last executing test programs: 58.533628655s ago: executing program 3 (id=638): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x60, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x60}}, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8803, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000cc0001"]) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') unlink(&(0x7f0000000040)='./file1\x00') ioctl$BLKRRPART(r2, 0x125f, 0x0) 58.119657528s ago: executing program 3 (id=642): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000400)={0x2, 0x0, [{0x100000, 0x85, &(0x7f0000001e80)=""/133}, {0x3000, 0xb, &(0x7f0000000000)=""/11}]}) close_range(r0, 0xffffffffffffffff, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x2, 0x2, 0x80, 0xffffffff}, {0x4, 0x8, 0x9d, 0x40}, {0x4, 0xf2, 0x9}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0}) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000140)={r3, 0x6, r4, 0x4, 0x80000}) 58.111510408s ago: executing program 3 (id=643): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x88, 0x1, &(0x7f0000000080), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000000)=0x7fffffff, 0x4) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x80, 0x0, 0x0) recvmsg(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/47, 0x2f}, 0x100e2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000001d80)={'filter\x00', 0x111, 0x4, 0x3a0, 0x0, 0x1d0, 0x1d0, 0x2b8, 0x2b8, 0x2b8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @dev={0xac, 0x14, 0x14, 0x19}, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg1\x00', 'lo\x00', {}, {}, 0x0, 0x158}, 0xc0, 0xe8, 0x0, {0xb000000}}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x2}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x6) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x3, 0x9, 0x10000) r5 = socket$inet(0x2, 0x3, 0x6) setsockopt$inet_int(r5, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r6 = socket$inet(0x2, 0x3, 0x6) r7 = dup3(r5, r6, 0x0) setsockopt$inet_int(r7, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 58.08883388s ago: executing program 3 (id=644): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x66742, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0xffffd000) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$sock_int(r5, 0x1, 0xa, &(0x7f0000000400)=0x4, 0x4) sendmsg$NFT_BATCH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x40000}, 0x8051) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r5) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x14, r6, 0x800, 0x2703d26, 0x25dfdbff, {{}, {@void, @void, @void}}}, 0x14}}, 0x4044057) r7 = dup(r3) recvfrom$packet(r7, 0x0, 0x0, 0x2002, 0x0, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x4000000) madvise(&(0x7f000019c000/0x4000)=nil, 0x4000, 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write(r0, &(0x7f0000001c00)="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", 0xfffffdbf) syz_clone(0x140000, &(0x7f0000000040)="f80863795c20337b7f012aec08006440a21a3bf51b519623b4a1a2cc04d0343d6c8164004736cbf2dc2fa8904f92ae290a91a2c86462a88bbd3fccd4dd57d7340126b6fcf87a814622e2c835b7f0bad2", 0x50, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="3b8879603f0630f364cb467a51572b49834c0dfd40d3e5c7818cc6ded5d61ba7dc5ab88f5bca251df4ff403048e1062c") 58.001423717s ago: executing program 3 (id=647): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xea200, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x2a, &(0x7f0000000080)=ANY=[], 0x190) dup2(r0, r3) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000040)={[{@stats}]}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xea200, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x2a, &(0x7f0000000080)=ANY=[], 0x190) (async) dup2(r0, r3) (async) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000040)={[{@stats}]}) (async) 57.896213186s ago: executing program 3 (id=651): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x0, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 57.868344818s ago: executing program 32 (id=651): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x0, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 1.028907327s ago: executing program 2 (id=1282): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3a) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000014d564b"]) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x20000840}, 0x4048000) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xffffff7f) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$TUNGETVNETBE(r4, 0x800454df, &(0x7f0000000080)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 900.624547ms ago: executing program 2 (id=1289): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f00000000c0)=0x2, 0x4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x563d02, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) close_range(r1, 0xffffffffffffffff, 0x0) 899.998577ms ago: executing program 2 (id=1290): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async, rerun: 64) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (rerun: 64) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000400), 0x48) (async) write$cgroup_subtree(r3, &(0x7f0000000440)=ANY=[@ANYBLOB='-'], 0x7) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async, rerun: 32) sendmmsg$unix(r1, &(0x7f0000007dc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008001}}], 0x1, 0x4000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x12, r4, 0xa0e51000) (async, rerun: 32) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) (rerun: 32) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r5, &(0x7f00000001c0)='keyring\x00', &(0x7f00000023c0)='\x00') keyctl$restrict_keyring(0x1d, r5, 0x0, &(0x7f0000000040)='/dev/rnullb0\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (rerun: 32) 898.615107ms ago: executing program 2 (id=1292): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000280)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x50d, @link_local}, 0x64, {0x2, 0x4e22, @loopback}, 'pim6reg\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000005a000101000000000000000004000080080002"], 0x1c}], 0x1}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r8) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000540)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x11, 0x20, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xdf}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x0, 0x3, 0x5}, {0x6, 0x24, 0x1a, 0x401, 0x26}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x4, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0xf1, 0x16, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x650, 0x26, 0x0, 0x7}}}}}}}]}}, 0x0) socket$tipc(0x1e, 0x5, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000240)={0x0, 0x10, 0x1, '#'}, 0x0, 0x0, 0x0, 0x0}) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) bind$bt_hci(r9, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r9, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) ioctl$EVIOCRMFF(r8, 0x83c0550b, 0x0) getsockopt$sock_int(r7, 0x1, 0xe, 0x0, &(0x7f0000000680)) ioctl$sock_inet_SIOCSARP(r6, 0x8953, &(0x7f0000000180)={{0x2, 0x3, @empty}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x2e, {0x2, 0x4e22, @empty}}) 895.190778ms ago: executing program 4 (id=1293): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xc}, @flat=@handle={0x73682a85, 0x101}}, &(0x7f0000000080)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xc}, @flat=@handle={0x73682a85, 0x101}}, &(0x7f0000000080)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r2, 0x1, 0x2b, 0x0, &(0x7f0000000580)) (async) getsockopt$sock_int(r2, 0x1, 0x2b, 0x0, &(0x7f0000000580)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x28) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="030000000000000004007b407f00000002000000010000000c0000003b0000000000000000000000000000000000000001000040020000000000000048762331"]) (async) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="030000000000000004007b407f00000002000000010000000c0000003b0000000000000000000000000000000000000001000040020000000000000048762331"]) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 730.285061ms ago: executing program 4 (id=1294): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) syz_io_uring_setup(0x6239, &(0x7f0000000080)={0x0, 0x6cf5, 0x4008, 0x1, 0x292}, &(0x7f0000000180), &(0x7f00000004c0)) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="03684a7b99a4fde940f3ec0d105ea2c8267323117153aa4a4f099c3835a607cd5cbd77b83cc33d13bbb6c6bcae59db739af84a4b5d34bffc145f3cc27ed3d4f9d9b3103699a1e1cc4ddfb6c1afd07ddfc18e358cd62649479724ce867fefc0a15041bee9f6084842fb982d5c2cf1488d668b741c64f0a6fd2643e729ac5a56462a6b64d5a0a751fda4fadf63ba0dc2fd14ecbf546918db77095545b41ab170e5d6e8ec8bf9ce9b8d53b832e90c701fe52af7999f8fd509577ead1be27891ada8564167f2c7d2eea1c1c9c65d8e151c58ddee43ec34e74d330ec50cbbb2bb21892c7ca995066e3cbea8a69d94dc6bcef5f3c0ef630e774d092ea58627f3e09c66a9c7d1abcf4f8f8af87f4269df288aca9bbf758275ce9695256e764d185a91a7570fca3aab16c75ecaff6b8dda371c3226d6ec6e55c5c4d8cfc5c33892bacc956a3613bcfa849da1b5e070a7911d7488b3e628d9339718e8b821f1bb5d5c45f0316bb563d0a442801412dfd5a4d61ca657e04d6686f7d5863d57954400aeee8e79be8f3cc4cbb3d4b91269df039c3d3543e500b90a2bdc6eb60cc7afab7b5187d88fbd76e6212ea29e872b73f925287bdc808b4a4f8ec7f8aa08bc90b29e217c3eef69d8deae4141f4f9bd110b7bde9320e7b45f422e9a6111bcaf99c9911e46e219d3bab477926bd5d2e78d4cd0eca133c232b1e863fd7799dbf609f3670b323e5518e8f4bd36e9b3da2c68a28eaec9cac688b4dd0b73adc24a8c7acc264399b7facbc2f43e8e40b6cae9f8e956d1dbfe259f12bae75ad362c354050ffdd6e954f2d7615fafce888bd6f672a81c9fd4318caba765069c0a425e898bf7611b77f0fe61c27d318159dba42f011900246c64557d27b77aef928ab04a147baca37863cf998a2ac30b903c0314449ddb218887c309ec7184c8c733f5d4e7b2d79516e9531c9a5becf8294d6ccd777f285b13160e1c949d3069c6c66c0daa62bac679bc9b69825398d1c290d765e882fa2c8708b20ccec885ab6785dc22696b61c109ff84bc5407932c3e5bf12069a68b8e3333a26d3dd390ef9bc01b86013fbcb5c28a1f4d2b8084f1502fccc4027a124c3629d8f4a8befd14b597cebda5f94f36050a31b95087cbac347788a71a90e87f2187fae600aa42719c05c2859cb30ae0fd58a7bba681f7a6027a00583071def2c9a94456e5d9acb9fd2d11fdea524582489c02377bf7f590948985c769b3822cb6366681d79113c6a6c752f2475caba77b7b2e8f293d7fd9b991f63e254c98dec94f4f3def4fee9cdb56ff3ba7fe6a718cbe9a7f04710e257ea8a49d6605266048fc122d4f3173d4b04b3e282bd3c5198d7fcb72ec38e0b07dd8a541b2807e601e5a0a01f07a281e0e1a261c65977088a54597efd0997c59647aeebb2605a89705eeff3ec780e302e24b23a0cbe4f81367c3f118545f01328d22eb8e802667389143166a9db9477c9b58eb5c76a19b8f8b2692b0d356003f08ae54dfc820d8e357ecbf91fb7e212cbef1262171abaf2f613a5bb59b783cad476fec50d16ca0ac13c08a59a3097e6e3fde700a4b987d10311fc22d4aa210956cd859799f78010e4c0f25b715876aa253df15009490f71be3b0022875161f537c70b14bdb9e2d87a5a11b414a1198533c7de6fc4d22228133bc26b19d9f1e7627b14c72e3c39d3fa2186a42e50a0d1867dc312f94c7209d51475ed4aa80b2ccb0557a40422bf7317de2fdf3296727723a2d23babd5e23f7c3edf4942bb485b95a122e6aba41b8f80f684f84605462448d5a4fd66dfe9bbf80590b9999b4780d4f4f189a20f4400b2975df85b584c8c8f9fa3095f13aede1f52dac98be358b0a0d72bed4df71cd23973e326179580268c4e5d1be4b2ae2e1e2dba913998faa6088af128fc8fd3ae26203a898882b67d86d63f6ee8f8e216337330db6d928facf9d0ca273845ee5b33a0a136aeb48b7c52d3b95fe73efaf06197ec8753ee0349f19db8730917d0f18a2de9602d3b887bc583ff64dfee67e2bdf4d5cc1c341b89acd3dd5176d2c15ec2a77120b8a49591ca438ae36c52845e5dca550e539da9ba2a2eda49be316f3d6d4b7c83666bd4759940347c29dedd273adac722630a940e104316b4806553ded47132be4e31a50600f5a4dd56825b245b7aae853f56f79e0ec31f7b5db945ee3bb92865acb0d8828598e77446ee50ecd8bf5e7ccbd963445a09e3be215709b0b3bff2e9d12e6549924338f236b4ff973682e2e03fbf6b167e3b3a0f8c3f3c1e8d0e21a71937c918cabab50dd74c011a1a5531cfcf88a5df5fa58f17715f7c7b3a64d9dab6f20a596288969191420ed71daccbae7c1ec88bf74811b5e1f4bd306f3d810c4f3600df2903ffdf8db40ac7153fd93327a1065cf2c4590c8ba9f9391eb6aa600cb42aff8793e4721afeb3d470beda45dad9adfc6f4fdb24eafc63792f5015c656ca37cee82b7ee382bda31d786d6e03d4c8611c4ca464e2360ca747815c9eebd38c8fc7d5eea2db96b29d771a96dc5c884029077125bcc31980564555d21ecce5d0388e1bc1e618c7dfb31b02b1a6730db7eda387dd4ceb96f65178bb088e81133e5086f73c458f84139685ef930945a51979faeab539e4964244709dcb8b38f575d3a3ec1328a0df65fb34241db7cb3250b8ae0dbc44670d2b5cc3a1785d8d281c05256ef2beee3b202d8bce053e55ce1fb2bb208e65d488ae24484b00c2e343fc3544ca546406688022db6e29ceca9539ec095a2a2cfc5f516230f75fc961c5de1e8d33222331f57db02cac5f9208029c6114d041bb1cc7f959f77511f5790a564600c018afc253e5ecd5010bd769b45a04296ca09e87fb63bf3d3b51dd8b3f6d4426a03c0944d09dff654c5718ab1fef063caba34029be6811502e8bb785011dd1e34b0c192915adeeb40faad0725a8f9a62acf61b944a271d20567f350cdee22d76e3cc5966ba742d9c43823af19ba74c60da0df0c5f4e7e26af7224147774a1f8ae09f929066e1769ffb3c40ba9fed13d2670b9e865a155426ed5c83648c0ad34e46f5308b455e0835730fe529668b606f3f52b0d04534d0e14bc0ff0f742359550e6980ac9978455adb3de0f292af12a3700453e035a49eafe98fc0d7f26e42a6c41f380448607b7c96291f98fa6bbd7e32c249a49171f8fa81762a490a1ce5c39d66d35c6ed6c0679440c06197c2e24d48e1de81c711164c02820816afb5393d3d6c801c3c062ac46d1494f52c45ca36faf94894eec9d71e1be6c7256f4aee8dc080156b28623c821ef8d1826ebf0a41332620f42589270e142561374c825e828e2bd9ae41fd34959db48319d54ffe7a1b58ae8f7361cbaee8e26e0e7e1b7f125f8cd99788825efd01c38ec987904190a0ad52bc20cd36cc7209f9269ac87b2fa44d2456661d3056d893cf912c69ae6b2b83d0c781a6d6c33df1910867b71257ab74e244e3ebbac07445069418fe2e440a384e16feedf8e3165676e67866430eb6a8a5334620d8c2cda15b0328bb0c50630886353f95241cf4f3b647a4ff812c70e1b074c4befdc70fbfdbf868bcc81652034b5bfa831f1b686724046dcd17ac91ace83711e9ec7465d14c9d508bce93676a58ef7dae37221436865ad34ac2fd691e3b3e12aee6736dbdeec9b1c05fcedf8b9ced547259a1a40471ebe8b4bfda69d2f884da025e2809fb9f159150bbcb331ca3c502012a7fe76b4fc2771976aeb624ad7f2d72c707f5f19d8ded84581ac5afa697ff99d27d88c9588fe769839c9cc9d6786a0f814667527c53b6253b1825bfe17e7d734d96d61da0ae7349d0922774fa9b4baf332a4568e32cafa417ec659c4ad72cd656a1e2c59c8dee38890ed3acd8b4f8657de41f670106c38c38ba1a553f0f589a57c61f5105d70e0c0953459383cb9337ca972cda1d2cd3056eb07f21c1f5b995a04997fecf501bb201c67fd2afe4d44fedea595969b6b3706087b0f59d2ddbb099d60436a94f0ba33282b29f6e914fe92add4b33cf70b680b905cfa2b2ccb00b9967f99806e8d69783fd35a2d7fbb424e9fde2647609aecb0208bc3864bf95f05e50ba12123edaca8de927b338dfcb3cc597947c606c08315061a7fec98c48f480e2febd26fcc8dc12289aeb0adefa2c2be1766a5bc74ef1aab6c2cdbdfbf1810d956bc889c8e614b7b933ff6e336bb208db5b592775fe71c3ebfad5f47e0d074e1c0cb36761481ec677794f23c3698bd35875719f242e3fc939bc3668f9723f31effe189dabdf4ebbed073eab952c88f13059eee22230bc7724d7266b15726a0b0898cdd274e3e56d0a356166b5d16456249e9e92e84e39f61c0ecdf99ec2cd230440c03fd21cf68f27306628d35ea47367775f39d20a07f3959b38d49e3674061fc1018b647047ad39f77027878badd29927c5806f95aebde5f070fed28ed34052550678d3c6b677a3b5a46f76a98264c42206bf62caa95df5437092b68e025ee9ce2ad733b6db3ec97fd33cdc3b2f77ee90dd86d8bd289ae1a437c86f4153ddcff5e846347bfecc1499bb42980e4fa91790faee1b1991dfead5d7c460348631f0469b2b9e8f65207a00985511e0c41f441d9a3154f5a0298c172fd7135d4bf95c11cdf1769db1cc55f392aec309037599327a7c53c10a56d1ace8ad19186a2fc75dfa9d657c114eae99c1c1a6b4a58440718bea82290bd1c2a67048938c381648ea2b2c7110d748c9c8d782f20430b1427b51d7036e55b0997c6f75717db67a82c88d3647ee036b49392f0467d6010b32f9de3e5e79ef082c5bb975d11d2bf76a97f7159c11a7753db8a065d3126ccda9abbebd2c54374e389942c24b27435868fadb45bb060d3c1084b211e2afa8dfaa2d8dab8dc47fe10e6c32afece7c4976176a7c66d704125c0948c238c843b41b0246be1f50f8e07884cfe7ae8885ca06339a339c8d5978b079e0eb78facfa1dc67ca70733dfefc6c868ca149e0661b70e0134870a3107c8c46711fed14f892d6fc66d95306838688f13b19e904416a8d161cc33527878b38ad10b1c08db21457b2075608be7300d39748e4fcebe02b190f3e8ed32a0ef734b11ca43a21f5f809bba795f5aa0ea01050021d0f5213620af5b08fda6421a42b7c82804a20a6ef6d471babf76f46538327f943476d1d109a3f0dc531233d6f93d8dc27f4745735085f92adf63d617b373fba24f289035710e69eb80da12d36e8eaec22620ffaabadfb824bd5fc309a2c74959505856b5b890bba8f22bc571a9d87e93ba3b9aba6dcf26f7076c0c2e271641835ea25fd49d96c69d4fb8bb8731bd2cbc75146aed10d269f9060462339cde8830b535920be3dbf143eace0f1ea9469b95a64fbd7e5057eb880d4422cbf97cfc3f7140251d4923580ca2113f345cf24a66499ceffd2e39dc4fd74cf448638962957b409f0d218c165c13ffe107aa1dd1d9a02092cd46cf2b353dd2d2ca7b8a7ae8eda0ee18bba269bbffed0c7d400497aee4da0896cf6329d76ccea098fbef9075412d1c2a3644cf0f202b884303d204314ae92c56217b2feb5e7c1e15a99fbdd655fb8f6bbc3ab1259bf03b2ee17c5b7e9443695177ec5040eeff3fc36ceafe143393d76a3d735cfe6c9b632e52dbe64dc1265961e8a27ee9f76c0add9e0581e474d7678214f5b64c932903715befc6b766611f1d7e495573b9a3e009cfcb0ffef7ac57c3561badbfa41c119e541180aa2364de61a601699cd1bf3de01d15794b728e1444efd6ffa1e57d95489c8df91fbc057b66dd6d9f3a01b19f36bc99f0b54ed1f9905067dd1608bce47f5ff1981a25184aacd39e331d8ff3dfa7c012d7e667a69249cb4803b23f7eeaab8ed29c69ba3d2a1b88821ffefc5825650c53b6364f38e0a178312f5d29d5375423cceabc8e1c4e51a566ba3f9b176b858c8860440ff8ebdde725640d2dff6b9160bb69f188755b0ff766b410704cda4c33e1ae2c73b5799a00d2f55de73109728b350302b64df2ce3eaf2e0c6561009b60c2701ac493076305e97ed20c3b42f40b2bc7f13bba4ab8181e2085b07930c6f5579205dff696902be824e65ddc774e886e8d261fe74712a31e406b0f7725b4559d7ad0f27a1a870261aa5bb8a720e7c89ba933770d48821416de070df1abcc6eee1147c20bda090d940aeee2bd48c0f3d94675d9b9cf1a62ba50e31a7af0714dd8325d5fb7142e88c4d22ddb8f0278ee6ba88e361524e291b6d000f6523ad4188b021da9ef4a634ed09eb2002b9c726746c9ffc32f261edb448106aa1e2daaed865255fd1d296fedbbb2de3f7c1f15935e52006492b632ad125aa1e000c9d71bdb945792668e16b26122a3fd7cba1a40db8083068c5c48fd2aaa621c87d9f5621bba442fc26839030dbe4e37fda4046d6503bb03e0f928de25d4cd4e2a40ec93c9021dfcbb25f6e2c943cc85eba8123340d6364949581e8c8c2913d59dafe4297672c0b9e7418485f00cbcf672a588904beb3c074bebf339815b91c7c374ceed5a701e1ade8f5d87ca536120116307ac259577a8e12958425317c482d2c7089bf3d83e12318d1526107a050f3c094492de7255b22e18ca2ff261b3ed197f2f8e67b71b1c5a6a04b99158b58e9baad75201aabe13254617d0de0a9073af62491c67fc18d1ccbf7686a85a99b39e9d7d9c85a0777e47c9fd0e10c932c20f13ef287b44b9b706ec818aa0c48a10caac58a9b8355e84bc820698c2501f0c12e1b67df701cfcbe72dc47a2c87d43753ebfdb24cc838507e241d9fcd3d4955a373209ccda903a3ffced05e4232f2cca9bba197fdba8a9357cb1d6da6d9b4095027dc03e17d59ebc2d358e171da0044df102b193c79390ebcb58023b40c621df71e064b0056bfcf1eaee1eca85357cd1ac78feaa54bbbd85596977ba85003ea60d8685f4e3b756e4f81453077396590fa214f672929e81569442023667b798c24e06ee20dbf64cfccb51b2bca4e2a5b0df137bb37ab3e2854dc7e1b879866a72a5809b563596cc9fd3e53abdbccfd5dbc60662252ddc5c290d72230d79b7504b40fdb45ded2f02e926652c1e04ea4c1c488025ad1098adeebe98e385ab1caec4b9eb4d3bbd5ef3ddf1fd0d72784604a989558fd37f6d4fee20609090b3331e254fec98414a2c54589ee01c9429b7cb574b9167efede1d966a227bf2a8e422f38680d77d3c555cf1117e7d7e804ad730c36a78b7846473d6481bd0839bd3e6982ed47246c370a90b76e5b88de202346fb20b8b6b5ecb6a90b8478d17b175a1821df75b48ecc34866fe5c8960bf64d5ff92831bb9357474bec65e0dd1699b0f0340ee5ac5e9e9d3df66edca20201371fc21ad80aacd49c6b0abcfee9c876c15edcfccde823b55b61cb7b254487ef8c8781a22043f4adaf25df34580a6b3904fd014b50c59fa90eff75fa5fd32aaec9aa10df8a2b9b824952e475c964533942bbe30f4167a11fc15d548e0a31f911030569722f0c67e79e90483f6f0bee1c7f80face1a1b0f940c891be688cb16394f6c07fd29b5f248c211d1f76ec1292755d8bd963e191b3a8851472fbbd2cb732f4fd9fef3a8fb29aea097328173fdeaf56fa2279e86fb954306b040c960d0b601b3a741c96cf1f0bd1172f848585cb3b57d7d2e2a84914526f5a6f9895cf5aa4425b4dbf9f59037756a0321bba204a737e36277e86fd268f6047921f4f8fab69dfee137c07874f12f89084e7117e2c9221690a27f880f17d08d56f9dbc96ffef3920b55fb773dde72e1ba35f3e0c9872e339508281426ab04941df4885f7e0293149f1642c2573e2b6594b8fd953ae2468cf917cdaa0692cf461e3628860935def39af78af5e1540147ab1c70c3ab7f7c76abea0d8541feb43e632d7a2cc7bef15a4700304048ecf135968d0a9644ce899aad05b186a2224bab3836248cc6137472203ebceb29b3e87610df12417ee722f309c54b2e65591d8b929440f3ec43ee9ff8f7b7710668e4312610d1591303d5270394da0ab61e4515af5215dc81137f0dc90f951972731f8d98ceb8b4ea38da7d8dc153ccbae5068781eaf9a4a7b11b4319090261b61aa65a8536292eb5392020eb285b2db07f81e7f764d65037050f1e3748593474c6c1dc11cfcb56e1c916157280098a437265e1c682cbfed717e7275bc6c3bb6c6ef7f0f9fdd19ef82ff2c82284c3a061f57b21d3705aff97710108a7d1217a7ea3feda021d20f1fdca94bbef67e0aeaa3db6ccc2d060f7b33707fe19cb2d0232f1239373bb38e666cbbbf3a697c6d0e957ec6730f56034440e789a7a37304d09eb742f21019a77c608cf578162a55d0aea113c051b110b5281ed8b6638d2b31604e965cb019f2f106bc4e96d1313c70612f1ff18afdce7926270dd242c49cc53792f160d1e143e04d7eb3ca40828b153fac466bc53a084281987b47b806a4ef668859eb9035ef68e9c20bd6bb790fdf6f921569b4e97fae5b7edc761b4944c1d6d90f4df40bc3203ed838d4c61cdeb7a9bbb68d59b2cc00125eecaf06b759ac1b9dd68028225d0a60efa499e4436962362727011eef6cc55962dd4ffe2fd3892907e837045883cc9ba8892ab265a31924f3055d4dee68feff05d9f10ebdf1e8c1c1e7001b5b02a7fe26b9c0641e054ae37854187fb1bb6e9fae05b09e85a1e0e14bc801f2d8b9a178a9a72b147e137e0d83192664a88a3aca4fb6a4f0c5787b20c31bc5975dfbc8bcff8987573bd14b1ca434d93452e67ed01c60be99e535bb3f848888d224520b61cfc1de2d6b2ebef9f24674c31aada52784a0b7b60f351653c71d546cf951e6b4a0d917ac6afd0a713f41833f9f74a3a7d3c19b523299666da2b48676ca7aafebadef05b3bbf4b6b62834046f51d3d4582fb4c9de27a3f5e992853368e4f17f9dba27c8c4438307fc7405f53fb27cc81c1521452a1a5edb0cabdf7a73b1cab0675b619fd5a0fadb7147776e74695c042d9d8bfda045bcef7542b42249f34c7590605d0201a762390f2fee5f3cdb488426609c663c9fc4dc2a5277f3f589a14e6dcc202dfcd89bb148a368ff1792d230c19934143d2c260dbdfb334af863b856e415febd22fba01c568d8f48dba6d92f493cd1164a376f006d55db609cc2c9532a9f56da3b06e3db2a05f797eed57892e2fb677541324bcd763cf4669e7a871e322d0cc6e21befe3c767976f058dbe7a059d673c94c7ac5d49178bf19d32907b6fe66a92cc8ea30a858da43f74354390d6e97021da50812