last executing test programs: 42.780582347s ago: executing program 0 (id=32): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000003500), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f00000035c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r2, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x200}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040d4}, 0x20040091) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='maps\x00') r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r8, 0x20, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf35a}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xff, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x80a0000, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xdddd0000, 0xdddd1000, 0x8, 0x3, 0x0, 0x7, 0x4, 0xd, 0x7d, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x3, 0xd, 0x6, 0x3, 0x4f, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0x5, 0x6, 0x5, 0x7f, 0x4, 0x4b}, {0xa2000, 0x8000000, 0xb, 0x6, 0x3, 0x6e, 0x1, 0xff, 0xc, 0x90, 0x1, 0xfa}, {0x6000, 0x4000, 0x8, 0x9d, 0x3, 0x5, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x7, 0x54, 0x7b, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x1}, 0x0, 0x0, 0x4000, 0x300, 0x5, 0x3000, 0x8000000, [0x0, 0x401, 0x7, 0xc5]}) close_range(r3, 0xffffffffffffffff, 0x0) 42.630955803s ago: executing program 0 (id=33): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x1000, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r1, 0x0, 0x4, &(0x7f0000000200)="440910bc996c301c8183070400", 0xd) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000004040)=[{0x0, &(0x7f00000001c0), 0x2}], 0x1, 0x0, &(0x7f00000040c0)={0x77359400}, 0x1) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}, 0x40880) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000100)=[@register_looper, @acquire_done={0x40106309, 0x2}, @acquire, @clear_death={0x400c630f, 0x1}, @clear_death={0x400c630f, 0x1}, @clear_death, @decrefs], 0x0, 0x0, 0x0}) 42.523289854s ago: executing program 0 (id=34): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) close_range(r0, r0, 0x0) 42.451794892s ago: executing program 0 (id=35): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002780)={0x84, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002680)={0x40, 0x1a, 0x2, 0x4}, &(0x7f00000026c0)={0x40, 0x1c, 0x1, 0x5}, 0x0, 0x0}) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000140)=0x1000, 0x4) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000980)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@name={'name', 0x3d, 'lowerdir'}}, {@none}]}) getsockopt$inet_tcp_int(r3, 0x6, 0x25, 0x0, &(0x7f0000000040)) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@verity_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r4, &(0x7f0000003480)={0x2020}, 0x2020) 40.256497409s ago: executing program 0 (id=54): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) io_setup(0xf0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, 0x0, 0x0) r4 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0500000001ea2f3352c9a24cfb0fe8f3", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64], 0x20000600}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x6) r6 = fsmount(r4, 0x0, 0x1) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000000000010ac05470200000000000109022400010000500009040002010300010009210000000122f80409058103"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) ioctl$sock_inet_SIOCRTMSG(r6, 0x890d, &(0x7f0000000080)={0x0, {0x2, 0x4e22, @remote}, {0x2, 0x4e21, @private=0xa010102}, {0x2, 0x4e22, @rand_addr=0x64010102}, 0x140, 0x0, 0x0, 0x0, 0xc56, 0x0, 0x8, 0x401, 0xffff}) close_range(r4, r3, 0x2) 40.118171813s ago: executing program 0 (id=56): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x10000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) socket$xdp(0x2c, 0x3, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x58}, 0x1, 0x7}, 0x0) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r4) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x2, 0xfe, 0x0, 0x8, 0x8, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0xb, 0x3, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x7, 0x0, 0x20, 0x0, 0x1000000}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) preadv2(r6, &(0x7f0000000300)=[{&(0x7f0000000240)=""/79, 0x4f}, {&(0x7f00000002c0)=""/23, 0x17}], 0x2, 0xa, 0x3, 0x10) accept4(0xffffffffffffffff, &(0x7f0000000040)=@sco={0x1f, @fixed}, &(0x7f00000000c0)=0x80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b0009008000", 0x2c}], 0x1) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x68, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, 0x1}, @request_death={0x400c630e, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x0, 0x1}, @flat=@handle={0x73682a85, 0xa, 0x1}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 40.062018539s ago: executing program 32 (id=56): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x10000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) socket$xdp(0x2c, 0x3, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x58}, 0x1, 0x7}, 0x0) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r4) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x2, 0xfe, 0x0, 0x8, 0x8, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0xb, 0x3, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x7, 0x0, 0x20, 0x0, 0x1000000}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) preadv2(r6, &(0x7f0000000300)=[{&(0x7f0000000240)=""/79, 0x4f}, {&(0x7f00000002c0)=""/23, 0x17}], 0x2, 0xa, 0x3, 0x10) accept4(0xffffffffffffffff, &(0x7f0000000040)=@sco={0x1f, @fixed}, &(0x7f00000000c0)=0x80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b0009008000", 0x2c}], 0x1) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x68, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, 0x1}, @request_death={0x400c630e, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x0, 0x1}, @flat=@handle={0x73682a85, 0xa, 0x1}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 4.974723574s ago: executing program 2 (id=429): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x130) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000080)={0x0, 0x0}) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x208000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x10c000) r3 = fsmount(0xffffffffffffffff, 0x0, 0x1f0) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {0x0, 0x1}, 0x2000000b, 0x21, &(0x7f0000000240)={0x3, 0xb, 0xfffa, 0x4360, 0x2}, 0x8, 0x6, 0x80, 0x3ffdb8, 0x1, 0x101, 0x0}) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffff4) mmap(&(0x7f00008c4000/0x1000)=nil, 0x1000, 0x2000004, 0x12, r0, 0x0) 4.91779434s ago: executing program 2 (id=431): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r3 = syz_io_uring_setup(0x121, &(0x7f0000000600)={0x0, 0x800006, 0x4000, 0x2}, &(0x7f0000ffe000), 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100003b6bc040950b2b774ca2010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000880)=ANY=[@ANYBLOB=' \x00o'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r7, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000180)={0x20, 0x5, 0x8, "3e55e90402a9ad01"}, 0x0, 0x0, 0x0, 0x0}) r8 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r8, 0x4068aea3, &(0x7f0000000140)={0xbe, 0x0, 0x1}) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r9, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0088f71327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b"]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xbc, 0x0, &(0x7f0000000980)=[@exit_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={@fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x1, &(0x7f0000000700)=""/236, 0x0, 0x0, 0x35}, @ptr={0x70742a85, 0x0, &(0x7f00000008c0)=""/165, 0x0, 0x0, 0x14}}, &(0x7f0000000800)}, 0x1000}, @register_looper, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000480)={@ptr={0x70742a85, 0x1, &(0x7f0000000300)=""/244, 0xf4, 0x2, 0x26}, @fda={0x66646185, 0x9, 0x2, 0x3d}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000500)={0x0, 0x28, 0x48}}, 0x1000}, @clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) 3.307143757s ago: executing program 1 (id=450): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_io_uring_setup(0x12f, 0x0, 0x0, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) tee(r1, r0, 0x6, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000480)={0x8000}) (async) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000480)={0x8000}) close_range(r0, 0xffffffffffffffff, 0x0) 3.302911748s ago: executing program 4 (id=451): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000180)=0x22c00) 3.235096085s ago: executing program 4 (id=452): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x161142, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x400, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) r2 = memfd_secret(0x0) socket$unix(0x1, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="200000006d0001", @ANYRESHEX], 0x28}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r2, 0x0) ftruncate(r2, 0x3) write(r0, &(0x7f0000000400)="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", 0xc01) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x132) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x1060, 0x0, 0x0, 0x20000}) ioctl$KVM_GET_STATS_FD_cpu(r4, 0xaece) 3.223142226s ago: executing program 4 (id=453): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000040000040f30455070000000000010902240001000040b109040000010300010009210101000122050009058103ff030c00004283490c447be449756122c885198eae1ad4d3e42c16458884405ff5da9f3ce78daee71506eb6f3ea8f2bb549683040cb2a899aca6740020a0c28c04c04107d0c9c23008d95bcba0f0d1571d2ff613e258ea782dbc78f0c1d2d7ef0bcc5581409fbaebd07775317949cf96"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x7, {0x7, 0xf, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000001200)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x440, 0x4, 0x3, 0xff}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0xa2}}]}}}]}}]}}, &(0x7f0000001740)={0xa, &(0x7f0000001240)={0xa, 0x6, 0x310, 0x6, 0x7, 0x0, 0x8, 0x4}, 0xc8, &(0x7f0000001280)={0x5, 0xf, 0xc8, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "64c800b2fa320242a9223bba52b9e7b2"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "6b68ad0f5494e385d2d344e6b817d36a"}, @ssp_cap={0x18, 0x10, 0xa, 0xcc, 0x3, 0x2, 0xf00, 0xfff7, [0x0, 0x1f40, 0xff3ff0]}, @generic={0x5b, 0x10, 0x4, "25601ef85003f88afdf7d421cc0e07b7e46d414ea44aedc8a591a6e56d2fd8050a5bd38826c4ebb197afd4a8072664f1093ced882cdf24cbd91d855dc4744dac2a569a0157a1c949119191aa1b5f8730c903d845bf517a33"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "a6c661461efc8766b63cb3245af09436"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "45894de59f863eed60cd7736dde428ff"}]}, 0x7, [{0xa9, &(0x7f0000001380)=@string={0xa9, 0x3, "5a82e058b767ce3d627ef4bc08727b7de822ca487fd560626d257d60d7a20e7819bfbf2173892e7b10f1f56daf28ddef3bc1c6d41d50805690020c832cd914fea8832e8dd6878c4714ed57f046dd1e35571e70c109f26208e34d64d43e2930fb415cda5f0e1e5494e6a23db5aa875010bd160e0fab11300f7cf30f5b08d07eb9a3770e6a07a8cc6bfecf1a5cd09ffa5addd220e999b539a1308877539421203c415e237d53af00"}}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0xc1a}}, {0x4, &(0x7f00000014c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x42, &(0x7f0000001500)=@string={0x42, 0x3, "48044626065f680d64e9f93f03c5acbf8bfee749b2f20330d447a1ca0ad7d4a8e7099763a77901636ac8bbc955b767573db2d8fbf8a9028d758100c54b04b429"}}, {0xa8, &(0x7f0000001580)=@string={0xa8, 0x3, "7c68b6afd13214f8e9b2956e0ea46451f17e90e78f971036d4d79cca83c4399d691cb423212371782fd505dd8710021e55ef75fd27252da7108a86cf23e8989a1a47a347839c16c7b6314d3c3d714c2d8c0f31abc6d7af1142df00fb9f88a6913e8619d32adc2ab601b69cc7d337a8830fe81314c6d75f03146323f41140dc038197f0ea2d7dc7d059816f1ef0ec384b4018592b0a4538dbbd0af0986e9b00dfb990ee433a6e"}}, {0xf0, &(0x7f0000001640)=@string={0xf0, 0x3, "afd31a64cc1e2eace5634fa84958df0dcadbca9509d1fe5c987f6c2134ccba9a300623c336a01a8ff64d32c408f19006be36bd83d30915c0f9bb154189f06f55c59d4e78b07dd1d651076dc59c44f019a318eeec8780031e0df496b16e89f12b298003d9b3cfe1f0b663d927cd15508b7cde7f9f350f6c5005c1b1927056f62651cff24d5b9472468a8fc9e884b8972b5c6c93c4c326784584abe44a6b36541fd08515ad367e3aa08691a750144da49a594da531320a25e79112047d3f7e4fa55ef5b8a8fa210f26a9e31ba9b18a196edc1a27abdab6fb29a8d2353a618d7f25551861c069baf3bd59b6bf4ace48"}}]}) syz_usb_control_io$printer(r1, &(0x7f00000018c0)={0x14, &(0x7f00000017c0)={0x20, 0xc, 0xa6, {0xa6, 0xc, "f84888b4781f1411ae5f0543608c7c4bd713a7598efc1a7009bfc25dc69dedc6af0890751d59e1bc72a78e173265dc368e40612b94b45abe0604b73a6dd45c8fd6d8938d22cd64f3931aa4aff7c291a0de3cf0e29ad1b913347484c1759daa06acffea6b442b02cbb73cc2251092823c3f728449ffba2e4afe1b4cd267d0dbfc4a08dd67e9e8017081da08525d7a2ecacf39d98ab1020e73aaf45885b1da70fe839a1f6c"}}, &(0x7f0000001880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}}, &(0x7f0000001b00)={0x34, &(0x7f0000001900)={0x40, 0x16, 0x50, "f05057c4bc49fe00390968f209822388b6ce20a915b41456ec6fe2b9f145633dc349cb078d22e05f1e4b642b29c92fa67127cff863e1711806f57901f95b83029604dc53d612847a7326c2edee4b525d"}, &(0x7f0000001980)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000019c0)={0x0, 0x8, 0x1, 0xd8}, &(0x7f0000001a00)={0x20, 0x0, 0x49, {0x47, "d93b2ffa62431912ab4a50dc9de52d84cf972161da0110bac0496d799ef0d1a7a02556e78be74b557f2c9a77d4cdb3e9114af0162bde4d274574936ddb5d5237ce88ce235f4b40"}}, &(0x7f0000001a80)={0x20, 0x1, 0x1, 0x80}, &(0x7f0000001ac0)={0x20, 0x0, 0x1, 0x8}}) r2 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x320, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0xc4, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x1, 0xa9, {0x9, 0x21, 0x2c2, 0x8, 0x1, {0x22, 0xad6}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0x40}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x11, 0xf, 0xbc}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x6d, 0x7, 0x10, 0x40, 0x1}, 0x34, &(0x7f0000000180)={0x5, 0xf, 0x34, 0x6, [@wireless={0xb, 0x10, 0x1, 0x6, 0xbc, 0x4, 0xf3, 0xaea, 0x7f}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x6, 0x4, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xf, "1f5d0c715359223e4e8bbc70e209ccee"}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc01}}, {0xcf, &(0x7f0000000d40)=@string={0xcf, 0x3, "43562ea50e27f2c4368b1ba38f083e97f5ed53e4658e82cb288ef0dbeca8f39f82cbc955989d890301af6fbe6caebd59680766fd7fb1974cc2904c6a66e41f2a1e5eaef7fb6f1d9c4f2c9d917581321ec06bd4fba7e9cb188308fe711407c9a49c1c5ad8c7d5b7bfdef05b5f33d5d9b4541c0a84024c1773ba6076f83f1ae53b0f031efe5372c5e7e24457fecb494730ec9bf27207eefdd85963a228cddbaf262ed69e6dabe1ff10909fc6f4466ccdfff6b8a8af45537690ec9319c49400945cfa75ae632ad072544ba7cd2612"}}, {0x2d, &(0x7f0000000200)=@string={0x2d, 0x3, "254f0e34992ca2857d99d00f05d472fc03afd4493eeca02e49aa3ceb5522b7a387dce32403945d2c1115e6"}}]}) syz_usb_control_io$hid(r2, &(0x7f0000000fc0)={0x24, &(0x7f0000000e40)={0x20, 0x21, 0x7b, {0x7b, 0x5, "850c6f9c41a6d3ca9fe38508620baf5c5dbfd894a73eb5dc03b345715d86f07cee1290a925f4e1a7c8af61bdbe2afb2d84a34f8dccabcbb51dc846ef9ba484e9c56489b7e7d0b5c277ca581a1cf9699446e7025d5fa305eebd3e828e0b0c6a3167b1887ba197aa02a69e99ccc1d85c88fe57da2836e5ab2e23"}}, &(0x7f0000000f00)={0x0, 0x3, 0x91, @string={0x91, 0x3, "28878e8280053c4b1a4d3fd8a4bf49f1cc9012ebd260d23c72705954a2330e256858ba155263ee9c7c11524dc23953badce085d468c9166ffee93df761278ab73a40c89cda57f8edea0794408b49e129669b3436df351e4b13ecc0ce12202a77dd185bb34f23cf75d41ebad8835fe57223cf79683cf8898549e1de496c5ca16f8ad829c3bea657313145ca9501c355"}}, &(0x7f00000002c0), &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x7, 0x1, {0x22, 0x34c}}}}, &(0x7f00000011c0)={0x2c, &(0x7f0000001000)={0x20, 0x16, 0x1d, "c6081c25a313c346da2081143eb33903bbdffc7887e9f4865859bab394"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000010c0)={0x20, 0x1, 0xa6, "87ae5574beac01a72c3bd55542c43287b9e6cc7369f8b45dd1e97c52d03a343306a84e098b2e861ae2665f4026b596427ae6a705e1c73148b1ace12ffc37bb38e98e054251be73ffafd256a75b7a263d88dd5ca1a5222d32fd5732ad3bb67134d0303d1d998790b694d9f0734d18bc165df857d71fcad1207cd7a0f8554c5fafee7785e248ad73aecc21d1d2a7253911c41931b548f7528c3e898aee907a57d42e4b7849532c"}, &(0x7f0000001180)={0x20, 0x3, 0x1, 0x6}}) r3 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$HIDIOCGRDESC(r3, 0x90044802, &(0x7f0000000380)={0x9a5, "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"}) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000040000040f30455070000000000010902240001000040b109040000010300010009210101000122050009058103ff030c00004283490c447be449756122c885198eae1ad4d3e42c16458884405ff5da9f3ce78daee71506eb6f3ea8f2bb549683040cb2a899aca6740020a0c28c04c04107d0c9c23008d95bcba0f0d1571d2ff613e258ea782dbc78f0c1d2d7ef0bcc5581409fbaebd07775317949cf96"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x7, {0x7, 0xf, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000001200)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x440, 0x4, 0x3, 0xff}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0xa2}}]}}}]}}]}}, &(0x7f0000001740)={0xa, &(0x7f0000001240)={0xa, 0x6, 0x310, 0x6, 0x7, 0x0, 0x8, 0x4}, 0xc8, &(0x7f0000001280)={0x5, 0xf, 0xc8, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "64c800b2fa320242a9223bba52b9e7b2"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "6b68ad0f5494e385d2d344e6b817d36a"}, @ssp_cap={0x18, 0x10, 0xa, 0xcc, 0x3, 0x2, 0xf00, 0xfff7, [0x0, 0x1f40, 0xff3ff0]}, @generic={0x5b, 0x10, 0x4, "25601ef85003f88afdf7d421cc0e07b7e46d414ea44aedc8a591a6e56d2fd8050a5bd38826c4ebb197afd4a8072664f1093ced882cdf24cbd91d855dc4744dac2a569a0157a1c949119191aa1b5f8730c903d845bf517a33"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "a6c661461efc8766b63cb3245af09436"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "45894de59f863eed60cd7736dde428ff"}]}, 0x7, [{0xa9, &(0x7f0000001380)=@string={0xa9, 0x3, "5a82e058b767ce3d627ef4bc08727b7de822ca487fd560626d257d60d7a20e7819bfbf2173892e7b10f1f56daf28ddef3bc1c6d41d50805690020c832cd914fea8832e8dd6878c4714ed57f046dd1e35571e70c109f26208e34d64d43e2930fb415cda5f0e1e5494e6a23db5aa875010bd160e0fab11300f7cf30f5b08d07eb9a3770e6a07a8cc6bfecf1a5cd09ffa5addd220e999b539a1308877539421203c415e237d53af00"}}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0xc1a}}, {0x4, &(0x7f00000014c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x42, &(0x7f0000001500)=@string={0x42, 0x3, "48044626065f680d64e9f93f03c5acbf8bfee749b2f20330d447a1ca0ad7d4a8e7099763a77901636ac8bbc955b767573db2d8fbf8a9028d758100c54b04b429"}}, {0xa8, &(0x7f0000001580)=@string={0xa8, 