5d08f1ad014871dcd280bb4838643b84dba942de918d2f40555d91cf3dbf3391e4f7a16c8ab68d1c3ebc16c6cc4423eaf4674ad577a14c448b4eb19d2f5e686ee05eb182c9130a89e6105f39174c2fe82e3bdb041df2f6e5d31bdf2b0aa247967ef632c874b3ef44f12eb5304de8e1ee6c47f19cb394d3eaccb97e451c66c8dfac3c7f6f560ab308a231b55d66f7bcbfe4f71753b1a8df6dbc6c6667f6913f7b92f3dc3e1bb9337d82216f4cb93c78ce54076e6969fb8ea2a6d3f7f6c9cbcab89afe30e30974eb5289535c285420f3fc8f60b06880644a241842b209449a73f6aedebe636ce0188dabc7b64d8478ef689710482b96f9ce93ea165d832a20e36e2ecf79055c30e6fe8f3c4dda55ceb55c", 0x1000}}, 0x1006) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000300)=[@acquire={0x40046305, 0x2}, @decrefs, @exit_looper, @release={0x40046306, 0x3}, @acquire_done={0x40106309, 0x1}], 0xfd, 0x0, &(0x7f0000000340)="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"}) 793.953247ms ago: executing program 4 (id=1195): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80c0}, 0xc080) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r2, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000045}, 0x48000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r5, 0x200, 0x70bd25, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40090}, 0x24048840) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r6, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, r5, 0x200, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x64cc}, {0x6, 0x11, 0x9}, {0x8}, {0x5, 0x14, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24000000) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r3, 0x2, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40044}, 0x4014) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000740), r0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, r7, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x104}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x8000) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, r3, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x4}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x4}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x10}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x40}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040084}, 0x4040804) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000940), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000009c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x38, r3, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7ff}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040080}, 0x1) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x80, r7, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1c}, @NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, 'netdevsim'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100000000}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1477287d}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7fffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x94) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000c40), r6) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000d40)={&(0x7f0000000c00), 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r9, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8001}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x804) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x38, r3, 0x321, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x1}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0xec}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) modify_ldt$write2(0x11, &(0x7f0000000e80)={0x6, 0x20000800, 0x2000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r10, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r6) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r6, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x44, r11, 0x208, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}]}, 0x44}, 0x1, 0x0, 0x0, 0x8804}, 0x8804) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001140)={'wpan3\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f0000001180), r1) 776.623558ms ago: executing program 4 (id=1196): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000840)={0x34, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x4000004) 554.577691ms ago: executing program 4 (id=1197): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000840)={0x34, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x4000004) (fail_nth: 5) 553.787421ms ago: executing program 2 (id=1198): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x3000, 0x2}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) r2 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x2000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000fdff8f04"]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 538.827422ms ago: executing program 4 (id=1199): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffc) splice(r2, &(0x7f0000000040)=0x80, r2, &(0x7f0000000180)=0x5, 0x3efc, 0xa) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008e02"]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/uevent_helper', 0x141a82, 0x53) syz_usb_connect$uac1(0x0, 0xa1, &(0x7f0000000340)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f, 0x3, 0x1, 0xb, 0x10, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x2}, [@selector_unit={0x8, 0x24, 0x5, 0x2, 0x79, "f395bb"}, @feature_unit={0xd, 0x24, 0x6, 0x5, 0x5, 0x3, [0x4, 0x2, 0x8], 0x1}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x305, 0x6, 0x9, 0x8, 0x80, 0x4}, @feature_unit={0xf, 0x24, 0x6, 0x6, 0x4, 0x4, [0x8, 0x6, 0x7, 0x9], 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0x4, 0x0, {0x7, 0x25, 0x1, 0x81, 0x4, 0x462}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x7f, 0x1, 0x5, {0x7, 0x25, 0x1, 0x82, 0x80, 0x3}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) write(r4, &(0x7f0000000240)="d62ee8dbbf6ce17d874af5a3a723affe22d13c11b2b132e20a", 0x19) sendto$inet6(r3, 0x0, 0x0, 0x2200c859, &(0x7f0000000000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, 0x1c) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r5, 0x0, 0x1, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=0x1000) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000100)) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB='context=sy\"te']) 308.469166ms ago: executing program 2 (id=1200): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r1, &(0x7f00000001c0)=""/243, 0xf3, 0x10103, 0x0, 0x0) 73.004439ms ago: executing program 1 (id=1201): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xe05, 0x0, &(0x7f0000000580)="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"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) getdents64(r2, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf2501000000000000000741000000030018"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$tipc(0x1e, 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x101ff, 0x0, 0x4000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) 0s ago: executing program 1 (id=1202): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) lseek(r1, 0x1, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0xfffffffffffffffe}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) chdir(&(0x7f0000000100)='./file0\x00') mount$fuse(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x8000, &(0x7f0000000840)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x1000}}) mkdirat(r4, &(0x7f0000000480)='./file0\x00', 0x13c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x51, 0x0, &(0x7f0000000700)="93ca2efc9445b68c079d41dcfff066e61c4d8f1021949c8c75c29113ed78c691e4a88534e71804ab594c9c0cea97e979adb05f81276775d60f54e903eb87a57f7cbe1f97039cb9d611ffa16ca4582a68cd"}) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_ABS_SETUP(r7, 0x401c5504, &(0x7f00000000c0)={0x0, {0x80, 0x3, 0x3, 0x1000007, 0x1000, 0xffffffff}}) openat$cgroup_ro(r6, &(0x7f0000000280)='cpuacct.stat\x00', 0x0, 0x0) write$selinux_load(r5, &(0x7f0000000000)=ANY=[], 0x606c) close_range(r0, r0, 0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1781, 0x898, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7f, 0x90, 0xfe, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x0, 0x4, {0x9, 0x21, 0x8, 0x2, 0x1, {0x22, 0xc0e}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xa4, 0x8, 0xf}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x200, 0x3, 0xe, 0x0, 0x20}, 0x38, &(0x7f0000000380)=ANY=[@ANYBLOB="050f380003141004080eacfb24e7fffab6821e683343c86f680b10010c6900077ef21d05541002bd2639ee9c2250bb2a5e2ff0784bad843a"], 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x80a}}]}) vmsplice(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="784a47c7691e0afffba372eba1ffc31e38d3bcb9be92843da340da059884ea28bf1a426fae74c247f8cc651b3ab89662e7aed51bb22d957408637893f0c99d048946f42a30a66f2c3db85045533f907f4b5c2f0e6aa5a01ae2647792af121fd9b2d03477896c693a6e588dc784b341f3d4461316c89626e10f148c16ec30ee46fb919d75943b0ae33ab22093701ffb7f070bfb5b9e0edba67a25f1ede16fb4c1cbff2a439318a746489eed6efe070b465c27", 0xb2}], 0x1, 0x6) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x0, 0xf}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): T306] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 93.819685][ T2496] rust_binder: Read failure Err(EFAULT) in pid:519 [ 93.825923][ T2496] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 93.832493][ T2496] rust_binder: Read failure Err(EFAULT) in pid:519 [ 93.840603][ T2496] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 93.847209][ T2496] rust_binder: Read failure Err(EFAULT) in pid:519 [ 93.855253][ T2496] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 93.861782][ T2496] rust_binder: Read failure Err(EFAULT) in pid:519 [ 93.870112][ T2496] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 93.876686][ T2496] rust_binder: Read failure Err(EFAULT) in pid:519 [ 93.884770][ T2496] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 93.891336][ T2496] rust_binder: Read failure Err(EFAULT) in pid:519 [ 93.899379][ T2496] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 93.905942][ T2496] rust_binder: Read failure Err(EFAULT) in pid:519 [ 93.914029][ T2496] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 93.920636][ T2496] rust_binder: Read failure Err(EFAULT) in pid:519 [ 93.928671][ T2496] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 93.935239][ T2496] rust_binder: Read failure Err(EFAULT) in pid:519 [ 93.943383][ T2496] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 93.950130][ T2496] rust_binder: Read failure Err(EFAULT) in pid:519 [ 93.958201][ T2496] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 93.964828][ T2496] rust_binder: Read failure Err(EFAULT) in pid:519 [ 93.972894][ T2496] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 93.979469][ T2496] rust_binder: Read failure Err(EFAULT) in pid:519 [ 93.987545][ T2496] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 93.989319][ T306] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 93.994207][ T2496] rust_binder: Read failure Err(EFAULT) in pid:519 [ 94.002258][ T306] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 94.014306][ T2496] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 94.020427][ T306] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 94.032140][ T2496] rust_binder: Read failure Err(EFAULT) in pid:519 [ 94.039645][ T306] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 94.050851][ T2496] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 94.057697][ T306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.066591][ T2496] rust_binder: Read failure Err(EFAULT) in pid:519 [ 94.084576][ T2496] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 94.091176][ T2496] rust_binder: Read failure Err(EFAULT) in pid:519 [ 94.091790][ T2497] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 94.099312][ T2496] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 94.113945][ T2496] rust_binder: Read failure Err(EFAULT) in pid:519 [ 94.122040][ T2496] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 94.128627][ T2496] rust_binder: Read failure Err(EFAULT) in pid:519 [ 94.136666][ T2496] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 94.143387][ T2496] rust_binder: Read failure Err(EFAULT) in pid:519 [ 94.151432][ T2496] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 94.158004][ T2496] rust_binder: Read failure Err(EFAULT) in pid:519 [ 94.166111][ T2496] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 94.172665][ T2496] rust_binder: Read failure Err(EFAULT) in pid:519 [ 94.180713][ T2496] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 94.187293][ T2496] rust_binder: Read failure Err(EFAULT) in pid:519 [ 94.195339][ T2496] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 94.201892][ T2496] rust_binder: Read failure Err(EFAULT) in pid:519 [ 94.209920][ T2496] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 94.216667][ T2496] rust_binder: Read failure Err(EFAULT) in pid:519 [ 94.224760][ T2496] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 94.231302][ T2496] rust_binder: Read failure Err(EFAULT) in pid:519 [ 94.239364][ T2496] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 94.245950][ T2496] rust_binder: Read failure Err(EFAULT) in pid:519 [ 94.253975][ T2496] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 94.260557][ T2496] rust_binder: Read failure Err(EFAULT) in pid:519 [ 94.268766][ T2496] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 94.275346][ T2496] rust_binder: Read failure Err(EFAULT) in pid:519 [ 94.283443][ T2496] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 94.290041][ T2496] rust_binder: Read failure Err(EFAULT) in pid:519 [ 94.298113][ T2496] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 94.304805][ T2496] rust_binder: Read failure Err(EFAULT) in pid:519 [ 94.614550][ T375] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 94.633277][ T10] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 94.805608][ T375] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.815889][ T10] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 94.824045][ T10] usb 4-1: config 0 has no interface number 0 [ 94.837848][ T2528] SELinux: security_context_str_to_sid (sltem_uÝGй ‰:) failed with errno=-22 [ 94.846930][ T375] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 94.859962][ T10] usb 4-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 94.871183][ T2528] SELinux: security_context_str_to_sid (sltem_uÝGй ‰:) failed with errno=-22 [ 94.880238][ T10] usb 4-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 94.891339][ T10] usb 4-1: config 0 interface 230 has no altsetting 0 [ 94.904871][ T375] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 94.913920][ T375] usb 3-1: New USB device strings: Mfr=16, Product=0, SerialNumber=1 [ 94.924986][ T306] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 94.926202][ T375] usb 3-1: Manufacturer: syz [ 94.936820][ T375] usb 3-1: SerialNumber: syz [ 94.936977][ T306] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input13 [ 94.951661][ T10] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 94.961635][ T375] usb 3-1: bad CDC descriptors [ 94.970381][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.988612][ T10] usb 4-1: Product: syz [ 94.992858][ T10] usb 4-1: Manufacturer: syz [ 95.005915][ T10] usb 4-1: SerialNumber: syz [ 95.017905][ T10] usb 4-1: config 0 descriptor?? [ 95.029791][ T2521] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 95.037210][ T2521] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 95.045284][ T10] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 95.067789][ T10] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 95.155652][ T306] usb 3-1: USB disconnect, device number 23 [ 95.976196][ T2558] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 