c59a78915e5b33221531bfa054c594ce3a2300e5a7d712773181901dfcf6922e980566fa62b1f2b669a27fbecce29e9be6d22058463e350163f33d18ce92a72d1b470857b6a37998aec5672521a8f0d66ab2bd01de516036ec47d1f63b95b437dc6d5a0168189d5a963cb0a80a9a5f20b03515396e3525f0ab13b0c1e5dd051b4c930da6d57ab6f7dd94ab3e689e0355af0b34871296152a76cce170d7b14d471ee4d9daa93de4ed755f30d45344f724288c17e4b22583158f1305ff55fecf7d526e207fa609886e14c9a168bf364b049409f63590f18a5515de8c1fd8c5a9710b6e33d2ecd01466b799f14be787612b8f17df0c05483a16097c0a504880249e28f1e067663c640a550a8c7ad9d090f7b2e902c5c20936869a5f3d3a014817f90babf847b43cf67ec23f120ae4abc63a418d1d99f359fc2c33a5bb34e1f5780576111a88c5ede834bc41e498548ddd128f9e884f4cd3e1bf1aaa1204079ce74e709306f38f2d6859128fc35d3a74c534ff1dccadfc8fe41f1be9510349af8710eb6d2dbc758be12b65622dad1cf48abc2fc409f5ed6a3af8d0b6548643c46dfba9db4e5827475e6e317c9c018a4dd5de391cc9cca85ec527537e26949e5091baca4f0b563d4c3969f15115e5ccdeb9e40788fe12f9d32d9488a70ae53b819726e4483ea6bbcb76f99775ca5e4f93c76edae462c08d596209f985aa55ef5e786701edcee8d831dd6dc0fee9ad01b6bdd63e886a5e55bdc593390c81e18dfd8c685b81306bad6b7a19a86b2bab5cbf4754708422e99f8f2497d798b3db565e709bcbba4c376c1c60b22b994fe8fdcb25215d505511cc1927f6a35344023d5da0a3ac0830e6aa80f5f7f0d94a67c99c6b22717078aecba2a599daa2acc054cda25e3965172e5fef464ec19aa71de5e84b6de30cc673fbab8c441ea37bfb3fc321a504371bc0996702e9be38db762e339ad7ad66dc2caa887e4ab60272d7963f85b14c941d31e545b85c640427302efe7142f0e0897a8c623ce57da213fbc2d1f90677142fd48cafca0b2934e572833ed6473218d0513dd1f6ecc578e5a1109ddae552b3be0cfe7246d7682a59fe9ae783a0f318d1800d5c466c80c5fd3facd0340f455f081068dd2cda5cda744018d902217152b6c05d37c090f8348b0471053152c2a4570fbab3f6dc30c8e49a63b88a00b3aac75180a633692e35ea976821694e133eb8bb4d31237d002fce1dd2ce55528dafcef2f0e00690562d144bb0e19576ce6ab72deac22067d8edac916b1b07e4eb57ff0b885b1b79f37dcf88135eedc17ffd948b61e4df4985033bcf891dd5b1448c8668947a271d93d03ce31216810a6bb45a6c5a12e290d97a60ad4b5c7384cf19421ac1ca64d346b50771e0b50e5caf1d9dfe056e8da247aa502ff04c8e29ca810a1d3ec7a89bc17dba2936f03a80228171f7999b3f2768617970efe57b14011c80666ac4999a568ebef74e2ca14df0ff6f0fcd47c538be96aaca1e65b53b98447101e49672b48167c0afc1afffe669b0f9718bd3305805c292db9738740b362564e4691cbdf061db1ed3f9db1f8bed82939f835d14f46818e3eb4e25f7a8d77d9d0d7913c45d8a81115c1a5e37b1d3bd1b7b5e6afaaefc81d9700bf83506fbf15457bc0f59f7008cc803efdcb6d39e388f6b28e80d47134265cc5438804b12d50e61a489da829dca05792d2ac182ba747331e88a7118f7dd38067f7d38f37be362260effacbc33863bb47aeebbadeae648a1090718266eedd2ed5a2c23f168759198aa92b2ac45c2a68ff212f29260e641a38541b066d39df4e95cd1c8e7e6ffae1b8017e6f629db3910b07496c8a81e4e66ac2321fd9e7ebfecf5bf6e922d7a79fb710a2d42dad1916c9b186c2c50c818fdb1afa19be867d943ee98f732fe3a01364281c0f6d0eb64a278721dc7bff5316256b0f4251abbd9b8ba7c7c12a3bf02a1fbc9ca94b965588fbc82343d07df8e06eaa5ed2137fec129351d80a9048a7d78b31ffaf2e388864a763c4af7aa53000e0bb2eb8ac0e4272cbb79dc6a7d65890f125c523c7cfddacdedbe87938aca915c92c807dab26be7d748827d4e3188676312ef1ac8460b29e8e715f4075e33104ce82e6785aadf17a7cf82d2a705e9f2d0fd25810ba33d76e54b48eda3effc01f37c89db38af81922fadc8c3361fe74ed51eac5e4437108106ffdedb339b406c082d62a8bf718989846d23f966e1ea39103010f767b3a6f0a0a2041b1dafcb787e69ffad75ed2a0081b92a4136ad5ae557c55a4b6219a390103428181ab36f329ad182a92957495c", 0x2000, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC(r4, 0x4068aea3, &(0x7f0000000080)) shutdown(r1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f00000000c0)=0x6, 0x4) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x16) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x28b, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r5 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}, @free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 721.243192ms ago: executing program 4 (id=1295): ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000000c0)=0x4) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x90000, 0x0) process_mrelease(0xffffffffffffffff, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000140)=0x101) openat$rfkill(0xffffffffffffff9c, 0x0, 0xa6883, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$poke(0x5, r2, &(0x7f0000000080), 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x44, 0x0, 0xc4fc9e906872338b, 0x24, 0x25dfdbff, {{0x15}, {@void, @val={0xc, 0x99, {0xa, 0x2}}}}, [@NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x0, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x25, 0x9, 0x800, 0x2, 0x5, 0x963, 0x6, 0x8]}}]}]}]}]}]}, 0x44}}, 0x0) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r5, &(0x7f0000000400), 0x2000011a) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000044}, 0x80) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r8 = syz_open_procfs(r2, &(0x7f0000000040)='cgroup\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB="db7766246e6f3d", @ANYRESHEX=r1, @ANYBLOB=',\x00']) 720.475682ms ago: executing program 4 (id=1297): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000002c0)={0x0, 0x300, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600030000000800090001000000050002"], 0x44}}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) (async) r5 = geteuid() write$FUSE_ATTR(r1, &(0x7f0000000140)={0x78, 0x0, r4, {0xb, 0xec0, 0x0, {0x3, 0x3, 0x7, 0x7f, 0x7, 0x2, 0x5, 0x0, 0xd, 0x2000, 0xc66, r5, 0xee00, 0x7, 0x28b9}}}, 0x78) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x56, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea0683"}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000004c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 720.237322ms ago: executing program 4 (id=1298): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, 0x0, 0x63) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xa8, &(0x7f0000000000)=ANY=[]) ioctl$TUNSETQUEUE(r0, 0x5452, &(0x7f0000001580)={'veth1_to_bond\x00'}) close(r0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[]) 718.608522ms ago: executing program 1 (id=1299): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) ftruncate(r0, 0x9) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x200e0054, &(0x7f0000000280)={0xa, 0x4e22, 0xfffffffa, @dev={0xfe, 0x80, '\x00', 0x32}}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f0000000000)=0x8, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_udp_int(r1, 0x88, 0x1, &(0x7f0000000080), 0x4) lsm_set_self_attr(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="650000000000000098061e000000000020000000000000000000000000000000a2b1e8f1ac0f29613b363d65963aa4d51050908200"/63], 0x20, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg(r1, &(0x7f0000001780)={&(0x7f0000000100)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000180)="b1bead4dd230229f05ad284a052e8ebea0f57b05ccae562ff59693ba2f07c66ffcd5615dea4943bee6def75dd2681847d5639903b9744a3a59af77311b16cc2f80ae4bd37f445e776c858e87c7fe11cff60540c687ad2aac6dc7a0c7c7e47d73a8878185c7e9a44e77757c982b9932f6574b401747a4e7a92011a2010c55e01b5197451011c15e6bd210cbf7f53174e690a7c6942e5d0e491d314de6019189c8c77c503566", 0xa5}, {&(0x7f0000000480)="b1cec48b85fa24ff2995", 0xa}, {&(0x7f00000002c0)="97b601916066c1cc2fe0b094bf36248c8ddc4cfde22c48c80c0eb009e0d0bbea84d59c19377c00b902c934e63ba01bd6a83b2bae9aa52b154eb52b7dc3239db06adfd72b85fc744cae0e0b0c8aed4db55d987dbfb97f182d455eec81eb7b56adb903522a90766fd7e7a0a391e5d756912e232702b25d5ee2f4fda5fe7710e24ab6705f470607be0530e9333fea2060d049adc2ed7de054703e25ca1c770d7fda712b659732f6faa44141ed768a02f708e8ec9cd03d9650f18d80fee34810dafb6f", 0xc1}, {&(0x7f00000003c0)="244fae6eb7c860f54a358d13905b5617b6429ae28ed916ab683ef4b49277c2fbee99351819612fdda2febe8e302311228043440605caf1a70b6da64addf088bdd9107c73b362aa3da377b9e6b3f27a6e9b17cc20a7e9cfbec95fd5c9579ed1f862cd42d7267b5d51212b6263dc", 0x6d}, {&(0x7f0000000240)="6bbc14448c458fd2812ce560a812d6bedb9e61d3ad2d4f8c28e3c2d8cd105350e8edd4033f765e50be449592570e816ee88fa2c49de9", 0x36}, {&(0x7f0000000440)="4a0b7c6fb1af6254f1b1a5154c37de36bbe58f1b9bc164d770ff03d8469f8a99c1083fc3bf01c2fad5cb453edd9903b20b1b1d7ded1544bf357c6465e3d6", 0x3e}, {&(0x7f00000017c0)="507bcf282b84cf5d514f241b0dfedefc117295d2546b0162c70d4a359654d96c518afdc431a089f2b6d1b905546eac2350605b885da24f9a43720dfa56c384a23755a618f49be4dabba32e66b501a72dddc2d2c1d7dd677237e72618af5b9609016629de2007b91ac502eb7aab1255c63acd8fb87a205c7a3b2441e2ebdc9a26688f494ab58b2fdd3421e524bf833fe3fe429ffedabc05005c0a19f93c0401e2759d4d923247fbf46768f5e640187ac5258280519fe05c7a7983394c62bd1a", 0xbf}, {&(0x7f00000004c0)="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", 0xfd}], 0x8, &(0x7f0000000640)=[{0x78, 0x10c, 0x4, "c20420729ab44f3cc1882e54e3c9d691c7b94820fcc886199590c2d9bb555dfaf4e426efb1959e75228223875200ba3e89e4ef1f39af20b933e6e3589cd779dbd1d276162f6478a2163e841aa275175fe23715716e5855adce6f143898a8825cbb89048ca4"}, {0x1010, 0x118, 0x6, "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"}, {0x30, 0x110, 0x5, "9af31cfe9d70bd6de373af78e3581577e4e2f45ab34142a6c1"}, {0x70, 0x10e, 0xffffffff, "42d5a117575ef5eb0b2aef493c45793d7e5d19901af69e7c1f1a34b02819d1a68de7d17f2f5e227348fd52e00359401f5f4e273333c358f341eab7616af6f9bed35763154804962df011915a55dc951dfe405028fc92394bd8e94c786b"}], 0x1128}, 0x40000c0) 717.976561ms ago: executing program 1 (id=1300): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x228800, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000040)={{}, "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"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000001040)) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001140)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001080)="68273c6f34dd3ef8fcdba89b798e359186e2363d04450f90f3d6b32943e5d0af06b64a0182bbd8a9fb3c45341c5814e0392c2d81c6c748b6f1576c9b71a648d72570f702bd5f1b81e4fb119d02bbbd9d1ffe649ce1191448856ae3bc132313c3bf52b9b7c7da6a668ded02c3aced4c6ba5beb6c6f6f976162d4a172820dc4ad248794e50540e4eaf", 0x88, r0}, 0x68) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000011c0), 0x420201, 0x0) (async) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000001200)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001600)={{&(0x7f0000fed000/0x13000)=nil, 0x13000}, 0x3}) (async) r3 = memfd_secret(0x80000) (async) pselect6(0x40, &(0x7f0000001640)={0x2, 0x4, 0x0, 0x8, 0x2, 0x9, 0x3, 0x6}, &(0x7f0000001680)={0x3, 0x280000, 0x3, 0x1, 0x2, 0x9, 0x6, 0x100}, &(0x7f00000016c0)={0xd3d8, 0x7, 0x0, 0xa81a, 0x8000000000000000, 0xd, 0x0, 0x7}, &(0x7f0000001700)={0x0, 0x989680}, &(0x7f0000001780)={&(0x7f0000001740)={[0x100000000]}, 0x8}) (async) close(r0) (async) write$tun(r2, &(0x7f00000017c0)={@void, @void, @llc={@snap={0xab, 0xab, "0bb1", "894a2b", 0xa00, "0f86a8eba862391ade65f2ff2f4baf686cf4193e69fea286c4d856505e56c65fa533a06e8b4edd2d23b59101c3d8d8d3ae540cbf4bd5171c06c1794146036dda49590067d94cc51fda2b97eeed755a539ca5590b8a1161460295f5462618f888490f3bd9236ed211d8813176b9dd01b544"}}}, 0x7a) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001840), 0x60200, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000018c0), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r6, &(0x7f00000019c0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x30, r7, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x3, 0x59}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0xc1}, 0x4000) connect$unix(r3, &(0x7f0000001a00)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001ac0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001b00)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r9, &(0x7f0000001c00)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xb}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0xc000}, 0xc0) (async) read(r6, &(0x7f0000001c40)=""/67, 0x43) (async) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000001d00), r6) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x30, r12, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040800) write$cgroup_int(r5, &(0x7f0000001e00)=0x3, 0x12) (async) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001e80), r3) (async) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000001ec0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000002700)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002500)={0x194, r13, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x8000}, 0x8081) 715.759852ms ago: executing program 1 (id=1301): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b5af2000000000000000010000000c00018008000400ee"], 0x20}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 64) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000180)) (rerun: 64) unshare(0x2040400) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) (async) fdatasync(0xffffffffffffffff) splice(r4, 0x0, r6, 0x0, 0xea7, 0xa) (async) rt_sigaction(0x3e, &(0x7f00000000c0)={0x0, 0x40000001, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f00000001c0)) (async) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r5) sendmsg$IPVS_CMD_DEL_DEST(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x90, r7, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1b0}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xe}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xc}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8884}, 0x1) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r3, 0x5, 0x40000000, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2008c0d4) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xffffffff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f00000001c0)=[@request_death], 0x0, 0x0, 0x0}) 659.887056ms ago: executing program 1 (id=1302): pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x7000000) pipe2$9p(&(0x7f00000001c0), 0x0) (async) pipe2$9p(&(0x7f00000001c0), 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)="a02d", 0x2) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={@mcast1, @private0, @remote, 0xff, 0x5, 0x9, 0x500, 0x5, 0x2200064}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) r3 = gettid() r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_triestat\x00') readv(r4, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/247, 0xf7}], 0x1) rt_sigqueueinfo(r3, 0x21, &(0x7f0000000180)={0x30, 0x40000020, 0xfffffffe}) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010400000001000000000a0000070900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000f080003400000000008006139af8c6a8c4f67a663de139d5f397203400000000a0800024000000009080001400000000b080003"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) (async) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010400000001000000000a0000070900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000f080003400000000008006139af8c6a8c4f67a663de139d5f397203400000000a0800024000000009080001400000000b080003"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x24044844}, 0x0) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x24044844}, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v3={0x3000000, [{0x0, 0x8}, {0x2, 0x70000000}], r5}, 0x18, 0x0) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000240)=0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000880)={0x7a0, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @beacon=[@NL80211_ATTR_BEACON_HEAD={0x40b, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x9}, @device_b, @broadcast, @initial, {0x5, 0x5}, @value=@ver_80211n={0x0, 0x9, 0x2, 0x0, 0x0, 0x3, 0x1}}, 0x7, @random=0x1ff, 0x200, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @val={0x6, 0x2, 0xdd}, @void, @void, @void, @void, @void, @void, @void, @void, [{0xdd, 0xd8, "4f8f9651db58bda1b2ae988b583fe0a259fe5971f8371ef62babd16341f4d160e71ce4fef7fdf972b554274f6be54ced5f48a8f202e4eccb836d8879cfb11fbe0739ea04cf93cc40d918ef4ebe204f5f35f0cf01935d1dada795b8a36df3e7eacf0e7ccebbb0be67f03b9d5d1456ac372d72b40b621b287e72cce7fdc796d77b7ebd384b636115156ef1aea604fe922f79c6590a2e4f3eea56b7fc0e8f5742aa6a1bca39eea3071bef49285cfad7d3c18dd6b7918710707ad4693a8c02f910b482f9bd0d847a8d985d781a39da97361c17e2bc5f09ef3067"}, {0xdd, 0x60, "37d1afb9b8d9c5256fa0a42ab4fe4562d806e8bd08c0090a168656a878cd171d49e53728ee45665da9499effaa26ef9b89619e148a7faaaea8acc2a6440cbab04eebb3eafda17c64f2fadd2ba6f5a2fb5b617e3b9d287f4e795d27d35b575045"}, {0xdd, 0x22, "ac0f63f024948bf5731faa91c0d7caaddd55017cdbaf789710d263ab11c820451daa"}, {0xdd, 0xd9, "bab28b7bf190291ea9a4bc0e478d4ece7dc4d65253b3af93badd503956e6fbeddce09a28da014f9954d617042bd7d73bde7097a89edd95a5a4e74ac33e3f323acbdca9dfe8ab580a8adb1a49bc16616b71f8c83f105c9bfa301f79e8d502e58783c532f3df0044bdbdac75ecffb712a3b9e03f901b60f4e94a15542b183d4cf86a92e70a217a1ca153a5ba249c28c9d620605371915414c7b674eb4bdd435d8b4387ac42000ac2f31f181882cb93ed35fd843d6ebac727bbd8d195dbcdc7bf38cf326d76911f94108b83f2d23a8beaf7790217b77308db9fe8"}, {0xdd, 0xef, "e2d26f1326e245bfa2997193bfa9b25d29baa973f9afbd7e9187b0016639ec792de597ceb6073539c281fb366a0801e876a94812faf2d082a69c618c609d761cf564714cc67abe4907a8dbfeff9f2a3d999f8fedefc0cd65ab4889c96905f6d50c64c1dc0b723dd881b7cce363c536a9f92e0e34ce28fa57867e63fc787dc30519cb922f2622b62f304bfaf80f86ccb11547b7f0ea9eedb066ace841845384f16bbdef5d061bf655fe0d0e9bed48a783a5de975627bad0d161d8762b31aae8658eb8f303c4c4676f61db7d71c18e48acd9b4faee1354f826176a444ef51828cd05c450fab97711d5cc33e160967007"}, {0xdd, 0xa5, "841e41bf63d5b0a35acbe13a3dabab00b059971d2cccb6b86ab4a5d14e6525ecdc86997d8bbd8dbab6ba79f6d1a1a2901852bc98ae67a480223963044d76f8d7943f7b78ae7a457c324a221ef3ff89f30e3a0cd71d77774897bdeeded9144574b2eba9ed4e1aa157ed656a954b39a189c32379e434ec103d09619316e24cd7883f7154a382103b2cc99504a9e2e1999b30c8e659a3ece8b09c0da0348b0a92679910f4fd74"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x60, 0x7f, [@preq={0x82, 0x46, {{0x0, 0x1, 0x1}, 0x9, 0x8, 0xfffffffa, @device_a, 0x9, @void, 0x2, 0x4, 0x4, [{{}, @device_b, 0x7}, {{0x1}, @broadcast, 0x10000}, {{0x0, 0x0, 0x1}, @device_a, 0x3ff}, {{0x0, 0x0, 0x1}, @device_b, 0x100}]}}, @mic={0x8c, 0x10, {0xec5, "cb7f2128901c", @short="200d46bf8bc74fad"}}, @supported_rates]}, @NL80211_ATTR_IE_ASSOC_RESP={0xbe, 0x80, [@dsss={0x3, 0x1, 0xaf}, @rann={0x7e, 0x15, {{0x0, 0x7c}, 0x0, 0xa0, @device_b, 0x71, 0x10000, 0x5}}, @tim={0x5, 0x9e, {0x35, 0xef, 0x6, "9a808f0f316e56f5788adc44913763339d0691598ae2ae2abbb7dc4a88493dfdaa1651816e03b45f8bb2477cb2bfdedf54009d59c227fe24549eeb72113b80af420e7164138a1f04400b76454cff781777b9e20615d00ce68b2e292037e0b65b7fc9500d710e1f4a87b2bc34c3c6f5e6345ded8c6466af261ca2f6af84109dab557f5c70e673746e26d24f063a435c0a751d6d41fd8696d0a981fb"}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xa2, 0x80, [@random={0x4, 0x96, "95215af09a9e3c41b0703df6e1a2728b75056dd6f50c9ea3eefc5f7e60858a7f8ce7cfd39c112cd26c13aad3cbc1d65123d6be9fe3f4a66ef70bc09c2e3acd81a56af04549ea068c519db169a9c43b215658ac3aaa6acd65a3dfbd96050c9db955819f074696fba373e7f688e7c6aed16e260421c1c381855191051a4c981dbb02d82e539320072cdb842b96f621ee5e4cd9cce8d49f"}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x77, 0xb5, 0x7}}]}], @NL80211_ATTR_TX_RATES={0x190, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x6, 0x8}, {0x1, 0x2}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0x9}, {0x3, 0x2}, {0x4}, {0x5}, {0x3}, {0x6, 0x5}, {0x5, 0x5}, {0x5, 0x3}, {0x2, 0x9}, {}, {0x7, 0x4}, {0x0, 0x4}, {0x2, 0x6}, {0x1, 0x5}, {0x4, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc4a, 0x4, 0x9, 0x3, 0x21, 0x2, 0x7, 0x9e]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x3, 0x8}, {0x7}, {0x2, 0x1}, {0x5, 0x5}, {0x2, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7ff, 0x9, 0x7, 0x1, 0x9, 0x40, 0xfff9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x3, 0x9, 0x101, 0x2, 0x1, 0x0, 0x6e21]}}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x51, 0x6, 0x3, 0x5, 0xd0f9, 0x41, 0x0, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0xc, 0x83f9, 0xc, 0xed2f, 0x4, 0x7, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xd, 0x0, 0xfffd, 0xc, 0xd, 0x8, 0x9d]}}]}, @NL80211_BAND_5GHZ={0xb0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x50, 0x2, [{0x6, 0x7}, {0x5, 0x7}, {0x0, 0x3}, {0x4, 0x7}, {0x5, 0x2}, {0x1, 0x1}, {0x1, 0xa}, {0x0, 0x3}, {0x0, 0x9}, {0x5, 0x7}, {0x3, 0xa}, {0x5, 0x1}, {0x2}, {0x4, 0x3}, {}, {}, {0x0, 0x5}, {0x0, 0x8}, {0x3, 0x8}, {0x0, 0x8}, {0x3, 0x6}, {0x6}, {0x6, 0x4}, {0x1, 0x9}, {0x7, 0x2}, {0x7, 0x3}, {0x3, 0x6}, {0x3, 0x1}, {0x1, 0x5}, {0x1, 0x9}, {0x6, 0x1}, {0x3, 0x9}, {0x1, 0x4}, {0x3, 0x2}, {0x0, 0xa}, {0x6, 0x1}, {0x2, 0x4}, {0x0, 0x2}, {0x1, 0x4}, {0x4, 0x2}, {0x5}, {0x0, 0x5}, {0x7, 0x5}, {0x5, 0x9}, {0x2, 0x8}, {0x7, 0x7}, {0x4, 0x2}, {0x0, 0x5}, {0x2, 0x1}, {0x1}, {0x1, 0x9}, {0x0, 0x3}, {0x3, 0x5}, {0x2, 0x4}, {0x0, 0xa}, {0x6, 0x5}, {0x7, 0x5}, {0x6, 0x9}, {0x5, 0x2}, {0x7, 0x1}, {0x7, 0x7}, {0x0, 0x6}, {0x6}, {0x6, 0x3}, {0x6, 0x6}, {0x3, 0x4}, {0x5, 0x4}, {0x0, 0x5}, {0x4, 0x5}, {0x1, 0x7}, {0x3, 0x6}, {0x5, 0x4}, {0x2, 0x1}, {0x7, 0x9}, {0x1, 0x5}, {0x6, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x2, 0xe7, 0xf801, 0x1, 0x100, 0x7fff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x16, 0x1, 0x18, 0xb, 0x3, 0x16, 0x6, 0x18, 0x36, 0x6, 0x5, 0x6c, 0x2, 0x1b, 0x4, 0x3, 0x6c, 0x16, 0x12, 0x30, 0x6c, 0x3, 0x6c, 0x1b, 0xb]}]}]}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x8}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HE_BSS_COLOR={0x14, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}]}, 0x7a0}, 0x1, 0x0, 0x0, 0x400c810}, 0x1) (async) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000880)={0x7a0, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @beacon=[@NL80211_ATTR_BEACON_HEAD={0x40b, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x9}, @device_b, @broadcast, @initial, {0x5, 