0x3, "7c68b6afd13214f8e9b2956e0ea46451f17e90e78f971036d4d79cca83c4399d691cb423212371782fd505dd8710021e55ef75fd27252da7108a86cf23e8989a1a47a347839c16c7b6314d3c3d714c2d8c0f31abc6d7af1142df00fb9f88a6913e8619d32adc2ab601b69cc7d337a8830fe81314c6d75f03146323f41140dc038197f0ea2d7dc7d059816f1ef0ec384b4018592b0a4538dbbd0af0986e9b00dfb990ee433a6e"}}, {0xf0, &(0x7f0000001640)=@string={0xf0, 0x3, "afd31a64cc1e2eace5634fa84958df0dcadbca9509d1fe5c987f6c2134ccba9a300623c336a01a8ff64d32c408f19006be36bd83d30915c0f9bb154189f06f55c59d4e78b07dd1d651076dc59c44f019a318eeec8780031e0df496b16e89f12b298003d9b3cfe1f0b663d927cd15508b7cde7f9f350f6c5005c1b1927056f62651cff24d5b9472468a8fc9e884b8972b5c6c93c4c326784584abe44a6b36541fd08515ad367e3aa08691a750144da49a594da531320a25e79112047d3f7e4fa55ef5b8a8fa210f26a9e31ba9b18a196edc1a27abdab6fb29a8d2353a618d7f25551861c069baf3bd59b6bf4ace48"}}]}) (async) syz_usb_control_io$printer(r1, &(0x7f00000018c0)={0x14, &(0x7f00000017c0)={0x20, 0xc, 0xa6, {0xa6, 0xc, "f84888b4781f1411ae5f0543608c7c4bd713a7598efc1a7009bfc25dc69dedc6af0890751d59e1bc72a78e173265dc368e40612b94b45abe0604b73a6dd45c8fd6d8938d22cd64f3931aa4aff7c291a0de3cf0e29ad1b913347484c1759daa06acffea6b442b02cbb73cc2251092823c3f728449ffba2e4afe1b4cd267d0dbfc4a08dd67e9e8017081da08525d7a2ecacf39d98ab1020e73aaf45885b1da70fe839a1f6c"}}, &(0x7f0000001880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}}, &(0x7f0000001b00)={0x34, &(0x7f0000001900)={0x40, 0x16, 0x50, "f05057c4bc49fe00390968f209822388b6ce20a915b41456ec6fe2b9f145633dc349cb078d22e05f1e4b642b29c92fa67127cff863e1711806f57901f95b83029604dc53d612847a7326c2edee4b525d"}, &(0x7f0000001980)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000019c0)={0x0, 0x8, 0x1, 0xd8}, &(0x7f0000001a00)={0x20, 0x0, 0x49, {0x47, "d93b2ffa62431912ab4a50dc9de52d84cf972161da0110bac0496d799ef0d1a7a02556e78be74b557f2c9a77d4cdb3e9114af0162bde4d274574936ddb5d5237ce88ce235f4b40"}}, &(0x7f0000001a80)={0x20, 0x1, 0x1, 0x80}, &(0x7f0000001ac0)={0x20, 0x0, 0x1, 0x8}}) (async) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x320, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0xc4, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x1, 0xa9, {0x9, 0x21, 0x2c2, 0x8, 0x1, {0x22, 0xad6}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0x40}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x11, 0xf, 0xbc}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x6d, 0x7, 0x10, 0x40, 0x1}, 0x34, &(0x7f0000000180)={0x5, 0xf, 0x34, 0x6, [@wireless={0xb, 0x10, 0x1, 0x6, 0xbc, 0x4, 0xf3, 0xaea, 0x7f}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x6, 0x4, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xf, "1f5d0c715359223e4e8bbc70e209ccee"}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc01}}, {0xcf, &(0x7f0000000d40)=@string={0xcf, 0x3, "43562ea50e27f2c4368b1ba38f083e97f5ed53e4658e82cb288ef0dbeca8f39f82cbc955989d890301af6fbe6caebd59680766fd7fb1974cc2904c6a66e41f2a1e5eaef7fb6f1d9c4f2c9d917581321ec06bd4fba7e9cb188308fe711407c9a49c1c5ad8c7d5b7bfdef05b5f33d5d9b4541c0a84024c1773ba6076f83f1ae53b0f031efe5372c5e7e24457fecb494730ec9bf27207eefdd85963a228cddbaf262ed69e6dabe1ff10909fc6f4466ccdfff6b8a8af45537690ec9319c49400945cfa75ae632ad072544ba7cd2612"}}, {0x2d, &(0x7f0000000200)=@string={0x2d, 0x3, "254f0e34992ca2857d99d00f05d472fc03afd4493eeca02e49aa3ceb5522b7a387dce32403945d2c1115e6"}}]}) (async) syz_usb_control_io$hid(r2, &(0x7f0000000fc0)={0x24, &(0x7f0000000e40)={0x20, 0x21, 0x7b, {0x7b, 0x5, "850c6f9c41a6d3ca9fe38508620baf5c5dbfd894a73eb5dc03b345715d86f07cee1290a925f4e1a7c8af61bdbe2afb2d84a34f8dccabcbb51dc846ef9ba484e9c56489b7e7d0b5c277ca581a1cf9699446e7025d5fa305eebd3e828e0b0c6a3167b1887ba197aa02a69e99ccc1d85c88fe57da2836e5ab2e23"}}, &(0x7f0000000f00)={0x0, 0x3, 0x91, @string={0x91, 0x3, "28878e8280053c4b1a4d3fd8a4bf49f1cc9012ebd260d23c72705954a2330e256858ba155263ee9c7c11524dc23953badce085d468c9166ffee93df761278ab73a40c89cda57f8edea0794408b49e129669b3436df351e4b13ecc0ce12202a77dd185bb34f23cf75d41ebad8835fe57223cf79683cf8898549e1de496c5ca16f8ad829c3bea657313145ca9501c355"}}, &(0x7f00000002c0), &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x7, 0x1, {0x22, 0x34c}}}}, &(0x7f00000011c0)={0x2c, &(0x7f0000001000)={0x20, 0x16, 0x1d, "c6081c25a313c346da2081143eb33903bbdffc7887e9f4865859bab394"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000010c0)={0x20, 0x1, 0xa6, "87ae5574beac01a72c3bd55542c43287b9e6cc7369f8b45dd1e97c52d03a343306a84e098b2e861ae2665f4026b596427ae6a705e1c73148b1ace12ffc37bb38e98e054251be73ffafd256a75b7a263d88dd5ca1a5222d32fd5732ad3bb67134d0303d1d998790b694d9f0734d18bc165df857d71fcad1207cd7a0f8554c5fafee7785e248ad73aecc21d1d2a7253911c41931b548f7528c3e898aee907a57d42e4b7849532c"}, &(0x7f0000001180)={0x20, 0x3, 0x1, 0x6}}) (async) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) (async) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) (async) ioctl$HIDIOCGRDESC(r3, 0x90044802, &(0x7f0000000380)={0x9a5, "aaa41a472088c4ce2d3878ce1e93dfdd7eb8190756adea8b433e4f053d616807df1c65c7d340421a5dbafec7c320f7b9453d70e62165eb6ed1d7ab5744426eff2dbfa501ace70bfa599c8ce3f62ed19b86fb878d7444e764b4922c4a3c84439c4b88d460840da4c9e1c16a43d6c28080473c6d52a33eba660a01d6324e44af2ac2cb51f08228c6e9788cbb9afc7280132d36ce779b647d73733d7f7b0ddf49a2f8a2d301b2213515b6df20d1827b871124fae0a01baa787570cb4d7ee69663f147dfd7d67c4d617fcdf6462931af423beefd138c222f019d745a2dbfe636da574b4990d15e434d96a2f8aadcfe549cf9904f170df52e6235b6d51650ec0f1f6e871f061ed7d09476f0180f010f6b096148f01127d5781cf0a2a98d905e578f0b2d5c96d42ce9b78e3692820562714b43b39cdf446d4ebe44429e74c9296b8939b96befefd6945ecbfee0f149726af9f28b6e161946c3184e648942fc58947cd8962290ab64390656ac0658a575da2397d7857644901c8292ea5f3d0878dcf8f535a17e9aee082270bb640e18d252fdec1c215088feda602597116b3a830992acf6f0236b1a22e9ed5b83616f15fcdbd3c55442d746948b2fefb73f753a1dfefcf1a948331633c356123e36418a2d7e3afff1e9c01cd7e1a2df949166a761861377fdda0a44d3470dce2dfde9947d1e43deab6e203e488447d64c513108fa6f2da6e19a60733356200b295b70fd8ec964dd944d266e6b77218f0019dfaa1e4e1380277fe1303b9c600f85df19e94974f91b9df7c8006137c08d5c0b2419a1dd1d5f2534ef49840d360b20c951f8edf9b3c999e51f831d75e3e8a9be5de99415a397a6b637a20a924686dd58608f3872fa90b029e7584fc44995fc0b9606dde102b33d4d4984d337df4de92601296f953e32a588a000d977f44766bc535b41512bacc222fd6f09d5bac123f5626855a419a87d7d98b001879d7f88ce9ef35898275c99b4c7e4ea5e6df05afb1537bb9d45395efbec71d19ace57e87184863957410551e16be9e3c0592f9a2e8ed82874b34a4575756fc147bb4b4da90ac9dd2016e5b2ad2041745e3b27f61dd3ad8f0b94278781b50beba8c6eb58a84207617f1143b46bca74d0ea4517d6294b8eed593c1193b3a21132d910bb3d45c54fc4a1c043ab6f550b4ef8d9b837380979b69b6e6c7633291dacb9c40c2270b660175c81d3cfb7bcf0179465fbf8abcdc8f3f55e94a8cd8cb0befb34ef146db6b81f43a057278455d010ddfbdc17016e075221959f9381ba974317797ec2b3506cb3a94faa22945e355fa476d438b02ebe5434dd99c3db69c188583a43041f4df6e52d3b3b3928e2d2b65734a4d82e437917ef70acd2dd45e4677c48cc2e6373f130b1d3e6b7f8eaf494415533660144d78426736256d9df464a09586b9ad5b2976bd46aa36eb18f9859afa23facbcbe07a4b1e56b2889f3b5cda34ef2666c58f0ab8cfc3d6fba98e9cf41bb04219a326f869b7f032c7488a15573cad9a93cd1ac1400d139eb9ef7765840a73eb927da436d077f6bb1ccae9e8f95cf2609684104e9e3424f06d7a65d74cdc4ed67926e442a7c391621f626286739246515d756eb160676851389fec74c1f0abace2d57002c185f3d4eef85b708d06a58e73c1b0fe56f80bbd383cb3ea57a229a4813ab3d666772e98f42187caa428d20929699c3d4f7cb8450fb7e7453cedf179c64af8569e0beeb652081319700ec30af6e35215b1aa3adf91c62181b47ca32f32f8ce3876fe3796f57f9c36c8888bcefba5d8528afd236855449e91c04ca7b61fc3d073c847ce82107619120f72e2b0d4bb0169fcb0d7e20ef6edd133b94a8ed7ca3138ef0c55b395b2b69839e99a376a6206bc6c7a1d1e4985e6b62afa264083714f920c84b16af600eb9bd138bf5e7c3f0b86384ed3118d10e22fccbbdc543dd15d1107d0bc9d1bbe291063ab81d95aa99cfc43cc0ed81eb6af713ac51fa8e6066434452180a39b69b31a05ddb47ff947c1ca1ec5b0bada4fad3b0e188a291f1b5d2ab53dcf7eefda178f86986440afe73c29ae83a42a04b3330100f3e85cb605e8cb9328c7451dcab3c6f88bdf384531dcec90937e570bbf1920f93dc04321e768742f0b9362fb3b4a63094c58ce5439c3f8cd719060dcd8d5868e25cc16d1e78b1ba06499611ee15d2415648ce9baef3233578c0b51103d917e8549b075a51c4c7061078e05c65d3d55a5b08c20b616ed4c462d77d542450bfabd9d100a5ba7da4913a2af8abc4dfa975ba1b3d39bbce7fce8b6cb9c73ff967685f5238b1a6cb946949ef15bb0c86dbc54abe24329bcec05d0dbb7b8369a4b2d3c13fdab8c8191f6b433fed62098cc06add86fa36600c7b44158c03a9312cf372489b946edad8ea2421580cd75b428a697f08920ad2f59eb5eda3e2ce945a1545bd57eed779439e3fd4fe5b38c7749a693475535d214b75932fb89ffe50a3f75c79428c21dc5449e7294786d4f572f9627aebc3404d2e5cf7c2ac8dbafaf25920522e0da0908102a6ffc0a8492549379bf502ef5806e24ca9868a99918f6269a0216ee5334b345c03f36426d693357117d5854b768f721fe2a9bd71fcbe7eee1c248efbf29744f543a8db46d54de7bd483395c1ba0240a6546470b04cf4aefcae3f367c3977c30b044b748ec029d0195f978b608361bd6a6077c80f0529e99a175af3aba0d5af5db12368f4d7aed328506d65b580d833e0e70d152485c175ee6f0d418f324a5a2d438f2c3c64b7ebe907fd3d83585f923c6e115271dee57e3f5526454b7020a3051cc1b6749eb126614ffedbec98714907daffc18047a3be8747bb2e04b3c36590c8ac3af1569982445537c142219ef9f6364234f42acec823dbeb1c7cb4f61fd9afd3b99b8b5b72eac2a797390c13531beae14261f47c565a47d97bcd4fb6939b7f35fadc753dccd2f15e15f338511afe653ad8d4e1c8254504f3d9b76aec17b4109be0ec25b064ae83e1b1733f8fd7d1cd5cafe81462a6509fa4f503df32b4faac9dfb829e62c7ef53f60ed22b2c9bf883c50186929a40b86efa9ee5b14729c37ad8572475d9ff44f51f1dfe0d0ea974bf89a1bc19286e7e01216e0a70fd7dc51b1105c0e8656aeaa98b4a7b4b01ca28b9b049f47b5e1f54495a36ef2a23f4fb855e270d7d65c1438a134a77e73ee10112d73c39de4363fa228fd893b4b291b54b19ec2489d3632964ceb66564bf3ea9a655b0e323828cf48cf0cc301cf9881d178e4f0b506c5832a2e37e274eaa94d5c653b6882fe670b8a819956fb34fb192efe93d7a286817bf8ebc2cd8ef9b2c27cb37d5f82d1935284b33eb36cf8d9a0127acc0adca54c188bfefb71a0598480f77bc299ae718098501b2ef5104c0917dd18d04f90e5d9a4245a1944d09c27f5e8137378c1201cb6811c1dc421d5f899eece7ebd719c70b578ef346147523670b6c384a53e3f4c81b"}) (async) 3.098520949s ago: executing program 1 (id=454): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10) r1 = syz_clone(0x20000, &(0x7f0000000080)="4cac6dbddb9d90608bb9d8baeb433bbb5e0def5309d9aef0cdc3c81f57368e62f1414fd8a48d8646aad82e1d8f5ec90f9ec064b41ef8af9237330df42b8f5f602cba2b6f90b6210ea9abc3999c689d49b4a87e9928e636af9df6cdb3aecf11fb611e09c332c14487864b84e94a", 0x6d, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="ceee448bda9b6bfd34d3dde5cbb6be754d466b0c17e6e81b99aaa6b10f5aa25da0944df58103e4bf59a87f41036880cd") ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000001c0)=r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x18, r3, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) fcntl$getownex(r0, 0x10, &(0x7f0000000200)) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000400)={[], [{@flag='dirsync'}]}) 3.035009655s ago: executing program 1 (id=455): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) pipe(&(0x7f0000000d00)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000002e00)='setgroups\x00') r5 = socket(0x1e, 0x4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) r8 = socket(0x80000000000000a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r8, 0x8936, &(0x7f0000000040)={@private2, 0x60}) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) splice(r2, 0x0, r3, 0x0, 0x714f, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x8000) open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x3f5f41, 0x84) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f00000002c0)=[@increfs_done], 0x1f, 0x0, &(0x7f0000000280)="6cc2517b26f0182dfaee8b9b0efefe72ca2be830b0fe003e4b5a94fc313f10"}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') readv(r11, &(0x7f0000000340)=[{&(0x7f0000000140)=""/95, 0x5f}], 0x1) r12 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000000000080000040"]) close_range(r0, 0xffffffffffffffff, 0x0) 2.924459487s ago: executing program 1 (id=456): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000002240)="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", 0xfffffffffffffee9, 0x4004085, 0x0, 0x49) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000180)=0xb329, 0xfffffffffffffdee) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x2, &(0x7f0000000200)=[{0x2, 0x2, 0xe4, 0x1}, {0xfff, 0xf6, 0x3, 0x10000}]}) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_open_dev$loop(&(0x7f0000003940), 0xfffffffffffffff9, 0x1c3503) ioctl$BLKPG(r5, 0x1269, &(0x7f0000003a40)={0x1, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) prlimit64(0x0, 0x6, &(0x7f00000002c0)={0xd902, 0x2}, &(0x7f0000000340)) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e60, 0x0, @mcast2, 0xd}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="82", 0x1}, {&(0x7f0000000280)="ca", 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r4, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) r6 = dup2(r3, r2) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r7], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r8, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x104) ioctl$FS_IOC_FSGETXATTR(r9, 0x801c581f, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000001c0)={0x3a, 0x0, &(0x7f0000000000)=[@exit_looper], 0x52, 0x0, &(0x7f0000000040)="70d07134252032fdd3365ef96b919649b1b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8"}) 2.057903187s ago: executing program 3 (id=462): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001880)={0x44, 0x0, &(0x7f0000000700)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000880)="e2f2819d3881ef541f0deedde03dbc81a22044c6d6ff868e2024240ce3ce33cd8c6713632a4f4992cb3de1bf5ace3263cad67409df9978e6beac5166773673a3d030ba1cf3500ac901c07f571d085966"}) 2.032360899s ago: executing program 3 (id=463): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x25a5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000002240)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x70, 0xbe, 0x4b, 0x8, 0xdba, 0x5000, 0x3587, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x42, 0x3, 0x0, 0x3d, 0xd9, 0xf0, 0x3}}]}}]}}, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) (async) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x7fffdf00a000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) (async) r4 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r4, 0xc0101282, 0x3) (async) ioctl$BTRFS_IOC_DEFRAG(r4, 0xc0101282, 0x3) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8cd45, 0x0) ioctl$BLKRRPART(r5, 0x125f, 0x0) (async) ioctl$BLKRRPART(r5, 0x125f, 0x0) 2.010701141s ago: executing program 4 (id=464): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0xc0240, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) madvise(&(0x7f0000661000/0x4000)=nil, 0x4000, 0x0) (async) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, 0x0) 1.938949899s ago: executing program 4 (id=465): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "2e5237601a87f08faccc1418fbc3da00", [0xfffffffffffffce8, 0xa]}}) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r3, 0x16, &(0x7f0000001640)=[&(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x1, 0x4, r1, &(0x7f0000000280)='a', 0x1, 0x5}]) 1.936484739s ago: executing program 1 (id=466): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000000)={[{0x3ff, 0x6, 0xa, 0xb0, 0x4, 0xe, 0x4, 0x4, 0x6, 0xe0, 0x3, 0x3, 0x7}, {0x8, 0x6, 0x4, 0x3, 0x1, 0x40, 0x8, 0x40, 0x1d, 0x3, 0xa2, 0x1, 0x8}, {0xfff, 0x8, 0x6, 0x0, 0x2, 0x0, 0x4, 0xba, 0x2, 0x0, 0x7d, 0x5, 0xfffffffffffffe01}], 0x1ff}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.817751211s ago: executing program 2 (id=467): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) (async, rerun: 32) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@mcast2, @in=@multicast2}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000200)=0xe8) 1.644846019s ago: executing program 4 (id=468): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x44100, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000040)={@desc={0x1, 0x0, @desc3}}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xff) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000100)="f4672e660ff603d1000f01d866b9b30900000f32f20f5f5200650fc72af30fc7b68800266d2e0f01c8", 0x29}], 0x1, 0x10, &(0x7f0000000180)=[@cr4={0x1, 0x40010}], 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x7) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r0, 0x8010aebc, &(0x7f0000000200)={0x3000, 0x8000}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x8000, 0x1, 0x7, 0x7, {{0x12, 0x4, 0x0, 0x3a, 0x48, 0x64, 0x0, 0x6, 0x29, 0x0, @empty, @rand_addr=0x64010101, {[@generic={0x0, 0x6, "2e0e9023"}, @cipso={0x86, 0x2e, 0x3, [{0x1, 0x2}, {0x0, 0xc, "bdc1e5a2cc16ee2ed470"}, {0x6, 0xf, "520a3bec04d40b32c55327e591"}, {0x7, 0xb, "75941a4084377cc213"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl2\x00', r2, 0x4, 0x7, 0x1, 0xc, 0x40, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x10, 0x3a781cd3}}) r3 = epoll_create1(0x80000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000003c0)={r1, 0x80000001, 0x8000000000000000, 0x1}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xcc, r5, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7, 0x4c}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d23b3e1fc5c472e9477957a80e"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "20717ff4b7"}, @NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_SEQ={0x8, 0x4, "7b712bef"}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "fb06286894"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f72454b9ac"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "ae8f8e616c3d1b59c6d68a615c"}]}, 0xcc}, 0x1, 0x0, 0x0, 0x48014}, 0x24000010) pipe2$watch_queue(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000680), 0x8000, 0x0) ioctl$BTRFS_IOC_SCRUB(r8, 0xc400941b, &(0x7f00000006c0)={0x0, 0x2, 0x9, 0x1}) r9 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000ac0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x56a, 0x3f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0xb4, 0x2, 0x3, 0x1, 0x2, 0x7, {0x9, 0x21, 0xa4d8, 0x8, 0x1, {0x22, 0x6be}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xd, 0x7f, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0xe, 0xf8}}]}}}]}}]}}, &(0x7f0000000d00)={0xa, &(0x7f0000000b00)={0xa, 0x6, 0x310, 0xc, 0x9, 0x6, 0x8, 0x78}, 0x34, &(0x7f0000000b40)={0x5, 0xf, 0x34, 0x2, [@ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x3, 0xf008, 0x6, [0x3f00, 0xc0c0, 0x88cb2f30acdd0253, 0x3fff, 0xff00c0, 0xf]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x70, 0x81, 0x5, 0x4}]}, 0x4, [{0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x405}}, {0x73, &(0x7f0000000bc0)=@string={0x73, 0x3, "be5d536640a04a294e26377824b62d1c66008d425f504fd550fafe5e4e2574ca88e345bfd9479063311747b4766678663446ceb4a8d29fa7cde23f9e9ddcf24379482ddc8067ba27aa4ff8513dd4fe78736cf193ca1b4d078483db073412440587f095f0a9883587facaec7c04786df422"}}, {0x41, &(0x7f0000000c40)=@string={0x41, 