96.268122][ T2563] binder: Unknown parameter 'coyBLV§"i5ŽÝ”ÃùÒntext' [ 96.284729][ T306] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 96.331249][ T2570] input: syz0 as /devices/virtual/input/input14 [ 96.337668][ T2570] input: failed to attach handler leds to device input14, error: -6 [ 96.435936][ T306] usb 3-1: config 0 has no interfaces? [ 96.443957][ T306] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 96.452013][ T2575] FAULT_INJECTION: forcing a failure. [ 96.452013][ T2575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.453938][ T306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 96.466331][ T2575] CPU: 0 UID: 0 PID: 2575 Comm: syz.1.781 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 96.466371][ T2575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 96.466391][ T2575] Call Trace: [ 96.466400][ T2575] [ 96.466409][ T2575] __dump_stack+0x21/0x30 [ 96.466442][ T2575] dump_stack_lvl+0x10c/0x190 [ 96.466472][ T2575] ? __cfi_dump_stack_lvl+0x10/0x10 [ 96.466500][ T2575] ? kstrtoull+0x13b/0x1e0 [ 96.466525][ T2575] dump_stack+0x19/0x20 [ 96.466549][ T2575] should_fail_ex+0x3d9/0x530 [ 96.466576][ T2575] should_fail+0xf/0x20 [ 96.466600][ T2575] should_fail_usercopy+0x1e/0x30 [ 96.466627][ T2575] _copy_from_user+0x22/0xb0 [ 96.466660][ T2575] ___sys_sendmsg+0x159/0x2a0 [ 96.466697][ T2575] ? __sys_sendmsg+0x280/0x280 [ 96.466732][ T2575] ? proc_fail_nth_write+0x17e/0x210 [ 96.466754][ T2575] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 96.466797][ T2575] __x64_sys_sendmsg+0x1eb/0x2c0 [ 96.466817][ T2575] ? fput+0x1a5/0x240 [ 96.466868][ T2575] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 96.466889][ T2575] ? ksys_write+0x1ef/0x250 [ 96.466919][ T2575] ? __kasan_check_read+0x15/0x20 [ 96.466947][ T2575] x64_sys_call+0x2a4c/0x2ee0 [ 96.466977][ T2575] do_syscall_64+0x58/0xf0 [ 96.467006][ T2575] ? clear_bhb_loop+0x35/0x90 [ 96.467041][ T2575] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 96.467075][ T2575] RIP: 0033:0x7f206eb8e929 [ 96.467094][ T2575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.467123][ T2575] RSP: 002b:00007f206f9e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.467149][ T2575] RAX: ffffffffffffffda RBX: 00007f206edb5fa0 RCX: 00007f206eb8e929 [ 96.467168][ T2575] RDX: 0000000004000004 RSI: 0000200000000a80 RDI: 0000000000000003 [ 96.467185][ T2575] RBP: 00007f206f9e6090 R08: 0000000000000000 R09: 0000000000000000 [ 96.467199][ T2575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.467214][ T2575] R13: 0000000000000000 R14: 00007f206edb5fa0 R15: 00007ffecbaf73e8 [ 96.467234][ T2575] [ 96.547437][ T375] usb 5-1: USB disconnect, device number 10 [ 96.550788][ T306] usb 3-1: Product: syz [ 96.550787][ C0] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 96.550807][ T306] usb 3-1: Manufacturer: syz [ 96.550824][ T306] usb 3-1: SerialNumber: syz [ 96.715395][ T306] usb 3-1: config 0 descriptor?? [ 96.854583][ T410] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 96.925098][ T375] usb 3-1: USB disconnect, device number 24 [ 97.004606][ T410] usb 2-1: Using ep0 maxpacket: 16 [ 97.012282][ T410] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 97.021421][ T410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.029454][ T410] usb 2-1: Product: syz [ 97.033656][ T410] usb 2-1: Manufacturer: syz [ 97.038313][ T410] usb 2-1: SerialNumber: syz [ 97.043507][ T410] usb 2-1: config 0 descriptor?? [ 97.049640][ T410] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 97.057478][ T410] usb 2-1: Detected FT232H [ 97.249583][ T2588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.258666][ T2588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.268260][ T2588] input: syz0 as /devices/virtual/input/input15 [ 97.283209][ T2588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.292062][ T2588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.300602][ T2588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.309161][ T2588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.322701][ T410] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 97.331081][ T410] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 97.338692][ T410] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 97.346055][ T410] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 97.355324][ T410] usb 2-1: USB disconnect, device number 13 [ 97.363135][ T410] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 97.372786][ T410] ftdi_sio 2-1:0.0: device disconnected [ 97.459042][ T36] audit: type=1400 audit(1750468322.780:469): avc: denied { getopt } for pid=2594 comm="syz.2.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 97.460025][ T2595] rust_binder: Write failure EFAULT in pid:537 [ 97.478857][ T2596] rust_binder: Write failure EFAULT in pid:537 [ 97.481397][ T2521] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 97.501656][ T36] audit: type=1400 audit(1750468322.820:470): avc: denied { bind } for pid=2519 comm="syz.3.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 97.566662][ T10] ums-usbat 4-1:0.230: probe with driver ums-usbat failed with error -5 [ 97.577654][ T10] usb 4-1: USB disconnect, device number 10 [ 97.584415][ T36] audit: type=1326 audit(1750468322.900:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2589 comm="syz.4.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2878e929 code=0x7fc00000 [ 97.605669][ T2603] FAULT_INJECTION: forcing a failure. [ 97.605669][ T2603] name failslab, interval 1, probability 0, space 0, times 0 [ 97.626375][ T2603] CPU: 0 UID: 0 PID: 2603 Comm: syz.2.790 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 97.626410][ T2603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 97.626424][ T2603] Call Trace: [ 97.626431][ T2603] [ 97.626439][ T2603] __dump_stack+0x21/0x30 [ 97.626468][ T2603] dump_stack_lvl+0x10c/0x190 [ 97.626493][ T2603] ? __cfi_dump_stack_lvl+0x10/0x10 [ 97.626516][ T2603] ? release_sock+0x171/0x1f0 [ 97.626543][ T2603] dump_stack+0x19/0x20 [ 97.626565][ T2603] should_fail_ex+0x3d9/0x530 [ 97.626588][ T2603] should_failslab+0xac/0x100 [ 97.626618][ T2603] kmem_cache_alloc_node_noprof+0x45/0x3b0 [ 97.626643][ T2603] ? __alloc_skb+0x10c/0x370 [ 97.626682][ T2603] __alloc_skb+0x10c/0x370 [ 97.626708][ T2603] netlink_alloc_large_skb+0xf7/0x1b0 [ 97.626735][ T2603] netlink_sendmsg+0x586/0xaf0 [ 97.626766][ T2603] ? __cfi_netlink_sendmsg+0x10/0x10 [ 97.626798][ T2603] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 97.626828][ T2603] ? security_socket_sendmsg+0x33/0xd0 [ 97.626852][ T2603] ? __cfi_netlink_sendmsg+0x10/0x10 [ 97.626902][ T2603] ____sys_sendmsg+0xa15/0xa70 [ 97.626936][ T2603] ? __sys_sendmsg_sock+0x50/0x50 [ 97.626970][ T2603] ? import_iovec+0x81/0xb0 [ 97.626996][ T2603] ___sys_sendmsg+0x220/0x2a0 [ 97.627025][ T2603] ? __sys_sendmsg+0x280/0x280 [ 97.627066][ T2603] ? proc_fail_nth_write+0x17e/0x210 [ 97.627086][ T2603] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 97.627113][ T2603] __x64_sys_sendmsg+0x1eb/0x2c0 [ 97.627132][ T2603] ? fput+0x1a5/0x240 [ 97.627162][ T2603] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 97.627180][ T2603] ? ksys_write+0x1ef/0x250 [ 97.627207][ T2603] ? __kasan_check_read+0x15/0x20 [ 97.627230][ T2603] x64_sys_call+0x2a4c/0x2ee0 [ 97.627257][ T2603] do_syscall_64+0x58/0xf0 [ 97.627284][ T2603] ? clear_bhb_loop+0x35/0x90 [ 97.627316][ T2603] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 97.627346][ T2603] RIP: 0033:0x7ffbf238e929 [ 97.627363][ T2603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.627381][ T2603] RSP: 002b:00007ffbf09f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.627404][ T2603] RAX: ffffffffffffffda RBX: 00007ffbf25b5fa0 RCX: 00007ffbf238e929 [ 97.627420][ T2603] RDX: 0000000004000004 RSI: 0000200000000a80 RDI: 0000000000000003 [ 97.627433][ T2603] RBP: 00007ffbf09f7090 R08: 0000000000000000 R09: 0000000000000000 [ 97.627446][ T2603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.627470][ T2603] R13: 0000000000000000 R14: 00007ffbf25b5fa0 R15: 00007fff19833cc8 [ 97.627487][ T2603] [ 97.969598][ T2612] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 97.969709][ T2612] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:385 [ 97.977900][ T2612] rust_binder: Error while translating object. [ 97.987143][ T2612] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 97.993398][ T2612] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:385 [ 98.017305][ T36] audit: type=1400 audit(1750468323.340:472): avc: denied { read } for pid=2614 comm="syz.4.794" name="usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 98.049666][ T36] audit: type=1400 audit(1750468323.340:473): avc: denied { open } for pid=2614 comm="syz.4.794" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 98.210052][ T2630] rust_binder: Failed to allocate buffer. len:4294966496, is_oneway:false [ 98.210077][ T2630] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 98.210098][ T2630] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:481 [ 98.219740][ T2634] rust_binder: Error in use_page_slow: ESRCH [ 98.231103][ T2630] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 98.252125][ T2634] rust_binder: use_range failure ESRCH [ 98.252150][ T2634] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 98.271507][ T2634] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 98.279738][ T2634] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:612 [ 98.395247][ T2654] rust_binder: Error while translating object. [ 98.404419][ T2654] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 98.410854][ T2654] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:488 [ 98.428016][ T2652] binder: Bad value for 'max' [ 98.491738][ T2664] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.809' sets config #5 [ 98.496443][ T2668] binder: Bad value for 'stats' [ 98.507010][ T2664] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 98.549162][ T2670] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 98.549862][ T2670] rust_binder: Error in use_page_slow: ESRCH [ 98.558440][ T2670] rust_binder: use_range failure ESRCH [ 98.565498][ T2670] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 98.571589][ T2670] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 98.594558][ T2670] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:405 [ 98.604330][ T2681] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 98.620592][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 98.620617][ T36] audit: type=1400 audit(1750468323.940:478): avc: denied { write } for pid=2679 comm="syz.3.816" name="usbmon2" dev="devtmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 98.675492][ T2683] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 98.702971][ T2690] rust_binder: Write failure EFAULT in pid:636 [ 98.720609][ T2698] binder: Unknown parameter '' [ 98.738470][ T2703] bridge0: entered promiscuous mode [ 98.744118][ T36] audit: type=1326 audit(1750468324.060:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2702 comm="syz.3.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef5d8e929 code=0x7ffc0000 [ 98.767666][ T36] audit: type=1326 audit(1750468324.060:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2702 comm="syz.3.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef5d8e929 code=0x7ffc0000 [ 98.788320][ T2705] binder: Unknown parameter 'context00000000000000000000000' [ 98.795485][ T36] audit: type=1326 audit(1750468324.090:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2702 comm="syz.3.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7efef5d8e929 code=0x7ffc0000 [ 98.821673][ T36] audit: type=1326 audit(1750468324.090:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2702 comm="syz.3.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef5d8e929 code=0x7ffc0000 [ 98.823258][ T2702] bridge0: left promiscuous mode [ 98.845013][ T36] audit: type=1326 audit(1750468324.090:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2702 comm="syz.3.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7efef5d8e929 code=0x7ffc0000 [ 98.845047][ T36] audit: type=1326 audit(1750468324.090:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2702 comm="syz.3.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7efef5d8e929 code=0x7ffc0000 [ 98.902592][ T36] audit: type=1326 audit(1750468324.090:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2702 comm="syz.3.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7efef5d8e929 code=0x7ffc0000 [ 98.926071][ T36] audit: type=1326 audit(1750468324.090:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2702 comm="syz.3.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7efef5d8e929 code=0x7ffc0000 [ 98.950696][ T36] audit: type=1326 audit(1750468324.090:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2702 comm="syz.3.823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7efef5d8e929 code=0x7ffc0000 [ 99.094396][ T2721] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.227655][ T2734] FAULT_INJECTION: forcing a failure. [ 99.227655][ T2734] name failslab, interval 1, probability 0, space 0, times 0 [ 99.242565][ T2736] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:518 [ 99.246790][ T2734] CPU: 1 UID: 0 PID: 2734 Comm: syz.2.835 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 99.246823][ T2734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 99.246836][ T2734] Call Trace: [ 99.246842][ T2734] [ 99.246851][ T2734] __dump_stack+0x21/0x30 [ 99.246880][ T2734] dump_stack_lvl+0x10c/0x190 [ 99.246904][ T2734] ? __cfi_dump_stack_lvl+0x10/0x10 [ 99.246929][ T2734] dump_stack+0x19/0x20 [ 99.246951][ T2734] should_fail_ex+0x3d9/0x530 [ 99.246975][ T2734] should_failslab+0xac/0x100 [ 99.247002][ T2734] __kmalloc_noprof+0x69/0x450 [ 99.247025][ T2734] ? genl_family_rcv_msg_attrs_parse+0xc6/0x390 [ 99.247050][ T2734] genl_family_rcv_msg_attrs_parse+0xc6/0x390 [ 99.247076][ T2734] genl_family_rcv_msg_doit+0xcd/0x330 [ 99.247106][ T2734] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 99.247126][ T2734] ? ctrl_dumppolicy_done+0x90/0x90 [ 99.247144][ T2734] ? stack_depot_save_flags+0x38/0x800 [ 99.247166][ T2734] ? __cfi_ethnl_default_doit+0x10/0x10 [ 99.247186][ T2734] ? __cfi_ethnl_default_start+0x10/0x10 [ 99.247208][ T2734] ? radix_tree_lookup+0x250/0x2a0 [ 99.247234][ T2734] genl_rcv_msg+0x609/0x7a0 [ 99.247253][ T2734] ? __cfi_genl_rcv_msg+0x10/0x10 [ 99.247271][ T2734] ? __cfi_ethnl_default_doit+0x10/0x10 [ 99.247294][ T2734] netlink_rcv_skb+0x22b/0x4a0 [ 99.247319][ T2734] ? __cfi_genl_rcv_msg+0x10/0x10 [ 99.247338][ T2734] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 99.247363][ T2734] ? rwsem_read_trylock+0x2b1/0x660 [ 99.247384][ T2734] ? down_read+0x79/0xe0 [ 99.247403][ T2734] ? __cfi_down_read+0x10/0x10 [ 99.247421][ T2734] ? is_vmalloc_addr+0x11/0x40 [ 99.247447][ T2734] genl_rcv+0x2c/0x40 [ 99.247465][ T2734] netlink_unicast+0x8c6/0xa60 [ 99.247493][ T2734] netlink_sendmsg+0x7f0/0xaf0 [ 99.247524][ T2734] ? __cfi_netlink_sendmsg+0x10/0x10 [ 99.247555][ T2734] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 99.247587][ T2734] ? security_socket_sendmsg+0x33/0xd0 [ 99.247612][ T2734] ? __cfi_netlink_sendmsg+0x10/0x10 [ 99.247642][ T2734] ____sys_sendmsg+0xa15/0xa70 [ 99.247675][ T2734] ? __sys_sendmsg_sock+0x50/0x50 [ 99.247707][ T2734] ? import_iovec+0x81/0xb0 [ 99.247737][ T2734] ___sys_sendmsg+0x220/0x2a0 [ 99.247767][ T2734] ? __sys_sendmsg+0x280/0x280 [ 99.247800][ T2734] ? proc_fail_nth_write+0x17e/0x210 [ 99.247820][ T2734] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 99.247847][ T2734] __x64_sys_sendmsg+0x1eb/0x2c0 [ 99.247866][ T2734] ? fput+0x1a5/0x240 [ 99.247897][ T2734] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 99.247916][ T2734] ? ksys_write+0x1ef/0x250 [ 99.247942][ T2734] ? __kasan_check_read+0x15/0x20 [ 99.247966][ T2734] x64_sys_call+0x2a4c/0x2ee0 [ 99.247994][ T2734] do_syscall_64+0x58/0xf0 [ 99.248020][ T2734] ? clear_bhb_loop+0x35/0x90 [ 99.248051][ T2734] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 99.248081][ T2734] RIP: 0033:0x7ffbf238e929 [ 99.248111][ T2734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.248130][ T2734] RSP: 002b:00007ffbf09f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.248152][ T2734] RAX: ffffffffffffffda RBX: 00007ffbf25b5fa0 RCX: 00007ffbf238e929 [ 99.248167][ T2734] RDX: 0000000004000004 RSI: 0000200000000a80 RDI: 0000000000000003 [ 99.248182][ T2734] RBP: 00007ffbf09f7090 R08: 0000000000000000 R09: 0000000000000000 [ 99.248196][ T2734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.248208][ T2734] R13: 0000000000000000 R14: 00007ffbf25b5fa0 R15: 00007fff19833cc8 [ 99.248225][ T2734] [ 99.248538][ T2736] rust_binder: Read failure Err(EFAULT) in pid:518 [ 99.467232][ T2744] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.543562][ T2751] rust_binder: Error while translating object. [ 99.604103][ T2753] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:563 [ 99.611638][ T2751] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 99.623645][ T2757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.634582][ T2751] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:523 [ 99.934653][ T2794] fuse: Bad value for 'fd' [ 100.038587][ T2798] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 100.038618][ T2798] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:657 [ 100.104539][ T410] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 100.140127][ T2805] FAULT_INJECTION: forcing a failure. [ 100.140127][ T2805] name failslab, interval 1, probability 0, space 0, times 0 [ 100.152884][ T2805] CPU: 0 UID: 0 PID: 2805 Comm: syz.1.857 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 100.152910][ T2805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 100.152925][ T2805] Call Trace: [ 100.152932][ T2805] [ 100.152942][ T2805] __dump_stack+0x21/0x30 [ 100.152977][ T2805] dump_stack_lvl+0x10c/0x190 [ 100.152995][ T2805] ? __cfi_dump_stack_lvl+0x10/0x10 [ 100.153015][ T2805] dump_stack+0x19/0x20 [ 100.153031][ T2805] should_fail_ex+0x3d9/0x530 [ 100.153048][ T2805] should_failslab+0xac/0x100 [ 100.153070][ T2805] __kmalloc_noprof+0x69/0x450 [ 100.153087][ T2805] ? ethnl_default_doit+0x20e/0xe20 [ 100.153106][ T2805] ethnl_default_doit+0x20e/0xe20 [ 100.153124][ T2805] ? genl_family_rcv_msg_attrs_parse+0x213/0x390 [ 100.153144][ T2805] genl_family_rcv_msg_doit+0x22f/0x330 [ 100.153161][ T2805] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 100.153179][ T2805] ? radix_tree_lookup+0x250/0x2a0 [ 100.153201][ T2805] genl_rcv_msg+0x609/0x7a0 [ 100.153224][ T2805] ? __cfi_genl_rcv_msg+0x10/0x10 [ 100.153246][ T2805] ? __cfi_ethnl_default_doit+0x10/0x10 [ 100.153270][ T2805] netlink_rcv_skb+0x22b/0x4a0 [ 100.153291][ T2805] ? __cfi_genl_rcv_msg+0x10/0x10 [ 100.153306][ T2805] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 100.153327][ T2805] ? rwsem_read_trylock+0x2b1/0x660 [ 100.153346][ T2805] ? down_read+0x79/0xe0 [ 100.153361][ T2805] ? __cfi_down_read+0x10/0x10 [ 100.153376][ T2805] ? is_vmalloc_addr+0x11/0x40 [ 100.153398][ T2805] genl_rcv+0x2c/0x40 [ 100.153412][ T2805] netlink_unicast+0x8c6/0xa60 [ 100.153433][ T2805] netlink_sendmsg+0x7f0/0xaf0 [ 100.153456][ T2805] ? __cfi_netlink_sendmsg+0x10/0x10 [ 100.153479][ T2805] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 100.153503][ T2805] ? security_socket_sendmsg+0x33/0xd0 [ 100.153521][ T2805] ? __cfi_netlink_sendmsg+0x10/0x10 [ 100.153543][ T2805] ____sys_sendmsg+0xa15/0xa70 [ 100.153567][ T2805] ? __sys_sendmsg_sock+0x50/0x50 [ 100.153593][ T2805] ? import_iovec+0x81/0xb0 [ 100.153618][ T2805] ___sys_sendmsg+0x220/0x2a0 [ 100.153641][ T2805] ? __sys_sendmsg+0x280/0x280 [ 100.153664][ T2805] ? proc_fail_nth_write+0x17e/0x210 [ 100.153678][ T2805] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 100.153698][ T2805] __x64_sys_sendmsg+0x1eb/0x2c0 [ 100.153711][ T2805] ? fput+0x1a5/0x240 [ 100.153733][ T2805] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 100.153746][ T2805] ? ksys_write+0x1ef/0x250 [ 100.153765][ T2805] ? __kasan_check_read+0x15/0x20 [ 100.153782][ T2805] x64_sys_call+0x2a4c/0x2ee0 [ 100.153802][ T2805] do_syscall_64+0x58/0xf0 [ 100.153822][ T2805] ? clear_bhb_loop+0x35/0x90 [ 100.153845][ T2805] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 100.153867][ T2805] RIP: 0033:0x7f206eb8e929 [ 100.153887][ T2805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.153900][ T2805] RSP: 002b:00007f206f9e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.153917][ T2805] RAX: ffffffffffffffda RBX: 00007f206edb5fa0 RCX: 00007f206eb8e929 [ 100.153929][ T2805] RDX: 0000000004000004 RSI: 0000200000000a80 RDI: 0000000000000003 [ 100.153939][ T2805] RBP: 00007f206f9e6090 R08: 0000000000000000 R09: 0000000000000000 [ 100.153949][ T2805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.153959][ T2805] R13: 0000000000000000 R14: 00007f206edb5fa0 R15: 00007ffecbaf73e8 [ 100.153971][ T2805] [ 100.511212][ T2811] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:664 [ 100.564539][ T410] usb 3-1: Using ep0 maxpacket: 32 [ 100.580005][ T410] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 100.588220][ T410] usb 3-1: config 0 has no interface number 0 [ 100.597062][ T410] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 100.606184][ T410] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.614194][ T410] usb 3-1: Product: syz [ 100.618410][ T410] usb 3-1: Manufacturer: syz [ 100.623025][ T410] usb 3-1: SerialNumber: syz [ 100.631302][ T410] usb 3-1: config 0 descriptor?? [ 100.637110][ T410] smsc95xx v2.0.0 [ 100.640789][ T410] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 100.650885][ T410] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 100.698204][ T2819] rust_binder: Error while translating object. [ 100.698236][ T2819] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 100.704591][ T2819] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:549 [ 100.738940][ T2823] rust_binder: Failed to allocate buffer. len:1152, is_oneway:false [ 100.754544][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 100.915160][ T2781] rust_binder: Write failure EINVAL in pid:584 [ 100.919198][ T306] usb 3-1: USB disconnect, device number 25 [ 101.053230][ T2839] FAULT_INJECTION: forcing a failure. [ 101.053230][ T2839] name failslab, interval 1, probability 0, space 0, times 0 [ 101.066194][ T2839] CPU: 1 UID: 0 PID: 2839 Comm: syz.4.868 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 101.066231][ T2839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 101.066245][ T2839] Call Trace: [ 101.066252][ T2839] [ 101.066260][ T2839] __dump_stack+0x21/0x30 [ 101.066290][ T2839] dump_stack_lvl+0x10c/0x190 [ 101.066314][ T2839] ? __cfi_dump_stack_lvl+0x10/0x10 [ 101.066339][ T2839] ? genl_family_rcv_msg_doit+0x294/0x330 [ 101.066364][ T2839] dump_stack+0x19/0x20 [ 101.066387][ T2839] should_fail_ex+0x3d9/0x530 [ 101.066411][ T2839] should_failslab+0xac/0x100 [ 101.066439][ T2839] kmem_cache_alloc_node_noprof+0x45/0x3b0 [ 101.066465][ T2839] ? __alloc_skb+0x10c/0x370 [ 101.066492][ T2839] __alloc_skb+0x10c/0x370 [ 101.066516][ T2839] ? __kasan_check_read+0x15/0x20 [ 101.066540][ T2839] netlink_ack+0x155/0xa50 [ 101.066570][ T2839] netlink_rcv_skb+0x2b2/0x4a0 [ 101.066599][ T2839] ? __cfi_genl_rcv_msg+0x10/0x10 [ 101.066621][ T2839] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 101.066649][ T2839] ? rwsem_read_trylock+0x2b1/0x660 [ 101.066673][ T2839] ? down_read+0x79/0xe0 [ 101.066694][ T2839] ? __cfi_down_read+0x10/0x10 [ 101.066715][ T2839] ? is_vmalloc_addr+0x11/0x40 [ 101.066746][ T2839] genl_rcv+0x2c/0x40 [ 101.066766][ T2839] netlink_unicast+0x8c6/0xa60 [ 101.066795][ T2839] netlink_sendmsg+0x7f0/0xaf0 [ 101.066826][ T2839] ? __cfi_netlink_sendmsg+0x10/0x10 [ 101.066859][ T2839] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 101.066890][ T2839] ? security_socket_sendmsg+0x33/0xd0 [ 101.066916][ T2839] ? __cfi_netlink_sendmsg+0x10/0x10 [ 101.066958][ T2839] ____sys_sendmsg+0xa15/0xa70 [ 101.066990][ T2839] ? __sys_sendmsg_sock+0x50/0x50 [ 101.067023][ T2839] ? import_iovec+0x81/0xb0 [ 101.067053][ T2839] ___sys_sendmsg+0x220/0x2a0 [ 101.067083][ T2839] ? __sys_sendmsg+0x280/0x280 [ 101.067116][ T2839] ? proc_fail_nth_write+0x17e/0x210 [ 101.067136][ T2839] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 101.067164][ T2839] __x64_sys_sendmsg+0x1eb/0x2c0 [ 101.067184][ T2839] ? fput+0x1a5/0x240 [ 101.067215][ T2839] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 101.067234][ T2839] ? ksys_write+0x1ef/0x250 [ 101.067261][ T2839] ? __kasan_check_read+0x15/0x20 [ 101.067285][ T2839] x64_sys_call+0x2a4c/0x2ee0 [ 101.067312][ T2839] do_syscall_64+0x58/0xf0 [ 101.067338][ T2839] ? clear_bhb_loop+0x35/0x90 [ 101.067370][ T2839] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 101.067400][ T2839] RIP: 0033:0x7f9a2878e929 [ 101.067418][ T2839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.067436][ T2839] RSP: 002b:00007f9a296a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.067459][ T2839] RAX: ffffffffffffffda RBX: 00007f9a289b5fa0 RCX: 00007f9a2878e929 [ 101.067475][ T2839] RDX: 0000000004000004 RSI: 0000200000000a80 RDI: 0000000000000003 [ 101.067489][ T2839] RBP: 00007f9a296a0090 R08: 0000000000000000 R09: 0000000000000000 [ 101.067501][ T2839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.067514][ T2839] R13: 0000000000000000 R14: 00007f9a289b5fa0 R15: 00007ffd99baabf8 [ 101.067531][ T2839] [ 101.421751][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.435608][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 101.445354][ T10] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 101.454399][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 101.462553][ T10] usb 2-1: SerialNumber: syz [ 101.533529][ T2847] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.533906][ T2847] rust_binder: Error in use_page_slow: ESRCH [ 101.540553][ T2847] rust_binder: use_range failure ESRCH [ 101.547002][ T2847] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 101.552715][ T2847] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 101.561247][ T2847] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:437 [ 101.587785][ T2849] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.600215][ T2851] binder: Bad value for 'defcontext' [ 101.618079][ T2853] 9pnet_virtio: no channels available for device syz [ 101.625309][ T2853] rust_binder: Write failure EFAULT in pid:441 [ 101.643190][ T2858] __vm_enough_memory: pid: 2858, comm: syz.4.876, bytes: 281474976845824 not enough memory for the allocation [ 101.681699][ T2815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.700856][ T2870] FAULT_INJECTION: forcing a failure. [ 101.700856][ T2870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.714370][ T2870] CPU: 1 UID: 0 PID: 2870 Comm: syz.4.879 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 101.714406][ T2870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 101.714419][ T2870] Call Trace: [ 101.714426][ T2870] [ 101.714435][ T2870] __dump_stack+0x21/0x30 [ 101.714464][ T2870] dump_stack_lvl+0x10c/0x190 [ 101.714498][ T2870] ? __cfi_dump_stack_lvl+0x10/0x10 [ 101.714524][ T2870] ? kstrtoull+0x13b/0x1e0 [ 101.714546][ T2870] dump_stack+0x19/0x20 [ 101.714570][ T2870] should_fail_ex+0x3d9/0x530 [ 101.714593][ T2870] should_fail+0xf/0x20 [ 101.714615][ T2870] should_fail_usercopy+0x1e/0x30 [ 101.714640][ T2870] _copy_from_user+0x22/0xb0 [ 101.714669][ T2870] ___sys_sendmsg+0x159/0x2a0 [ 101.714701][ T2870] ? __sys_sendmsg+0x280/0x280 [ 101.714743][ T2870] ? proc_fail_nth_write+0x17e/0x210 [ 101.714763][ T2870] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 101.714791][ T2870] __x64_sys_sendmsg+0x1eb/0x2c0 [ 101.714809][ T2870] ? fput+0x1a5/0x240 [ 101.714839][ T2870] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 101.714857][ T2870] ? ksys_write+0x1ef/0x250 [ 101.714883][ T2870] ? __kasan_check_read+0x15/0x20 [ 101.714906][ T2870] x64_sys_call+0x2a4c/0x2ee0 [ 101.714932][ T2870] do_syscall_64+0x58/0xf0 [ 101.714959][ T2870] ? clear_bhb_loop+0x35/0x90 [ 101.714990][ T2870] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 101.715020][ T2870] RIP: 0033:0x7f9a2878e929 [ 101.715037][ T2870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.715055][ T2870] RSP: 002b:00007f9a296a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.715078][ T2870] RAX: ffffffffffffffda RBX: 00007f9a289b5fa0 RCX: 00007f9a2878e929 [ 101.715094][ T2870] RDX: 0000000004000004 RSI: 0000200000000a80 RDI: 0000000000000003 [ 101.715108][ T2870] RBP: 00007f9a296a0090 R08: 0000000000000000 R09: 0000000000000000 [ 101.715122][ T2870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.715134][ T2870] R13: 0000000000000000 R14: 00007f9a289b5fa0 R15: 00007ffd99baabf8 [ 101.715152][ T2870] [ 101.720464][ T2815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.938562][ T2815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.947312][ T2815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.965658][ T10] usb 2-1: 0:2 : does not exist [ 101.973622][ T10] usb 2-1: USB disconnect, device number 14 [ 102.009911][ T2887] rust_binder: Write failure EFAULT in pid:593 [ 102.032360][ T2892] FAULT_INJECTION: forcing a failure. [ 102.032360][ T2892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.051792][ T2892] CPU: 0 UID: 0 PID: 2892 Comm: syz.2.886 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 102.051827][ T2892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 102.051841][ T2892] Call Trace: [ 102.051848][ T2892] [ 102.051857][ T2892] __dump_stack+0x21/0x30 [ 102.051886][ T2892] dump_stack_lvl+0x10c/0x190 [ 102.051911][ T2892] ? __cfi_dump_stack_lvl+0x10/0x10 [ 102.051936][ T2892] ? is_bpf_text_address+0x17b/0x1a0 [ 102.051966][ T2892] dump_stack+0x19/0x20 [ 102.051988][ T2892] should_fail_ex+0x3d9/0x530 [ 102.052011][ T2892] should_fail+0xf/0x20 [ 102.052031][ T2892] should_fail_usercopy+0x1e/0x30 [ 102.052055][ T2892] _copy_from_user+0x22/0xb0 [ 102.052081][ T2892] do_ipv6_setsockopt+0x321/0x2ec0 [ 102.052109][ T2892] ? __cfi_do_ipv6_setsockopt+0x10/0x10 [ 102.052134][ T2892] ? kstrtoull+0x13b/0x1e0 [ 102.052155][ T2892] ? avc_has_perm_noaudit+0x268/0x360 [ 102.052176][ T2892] ? __asan_memcpy+0x5a/0x80 [ 102.052199][ T2892] ? avc_has_perm_noaudit+0x286/0x360 [ 102.052221][ T2892] ? avc_has_perm+0x144/0x220 [ 102.052241][ T2892] ? __cfi_avc_has_perm+0x10/0x10 [ 102.052263][ T2892] ? selinux_socket_setsockopt+0x2ea/0x390 [ 102.052288][ T2892] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 102.052313][ T2892] ipv6_setsockopt+0x5d/0x170 [ 102.052339][ T2892] tcp_setsockopt+0xef/0x110 [ 102.052357][ T2892] sock_common_setsockopt+0xb5/0xd0 [ 102.052382][ T2892] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 102.052406][ T2892] do_sock_setsockopt+0x26a/0x400 [ 102.052436][ T2892] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 102.052469][ T2892] __x64_sys_setsockopt+0x1b8/0x250 [ 102.052500][ T2892] x64_sys_call+0x2adc/0x2ee0 [ 102.052527][ T2892] do_syscall_64+0x58/0xf0 [ 102.052553][ T2892] ? clear_bhb_loop+0x35/0x90 [ 102.052584][ T2892] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 102.052613][ T2892] RIP: 0033:0x7ffbf238e929 [ 102.052630][ T2892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.052655][ T2892] RSP: 002b:00007ffbf09f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 102.052678][ T2892] RAX: ffffffffffffffda RBX: 00007ffbf25b5fa0 RCX: 00007ffbf238e929 [ 102.052694][ T2892] RDX: 