0x5}, @value=@ver_80211n={0x0, 0x9, 0x2, 0x0, 0x0, 0x3, 0x1}}, 0x7, @random=0x1ff, 0x200, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @val={0x6, 0x2, 0xdd}, @void, @void, @void, @void, @void, @void, @void, @void, [{0xdd, 0xd8, "4f8f9651db58bda1b2ae988b583fe0a259fe5971f8371ef62babd16341f4d160e71ce4fef7fdf972b554274f6be54ced5f48a8f202e4eccb836d8879cfb11fbe0739ea04cf93cc40d918ef4ebe204f5f35f0cf01935d1dada795b8a36df3e7eacf0e7ccebbb0be67f03b9d5d1456ac372d72b40b621b287e72cce7fdc796d77b7ebd384b636115156ef1aea604fe922f79c6590a2e4f3eea56b7fc0e8f5742aa6a1bca39eea3071bef49285cfad7d3c18dd6b7918710707ad4693a8c02f910b482f9bd0d847a8d985d781a39da97361c17e2bc5f09ef3067"}, {0xdd, 0x60, "37d1afb9b8d9c5256fa0a42ab4fe4562d806e8bd08c0090a168656a878cd171d49e53728ee45665da9499effaa26ef9b89619e148a7faaaea8acc2a6440cbab04eebb3eafda17c64f2fadd2ba6f5a2fb5b617e3b9d287f4e795d27d35b575045"}, {0xdd, 0x22, "ac0f63f024948bf5731faa91c0d7caaddd55017cdbaf789710d263ab11c820451daa"}, {0xdd, 0xd9, "bab28b7bf190291ea9a4bc0e478d4ece7dc4d65253b3af93badd503956e6fbeddce09a28da014f9954d617042bd7d73bde7097a89edd95a5a4e74ac33e3f323acbdca9dfe8ab580a8adb1a49bc16616b71f8c83f105c9bfa301f79e8d502e58783c532f3df0044bdbdac75ecffb712a3b9e03f901b60f4e94a15542b183d4cf86a92e70a217a1ca153a5ba249c28c9d620605371915414c7b674eb4bdd435d8b4387ac42000ac2f31f181882cb93ed35fd843d6ebac727bbd8d195dbcdc7bf38cf326d76911f94108b83f2d23a8beaf7790217b77308db9fe8"}, {0xdd, 0xef, "e2d26f1326e245bfa2997193bfa9b25d29baa973f9afbd7e9187b0016639ec792de597ceb6073539c281fb366a0801e876a94812faf2d082a69c618c609d761cf564714cc67abe4907a8dbfeff9f2a3d999f8fedefc0cd65ab4889c96905f6d50c64c1dc0b723dd881b7cce363c536a9f92e0e34ce28fa57867e63fc787dc30519cb922f2622b62f304bfaf80f86ccb11547b7f0ea9eedb066ace841845384f16bbdef5d061bf655fe0d0e9bed48a783a5de975627bad0d161d8762b31aae8658eb8f303c4c4676f61db7d71c18e48acd9b4faee1354f826176a444ef51828cd05c450fab97711d5cc33e160967007"}, {0xdd, 0xa5, "841e41bf63d5b0a35acbe13a3dabab00b059971d2cccb6b86ab4a5d14e6525ecdc86997d8bbd8dbab6ba79f6d1a1a2901852bc98ae67a480223963044d76f8d7943f7b78ae7a457c324a221ef3ff89f30e3a0cd71d77774897bdeeded9144574b2eba9ed4e1aa157ed656a954b39a189c32379e434ec103d09619316e24cd7883f7154a382103b2cc99504a9e2e1999b30c8e659a3ece8b09c0da0348b0a92679910f4fd74"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x60, 0x7f, [@preq={0x82, 0x46, {{0x0, 0x1, 0x1}, 0x9, 0x8, 0xfffffffa, @device_a, 0x9, @void, 0x2, 0x4, 0x4, [{{}, @device_b, 0x7}, {{0x1}, @broadcast, 0x10000}, {{0x0, 0x0, 0x1}, @device_a, 0x3ff}, {{0x0, 0x0, 0x1}, @device_b, 0x100}]}}, @mic={0x8c, 0x10, {0xec5, "cb7f2128901c", @short="200d46bf8bc74fad"}}, @supported_rates]}, @NL80211_ATTR_IE_ASSOC_RESP={0xbe, 0x80, [@dsss={0x3, 0x1, 0xaf}, @rann={0x7e, 0x15, {{0x0, 0x7c}, 0x0, 0xa0, @device_b, 0x71, 0x10000, 0x5}}, @tim={0x5, 0x9e, {0x35, 0xef, 0x6, "9a808f0f316e56f5788adc44913763339d0691598ae2ae2abbb7dc4a88493dfdaa1651816e03b45f8bb2477cb2bfdedf54009d59c227fe24549eeb72113b80af420e7164138a1f04400b76454cff781777b9e20615d00ce68b2e292037e0b65b7fc9500d710e1f4a87b2bc34c3c6f5e6345ded8c6466af261ca2f6af84109dab557f5c70e673746e26d24f063a435c0a751d6d41fd8696d0a981fb"}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xa2, 0x80, [@random={0x4, 0x96, "95215af09a9e3c41b0703df6e1a2728b75056dd6f50c9ea3eefc5f7e60858a7f8ce7cfd39c112cd26c13aad3cbc1d65123d6be9fe3f4a66ef70bc09c2e3acd81a56af04549ea068c519db169a9c43b215658ac3aaa6acd65a3dfbd96050c9db955819f074696fba373e7f688e7c6aed16e260421c1c381855191051a4c981dbb02d82e539320072cdb842b96f621ee5e4cd9cce8d49f"}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x77, 0xb5, 0x7}}]}], @NL80211_ATTR_TX_RATES={0x190, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x6, 0x8}, {0x1, 0x2}, {0x0, 0xa}, {0x0, 0x3}, {0x7, 0x9}, {0x3, 0x2}, {0x4}, {0x5}, {0x3}, {0x6, 0x5}, {0x5, 0x5}, {0x5, 0x3}, {0x2, 0x9}, {}, {0x7, 0x4}, {0x0, 0x4}, {0x2, 0x6}, {0x1, 0x5}, {0x4, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc4a, 0x4, 0x9, 0x3, 0x21, 0x2, 0x7, 0x9e]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x3, 0x8}, {0x7}, {0x2, 0x1}, {0x5, 0x5}, {0x2, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7ff, 0x9, 0x7, 0x1, 0x9, 0x40, 0xfff9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x3, 0x9, 0x101, 0x2, 0x1, 0x0, 0x6e21]}}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x51, 0x6, 0x3, 0x5, 0xd0f9, 0x41, 0x0, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0xc, 0x83f9, 0xc, 0xed2f, 0x4, 0x7, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xd, 0x0, 0xfffd, 0xc, 0xd, 0x8, 0x9d]}}]}, @NL80211_BAND_5GHZ={0xb0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x50, 0x2, [{0x6, 0x7}, {0x5, 0x7}, {0x0, 0x3}, {0x4, 0x7}, {0x5, 0x2}, {0x1, 0x1}, {0x1, 0xa}, {0x0, 0x3}, {0x0, 0x9}, {0x5, 0x7}, {0x3, 0xa}, {0x5, 0x1}, {0x2}, {0x4, 0x3}, {}, {}, {0x0, 0x5}, {0x0, 0x8}, {0x3, 0x8}, {0x0, 0x8}, {0x3, 0x6}, {0x6}, {0x6, 0x4}, {0x1, 0x9}, {0x7, 0x2}, {0x7, 0x3}, {0x3, 0x6}, {0x3, 0x1}, {0x1, 0x5}, {0x1, 0x9}, {0x6, 0x1}, {0x3, 0x9}, {0x1, 0x4}, {0x3, 0x2}, {0x0, 0xa}, {0x6, 0x1}, {0x2, 0x4}, {0x0, 0x2}, {0x1, 0x4}, {0x4, 0x2}, {0x5}, {0x0, 0x5}, {0x7, 0x5}, {0x5, 0x9}, {0x2, 0x8}, {0x7, 0x7}, {0x4, 0x2}, {0x0, 0x5}, {0x2, 0x1}, {0x1}, {0x1, 0x9}, {0x0, 0x3}, {0x3, 0x5}, {0x2, 0x4}, {0x0, 0xa}, {0x6, 0x5}, {0x7, 0x5}, {0x6, 0x9}, {0x5, 0x2}, {0x7, 0x1}, {0x7, 0x7}, {0x0, 0x6}, {0x6}, {0x6, 0x3}, {0x6, 0x6}, {0x3, 0x4}, {0x5, 0x4}, {0x0, 0x5}, {0x4, 0x5}, {0x1, 0x7}, {0x3, 0x6}, {0x5, 0x4}, {0x2, 0x1}, {0x7, 0x9}, {0x1, 0x5}, {0x6, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x2, 0xe7, 0xf801, 0x1, 0x100, 0x7fff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x16, 0x1, 0x18, 0xb, 0x3, 0x16, 0x6, 0x18, 0x36, 0x6, 0x5, 0x6c, 0x2, 0x1b, 0x4, 0x3, 0x6c, 0x16, 0x12, 0x30, 0x6c, 0x3, 0x6c, 0x1b, 0xb]}]}]}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x8}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HE_BSS_COLOR={0x14, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}]}, 0x7a0}, 0x1, 0x0, 0x0, 0x400c810}, 0x1) sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="280000001e00210000000000000000000a00000005000000000000000a000a00"], 0x28}}, 0x0) (async) sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="280000001e00210000000000000000000a00000005000000000000000a000a00"], 0x28}}, 0x0) shutdown(r9, 0x1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200), 0x200806, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access', 0x3d, r5}}, {@ignoreqv}, {@access_client}, {@cache_fscache}], [{@obj_role={'obj_role', 0x3d, '^'}}, {@dont_appraise}, {@dont_measure}, {@fowner_eq={'fowner', 0x3d, r8}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@subj_role={'subj_role', 0x3d, '/dev/rnullb0\x00'}}]}}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r10, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9, 0x0, "000080f100df000000a7d9de16c708db7200"}) (async) ioctl$TCSETS(r10, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9, 0x0, "000080f100df000000a7d9de16c708db7200"}) syz_open_pts(r10, 0x42) (async) r11 = syz_open_pts(r10, 0x42) dup3(r11, r10, 0x0) 637.637868ms ago: executing program 1 (id=1303): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2b, &(0x7f0000000040)="4a02ad10ac7ad425cf4f2d9063852a5796fff82c83a31b0f0c78d4431487802fda0648cd8ce09538647dff0a60673a62553b90c3efe1549c40b2e95ffb5ee8c293370d558db592aafd32b72744f5b76ad5b83076e80e669071", 0x59) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 452.575603ms ago: executing program 1 (id=1305): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040), 0x0}, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40603d07, &(0x7f0000000180)={0xfffffffe}) r2 = syz_io_uring_setup(0x5455, &(0x7f00000003c0)={0x0, 0x6225, 0x1000, 0x3, 0x19b}, &(0x7f0000000440), &(0x7f0000000480)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000e, 0x810, r2, 0x10000000) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x40000100000200) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r3, 0x22e7c000) 314.546734ms ago: executing program 0 (id=1307): write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000000)={0xff7b, 0x1f, 0x2, 0x7fffffff}, 0xf) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f00000007c0)) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) (async) dup3(r2, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000100)=[@increfs={0x40046304, 0x1000000}], 0x0, 0x0, 0x0}) 260.768239ms ago: executing program 0 (id=1308): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x80000c, 0x10012, r0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x80, 0x9) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) read(r0, 0x0, 0x0) 242.22283ms ago: executing program 0 (id=1309): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r1}, 0x10) ioctl$sock_proto_private(r0, 0x89ea, &(0x7f00000000c0)="8a86e3e3a85dd5021cccd497c8bc47130c332cc791dd41d380dcbf075bd14a73f3b8dc755569d34e737c055db0952f48ea56cfab979240930667dd9cbffa47d6") setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(r0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x6c, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @uid}, @generic="428184a477201ac90f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3db"]}, @nested={0x8, 0x5, 0x0, 0x1, [@generic="0bc007e0"]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x804) socket$inet6(0xa, 0x4, 0x6) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet6_udp_int(r4, 0x11, 0x65, &(0x7f0000000180)=0x2, 0x4) sendmmsg$inet6(r4, &(0x7f0000002900)=[{{&(0x7f00000001c0)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, 0x0) 230.547821ms ago: executing program 0 (id=1310): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) pread64(0xffffffffffffffff, 0x0, 0x0, 0xb01f000000000000) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) (async) r2 = socket(0x10, 0x3, 0x0) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0xc2ca70811247cd71, 0x0, {0x7, 0x1f, 0xfffffffe, 0x640184, 0x1, 0x8001, 0x2, 0x0, 0x0, 0x0, 0x8, 0x7}}, 0x50) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000052000100000000000000000002000000090001"], 0x20}}, 0x0) (async) setuid(0xee00) (async, rerun: 64) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) (async, rerun: 32) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x7f5, 0x4) (rerun: 32) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1a, 0x20000804, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x10}, 0x14) (async) recvfrom$packet(r1, 0x0, 0xfffffffffffffecb, 0x2000, 0x0, 0x4) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xe}, @flat=@binder={0x73622a85, 0x1200, 0x2}, @ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}, 0x400}], 0x52, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df52fc"}) 172.300826ms ago: executing program 0 (id=1311): io_setup(0x1d03, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0x800, 0x2, &(0x7f0000000040)=[{}, {}], 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={[0x9]}, 0x8}) (async) syz_usb_connect$cdc_ecm(0x0, 0x62, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0xfd, 0x20, 0x5, [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x6, 0x24, 0x6, 0x0, 0x0, '|'}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x5, 0x7, 0x2}, [@ncm={0x6, 0x24, 0x1a, 0x2, 0x1}, @obex={0x5, 0x24, 0x15, 0xb2c}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0xf, 0x81}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0xed, 0x6, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x6, 0x81, 0x5}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x5, 0x10, 0x7, 0x8}, 0xbf, &(0x7f00000001c0)={0x5, 0xf, 0xbf, 0x5, [@generic={0x92, 0x10, 0x3, "68136615a2ecdb4578af0991274929b11fa10e65a5155fdf1ea08106469a367ff5b638353ba9f5e1e6c03a5fdb9b19dfa8d6b76a28e44cbcf000980ffbf3bd476ae2c5b6c9b6cef0c934a64cf1e383fbde98eee949e0deb870fc82efaf5082b041164f781cabee85012a7f66c34c2b4666bedd3870428b85f384b2ad612daeb65f7e8b740f58b1380a83d3daa95390"}, @ssp_cap={0xc, 0x10, 0xa, 0xe, 0x0, 0x0, 0x0, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x5, 0x7, 0xf4}, @wireless={0xb, 0x10, 0x1, 0x4, 0x5, 0x5, 0x9, 0x1fec}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0x5, 0xb}]}, 0x6, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2c0a}}, {0xe8, &(0x7f00000002c0)=@string={0xe8, 0x3, "0834c2d878ba949d9c600bede7861f388a9c5e743a8b34350d469b37c8b306e435b3ca33cf2c067158b0d0d1bcf79f792d7aa166aa3d9bfcfd5b144a54308dbbfa46479dd9d8684fd9904bcb67e5c47d3cfefdc681007480d5508fbd27a3e8535856860b5b5c81f630f2c507415139a2090a85739648ae3b4475aff4263c989a5a00c5c0f5e340b6817e800cb44360f2b04135543280b785e828ba5f7b1e6271e2ebb623a68da4d2e226e585a945111f3e8cba58680bdae040458f2358b2969d5d77ac642b6171fa50c30cebafdeea4c1f7dba02f3bf0af51141072738569af044eb60ff49c2"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x860}}, {0xca, &(0x7f0000000400)=@string={0xca, 0x3, "313dad156986041ce07264cef82cb096111b5e7fc94dc5e7411a1a65271381748c8ba25bea87b79cce40dfe49c9b2fcecd6cd60eb3706b7e189a44647b80f2534701617b1185c08cc9ae86b375be68ca83d400bfe5a16c98f911e942d260e0be83f66e3b696dda7b5f034357d0f82a93dfebd90cfaaf7d12fd99b96f4744f7b8fd6be5ea79fd03fd768dfb87360872d745b37b557c09e99a1f11c8d3ce134f0583e4127ce6e4d9c67c723d531f2625a97af70445fbb55ed1da0b3d5a5ab6505b2ccb94db178a26c2"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xc07}}, {0xe5, &(0x7f0000000540)=@string={0xe5, 0x3, "dd693559470391bb6abe7073d6cdb937e91ee624a7b2f1baa10e5c75c02ed56c3bfe42decfba94982f00023761c5642faf11f3252c60da6d0194a02899f3ee3959ad762d24bd78cf0fb6655dafe3953f4d978a1b55d410f31352c6b5aed25430cef6f13b7543dfd75466d290050ac74aaf4306daaff052a6ce1a448ea59288c5bdd9840a645e4b3578805adcc5248c9f7b2362bea4e808c217ee406815805c6e29cf060a3a874deac9770883c7f1532564412fbcc3ad34626c752c79aa83313a12f0eb56b4cd4749f226b035ec79ab5db8f0780645ae6966f9608a0e954c21beebe436"}}]}) r1 = syz_open_dev$evdev(&(0x7f00000006c0), 0x200, 0x121000) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000700)=0xe) cachestat(0xffffffffffffffff, &(0x7f0000000740)={0x5, 0xff}, &(0x7f0000000780), 0x0) (async) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000007c0)={{0x12, 0x1, 0x201, 0x7, 0x1, 0x2, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0x90, 0x1, 0x0, 0x0, 0x0, 0x81, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x7, 0x10, 0x2c}}}}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x300, 0x61, 0x9, 0x5, 0xff, 0x7}, 0x2f, &(0x7f0000000840)={0x5, 0xf, 0x2f, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x1, 0x9, 0x1, 0xca}, @ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0xf7, 0x5, 0x3, 0x3d}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x7f, 0x62, 0x9, 0xa0}, @ptm_cap={0x3}]}, 0x9, [{0xc7, &(0x7f0000000880)=@string={0xc7, 0x3, "0f804e73b4368d88481a067a253b660d12c722a1ee600b30a68220efc2e265ab1f98234afa763f99e1bfcb870b525e4f59af0a9500049be4156612c52427ab88affac803a252550511c675696ee2cd11eeabc422477aa667c27b1c6f0f744b3aecfc29c07a8ed5bb046f4a8ff11a2a918e9331df87e3398cd11b61cd2e745f1508d5104632b7bbbd11169a183026b7dce095b92201b88c0031b7feb13bb4798cad1d994ca571025e63a6d2d09301e0d48320d0a4f3e33d1e10b116c0b0e11e864ad2f1ae4a"}}, {0x4f, &(0x7f0000000980)=@string={0x4f, 0x3, "ba9759f6abe2177e76a5dfaf5c9f2704c0b4217b0e124a71a285d0a216d66a97cc7c1a8d549f4660f58ea61801f90819b09a78c356c9edfae52c2e63f9396b571e17b29e09229534e48fa370fa"}}, {0x5e, &(0x7f0000000a00)=@string={0x5e, 0x3, "a79ee5ea3e4dd9138d4414d878ef7547a0f8cedf577c5114c301bbee0347b92b1119e8ab70179aeecbbe6ead2cef892b62874b52c928ff827f2d00b69c44a7b9177d8aaf49169c213002932e007b358cfc75e06808baedb665f45dcb"}}, {0x63, &(0x7f0000000a80)=@string={0x63, 0x3, "bd8ec61f3daf5bb4ee85614b771a63cf3c2b549810c103ca5ebd44d820cd2d8a1549cec5eb520d07d7049ee6b46a11641a69cdd80562ceda5de4b63f3427792456d63c1c43c08f35cec29fdecf83145e9614885b92c2cb9a4d697b51d080a9ee71"}}, {0xf, &(0x7f0000000b00)=@string={0xf, 0x3, "09057e06a79c459e4d93bb3af1"}}, {0xfa, &(0x7f0000000b40)=@string={0xfa, 0x3, "718ded9984c671ad0a7b352252cabe77ef19bffc7503dc0a2db8f8eca55396b4d03c759f9dde84bd8aef3de9f70eba3c5146582d568874e4266092cfea9971c40664762c73af26d51bb18f5ac2c0ab71d5011286af80136c5bab7367cd3ff2ad7ddcdc02cc98a46d92ca5ad2179cb3b80db649d0a3bfccf47e8a9c766cb88b813b3239b1206af86f6220ff012c05e82ca58d3e8b7e44729f470ce77529d2af6050d29bc75e3c3f8a7ac4db4f611464551f64cf0b4d8a3b105727387a890d9a87ae3ec61a03247986af5455c902c6dd5caf18e9258ac418934ee865d04d2347726e5b93bb409db188bdab1d5d6bd9f582550b7a91ece8b0cf"}}, {0x75, &(0x7f0000000c40)=@string={0x75, 0x3, "4b8dc2927f375e9bf6d9010d48e80eeb35465765d0f1936c5559738ddffe55f3f6bda1b50e29711236b4bd29b303cade539d83b2b7f4c75a35387b696c07bb609ded6a99f16e5dee0aaaeff238ab03716f6a13dbdcce0ef9efc9b42abbf8f04f5066c472ce092b3749f9d6c324986e4cf96d55"}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x438}}, {0xe5, &(0x7f0000000d00)=@string={0xe5, 0x3, "8fb7a73f24b34873f4571f676bd968c8e9507f45d09514aa2926680bf03d42777c5340c9e9e793908644a9568c87f27cfe0f189e6ecefdff8a51899ec7d6cc8e044ee3949156d50114b306a2b99a06714e16aa3d9c1bdc3f414f9020ef66185c10b7b82cd2ba7bcba68cd7acd6211507a27fa9d836f8d0a60bd5a36ceeb412442e1f6fa353409ae39b5e1972c61974133df9b25364c63165ecc9ac5bf36bda20ed71b90fa33c1b0f26bae579b049c9fb4115822c8c6454edf8f427944ad1b10f958ca9edebec2d09c4480423a9ec7a5930476aa36c70408eb3fc3b9e662ae48a94a457"}}]}) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000ec0)) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0xa2000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x814}, 0x40010) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x804040}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x34, r4, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x53}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1a}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x1}]}, 0x34}}, 0x4000884) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001140)=""/111, 0x6f}, {&(0x7f00000011c0)=""/67, 0x43}, {&(0x7f0000001240)=""/190, 0xbe}], 0x3, &(0x7f0000001340)=""/211, 0xd3}, 0x5}], 0x1, 0x100, &(0x7f0000001480)={0x0, 0x989680}) (async) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f00000014c0)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) preadv2(0xffffffffffffffff, &(0x7f0000001a80)=[{&(0x7f0000001500)=""/134, 0x86}, {&(0x7f00000015c0)=""/95, 0x5f}, {&(0x7f0000001640)=""/245, 0xf5}, {&(0x7f0000001740)=""/176, 0xb0}, {&(0x7f0000001800)=""/33, 0x21}, {&(0x7f0000001840)=""/58, 0x3a}, {&(0x7f0000001880)=""/244, 0xf4}, {&(0x7f0000001980)=""/125, 0x7d}, {&(0x7f0000001a00)=""/105, 0x69}], 0x9, 0x0, 0x14, 0x2) (async) ioctl$F2FS_IOC_SEC_TRIM_FILE(r1, 0x4018f514, &(0x7f0000001b40)={0x4, 0x3}) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r7, 0x8919, &(0x7f0000001b80)={'ipvlan1\x00', {0x2, 0x0, @dev}}) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000001bc0)=""/109) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001c40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_MCAST_BROADCAST(r8, 0x10f, 0x85) (async) prctl$PR_SCHED_CORE(0x3e, 0x2, 0xffffffffffffffff, 0x3, &(0x7f0000001c80)) (async) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001cc0), 0x80000, 0x0) openat$cgroup_procs(r9, &(0x7f0000001d00)='cgroup.procs\x00', 0x2, 0x0) (async) sendmsg$SMC_PNETID_DEL(r9, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x94}, 0x844) (async) r10 = syz_open_dev$evdev(&(0x7f0000001e40), 0x0, 0xc0000) ioctl$BTRFS_IOC_RESIZE(r5, 0x50009403, &(0x7f0000001e80)={{r10}, {@void, @actul_num={@val=0x2b, 0x413a, 0x54}}}) 143.884618ms ago: executing program 0 (id=1312): r0 = syz_usb_connect$hid(0x0, 0x90, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0xa0000) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/101) 104.086491ms ago: executing program 2 (id=1313): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x4000001}, 0x4018025) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setown(r2, 0x8, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept(r3, 0x0, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x4000001}, 0x4018025) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) fcntl$setown(r2, 0x8, 0x0) (async) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) accept(r3, 0x0, 0x0) (async) readv(r1, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) (async) 532.219µs ago: executing program 4 (id=1314): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0xfffffffffffffffd) setregid(0x0, r2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f00000000c0)=[{&(0x7f00000003c0)=""/169, 0xa9}], 0x1, &(0x7f0000000380)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000004740)={0x40, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}]}]}]}]}, 0x40}}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x400000003, 0x1200000000}, 0x0) r9 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x2840) ioctl$EVIOCSFF(r9, 0x40304580, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) unshare(0xa000000) syz_usb_connect(0x5, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) setgroups(0x1, &(0x7f0000000100)=[r2]) 0s ago: executing program 2 (id=1315): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000100)={0x0, 0x2710}, 0x10) getsockopt$sock_timeval(r1, 0x1, 0x14, 0x0, &(0x7f0000000180)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000380)={0x60, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x5, 0x0, 0x0, 0x0, 0x74, 0x2, 0xa, 0x54}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008280)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x91, 0x0, 0xfffffffffffffffb, {0x5, 0x0, 0x0, 0x5, 0xe, 0x1000002, {0x0, 0x0, 0x0, 0x1, 0xfffffffffffffff9, 0xfffffffffffffffd, 0x100, 0xb87, 0x0, 0x1000, 0x21, 0x0, 