0x3, "b6f5da24815954ccf2a28d5965a8c8aae66fbbf0b425f5b6d3a593bbe037cfe9496d88000eef5def6e8af477bb74eb550cc6ad97ba34a8229d4037a6a4d65d"}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x2409}}]}) syz_usb_control_io$hid(r9, &(0x7f0000000f00)={0x24, &(0x7f0000000d80)={0x20, 0x23, 0xb5, {0xb5, 0x3, "8fde70d67c5a5b27973d8ba01757a7b6c9e4032eb4676037e183d7897b3792bdd78c9d4a0b828b8547dad6eef715f40fcd9f176cc9dc2ab08e4cf71e8cec49499b78d46913e60eac264596aa7cfec8cba5e40638c939b487db5ddb7d8987b9950db12b36db35654abda076d87c055ac46bbc49549031a25d88305041d8c1912b4b65bf4210e461091cac75caa4b23bb68cb1e0d0ef22cedb792ff1261dfd3283ebb8fc6f451d6a2bf444b46e71bc05a54cc02f"}}, &(0x7f0000000e40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}, &(0x7f0000000e80)={0x0, 0x22, 0xa, {[@main=@item_012={0x2, 0x0, 0x8, "9d28"}, @local=@item_012={0x1, 0x2, 0x0, "1e"}, @global=@item_4={0x3, 0x1, 0x1, "1612598b"}]}}, &(0x7f0000000ec0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0xfed}}}}, &(0x7f0000001140)={0x2c, &(0x7f0000000f40)={0x20, 0xa, 0x4b, "9e2da25983b43bdab0c0f8ace70556792e248105349892d4f7d660f96c9aa95b0582671eb293faffa605f69568f50eb0c24b2ddae9860804b136add18b214e453db6088c7d08b749ee1e66"}, &(0x7f0000000fc0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000001000)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000001040)={0x20, 0x1, 0x83, "6c4550f95ab3732e778b765f83c3085e2ce78c48473d01341b0537c56d5ad4bff87ecd020c307d1331abe37ba7a7f67242a7b27f767851e6475968ccc0d05243b159f2fd6fc90301602a573ac315affc156bdd61096ed27498fc51ec433ef9c53dcb9c1296ae1059e1978f3a778321818af24f684ab2df8752817bcc3da1f482feeb2f"}, &(0x7f0000001100)={0x20, 0x3, 0x1, 0x3}}) syz_usb_control_io$hid(r9, &(0x7f0000001400)={0x24, &(0x7f0000001180)={0x0, 0xd, 0xc8, {0xc8, 0x33, "0564698c14ef8f29104d48e22c6dbf1a32638fada4045fe93a9fd504e1ab36902eee43a8b2bb944274b5adc7f16579fd39de0e524d8585475fd948de296110f4f3bdb8f94fc9cd0d2db4a6e9df28aad1f011b25b29f75b8ea414eb24403fb0bf16c47fcfbf0ba8a381d1efe55a06d354bbf921258ce0d1c34f4483d1a7008f9fd00c62c29a82c02dd1dfa6deff6af7f09d7a6e91cea745318f03fcca36d773475aea90276782492787c878a34382dd41748e9c08d5c59ee1e3caa9257e09bb4390400c430bd3"}}, &(0x7f0000001280)={0x0, 0x3, 0xcf, @string={0xcf, 0x3, "02fe9faa60fa5bb4dbfc4df442ee333126d33ea3925751c9c6160289f6d511fdc62a2fdfd08a7750c9eed16641a3b42cd77e291f775da1ed7a16e7cfd0c6d0d3f41dd275983443f199a92cacaeeb1868344ed6a6c0c24876e93815ad11577eb9b92b228c49fb23a7f71873d15a4df10b28d4d88868d4d70cb1acd039c0210f9a418a1166676d21e139fe846160e2258b06e24cc3542cf593197adc8b558d4b19e2b9a835bf6fd810acaaa892b0a733079db7e528229af9b02ab109e9890d3e63ea9d86ab15a5d6839bb138d9f8"}}, &(0x7f0000001380)={0x0, 0x22, 0x1, {[@local=@item_012={0x0, 0x2, 0x7}]}}, &(0x7f00000013c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x212, 0x4, 0x1, {0x22, 0x3b5}}}}, &(0x7f0000001680)={0x2c, &(0x7f0000001440)={0xe0, 0x12, 0xa8, "f28b643b83018e2f65b45791a7d0c35eb53c27a52f0604e22d3c3f1b059bc6233d5e1253763a130ac203f5cbf1673887a9ab8560a1b927d5ad62707887c10f8175cd97629b0d67c455f209022c9ad589b2dd0b49f0be43102da8ee07d98b56db8ebb327a79f2b27cf454473d91debf6c2c9e2bc1418602370d8a507c9c0cd06bf127abe7a9dc338f4583a4806cccd7aef5298ead72ad2b07b774a267f5b7bca3371dd9c5c5f5634f"}, &(0x7f0000001500)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001540)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000001580)={0x20, 0x1, 0xaa, "f90231e36200a84cfdb036514863561c8c4cae7b9ed35dcfd2647f4607ad1f497860f516aa01fcad179463e8c2b9a1774c9ba7dc79800d68abd0ec103be085c7f83f6f170bd970cb97900b44f85e0c5d681bf7c68c471ccb2c744c910d63a76c2ecfab472f213f542c5c8159343203ce1805af8676f02ced8bc0a83ada3fb3b74e44e137407f03405d6f4966446c624c54b71db408c8cd538c4985d821772e6ac2f59c6afc874eb08600"}, &(0x7f0000001640)={0x20, 0x3, 0x1, 0x7}}) r10 = socket$inet6(0xa, 0xa, 0x8) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000001700)={&(0x7f00000016c0)}) ioctl$KVM_X86_SET_MCE(r7, 0x4040ae9e, &(0x7f0000001740)={0x3000000000000000, 0x3000, 0x6, 0x2, 0x1a}) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000001780)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000001880)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f00000018c0)={{{@in6=@private2, @in=@loopback, 0x4e24, 0x2, 0x4e20, 0x4, 0x2, 0x20, 0x0, 0x16, r2, r11}, {0xc, 0x8, 0x2, 0x38, 0x3, 0x1ae, 0x5, 0x9}, {0x0, 0xd, 0x4, 0x5}, 0x7, 0x6e6bbb, 0x1, 0x0, 0x1}, {{@in6=@loopback, 0x4d3, 0x6c}, 0x2, @in=@broadcast, 0x3500, 0x2, 0x0, 0x4, 0x6, 0x6, 0x200}}, 0xe8) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000019c0)) openat$full(0xffffffffffffff9c, &(0x7f0000001a00), 0x840, 0x0) write(r3, &(0x7f0000001a40)="fe", 0x1) ioctl$TIOCGRS485(r8, 0x542e, &(0x7f0000001a80)) 1.582670776s ago: executing program 1 (id=469): socket(0xf, 0x1, 0x5) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f00000020c0)=0x9, 0x4) bind$can_raw(r0, &(0x7f0000000080), 0x10) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='oom_score_adj\x00') preadv(r4, &(0x7f0000000340)=[{&(0x7f0000000100)=""/206, 0xce}], 0x1, 0x2b1, 0x200) read$FUSE(r4, &(0x7f0000002100)={0x2020}, 0x2020) ioctl$TCFLSH(r3, 0x400455c8, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.499971924s ago: executing program 2 (id=470): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x10000010) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008d4}, 0x40001) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000015c0)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e7505521481f5d3bb1945"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r4, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) newfstatat(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x0, 0x100) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 1.479982666s ago: executing program 2 (id=471): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x8000, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x1011000, &(0x7f0000000040)=ANY=[]) llistxattr(&(0x7f0000002300)='./file0\x00', 0x0, 0xde) io_setup(0x1, &(0x7f00000001c0)=0x0) r3 = signalfd4(r1, &(0x7f00000002c0), 0x8, 0x80000) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000f00), 0xc0000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvmsg(r5, 0x0, 0x0) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20040, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x13, r7, 0x0) r8 = userfaultfd(0x80801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000ec000/0x1000)=nil, 0x1000}}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r9, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4620040000000000000000000002003e00ebffffff7c0000000049cdf8ca00000000000000020000000000000000000000090038"], 0x78) close(r9) io_submit(r2, 0x3, &(0x7f0000001100)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x3, 0x3, r1, &(0x7f0000000200)="a77309c942c76c4ef88caec01739f29ecd8c6f7098b61561a3de768aef5ab32cf8c3db813053f7539713", 0x2a, 0x4e0a, 0x0, 0x0, r3}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x8, 0x6, r4, &(0x7f0000000f40)="3cfe00661991a46fe03ad719123505661cbeeea0d06df4c861717fa9337ac27ba69031693a67037d9feb633e4c38bf471afb704af4b4cc2004ffac25450f1b49241e6300aa48eb8a9c9dd604512187efaab2d9d55dbe5fa0846486f83a1d19259be9a912a842fdcbc8f40ded0371182812878dc3dc6d9a60d4429146d8f361fe598c676910577d6902775486322b5a552acc6d74", 0x94, 0x5, 0x0, 0x2, r5}, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x7, 0x1, r6, &(0x7f0000001080)="b9aba0146d02c04917f7", 0xa, 0xd3, 0x0, 0x3, r9}]) r10 = socket$unix(0x1, 0x2, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000038c0)={0x20, 0x1e, 0xa01, 0x0, 0x0, {0x7}, [@generic="f4837e629eda4a7ea9"]}, 0x20}}, 0x0) bind$unix(r10, &(0x7f0000001400)=@abs={0x1, 0x0, 0x4e20}, 0x6e) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0}, 0x0) r12 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGRDESC(r12, 0x90044802, &(0x7f0000000380)={0x9a5, "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"}) syz_open_dev$loop(&(0x7f0000000000), 0x632, 0x400000) 907.410586ms ago: executing program 3 (id=472): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x3}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x50, 0x0, &(0x7f0000000040)="c77f63941720024fcb205ad3f3502124f14eba8419d2d70aade14d22ca5137369a7e2f7c68839e02d428fe526929aaaeb71b01b4a33854d4ca7681b53a970b1a4175371ccff2ad1d15ed65d48b413559"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x0, &(0x7f00000004c0)={@ptr={0x70742a85, 0x100000, 0x0, 0x0, 0x2, 0x13}, @flat=@handle, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, 0x0}}], 0x0, 0x0, 0x0}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000340)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000900)={0x9c, 0x0, &(0x7f00000007c0)=[@free_buffer={0x40086303, r1}, @acquire_done={0x40106309, 0x2}, @release={0x40046306, 0x3}, @acquire_done={0x40106309, 0x3}, @dead_binder_done, @clear_death, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000780)={0x30, 0x30, 0x30}}}], 0x29, 0x0, &(0x7f00000008c0)="4b30174b442288c3a9def15973bb88f9681daaf870436e821da0bd6350d981151041f99854174eafdb"}) 99.967189ms ago: executing program 3 (id=473): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000003c0), 0x40, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="200000005f0001010000000048a7376db1f9"], 0x20}], 0x1}, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) (async) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r3, 0x1, 0x28, 0x0, &(0x7f00000001c0)) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x17, 0x7, 0x6, 0x7}, 0x1b, [0x1, 0xc95a, 0x10, 0x9, 0x5, 0xfffffffe, 0x8, 0x7f, 0x40006, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff02, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x24, 0x4000009, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x1, 0x71, 0x2, 0x6, 0x7, 0x2, 0x5, 0x40, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x4, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000004, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0x9, 0xd, 0x2bf, 0x6c9, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0x1, 0x312, 0x78, 0xea4, 0x0, 0x40, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x200007, 0x8000, 0x1, 0xfe000000, 0x9, 0x2, 0x7f, 0x9, 0x3, 0x0, 0x5, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x23ff02a1, 0x2], [0xf, 0x6, 0x0, 0x100, 0xfffffffe, 0x100, 0x8d2, 0xbd8e, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x0, 0x4, 0x1, 0x8, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x4f47, 0x8, 0x4, 0x8001, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x0, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x3, 0x5, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x3d9, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0x3, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x1, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0x10000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0x0, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0x80000001, 0x4, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001"], 0x6c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a400000054000100000000000000800007"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) (async) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a400000054000100000000000000800007"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/binder1\x00', 0x1400, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000100), 0x8) (async) bind$bt_sco(r6, &(0x7f0000000100), 0x8) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x34}, 0x8) listen(r6, 0xb4) (async) listen(r6, 0xb4) connect$bt_sco(r6, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) close_range(r5, 0xffffffffffffffff, 0x0) (async) close_range(r5, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) (async) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) socket$inet_udp(0x2, 0x2, 0x0) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000240)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) sendmmsg$inet(r8, &(0x7f00000000c0)=[{{&(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}}], 0x1, 0xc044) write$binfmt_misc(r8, 0x0, 0x0) (async) write$binfmt_misc(r8, 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x8008770b, &(0x7f0000001200)='\x00\x00\x01\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x9f\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00o\b\xbdd\xcb\xa0\xc4P-E_Q\xa2\x98\xf5\xdb\x17\xe2-\x890\xf7\xaf\x1eL\x0f\xe3\xb2\xb8X\xdb\x849\xc6\xaaG#\x1bg\x05F\x85\x9e\x18 \x11\xbeG\x85\xb2\xf5\xa1S\xfd\x82\xfe\x94\x02\xd6\xd4\x1a4zbn\x17\\\xfc\xb4\x02\xfbN\xe8\x10>\xa2\x87\xa0\xb3\x90E\x94\xb7B\xffl\xca\xc62\x1ar\x92#kz\xa6fP\xc5\xe8\xcd\xf1\x18l\xa0\xbf\xdb\x18b\vRo\x1f^\x18\bR\xf7O\b\xb4\xd3;0\xc1h/\xaf\x0e\x88\xcc\xea\x94Ur\'!q\x03\xb0\xcf\t\xbe\xc4\x197Q]H?\v\xe0\xd3/\xa6\xf7j&\xd5\xdf\x90\x1e\xd3_H\'\xd1\xa2Z\xf4B1\x1f\xfc\xb7\x9bJ\xf5\x81\tT6zS-\x8c2%\xc1|\x9e\xfaj>\xfa\x01x\xc3\xd1;\xd5\xeb\xfcM\xb7\x938\xcb\x90We\xc8\xd6\x83\xad\xeb`c\x93\x15\x82F\n*\xbe\xe1\xe2\x82\xd6\xa6\x96\xee\x83\x164K\xe2\xc0\x174\xeeT)?\x00:S\xac\x13\x86\xcc6\x16\x06\x00q\xdc\x14\xb5c\xeb\xca4j\x8f\xb2|\x05\x92%{z\xfc\x00\x00\x00\x00\x00') 51.654815ms ago: executing program 3 (id=474): r0 = socket$igmp6(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x26008890) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x7, 0x1, 0x40, @empty, @mcast1, 0x7, 0x40, 0xfff, 0x7ff}}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1100, 0x1}, @fd, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 2.684869ms ago: executing program 2 (id=475): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000680)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000006c0)={'vcan0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) r6 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r6, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f0000000240)=r7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) r10 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r10, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) sendmsg$can_raw(r10, &(0x7f0000000180)={&(0x7f00000005c0)={0x1d, r9}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@can={{}, 0xfb, 0x0, 0x4, 0x0, "500000b74b958e56"}, 0x10}}, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r11 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r12, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) getpeername$packet(r12, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r11, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x4788, r13}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x5cc}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) (async) sendmmsg(r11, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x4788, r13}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x5cc}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000780)={'erspan0\x00', &(0x7f0000000700)={'sit0\x00', 0x0, 0x700, 0x10, 0xf, 0x78f0, {{0xd, 0x4, 0x0, 0x3, 0x34, 0x64, 0x0, 0xd, 0x4, 0x0, @empty, @private=0xa010102, {[@timestamp={0x44, 0x18, 0x3e, 0x0, 0x4, [0xfffff001, 0x7fffffff, 0xa, 0xb6, 0x8]}, @generic={0x193, 0x6, "92073862"}]}}}}}) getpeername$packet(r1, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000800)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000008c0)={'gre0\x00', &(0x7f0000000840)={'gretap0\x00', 0x0, 0x7, 0x1, 0x54, 0x0, {{0x10, 0x4, 0x0, 0x6, 0x40, 0x64, 0x0, 0x6, 0x29, 0x0, @empty, @multicast1, {[@rr={0x7, 0x2b, 0xd7, [@multicast1, @dev={0xac, 0x14, 0x14, 0xa}, @private=0xa010102, @rand_addr=0x64010100, @loopback, @private=0xa010100, @multicast1, @multicast1, @multicast2, @remote]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000008c0)={'gre0\x00', &(0x7f0000000840)={'gretap0\x00', 0x0, 0x7, 0x1, 0x54, 0x0, {{0x10, 0x4, 0x0, 0x6, 0x40, 0x64, 0x0, 0x6, 0x29, 0x0, @empty, @multicast1, {[@rr={0x7, 0x2b, 0xd7, [@multicast1, @dev={0xac, 0x14, 0x14, 0xa}, @private=0xa010102, @rand_addr=0x64010100, @loopback, @private=0xa010100, @multicast1, @multicast1, @multicast2, @remote]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000009c0)={'syztnl2\x00', &(0x7f0000000900)={'syztnl2\x00', 0x0, 0x20, 0x80, 0x10, 0x9, {{0x1f, 0x4, 0x2, 0x16, 0x7c, 0x65, 0x0, 0x5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @private=0xa010101, {[@timestamp={0x44, 0x10, 0x7c, 0x0, 0xf, [0x400, 0x1, 0x4]}, @ssrr={0x89, 0xf, 0xb9, [@remote, @multicast1, @empty]}, @cipso={0x86, 0xf, 0x1, [{0x5, 0x9, "dde3a6f69d77c0"}]}, @generic={0x82, 0xd, "f0e4c308c4114a42b47dc5"}, @lsrr={0x83, 0x2b, 0xb3, [@multicast1, @empty, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @empty]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000009c0)={'syztnl2\x00', &(0x7f0000000900)={'syztnl2\x00', 0x0, 0x20, 0x80, 0x10, 0x9, {{0x1f, 0x4, 0x2, 0x16, 0x7c, 0x65, 0x0, 0x5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @private=0xa010101, {[@timestamp={0x44, 0x10, 0x7c, 0x0, 0xf, [0x400, 0x1, 0x4]}, @ssrr={0x89, 0xf, 0xb9, [@remote, @multicast1, @empty]}, @cipso={0x86, 0xf, 0x1, [{0x5, 0x9, "dde3a6f69d77c0"}]}, @generic={0x82, 0xd, "f0e4c308c4114a42b47dc5"}, @lsrr={0x83, 0x2b, 0xb3, [@multicast1, @empty, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @empty]}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001080)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001040)={&(0x7f0000000a00)={0x620, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [{{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4a0}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r14}, {0x114, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r15}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x80, 0x5, 0x0, 0x100}, {0x1400, 0x10, 0x4, 0x3}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r16}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xad7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x620}, 0x1, 0x0, 0x0, 0x4040}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x87, 0x8, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x83, 0x4, 0x0, @multicast1, @private=0xa010102}}}}) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x40106726, &(0x7f00000000c0)) (async) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x40106726, &(0x7f00000000c0)) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20b00, 0x0) (async) r18 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20b00, 0x0) preadv2(r18, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/129, 0x81}], 0x1, 0xffffffff, 0x8, 0xd) 0s ago: executing program 3 (id=476): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) r2 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x19e) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x60, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x101, 