000000000000002d RSI: 0000000000000029 RDI: 0000000000000003 [ 102.052707][ T2892] RBP: 00007ffbf09f7090 R08: 0000000000000108 R09: 0000000000000000 [ 102.052720][ T2892] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 102.052732][ T2892] R13: 0000000000000000 R14: 00007ffbf25b5fa0 R15: 00007fff19833cc8 [ 102.052749][ T2892] [ 102.054557][ T306] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 102.145696][ T2500] udevd[2500]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 102.294533][ T306] usb 4-1: device descriptor read/64, error -71 [ 102.372542][ T2903] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.373981][ T2903] rust_binder: Error in use_page_slow: ESRCH [ 102.380544][ T2903] rust_binder: use_range failure ESRCH [ 102.386642][ T2903] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 102.392118][ T2903] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 102.400297][ T2903] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:461 [ 102.410167][ T2904] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.430004][ T2908] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.437580][ T2908] rust_binder: Error in use_page_slow: ESRCH [ 102.444096][ T2908] rust_binder: use_range failure ESRCH [ 102.450134][ T2908] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false [ 102.455806][ T2908] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 102.463812][ T2908] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:466 [ 102.483307][ T2911] FAULT_INJECTION: forcing a failure. [ 102.483307][ T2911] name failslab, interval 1, probability 0, space 0, times 0 [ 102.505134][ T2911] CPU: 1 UID: 0 PID: 2911 Comm: syz.4.891 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 102.505159][ T2911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 102.505169][ T2911] Call Trace: [ 102.505176][ T2911] [ 102.505182][ T2911] __dump_stack+0x21/0x30 [ 102.505205][ T2911] dump_stack_lvl+0x10c/0x190 [ 102.505222][ T2911] ? __cfi_dump_stack_lvl+0x10/0x10 [ 102.505240][ T2911] ? release_sock+0x171/0x1f0 [ 102.505260][ T2911] dump_stack+0x19/0x20 [ 102.505277][ T2911] should_fail_ex+0x3d9/0x530 [ 102.505294][ T2911] should_failslab+0xac/0x100 [ 102.505314][ T2911] kmem_cache_alloc_node_noprof+0x45/0x3b0 [ 102.505333][ T2911] ? __alloc_skb+0x10c/0x370 [ 102.505352][ T2911] __alloc_skb+0x10c/0x370 [ 102.505371][ T2911] netlink_alloc_large_skb+0xf7/0x1b0 [ 102.505392][ T2911] netlink_sendmsg+0x586/0xaf0 [ 102.505415][ T2911] ? __cfi_netlink_sendmsg+0x10/0x10 [ 102.505438][ T2911] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 102.505461][ T2911] ? security_socket_sendmsg+0x33/0xd0 [ 102.505479][ T2911] ? __cfi_netlink_sendmsg+0x10/0x10 [ 102.505501][ T2911] ____sys_sendmsg+0xa15/0xa70 [ 102.505525][ T2911] ? __sys_sendmsg_sock+0x50/0x50 [ 102.505549][ T2911] ? import_iovec+0x81/0xb0 [ 102.505571][ T2911] ___sys_sendmsg+0x220/0x2a0 [ 102.505595][ T2911] ? __sys_sendmsg+0x280/0x280 [ 102.505618][ T2911] ? proc_fail_nth_write+0x17e/0x210 [ 102.505641][ T2911] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 102.505662][ T2911] __x64_sys_sendmsg+0x1eb/0x2c0 [ 102.505674][ T2911] ? fput+0x1a5/0x240 [ 102.505696][ T2911] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 102.505709][ T2911] ? ksys_write+0x1ef/0x250 [ 102.505728][ T2911] ? __kasan_check_read+0x15/0x20 [ 102.505745][ T2911] x64_sys_call+0x2a4c/0x2ee0 [ 102.505764][ T2911] do_syscall_64+0x58/0xf0 [ 102.505784][ T2911] ? clear_bhb_loop+0x35/0x90 [ 102.505807][ T2911] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 102.505829][ T2911] RIP: 0033:0x7f9a2878e929 [ 102.505841][ T2911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.505854][ T2911] RSP: 002b:00007f9a296a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.505870][ T2911] RAX: ffffffffffffffda RBX: 00007f9a289b5fa0 RCX: 00007f9a2878e929 [ 102.505883][ T2911] RDX: 0000000004000004 RSI: 0000200000000a80 RDI: 0000000000000003 [ 102.505894][ T2911] RBP: 00007f9a296a0090 R08: 0000000000000000 R09: 0000000000000000 [ 102.505910][ T2911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.505923][ T2911] R13: 0000000000000000 R14: 00007f9a289b5fa0 R15: 00007ffd99baabf8 [ 102.505941][ T2911] [ 102.706705][ T2914] netlink: 1 bytes leftover after parsing attributes in process `syz.1.893'. [ 102.737723][ T2916] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.785225][ T306] usb 4-1: device descriptor read/64, error -71 [ 102.984671][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 103.034593][ T306] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 103.054558][ T410] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 103.135609][ T10] usb 2-1: config 1 has an invalid descriptor of length 68, skipping remainder of the config [ 103.145870][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 103.154870][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 103.169102][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 103.174568][ T306] usb 4-1: device descriptor read/64, error -71 [ 103.178290][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.192512][ T10] usb 2-1: Product: syz [ 103.196764][ T10] usb 2-1: Manufacturer: syz [ 103.201367][ T10] usb 2-1: SerialNumber: syz [ 103.214527][ T410] usb 5-1: Using ep0 maxpacket: 8 [ 103.221366][ T410] usb 5-1: config 1 interface 0 altsetting 75 bulk endpoint 0x82 has invalid maxpacket 8 [ 103.231268][ T410] usb 5-1: config 1 interface 0 altsetting 75 endpoint 0x3 has invalid wMaxPacketSize 0 [ 103.241069][ T410] usb 5-1: config 1 interface 0 altsetting 75 bulk endpoint 0x3 has invalid maxpacket 0 [ 103.250832][ T410] usb 5-1: config 1 interface 0 has no altsetting 0 [ 103.258910][ T410] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 103.268040][ T410] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.276073][ T410] usb 5-1: Product: syz [ 103.280260][ T410] usb 5-1: Manufacturer: syz [ 103.284888][ T410] usb 5-1: SerialNumber: syz [ 103.290508][ T2918] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 103.411254][ T2914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.420763][ T2914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.434555][ T306] usb 4-1: device descriptor read/64, error -71 [ 103.455339][ T2914] binder: Unknown parameter '0x0000000000000003' [ 103.507067][ T410] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 103.516859][ T410] usb 5-1: USB disconnect, device number 11 [ 103.528783][ T10] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 103.538546][ T10] cdc_ncm 2-1:1.0: bind() failure [ 103.544964][ T306] usb usb4-port1: attempt power cycle [ 103.548570][ T10] usb 2-1: USB disconnect, device number 15 [ 103.604881][ T2929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.605519][ T2929] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:483 [ 103.612648][ T2929] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=2929 comm=syz.4.896 [ 103.634390][ T2929] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=2929 comm=syz.4.896 [ 103.647188][ T2929] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=2929 comm=syz.4.896 [ 103.904555][ T306] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 103.925506][ T306] usb 4-1: device descriptor read/8, error -71 [ 104.055928][ T306] usb 4-1: device descriptor read/8, error -71 [ 104.138287][ T2936] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 104.138307][ T2936] rust_binder: Error while translating object. [ 104.147205][ T2936] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 104.153382][ T2936] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:673 [ 104.294565][ T306] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 104.325565][ T306] usb 4-1: device descriptor read/8, error -71 [ 104.455688][ T306] usb 4-1: device descriptor read/8, error -71 [ 104.524391][ T2940] FAULT_INJECTION: forcing a failure. [ 104.524391][ T2940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.537655][ T2940] CPU: 0 UID: 0 PID: 2940 Comm: syz.4.900 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 104.537679][ T2940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 104.537695][ T2940] Call Trace: [ 104.537701][ T2940] [ 104.537707][ T2940] __dump_stack+0x21/0x30 [ 104.537731][ T2940] dump_stack_lvl+0x10c/0x190 [ 104.537748][ T2940] ? __cfi_dump_stack_lvl+0x10/0x10 [ 104.537766][ T2940] ? vsnprintf+0x7b4/0x1aa0 [ 104.537785][ T2940] ? __asan_memcpy+0x5a/0x80 [ 104.537802][ T2940] dump_stack+0x19/0x20 [ 104.537818][ T2940] should_fail_ex+0x3d9/0x530 [ 104.537835][ T2940] should_fail+0xf/0x20 [ 104.537850][ T2940] should_fail_usercopy+0x1e/0x30 [ 104.537867][ T2940] _copy_from_user+0x22/0xb0 [ 104.537887][ T2940] kstrtouint_from_user+0xc2/0x150 [ 104.537904][ T2940] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 104.537920][ T2940] ? selinux_file_permission+0x309/0xb30 [ 104.537943][ T2940] ? __cfi_selinux_file_permission+0x10/0x10 [ 104.537965][ T2940] proc_fail_nth_write+0x89/0x210 [ 104.537980][ T2940] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 104.537995][ T2940] ? bpf_lsm_file_permission+0xd/0x20 [ 104.538011][ T2940] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 104.538026][ T2940] vfs_write+0x3c0/0xe80 [ 104.538044][ T2940] ? __cfi_vfs_write+0x10/0x10 [ 104.538061][ T2940] ? __kasan_check_write+0x18/0x20 [ 104.538077][ T2940] ? mutex_lock+0x92/0x1c0 [ 104.538091][ T2940] ? __cfi_mutex_lock+0x10/0x10 [ 104.538104][ T2940] ? __fget_files+0x2c5/0x340 [ 104.538126][ T2940] ksys_write+0x141/0x250 [ 104.538144][ T2940] ? __cfi_ksys_write+0x10/0x10 [ 104.538162][ T2940] ? __kasan_check_read+0x15/0x20 [ 104.538179][ T2940] __x64_sys_write+0x7f/0x90 [ 104.538197][ T2940] x64_sys_call+0x271c/0x2ee0 [ 104.538216][ T2940] do_syscall_64+0x58/0xf0 [ 104.538236][ T2940] ? clear_bhb_loop+0x35/0x90 [ 104.538258][ T2940] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 104.538280][ T2940] RIP: 0033:0x7f9a2878d3df [ 104.538292][ T2940] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 104.538305][ T2940] RSP: 002b:00007f9a296a0030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 104.538321][ T2940] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9a2878d3df [ 104.538332][ T2940] RDX: 0000000000000001 RSI: 00007f9a296a00a0 RDI: 0000000000000004 [ 104.538342][ T2940] RBP: 00007f9a296a0090 R08: 0000000000000000 R09: 0000000000000000 [ 104.538351][ T2940] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 104.538361][ T2940] R13: 0000000000000000 R14: 00007f9a289b5fa0 R15: 00007ffd99baabf8 [ 104.538374][ T2940] [ 104.615068][ T306] usb usb4-port1: unable to enumerate USB device [ 104.626167][ T2942] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.813257][ T2943] rust_binder: Error while translating object. [ 104.823160][ T2943] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 104.829430][ T2943] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:493 [ 104.855707][ T2949] binder: Bad value for 'stats' [ 104.888935][ T2951] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.889662][ T36] kauditd_printk_skb: 42 callbacks suppressed [ 104.889678][ T36] audit: type=1326 audit(1750468330.210:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2950 comm="syz.4.904" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a2878e929 code=0x0 [ 104.939283][ T2954] binder: Unknown parameter 'contextÿçî' [ 104.946747][ T2956] sock: sock_set_timeout: `syz.3.906' (pid 2956) tries to set negative timeout [ 104.958266][ T2954] binder: Unknown parameter 'contextÿçî' [ 104.964113][ T2954] binder: Unknown parameter 'contextÿçî' [ 104.970409][ T2954] binder: Unknown parameter 'contextÿçî' [ 104.976302][ T2954] binder: Unknown parameter 'contextÿçî' [ 104.987473][ T2954] binder: Unknown parameter 'contextÿçî' [ 104.993458][ T2960] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.993496][ T2954] binder: Unknown parameter 'contextÿçî' [ 104.993573][ T2960] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 105.000553][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.016948][ T2960] rust_binder: Write failure EINVAL in pid:498 [ 105.030516][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.054668][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.060540][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.074696][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.080619][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.086601][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.092436][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.098495][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.104373][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.113989][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.120020][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.129717][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.137130][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.143041][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.151471][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.157551][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.163405][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.169578][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.175707][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.183379][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.189477][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.196273][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.202714][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.208831][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.221370][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.227393][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.233338][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.239411][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.247158][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.253768][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.260131][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.266491][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.272693][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.278750][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.285190][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.291035][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.297125][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.303046][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.310996][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.324530][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.330444][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.336685][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.342621][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.352477][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.364645][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.371079][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.377154][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.383188][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.389272][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.396892][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.403596][ T2984] rust_binder: inc_ref_done called when no active inc_refs [ 105.403610][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.417039][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.422905][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.430410][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.436613][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.442924][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.449041][ T2954] binder: Unknown parameter 'contextÿçî' [ 105.486852][ T2988] overlayfs: workdir and upperdir must be separate subtrees [ 105.522884][ T2993] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 105.523174][ T2993] rust_binder: Write failure EINVAL in pid:622 [ 105.641852][ T2998] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:595 [ 105.657400][ T2998] input: syz1 as /devices/virtual/input/input16 [ 105.715789][ T3000] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 105.739341][ T3004] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:599 [ 105.754549][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 105.914547][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 105.920900][ T10] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 105.930067][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.939193][ T10] usb 2-1: config 0 descriptor?? [ 105.945233][ T10] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 106.014538][ T410] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 106.145051][ T10] usb 2-1: Detected FT232B [ 106.165544][ T410] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 106.173803][ T410] usb 5-1: config 0 has no interface number 0 [ 106.179954][ T410] usb 5-1: config 0 interface 64 has no altsetting 0 [ 106.188060][ T410] usb 5-1: New USB device found, idVendor=12d1, idProduct=e74b, bcdDevice=36.4d [ 106.197243][ T410] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.205318][ T410] usb 5-1: Product: syz [ 106.209641][ T410] usb 5-1: Manufacturer: syz [ 106.214262][ T410] usb 5-1: SerialNumber: syz [ 106.220114][ T410] usb 5-1: config 0 descriptor?? [ 106.403508][ T3012] binder: Bad value for 'stats' [ 106.451866][ T3022] 9pnet_virtio: no channels available for device syz [ 106.507031][ T3026] FAULT_INJECTION: forcing a failure. [ 106.507031][ T3026] name failslab, interval 1, probability 0, space 0, times 0 [ 106.519745][ T3026] CPU: 0 UID: 0 PID: 3026 Comm: syz.2.930 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 106.519774][ T3026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 106.519785][ T3026] Call Trace: [ 106.519791][ T3026] [ 106.519798][ T3026] __dump_stack+0x21/0x30 [ 106.519824][ T3026] dump_stack_lvl+0x10c/0x190 [ 106.519850][ T3026] ? __cfi_dump_stack_lvl+0x10/0x10 [ 106.519871][ T3026] ? genl_family_rcv_msg_doit+0x294/0x330 [ 106.519893][ T3026] dump_stack+0x19/0x20 [ 106.519912][ T3026] should_fail_ex+0x3d9/0x530 [ 106.519932][ T3026] should_failslab+0xac/0x100 [ 106.519958][ T3026] kmem_cache_alloc_node_noprof+0x45/0x3b0 [ 106.519979][ T3026] ? __alloc_skb+0x10c/0x370 [ 106.520002][ T3026] __alloc_skb+0x10c/0x370 [ 106.520023][ T3026] ? __kasan_check_read+0x15/0x20 [ 106.520044][ T3026] netlink_ack+0x155/0xa50 [ 106.520070][ T3026] netlink_rcv_skb+0x2b2/0x4a0 [ 106.520095][ T3026] ? __cfi_genl_rcv_msg+0x10/0x10 [ 106.520113][ T3026] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 106.520137][ T3026] ? rwsem_read_trylock+0x2b1/0x660 [ 106.520159][ T3026] ? down_read+0x79/0xe0 [ 106.520177][ T3026] ? __cfi_down_read+0x10/0x10 [ 106.520195][ T3026] ? is_vmalloc_addr+0x11/0x40 [ 106.520220][ T3026] genl_rcv+0x2c/0x40 [ 106.520237][ T3026] netlink_unicast+0x8c6/0xa60 [ 106.520262][ T3026] netlink_sendmsg+0x7f0/0xaf0 [ 106.520296][ T3026] ? __cfi_netlink_sendmsg+0x10/0x10 [ 106.520323][ T3026] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 106.520355][ T3026] ? security_socket_sendmsg+0x33/0xd0 [ 106.520376][ T3026] ? __cfi_netlink_sendmsg+0x10/0x10 [ 106.520403][ T3026] ____sys_sendmsg+0xa15/0xa70 [ 106.520431][ T3026] ? __sys_sendmsg_sock+0x50/0x50 [ 106.520456][ T3026] ? import_iovec+0x64/0xb0 [ 106.520483][ T3026] ? import_iovec+0x81/0xb0 [ 106.520508][ T3026] ___sys_sendmsg+0x220/0x2a0 [ 106.520534][ T3026] ? __sys_sendmsg+0x280/0x280 [ 106.520562][ T3026] ? proc_fail_nth_write+0x17e/0x210 [ 106.520579][ T3026] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 106.520602][ T3026] __x64_sys_sendmsg+0x1eb/0x2c0 [ 106.520618][ T3026] ? fput+0x1a5/0x240 [ 106.520644][ T3026] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 106.520660][ T3026] ? ksys_write+0x1ef/0x250 [ 106.520682][ T3026] ? __kasan_check_read+0x15/0x20 [ 106.520702][ T3026] x64_sys_call+0x2a4c/0x2ee0 [ 106.520732][ T3026] do_syscall_64+0x58/0xf0 [ 106.520759][ T3026] ? clear_bhb_loop+0x35/0x90 [ 106.520784][ T3026] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 106.520810][ T3026] RIP: 0033:0x7ffbf238e929 [ 106.520825][ T3026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.520840][ T3026] RSP: 002b:00007ffbf09f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.520860][ T3026] RAX: ffffffffffffffda RBX: 00007ffbf25b5fa0 RCX: 00007ffbf238e929 [ 106.520874][ T3026] RDX: 0000000004000004 RSI: 0000200000000a80 RDI: 0000000000000003 [ 106.520885][ T3026] RBP: 00007ffbf09f7090 R08: 0000000000000000 R09: 0000000000000000 [ 106.520897][ T3026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.520907][ T3026] R13: 0000000000000000 R14: 00007ffbf25b5fa0 R15: 00007fff19833cc8 [ 106.520922][ T3026] [ 106.629810][ T3033] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 106.655817][ T10] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 106.698908][ T3040] fuse: Invalid rootmode [ 106.834142][ T36] audit: type=1326 audit(1750468332.150:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2990 comm="syz.1.918" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f206eb8e929 code=0x0 [ 106.865483][ T3048] rust_binder: Got transaction with invalid offset. [ 106.883773][ T3048] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 106.890535][ T3048] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:649 [ 106.914242][ T3050] binder: Bad value for 'max' [ 106.964632][ T3059] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:616 [ 106.965610][ T3059] rust_binder: Error while translating object. [ 106.975101][ T3059] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 106.981298][ T3059] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:616 [ 107.024920][ T3064] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 107.034264][ T3064] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:657 [ 107.051187][ T10] usb 2-1: USB disconnect, device number 16 [ 107.076232][ T3063] binder: Bad value for 'max' [ 107.084349][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 107.102507][ T10] ftdi_sio 2-1:0.0: device disconnected [ 107.114610][ T3071] binder: Bad value for 'stats' [ 107.162443][ T3080] FAULT_INJECTION: forcing a failure. [ 107.162443][ T3080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.175910][ T3080] CPU: 0 UID: 0 PID: 3080 Comm: syz.3.946 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 107.175949][ T3080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 107.175961][ T3080] Call Trace: [ 107.175968][ T3080] [ 107.175976][ T3080] __dump_stack+0x21/0x30 [ 107.176003][ T3080] dump_stack_lvl+0x10c/0x190 [ 107.176026][ T3080] ? __cfi_dump_stack_lvl+0x10/0x10 [ 107.176049][ T3080] ? kstrtoull+0x13b/0x1e0 [ 107.176069][ T3080] dump_stack+0x19/0x20 [ 107.176089][ T3080] should_fail_ex+0x3d9/0x530 [ 107.176116][ T3080] should_fail+0xf/0x20 [ 107.176135][ T3080] should_fail_usercopy+0x1e/0x30 [ 107.176158][ T3080] _copy_from_user+0x22/0xb0 [ 107.176184][ T3080] ___sys_sendmsg+0x159/0x2a0 [ 107.176213][ T3080] ? __sys_sendmsg+0x280/0x280 [ 107.176241][ T3080] ? proc_fail_nth_write+0x17e/0x210 [ 107.176261][ T3080] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 107.176297][ T3080] __x64_sys_sendmsg+0x1eb/0x2c0 [ 107.176315][ T3080] ? fput+0x1a5/0x240 [ 107.176344][ T3080] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 107.176362][ T3080] ? ksys_write+0x1ef/0x250 [ 107.176385][ T3080] ? __kasan_check_read+0x15/0x20 [ 107.176415][ T3080] x64_sys_call+0x2a4c/0x2ee0 [ 107.176458][ T3080] do_syscall_64+0x58/0xf0 [ 107.176483][ T3080] ? clear_bhb_loop+0x35/0x90 [ 107.176506][ T3080] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 107.176530][ T3080] RIP: 0033:0x7efef5d8e929 [ 107.176543][ T3080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.176556][ T3080] RSP: 002b:00007efef6c9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.176573][ T3080] RAX: ffffffffffffffda RBX: 00007efef5fb5fa0 RCX: 00007efef5d8e929 [ 107.176585][ T3080] RDX: 0000000004000004 RSI: 0000200000000a80 RDI: 0000000000000003 [ 107.176595][ T3080] RBP: 00007efef6c9f090 R08: 0000000000000000 R09: 0000000000000000 [ 107.176605][ T3080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.176614][ T3080] R13: 0000000000000000 R14: 00007efef5fb5fa0 R15: 00007ffeae4e1058 [ 107.176627][ T3080] [ 107.394315][ T36] audit: type=1400 audit(1750468332.510:532): avc: denied { create } for pid=3082 comm="syz.3.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 107.532781][ T3094] binder: Bad value for 'defcontext' [ 107.818714][ T3101] FAULT_INJECTION: forcing a failure. [ 107.818714][ T3101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.832144][ T3101] CPU: 0 UID: 0 PID: 3101 Comm: syz.2.953 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 107.832169][ T3101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 107.832179][ T3101] Call Trace: [ 107.832185][ T3101] [ 107.832190][ T3101] __dump_stack+0x21/0x30 [ 107.832212][ T3101] dump_stack_lvl+0x10c/0x190 [ 107.832229][ T3101] ? __cfi_dump_stack_lvl+0x10/0x10 [ 107.832247][ T3101] dump_stack+0x19/0x20 [ 107.832263][ T3101] should_fail_ex+0x3d9/0x530 [ 107.832280][ T3101] should_fail+0xf/0x20 [ 107.832294][ T3101] should_fail_usercopy+0x1e/0x30 [ 107.832313][ T3101] _copy_to_user+0x24/0xa0 [ 107.832332][ T3101] simple_read_from_buffer+0xed/0x160 [ 107.832355][ T3101] proc_fail_nth_read+0x19e/0x210 [ 107.832370][ T3101] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 107.832384][ T3101] ? bpf_lsm_file_permission+0xd/0x20 [ 107.832419][ T3101] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 107.832433][ T3101] vfs_read+0x278/0xb60 [ 107.832451][ T3101] ? __cfi_vfs_read+0x10/0x10 [ 107.832467][ T3101] ? __kasan_check_write+0x18/0x20 [ 107.832484][ T3101] ? mutex_lock+0x92/0x1c0 [ 107.832498][ T3101] ? __cfi_mutex_lock+0x10/0x10 [ 107.832512][ T3101] ? __fget_files+0x2c5/0x340 [ 107.832533][ T3101] ksys_read+0x141/0x250 [ 107.832558][ T3101] ? __cfi_ksys_read+0x10/0x10 [ 107.832576][ T3101] ? __kasan_check_read+0x15/0x20 [ 107.832592][ T3101] __x64_sys_read+0x7f/0x90 [ 107.832610][ T3101] x64_sys_call+0x2638/0x2ee0 [ 107.832629][ T3101] do_syscall_64+0x58/0xf0 [ 107.832654][ T3101] ? clear_bhb_loop+0x35/0x90 [ 107.832684][ T3101] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 107.832714][ T3101] RIP: 0033:0x7ffbf238d33c [ 107.832730][ T3101] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 107.832744][ T3101] RSP: 002b:00007ffbf09f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 107.832760][ T3101] RAX: ffffffffffffffda RBX: 00007ffbf25b5fa0 RCX: 00007ffbf238d33c [ 107.832773][ T3101] RDX: 000000000000000f RSI: 00007ffbf09f70a0 RDI: 0000000000000004 [ 107.832783][ T3101] RBP: 00007ffbf09f7090 R08: 0000000000000000 R09: 0000000000000000 [ 107.832793][ T3101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 107.832802][ T3101] R13: 0000000000000000 R14: 00007ffbf25b5fa0 R15: 00007fff19833cc8 [ 107.832815][ T3101] [ 107.867535][ T3102] rust_binder: Write failure EFAULT in pid:505 [ 107.897162][ T3104] netlink: 64 bytes leftover after parsing attributes in process `syz.2.954'. [ 108.210651][ T3120] tipc: Enabling of bearer rejected, failed to enable media [ 108.219176][ T36] audit: type=1400 audit(1750468333.540:533): avc: denied { setattr } for pid=3119 comm="syz.2.960" name="" dev="pipefs" ino=35247 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 108.249686][ T3125] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:680 [ 108.263976][ T36] audit: type=1326 audit(1750468333.580:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3091 comm="syz.1.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f206eb8e929 code=0x7fc00000 [ 108.279535][ T3130] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.306828][ T3127] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 108.306853][ T3127] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:682 [ 108.329043][ T3130] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.329065][ T3130] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.390617][ T3140] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 108.605814][ T3149] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 108.605851][ T3149] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:689 [ 108.662232][ T3163] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:725 [ 108.662414][ T3163] rust_binder: Error in use_page_slow: ESRCH [ 108.672031][ T3163] rust_binder: use_range failure ESRCH [ 108.678106][ T3163] rust_binder: Failed to allocate buffer. len:48, is_oneway:false [ 108.683581][ T3163] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 108.691452][ T3163] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:725 [ 108.854392][ T304] Bluetooth: hci0: Frame reassembly failed (-84) [ 108.973645][ T375] usb 5-1: USB disconnect, device number 12 [ 109.173788][ T3219] rust_binder: Write failure EINVAL in pid:649 [ 109.250823][ T3223] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 109.261425][ T304] tipc: Subscription rejected, illegal request [ 109.264767][ T36] audit: type=1400 audit(1750468334.580:535): avc: denied { compute_member } for pid=3225 comm="syz.4.996" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 109.291354][ T36] audit: type=1400 audit(1750468334.590:536): avc: denied { create } for pid=3225 comm="syz.4.996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 109.294153][ T3231] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.314550][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 109.356550][ T36] audit: type=1400 audit(1750468334.680:537): avc: denied { append } for pid=3232 comm="syz.4.998" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 109.356850][ T3234] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.431615][ T3233] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 109.445307][ T3233] rust_binder: Write failure EINVAL in pid:527 [ 109.459526][ T3239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.466792][ T36] audit: type=1326 audit(1750468334.790:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3238 comm="syz.4.999" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a2878e929 code=0x0 [ 109.496985][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 109.509913][ T375] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 109.517529][ T10] usb 2-1: New USB device found, idVendor=056a, idProduct=00ef, bcdDevice= 0.00 [ 109.526659][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.535528][ T10] usb 2-1: config 0 descriptor?? [ 109.569086][ T3240] rust_binder: Write failure EINVAL in pid:533 [ 109.684523][ T375] usb 4-1: Using ep0 maxpacket: 16 [ 109.696917][ T375] usb 4-1: config 4 has an invalid interface number: 15 but max is 0 [ 109.705080][ T375] usb 4-1: config 4 has no interface number 0 [ 109.711220][ T375] usb 4-1: config 4 interface 15 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 109.721199][ T375] usb 4-1: config 4 interface 15 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 109.731205][ T375] usb 4-1: config 4 interface 15 has no altsetting 0 [ 109.740020][ T375] usb 4-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.44 [ 109.759487][ T375] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.771265][ T375] usb 4-1: Product: syz [ 109.775507][ T375] usb 4-1: Manufacturer: syz [ 109.780166][ T375] usb 4-1: SerialNumber: syz [ 109.786113][ T3223] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 109.793353][ T3223] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 109.865686][ T10] usb 2-1: string descriptor 0 read error: -71 [ 109.873792][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 