0xee01}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000a00)={&(0x7f0000000540)={0x50, 0xfffffffffffffff5, 0x9, {0x7, 0x29, 0x1, 0xffffffff80000100, 0x2, 0x2, 0x100000, 0x6, 0x0, 0x0, 0x4, 0xe02}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000363000/0x4000)=nil, 0x4000, 0x17) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x15}, @flat=@binder={0x73622a85, 0x100, 0xfffffffffffffffc}, @flat=@binder={0x73622a85, 0x1001, 0x2}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x79, 0x0, &(0x7f00000005c0)="2078b98d43d07572a4ac17e070f6e4ffd39036ed0af8f56f83f08868dc94aaa397e205bed98262b9477344a911603869d9f3f877f7aad1829f47273251843760bd7de0381b6c857784bb0ddc8246ff1e0b7dfd6c9276f53e0667dd48f28b11c6b3c7ee46fd0943891c35a7ab3218af5c438fbfe1deef085e28"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001fc0)={0x28, 0x0, &(0x7f0000001dc0)=[@acquire_done={0x40106309, 0x2}, @acquire_done={0x40106309, 0x2}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): e=1 [ 103.270620][ T2721] netlink: 104 bytes leftover after parsing attributes in process `syz.1.673'. [ 103.329622][ T2724] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.329968][ T2724] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 103.337064][ T2724] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 103.345798][ T2724] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:489 [ 103.355847][ T2724] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.394473][ T2729] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 103.401830][ T2729] rust_binder: Write failure EINVAL in pid:494 [ 103.410326][ T36] audit: type=1400 audit(1755969526.440:590): avc: denied { link } for pid=293 comm="syz-executor" name="#1b" dev="tmpfs" ino=905 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 103.470604][ T530] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 103.495723][ T2734] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.495916][ T2734] rust_binder: 499: no such ref 2 [ 103.507956][ T2734] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 103.515649][ T2734] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:499 [ 103.568610][ T2734] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:499 [ 103.610820][ T530] usb 1-1: device descriptor read/64, error -71 [ 103.870604][ T530] usb 1-1: device descriptor read/64, error -71 [ 103.960606][ T1611] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 103.966956][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 104.021665][ T2755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2755 comm=syz.2.682 [ 104.046104][ T36] audit: type=1400 audit(1755969527.080:591): avc: denied { mount } for pid=2756 comm="syz.2.683" name="/" dev="configfs" ino=1391 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 104.069567][ T36] audit: type=1400 audit(1755969527.080:592): avc: denied { search } for pid=2756 comm="syz.2.683" name="/" dev="configfs" ino=1391 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 104.150603][ T530] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 104.280675][ T530] usb 1-1: device descriptor read/64, error -71 [ 104.330640][ T330] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 104.480633][ T330] usb 3-1: Using ep0 maxpacket: 8 [ 104.487525][ T330] usb 3-1: unable to get BOS descriptor or descriptor too short [ 104.497458][ T330] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 104.506049][ T330] usb 3-1: config 0 has no interface number 0 [ 104.510749][ T2769] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.512449][ T432] rust_binder: 0: removing orphan mapping 0:24 [ 104.528334][ T330] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 104.539881][ T530] usb 1-1: device descriptor read/64, error -71 [ 104.547033][ T432] rust_binder: 0: removing orphan mapping 24:1024 [ 104.553841][ T330] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 16394, setting to 1024 [ 104.565863][ T330] usb 3-1: config 0 interface 88 has no altsetting 0 [ 104.575639][ T330] usb 3-1: string descriptor 0 read error: -22 [ 104.582177][ T330] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 104.592623][ T330] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 104.602141][ T330] usb 3-1: config 0 descriptor?? [ 104.609339][ T330] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input11 [ 104.660817][ T530] usb usb1-port1: attempt power cycle [ 104.770626][ T1890] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 104.810560][ T330] usb 3-1: USB disconnect, device number 31 [ 104.921968][ T1890] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 104.934274][ T1890] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.945725][ T1890] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 104.958452][ T1890] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 104.969864][ T1890] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 104.985767][ T1890] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 104.995092][ T1890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 105.004188][ T1890] usb 5-1: SerialNumber: syz [ 105.010083][ T2773] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 105.019102][ T530] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 105.020379][ T1890] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 105.035837][ T1890] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 105.041662][ T530] usb 1-1: device descriptor read/8, error -71 [ 105.181952][ T530] usb 1-1: device descriptor read/8, error -71 [ 105.223378][ T330] usb 5-1: USB disconnect, device number 2 [ 105.420805][ T530] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 105.442016][ T530] usb 1-1: device descriptor read/8, error -71 [ 105.451959][ T2776] rust_binder: Write failure EFAULT in pid:524 [ 105.571784][ T530] usb 1-1: device descriptor read/8, error -71 [ 105.690782][ T530] usb usb1-port1: unable to enumerate USB device [ 105.743319][ T2778] netlink: 'syz.4.690': attribute type 4 has an invalid length. [ 105.754334][ T2778] netlink: 'syz.4.690': attribute type 5 has an invalid length. [ 105.763881][ T2778] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.690'. [ 105.863157][ T2790] incfs: mount failed -22 [ 106.430555][ T530] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 106.515045][ T2822] syz.2.703: attempt to access beyond end of device [ 106.515045][ T2822] loop2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 106.529471][ T2822] EXT4-fs (loop2): unable to read superblock [ 106.600564][ T530] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 106.620541][ T530] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.642796][ T530] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 106.678600][ T530] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 106.698982][ T530] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.718598][ T530] usb 5-1: Product: syz [ 106.723770][ T530] usb 5-1: Manufacturer: syz [ 106.729898][ T530] usb 5-1: SerialNumber: syz [ 106.740794][ T530] usb 5-1: config 0 descriptor?? [ 106.749508][ T530] usb-storage 5-1:0.0: USB Mass Storage device detected [ 106.761555][ T530] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 106.957869][ T2804] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 107.022582][ T330] usb 5-1: USB disconnect, device number 3 [ 107.190646][ T2833] rust_binder: Write failure EFAULT in pid:548 [ 107.446975][ T2854] rust_binder: Write failure EINVAL in pid:540 [ 107.453464][ T1890] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 107.543316][ T2863] x_tables: duplicate entry at hook 1 [ 107.549872][ T2863] x_tables: unsorted entry at hook 2 [ 107.553477][ T2862] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 107.620537][ T1890] usb 3-1: Using ep0 maxpacket: 8 [ 107.650430][ T1890] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 107.659603][ T1890] usb 3-1: config 179 has no interface number 0 [ 107.669598][ T2869] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 107.669731][ T2869] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:546 [ 107.680775][ T1890] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 107.710181][ T1890] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 107.733539][ T1890] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 107.746099][ T1890] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 107.759038][ T1890] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 107.774916][ T1890] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 107.786297][ T1890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.800617][ T2837] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 107.880538][ T530] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 107.960536][ T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 108.030520][ T530] usb 5-1: Using ep0 maxpacket: 32 [ 108.037543][ T530] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 108.046267][ T530] usb 5-1: config 0 has no interface number 0 [ 108.053492][ T530] usb 5-1: config 0 interface 184 has no altsetting 0 [ 108.062369][ T530] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 108.071976][ T530] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.080200][ T530] usb 5-1: Product: syz [ 108.084840][ T530] usb 5-1: Manufacturer: syz [ 108.089457][ T530] usb 5-1: SerialNumber: syz [ 108.097731][ T530] usb 5-1: config 0 descriptor?? [ 108.105179][ T530] smsc75xx v1.0.0 [ 108.111658][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.124892][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 108.135104][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.153754][ T9] usb 1-1: config 0 descriptor?? [ 108.218222][ T2837] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:552 [ 108.219575][ T1890] usb 3-1: USB disconnect, device number 32 [ 108.230335][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 108.230375][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 108.506458][ T530] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 108.520061][ T530] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 108.532732][ T530] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 108.544311][ T530] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 108.554644][ T530] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 108.568707][ T9] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 108.570339][ T530] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 108.589735][ T530] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 108.598980][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0009/input/input12 [ 108.603066][ T530] usb 5-1: USB disconnect, device number 4 [ 108.675436][ T2899] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.676804][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 108.676827][ T36] audit: type=1400 audit(1755969531.710:603): avc: denied { shutdown } for pid=2898 comm="syz.1.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.677631][ T2899] rust_binder: Error in use_page_slow: ESRCH [ 108.701449][ T9] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 108.718684][ T2899] rust_binder: use_range failure ESRCH [ 108.742677][ T2899] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 108.748712][ T2899] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 108.758158][ T2899] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:554 [ 108.776398][ T432] usb 1-1: USB disconnect, device number 31 [ 108.825928][ T2907] rust_binder: Write failure EFAULT in pid:554 [ 108.826890][ T2907] 9pnet_fd: Insufficient options for proto=fd [ 108.869514][ T36] audit: type=1400 audit(1755969531.900:604): avc: denied { create } for pid=2910 comm="syz.1.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 109.130541][ T1890] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 109.201175][ T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 109.290537][ T1890] usb 2-1: Using ep0 maxpacket: 16 [ 109.297977][ T1890] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 109.308661][ T1890] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.321192][ T1890] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.332694][ T1890] usb 2-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 109.347985][ T1890] usb 2-1: config 7 interface 0 has no altsetting 0 [ 109.357247][ T1890] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 109.367185][ T1890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.380697][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 109.388588][ T9] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 109.399749][ T9] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.413204][ T9] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.424339][ T9] usb 3-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 109.439402][ T9] usb 3-1: config 7 interface 0 has no altsetting 0 [ 109.447741][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 109.458915][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.780634][ T1890] usbhid 2-1:7.0: can't add hid device: -71 [ 109.788232][ T1890] usbhid 2-1:7.0: probe with driver usbhid failed with error -71 [ 109.798853][ T1890] usb 2-1: USB disconnect, device number 34 [ 109.870580][ T530] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 109.879608][ T9] hid (null): report_id 14459 is invalid [ 109.885834][ T9] hid (null): report_id 0 is invalid [ 109.891531][ T9] hid (null): report_id 3563458052 is invalid [ 109.902477][ T9] input: HID 0458:5010 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:7.0/0003:0458:5010.000A/input/input13 [ 109.918418][ T9] kye 0003:0458:5010.000A: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.2-1/input0 [ 110.020542][ T530] usb 1-1: Using ep0 maxpacket: 8 [ 110.027378][ T530] usb 1-1: unable to get BOS descriptor or descriptor too short [ 110.029455][ T36] audit: type=1400 audit(1755969533.060:605): avc: denied { create } for pid=2935 comm="syz.4.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 110.037912][ T530] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 110.060201][ T36] audit: type=1400 audit(1755969533.100:606): avc: denied { mount } for pid=2935 comm="syz.4.740" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 110.065702][ T530] usb 1-1: config 0 has no interface number 0 [ 110.096435][ T1890] usb 3-1: USB disconnect, device number 33 [ 110.097467][ T530] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 110.114418][ T530] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 16394, setting to 1024 [ 110.126026][ T530] usb 1-1: config 0 interface 88 has no altsetting 0 [ 110.135778][ T530] usb 1-1: string descriptor 0 read error: -22 [ 110.143280][ T530] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 110.152851][ T530] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 110.170645][ T530] usb 1-1: config 0 descriptor?? [ 110.173498][ T2939] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 110.179528][ T530] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input14 [ 110.353004][ T36] audit: type=1400 audit(1755969533.390:607): avc: denied { nlmsg_read } for pid=2940 comm="syz.1.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 110.382724][ T2946] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 110.383166][ T2946] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 110.391235][ T2946] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:566 [ 110.402042][ T1890] usb 1-1: USB disconnect, device number 32 [ 110.703796][ T36] audit: type=1400 audit(1755969533.740:608): avc: denied { watch_reads } for pid=2962 comm="syz.4.748" path="/16/file0" dev="tmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 110.950567][ T31] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 110.988954][ T36] audit: type=1400 audit(1755969534.020:609): avc: denied { map } for pid=2967 comm="syz.0.750" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 111.063064][ T36] audit: type=1400 audit(1755969534.100:610): avc: denied { create } for pid=2969 comm="syz.0.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 111.100679][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 111.107819][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 111.116768][ T31] usb 3-1: config 7 has an invalid interface number: 89 but max is 0 [ 111.125295][ T31] usb 3-1: config 7 has no interface number 0 [ 111.131796][ T31] usb 3-1: config 7 interface 89 altsetting 222 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.144113][ T36] audit: type=1400 audit(1755969534.170:611): avc: denied { write } for pid=2971 comm="syz.0.752" path="socket:[22065]" dev="sockfs" ino=22065 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 111.145339][ T31] usb 3-1: config 7 interface 89 has no altsetting 0 [ 111.177976][ T31] usb 3-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=82.fe [ 111.187818][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.196047][ T31] usb 3-1: Product: syz [ 111.200455][ T31] usb 3-1: Manufacturer: syz [ 111.205198][ T31] usb 3-1: SerialNumber: syz [ 111.322743][ T36] audit: type=1326 audit(1755969534.360:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2950 comm="syz.1.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbceff8ebe9 code=0x7fc00000 [ 111.395740][ T2977] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 111.396303][ T2977] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 111.403332][ T2977] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 111.412203][ T2977] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:576 [ 111.583738][ T31] asix 3-1:7.89 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 111.603891][ T31] asix 3-1:7.89: probe with driver asix failed with error -71 [ 111.614377][ T31] usb 3-1: USB disconnect, device number 34 [ 111.620580][ T530] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 111.680619][ T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 111.780578][ T530] usb 5-1: Using ep0 maxpacket: 16 [ 111.787124][ T530] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 111.798043][ T530] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.810097][ T530] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.819999][ T530] usb 5-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 111.833939][ T530] usb 5-1: config 7 interface 0 has no altsetting 0 [ 111.840954][ T530] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 111.850606][ T530] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.852770][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 111.870175][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.881995][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.892934][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 111.907987][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 111.917516][ T9] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 111.926060][ T9] usb 2-1: Manufacturer: syz [ 111.932428][ T9] usb 2-1: config 0 descriptor?? [ 112.273187][ T530] hid (null): report_id 14459 is invalid [ 112.280207][ T530] hid (null): report_id 0 is invalid [ 112.286084][ T530] hid (null): report_id 3563458052 is invalid [ 112.297295][ T530] input: HID 0458:5010 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:7.0/0003:0458:5010.000B/input/input15 [ 112.317597][ T530] kye 0003:0458:5010.000B: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.4-1/input0 [ 112.320903][ T1890] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 112.342615][ T9] appleir 0003:05AC:8243.000C: unknown main item tag 0x0 [ 112.350225][ T9] appleir 0003:05AC:8243.000C: No inputs registered, leaving [ 112.362267][ T9] appleir 0003:05AC:8243.000C: hiddev97,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 112.474306][ T9] usb 5-1: USB disconnect, device number 5 [ 112.500572][ T1890] usb 3-1: Using ep0 maxpacket: 8 [ 112.507937][ T1890] usb 3-1: unable to get BOS descriptor or descriptor too short [ 112.518481][ T1890] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 112.526781][ T1890] usb 3-1: config 0 has no interface number 0 [ 112.533717][ T1890] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 112.545852][ T1890] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 16394, setting to 1024 [ 112.550325][ T2980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.558437][ T1890] usb 3-1: config 0 interface 88 has no altsetting 0 [ 112.571412][ T2980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.577831][ T1890] usb 3-1: string descriptor 0 read error: -22 [ 112.589734][ T330] usb 2-1: USB disconnect, device number 35 [ 112.592131][ T1890] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 112.611258][ T1890] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 112.620362][ T1890] usb 3-1: config 0 descriptor?? [ 112.627336][ T1890] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input16 [ 112.833291][ T9] usb 3-1: USB disconnect, device number 35 [ 112.910718][ T330] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 113.012435][ T2994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.760'. [ 113.022477][ T2994] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 2 [ 113.030767][ T2994] rust_binder: Write failure EINVAL in pid:70 [ 113.055640][ T2996] rust_binder: Error while translating object. [ 113.062500][ T2996] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 113.063241][ T330] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 113.068982][ T2996] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:72 [ 113.079379][ T330] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 113.113333][ T330] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.130354][ T330] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 113.140842][ T330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.150053][ T330] usb 2-1: Product: syz [ 113.154682][ T330] usb 2-1: Manufacturer: syz [ 113.160167][ T330] usb 2-1: SerialNumber: syz [ 113.165632][ T1611] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 113.170415][ T9] rust_binder: 2997: removing orphan mapping 0:24 [ 113.187407][ T330] hub 2-1:1.0: bad descriptor, ignoring hub [ 113.195085][ T330] hub 2-1:1.0: probe with driver hub failed with error -5 [ 113.309231][ T3012] rust_binder: 85: no such ref 16777216 [ 113.387122][ T330] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 36 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 113.450554][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 113.600642][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 113.607851][ T9] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 113.617678][ T9] usb 1-1: config 0 has no interface number 0 [ 113.626237][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 113.635855][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.644862][ T31] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 113.646612][ T9] usb 1-1: Product: syz [ 113.658489][ T9] usb 1-1: Manufacturer: syz [ 113.663807][ T9] usb 1-1: SerialNumber: syz [ 113.672566][ T9] usb 1-1: config 0 descriptor?? [ 113.679504][ T9] smsc95xx v2.0.0 [ 113.700658][ T530] usb 2-1: USB disconnect, device number 36 [ 113.708232][ T530] usblp0: removed [ 113.788462][ T3046] netlink: 'syz.2.775': attribute type 4 has an invalid length. [ 113.796917][ T3046] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.775'. [ 113.808225][ T36] kauditd_printk_skb: 321 callbacks suppressed [ 113.808249][ T36] audit: type=1400 audit(1755969537.843:934): avc: denied { mounton } for pid=3045 comm="syz.2.775" path="/dev/binderfs/binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 113.843334][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.854684][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 113.865305][ T31] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 113.875549][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 113.885136][ T31] usb 5-1: SerialNumber: syz [ 113.916236][ T36] audit: type=1400 audit(1755969537.953:935): avc: denied { map } for pid=3047 comm="syz.2.776" path="pipe:[2715]" dev="pipefs" ino=2715 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 113.918523][ T3048] netlink: 16 bytes leftover after parsing attributes in process `syz.2.776'. [ 114.088906][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 114.100144][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 114.110435][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 114.115764][ T36] audit: type=1400 audit(1755969538.153:936): avc: denied { shutdown } for pid=3052 comm="syz.1.