0x3}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x2}, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x10, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.62' (ED25519) to the list of known hosts. [ 24.283967][ T36] audit: type=1400 audit(1762917699.550:64): avc: denied { mounton } for pid=283 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.285484][ T283] cgroup: Unknown subsys name 'net' [ 24.306654][ T36] audit: type=1400 audit(1762917699.550:65): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.334057][ T36] audit: type=1400 audit(1762917699.580:66): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.334243][ T283] cgroup: Unknown subsys name 'devices' [ 24.513853][ T283] cgroup: Unknown subsys name 'hugetlb' [ 24.519524][ T283] cgroup: Unknown subsys name 'rlimit' [ 24.695808][ T36] audit: type=1400 audit(1762917699.960:67): avc: denied { setattr } for pid=283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.719032][ T36] audit: type=1400 audit(1762917699.960:68): avc: denied { mounton } for pid=283 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.743883][ T36] audit: type=1400 audit(1762917699.960:69): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.755205][ T285] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.775891][ T36] audit: type=1400 audit(1762917700.040:70): avc: denied { relabelto } for pid=285 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.801346][ T36] audit: type=1400 audit(1762917700.040:71): avc: denied { write } for pid=285 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 24.891534][ T36] audit: type=1400 audit(1762917700.150:72): avc: denied { read } for pid=283 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.917137][ T36] audit: type=1400 audit(1762917700.160:73): avc: denied { open } for pid=283 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.917476][ T283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.808444][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.815553][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.822835][ T291] bridge_slave_0: entered allmulticast mode [ 25.829152][ T291] bridge_slave_0: entered promiscuous mode [ 25.835781][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.842900][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.849973][ T291] bridge_slave_1: entered allmulticast mode [ 25.856356][ T291] bridge_slave_1: entered promiscuous mode [ 25.862512][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.869580][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.876767][ T293] bridge_slave_0: entered allmulticast mode [ 25.883268][ T293] bridge_slave_0: entered promiscuous mode [ 25.898208][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.905346][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.912493][ T293] bridge_slave_1: entered allmulticast mode [ 25.918783][ T293] bridge_slave_1: entered promiscuous mode [ 25.938883][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.945973][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.953104][ T292] bridge_slave_0: entered allmulticast mode [ 25.959366][ T292] bridge_slave_0: entered promiscuous mode [ 25.965881][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.973046][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.980131][ T292] bridge_slave_1: entered allmulticast mode [ 25.986515][ T292] bridge_slave_1: entered promiscuous mode [ 26.013644][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.020710][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.027832][ T290] bridge_slave_0: entered allmulticast mode [ 26.034128][ T290] bridge_slave_0: entered promiscuous mode [ 26.054076][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.061247][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.068434][ T290] bridge_slave_1: entered allmulticast mode [ 26.074758][ T290] bridge_slave_1: entered promiscuous mode [ 26.233768][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.240833][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.248197][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.255268][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.271899][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.278973][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.286315][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.293373][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.308317][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.315410][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.322715][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.329751][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.347664][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.354769][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.362162][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.369198][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.390444][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.397780][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.405424][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.412934][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.420111][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.427742][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.435083][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.442427][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.465999][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.473102][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.483842][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.490909][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.518157][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.525420][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.533332][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.540393][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.566855][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.573953][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.581952][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.589012][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.610761][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.617871][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.625703][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.632823][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.657597][ T290] veth0_vlan: entered promiscuous mode [ 26.676800][ T292] veth0_vlan: entered promiscuous mode [ 26.695225][ T290] veth1_macvtap: entered promiscuous mode [ 26.714491][ T291] veth0_vlan: entered promiscuous mode [ 26.727239][ T292] veth1_macvtap: entered promiscuous mode [ 26.746515][ T293] veth0_vlan: entered promiscuous mode [ 26.779165][ T293] veth1_macvtap: entered promiscuous mode [ 26.785609][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.793594][ T291] veth1_macvtap: entered promiscuous mode [ 26.894182][ T341] capability: warning: `syz.3.4' uses deprecated v2 capabilities in a way that may be insecure [ 26.910919][ T345] rust_binder: 2: no such ref 0 [ 26.916201][ T345] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 26.923790][ T345] rust_binder: 2: no such ref 2 [ 26.929037][ T345] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 26.942337][ T347] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.084721][ T360] exFAT-fs (rnullb0): invalid boot record signature [ 27.091363][ T360] exFAT-fs (rnullb0): failed to read boot sector [ 27.098401][ T360] exFAT-fs (rnullb0): failed to recognize exfat type [ 27.121833][ T64] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.142610][ T368] /dev/rnullb0: Can't open blockdev [ 27.162196][ T370] netlink: 'syz.3.12': attribute type 12 has an invalid length. [ 27.201117][ T370] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 27.311670][ T64] usb 3-1: Using ep0 maxpacket: 32 [ 27.318259][ T64] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 27.326747][ T64] usb 3-1: config 0 has no interface number 0 [ 27.334690][ T64] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 27.344335][ T64] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.352734][ T64] usb 3-1: Product: syz [ 27.357525][ T64] usb 3-1: Manufacturer: syz [ 27.364614][ T64] usb 3-1: SerialNumber: syz [ 27.374656][ T64] usb 3-1: config 0 descriptor?? [ 27.381094][ T64] smsc95xx v2.0.0 [ 27.779169][ T373] rust_binder: Error while translating object. [ 27.779281][ T373] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 27.785780][ T64] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 27.811966][ T373] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:8 [ 27.812807][ T64] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 27.862292][ T393] netlink: 'syz.0.18': attribute type 5 has an invalid length. [ 27.886871][ T393] syzkaller0: entered allmulticast mode [ 27.893085][ T393] syzkaller0: entered promiscuous mode [ 27.901835][ T393] syzkaller0 (unregistering): left promiscuous mode [ 27.908533][ T393] syzkaller0 (unregistering): left allmulticast mode [ 27.911189][ T398] ======================================================= [ 27.911189][ T398] WARNING: The mand mount option has been deprecated and [ 27.911189][ T398] and is ignored by this kernel. Remove the mand [ 27.911189][ T398] option from the mount to silence this warning. [ 27.911189][ T398] ======================================================= [ 28.371494][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 28.475421][ T425] netlink: 'syz.1.28': attribute type 29 has an invalid length. [ 28.483551][ T425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28'. [ 28.511567][ T9] usb 4-1: device descriptor read/64, error -71 [ 28.651519][ T10] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 28.751487][ T9] usb 4-1: device descriptor read/64, error -71 [ 28.814360][ T10] usb 1-1: config index 0 descriptor too short (expected 2075, got 27) [ 28.822784][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 28.832997][ T10] usb 1-1: config 0 has no interfaces? [ 28.840040][ T10] usb 1-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 28.849290][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.857417][ T10] usb 1-1: Product: syz [ 28.862188][ T10] usb 1-1: Manufacturer: syz [ 28.866902][ T10] usb 1-1: SerialNumber: syz [ 28.872594][ T10] usb 1-1: config 0 descriptor?? [ 28.991472][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 29.082153][ T419] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 29.123409][ T419] rust_binder: Write failure EFAULT in pid:16 [ 29.124003][ T45] usb 1-1: USB disconnect, device number 2 [ 29.143071][ T9] usb 4-1: device descriptor read/64, error -71 [ 29.381572][ T9] usb 4-1: device descriptor read/64, error -71 [ 29.491620][ T9] usb usb4-port1: attempt power cycle [ 29.538681][ T36] kauditd_printk_skb: 101 callbacks suppressed [ 29.538701][ T36] audit: type=1400 audit(1762917704.800:175): avc: denied { read write } for pid=432 comm="syz.1.30" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 29.539049][ T433] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 29.545427][ T36] audit: type=1400 audit(1762917704.800:176): avc: denied { open } for pid=432 comm="syz.1.30" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 29.644803][ T36] audit: type=1400 audit(1762917704.910:177): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 29.666658][ T36] audit: type=1400 audit(1762917704.930:178): avc: denied { ioctl } for pid=435 comm="syz.0.31" path="socket:[3993]" dev="sockfs" ino=3993 ioctlcmd=0x9429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 29.690980][ T36] audit: type=1400 audit(1762917704.930:179): avc: denied { read } for pid=435 comm="syz.0.31" path="socket:[3993]" dev="sockfs" ino=3993 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 29.871480][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 29.892494][ T9] usb 4-1: device descriptor read/8, error -71 [ 30.022553][ T9] usb 4-1: device descriptor read/8, error -71 [ 30.261596][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 30.282818][ T9] usb 4-1: device descriptor read/8, error -71 [ 30.412477][ T9] usb 4-1: device descriptor read/8, error -71 [ 30.508834][ T36] audit: type=1400 audit(1762917705.770:180): avc: denied { read } for pid=439 comm="syz.0.32" dev="nsfs" ino=4026532299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 30.521720][ T9] usb usb4-port1: unable to enumerate USB device [ 30.530722][ T36] audit: type=1400 audit(1762917705.770:181): avc: denied { open } for pid=439 comm="syz.0.32" path="net:[4026532299]" dev="nsfs" ino=4026532299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 30.617930][ T442] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.808630][ T36] audit: type=1400 audit(1762917706.070:182): avc: denied { create } for pid=444 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 30.962877][ T64] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000000: -71 [ 30.974498][ T64] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 30.984274][ T64] usb 3-1: USB disconnect, device number 2 [ 31.081571][ T66] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 31.145967][ T452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.37'. [ 31.156581][ T36] audit: type=1400 audit(1762917706.420:183): avc: denied { unlink } for pid=451 comm="syz.3.37" name="#1" dev="tmpfs" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 31.170219][ T452] rust_binder: validate_parent_fixup: new_min_offset=17, sg_entry.length=0 [ 31.178561][ T36] audit: type=1400 audit(1762917706.420:184): avc: denied { mount } for pid=451 comm="syz.3.37" name="/" dev="overlay" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.179073][ T452] rust_binder: Error while translating object. [ 31.209118][ T452] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.215426][ T452] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:41 [ 31.233049][ T66] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.253329][ T66] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.263473][ T66] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 31.276974][ T66] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 31.286170][ T66] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.295076][ T66] usb 1-1: config 0 descriptor?? [ 31.481559][ T64] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 31.632661][ T64] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 31.643978][ T64] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 31.657039][ T64] usb 4-1: config 0 interface 0 has no altsetting 0 [ 31.663746][ T64] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 31.672861][ T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.682410][ T64] usb 4-1: config 0 descriptor?? [ 31.704817][ T66] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 31.714020][ T66] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 31.741512][ T10] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 31.892600][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 31.903695][ T10] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 31.912847][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.922319][ T10] usb 3-1: config 0 descriptor?? [ 31.927798][ T456] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 32.090046][ T64] gt683r_led 0003:1770:FF00.0002: invalid report_count 940965003 [ 32.097920][ T64] gt683r_led 0003:1770:FF00.0002: item 0 4 1 9 parsing failed [ 32.105733][ T64] gt683r_led 0003:1770:FF00.0002: hid parsing failed [ 32.112529][ T64] gt683r_led 0003:1770:FF00.0002: probe with driver gt683r_led failed with error -22 [ 32.291922][ T454] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 32.291963][ T454] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:43 [ 32.302704][ T438] usb 4-1: USB disconnect, device number 6 [ 32.342599][ T456] Zero length message leads to an empty skb [ 32.351142][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 32.357907][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 32.367285][ T10] usb 3-1: USB disconnect, device number 3 [ 32.516129][ T438] usb 1-1: USB disconnect, device number 3 [ 32.832313][ T480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.46'. [ 32.842464][ T480] rust_binder: Write failure EFAULT in pid:47 [ 32.876803][ T484] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 32.890698][ T484] rust_binder: Write failure EINVAL in pid:7 [ 32.896123][ T484] netlink: 176 bytes leftover after parsing attributes in process `syz.2.48'. [ 32.921481][ T438] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 32.978136][ T492] rust_binder: Error while translating object. [ 32.978182][ T492] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 32.984511][ T492] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:53 [ 33.081572][ T438] usb 2-1: Using ep0 maxpacket: 16 [ 33.097041][ T438] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.108364][ T438] usb 2-1: config 0 interface 0 has no altsetting 0 [ 33.115212][ T438] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 33.134634][ T438] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.146878][ T331] bridge_slave_1: left allmulticast mode [ 33.147129][ T438] usb 2-1: config 0 descriptor?? [ 33.160932][ T331] bridge_slave_1: left promiscuous mode [ 33.174519][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.182578][ T331] bridge_slave_0: left allmulticast mode [ 33.188533][ T331] bridge_slave_0: left promiscuous mode [ 33.194421][ T10] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 33.202448][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.239081][ T505] __vm_enough_memory: pid: 505, comm: syz.3.58, bytes: 36028801313931264 not enough memory for the allocation [ 33.311833][ T331] veth1_macvtap: left promiscuous mode [ 33.317519][ T331] veth0_vlan: left promiscuous mode [ 33.352669][ T10] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 33.361109][ T10] usb 3-1: config 179 has no interface number 0 [ 33.381518][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 33.403726][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 33.415072][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 33.451479][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 33.470536][ T10] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 33.504285][ T515] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 33.515142][ T10] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 33.522012][ T515] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 33.532729][ T10] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 33.532759][ T10] usb 3-1: Product: syz [ 33.546381][ T490] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 33.560971][ T10] xpad 3-1:179.65: probe with driver xpad failed with error -5 [ 