109.879845][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 109.888873][ T10] usb 2-1: USB disconnect, device number 17 [ 110.001181][ T3223] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 110.008583][ T3223] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 110.331841][ T3247] SELinux: security_context_str_to_sid () failed with errno=-22 [ 110.353315][ T3249] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 110.407971][ T3254] rust_binder: Write failure EFAULT in pid:763 [ 110.416558][ T36] audit: type=1400 audit(1750468335.740:539): avc: denied { mounton } for pid=3253 comm="syz.1.1005" path="/275/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 110.416589][ T3254] fuse: Bad value for 'fd' [ 110.445802][ T36] audit: type=1400 audit(1750468335.770:540): avc: denied { setcheckreqprot } for pid=3250 comm="syz.4.1004" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 110.562775][ T3257] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 110.602640][ T3262] kvm: user requested TSC rate below hardware speed [ 110.731299][ T3265] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 110.731663][ T3265] rust_binder: Got transaction with invalid offset. [ 110.738721][ T3265] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 110.745409][ T3265] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:548 [ 110.844554][ T10] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 110.861553][ T364] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 110.861697][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 111.004565][ T306] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 111.012902][ T3274] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 111.012926][ T3274] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:704 [ 111.023741][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 111.041106][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 111.049597][ T10] usb 2-1: config 3 has an invalid interface number: 93 but max is 1 [ 111.057836][ T10] usb 2-1: config 3 has an invalid interface number: 29 but max is 1 [ 111.066051][ T10] usb 2-1: config 3 has no interface number 0 [ 111.072217][ T10] usb 2-1: config 3 has no interface number 1 [ 111.078739][ T10] usb 2-1: config 3 interface 29 has no altsetting 0 [ 111.086832][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c291, bcdDevice=5c.5c [ 111.096031][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.104062][ T10] usb 2-1: Product: syz [ 111.108951][ T10] usb 2-1: Manufacturer: syz [ 111.113814][ T10] usb 2-1: SerialNumber: syz [ 111.154532][ T306] usb 5-1: Using ep0 maxpacket: 32 [ 111.161138][ T306] usb 5-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 959 [ 111.171601][ T306] usb 5-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 16 [ 111.181596][ T306] usb 5-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.194794][ T306] usb 5-1: config 1 interface 0 has no altsetting 0 [ 111.202908][ T306] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 111.211027][ T375] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 111.212944][ T306] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.223227][ T375] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 111.241951][ T375] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 111.249106][ T306] usb 5-1: Product: syz [ 111.253867][ T375] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 111.267523][ T306] usb 5-1: Manufacturer: syz [ 111.272182][ T375] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 111.272245][ T306] usb 5-1: SerialNumber: syz [ 111.284584][ T375] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 111.308684][ T375] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 111.309338][ T3267] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 111.324592][ T375] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 111.327237][ T3267] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 111.343752][ T375] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 111.366841][ T10] usb 2-1: USB disconnect, device number 18 [ 111.378313][ T375] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 111.392711][ T375] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 111.409110][ T375] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 111.420810][ T375] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 111.431895][ T375] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 111.443577][ T375] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 111.454824][ T375] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 111.465932][ T375] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 111.477687][ T375] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 111.490306][ T375] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 111.501587][ T375] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 111.512893][ T375] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 111.524207][ T375] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 111.535705][ T375] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 111.548042][ T375] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 111.560728][ T375] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 111.561950][ T3291] rust_binder: Write failure EINVAL in pid:720 [ 111.573696][ T3291] rust_binder: got new transaction with bad transaction stack [ 111.574748][ T375] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 111.579968][ T3291] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:720 [ 111.608335][ T375] ax88179_178a 4-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 111.621813][ T306] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 111.626611][ T375] ax88179_178a 4-1:4.15 eth1: register 'ax88179_178a' at usb-dummy_hcd.3-1, Toshiba USB Ethernet Adapter, 16:95:cb:4d:6f:8a [ 111.645462][ T306] usb 5-1: USB disconnect, device number 13 [ 111.650603][ T375] usb 4-1: USB disconnect, device number 15 [ 111.658438][ T375] ax88179_178a 4-1:4.15 eth1: unregister 'ax88179_178a' usb-dummy_hcd.3-1, Toshiba USB Ethernet Adapter [ 111.684422][ T36] audit: type=1400 audit(1750468337.000:541): avc: denied { mounton } for pid=3294 comm="syz.2.1019" path="/proc/724/task" dev="proc" ino=37503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 111.735644][ T36] audit: type=1400 audit(1750468337.050:542): avc: denied { audit_read } for pid=3300 comm="syz.2.1021" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 111.755960][ T3303] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 111.756710][ T3303] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:732 [ 111.759763][ T36] audit: type=1400 audit(1750468337.060:543): avc: denied { ioctl } for pid=3300 comm="syz.2.1021" path="socket:[36476]" dev="sockfs" ino=36476 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 111.766979][ T3303] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 111.800000][ T3303] rust_binder: Read failure Err(EFAULT) in pid:732 [ 111.882594][ T3308] rust_binder: Write failure EINVAL in pid:737 [ 111.965790][ T3324] binder: Unknown parameter 'processor : 0 [ 111.965790][ T3324] vendor_id : GenuineIntel [ 111.965790][ T3324] cpu family : 6 [ 111.965790][ T3324] model : 79 [ 111.965790][ T3324] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 111.965790][ T3324] stepping : 0 [ 111.965790][ T3324] microcode : 0xffffffff [ 111.965790][ T3324] cpu MHz : 2199.998 [ 111.965790][ T3324] cache size : 56320 KB [ 111.965790][ T3324] physical id : 0 [ 111.965790][ T3324] siblings : 2 [ 111.965790][ T3324] core id : 0 [ 111.965790][ T3324] cpu cores : 1 [ 111.965790][ T3324] apicid : 0 [ 111.965790][ T3324] initial apicid : 0 [ 111.965790][ T3324] fpu : yes [ 111.965790][ T3324] fpu_exception : yes [ 111.965790][ T3324] cpuid level : 13 [ 111.965790][ T3324] wp : yes [ 111.965790][ T3324] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 111.965790][ T3324] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 111.967290][ T3319] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 111.975308][ T3325] random: crng reseeded on system resumption [ 112.116270][ T3319] rust_binder: Write failure EFAULT in pid:655 [ 112.158121][ T3330] SELinux: failed to load policy [ 112.295442][ T3353] bridge0: port 3(bond_slave_1) entered blocking state [ 112.302385][ T3353] bridge0: port 3(bond_slave_1) entered disabled state [ 112.309725][ T3353] bond_slave_1: entered allmulticast mode [ 112.316580][ T3353] bond_slave_1: entered promiscuous mode [ 112.350371][ T3355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.350667][ T3355] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 112.357478][ T3356] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 112.366942][ T3355] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:557 [ 112.366947][ T3356] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:557 [ 112.437774][ T3358] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.484620][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 112.499293][ T3359] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:560 [ 112.514556][ T375] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 112.634536][ T10] usb 2-1: device descriptor read/64, error -71 [ 112.685607][ T375] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.696610][ T375] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.706376][ T375] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 112.719330][ T375] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 112.728395][ T375] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.737319][ T375] usb 4-1: config 0 descriptor?? [ 112.875272][ T10] usb 2-1: device descriptor read/64, error -71 [ 113.118111][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 113.147148][ T375] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 113.158105][ T375] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 113.254584][ T10] usb 2-1: device descriptor read/64, error -71 [ 113.496989][ T10] usb 2-1: device descriptor read/64, error -71 [ 113.511886][ T3380] overlayfs: conflicting options: userxattr,redirect_dir=on [ 113.519900][ T3380] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:772 [ 113.604677][ T10] usb usb2-port1: attempt power cycle [ 113.954536][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 113.975569][ T10] usb 2-1: device descriptor read/8, error -71 [ 114.105505][ T10] usb 2-1: device descriptor read/8, error -71 [ 114.162668][ T3397] netlink: 'syz.4.1054': attribute type 4 has an invalid length. [ 114.344564][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 114.365482][ T10] usb 2-1: device descriptor read/8, error -71 [ 114.484585][ T65] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 114.495566][ T10] usb 2-1: device descriptor read/8, error -71 [ 114.604661][ T10] usb usb2-port1: unable to enumerate USB device [ 114.635740][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.646755][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.656552][ T65] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 114.665666][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.674754][ T65] usb 5-1: config 0 descriptor?? [ 114.881197][ T3400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.890237][ T3400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.898693][ T3400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.907255][ T3400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.915405][ T3400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.923932][ T3400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.932059][ T3400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.941378][ T3400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.949523][ T3400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.958064][ T3400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.049014][ T3406] SELinux: security_context_str_to_sid () failed with errno=-22 [ 115.206336][ T3414] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 115.206373][ T3414] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:678 [ 115.225892][ T306] usb 4-1: USB disconnect, device number 16 [ 115.415554][ T65] uclogic 0003:256C:006D.0006: failed retrieving string descriptor #200: -71 [ 115.426026][ T65] uclogic 0003:256C:006D.0006: failed retrieving pen parameters: -71 [ 115.434378][ T65] uclogic 0003:256C:006D.0006: failed probing pen v2 parameters: -71 [ 115.442773][ T65] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 115.450442][ T65] uclogic 0003:256C:006D.0006: probe with driver uclogic failed with error -71 [ 115.453526][ T3432] rust_binder: Write failure EFAULT in pid:577 [ 115.461940][ T65] usb 5-1: USB disconnect, device number 14 [ 115.616892][ T306] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 115.711736][ T36] audit: type=1400 audit(1750468341.030:544): avc: denied { create } for pid=3450 comm="syz.2.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 115.712622][ T3451] rust_binder: Got transaction with invalid offset. [ 115.732528][ T3451] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 115.744592][ T3451] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:799 [ 115.774552][ T306] usb 4-1: Using ep0 maxpacket: 16 [ 115.789368][ T306] usb 4-1: too many configurations: 86, using maximum allowed: 8 [ 115.797949][ T306] usb 4-1: config 4 has an invalid interface number: 15 but max is 0 [ 115.806123][ T306] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 115.810515][ T3454] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1074'. [ 115.817800][ T306] usb 4-1: config 4 has no interface number 0 [ 115.831470][ T306] usb 4-1: config 4 interface 15 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 115.844971][ T306] usb 4-1: config 4 interface 15 has no altsetting 0 [ 115.852804][ T306] usb 4-1: config 4 has an invalid interface number: 15 but max is 0 [ 115.861197][ T306] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 115.873737][ T306] usb 4-1: config 4 has no interface number 0 [ 115.886653][ T306] usb 4-1: config 4 interface 15 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 115.905996][ T306] usb 4-1: config 4 interface 15 has no altsetting 0 [ 115.907378][ T3463] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 115.920177][ T3463] rust_binder: Write failure EINVAL in pid:806 [ 115.921105][ T306] usb 4-1: config 4 has an invalid interface number: 15 but max is 0 [ 115.942205][ T306] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 115.952353][ T306] usb 4-1: config 4 has no interface number 0 [ 115.958610][ T306] usb 4-1: config 4 interface 15 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 115.971634][ T306] usb 4-1: config 4 interface 15 has no altsetting 0 [ 115.979098][ T306] usb 4-1: config 4 has an invalid interface number: 15 but max is 0 [ 115.987301][ T306] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 115.997643][ T306] usb 4-1: config 4 has no interface number 0 [ 116.003900][ T306] usb 4-1: config 4 interface 15 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 116.016920][ T306] usb 4-1: config 4 interface 15 has no altsetting 0 [ 116.024523][ T306] usb 4-1: config 4 has an invalid interface number: 15 but max is 0 [ 116.032631][ T306] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 116.041875][ T3471] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 116.042947][ T306] usb 4-1: config 4 has no interface number 0 [ 116.043375][ T3471] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 116.049556][ T306] usb 4-1: config 4 interface 15 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 116.056335][ T3471] rust_binder: Write failure EINVAL in pid:594 [ 116.062658][ T306] usb 4-1: config 4 interface 15 has no altsetting 0 [ 116.089430][ T306] usb 4-1: config 4 