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 114.121845][ T9] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 114.154965][ T9] usb 1-1: USB disconnect, device number 33 [ 114.235757][ T329] Bluetooth: hci0: Frame reassembly failed (-84) [ 114.791500][ T36] audit: type=1400 audit(1755969538.833:937): avc: denied { read write } for pid=3063 comm="syz.2.782" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 114.819910][ T36] audit: type=1400 audit(1755969538.833:938): avc: denied { open } for pid=3063 comm="syz.2.782" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 115.030586][ T530] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 115.182873][ T530] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 115.194750][ T530] usb 3-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 115.206400][ T530] usb 3-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 115.216258][ T530] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.225502][ T530] usb 3-1: Product: syz [ 115.230955][ T530] usb 3-1: Manufacturer: syz [ 115.236056][ T530] usb 3-1: SerialNumber: syz [ 115.446013][ T3064] skbuff: bad partial csum: csum=65506/2 headroom=146 headlen=65526 [ 115.455770][ T3064] 9pnet_fd: Insufficient options for proto=fd [ 116.280624][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 116.280621][ T1611] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 116.342175][ T3068] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 116.342644][ T3068] rust_binder: Error in use_page_slow: ESRCH [ 116.349284][ T3068] rust_binder: use_range failure ESRCH [ 116.355919][ T3068] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 116.361555][ T3068] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 116.369645][ T31] usb 5-1: 0:2 : does not exist [ 116.371051][ T3068] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:591 [ 116.386487][ T31] usb 5-1: unit 5 not found! [ 116.413838][ T31] usb 5-1: USB disconnect, device number 6 [ 116.423257][ T36] audit: type=1400 audit(1755969540.463:939): avc: denied { write } for pid=3069 comm="syz.4.785" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 116.501149][ T3072] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 116.502397][ T3072] rust_binder: Error in use_page_slow: ESRCH [ 116.509257][ T3072] rust_binder: use_range failure ESRCH [ 116.515591][ T3072] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 116.521967][ T3072] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 116.530765][ T3072] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:593 [ 116.542008][ T36] audit: type=1400 audit(1755969540.583:940): avc: denied { listen } for pid=3071 comm="syz.1.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 116.636639][ T3073] netlink: 182 bytes leftover after parsing attributes in process `syz.1.786'. [ 116.647040][ T3073] rust_binder: Error in use_page_slow: ESRCH [ 116.647062][ T3073] rust_binder: use_range failure ESRCH [ 116.654160][ T3073] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 116.660432][ T3073] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 116.668979][ T3073] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:593 [ 116.680874][ T3073] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:593 [ 116.750618][ T31] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 116.920726][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 116.927668][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.938556][ T31] usb 5-1: config 0 has no interfaces? [ 116.946296][ T31] usb 5-1: New USB device found, idVendor=0586, idProduct=401a, bcdDevice= 5.2b [ 116.955687][ T31] usb 5-1: New USB device strings: Mfr=1, Product=199, SerialNumber=3 [ 116.963940][ T31] usb 5-1: Product: syz [ 116.968118][ T31] usb 5-1: Manufacturer: syz [ 116.972960][ T31] usb 5-1: SerialNumber: syz [ 116.978751][ T31] usb 5-1: config 0 descriptor?? [ 117.192013][ T3070] rust_binder: Write failure EFAULT in pid:93 [ 117.230666][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 117.232020][ T330] usb 5-1: USB disconnect, device number 7 [ 117.346363][ T3077] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.356500][ T3082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.365598][ T3082] input: syz1 as /devices/virtual/input/input17 [ 117.380554][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 117.381973][ T3082] rust_binder: Error in use_page_slow: ESRCH [ 117.386124][ T3082] rust_binder: use_range failure ESRCH [ 117.391864][ T9] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.392961][ T3082] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 117.398687][ T9] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.411890][ T3082] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 117.422617][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 117.431045][ T3082] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:601 [ 117.441340][ T9] usb 1-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 117.468072][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.483135][ T9] usb 1-1: config 0 descriptor?? [ 117.558458][ T3090] fuse: Bad value for 'user_id' [ 117.563952][ T3090] fuse: Bad value for 'user_id' [ 117.636237][ T3093] 9pnet_fd: Insufficient options for proto=fd [ 117.764232][ T36] audit: type=1400 audit(1755969541.803:941): avc: denied { read } for pid=3096 comm="syz.4.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 117.804682][ T1874] usb 3-1: USB disconnect, device number 36 [ 117.862592][ T3108] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:617 [ 117.862734][ T3108] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 117.890840][ T3110] netlink: 'syz.2.800': attribute type 30 has an invalid length. [ 117.901226][ T9] ntrig 0003:1B96:0004.000D: unknown main item tag 0x0 [ 117.908419][ T9] ntrig 0003:1B96:0004.000D: unknown main item tag 0x0 [ 117.915613][ T9] ntrig 0003:1B96:0004.000D: unknown main item tag 0x0 [ 117.922904][ T9] ntrig 0003:1B96:0004.000D: unknown main item tag 0x0 [ 117.930076][ T9] ntrig 0003:1B96:0004.000D: unknown main item tag 0x0 [ 117.937151][ T1890] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 117.946073][ T9] ntrig 0003:1B96:0004.000D: hidraw0: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.0-1/input0 [ 118.050660][ T530] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 118.091675][ T1890] usb 2-1: config 4 has an invalid interface number: 86 but max is 0 [ 118.100358][ T1890] usb 2-1: config 4 has no interface number 0 [ 118.106845][ T9] ntrig 0003:1B96:0004.000D: Firmware version: 2.15.3.18.7 (7c24 577a) [ 118.115549][ T1890] usb 2-1: config 4 interface 86 altsetting 3 endpoint 0x6 has an invalid bInterval 253, changing to 11 [ 118.129300][ T1890] usb 2-1: config 4 interface 86 has no altsetting 0 [ 118.138147][ T1890] usb 2-1: New USB device found, idVendor=0499, idProduct=5002, bcdDevice=c6.b5 [ 118.147729][ T1890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.157050][ T1890] usb 2-1: Product: syz [ 118.161527][ T1890] usb 2-1: Manufacturer: syz [ 118.166324][ T1890] usb 2-1: SerialNumber: syz [ 118.190590][ T1874] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 118.201966][ T530] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 118.214777][ T530] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 118.226861][ T530] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 118.238415][ T530] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 118.253666][ T530] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 118.263534][ T530] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.272821][ T530] usb 5-1: config 0 descriptor?? [ 118.303827][ T3075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.313134][ T3075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.327885][ T9] usb 1-1: USB disconnect, device number 34 [ 118.340578][ T1874] usb 3-1: Using ep0 maxpacket: 32 [ 118.350964][ T1874] usb 3-1: unable to get BOS descriptor or descriptor too short [ 118.359158][ T1874] usb 3-1: too many configurations: 202, using maximum allowed: 8 [ 118.368676][ T1874] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 118.375034][ T3095] rust_binder: Write failure EFAULT in pid:614 [ 118.377370][ T1874] usb 3-1: can't read configurations, error -61 [ 118.403256][ T1890] snd-usb-audio 2-1:4.86: probe with driver snd-usb-audio failed with error -2 [ 118.418015][ T1890] usb 2-1: USB disconnect, device number 37 [ 118.436271][ T3103] udevd[3103]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:4.86/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 118.550531][ T1874] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 118.675617][ T3124] input: syz1 as /devices/virtual/input/input18 [ 118.684918][ T530] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 118.698154][ T530] plantronics 0003:047F:FFFF.000E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 118.701248][ T1874] usb 3-1: Using ep0 maxpacket: 32 [ 118.729411][ T1874] usb 3-1: unable to get BOS descriptor or descriptor too short [ 118.739132][ T1874] usb 3-1: too many configurations: 202, using maximum allowed: 8 [ 118.748637][ T1874] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 118.758078][ T1874] usb 3-1: can't read configurations, error -61 [ 118.765956][ T1874] usb usb3-port1: attempt power cycle [ 119.070371][ T3143] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.122451][ T3145] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 119.129602][ T3145] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 119.138656][ T3145] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:626 [ 119.825615][ T36] audit: type=1400 audit(1755969543.863:942): avc: denied { listen } for pid=3160 comm="syz.0.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 119.890592][ T1874] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 119.910911][ T1874] usb 3-1: Using ep0 maxpacket: 32 [ 119.918751][ T1874] usb 3-1: unable to get BOS descriptor or descriptor too short [ 119.924197][ T36] audit: type=1400 audit(1755969543.953:943): avc: denied { mount } for pid=3165 comm="syz.0.816" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 119.927365][ T1874] usb 3-1: too many configurations: 202, using maximum allowed: 8 [ 119.960891][ T1874] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 119.969056][ T1874] usb 3-1: can't read configurations, error -61 [ 119.982983][ T3168] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 120.085269][ T36] audit: type=1400 audit(1755969544.123:944): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 120.106230][ T1874] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 120.130990][ T1874] usb 3-1: Using ep0 maxpacket: 32 [ 120.138382][ T1874] usb 3-1: unable to get BOS descriptor or descriptor too short [ 120.146534][ T1874] usb 3-1: too many configurations: 202, using maximum allowed: 8 [ 120.157014][ T1874] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 120.165482][ T1874] usb 3-1: can't read configurations, error -61 [ 120.172208][ T1874] usb usb3-port1: unable to enumerate USB device [ 120.230615][ T31] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 120.370566][ T10] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 120.380648][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 120.387862][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.399276][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.411157][ T31] usb 2-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 120.420724][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.429885][ T31] usb 2-1: config 0 descriptor?? [ 120.500735][ T10] usb 1-1: device descriptor read/64, error -71 [ 120.760607][ T10] usb 1-1: device descriptor read/64, error -71 [ 120.843493][ T31] input: HID 0458:5012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5012.000F/input/input20 [ 120.857250][ T31] input: HID 0458:5012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5012.000F/input/input21 [ 120.872348][ T31] kye 0003:0458:5012.000F: input,hiddev97,hidraw1: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.1-1/input0 [ 121.000559][ T10] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 121.065588][ T3173] option changes via remount are deprecated (pid=3172 comm=syz.1.818) [ 121.075765][ T3173] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 121.091911][ T31] usb 2-1: USB disconnect, device number 38 [ 121.113632][ T36] audit: type=1400 audit(1755969545.153:945): avc: denied { accept } for pid=3205 comm="syz.2.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 121.113640][ T1874] usb 5-1: USB disconnect, device number 8 [ 121.150531][ T10] usb 1-1: device descriptor read/64, error -71 [ 121.194392][ T3211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.204010][ T3211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.212850][ T3211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.222764][ T3211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.390600][ T10] usb 1-1: device descriptor read/64, error -71 [ 121.430564][ T9] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 121.500745][ T10] usb usb1-port1: attempt power cycle [ 121.570611][ T9] usb 3-1: device descriptor read/64, error -71 [ 121.608497][ T3214] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 121.609197][ T3214] rust_binder: Error in use_page_slow: ESRCH [ 121.617086][ T3214] rust_binder: use_range failure ESRCH [ 121.623881][ T3214] rust_binder: Failed to allocate buffer. len:152, is_oneway:true [ 121.629788][ T3214] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 121.637840][ T3214] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:637 [ 121.657755][ T3216] rust_binder: Read failure Err(EAGAIN) in pid:639 [ 121.810554][ T9] usb 3-1: device descriptor read/64, error -71 [ 121.840545][ T10] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 121.861901][ T10] usb 1-1: device descriptor read/8, error -71 [ 121.992061][ T10] usb 1-1: device descriptor read/8, error -71 [ 122.070609][ T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 122.201232][ T9] usb 3-1: device descriptor read/64, error -71 [ 122.230543][ T10] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 122.262137][ T10] usb 1-1: device descriptor read/8, error -71 [ 122.391988][ T10] usb 1-1: device descriptor read/8, error -71 [ 122.450577][ T9] usb 3-1: device descriptor read/64, error -71 [ 122.466859][ T3256] rust_binder: validate_parent_fixup: fixup_min_offset=58, parent_offset=36 [ 122.466894][ T3256] rust_binder: Error while translating object. [ 122.476981][ T3256] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 122.484219][ T3256] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:111 [ 122.500815][ T10] usb usb1-port1: unable to enumerate USB device [ 122.560778][ T9] usb usb3-port1: attempt power cycle [ 122.850615][ T530] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 122.900621][ T9] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 122.922082][ T9] usb 3-1: device descriptor read/8, error -71 [ 123.011865][ T530] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.024472][ T530] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 123.033865][ T530] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.043664][ T530] usb 2-1: config 0 descriptor?? [ 123.051769][ T9] usb 3-1: device descriptor read/8, error -71 [ 123.239005][ T36] audit: type=1400 audit(1755969547.273:946): avc: denied { create } for pid=3280 comm="syz.0.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 123.267476][ T36] audit: type=1400 audit(1755969547.273:947): avc: denied { write } for pid=3280 comm="syz.0.842" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 123.320632][ T9] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 123.341711][ T9] usb 3-1: device descriptor read/8, error -71 [ 123.471687][ T9] usb 3-1: device descriptor read/8, error -71 [ 123.479325][ T530] keytouch 0003:0926:3333.0010: fixing up Keytouch IEC report descriptor [ 123.490279][ T530] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0010/input/input22 [ 123.502364][ T376] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 123.564989][ T530] keytouch 0003:0926:3333.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 123.580953][ T9] usb usb3-port1: unable to enumerate USB device [ 123.661714][ T376] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.674803][ T376] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 123.684926][ T376] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.697772][ T376] usb 1-1: config 0 descriptor?? [ 123.905611][ T3276] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.906301][ T9] usb 2-1: USB disconnect, device number 39 [ 124.130702][ T376] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor [ 124.141515][ T376] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0011/input/input23 [ 124.214157][ T376] keytouch 0003:0926:3333.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 124.460291][ T3303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.469834][ T3303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.537640][ T10] usb 1-1: USB disconnect, device number 39 [ 124.604219][ T3306] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 124.604242][ T3306] rust_binder: Read failure Err(EFAULT) in pid:128 [ 124.690603][ T9] usb 2-1: new low-speed USB device number 40 using dummy_hcd [ 124.774290][ T3306] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:128 [ 124.860520][ T9] usb 2-1: Invalid ep0 maxpacket: 64 [ 125.001567][ T9] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 125.112218][ T530] hid (null): unknown global tag 0x5f [ 125.127007][ T530] hid (null): unknown global tag 0xe [ 125.134754][ T530] hid (null): invalid report_count -764542236 [ 125.146642][ T530] hid-generic 08C2:0A1D:0007.0012: unexpected long global item [ 125.150752][ T3321] rust_binder: Write failure EFAULT in pid:634 [ 125.154660][ T530] hid-generic 08C2:0A1D:0007.0012: probe with driver hid-generic failed with error -22 [ 125.160576][ T9] usb 2-1: Invalid ep0 maxpacket: 64 [ 125.183626][ T9] usb usb2-port1: attempt power cycle [ 125.212269][ T3330] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.858' resets device [ 125.250736][ T1874] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 125.332486][ T3335] binfmt_misc: register: failed to install interpreter file ./file0 [ 125.421633][ T1874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.441755][ T1874] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 125.463771][ T1874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.475445][ T1874] usb 5-1: config 0 descriptor?? [ 125.540612][ T9] usb 2-1: new low-speed USB device number 42 using dummy_hcd [ 125.560787][ T10] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 125.572232][ T9] usb 2-1: Invalid ep0 maxpacket: 64 [ 125.700574][ T9] usb 2-1: new low-speed USB device number 43 using dummy_hcd [ 125.721295][ T9] usb 2-1: Invalid ep0 maxpacket: 64 [ 125.727600][ T9] usb usb2-port1: unable to enumerate USB device [ 125.739772][ T3363] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 125.739840][ T3363] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:658 [ 125.784649][ T36] audit: type=1400 audit(1755969549.823:948): avc: denied { setopt } for pid=3366 comm="syz.0.