33.569617][ T515] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 33.579495][ T515] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 33.589291][ T511] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.599288][ T511] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.613170][ T511] bridge_slave_0: entered allmulticast mode [ 33.619721][ T511] bridge_slave_0: entered promiscuous mode [ 33.626644][ T511] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.634579][ T511] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.641801][ T511] bridge_slave_1: entered allmulticast mode [ 33.648386][ T511] bridge_slave_1: entered promiscuous mode [ 33.663589][ T438] usbhid 2-1:0.0: can't add hid device: -71 [ 33.670188][ T438] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 33.689370][ T438] usb 2-1: USB disconnect, device number 2 [ 33.770434][ T490] rust_binder: Write failure EFAULT in pid:11 [ 33.771461][ T9] usb 3-1: USB disconnect, device number 4 [ 33.775926][ T511] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.790553][ T511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.797922][ T511] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.805025][ T511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.856094][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.864425][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.884389][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.891493][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.914770][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.921875][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.967639][ T511] veth0_vlan: entered promiscuous mode [ 33.983936][ T511] veth1_macvtap: entered promiscuous mode [ 34.076404][ T536] binder: Unknown parameter 'rw.' [ 34.078576][ T538] netlink: 168 bytes leftover after parsing attributes in process `syz.4.64'. [ 34.219236][ T540] binder: Bad value for 'max' [ 34.283432][ T544] loop7: detected capacity change from 0 to 7 [ 34.291249][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 34.300508][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 34.312783][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 34.322041][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 34.329946][ T334] loop7: unable to read partition table [ 34.344007][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 34.354737][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 34.364080][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 34.372712][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 34.381942][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 34.390036][ T544] loop7: unable to read partition table [ 34.391360][ T549] binder: Unknown parameter 'context[7' [ 34.396761][ T544] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 34.412364][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 34.424489][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 34.434332][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 34.443582][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 34.452509][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 34.461760][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 34.470091][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 34.479336][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 34.487608][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 34.496863][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 34.607867][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 34.607886][ T36] audit: type=1400 audit(1762917709.870:214): avc: denied { write } for pid=563 comm="syz.2.71" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 34.646436][ T36] audit: type=1400 audit(1762917709.910:215): avc: denied { ioctl } for pid=563 comm="syz.2.71" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d0f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 34.679305][ T564] rust_binder: Write failure EFAULT in pid:26 [ 34.686835][ T36] audit: type=1400 audit(1762917709.910:216): avc: denied { create } for pid=563 comm="syz.2.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 34.720879][ T36] audit: type=1400 audit(1762917709.930:217): avc: denied { ioctl } for pid=565 comm="syz.1.72" path="socket:[5553]" dev="sockfs" ino=5553 ioctlcmd=0xf50f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.812934][ T574] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 34.815809][ T36] audit: type=1400 audit(1762917710.080:218): avc: denied { getopt } for pid=573 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 34.831637][ T574] SELinux: failed to load policy [ 34.885407][ T36] audit: type=1400 audit(1762917710.080:219): avc: denied { load_policy } for pid=573 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 35.012065][ T36] audit: type=1400 audit(1762917710.280:220): avc: denied { nlmsg_read } for pid=577 comm="syz.2.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 35.032350][ T578] netlink: 104 bytes leftover after parsing attributes in process `syz.2.76'. [ 35.105321][ T36] audit: type=1400 audit(1762917710.370:221): avc: denied { write } for pid=581 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 35.167782][ T36] audit: type=1400 audit(1762917710.380:222): avc: granted { setsecparam } for pid=581 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 35.171391][ T586] audit: audit_backlog=65 > audit_backlog_limit=64 [ 35.239482][ T588] /dev/rnullb0: Can't open blockdev [ 35.407779][ T595] rust_binder: 17: no such ref 3 [ 35.421570][ T595] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 35.440138][ T595] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 35.451514][ T595] rust_binder: Write failure EFAULT in pid:17 [ 35.631469][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 35.696990][ T601] netlink: 580 bytes leftover after parsing attributes in process `syz.1.85'. [ 35.717938][ T609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.87'. [ 35.821483][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 35.828044][ T9] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 35.836430][ T9] usb 4-1: config 0 has no interface number 0 [ 35.852248][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 35.867944][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.887128][ T9] usb 4-1: Product: syz [ 35.891354][ T9] usb 4-1: Manufacturer: syz [ 35.896069][ T9] usb 4-1: SerialNumber: syz [ 35.901887][ T9] usb 4-1: config 0 descriptor?? [ 35.909245][ T9] smsc95xx v2.0.0 [ 36.001568][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 36.109283][ T593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.117943][ T593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.126222][ T593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.135043][ T593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.143265][ T593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.151846][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 36.152281][ T593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.158857][ T31] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 36.166631][ T593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.174437][ T31] usb 2-1: config 0 has no interface number 0 [ 36.182814][ T593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.189580][ T31] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 36.196784][ T593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.204834][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.214753][ T593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.221101][ T31] usb 2-1: Product: syz [ 36.232658][ T31] usb 2-1: Manufacturer: syz [ 36.236530][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 36.237339][ T31] usb 2-1: SerialNumber: syz [ 36.254745][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 36.257913][ T31] usb 2-1: config 0 descriptor?? [ 36.272949][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 36.281783][ T31] smsc95xx v2.0.0 [ 36.287948][ T9] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 36.300120][ T9] usb 4-1: USB disconnect, device number 7 [ 36.865093][ T10] hid (null): unknown global tag 0x2d [ 36.870659][ T10] hid (null): bogus close delimiter [ 36.877420][ T10] hid (null): bogus close delimiter [ 36.883147][ T10] hid (null): bogus close delimiter [ 36.888417][ T10] hid (null): unknown global tag 0xe [ 36.893855][ T10] hid (null): unknown global tag 0xd [ 36.899215][ T10] hid (null): invalid report_size 48658 [ 36.904855][ T10] hid (null): unknown global tag 0xe [ 36.910182][ T10] hid (null): unknown global tag 0xd [ 36.915632][ T10] hid (null): unknown global tag 0xfc [ 36.921046][ T10] hid (null): invalid report_size 239047324 [ 36.927017][ T10] hid (null): invalid report_count 34942 [ 36.934671][ T10] hid (null): unknown global tag 0x4b [ 36.940170][ T10] hid (null): unknown global tag 0xd [ 36.945728][ T10] hid (null): invalid report_size 7502 [ 36.951279][ T10] hid (null): unknown global tag 0xe [ 36.956662][ T10] hid (null): invalid report_size 42354 [ 36.962499][ T10] hid (null): unknown global tag 0xc [ 36.967841][ T10] hid (null): invalid report_count 1952308892 [ 36.973990][ T10] hid (null): unknown global tag 0xd [ 36.979323][ T10] hid (null): unknown global tag 0xc [ 36.984759][ T10] hid (null): unknown global tag 0xc [ 36.990085][ T10] hid (null): report_id 65480 is invalid [ 36.995776][ T10] hid (null): unknown global tag 0x8f [ 37.001253][ T10] hid (null): report_id 0 is invalid [ 37.006587][ T10] hid (null): unknown global tag 0x15 [ 37.012105][ T10] hid (null): global environment stack underflow [ 37.018482][ T10] hid (null): invalid report_count 30406 [ 37.024225][ T10] hid (null): unknown global tag 0xe [ 37.029629][ T10] hid (null): invalid report_size 64722539 [ 37.035500][ T10] hid (null): unknown global tag 0xd [ 37.040813][ T10] hid (null): unknown global tag 0xe5 [ 37.047218][ T10] hid-generic 0008:0004:0008.0003: unknown main item tag 0x3 [ 37.054842][ T10] hid-generic 0008:0004:0008.0003: unknown main item tag 0xd [ 37.062314][ T10] hid-generic 0008:0004:0008.0003: unexpected long global item [ 37.070081][ T10] hid-generic 0008:0004:0008.0003: probe with driver hid-generic failed with error -22 [ 37.081509][ T438] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 37.101467][ T45] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 37.232486][ T438] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.243463][ T438] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.254235][ T438] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 37.263430][ T438] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 37.271541][ T438] usb 3-1: Manufacturer: syz [ 37.276243][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.288020][ T438] usb 3-1: config 0 descriptor?? [ 37.293114][ T31] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 37.303884][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.313746][ T31] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 37.322961][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 37.336868][ T45] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 37.346087][ T31] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 37.357272][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.365637][ T31] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 37.376587][ T31] usb 2-1: USB disconnect, device number 3 [ 37.412711][ T45] usb 5-1: config 0 descriptor?? [ 37.422244][ T652] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 37.431267][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 37.440138][ T652] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 37.651045][ T660] rust_binder: Failed to allocate buffer. len:4240, is_oneway:true [ 37.651080][ T660] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 37.659169][ T660] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:37 [ 37.823501][ T45] usbhid 5-1:0.0: can't add hid device: -71 [ 37.842595][ T45] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 37.857161][ T45] usb 5-1: USB disconnect, device number 2 [ 37.947956][ T678] rust_binder: Error while translating object. [ 37.948008][ T678] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 37.954285][ T678] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:91 [ 37.964341][ T679] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.996791][ T683] capability: warning: `syz.1.107' uses 32-bit capabilities (legacy support in use) [ 38.057490][ T688] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 38.057527][ T688] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:101 [ 38.086477][ T690] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 38.104378][ T690] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:103 [ 38.139361][ T692] process 'syz.1.111' launched './file1' with NULL argv: empty string added [ 38.300407][ T694] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:107 [ 38.564822][ T704] rust_binder: Error while translating object. [ 38.574137][ T704] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 38.580346][ T704] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:46 [ 38.731790][ T9] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 38.861498][ T64] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 38.892256][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 38.900834][ T9] usb 2-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.910677][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 38.918914][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 38.928063][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.936223][ T9] usb 2-1: Product: syz [ 38.940443][ T9] usb 2-1: Manufacturer: syz [ 38.945318][ T9] usb 2-1: SerialNumber: syz [ 39.022616][ T64] usb 5-1: config index 0 descriptor too short (expected 2075, got 27) [ 39.031145][ T64] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 39.041435][ T64] usb 5-1: config 0 has no interfaces? [ 39.048411][ T64] usb 5-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 39.057583][ T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.065631][ T64] usb 5-1: Product: syz [ 39.069827][ T64] usb 5-1: Manufacturer: syz [ 39.074467][ T64] usb 5-1: SerialNumber: syz [ 39.080011][ T64] usb 5-1: config 0 descriptor?? [ 39.208006][ T720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.216811][ T720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.292496][ T717] rust_binder: Got transaction with invalid offset. [ 39.292612][ T717] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 39.299471][ T717] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:51 [ 39.312879][ C0] af_packet: tpacket_rcv: packet too big, clamped from 4 to 4294967272. macoff=96 [ 39.337584][ T9] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 39.346096][ T9] usb 2-1: USB disconnect, device number 4 [ 39.408293][ T45] usb 5-1: USB disconnect, device number 3 [ 39.425040][ T13] Bluetooth: hci1: Frame reassembly failed (-84) [ 39.441767][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 39.442133][ T414] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 39.547952][ T739] rust_binder: 122: no such ref 3 [ 39.553123][ T739] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 39.560322][ T739] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 39.567530][ T739] rust_binder: Write failure EFAULT in pid:122 [ 39.610483][ T749] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 39.871652][ T64] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 39.888505][ T438] usbhid 3-1:0.0: can't add hid device: -71 [ 39.899067][ T754] fuse: Unknown parameter '00000000000000000004' [ 39.899987][ T438] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 39.906748][ T36] kauditd_printk_skb: 90 callbacks suppressed [ 39.906776][ T36] audit: type=1400 audit(1762917715.180:305): avc: denied { wake_alarm } for pid=753 comm="syz.2.129" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.917788][ T438] usb 3-1: USB disconnect, device number 5 [ 39.996260][ T759] rust_binder: Error while translating object. [ 39.996304][ T759] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 39.999046][ T761] /dev/rnullb0: Can't open blockdev [ 40.002864][ T759] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:56 [ 40.022191][ T761] /dev/rnullb0: Can't open blockdev [ 40.042630][ T64] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 40.057502][ T64] usb 4-1: config 0 interface 0 has no altsetting 0 [ 40.064493][ T64] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 40.073805][ T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.083702][ T64] usb 4-1: config 0 descriptor?? [ 40.097688][ T36] audit: type=1400 audit(1762917715.360:306): avc: denied { getopt } for pid=773 comm="syz.2.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.102819][ T774] SELinux: failed to load policy [ 40.136461][ T766] rust_binder: Write failure EINVAL in pid:61 [ 40.136924][ T775] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.411360][ T36] audit: type=1400 audit(1762917715.670:307): avc: denied { write } for pid=779 comm="syz.4.137" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 40.413057][ T783] rust_binder: Error while translating object. [ 40.440916][ T783] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 40.447159][ T783] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:68 [ 40.500635][ T64] uclogic 0003:28BD:0042.0004: interface is invalid, ignoring [ 40.556980][ T36] audit: type=1400 audit(1762917715.820:308): avc: denied { getopt } for pid=784 comm="syz.4.138" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.693232][ T752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.701839][ T752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.959489][ T793] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 40.959515][ T793] rust_binder: Read failure Err(EFAULT) in pid:54 [ 40.968143][ T793] rust_binder: Write failure EFAULT in pid:54 [ 41.031509][ T64] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 41.191489][ T64] usb 5-1: Using ep0 maxpacket: 32 [ 41.197860][ T64] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 41.209218][ T64] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.219138][ T64] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 41.228487][ T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.238686][ T64] usb 5-1: config 0 descriptor?? [ 41.441494][ T54] Bluetooth: hci1: command 0x1003 tx timeout [ 41.442606][ T653] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 41.658494][ T64] pyra 0003:1E7D:2C24.