has an invalid interface number: 15 but max is 0 [ 116.097698][ T306] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 116.107873][ T306] usb 4-1: config 4 has no interface number 0 [ 116.113985][ T306] usb 4-1: config 4 interface 15 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 116.127012][ T306] usb 4-1: config 4 interface 15 has no altsetting 0 [ 116.134394][ T306] usb 4-1: config 4 has an invalid interface number: 15 but max is 0 [ 116.142600][ T306] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 116.152754][ T306] usb 4-1: config 4 has no interface number 0 [ 116.158901][ T306] usb 4-1: config 4 interface 15 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 116.171924][ T306] usb 4-1: config 4 interface 15 has no altsetting 0 [ 116.179413][ T306] usb 4-1: config 4 has an invalid interface number: 15 but max is 0 [ 116.187540][ T306] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 116.188779][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 116.197647][ T306] usb 4-1: config 4 has no interface number 0 [ 116.197680][ T306] usb 4-1: config 4 interface 15 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 116.224301][ T306] usb 4-1: config 4 interface 15 has no altsetting 0 [ 116.232471][ T306] usb 4-1: New USB device found, idVendor=0930, idProduct=06b1, bcdDevice=9c.6a [ 116.241596][ T306] usb 4-1: New USB device strings: Mfr=119, Product=183, SerialNumber=33 [ 116.250267][ T306] usb 4-1: Product: syz [ 116.254762][ T306] usb 4-1: Manufacturer: syz [ 116.259390][ T306] usb 4-1: SerialNumber: syz [ 116.286182][ T3483] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 116.288286][ T3483] rust_binder: validate_parent_fixup: new_min_offset=80, sg_entry.length=0 [ 116.294943][ T3483] rust_binder: Error while translating object. [ 116.303719][ T3483] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 116.309967][ T3483] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:602 [ 116.320454][ T3485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 116.330555][ T3484] rust_binder: validate_parent_fixup: new_min_offset=80, sg_entry.length=0 [ 116.336194][ T10] usb 3-1: device descriptor read/64, error -71 [ 116.336232][ T3484] rust_binder: Error while translating object. [ 116.351212][ T3484] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 116.357433][ T3484] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:602 [ 116.446477][ T3493] binder: Bad value for 'max' [ 116.488040][ T65] usb 4-1: USB disconnect, device number 17 [ 116.584611][ T10] usb 3-1: device descriptor read/64, error -71 [ 116.824548][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 116.954579][ T10] usb 3-1: device descriptor read/64, error -71 [ 117.194563][ T10] usb 3-1: device descriptor read/64, error -71 [ 117.304635][ T10] usb usb3-port1: attempt power cycle [ 117.454595][ T65] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 117.495288][ T3517] tipc: Enabling of bearer rejected, media not registered [ 117.575608][ T36] audit: type=1400 audit(1750468342.900:545): avc: denied { map } for pid=3518 comm="syz.3.1097" path="/proc/690/net/pfkey" dev="proc" ino=4026532614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 117.614560][ T65] usb 2-1: Using ep0 maxpacket: 32 [ 117.619756][ T375] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 117.628813][ T65] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.638994][ T65] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 117.652082][ T65] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 117.661253][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 117.668917][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.677634][ T65] usb 2-1: config 0 descriptor?? [ 117.695733][ T10] usb 3-1: device descriptor read/8, error -71 [ 117.715624][ T3523] binder: Bad value for 'stats' [ 117.755448][ T3527] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:698 [ 117.774561][ T375] usb 5-1: Using ep0 maxpacket: 16 [ 117.789971][ T375] usb 5-1: config 4 has an invalid interface number: 15 but max is 0 [ 117.798135][ T375] usb 5-1: config 4 has no interface number 0 [ 117.804989][ T375] usb 5-1: config 4 interface 15 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 117.814925][ T375] usb 5-1: config 4 interface 15 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 117.827891][ T375] usb 5-1: config 4 interface 15 has no altsetting 0 [ 117.835561][ T10] usb 3-1: device descriptor read/8, error -71 [ 117.844901][ T375] usb 5-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.44 [ 117.854024][ T375] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.862122][ T375] usb 5-1: Product: syz [ 117.866367][ T375] usb 5-1: Manufacturer: syz [ 117.871397][ T375] usb 5-1: SerialNumber: syz [ 117.877703][ T3511] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 117.885099][ T3511] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 117.888516][ T65] usb 2-1: string descriptor 0 read error: -71 [ 117.900276][ T65] usb 2-1: USB disconnect, device number 23 [ 118.084549][ T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 118.099063][ T3511] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 118.105666][ T10] usb 3-1: device descriptor read/8, error -71 [ 118.106443][ T3511] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 118.235484][ T10] usb 3-1: device descriptor read/8, error -71 [ 118.344629][ T10] usb usb3-port1: unable to enumerate USB device [ 118.415674][ T3539] input: syz0 as /devices/virtual/input/input19 [ 118.421990][ T3539] input: failed to attach handler leds to device input19, error: -6 [ 118.571966][ T3543] binder: Unknown parameter 'fscontext?}' [ 118.723051][ T3555] raw_sendmsg: syz.1.1111 forgot to set AF_INET. Fix it! [ 118.947407][ T3567] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:828 [ 118.964558][ T306] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 119.048053][ T36] audit: type=1400 audit(1750468344.370:546): avc: denied { append } for pid=3568 comm="syz.2.1115" name="pfkey" dev="proc" ino=4026532507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 119.124574][ T306] usb 4-1: device descriptor read/64, error -71 [ 119.244942][ T375] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 119.364569][ T306] usb 4-1: device descriptor read/64, error -71 [ 119.457402][ T3511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.465993][ T3511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.474408][ T375] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 119.485545][ T375] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 119.496622][ T375] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 119.507684][ T375] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 119.518727][ T375] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 119.529796][ T375] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 119.540846][ T375] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 119.551934][ T375] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 119.563029][ T375] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 119.574093][ T375] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 119.585283][ T375] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 119.602598][ T375] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 119.614583][ T306] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 119.623797][ T375] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 119.641596][ T375] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 119.664164][ T375] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 119.685616][ T375] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 119.698136][ T375] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 119.709213][ T375] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 119.720414][ T375] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 119.732023][ T375] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 119.743068][ T375] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 119.744579][ T306] usb 4-1: device descriptor read/64, error -71 [ 119.754299][ T375] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 119.781305][ T375] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 119.792419][ T375] ax88179_178a 5-1:4.15 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 119.804858][ T375] ax88179_178a 5-1:4.15 eth1: register 'ax88179_178a' at usb-dummy_hcd.4-1, Toshiba USB Ethernet Adapter, ea:a4:6b:e6:00:00 [ 119.821493][ T375] usb 5-1: USB disconnect, device number 15 [ 119.827904][ T375] ax88179_178a 5-1:4.15 eth1: unregister 'ax88179_178a' usb-dummy_hcd.4-1, Toshiba USB Ethernet Adapter [ 119.991121][ T3592] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.994635][ T306] usb 4-1: device descriptor read/64, error -71 [ 120.071461][ T3595] fuse: Bad value for 'fd' [ 120.080521][ T36] audit: type=1400 audit(1750468345.400:547): avc: denied { setattr } for pid=3594 comm="syz.2.1123" name="ttynull" dev="devtmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 120.104646][ T65] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 120.114676][ T306] usb usb4-port1: attempt power cycle [ 120.236821][ T36] audit: type=1400 audit(1750468345.560:548): avc: denied { read } for pid=3605 comm="syz.2.1126" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 120.260313][ T65] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 120.269504][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.277559][ T65] usb 2-1: Product: syz [ 120.281790][ T65] usb 2-1: Manufacturer: syz [ 120.286415][ T65] usb 2-1: SerialNumber: syz [ 120.454716][ T306] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 120.475530][ T306] usb 4-1: device descriptor read/8, error -71 [ 120.494561][ T375] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 120.605543][ T306] usb 4-1: device descriptor read/8, error -71 [ 120.645654][ T375] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 152, setting to 64 [ 120.656467][ T375] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 120.670154][ T375] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.679285][ T375] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 120.687347][ T375] usb 3-1: SerialNumber: syz [ 120.693483][ T375] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 120.844597][ T306] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 120.865570][ T306] usb 4-1: device descriptor read/8, error -71 [ 120.885954][ T3608] FAULT_INJECTION: forcing a failure. [ 120.885954][ T3608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.899095][ T3608] CPU: 0 UID: 0 PID: 3608 Comm: syz.4.1127 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 120.899128][ T3608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 120.899141][ T3608] Call Trace: [ 120.899149][ T3608] [ 120.899159][ T3608] __dump_stack+0x21/0x30 [ 120.899187][ T3608] dump_stack_lvl+0x10c/0x190 [ 120.899220][ T3608] ? __cfi_dump_stack_lvl+0x10/0x10 [ 120.899243][ T3608] ? kstrtoull+0x13b/0x1e0 [ 120.899263][ T3608] dump_stack+0x19/0x20 [ 120.899283][ T3608] should_fail_ex+0x3d9/0x530 [ 120.899305][ T3608] should_fail+0xf/0x20 [ 120.899323][ T3608] should_fail_usercopy+0x1e/0x30 [ 120.899345][ T3608] _copy_from_user+0x22/0xb0 [ 120.899370][ T3608] ___sys_sendmsg+0x159/0x2a0 [ 120.899399][ T3608] ? __sys_sendmsg+0x280/0x280 [ 120.899427][ T3608] ? proc_fail_nth_write+0x17e/0x210 [ 120.899445][ T3608] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 120.899471][ T3608] __x64_sys_sendmsg+0x1eb/0x2c0 [ 120.899490][ T3608] ? fput+0x1a5/0x240 [ 120.899521][ T3608] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 120.899540][ T3608] ? ksys_write+0x1ef/0x250 [ 120.899566][ T3608] ? __kasan_check_read+0x15/0x20 [ 120.899590][ T3608] x64_sys_call+0x2a4c/0x2ee0 [ 120.899616][ T3608] do_syscall_64+0x58/0xf0 [ 120.899643][ T3608] ? clear_bhb_loop+0x35/0x90 [ 120.899674][ T3608] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 120.899703][ T3608] RIP: 0033:0x7f9a2878e929 [ 120.899721][ T3608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.899740][ T3608] RSP: 002b:00007f9a296a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.899764][ T3608] RAX: ffffffffffffffda RBX: 00007f9a289b5fa0 RCX: 00007f9a2878e929 [ 120.899780][ T3608] RDX: 0000000004000004 RSI: 0000200000000a80 RDI: 0000000000000003 [ 120.899795][ T3608] RBP: 00007f9a296a0090 R08: 0000000000000000 R09: 0000000000000000 [ 120.899809][ T3608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.899823][ T3608] R13: 0000000000000000 R14: 00007f9a289b5fa0 R15: 00007ffd99baabf8 [ 120.899841][ T3608] [ 120.901665][ T430] usb 3-1: USB disconnect, device number 30 [ 121.135960][ T306] usb 4-1: device descriptor read/8, error -71 [ 121.220316][ T3619] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 121.220640][ T3619] rust_binder: Write failure EINVAL in pid:641 [ 121.246575][ T306] usb usb4-port1: unable to enumerate USB device [ 121.248878][ T3623] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 121.297059][ T3627] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 121.371788][ T3627] rust_binder: Error in use_page_slow: ESRCH [ 121.378318][ T3627] rust_binder: use_range failure ESRCH [ 121.384429][ T3627] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 121.390004][ T3627] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 121.398052][ T3627] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:649 [ 121.441691][ T36] audit: type=1326 audit(1750468346.760:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3630 comm="syz.2.1135" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbf238e929 code=0x0 [ 121.565834][ T3637] SELinux: policydb string length 369098745 does not match expected length 8 [ 121.574884][ T3637] SELinux: failed to load policy [ 121.798860][ T3646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1142'. [ 122.184529][ T45] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 122.347000][ T45] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 122.364514][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.383807][ T45] usb 5-1: Product: syz [ 122.388225][ T45] usb 5-1: Manufacturer: syz [ 122.394649][ T45] usb 5-1: SerialNumber: syz [ 122.414536][ T45] r8152-cfgselector 5-1: Unknown version 0x0000 [ 122.420831][ T45] r8152-cfgselector 5-1: config 0 descriptor?? [ 122.744838][ T3680] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 122.745538][ T3680] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 122.752108][ T3680] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:738 [ 122.797112][ T375] usb 2-1: USB disconnect, device number 24 [ 122.816045][ T36] audit: type=1400 audit(1750468348.140:550): avc: denied { create } for pid=3684 comm="syz.3.