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 125.890615][ T530] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 126.052097][ T530] usb 3-1: unable to get BOS descriptor or descriptor too short [ 126.061346][ T530] usb 3-1: not running at top speed; connect to a high speed hub [ 126.070641][ T530] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.081869][ T330] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 126.090248][ T530] usb 3-1: config 1 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 126.104266][ T530] usb 3-1: config 1 interface 0 has no altsetting 0 [ 126.113051][ T530] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 126.122558][ T530] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.132023][ T530] usb 3-1: Product: syz [ 126.136439][ T530] usb 3-1: Manufacturer: syz [ 126.142412][ T530] usb 3-1: SerialNumber: syz [ 126.252516][ T330] usb 1-1: not running at top speed; connect to a high speed hub [ 126.264292][ T330] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 126.274461][ T330] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 126.285538][ T330] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 126.296696][ T330] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 126.307016][ T330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.316040][ T330] usb 1-1: Product: syz [ 126.320567][ T330] usb 1-1: Manufacturer: syz [ 126.325265][ T330] usb 1-1: SerialNumber: syz [ 126.396950][ T530] cdc_ether 3-1:1.0: skipping garbage [ 126.402496][ T530] usb 3-1: bad CDC descriptors [ 126.409266][ T530] usb 3-1: USB disconnect, device number 45 [ 126.532879][ T3373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.869'. [ 126.545626][ T3373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.555016][ T3373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.564125][ T3373] rust_binder: Write failure EFAULT in pid:670 [ 126.565721][ T3373] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 126.582662][ T3373] overlayfs: failed to get uuid (230/file1, err=-13); falling back to uuid=null. [ 126.597155][ T330] usb 1-1: 0:2 : does not exist [ 126.605617][ T330] usb 1-1: USB disconnect, device number 40 [ 126.614497][ T3103] udevd[3103]: setting owner of /dev/snd/controlC0 to uid=0, gid=29 failed: No such file or directory [ 126.917449][ T3377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 126.942368][ T3377] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=444031424 (888062848 ns) > initial count (10 ns). Using initial count to start timer. [ 126.967538][ T3378] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=444031424 (888062848 ns) > initial count (10 ns). Using initial count to start timer. [ 126.988063][ T3378] rust_binder: validate_parent_fixup: fixup_min_offset=58, parent_offset=36 [ 126.988093][ T3378] rust_binder: Error while translating object. [ 126.999129][ T3378] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 127.005952][ T3378] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:658 [ 127.114297][ T3382] __vm_enough_memory: pid: 3382, comm: syz.0.872, bytes: 18014402804453376 not enough memory for the allocation [ 127.290733][ T530] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 127.295175][ T36] audit: type=1400 audit(1755969551.333:949): avc: denied { create } for pid=3383 comm="syz.0.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 127.442863][ T530] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 127.453828][ T530] usb 3-1: config 1 interface 0 altsetting 181 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 127.467491][ T530] usb 3-1: config 1 interface 0 has no altsetting 0 [ 127.476897][ T530] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 127.487553][ T530] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.495919][ T530] usb 3-1: Product: ˝憒㑆ఠ㷆乖䢋듖略鲈䘈苬㿓鈓ꊐݜㄿ↦裌莡ꉳ咆纥㉸從ழ讧걿⨔亓뉭얄슀葋䤝빗馿㞘톷注栴享◗◧報ꓨ莏藷⢞덥ﯕ좢떸枱嘯떦摵﹧겥鈐ᜇ䤬漳 [ 127.519433][ T530] usb 3-1: SerialNumber: syz [ 127.743534][ T530] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 127.753673][ T530] usb 3-1: USB disconnect, device number 46 [ 128.110888][ T3391] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 128.133603][ T1874] usbhid 5-1:0.0: can't add hid device: -71 [ 128.140782][ T1874] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 128.150311][ T1874] usb 5-1: USB disconnect, device number 9 [ 128.161765][ T3390] rust_binder: 678: no such ref 2 [ 128.175878][ T9] rust_binder: 3389: removing orphan mapping 0:112 [ 128.188100][ T9] rust_binder: 0: removing orphan mapping 112:8 [ 128.196834][ T36] audit: type=1326 audit(1755969552.223:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3397 comm="syz.4.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46e0d8ebe9 code=0x7ffc0000 [ 128.223678][ T3404] rust_binder: Write failure EFAULT in pid:681 [ 128.224292][ T36] audit: type=1326 audit(1755969552.223:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3397 comm="syz.4.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46e0d8ebe9 code=0x7ffc0000 [ 128.255184][ T36] audit: type=1326 audit(1755969552.223:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3397 comm="syz.4.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f46e0d8ebe9 code=0x7ffc0000 [ 128.279662][ T36] audit: type=1326 audit(1755969552.223:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3397 comm="syz.4.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46e0d8ebe9 code=0x7ffc0000 [ 128.304050][ T36] audit: type=1326 audit(1755969552.223:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3397 comm="syz.4.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46e0d8ebe9 code=0x7ffc0000 [ 128.330168][ T36] audit: type=1400 audit(1755969552.293:955): avc: denied { setattr } for pid=3410 comm="syz.0.880" name="NETLINK" dev="sockfs" ino=25177 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.379467][ T36] audit: type=1400 audit(1755969552.413:956): avc: denied { mounton } for pid=3418 comm="syz.4.883" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 128.404494][ T36] audit: type=1400 audit(1755969552.443:957): avc: denied { unmount } for pid=2652 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 128.521224][ T3434] rust_binder: Write failure EFAULT in pid:672 [ 128.521219][ T3433] rust_binder: Write failure EFAULT in pid:672 [ 128.580574][ T10] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 128.589875][ T3437] rust_binder: Error while translating object. [ 128.595228][ T1890] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 128.595689][ T3437] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 128.610832][ T3437] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:675 [ 128.646845][ T3442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.891'. [ 128.689567][ T3445] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 128.689600][ T3445] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:684 [ 128.752054][ T1890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.752300][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.790336][ T1890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.801095][ T1890] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 128.812119][ T1890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.821928][ T1890] usb 2-1: config 0 descriptor?? [ 128.831617][ T10] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 128.842671][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.851948][ T10] usb 1-1: config 0 descriptor?? [ 129.031553][ T3447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.041078][ T3447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.055461][ T1890] usbhid 2-1:0.0: can't add hid device: -71 [ 129.064234][ T1890] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 129.074880][ T1890] usb 2-1: USB disconnect, device number 44 [ 129.081668][ T3451] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.083009][ T3451] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false [ 129.090179][ T3451] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 129.098540][ T3451] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:686 [ 129.266503][ T10] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor [ 129.302758][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0013/input/input24 [ 129.341285][ T3469] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 4 [ 129.350885][ T3469] rust_binder: 171: no such ref 1 [ 129.389608][ T10] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 129.460546][ T1890] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 129.631876][ T1890] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.643369][ T1890] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 129.654591][ T1890] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 129.664545][ T1890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 129.673346][ T1890] usb 2-1: SerialNumber: syz [ 129.680009][ T1874] usb 1-1: USB disconnect, device number 41 [ 129.890897][ T3454] netlink: 100 bytes leftover after parsing attributes in process `syz.1.894'. [ 129.949836][ T1890] usb 2-1: 0:2 : does not exist [ 129.959450][ T1890] usb 2-1: USB disconnect, device number 45 [ 129.979375][ T3103] udevd[3103]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 130.477974][ T3506] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.478187][ T3506] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 130.484789][ T3506] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 130.493220][ T3506] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:692 [ 130.509808][ T3508] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 130.520903][ T3508] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:708 [ 130.786268][ T3527] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3507366080 (224471429120 ns) > initial count (25249277504 ns). Using initial count to start timer. [ 130.835497][ T3527] kvm: pic: single mode not supported [ 130.836288][ T3527] kvm: pic: non byte write [ 130.846931][ T3527] kvm: pic: non byte write [ 130.851917][ T3527] kvm: pic: single mode not supported [ 130.851935][ T3527] kvm: pic: level sensitive irq not supported [ 130.858375][ T3527] kvm: pic: non byte write [ 130.869783][ T3527] kvm: pic: non byte write [ 130.874773][ T3527] kvm: pic: single mode not supported [ 130.874789][ T3527] kvm: pic: level sensitive irq not supported [ 130.880722][ T330] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 130.888847][ T3527] kvm: pic: non byte write [ 130.900845][ T3527] kvm: pic: non byte read [ 131.038132][ T3532] /dev/rnullb0: Can't open blockdev [ 131.040619][ T1874] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 131.044720][ T330] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 131.069938][ T330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.084783][ T330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.096167][ T330] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 131.111207][ T330] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 131.121558][ T330] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 131.130726][ T330] usb 2-1: Manufacturer: syz [ 131.138799][ T330] usb 2-1: config 0 descriptor?? [ 131.152950][ T3541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=3541 comm=syz.2.921 [ 131.153281][ T3540] fuse: Unknown parameter 'fuse' [ 131.201073][ T3546] syz.2.923: attempt to access beyond end of device [ 131.201073][ T3546] loop2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 131.215747][ T1874] usb 1-1: Using ep0 maxpacket: 16 [ 131.221142][ T3546] EXT4-fs (loop2): unable to read superblock [ 131.228824][ T1874] usb 1-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 131.245114][ T1874] usb 1-1: config 1 interface 0 has no altsetting 0 [ 131.263110][ T1874] usb 1-1: New USB device found, idVendor=05ac, idProduct=1440, bcdDevice= 0.40 [ 131.273554][ T1874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.283068][ T1874] usb 1-1: Product: syz [ 131.289735][ T1874] usb 1-1: Manufacturer: syz [ 131.295291][ T1874] usb 1-1: SerialNumber: syz [ 131.338124][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 131.338149][ T36] audit: type=1400 audit(1755969555.373:964): avc: denied { bind } for pid=3554 comm="syz.2.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 131.390191][ T330] usbhid 2-1:0.0: can't add hid device: -71 [ 131.393177][ T3559] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 131.397844][ T330] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 131.500065][ T3563] rust_binder: Error in use_page_slow: ESRCH [ 131.507779][ T3563] rust_binder: use_range failure ESRCH [ 131.507676][ T36] audit: type=1400 audit(1755969555.443:965): avc: denied { create } for pid=3557 comm="syz.2.927" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 131.519269][ T3563] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 131.615979][ T36] audit: type=1400 audit(1755969555.443:966): avc: denied { associate } for pid=3557 comm="syz.2.927" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 131.623043][ T1874] usbhid 1-1:1.0: can't add hid device: -71 [ 131.624766][ T36] audit: type=1400 audit(1755969555.443:967): avc: denied { mounton } for pid=3557 comm="syz.2.927" path="/237/file0" dev="tmpfs" ino=1321 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 131.731773][ T36] audit: type=1400 audit(1755969555.443:968): avc: denied { write } for pid=3557 comm="syz.2.927" name="file0" dev="tmpfs" ino=1321 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 131.733964][ T3563] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 131.832487][ T330] usb 2-1: USB disconnect, device number 46 [ 131.927730][ T1874] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 131.957223][ T36] audit: type=1400 audit(1755969555.443:969): avc: denied { add_name } for pid=3557 comm="syz.2.927" name="work" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 131.957607][ T36] audit: type=1400 audit(1755969555.443:970): avc: denied { setattr } for pid=3557 comm="syz.2.927" name="work" dev="tmpfs" ino=1323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 131.960643][ T1874] usb 1-1: USB disconnect, device number 42 [ 132.117103][ T36] audit: type=1400 audit(1755969555.443:971): avc: denied { write open } for pid=3557 comm="syz.2.927" path=2F202864656C6574656429 dev="tmpfs" ino=1324 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 132.174036][ T3563] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:702 [ 132.283054][ T3569] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 132.287757][ T36] audit: type=1400 audit(1755969555.443:972): avc: denied { create } for pid=3557 comm="syz.2.927" name="#e5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 132.320529][ T3569] rust_binder: Write failure EINVAL in pid:728 [ 132.360504][ T36] audit: type=1400 audit(1755969555.443:973): avc: denied { remove_name } for pid=3557 comm="syz.2.927" name="#e5" dev="tmpfs" ino=1325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 132.551447][ T3589] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 132.679666][ T3589] rust_binder: Error in use_page_slow: ESRCH [ 132.688065][ T3589] rust_binder: use_range failure ESRCH [ 132.699119][ T3596] input: syz1 as /devices/virtual/input/input25 [ 132.712252][ T1874] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 132.723933][ T3589] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 132.723972][ T3589] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 132.740849][ T3589] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:719 [ 132.823237][ T3601] netlink: 'syz.4.941': attribute type 27 has an invalid length. [ 132.848538][ T3601] rust_binder: Failed to allocate buffer. len:1024, is_oneway:true [ 132.849340][ T3601] rust_binder: Read failure Err(EFAULT) in pid:196 [ 132.860601][ T1874] usb 1-1: device descriptor read/64, error -71 [ 132.902913][ T3605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 132.905441][ T3605] rust_binder: Failed to allocate buffer. len:1136, is_oneway:true [ 132.920629][ T3606] rust_binder: Failed to allocate buffer. len:1120, is_oneway:true [ 132.980015][ T3611] rust_binder: inc_ref_done called when no active inc_refs [ 132.998847][ T3612] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 133.068152][ T3618] rust_binder: Write failure EFAULT in pid:731 [ 133.110536][ T1874] usb 1-1: device descriptor read/64, error -71 [ 133.147612][ T3624] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 133.370576][ T1874] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 133.530528][ T1874] usb 1-1: device descriptor read/64, error -71 [ 133.631452][ T3652] netlink: 104 bytes leftover after parsing attributes in process `syz.2.956'. [ 133.780596][ T1874] usb 1-1: device descriptor read/64, error -71 [ 133.899690][ T1874] usb usb1-port1: attempt power cycle [ 134.093529][ T3683] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 134.093584][ T3683] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 134.102934][ T3683] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:220 [ 134.129028][ T3685] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 134.208197][ T3685] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 134.258465][ T1874] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 134.304733][ T1874] usb 1-1: device descriptor read/8, error -71 [ 134.441560][ T1874] usb 1-1: device descriptor read/8, error -71 [ 134.525128][ T3719] rust_binder: 3718 RLIMIT_NICE not set [ 134.532304][ T349] rust_binder: 3717: removing orphan mapping 0:4256 [ 134.622424][ T3728] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 134.633020][ T3728] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 134.680582][ T1874] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 134.701737][ T1874] usb 1-1: device descriptor read/8, error -71 [ 134.862069][ T1874] usb 1-1: device descriptor read/8, error -71 [ 134.970690][ T1874] usb usb1-port1: unable to enumerate USB device [ 134.995784][ T3766] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.000627][ T330] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 135.060631][ T45] Bluetooth: hci0: Frame reassembly failed (-84) [ 135.067151][ T45] Bluetooth: hci0: Frame reassembly failed (-84) [ 135.162147][ T330] usb 3-1: config 16 has an invalid interface number: 19 but max is 0 [ 135.171114][ T330] usb 3-1: config 16 has no interface number 0 [ 135.179821][ T330] usb 3-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 135.190009][ T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.198623][ T330] usb 3-1: Product: syz [ 135.203206][ T330] usb 3-1: Manufacturer: syz [ 135.207868][ T330] usb 3-1: SerialNumber: syz [ 135.430786][ T330] usb 3-1: USB disconnect, device number 47 [ 135.446283][ T3103] udevd[3103]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:16.19/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 135.499666][ T3781] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.532516][ T3788] netlink: 'syz.4.993': attribute type 28 has an invalid length. [ 135.560670][ T3790] syz.4.994 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 135.720296][ T3805] ip6_vti0: mtu less than device minimum [ 135.740545][ T1874] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 135.870546][ T1874] usb 1-1: device descriptor read/64, error -71 [ 135.890550][ T330] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 136.042489][ T330] usb 3-1: unable to get BOS descriptor or descriptor too short [ 136.051585][ T330] usb 3-1: config 8 has an invalid interface number: 43 but max is 0 [ 136.059947][ T330] usb 3-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 136.069384][ T330] usb 3-1: config 8 has no interface number 0 [ 136.076171][ T330] usb 3-1: config 8 interface 43 altsetting 255 endpoint 0x4 has invalid maxpacket 24929, setting to 1024 [ 136.087689][ T330] usb 3-1: config 8 interface 43 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 1024 [ 136.099106][ T330] usb 3-1: config 8 interface 43 has no altsetting 0 [ 136.109815][ T330] usb 3-1: New USB device found, idVendor=0582, idProduct=935b, bcdDevice=be.6c [ 136.110534][ T1874] usb 1-1: device descriptor read/64, error -71 [ 136.119507][ T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=33 [ 136.135062][ T330] usb 3-1: Product: syz [ 136.140709][ T330] usb 3-1: Manufacturer: syz [ 136.145573][ T330] usb 3-1: SerialNumber: syz [ 136.151693][ T3776] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 136.361509][ T3776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.370746][ T1874] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 136.370851][ T3776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.510601][ T1874] usb 1-1: device descriptor read/64, error -71 [ 136.750652][ T1874] usb 1-1: device descriptor read/64, error -71 [ 136.860834][ T1874] usb usb1-port1: attempt power cycle [ 