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2c24] on usb-dummy_hcd.4-1/input0 [ 41.863384][ T45] usb 5-1: USB disconnect, device number 4 [ 42.221511][ T438] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 42.351491][ T438] usb 2-1: device descriptor read/64, error -71 [ 42.392688][ T806] /dev/nbd4: Can't lookup blockdev [ 42.400400][ T36] audit: type=1400 audit(1762917717.660:309): avc: denied { setopt } for pid=805 comm="syz.4.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.446475][ T809] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 42.453775][ T809] rust_binder: Read failure Err(EAGAIN) in pid:83 [ 42.490310][ T811] rust_binder: Write failure EFAULT in pid:85 [ 42.533276][ T36] audit: type=1400 audit(1762917717.800:310): avc: denied { write } for pid=813 comm="syz.4.146" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 42.564988][ T814] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 42.570155][ T814] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:88 [ 42.591081][ T36] audit: type=1400 audit(1762917717.830:311): avc: denied { ioctl } for pid=813 comm="syz.4.146" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 42.625921][ T36] audit: type=1400 audit(1762917717.830:312): avc: denied { write } for pid=813 comm="syz.4.146" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 42.631511][ T438] usb 2-1: device descriptor read/64, error -71 [ 42.668822][ T31] usb 4-1: USB disconnect, device number 8 [ 42.711189][ T816] netlink: 'syz.4.147': attribute type 4 has an invalid length. [ 42.748953][ T821] rust_binder: Error while translating object. [ 42.749002][ T821] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 42.755652][ T821] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:95 [ 42.921523][ T438] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 43.014595][ T823] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 43.014633][ T823] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:138 [ 43.041470][ T653] Bluetooth: hci0: command 0x1003 tx timeout [ 43.056859][ T414] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 43.072755][ T438] usb 2-1: device descriptor read/64, error -71 [ 43.143444][ T36] audit: type=1400 audit(1762917718.410:313): avc: denied { create } for pid=826 comm="syz.3.150" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 43.145322][ T830] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 43.164106][ T36] audit: type=1400 audit(1762917718.410:314): avc: denied { write } for pid=826 comm="syz.3.150" name="file2" dev="tmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 43.171574][ T830] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:142 [ 43.321511][ T438] usb 2-1: device descriptor read/64, error -71 [ 43.331507][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 43.431570][ T438] usb usb2-port1: attempt power cycle [ 43.483693][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 43.493855][ T9] usb 3-1: config 0 has no interfaces? [ 43.499336][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 43.508453][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.516554][ T64] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 43.525213][ T9] usb 3-1: config 0 descriptor?? [ 43.682767][ T64] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.692832][ T64] usb 4-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 43.702023][ T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.711081][ T64] usb 4-1: config 0 descriptor?? [ 43.781666][ T438] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 43.812482][ T438] usb 2-1: device descriptor read/8, error -71 [ 43.896257][ T45] usb 3-1: USB disconnect, device number 6 [ 43.942635][ T438] usb 2-1: device descriptor read/8, error -71 [ 44.173723][ T64] smartjoyplus 0003:0925:8866.0006: hidraw0: USB HID v0.00 Device [HID 0925:8866] on usb-dummy_hcd.3-1/input0 [ 44.181908][ T438] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 44.185587][ T64] smartjoyplus 0003:0925:8866.0006: Force feedback for SmartJoy PLUS PS2/USB adapter [ 44.222610][ T438] usb 2-1: device descriptor read/8, error -71 [ 44.352807][ T438] usb 2-1: device descriptor read/8, error -71 [ 44.375257][ T866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.383936][ T866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.461566][ T438] usb usb2-port1: unable to enumerate USB device [ 44.746531][ T871] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 44.746568][ T871] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:121 [ 44.816081][ T875] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.826509][ T876] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:70 [ 44.869458][ T883] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 44.915188][ T887] SELinux: policydb table sizes (104,0) do not match mine (6,7) [ 44.923049][ T887] SELinux: failed to load policy [ 44.957628][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 44.957647][ T36] audit: type=1400 audit(1762917720.220:324): avc: denied { write } for pid=890 comm="syz.2.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 45.000128][ T36] audit: type=1400 audit(1762917720.260:325): avc: denied { ioctl } for pid=892 comm="syz.2.174" path="socket:[7699]" dev="sockfs" ino=7699 ioctlcmd=0xf505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 45.028341][ T64] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 45.091326][ T900] kvm: user requested TSC rate below hardware speed [ 45.099839][ T36] audit: type=1400 audit(1762917720.370:326): avc: denied { execute } for pid=899 comm="syz.2.176" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 45.205503][ T904] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=904 comm=syz.2.177 [ 45.218589][ T904] rust_binder: Error while translating object. [ 45.218649][ T904] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 45.221475][ T64] usb 5-1: Using ep0 maxpacket: 32 [ 45.225122][ T904] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:95 [ 45.242509][ T64] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 45.260183][ T64] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 45.270309][ T64] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 45.279691][ T64] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 45.293149][ T64] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 45.315838][ T64] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 45.330550][ T64] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 45.342481][ T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.356421][ T64] usb 5-1: config 0 descriptor?? [ 45.375129][ T911] /dev/rnullb0: Can't open blockdev [ 45.569306][ T64] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 45.592751][ T64] usb 5-1: USB disconnect, device number 5 [ 45.601794][ T64] usblp0: removed [ 45.641493][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 45.793379][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 45.802136][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.821511][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 45.847906][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 45.857008][ T36] audit: type=1400 audit(1762917721.120:327): avc: denied { create } for pid=914 comm="syz.1.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 45.857758][ T36] audit: type=1400 audit(1762917721.120:328): avc: denied { bind } for pid=914 comm="syz.1.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 45.877092][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.908355][ T9] usb 3-1: Product: syz [ 45.918754][ T9] usb 3-1: Manufacturer: syz [ 45.923563][ T9] usb 3-1: SerialNumber: syz [ 45.970812][ T924] rust_binder: 146: no such ref 0 [ 45.975957][ T924] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 46.013080][ T36] audit: type=1400 audit(1762917721.280:329): avc: denied { mount } for pid=926 comm="syz.1.185" name="/" dev="ramfs" ino=7129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 46.035748][ T64] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 46.144818][ T913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.161048][ T913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.170286][ T913] rust_binder: Write failure EINVAL in pid:104 [ 46.171586][ T9] usb 3-1: 0:2 : does not exist [ 46.186480][ T9] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 46.198990][ T9] usb 3-1: USB disconnect, device number 7 [ 46.204979][ T64] usb 5-1: Using ep0 maxpacket: 32 [ 46.214071][ T64] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 46.227322][ T64] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 46.236203][ T64] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 46.245316][ T64] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 46.255158][ T64] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 46.264969][ T64] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 46.278019][ T64] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 46.280826][ T438] usb 4-1: USB disconnect, device number 9 [ 46.287940][ T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.303477][ T64] usb 5-1: config 0 descriptor?? [ 46.441000][ T931] binder: Unknown parameter 'defcontext0x0000000000000007' [ 46.463642][ T940] /dev/rnullb0: Can't open blockdev [ 46.513310][ T64] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 46.631493][ T438] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 46.711517][ T9] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 46.743224][ T331] Bluetooth: hci0: Frame reassembly failed (-84) [ 46.781512][ T438] usb 4-1: Using ep0 maxpacket: 32 [ 46.787937][ T438] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.799103][ T438] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.809605][ T438] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 46.818717][ T438] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.827463][ T438] usb 4-1: config 0 descriptor?? [ 46.835235][ T438] hub 4-1:0.0: USB hub found [ 46.862618][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.863530][ T36] audit: type=1400 audit(1762917722.130:330): avc: denied { read write } for pid=872 comm="syz.4.165" name="lp0" dev="devtmpfs" ino=495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 46.873036][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 46.898482][ T36] audit: type=1400 audit(1762917722.170:331): avc: denied { open } for pid=872 comm="syz.4.165" path="/dev/usb/lp0" dev="devtmpfs" ino=495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 46.911183][ T64] usb 5-1: USB disconnect, device number 6 [ 46.937268][ T9] usb 2-1: language id specifier not provided by device, defaulting to English [ 46.948199][ T9] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40 [ 46.958855][ T64] usblp0: removed [ 46.963618][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.974053][ T9] usb 2-1: Product: syz [ 46.978298][ T9] usb 2-1: Manufacturer: ޿ṕ즒꡴婵皰磈㠁缥鉓堫췟芄嶦ꓡ᧼啠㌂座∺티먌ꭖ쓻╝㈺﵁債隥굄糶䵎孜 [ 46.991801][ T9] usb 2-1: SerialNumber: syz [ 47.033235][ T438] hub 4-1:0.0: 1 port detected [ 47.200815][ T9] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 47.210234][ T9] usb 2-1: USB disconnect, device number 9 [ 47.261498][ T64] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 47.412787][ T64] usb 5-1: config 1 interface 0 has no altsetting 0 [ 47.421070][ T64] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 47.430236][ T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.438309][ T64] usb 5-1: Product: syz [ 47.439736][ T438] hub 4-1:0.0: activate --> -90 [ 47.442541][ T64] usb 5-1: Manufacturer: syz [ 47.442561][ T64] usb 5-1: SerialNumber: syz [ 47.457556][ T438] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 47.464961][ T45] usb 4-1: USB disconnect, device number 10 [ 47.667104][ T64] usb 5-1: USB disconnect, device number 7 [ 47.718521][ T36] audit: type=1400 audit(1762917722.980:332): avc: denied { module_load } for pid=957 comm="syz.1.193" path="/sys/power/pm_trace_dev_match" dev="sysfs" ino=1461 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 47.801469][ T45] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 47.951533][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 47.958345][ T45] usb 4-1: config 3 has an invalid interface number: 6 but max is 3 [ 47.966554][ T45] usb 4-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 47.975409][ T45] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 47.985615][ T45] usb 4-1: config 3 has 1 interface, different from the descriptor's value: 4 [ 47.994572][ T45] usb 4-1: config 3 has no interface number 0 [ 48.000667][ T45] usb 4-1: config 3 interface 6 altsetting 4 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 48.012067][ T45] usb 4-1: config 3 interface 6 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 48.022337][ T45] usb 4-1: config 3 interface 6 altsetting 4 has 5 endpoint descriptors, different from the interface descriptor's value: 12 [ 48.041623][ T45] usb 4-1: config 3 interface 6 has no altsetting 0 [ 48.051829][ T45] usb 4-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=2d.e9 [ 48.060991][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.069074][ T45] usb 4-1: Product: ඾㢀㤇虀샫輾ᓵ뒿蠃迉趇ޥ셧짟亲鵒:龑奜皖Ｓ鷌㠫ȇ㥕时ҁ譈Ꝥဲ㝌啢꼝繛삙籰铦趍⥩噟븮觜ꈾ׭彛诿Ḽⅅ䮬ꫛ졟其岶撝䰍ǒ趧숕㻢諒䮮⡵ꭱꟖ前兂 [ 48.092325][ T45] usb 4-1: Manufacturer: 㐁 [ 48.097108][ T45] usb 4-1: SerialNumber: Е [ 48.162752][ T970] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.163253][ T36] audit: type=1400 audit(1762917723.430:333): avc: denied { connect } for pid=969 comm="syz.1.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 48.255636][ T973] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 48.320701][ T45] usb 4-1: USB disconnect, device number 11 [ 48.451477][ T9] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 48.612688][ T9] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 48.623744][ T9] usb 5-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 48.636856][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 48.801483][ T414] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 48.801523][ T653] Bluetooth: hci0: command 0x1003 tx timeout [ 48.933602][ T988] raw_sendmsg: syz.3.203 forgot to set AF_INET. Fix it! [ 48.982633][ T992] loop2: detected capacity change from 0 to 8388607 [ 49.003316][ T995] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.003355][ T995] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:189 [ 49.062282][ T1003] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 49.100428][ T1006] rust_binder: Error while translating object. [ 49.100487][ T1006] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.106757][ T1006] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:181 [ 49.371500][ T64] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 49.521517][ T64] usb 4-1: device descriptor read/64, error -71 [ 49.561512][ T420] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 49.712616][ T420] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.723621][ T420] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.733434][ T420] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 49.742544][ T420] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.751300][ T420] usb 2-1: config 0 descriptor?? [ 49.761556][ T64] usb 4-1: device descriptor read/64, error -71 [ 50.001499][ T64] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 50.131517][ T64] usb 4-1: device descriptor read/64, error -71 [ 50.159215][ T420] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 50.166774][ T420] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 50.173680][ T420] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 50.180825][ T420] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 50.187994][ T420] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 50.195263][ T420] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 50.202335][ T420] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 50.211848][ T420] arvo 0003:1E7D:30D4.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 50.220961][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 50.220985][ T36] audit: type=1400 audit(1762917725.480:341): avc: denied { create } for pid=1036 comm="syz.2.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 50.271484][ T36] audit: type=1400 audit(1762917725.530:342): avc: denied { map } for pid=1039 comm="syz.2.221" path="socket:[8154]" dev="sockfs" ino=8154 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 50.360319][ T36] audit: type=1400 audit(50.323:343): avc: denied { setopt } for pid=1025 comm="syz.1.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 50.365974][ T420] usb 2-1: USB disconnect, device number 10 [ 50.385684][ T64] usb 4-1: device descriptor read/64, error -71 [ 50.501773][ T64] usb usb4-port1: attempt power cycle [ 50.851563][ T64] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 50.872659][ T64] usb 4-1: device descriptor read/8, error -71 [ 50.990259][ T1053] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 50.998629][ T1053] rust_binder: Write failure EINVAL in pid:214 [ 51.002803][ T64] usb 4-1: device descriptor read/8, error -71 [ 51.083635][ T36] audit: type=1400 audit(51.053:344): avc: denied { ioctl } for pid=1054 comm="syz.1.227" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 51.181496][ T31] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 51.211809][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=00e6, bcdDevice= 0.40 [ 51.220975][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.234112][ T9] usb 5-1: can't set config #1, error -71 [ 51.248576][ T9] usb 5-1: USB disconnect, device number 8 [ 51.255207][ T1060] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=1060 comm=syz.4.229 [ 51.270346][ T1060] /dev/rnullb0: Can't open blockdev [ 51.289508][ T36] audit: type=1326 audit(51.253:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1061 comm="syz.4.230" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2a0558f6c9 code=0x0 [ 51.291551][ T64] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 51.321549][ T31] usb 3-1: device descriptor read/64, error -71 [ 51.332967][ T64] usb 4-1: device descriptor read/8, error -71 [ 51.340497][ T1063] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 51.347933][ T1063] rust_binder: Write failure EINVAL in pid:136 [ 51.462815][ T64] usb 4-1: device descriptor read/8, error -71 [ 51.561514][ T31] usb 3-1: device descriptor read/64, error -71 [ 51.581654][ T64] usb usb4-port1: unable to enumerate USB device [ 51.801484][ T31] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 51.931473][ T31] usb 3-1: device descriptor read/64, error -71 [ 51.954371][ T36] audit: type=1400 audit(51.923:346): avc: denied { setopt } for pid=1068 comm="syz.1.