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 122.892714][ T3693] kvm: user requested TSC rate below hardware speed [ 122.918687][ T65] r8152-cfgselector 5-1: USB disconnect, device number 16 [ 123.030739][ T36] audit: type=1400 audit(1750468348.350:551): avc: denied { append } for pid=3708 comm="syz.3.1165" name="binder1" dev="binder" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 123.030904][ T3709] rust_binder: Read failure Err(EAGAIN) in pid:748 [ 123.103625][ T3707] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1164'. [ 123.307169][ T3716] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.307266][ T3716] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 123.313857][ T3716] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:753 [ 123.484763][ T3738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1174'. [ 123.510146][ T3740] rust_binder: Write failure EINVAL in pid:875 [ 123.511165][ T3740] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.824528][ T375] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 123.984534][ T375] usb 5-1: Using ep0 maxpacket: 16 [ 123.991017][ T375] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.001525][ T375] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.012076][ T375] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 124.021289][ T65] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 124.029274][ T375] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.037774][ T375] usb 5-1: Product: syz [ 124.042073][ T375] usb 5-1: Manufacturer: syz [ 124.046909][ T375] usb 5-1: SerialNumber: syz [ 124.194541][ T65] usb 2-1: Using ep0 maxpacket: 32 [ 124.207644][ T65] usb 2-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 124.225995][ T65] usb 2-1: config 1 interface 0 has no altsetting 0 [ 124.234187][ T65] usb 2-1: New USB device found, idVendor=0eef, idProduct=7262, bcdDevice= 0.40 [ 124.243416][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.267657][ T65] usb 2-1: Product: syz [ 124.274456][ T65] usb 2-1: Manufacturer: О [ 124.282082][ T65] usb 2-1: SerialNumber: syz [ 124.758064][ T3768] FAULT_INJECTION: forcing a failure. [ 124.758064][ T3768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.791453][ T3768] CPU: 1 UID: 0 PID: 3768 Comm: syz.3.1183 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 124.791490][ T3768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 124.791505][ T3768] Call Trace: [ 124.791513][ T3768] [ 124.791523][ T3768] __dump_stack+0x21/0x30 [ 124.791554][ T3768] dump_stack_lvl+0x10c/0x190 [ 124.791579][ T3768] ? __cfi_dump_stack_lvl+0x10/0x10 [ 124.791607][ T3768] dump_stack+0x19/0x20 [ 124.791631][ T3768] should_fail_ex+0x3d9/0x530 [ 124.791656][ T3768] should_fail+0xf/0x20 [ 124.791678][ T3768] should_fail_usercopy+0x1e/0x30 [ 124.791703][ T3768] _copy_from_iter+0x1a3/0x14b0 [ 124.791734][ T3768] ? __kasan_check_write+0x18/0x20 [ 124.791759][ T3768] ? __build_skb_around+0x2a4/0x5a0 [ 124.791786][ T3768] ? __cfi__copy_from_iter+0x10/0x10 [ 124.791815][ T3768] ? check_stack_object+0x82/0x140 [ 124.791841][ T3768] ? __virt_addr_valid+0x2a6/0x380 [ 124.791874][ T3768] ? __check_object_size+0x455/0x620 [ 124.791901][ T3768] netlink_sendmsg+0x680/0xaf0 [ 124.791935][ T3768] ? __cfi_netlink_sendmsg+0x10/0x10 [ 124.791968][ T3768] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 124.792001][ T3768] ? security_socket_sendmsg+0x33/0xd0 [ 124.792026][ T3768] ? __cfi_netlink_sendmsg+0x10/0x10 [ 124.792058][ T3768] ____sys_sendmsg+0xa15/0xa70 [ 124.792092][ T3768] ? __sys_sendmsg_sock+0x50/0x50 [ 124.792127][ T3768] ? import_iovec+0x81/0xb0 [ 124.792157][ T3768] ___sys_sendmsg+0x220/0x2a0 [ 124.792191][ T3768] ? __sys_sendmsg+0x280/0x280 [ 124.792234][ T3768] ? proc_fail_nth_write+0x17e/0x210 [ 124.792256][ T3768] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 124.792285][ T3768] __x64_sys_sendmsg+0x1eb/0x2c0 [ 124.792305][ T3768] ? fput+0x1a5/0x240 [ 124.792336][ T3768] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 124.792356][ T3768] ? ksys_write+0x1ef/0x250 [ 124.792383][ T3768] ? __kasan_check_read+0x15/0x20 [ 124.792410][ T3768] x64_sys_call+0x2a4c/0x2ee0 [ 124.792438][ T3768] do_syscall_64+0x58/0xf0 [ 124.792466][ T3768] ? clear_bhb_loop+0x35/0x90 [ 124.792498][ T3768] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 124.792528][ T3768] RIP: 0033:0x7efef5d8e929 [ 124.792547][ T3768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.792565][ T3768] RSP: 002b:00007efef6c9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.792589][ T3768] RAX: ffffffffffffffda RBX: 00007efef5fb5fa0 RCX: 00007efef5d8e929 [ 124.792605][ T3768] RDX: 0000000004000004 RSI: 0000200000000a80 RDI: 0000000000000003 [ 124.792620][ T3768] RBP: 00007efef6c9f090 R08: 0000000000000000 R09: 0000000000000000 [ 124.792634][ T3768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.792647][ T3768] R13: 0000000000000000 R14: 00007efef5fb5fa0 R15: 00007ffeae4e1058 [ 124.792665][ T3768] [ 125.146118][ T3778] rust_binder: Write failure EINVAL in pid:841 [ 125.152869][ T3780] binder: Unknown parameter 'coyBLV§"i5ŽÝ”ÃùÒntext' [ 125.197006][ T3791] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.434557][ T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 125.594562][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 125.600889][ T10] usb 3-1: config 0 has no interfaces? [ 125.606611][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 125.615894][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.624679][ T10] usb 3-1: config 0 descriptor?? [ 125.831769][ T3795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.840429][ T3795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.849544][ T306] usb 3-1: USB disconnect, device number 31 [ 126.149672][ T3807] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1196'. [ 126.170381][ T3809] FAULT_INJECTION: forcing a failure. [ 126.170381][ T3809] name failslab, interval 1, probability 0, space 0, times 0 [ 126.183146][ T3809] CPU: 1 UID: 0 PID: 3809 Comm: syz.4.1197 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 126.183191][ T3809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 126.183207][ T3809] Call Trace: [ 126.183215][ T3809] [ 126.183225][ T3809] __dump_stack+0x21/0x30 [ 126.183254][ T3809] dump_stack_lvl+0x10c/0x190 [ 126.183277][ T3809] ? __cfi_dump_stack_lvl+0x10/0x10 [ 126.183301][ T3809] dump_stack+0x19/0x20 [ 126.183318][ T3809] should_fail_ex+0x3d9/0x530 [ 126.183335][ T3809] should_failslab+0xac/0x100 [ 126.183367][ T3809] __kmalloc_noprof+0x69/0x450 [ 126.183392][ T3809] ? genl_family_rcv_msg_attrs_parse+0xc6/0x390 [ 126.183417][ T3809] genl_family_rcv_msg_attrs_parse+0xc6/0x390 [ 126.183442][ T3809] genl_family_rcv_msg_doit+0xcd/0x330 [ 126.183459][ T3809] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 126.183477][ T3809] ? ctrl_dumppolicy_done+0x90/0x90 [ 126.183494][ T3809] ? stack_depot_save_flags+0x38/0x800 [ 126.183521][ T3809] ? __cfi_ethnl_default_doit+0x10/0x10 [ 126.183545][ T3809] ? __cfi_ethnl_default_start+0x10/0x10 [ 126.183568][ T3809] ? radix_tree_lookup+0x250/0x2a0 [ 126.183595][ T3809] genl_rcv_msg+0x609/0x7a0 [ 126.183612][ T3809] ? __cfi_genl_rcv_msg+0x10/0x10 [ 126.183627][ T3809] ? __cfi_ethnl_default_doit+0x10/0x10 [ 126.183654][ T3809] netlink_rcv_skb+0x22b/0x4a0 [ 126.183684][ T3809] ? __cfi_genl_rcv_msg+0x10/0x10 [ 126.183706][ T3809] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 126.183734][ T3809] ? rwsem_read_trylock+0x2b1/0x660 [ 126.183752][ T3809] ? down_read+0x79/0xe0 [ 126.183768][ T3809] ? __cfi_down_read+0x10/0x10 [ 126.183784][ T3809] ? is_vmalloc_addr+0x11/0x40 [ 126.183818][ T3809] genl_rcv+0x2c/0x40 [ 126.183837][ T3809] netlink_unicast+0x8c6/0xa60 [ 126.183865][ T3809] netlink_sendmsg+0x7f0/0xaf0 [ 126.183892][ T3809] ? __cfi_netlink_sendmsg+0x10/0x10 [ 126.183917][ T3809] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 126.183948][ T3809] ? security_socket_sendmsg+0x33/0xd0 [ 126.183975][ T3809] ? __cfi_netlink_sendmsg+0x10/0x10 [ 126.184005][ T3809] ____sys_sendmsg+0xa15/0xa70 [ 126.184035][ T3809] ? __sys_sendmsg_sock+0x50/0x50 [ 126.184059][ T3809] ? import_iovec+0x81/0xb0 [ 126.184087][ T3809] ___sys_sendmsg+0x220/0x2a0 [ 126.184120][ T3809] ? __sys_sendmsg+0x280/0x280 [ 126.184152][ T3809] ? proc_fail_nth_write+0x17e/0x210 [ 126.184180][ T3809] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 126.184208][ T3809] __x64_sys_sendmsg+0x1eb/0x2c0 [ 126.184228][ T3809] ? fput+0x1a5/0x240 [ 126.184259][ T3809] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 126.184278][ T3809] ? ksys_write+0x1ef/0x250 [ 126.184304][ T3809] ? __kasan_check_read+0x15/0x20 [ 126.184323][ T3809] x64_sys_call+0x2a4c/0x2ee0 [ 126.184343][ T3809] do_syscall_64+0x58/0xf0 [ 126.184366][ T3809] ? clear_bhb_loop+0x35/0x90 [ 126.184400][ T3809] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 126.184433][ T3809] RIP: 0033:0x7f9a2878e929 [ 126.184451][ T3809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.184465][ T3809] RSP: 002b:00007f9a296a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.184491][ T3809] RAX: ffffffffffffffda RBX: 00007f9a289b5fa0 RCX: 00007f9a2878e929 [ 126.184504][ T3809] RDX: 0000000004000004 RSI: 0000200000000a80 RDI: 0000000000000003 [ 126.184521][ T3809] RBP: 00007f9a296a0090 R08: 0000000000000000 R09: 0000000000000000 [ 126.184536][ T3809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.184550][ T3809] R13: 0000000000000000 R14: 00007f9a289b5fa0 R15: 00007ffd99baabf8 [ 126.184568][ T3809] [ 126.364965][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 126.391032][ T3812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.403888][ T3813] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 126.405920][ T3812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.570011][ T3812] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 126.645546][ T10] usb 4-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 126.656047][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 126.669010][ T10] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 126.678127][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.686947][ T10] usb 4-1: config 0 descriptor?? [ 126.693183][ T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 126.788400][ T65] usbhid 2-1:1.0: can't add hid device: -71 [ 126.794386][ T65] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 126.811169][ T65] usb 2-1: USB disconnect, device number 25 [ 126.861535][ T3818] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 126.861563][ T3818] rust_binder: Error in use_page_slow: EBUSY [ 126.872061][ T3818] rust_binder: use_range failure EBUSY [ 126.878124][ T3818] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 126.883641][ T3818] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 126.891331][ T3818] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 126.900741][ T3818] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:889 [ 126.947258][ T3821] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:892 [ 126.972030][ T3821] ------------[ cut here ]------------ [ 126.977593][ T3821] WARNING: CPU: 0 PID: 3821 at mm/page_alloc.c:5157 __alloc_pages_noprof+0xe4/0x6c0 [ 126.987020][ T3821] Modules linked in: [ 126.990996][ T3821] CPU: 0 UID: 0 PID: 3821 Comm: syz.1.1202 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 127.004497][ T3821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 127.014660][ T3821] RIP: 0010:__alloc_pages_noprof+0xe4/0x6c0 [ 127.020603][ T3821] Code: 0f 1f 44 00 00 41 83 fd 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d a4 78 ee 05 00 0f 85 c4 00 00 00 c6 05 97 78 ee 05 01 <0f> 0b 31 c0 e9 b6 00 00 00 41 83 fd 0a 0f 87 aa 00 00 00 44 89 6c [ 127.040303][ T3821] RSP: 0018:ffffc900110d7680 EFLAGS: 00010246 [ 127.046435][ T3821] RAX: 0000000000000000 RBX: 1ffff9200221aed4 RCX: 0000000000000000 [ 127.054444][ T3821] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900110d7728 [ 127.062479][ T3821] RBP: ffffc900110d77a8 R08: ffffc900110d7727 R09: 0000000000000000 [ 127.070512][ T3821] R10: ffffc900110d7710 R11: fffff5200221aee5 R12: ffffc900110d76c0 [ 127.078571][ T3821] R13: 000000000000000e R14: dffffc0000000000 R15: 0000000000000000 [ 127.086608][ T3821] FS: 00007f206f9e66c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 127.095604][ T3821] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.102220][ T3821] CR2: 0000200000006000 CR3: 000000011dfd6000 CR4: 00000000003526b0 [ 127.110242][ T3821] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 127.118274][ T3821] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 127.126326][ T3821] Call Trace: [ 127.129629][ T3821] [ 127.132586][ T3821] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 127.138387][ T3821] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 127.144617][ T3821] ? hashtab_init+0xdb/0x1f0 [ 127.149232][ T3821] ___kmalloc_large_node+0x9c/0x1d0 [ 127.154461][ T3821] ? ebitmap_read+0x21d/0x990 [ 127.159277][ T3821] ? hashtab_init+0xdb/0x1f0 [ 127.163889][ T3821] __kmalloc_large_node_noprof+0x1e/0xe0 [ 127.169568][ T3821] ? hashtab_init+0xdb/0x1f0 [ 127.174209][ T3821] __kmalloc_noprof+0x26d/0x450 [ 127.179135][ T3821] hashtab_init+0xdb/0x1f0 [ 127.183589][ T3821] ? policydb_read+0x86f/0x28c0 [ 127.188490][ T3821] symtab_init+0x44/0x70 [ 127.192807][ T3821] policydb_read+0x8fe/0x28c0 [ 127.197545][ T3821] ? kasan_save_alloc_info+0x40/0x50 [ 127.202863][ T3821] ? __cfi_policydb_read+0x10/0x10 [ 127.208037][ T3821] ? security_load_policy+0x128/0x12f0 [ 127.213536][ T3821] security_load_policy+0x162/0x12f0 [ 127.218880][ T3821] ? irqentry_exit+0x4a/0x60 [ 127.223521][ T3821] ? exc_page_fault+0x66/0xc0 [ 127.228238][ T3821] ? asm_exc_page_fault+0x2b/0x30 [ 127.233310][ T3821] ? __cfi_security_load_policy+0x10/0x10 [ 127.239087][ T3821] ? rep_movs_alternative+0x4a/0xa0 [ 127.244320][ T3821] sel_write_load+0x298/0x5e0 [ 127.249056][ T3821] ? __cfi_sel_write_load+0x10/0x10 [ 127.252076][ T3822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.254307][ T3821] ? bpf_lsm_file_permission+0xd/0x20 [ 127.266246][ T3822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.268135][ T3821] ? __cfi_sel_write_load+0x10/0x10 [ 127.281112][ T3821] vfs_write+0x3c0/0xe80 [ 127.285445][ T3821] ? __cfi_vfs_write+0x10/0x10 [ 127.290252][ T3821] ? __kasan_check_write+0x18/0x20 [ 127.295430][ T3821] ? mutex_lock+0x92/0x1c0 [ 127.299969][ T3821] ? __cfi_mutex_lock+0x10/0x10 [ 127.304884][ T3821] ? __fget_files+0x2c5/0x340 [ 127.309609][ T3821] ksys_write+0x141/0x250 [ 127.313966][ T3821] ? xfd_validate_state+0x68/0x150 [ 127.319134][ T3821] ? __cfi_ksys_write+0x10/0x10 [ 127.324033][ T3821] ? __kasan_check_write+0x18/0x20 [ 127.329243][ T3821] ? fpregs_restore_userregs+0x11d/0x260 [ 127.334957][ T3821] __x64_sys_write+0x7f/0x90 [ 127.339579][ T3821] x64_sys_call+0x271c/0x2ee0 [ 127.344281][ T3821] do_syscall_64+0x58/0xf0 [ 127.348753][ T3821] ? clear_bhb_loop+0x35/0x90 [ 127.353497][ T3821] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 127.359458][ T3821] RIP: 0033:0x7f206eb8e929 [ 127.363905][ T3821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.383626][ T3821] RSP: 002b:00007f206f9e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 127.392108][ T3821] RAX: ffffffffffffffda RBX: 00007f206edb5fa0 RCX: 00007f206eb8e929 [ 127.400147][ T3821] RDX: 000000000000606c RSI: 0000200000000000 RDI: 0000000000000008 [ 127.408172][ T3821] RBP: 00007f206ec10b39 R08: 0000000000000000 R09: 0000000000000000 [ 127.416208][ T3821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.424207][ T3821] R13: 0000000000000000 R14: 00007f206edb5fa0 R15: 00007ffecbaf73e8 [ 127.432230][ T3821] [ 127.435284][ T3821] ---[ end trace 0000000000000000 ]--- [ 127.442762][ T3821] SELinux: failed to load policy [ 127.637350][ T3824] rust_binder: Write failure EFAULT in pid:781 [ 127.674536][ T65] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 127.836205][ T65] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 164, changing to 11 [ 127.847456][ T65] usb 2-1: config 1 interface 0 has no altsetting 0 [ 127.855452][ T65] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 127.864592][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.872591][ T65] usb 2-1: Product: syz [ 127.876806][ T65] usb 2-1: Manufacturer: à Š [ 127.881419][ T65] usb 2-1: SerialNumber: syz [ 127.886989][ T65] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 127.895762][ T65] usb 2-1: no configuration chosen from 1 choice [ 129.056718][ T65] usb 4-1: USB disconnect, device number 22 [ 129.096565][ T375] usb 5-1: skipping empty audio interface (v1) [ 129.105154][ T375] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 129.120306][ T2500] udevd[2500]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 129.929039][ T65] usb 2-1: USB disconnect, device number 26