137.080555][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 137.080586][ T1611] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 137.201251][ T1874] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 137.221781][ T1874] usb 1-1: device descriptor read/8, error -71 [ 137.351737][ T1874] usb 1-1: device descriptor read/8, error -71 [ 137.590723][ T1874] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 137.611884][ T1874] usb 1-1: device descriptor read/8, error -71 [ 137.742095][ T1874] usb 1-1: device descriptor read/8, error -71 [ 137.807912][ T3832] 9pnet_fd: Insufficient options for proto=fd [ 137.850662][ T1874] usb usb1-port1: unable to enumerate USB device [ 137.935155][ T3847] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 137.937431][ T3847] rust_binder: Error in use_page_slow: ESRCH [ 137.944567][ T3847] rust_binder: use_range failure ESRCH [ 137.951722][ T3847] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 137.957813][ T3847] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 137.968559][ T3847] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:754 [ 138.009361][ T3864] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=40 sclass=netlink_audit_socket pid=3864 comm=syz.4.1022 [ 138.032172][ T3864] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=46 sclass=netlink_audit_socket pid=3864 comm=syz.4.1022 [ 138.045467][ T3864] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=23 sclass=netlink_audit_socket pid=3864 comm=syz.4.1022 [ 138.059162][ T3864] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=51 sclass=netlink_audit_socket pid=3864 comm=syz.4.1022 [ 138.087534][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 138.087556][ T36] audit: type=1326 audit(1755969562.123:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3867 comm="syz.4.1023" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f46e0d8ebe9 code=0x0 [ 138.139299][ T3869] overlayfs: failed to clone upperpath [ 138.463335][ T330] usb 3-1: USB disconnect, device number 48 [ 138.477360][ T3103] udevd[3103]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:8.43/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 138.685914][ T3885] rust_binder: 733: no such ref 3 [ 138.691215][ T3885] rust_binder: Write failure EINVAL in pid:733 [ 138.720775][ T3889] rust_binder: 737: no such ref 0 [ 138.732473][ T3889] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 138.740304][ T3889] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 138.748201][ T3889] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:737 [ 138.835016][ T36] audit: type=1400 audit(1755969562.873:989): avc: denied { map } for pid=3905 comm="syz.2.1037" path="socket:[29075]" dev="sockfs" ino=29075 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 139.000605][ T330] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 139.020583][ T3924] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.020820][ T3925] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.079860][ T3925] rust_binder: Error in use_page_slow: ESRCH [ 139.086889][ T3925] rust_binder: use_range failure ESRCH [ 139.093763][ T3925] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 139.100372][ T3925] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 139.109608][ T3925] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:774 [ 139.130579][ T330] usb 1-1: device descriptor read/64, error -71 [ 139.380570][ T330] usb 1-1: device descriptor read/64, error -71 [ 139.620636][ T330] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 139.750566][ T330] usb 1-1: device descriptor read/64, error -71 [ 139.864966][ T3928] netlink: 'syz.1.1044': attribute type 4 has an invalid length. [ 139.873201][ T3928] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1044'. [ 139.990554][ T330] usb 1-1: device descriptor read/64, error -71 [ 139.997787][ T36] audit: type=1400 audit(1755969564.033:990): avc: denied { setopt } for pid=3931 comm="syz.1.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 140.100854][ T330] usb usb1-port1: attempt power cycle [ 140.230543][ T530] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 140.380649][ T530] usb 2-1: device descriptor read/64, error -71 [ 140.440639][ T330] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 140.462012][ T330] usb 1-1: device descriptor read/8, error -71 [ 140.591940][ T330] usb 1-1: device descriptor read/8, error -71 [ 140.620609][ T530] usb 2-1: device descriptor read/64, error -71 [ 140.830606][ T330] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 140.852001][ T330] usb 1-1: device descriptor read/8, error -71 [ 140.860624][ T530] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 140.982099][ T330] usb 1-1: device descriptor read/8, error -71 [ 140.990676][ T530] usb 2-1: device descriptor read/64, error -71 [ 141.090722][ T330] usb usb1-port1: unable to enumerate USB device [ 141.230579][ T530] usb 2-1: device descriptor read/64, error -71 [ 141.340718][ T530] usb usb2-port1: attempt power cycle [ 141.680600][ T530] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 141.702315][ T530] usb 2-1: device descriptor read/8, error -71 [ 141.782036][ T3936] SELinux: policydb table sizes (8,9) do not match mine (8,7) [ 141.791136][ T3936] SELinux: failed to load policy [ 141.832371][ T530] usb 2-1: device descriptor read/8, error -71 [ 141.849651][ T3942] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=202 sclass=netlink_route_socket pid=3942 comm=syz.0.1047 [ 141.952226][ T36] audit: type=1326 audit(1755969565.993:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3945 comm="syz.4.1049" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f46e0d8ebe9 code=0x0 [ 142.007656][ T3951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1051'. [ 142.017910][ T3951] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1051'. [ 142.031455][ T36] audit: type=1400 audit(1755969566.073:992): avc: denied { write } for pid=3950 comm="syz.0.1051" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 142.031479][ T3951] random: crng reseeded on system resumption [ 142.080592][ T530] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 142.101737][ T530] usb 2-1: device descriptor read/8, error -71 [ 142.241610][ T530] usb 2-1: device descriptor read/8, error -71 [ 142.255248][ T3965] FAULT_INJECTION: forcing a failure. [ 142.255248][ T3965] name failslab, interval 1, probability 0, space 0, times 1 [ 142.270046][ T3965] CPU: 0 UID: 0 PID: 3965 Comm: syz.2.1056 Not tainted syzkaller #0 0043dfd2fbaf315da186ee57f2b2b1c8bfff300f [ 142.270083][ T3965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 142.270097][ T3965] Call Trace: [ 142.270105][ T3965] [ 142.270113][ T3965] __dump_stack+0x21/0x30 [ 142.270161][ T3965] dump_stack_lvl+0x10c/0x190 [ 142.270187][ T3965] ? __cfi_dump_stack_lvl+0x10/0x10 [ 142.270214][ T3965] ? kasan_save_track+0x4f/0x80 [ 142.270237][ T3965] dump_stack+0x19/0x20 [ 142.270261][ T3965] should_fail_ex+0x3d9/0x530 [ 142.270293][ T3965] should_failslab+0xac/0x100 [ 142.270315][ T3965] kmem_cache_alloc_noprof+0x42/0x3a0 [ 142.270343][ T3965] ? mas_alloc_nodes+0x254/0x9e0 [ 142.270363][ T3965] mas_alloc_nodes+0x254/0x9e0 [ 142.270382][ T3965] mas_preallocate+0x762/0xc60 [ 142.270401][ T3965] ? __cfi_mas_preallocate+0x10/0x10 [ 142.270421][ T3965] ? __kasan_check_read+0x15/0x20 [ 142.270454][ T3965] ? anon_vma_name+0x7e/0xd0 [ 142.270479][ T3965] ? vm_area_dup+0x41c/0x570 [ 142.270501][ T3965] __split_vma+0x412/0xa80 [ 142.270521][ T3965] ? vms_gather_munmap_vmas+0xdd0/0xdd0 [ 142.270543][ T3965] ? can_vma_merge_left+0x187/0x4c0 [ 142.270574][ T3965] vma_modify+0x6e1/0x1670 [ 142.270595][ T3965] vma_modify_flags+0x182/0x1c0 [ 142.270617][ T3965] mprotect_fixup+0x40a/0x890 [ 142.270640][ T3965] ? __cfi_selinux_file_mprotect+0x10/0x10 [ 142.270665][ T3965] ? __cfi_mprotect_fixup+0x10/0x10 [ 142.270689][ T3965] ? bpf_lsm_file_mprotect+0xd/0x20 [ 142.270717][ T3965] do_mprotect_pkey+0xaab/0xea0 [ 142.270741][ T3965] ? prot_none_test+0x30/0x30 [ 142.270762][ T3965] ? mutex_unlock+0x8b/0x240 [ 142.270792][ T3965] ? fput+0x1a5/0x240 [ 142.270816][ T3965] ? __cfi_ksys_write+0x10/0x10 [ 142.270837][ T3965] ? __kasan_check_read+0x15/0x20 [ 142.270865][ T3965] __x64_sys_mprotect+0x84/0xa0 [ 142.270899][ T3965] x64_sys_call+0x2590/0x2ee0 [ 142.270928][ T3965] do_syscall_64+0x58/0xf0 [ 142.270952][ T3965] ? clear_bhb_loop+0x50/0xa0 [ 142.270973][ T3965] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 142.271003][ T3965] RIP: 0033:0x7f0db9d8ebe9 [ 142.271023][ T3965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.271051][ T3965] RSP: 002b:00007f0dbab35038 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 142.271077][ T3965] RAX: ffffffffffffffda RBX: 00007f0db9fb5fa0 RCX: 00007f0db9d8ebe9 [ 142.271092][ T3965] RDX: 000000000000000f RSI: 0000000000800000 RDI: 0000200000000000 [ 142.271106][ T3965] RBP: 00007f0dbab35090 R08: 0000000000000000 R09: 0000000000000000 [ 142.271120][ T3965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.271132][ T3965] R13: 00007f0db9fb6038 R14: 00007f0db9fb5fa0 R15: 00007fff371df838 [ 142.271150][ T3965] [ 142.410956][ T530] usb usb2-port1: unable to enumerate USB device [ 142.559231][ T36] audit: type=1400 audit(1755969566.563:993): avc: denied { write } for pid=3974 comm="syz.2.1059" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 142.606421][ T36] audit: type=1400 audit(1755969566.563:994): avc: denied { remove_name } for pid=3974 comm="syz.2.1059" name="binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 142.633115][ T36] audit: type=1400 audit(1755969566.563:995): avc: denied { unlink } for pid=3974 comm="syz.2.1059" name="binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 142.799873][ T3982] fuse: Unknown parameter 'raI' [ 142.806192][ T3982] netlink: 552 bytes leftover after parsing attributes in process `syz.0.1063'. [ 142.835777][ T36] audit: type=1400 audit(1755969566.873:996): avc: denied { getopt } for pid=3984 comm="syz.2.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 142.865429][ T3991] FAULT_INJECTION: forcing a failure. [ 142.865429][ T3991] name failslab, interval 1, probability 0, space 0, times 0 [ 142.871302][ T3982] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 142.878320][ T3982] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:762 [ 142.878594][ T3991] CPU: 0 UID: 0 PID: 3991 Comm: syz.2.1066 Not tainted syzkaller #0 0043dfd2fbaf315da186ee57f2b2b1c8bfff300f [ 142.878627][ T3991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 142.878639][ T3991] Call Trace: [ 142.878647][ T3991] [ 142.878655][ T3991] __dump_stack+0x21/0x30 [ 142.878687][ T3991] dump_stack_lvl+0x10c/0x190 [ 142.878710][ T3991] ? __cfi_dump_stack_lvl+0x10/0x10 [ 142.878733][ T3991] ? kasan_save_track+0x4f/0x80 [ 142.878752][ T3991] dump_stack+0x19/0x20 [ 142.878774][ T3991] should_fail_ex+0x3d9/0x530 [ 142.878801][ T3991] should_failslab+0xac/0x100 [ 142.878820][ T3991] kmem_cache_alloc_noprof+0x42/0x3a0 [ 142.878846][ T3991] ? mas_alloc_nodes+0x254/0x9e0 [ 142.878876][ T3991] mas_alloc_nodes+0x254/0x9e0 [ 142.878895][ T3991] mas_preallocate+0x762/0xc60 [ 142.878912][ T3991] ? __cfi_mas_preallocate+0x10/0x10 [ 142.878941][ T3991] ? __kasan_check_read+0x15/0x20 [ 142.878965][ T3991] ? anon_vma_name+0x7e/0xd0 [ 142.878987][ T3991] ? vm_area_dup+0x41c/0x570 [ 142.879007][ T3991] __split_vma+0x412/0xa80 [ 142.879026][ T3991] ? vms_gather_munmap_vmas+0xdd0/0xdd0 [ 142.879043][ T3991] ? can_vma_merge_left+0x187/0x4c0 [ 142.879069][ T3991] vma_modify+0x6e1/0x1670 [ 142.879088][ T3991] vma_modify_flags+0x182/0x1c0 [ 142.879106][ T3991] mprotect_fixup+0x40a/0x890 [ 142.879126][ T3991] ? __cfi_selinux_file_mprotect+0x10/0x10 [ 142.879148][ T3991] ? __cfi_mprotect_fixup+0x10/0x10 [ 142.879167][ T3991] ? bpf_lsm_file_mprotect+0xd/0x20 [ 142.879192][ T3991] do_mprotect_pkey+0xaab/0xea0 [ 142.879213][ T3991] ? prot_none_test+0x30/0x30 [ 142.879233][ T3991] ? mutex_unlock+0x8b/0x240 [ 142.879259][ T3991] ? fput+0x1a5/0x240 [ 142.879280][ T3991] ? __cfi_ksys_write+0x10/0x10 [ 142.879297][ T3991] ? __kasan_check_read+0x15/0x20 [ 142.879320][ T3991] __x64_sys_mprotect+0x84/0xa0 [ 142.879339][ T3991] x64_sys_call+0x2590/0x2ee0 [ 142.879363][ T3991] do_syscall_64+0x58/0xf0 [ 142.879384][ T3991] ? clear_bhb_loop+0x50/0xa0 [ 142.879402][ T3991] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 142.879429][ T3991] RIP: 0033:0x7f0db9d8ebe9 [ 142.879445][ T3991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.879461][ T3991] RSP: 002b:00007f0dbab35038 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 142.879483][ T3991] RAX: ffffffffffffffda RBX: 00007f0db9fb5fa0 RCX: 00007f0db9d8ebe9 [ 142.879497][ T3991] RDX: 000000000000000f RSI: 0000000000800000 RDI: 0000200000000000 [ 142.879510][ T3991] RBP: 00007f0dbab35090 R08: 0000000000000000 R09: 0000000000000000 [ 142.879521][ T3991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.879533][ T3991] R13: 00007f0db9fb6038 R14: 00007f0db9fb5fa0 R15: 00007fff371df838 [ 142.879549][ T3991] [ 143.233629][ T3997] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1068'. [ 143.245055][ T330] rust_binder: 3981: removing orphan mapping 0:8 [ 143.268731][ T4000] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 143.366398][ T36] audit: type=1326 audit(1755969567.403:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3996 comm="syz.1.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbceff8ebe9 code=0x50000 [ 143.435069][ T36] audit: type=1326 audit(1755969567.403:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3996 comm="syz.1.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbceff8ebe9 code=0x50000 [ 143.483337][ T4011] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1073'. [ 143.491579][ T36] audit: type=1326 audit(1755969567.403:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3996 comm="syz.1.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbceff8ebe9 code=0x50000 [ 143.573760][ T36] audit: type=1326 audit(1755969567.403:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3996 comm="syz.1.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbceff8ebe9 code=0x50000 [ 143.648887][ T36] audit: type=1326 audit(1755969567.403:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3996 comm="syz.1.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbceff8ebe9 code=0x50000 [ 143.697816][ T36] audit: type=1326 audit(1755969567.403:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3996 comm="syz.1.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbceff8ebe9 code=0x50000 [ 143.760512][ T36] audit: type=1326 audit(1755969567.403:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3996 comm="syz.1.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbceff8ebe9 code=0x50000 [ 143.787688][ T36] audit: type=1326 audit(1755969567.403:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3996 comm="syz.1.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbceff8ebe9 code=0x50000 [ 143.812728][ T36] audit: type=1326 audit(1755969567.403:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3996 comm="syz.1.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbceff8ebe9 code=0x50000 [ 143.837402][ T36] audit: type=1326 audit(1755969567.403:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3996 comm="syz.1.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbceff8ebe9 code=0x50000 [ 144.010526][ T349] usb 3-1: new low-speed USB device number 49 using dummy_hcd [ 144.170556][ T349] usb 3-1: Invalid ep0 maxpacket: 64 [ 144.300595][ T349] usb 3-1: new low-speed USB device number 50 using dummy_hcd [ 144.380581][ T1874] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 144.435457][ T4037] sit0: entered promiscuous mode [ 144.441932][ T4037] netlink: 'syz.4.1082': attribute type 1 has an invalid length. [ 144.450547][ T349] usb 3-1: Invalid ep0 maxpacket: 64 [ 144.450938][ T4037] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1082'. [ 144.456429][ T349] usb usb3-port1: attempt power cycle [ 144.535812][ T1874] usb 2-1: config 0 has an invalid interface number: 199 but max is 1 [ 144.545086][ T1874] usb 2-1: config 0 has no interface number 1 [ 144.551793][ T1874] usb 2-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 144.568335][ T1874] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 144.581697][ T1874] usb 2-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 144.592588][ T1874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 144.601295][ T1874] usb 2-1: SerialNumber: syz [ 144.607460][ T1874] usb 2-1: config 0 descriptor?? [ 144.624129][ T4051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=4051 comm=syz.4.1088 [ 144.638254][ T4051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=4051 comm=syz.4.1088 [ 144.651179][ T4051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=4051 comm=syz.4.1088 [ 144.664492][ T4051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=4051 comm=syz.4.1088 [ 144.810575][ T349] usb 3-1: new low-speed USB device number 51 using dummy_hcd [ 144.819810][ T4026] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 144.830911][ T349] usb 3-1: Invalid ep0 maxpacket: 64 [ 144.851921][ T4069] netlink: 'syz.4.1094': attribute type 4 has an invalid length. [ 144.863570][ T4069] netlink: 'syz.4.1094': attribute type 4 has an invalid length. [ 144.871178][ T4027] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 144.881492][ T4027] rust_binder: Error in use_page_slow: ESRCH [ 144.881521][ T4027] rust_binder: use_range failure ESRCH [ 144.888376][ T4027] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 144.894477][ T4027] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 144.902801][ T4027] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:794 [ 144.913042][ T4027] rust_binder: Error in use_page_slow: ESRCH [ 144.923451][ T4027] rust_binder: use_range failure ESRCH [ 144.930264][ T4027] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 144.936605][ T4027] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 144.945261][ T4027] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:794 [ 144.970550][ T349] usb 3-1: new low-speed USB device number 52 using dummy_hcd [ 145.000954][ T349] usb 3-1: Invalid ep0 maxpacket: 64 [ 145.006665][ T349] usb usb3-port1: unable to enumerate USB device [ 145.510579][ T330] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 145.661809][ T330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.673522][ T330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.684500][ T330] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 145.697994][ T330] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 145.707201][ T330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.716499][ T330] usb 1-1: config 0 descriptor?? [ 146.426517][ T330] usbhid 1-1:0.0: can't add hid device: -71 [ 146.433296][ T330] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 146.442630][ T330] usb 1-1: USB disconnect, device number 55 [ 146.780536][ T349] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 146.795271][ T349] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 146.927963][ T4096] 9pnet_fd: Insufficient options for proto=fd [ 147.107087][ T1874] usb 2-1: Found UVC 0.00 device (0002:0000) [ 147.115040][ T1874] usb 2-1: No valid video chain found. [ 147.123499][ T1874] usb 2-1: USB disconnect, device number 52 [ 147.140013][ T4107] block device autoloading is deprecated and will be removed. [ 147.153554][ T4109] rust_binder: Error in use_page_slow: ESRCH [ 147.153578][ T4109] rust_binder: use_range failure ESRCH [ 147.160115][ T4109] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 147.166686][ T4109] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 147.175303][ T4109] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:797 [ 147.320620][ T330] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 147.480538][ T330] usb 1-1: Using ep0 maxpacket: 16 [ 147.487238][ T330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.498803][ T330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.509880][ T330] usb 1-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 147.519998][ T330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.531050][ T330] usb 1-1: config 0 descriptor?? [ 147.550613][ T1874] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 147.700574][ T1874] usb 2-1: Using ep0 maxpacket: 16 [ 147.710309][ T1874] usb 2-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 16 [ 147.721748][ T1874] usb 2-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 1024 [ 147.732285][ T1874] usb 2-1: config 1 interface 0 has no altsetting 0 [ 147.741261][ T1874] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 147.750881][ T1874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.759655][ T1874] usb 2-1: Product: syz [ 147.764231][ T1874] usb 2-1: Manufacturer: syz [ 147.769001][ T1874] usb 2-1: SerialNumber: syz [ 147.775184][ T4113] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 147.783383][ T4113] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 147.947126][ T330] input: HID 0458:5012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5012.0015/input/input27 [ 147.968357][ T330] input: HID 0458:5012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5012.0015/input/input28 [ 147.993017][ T330] kye 0003:0458:5012.0015: input,hiddev96,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.0-1/input0 [ 148.145852][ T349] usb 1-1: USB disconnect, device number 56 [ 148.207734][ T1874] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 