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 52.171665][ T31] usb 3-1: device descriptor read/64, error -71 [ 52.179018][ T36] audit: type=1400 audit(52.143:347): avc: denied { setattr } for pid=1077 comm="syz.4.236" name="NETLINK" dev="sockfs" ino=8792 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.202278][ T36] audit: type=1400 audit(52.143:348): avc: denied { create } for pid=1086 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 52.220981][ T36] audit: type=1400 audit(52.143:349): avc: denied { create } for pid=1086 comm="syz.3.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 52.222857][ T648] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 52.311601][ T31] usb usb3-port1: attempt power cycle [ 52.377767][ T1092] syz.4.240 (1092): /proc/1092/oom_adj is deprecated, please use /proc/1092/oom_score_adj instead. [ 52.389443][ T36] audit: type=1400 audit(52.363:350): avc: denied { append } for pid=1091 comm="syz.4.240" name="001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 52.423052][ T648] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 52.434485][ T648] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 52.446391][ T648] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 52.460628][ T648] usb 2-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 52.469836][ T1092] rust_binder: inc_ref_done called when no active inc_refs [ 52.470060][ T648] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.496801][ T648] usb 2-1: config 0 descriptor?? [ 52.502230][ T1071] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 52.551486][ T45] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 52.661634][ T31] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 52.684787][ T1097] rust_binder: Write failure EFAULT in pid:155 [ 52.703052][ T31] usb 3-1: device descriptor read/8, error -71 [ 52.721835][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 52.728447][ T45] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 52.736672][ T45] usb 4-1: config 0 has no interface number 0 [ 52.744554][ T45] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 52.753969][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.771501][ T45] usb 4-1: Product: syz [ 52.775900][ T45] usb 4-1: Manufacturer: syz [ 52.780563][ T45] usb 4-1: SerialNumber: syz [ 52.792456][ T45] usb 4-1: config 0 descriptor?? [ 52.799158][ T45] smsc95xx v2.0.0 [ 52.843422][ T31] usb 3-1: device descriptor read/8, error -71 [ 52.896060][ T1100] rust_binder: 158: no such ref 3 [ 52.901248][ T1100] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 52.908557][ T1100] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 52.915737][ T1100] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:158 [ 52.919554][ T1071] fuse: blksize only supported for fuseblk [ 52.943094][ T648] usbhid 2-1:0.0: can't add hid device: -71 [ 52.949155][ T648] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 52.958730][ T648] usb 2-1: USB disconnect, device number 11 [ 52.991338][ T1104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.244'. [ 53.081566][ T31] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 53.102774][ T31] usb 3-1: device descriptor read/8, error -71 [ 53.232529][ T31] usb 3-1: device descriptor read/8, error -71 [ 53.341624][ T31] usb usb3-port1: unable to enumerate USB device [ 53.403124][ T45] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 53.416878][ T45] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 53.426230][ T45] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 53.437127][ T45] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 53.447418][ T45] usb 4-1: USB disconnect, device number 16 [ 53.812000][ T1118] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.812163][ T1118] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 53.818901][ T1118] rust_binder: 170: no such ref 3 [ 54.045869][ T1129] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.058533][ T1128] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:198 [ 54.150435][ T1136] syz.3.255 (1136): attempted to duplicate a private mapping with mremap. This is not supported. [ 54.397428][ T1146] virtiofs: Unknown parameter 'always' [ 54.469790][ T1148] rust_binder: Error while translating object. [ 54.469854][ T1148] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 54.476301][ T1148] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:235 [ 54.506258][ T1150] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 54.524038][ T1150] overlayfs: missing 'lowerdir' [ 54.571498][ T45] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 54.666868][ T1152] rust_binder: 172: no such ref 3 [ 54.672219][ T1152] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 54.681521][ T1152] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:172 [ 54.695939][ T1154] rust_binder: Write failure EFAULT in pid:239 [ 54.723465][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 54.741563][ T45] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 54.751024][ T45] usb 4-1: config 0 has no interface number 0 [ 54.760124][ T45] usb 4-1: config 0 interface 184 has no altsetting 0 [ 54.764488][ T1160] rust_binder: Error while translating object. [ 54.766981][ T1160] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 54.776546][ T45] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 54.780217][ T1160] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:174 [ 54.786612][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.812536][ T45] usb 4-1: Product: syz [ 54.817235][ T45] usb 4-1: Manufacturer: syz [ 54.822439][ T45] usb 4-1: SerialNumber: syz [ 54.832192][ T1167] 9pnet_fd: Insufficient options for proto=fd [ 54.838992][ T45] usb 4-1: config 0 descriptor?? [ 54.845888][ T45] smsc75xx v1.0.0 [ 54.856443][ T1169] mmap: syz.2.268 (1169) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 54.902411][ T1176] rust_binder: Write failure EINVAL in pid:183 [ 54.903401][ T1176] rust_binder: got new transaction with bad transaction stack [ 54.909826][ T1176] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:183 [ 55.253692][ T1193] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.293623][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 55.293645][ T36] audit: type=1400 audit(55.263:370): avc: denied { module_load } for pid=1195 comm="syz.4.278" path="/64/file0" dev="tmpfs" ino=363 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 55.293691][ T1196] Invalid ELF header len 1 [ 55.451868][ T45] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 55.474452][ T45] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 55.477201][ T1204] rust_binder: Error while translating object. [ 55.491957][ T1204] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 55.493864][ T45] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 55.498294][ T1204] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:202 [ 55.548754][ T45] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 55.581451][ T45] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 55.601464][ T45] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 55.611064][ T45] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 55.623309][ T45] usb 4-1: USB disconnect, device number 17 [ 55.672743][ T1220] rust_binder: Write failure EFAULT in pid:248 [ 55.737487][ T1222] binder: Bad value for 'max' [ 55.764276][ T1225] input: syz0 as /devices/virtual/input/input7 [ 55.771458][ T36] audit: type=1400 audit(55.733:371): avc: denied { read } for pid=96 comm="acpid" name="event3" dev="devtmpfs" ino=525 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.801589][ T420] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 55.814102][ T36] audit: type=1400 audit(55.763:372): avc: denied { open } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=525 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.837202][ T36] audit: type=1400 audit(55.763:373): avc: denied { ioctl } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=525 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.868287][ T1227] rust_binder: Error while translating object. [ 55.868332][ T1227] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 55.875162][ T1227] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:256 [ 55.931509][ T45] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 55.973328][ T420] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.993644][ T420] usb 5-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 56.013992][ T420] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.025067][ T1229] netlink: 'syz.1.292': attribute type 27 has an invalid length. [ 56.033748][ T420] usb 5-1: config 0 descriptor?? [ 56.092582][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.103891][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.114015][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 56.127143][ T45] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 56.136520][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.146169][ T45] usb 4-1: config 0 descriptor?? [ 56.274126][ T420] zeroplus 0003:0C12:0005.0008: unknown main item tag 0x5 [ 56.289700][ T420] zeroplus 0003:0C12:0005.0008: hidraw0: USB HID v0.02 Device [HID 0c12:0005] on usb-dummy_hcd.4-1/input0 [ 56.303657][ T420] zeroplus 0003:0C12:0005.0008: no inputs found [ 56.327832][ T420] usb 5-1: USB disconnect, device number 9 [ 56.368026][ T1248] /dev/rnullb0: Can't open blockdev [ 56.388511][ T1250] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 56.405336][ T1252] rust_binder: inc_ref_done called when no active inc_refs [ 56.426255][ T1254] rust_binder: Write failure EFAULT in pid:165 [ 56.465757][ T1258] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:169 [ 56.543018][ T1241] /dev/rnullb0: Can't open blockdev [ 56.569662][ T45] nintendo 0003:057E:2019.0009: hidraw0: USB HID v88.07 Device [HID 057e:2019] on usb-dummy_hcd.3-1/input0 [ 56.657819][ T45] nintendo 0003:057E:2019.0009: Failed to get joycon info; ret=-38 [ 56.666278][ T45] nintendo 0003:057E:2019.0009: Failed to retrieve controller info; ret=-38 [ 56.675624][ T45] nintendo 0003:057E:2019.0009: Failed to initialize controller; ret=-38 [ 56.692003][ T45] nintendo 0003:057E:2019.0009: probe - fail = -38 [ 56.699245][ T45] nintendo 0003:057E:2019.0009: probe with driver nintendo failed with error -38 [ 56.766233][ T1215] tipc: Started in network mode [ 56.771354][ T1215] tipc: Node identity 4, cluster identity 4711 [ 56.777643][ T1215] tipc: Node number set to 4 [ 56.783113][ T420] usb 4-1: USB disconnect, device number 18 [ 56.849282][ T1281] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 57.051572][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 57.101482][ T45] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 57.123365][ T1289] rust_binder: Write failure EFAULT in pid:217 [ 57.211495][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 57.223924][ T9] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 57.232356][ T9] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 57.240986][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 57.250010][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 57.259728][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 57.269472][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 57.272450][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 57.283150][ T9] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 57.299854][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.301022][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.315612][ T9] usb 2-1: config 0 descriptor?? [ 57.333570][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 57.344196][ T45] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 57.353814][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.363314][ T45] usb 3-1: Product: syz [ 57.370541][ T45] usb 3-1: Manufacturer: syz [ 57.375718][ T45] usb 3-1: SerialNumber: syz [ 57.424299][ T1306] fuse: Bad value for 'fd' [ 57.527614][ T9] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 57.547683][ T9] usb 2-1: USB disconnect, device number 12 [ 57.555612][ T9] usblp0: removed [ 57.584656][ T1283] fuse: Bad value for 'fd' [ 57.588697][ T1317] netlink: 92 bytes leftover after parsing attributes in process `syz.3.322'. [ 57.590932][ T45] usb 3-1: 0:2 : does not exist [ 57.611668][ T45] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 57.626907][ T45] usb 3-1: USB disconnect, device number 12 [ 57.635822][ T729] udevd[729]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 57.652008][ T1317] __vm_enough_memory: pid: 1317, comm: syz.3.322, bytes: 18014402804453376 not enough memory for the allocation [ 57.684899][ T1321] overlay: ./file0 is not a directory [ 57.821906][ T36] audit: type=1400 audit(57.793:374): avc: denied { bind } for pid=1323 comm="syz.3.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.862902][ T1329] UHID_CREATE from different security context by process 246 (syz.3.325), this is not allowed. [ 57.874165][ T1329] netlink: 3 bytes leftover after parsing attributes in process `syz.3.325'. [ 57.897905][ T36] audit: type=1400 audit(57.863:375): avc: denied { getopt } for pid=1330 comm="syz.3.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.903960][ T1331] bpf: Bad value for 'gid' [ 57.976262][ T36] audit: type=1400 audit(57.943:376): avc: denied { write } for pid=1332 comm="syz.3.327" name="usbmon0" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 58.024351][ T1343] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.033246][ T1343] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 58.041479][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 58.061005][ T1345] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.062107][ T1345] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:262 [ 58.097051][ T1352] __vm_enough_memory: pid: 1352, comm: syz.3.332, bytes: 18014402804453376 not enough memory for the allocation [ 58.141374][ T1356] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1356 comm=syz.3.334 [ 58.154983][ T1356] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=1356 comm=syz.3.334 [ 58.167867][ T1356] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1356 comm=syz.3.334 [ 58.181620][ T1356] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1356 comm=syz.3.334 [ 58.194781][ T1356] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=1356 comm=syz.3.334 [ 58.207600][ T1356] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1356 comm=syz.3.334 [ 58.220672][ T1356] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=49 sclass=netlink_tcpdiag_socket pid=1356 comm=syz.3.334 [ 58.221482][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 58.239615][ T9] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 58.253539][ T9] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 58.262441][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 58.271501][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 58.281312][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 58.293038][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 58.306176][ T9] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 58.315497][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.324185][ T9] usb 2-1: config 0 descriptor?? [ 58.381472][ T420] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 58.491496][ T45] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 58.530628][ T9] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 58.544273][ T420] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.554466][ T420] usb 3-1: config 1 interface 0 has no altsetting 0 [ 58.561831][ T420] usb 3-1: language id specifier not provided by device, defaulting to English [ 58.572524][ T420] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40 [ 58.581698][ T420] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.589894][ T420] usb 3-1: Product: syz [ 58.594124][ T420] usb 3-1: Manufacturer: ޿ṕ즒꡴婵皰磈㠁缥鉓堫췟芄嶦ꓡ᧼啠㌂座∺티먌ꭖ쓻╝㈺﵁債隥굄糶䵎孜 [ 58.607554][ T420] usb 3-1: SerialNumber: syz [ 58.631519][ T45] usb 4-1: device descriptor read/64, error -71 [ 58.814590][ T1354] rust_binder: Write failure EFAULT in pid:192 [ 58.871501][ T45] usb 4-1: device descriptor read/64, error -71 [ 58.885181][ T31] usb 2-1: USB disconnect, device number 13 [ 58.893001][ T31] usblp0: removed [ 59.121742][ T45] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 59.251517][ T45] usb 4-1: device descriptor read/64, error -71 [ 59.330070][ T420] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 59.351214][ T420] usb 3-1: USB disconnect, device number 13 [ 59.491479][ T45] usb 4-1: device descriptor read/64, error -71 [ 59.501837][ T1371] rust_binder: Write failure EFAULT in pid:202 [ 59.601596][ T45] usb usb4-port1: attempt power cycle [ 59.603335][ T1373] incfs: Options parsing error. -22 [ 59.618520][ T1373] incfs: mount failed -22 [ 59.830916][ T1373] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 59.830956][ T1373] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:265 [ 59.951520][ T45] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 59.982702][ T45] usb 4-1: device descriptor read/8, error -71 [ 60.091542][ T31] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 60.112983][ T45] usb 4-1: device descriptor read/8, error -71 [ 60.241467][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 60.247824][ T31] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.258786][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 60.265462][ T31] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 60.274545][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.283321][ T31] usb 2-1: config 0 descriptor?? [ 60.321551][ T653] Bluetooth: hci0: command 0x1003 tx timeout [ 60.321585][ T414] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 60.351607][ T45] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 60.372478][ T45] usb 4-1: device descriptor read/8, error -71 [ 60.492945][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 60.499045][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 60.508280][ T31] usb 2-1: USB disconnect, device number 14 [ 60.515733][ T45] usb 4-1: device descriptor read/8, error -71 [ 60.631681][ T45] usb usb4-port1: unable to enumerate USB device [ 60.885795][ T36] audit: type=1400 audit(60.853:377): avc: denied { mounton } for pid=1385 comm="syz.4.346" path="/proc/235/task" dev="proc" ino=10659 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 60.908146][ T36] audit: type=1326 audit(60.863:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1385 comm="syz.4.346" exe="/root/syz-executor" sig=9 arch=c000003e syscall=317 compat=0 ip=0x7f2a0558f6c9 code=0x0 [ 60.959569][ T1394] SELinux: security_context_str_to_sid () failed with errno=-22 [ 60.993472][ T1396] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 61.031448][ T36] audit: type=1400 