148.217430][ T4127] fuse: blksize only supported for fuseblk [ 148.223816][ T1874] usb 2-1: USB disconnect, device number 53 [ 148.406968][ T4139] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:865 [ 148.407650][ T4141] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:865 [ 148.428703][ T4144] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 148.438743][ T4144] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 148.447533][ T4144] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:869 [ 148.468274][ T36] kauditd_printk_skb: 69 callbacks suppressed [ 148.468302][ T36] audit: type=1400 audit(1755969572.503:1076): avc: denied { watch } for pid=4145 comm="syz.2.1121" path="pipe:[29551]" dev="pipefs" ino=29551 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 148.487521][ T4148] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1122'. [ 148.517981][ T4148] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1122'. [ 148.527625][ T4148] netlink: 'syz.2.1122': attribute type 6 has an invalid length. [ 148.536330][ T4148] netlink: 'syz.2.1122': attribute type 5 has an invalid length. [ 148.544837][ T4148] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1122'. [ 148.667282][ T36] audit: type=1400 audit(1755969572.703:1077): avc: denied { getattr } for pid=4151 comm="syz.0.1123" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 148.722607][ T4158] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.723677][ T4158] rust_binder: Error in use_page_slow: ESRCH [ 148.730548][ T4158] rust_binder: use_range failure ESRCH [ 148.737107][ T4158] rust_binder: Failed to allocate buffer. len:120, is_oneway:true [ 148.742717][ T4158] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 148.751319][ T4158] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:802 [ 148.773541][ T4160] /dev/rnullb0: Can't open blockdev [ 148.804628][ T4164] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.819198][ T4166] netlink: 'syz.4.1130': attribute type 4 has an invalid length. [ 148.835180][ T4166] netlink: 'syz.4.1130': attribute type 4 has an invalid length. [ 148.861078][ T4170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1132'. [ 148.881094][ T4172] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1133'. [ 148.931027][ T4185] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 148.950533][ T1874] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 149.050525][ T330] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 149.110507][ T1874] usb 1-1: Using ep0 maxpacket: 32 [ 149.122712][ T1874] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 149.131742][ T1874] usb 1-1: config 0 has no interface number 0 [ 149.151710][ T1874] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 149.162659][ T1874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.180571][ T1874] usb 1-1: Product: syz [ 149.185608][ T1874] usb 1-1: Manufacturer: syz [ 149.190689][ T1874] usb 1-1: SerialNumber: syz [ 149.201441][ T1874] usb 1-1: config 0 descriptor?? [ 149.213012][ T1874] smsc95xx v2.0.0 [ 149.220521][ T330] usb 2-1: Using ep0 maxpacket: 16 [ 149.227671][ T330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.249251][ T330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.270527][ T330] usb 2-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 149.290506][ T330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.310745][ T330] usb 2-1: config 0 descriptor?? [ 149.346712][ T4193] overlay: ./file0 is not a directory [ 149.613760][ T1874] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 149.628701][ T1874] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 149.640648][ T349] usb 3-1: new low-speed USB device number 53 using dummy_hcd [ 149.721573][ T330] usbhid 2-1:0.0: can't add hid device: -71 [ 149.728099][ T330] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 149.741375][ T330] usb 2-1: USB disconnect, device number 54 [ 149.746417][ T4221] overlayfs: failed to clone upperpath [ 149.755830][ T4222] overlayfs: failed to clone upperpath [ 149.800550][ T349] usb 3-1: Invalid ep0 maxpacket: 32 [ 149.841124][ T4240] netlink: 'syz.4.1156': attribute type 1 has an invalid length. [ 149.849546][ T4240] netlink: 'syz.4.1156': attribute type 2 has an invalid length. [ 149.930538][ T349] usb 3-1: new low-speed USB device number 54 using dummy_hcd [ 150.080546][ T349] usb 3-1: Invalid ep0 maxpacket: 32 [ 150.086268][ T349] usb usb3-port1: attempt power cycle [ 150.269298][ T4245] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 150.282070][ T4245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1158'. [ 150.430529][ T349] usb 3-1: new low-speed USB device number 55 using dummy_hcd [ 150.460900][ T349] usb 3-1: Invalid ep0 maxpacket: 32 [ 150.600549][ T349] usb 3-1: new low-speed USB device number 56 using dummy_hcd [ 150.620869][ T349] usb 3-1: Invalid ep0 maxpacket: 32 [ 150.626662][ T349] usb usb3-port1: unable to enumerate USB device [ 150.770586][ T330] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 150.930556][ T330] usb 2-1: Using ep0 maxpacket: 16 [ 150.938175][ T330] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.949534][ T330] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 150.970252][ T330] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 150.979880][ T330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.984609][ T4268] 9pnet_fd: Insufficient options for proto=fd [ 150.988696][ T330] usb 2-1: Product: syz [ 150.999869][ T330] usb 2-1: Manufacturer: syz [ 151.005684][ T330] usb 2-1: SerialNumber: syz [ 151.215172][ T330] usb 2-1: 0:2 : does not exist [ 151.223003][ T330] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 151.236769][ T330] usb 2-1: USB disconnect, device number 55 [ 151.247749][ T383] udevd[383]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 151.342927][ T1874] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 151.354294][ T1874] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 151.364510][ T1874] usb 1-1: USB disconnect, device number 57 [ 151.747434][ T4282] rust_binder: Write failure EFAULT in pid:824 [ 151.929700][ T36] audit: type=1400 audit(1755969575.961:1078): avc: denied { setopt } for pid=4293 comm="syz.0.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 152.010486][ T1874] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 152.162398][ T1874] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 152.174869][ T1874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.187260][ T1874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.197998][ T1874] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 152.215296][ T1874] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 152.226750][ T1874] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 152.235621][ T1874] usb 2-1: Manufacturer: syz [ 152.242085][ T1874] usb 2-1: config 0 descriptor?? [ 152.408858][ T4305] rust_binder: Error while translating object. [ 152.408930][ T4305] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 152.415324][ T4305] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:882 [ 152.426870][ T36] audit: type=1400 audit(1755969576.471:1079): avc: denied { setattr } for pid=4304 comm="syz.2.1182" path="/dev/binderfs/binder0" dev="binder" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 152.476765][ T36] audit: type=1400 audit(1755969576.511:1080): avc: denied { read } for pid=4306 comm="syz.2.1183" name="file0" dev="tmpfs" ino=1639 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 152.538880][ T36] audit: type=1400 audit(1755969576.571:1081): avc: denied { create } for pid=4310 comm="syz.0.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 152.677227][ T1874] appleir 0003:05AC:8243.0016: unknown main item tag 0x0 [ 152.688610][ T1874] appleir 0003:05AC:8243.0016: No inputs registered, leaving [ 152.698972][ T1874] appleir 0003:05AC:8243.0016: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 152.713321][ T1874] usb 2-1: USB disconnect, device number 56 [ 152.746194][ T4316] fido_id[4316]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 152.926185][ T36] audit: type=1400 audit(1755969576.961:1082): avc: denied { create } for pid=4319 comm="syz.4.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 153.070409][ T1890] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 153.220411][ T1890] usb 1-1: Using ep0 maxpacket: 8 [ 153.227595][ T1890] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 153.238696][ T1890] usb 1-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 153.249306][ T1890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.259413][ T1890] usb 1-1: config 0 descriptor?? [ 153.359933][ T4323] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:890 [ 153.393348][ T4327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.412918][ T4327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.467529][ T1890] usb 1-1: USB disconnect, device number 58 [ 153.630388][ T330] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 153.781912][ T330] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.792607][ T330] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 153.802882][ T330] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 153.812424][ T330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 153.820776][ T330] usb 2-1: SerialNumber: syz [ 154.027332][ T4339] rust_binder: Write failure EFAULT in pid:818 [ 154.028741][ T330] usb 2-1: 0:2 : does not exist [ 154.040705][ T330] usb 2-1: unit 5: unexpected type 0x09 [ 154.051815][ T330] usb 2-1: USB disconnect, device number 57 [ 154.071763][ T3103] udevd[3103]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 154.164117][ T4354] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 154.218905][ T36] audit: type=1400 audit(1755969578.251:1083): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 154.262066][ T36] audit: type=1400 audit(1755969578.301:1084): avc: denied { create } for pid=4363 comm="syz.4.1202" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 154.303223][ T36] audit: type=1326 audit(1755969578.341:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4368 comm="syz.4.1204" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f46e0d8ebe9 code=0x0 [ 154.331124][ T4362] rust_binder: Read failure Err(EFAULT) in pid:896 [ 154.341389][ T4373] rust_binder: Write failure EFAULT in pid:899 [ 154.359362][ T4378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1206'. [ 154.377934][ T36] audit: type=1400 audit(1755969578.421:1086): avc: denied { ioctl } for pid=4377 comm="syz.2.1206" path="/301/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 154.378290][ T4378] rust_binder: 901: no such ref 1 [ 154.414897][ T4378] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 154.424259][ T4378] rust_binder: Error while translating object. [ 154.424296][ T4378] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 154.432134][ T4378] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:901 [ 154.443611][ T4378] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 154.447123][ T4386] netlink: 'syz.4.1209': attribute type 32 has an invalid length. [ 154.592097][ T4400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1214'. [ 154.625293][ T4403] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 154.648701][ T4404] rust_binder: Error in use_page_slow: ESRCH [ 154.648724][ T4404] rust_binder: use_range failure ESRCH [ 154.660257][ T4404] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 154.660557][ T4404] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 154.669567][ T4404] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:832 [ 154.685382][ T36] audit: type=1326 audit(1755969578.721:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4415 comm="syz.2.1217" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0db9d8ebe9 code=0x0 [ 154.736992][ T36] audit: type=1400 audit(1755969578.771:1088): avc: denied { open } for pid=4415 comm="syz.2.1217" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=31622 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 155.175414][ T4432] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 155.175447][ T4432] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:851 [ 155.186245][ T36] audit: type=1400 audit(1755969579.221:1089): avc: denied { accept } for pid=4431 comm="syz.0.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 155.222043][ T4437] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 155.223638][ T36] audit: type=1400 audit(1755969579.261:1090): avc: denied { shutdown } for pid=4436 comm="syz.0.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 155.225305][ T4437] overlayfs: missing 'lowerdir' [ 155.500324][ T10] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 155.592258][ T36] audit: type=1400 audit(1755969579.631:1091): avc: denied { setattr } for pid=4448 comm="syz.2.1230" name="/" dev="incremental-fs" ino=1704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 155.650277][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 155.660983][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 155.672662][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.685831][ T10] usb 1-1: config 1 interface 0 altsetting 106 bulk endpoint 0x1 has invalid maxpacket 64 [ 155.697304][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 155.708796][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 155.709254][ T4462] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 155.719853][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.720482][ T4462] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:847 [ 155.731239][ T10] usb 1-1: Product: syz [ 155.754881][ T10] usb 1-1: Manufacturer: syz [ 155.760397][ T10] usb 1-1: SerialNumber: syz [ 155.766743][ T4437] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 155.879746][ T4465] fuseblk: Unknown parameter 'default_permisssize' [ 155.915704][ T4469] pim6reg1: entered promiscuous mode [ 155.922440][ T4469] pim6reg1: entered allmulticast mode [ 155.976040][ T4437] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 156.003685][ T10] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 59 if 0 alt 106 proto 1 vid 0x0525 pid 0xA4A8 [ 156.029336][ T10] usb 1-1: USB disconnect, device number 59 [ 156.037933][ T10] usblp0: removed [ 156.223387][ T4482] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1240'. [ 156.234284][ T4482] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 156.255493][ T36] audit: type=1400 audit(1755969580.291:1092): avc: denied { getopt } for pid=4481 comm="syz.2.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 156.333270][ T4500] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1247'. [ 156.522782][ T4506] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.550045][ T4506] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 156.603057][ T4511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1251'. [ 156.711691][ T4528] overlayfs: failed to clone upperpath [ 156.764914][ T4532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4532 comm=syz.0.1258 [ 156.880259][ T31] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 157.031242][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.042865][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 157.055861][ T31] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 157.067219][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 157.076074][ T31] usb 3-1: SerialNumber: syz [ 157.245773][ T4562] rust_binder: Write failure EFAULT in pid:866 [ 157.286914][ T31] usb 3-1: 0:2 : does not exist [ 157.311783][ T31] usb 3-1: unit 78 not found! [ 157.327324][ T31] usb 3-1: USB disconnect, device number 57 [ 157.383206][ T4570] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 157.434812][ T4571] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:870 [ 157.441816][ T4571] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:870 [ 157.452558][ T4571] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 157.816676][ T4580] netlink: 'syz.2.1275': attribute type 8 has an invalid length. [ 157.922166][ T4595] overlayfs: failed to clone upperpath [ 158.173852][ T4636] tipc: Started in network mode [ 158.178855][ T4636] tipc: Node identity c, cluster identity 4711 [ 158.185403][ T4636] tipc: Node number set to 12 [ 158.190938][ T4636] 9pnet_fd: Insufficient options for proto=fd [ 158.498264][ T4670] __vm_enough_memory: pid: 4670, comm: syz.1.1305, bytes: 18014402804453376 not enough memory for the allocation [ 159.002951][ T4700] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 159.016042][ T4700] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 159.024861][ T4700] CPU: 1 UID: 0 PID: 4700 Comm: syz.2.1315 Not tainted syzkaller #0 0043dfd2fbaf315da186ee57f2b2b1c8bfff300f [ 159.039383][ T4700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 159.050023][ T4700] RIP: 0010:do_unlinkat+0x27e/0x5a0 [ 159.055769][ T4700] Code: e8 57 66 9b ff 31 db 41 81 ff 00 00 20 00 0f 95 c3 83 c3 eb e9 d7 00 00 00 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 37 02 00 00 41 8b 1e be 00 00 70 00 21 de [ 159.076992][ T4700] RSP: 0018:ffffc9000ca2fe00 EFLAGS: 00010246 [ 159.083496][ T4700] RAX: 0000000000000000 RBX: 0000000000000000 RCX: dffffc0000000000 [ 159.091779][ T4700] RDX: ffff8881402f0000 RSI: 0000000000000000 RDI: 0000000000000000 [ 159.100155][ T4700] RBP: ffffc9000ca2fee0 R08: ffff8881f6f50b87 R09: 1ffff1103edea170 [ 159.108174][ T4700] R10: dffffc0000000000 R11: ffffed103edea171 R12: 1ffff11022667828 [ 159.117151][ T4700] R13: ffff88811333c140 R14: 0000000000000001 R15: 0000000000000000 [ 159.125586][ T4700] FS: 00007f0dbab356c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 159.135240][ T4700] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 159.142330][ T4700] CR2: 000020000000a000 CR3: 000000012c30e000 CR4: 00000000003526b0 [ 159.152801][ T4700] DR0: 0000000000000006 DR1: 0000000000000003 DR2: 0000000000000401 [ 159.162779][ T4700] DR3: 0000000000000404 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 159.172109][ T4700] Call Trace: [ 159.175989][ T4700] [ 159.179234][ T4700] ? __cfi_do_unlinkat+0x10/0x10 [ 159.184672][ T4700] ? getname_flags+0x209/0x710 [ 159.190343][ T4700] ? fpregs_restore_userregs+0x11d/0x260 [ 159.196286][ T4700] __x64_sys_unlinkat+0xda/0xf0 [ 159.201160][ T4700] x64_sys_call+0x2974/0x2ee0 [ 159.206204][ T4700] do_syscall_64+0x58/0xf0 [ 159.210635][ T4700] ? clear_bhb_loop+0x50/0xa0 [ 159.215950][ T4700] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 159.222497][ T4700] RIP: 0033:0x7f0db9d8ebe9 [ 159.227097][ T4700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.248288][ T4700] RSP: 002b:00007f0dbab35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 159.257466][ T4700] RAX: ffffffffffffffda RBX: 00007f0db9fb5fa0 RCX: 00007f0db9d8ebe9 [ 159.266372][ T4700] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 159.275144][ T4700] RBP: 00007f0db9e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 159.283213][ T4700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.291950][ T4700] R13: 00007f0db9fb6038 R14: 00007f0db9fb5fa0 R15: 00007fff371df838 [ 159.300373][ T4700] [ 159.303398][ T4700] Modules linked in: [ 159.308046][ T4700] ---[ end trace 0000000000000000 ]--- [ 159.340353][ T4700] RIP: 0010:do_unlinkat+0x27e/0x5a0 [ 159.346468][ T4700] Code: e8 57 66 9b ff 31 db 41 81 ff 00 00 20 00 0f 95 c3 83 c3 eb e9 d7 00 00 00 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 37 02 00 00 41 8b 1e be 00 00 70 00 21 de [ 159.371567][ T36] kauditd_printk_skb: 636 callbacks suppressed [ 159.371588][ T36] audit: type=1400 audit(1755969583.401:1729): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 159.402069][ T4700] RSP: 0018:ffffc9000ca2fe00 EFLAGS: 00010246 [ 159.409162][ T4700] RAX: 0000000000000000 RBX: 0000000000000000 RCX: dffffc0000000000 [ 159.417539][ T36] audit: type=1400 audit(1755969583.401:1730): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.440026][ T4700] RDX: ffff8881402f0000 RSI: 0000000000000000 RDI: 0000000000000000 [ 159.448466][ T4700] RBP: ffffc9000ca2fee0 R08: ffff8881f6f50b87 R09: 1ffff1103edea170 [ 159.457194][ T36] audit: type=1400 audit(1755969583.401:1731): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.470144][ T4700] R10: dffffc0000000000 R11: ffffed103edea171 R12: 1ffff11022667828 [ 159.489165][ T4700] R13: ffff88811333c140 R14: 0000000000000001 R15: 0000000000000000 [ 159.490343][ T36] audit: type=1400 audit(1755969583.401:1732): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.501011][ T4700] FS: 00007f0dbab356c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 159.529317][ T36] audit: type=1400 audit(1755969583.401:1733): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 159.542072][ T4700] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 159.560057][ T36] audit: type=1400 audit(1755969583.401:1734): avc: denied { append open } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 159.576441][ T4700] CR2: 00007f0db87f6f98 CR3: 000000012c30e000 CR4: 00000000003526b0 [ 159.592580][ T36] audit: type=1400 audit(1755969583.401:1735): avc: denied { getattr } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 159.598905][ T4700] DR0: 0000000000000006 DR1: 0000000000000003 DR2: 0000000000000401 [ 159.642323][ T4700] DR3: 0000000000000404 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 159.654321][ T4700] Kernel panic - not syncing: Fatal exception [ 159.661004][ T4700] Kernel Offset: disabled [ 159.665971][ T4700] Rebooting in 86400 seconds..