audit(60.993:379): avc: denied { mounton } for pid=1405 comm="syz.1.353" path="/91/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 61.188704][ T36] audit: type=1400 audit(61.153:380): avc: denied { mounton } for pid=1409 comm="syz.4.354" path="/83/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 61.189074][ T1410] overlay: ./file0 is not a directory [ 61.287967][ T1415] binder: Bad value for 'stats' [ 61.289964][ T1416] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 61.293035][ T420] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 61.309097][ T1416] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:249 [ 61.462537][ T420] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.482695][ T1426] /dev/rnullb0: Can't open blockdev [ 61.488092][ T1427] /dev/rnullb0: Can't open blockdev [ 61.491514][ T420] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 61.502542][ T420] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 61.511656][ T420] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.522362][ T420] usb 3-1: config 0 descriptor?? [ 61.730207][ T1403] netlink: 'syz.2.352': attribute type 1 has an invalid length. [ 61.737955][ T1403] netlink: 168 bytes leftover after parsing attributes in process `syz.2.352'. [ 61.747769][ T1403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.756316][ T1403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.765194][ T1403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.773737][ T1403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.783698][ T1403] rust_binder: Error while translating object. [ 61.783733][ T1403] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 61.789923][ T1403] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:214 [ 61.800098][ T45] usb 3-1: USB disconnect, device number 14 [ 61.938954][ T36] audit: type=1400 audit(61.903:381): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 62.235865][ T1448] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 62.248200][ T1450] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.281702][ T1450] rust_binder: Failed to allocate buffer. len:1240, is_oneway:true [ 62.288351][ T36] audit: type=1400 audit(62.243:382): avc: denied { append } for pid=1449 comm="syz.3.366" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.694711][ T420] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 62.704846][ T64] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 62.804620][ T1473] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 62.804657][ T1473] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:228 [ 62.851540][ T64] usb 2-1: device descriptor read/64, error -71 [ 62.881485][ T420] usb 4-1: Invalid ep0 maxpacket: 64 [ 62.889600][ T1476] rust_binder: 231: no such ref 3 [ 62.894922][ T1476] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 62.902146][ T1476] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 62.909228][ T1476] rust_binder: Write failure EFAULT in pid:231 [ 62.926104][ T1478] overlay: ./file1 is not a directory [ 62.938372][ T1478] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 62.945750][ T1478] rust_binder: Write failure EINVAL in pid:233 [ 63.011492][ T420] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 63.069341][ T1480] binder: Unknown parameter 'context[7' [ 63.089463][ T1483] rust_binder: Error while translating object. [ 63.089498][ T1483] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 63.091842][ T1484] rust_binder: Error while translating object. [ 63.095778][ T1483] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:238 [ 63.105382][ T64] usb 2-1: device descriptor read/64, error -71 [ 63.126880][ T1484] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 63.126908][ T1484] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:238 [ 63.171577][ T420] usb 4-1: Invalid ep0 maxpacket: 64 [ 63.186265][ T420] usb usb4-port1: attempt power cycle [ 63.228491][ T1491] netlink: 'syz.2.379': attribute type 27 has an invalid length. [ 63.236762][ T1491] rust_binder: Error while translating object. [ 63.236808][ T1491] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 63.243038][ T1491] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:246 [ 63.371537][ T64] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 63.511484][ T64] usb 2-1: device descriptor read/64, error -71 [ 63.533901][ T1503] __vm_enough_memory: pid: 1503, comm: syz.2.383, bytes: 18014402804453376 not enough memory for the allocation [ 63.541533][ T420] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 63.574036][ T420] usb 4-1: Invalid ep0 maxpacket: 64 [ 63.626749][ T1507] netlink: 'syz.2.385': attribute type 11 has an invalid length. [ 63.634624][ T1507] netlink: 20 bytes leftover after parsing attributes in process `syz.2.385'. [ 63.711556][ T420] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 63.732144][ T420] usb 4-1: Invalid ep0 maxpacket: 64 [ 63.737661][ T420] usb usb4-port1: unable to enumerate USB device [ 63.751562][ T64] usb 2-1: device descriptor read/64, error -71 [ 63.817105][ T1511] rust_binder: 266: no such ref 3 [ 63.822295][ T1511] rust_binder: 266: no such ref 1 [ 63.827405][ T1511] rust_binder: Write failure EFAULT in pid:266 [ 63.861595][ T64] usb usb2-port1: attempt power cycle [ 63.922585][ T1518] rust_binder: Write failure EINVAL in pid:273 [ 63.956584][ T36] audit: type=1400 audit(63.923:383): avc: denied { read } for pid=1521 comm="syz.2.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 64.026959][ T1524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.391'. [ 64.036477][ T1524] /dev/rnullb0: Can't open blockdev [ 64.211537][ T64] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 64.232506][ T64] usb 2-1: device descriptor read/8, error -71 [ 64.301496][ T649] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 64.362656][ T64] usb 2-1: device descriptor read/8, error -71 [ 64.451509][ T649] usb 3-1: Using ep0 maxpacket: 16 [ 64.458107][ T649] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.469085][ T649] usb 3-1: config 0 interface 0 has no altsetting 0 [ 64.475823][ T649] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 64.485279][ T649] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.494292][ T649] usb 3-1: config 0 descriptor?? [ 64.503586][ T36] audit: type=1400 audit(64.473:384): avc: denied { mount } for pid=1529 comm="syz.4.394" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 64.530866][ T36] audit: type=1400 audit(64.503:385): avc: denied { unmount } for pid=511 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 64.550358][ T1532] fuse: Bad value for 'group_id' [ 64.555472][ T1532] fuse: Bad value for 'group_id' [ 64.594480][ T1536] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:260 [ 64.611517][ T64] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 64.621933][ T1538] netlink: 228 bytes leftover after parsing attributes in process `syz.4.398'. [ 64.642795][ T64] usb 2-1: device descriptor read/8, error -71 [ 64.655471][ T1538] rust_binder: Write failure EFAULT in pid:262 [ 64.700543][ T1528] netlink: 5 bytes leftover after parsing attributes in process `syz.2.393'. [ 64.716179][ T1528] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 64.733343][ T1528] netlink: 'syz.2.393': attribute type 5 has an invalid length. [ 64.741043][ T1528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.393'. [ 64.762925][ T649] usbhid 3-1:0.0: can't add hid device: -71 [ 64.772092][ T649] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 64.780203][ T64] usb 2-1: device descriptor read/8, error -71 [ 64.781003][ T649] usb 3-1: USB disconnect, device number 15 [ 64.911762][ T64] usb usb2-port1: unable to enumerate USB device [ 64.980217][ T1550] netlink: 44 bytes leftover after parsing attributes in process `syz.4.402'. [ 65.003444][ T1553] rust_binder: 277: no such ref 3 [ 65.008517][ T1553] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 65.015869][ T1553] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 65.023062][ T1553] rust_binder: Write failure EFAULT in pid:277 [ 65.023461][ T1553] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:277 [ 65.044920][ T1555] netlink: 37 bytes leftover after parsing attributes in process `syz.4.404'. [ 65.063549][ T1555] /dev/rnullb0: Can't open blockdev [ 65.308933][ T1562] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.395105][ T1574] rust_binder: 295: no such ref 0 [ 65.406680][ T1574] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 65.413865][ T1574] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 65.420914][ T1574] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 65.427984][ T1574] rust_binder: 295: no such ref 0 [ 65.681485][ T649] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 65.761482][ T64] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 65.811490][ T649] usb 4-1: device descriptor read/64, error -71 [ 65.911480][ T64] usb 2-1: Using ep0 maxpacket: 32 [ 65.928883][ T64] usb 2-1: unable to get BOS descriptor or descriptor too short [ 65.929264][ T36] audit: type=1400 audit(65.893:386): avc: denied { associate } for pid=1582 comm="syz.4.413" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 65.939287][ T64] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 65.965604][ T64] usb 2-1: can't read configurations, error -71 [ 66.051547][ T649] usb 4-1: device descriptor read/64, error -71 [ 66.231532][ T31] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 66.291568][ T649] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 66.361627][ T31] usb 5-1: device descriptor read/64, error -71 [ 66.421495][ T649] usb 4-1: device descriptor read/64, error -71 [ 66.519675][ T36] audit: type=1400 audit(66.483:387): avc: denied { ioctl } for pid=1596 comm="syz.1.418" path="socket:[12567]" dev="sockfs" ino=12567 ioctlcmd=0x9426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 66.552668][ T36] audit: type=1400 audit(66.523:388): avc: denied { connect } for pid=1600 comm="syz.1.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 66.571521][ T36] audit: type=1400 audit(66.523:389): avc: denied { write } for pid=1600 comm="syz.1.419" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 66.601490][ T31] usb 5-1: device descriptor read/64, error -71 [ 66.671494][ T649] usb 4-1: device descriptor read/64, error -71 [ 66.781704][ T649] usb usb4-port1: attempt power cycle [ 66.841501][ T31] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 66.897821][ T1603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.420'. [ 66.971471][ T31] usb 5-1: device descriptor read/64, error -71 [ 67.034565][ T64] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 67.131507][ T649] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 67.158694][ T649] usb 4-1: device descriptor read/8, error -71 [ 67.171501][ T64] usb 2-1: device descriptor read/64, error -71 [ 67.211467][ T31] usb 5-1: device descriptor read/64, error -71 [ 67.302510][ T649] usb 4-1: device descriptor read/8, error -71 [ 67.321564][ T31] usb usb5-port1: attempt power cycle [ 67.411497][ T45] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 67.421487][ T64] usb 2-1: device descriptor read/64, error -71 [ 67.531640][ T64] usb usb2-port1: attempt power cycle [ 67.541674][ T649] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 67.561635][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 67.568063][ T649] usb 4-1: device descriptor read/8, error -71 [ 67.594467][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 67.602946][ T45] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 67.610527][ T45] usb 3-1: can't read configurations, error -71 [ 67.661496][ T31] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 67.682840][ T31] usb 5-1: device descriptor read/8, error -71 [ 67.702656][ T649] usb 4-1: device descriptor read/8, error -71 [ 67.811621][ T649] usb usb4-port1: unable to enumerate USB device [ 67.818927][ T31] usb 5-1: device descriptor read/8, error -71 [ 67.871551][ T64] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 67.892786][ T64] usb 2-1: device descriptor read/8, error -71 [ 68.022610][ T64] usb 2-1: device descriptor read/8, error -71 [ 68.061520][ T31] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 68.082662][ T31] usb 5-1: device descriptor read/8, error -71 [ 68.130534][ T1624] loop6: detected capacity change from 0 to 7 [ 68.212541][ T31] usb 5-1: device descriptor read/8, error -71 [ 68.261485][ T64] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 68.272156][ T1625] Invalid logical block size (1) [ 68.286109][ T64] usb 2-1: device descriptor read/8, error -71 [ 68.321733][ T31] usb usb5-port1: unable to enumerate USB device [ 68.430678][ T36] audit: type=1400 audit(68.393:390): avc: denied { getopt } for pid=1661 comm="syz.3.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 68.447044][ T1663] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.449244][ T1663] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.450367][ T64] usb 2-1: device descriptor read/8, error -71 [ 68.456147][ T1663] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.463946][ T1662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.432'. [ 68.468571][ T1663] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.474914][ T1664] rust_binder: Write failure EFAULT in pid:297 [ 68.484279][ T1663] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.496425][ T1663] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.502982][ T1663] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.509506][ T1663] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.516010][ T1663] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.522503][ T1663] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.528961][ T1663] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.535532][ T1663] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.542061][ T1663] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.548497][ T1663] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.554972][ T1663] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.561494][ T1663] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.567987][ T1663] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.574642][ T1663] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.581101][ T1663] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.581638][ T64] usb usb2-port1: unable to enumerate USB device [ 68.587650][ T1663] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.600398][ T1663] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.606887][ T1663] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.613529][ T1663] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.620107][ T1663] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.626663][ T1663] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.633244][ T1663] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.639777][ T1663] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.646246][ T1663] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.652728][ T1663] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.659164][ T1663] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.665635][ T1663] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.672204][ T1663] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.678654][ T1663] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.741585][ T45] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 68.763310][ T36] audit: type=1400 audit(68.733:391): avc: denied { accept } for pid=1665 comm="syz.3.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.763824][ T1666] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.814139][ T1670] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.874019][ T1672] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 68.874019][ T1671] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 68.904326][ T45] usb 3-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 68.921458][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.929482][ T45] usb 3-1: Product: syz [ 68.933690][ T45] usb 3-1: Manufacturer: syz [ 68.938317][ T45] usb 3-1: SerialNumber: syz [ 68.943667][ T45] usb 3-1: config 0 descriptor?? [ 69.108165][ T36] audit: type=1400 audit(69.073:392): avc: denied { read } for pid=96 comm="acpid" name="event9" dev="devtmpfs" ino=564 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 69.135222][ T36] audit: type=1400 audit(69.073:393): avc: denied { open } for pid=96 comm="acpid" path="/dev/input/event9" dev="devtmpfs" ino=564 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 69.157461][ T36] audit: type=1400 audit(69.073:394): avc: denied { ioctl } for pid=96 comm="acpid" path="/dev/input/event9" dev="devtmpfs" ino=564 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 69.180855][ T36] audit: type=1400 audit(69.073:395): avc: denied { execute } for pid=1681 comm="syz.4.438" path="/selinux/user" dev="selinuxfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 69.441563][ T64] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 69.562683][ T1658] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:331 [ 69.587235][ T1692] netlink: 352 bytes leftover after parsing attributes in process `syz.1.442'. [ 69.605794][ T64] usb 5-1: Using ep0 maxpacket: 16 [ 69.612518][ T64] usb 5-1: config 0 has an invalid interface number: 104 but max is 1 [ 69.613031][ T1692] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:317 [ 69.620762][ T64] usb 5-1: config 0 has an invalid interface number: 104 but max is 1 [ 69.620793][ T64] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 69.647385][ T64] usb 5-1: config 0 has no interface number 0 [ 69.653742][ T64] usb 5-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 69.666295][ T64] usb 5-1: config 0 interface 104 has no altsetting 1 [ 69.676559][ T64] usb 5-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 69.691067][ T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.699217][ T64] usb 5-1: Product: syz [ 69.703877][ T64] usb 5-1: Manufacturer: syz [ 69.708559][ T64] usb 5-1: SerialNumber: syz [ 69.720698][ T64] usb 5-1: config 0 descriptor?? [ 69.802237][ T1704] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 69.935017][ T1686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.955078][ T1686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.973218][ T64] asix 5-1:0.104 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 69.989303][ T64] asix 5-1:0.104: probe with driver asix failed with error -71 [ 70.011086][ T64] usb 5-1: USB disconnect, device number 14 [ 70.012596][ T1716] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=109 sclass=netlink_tcpdiag_socket pid=1716 comm=syz.4.452 [ 70.041477][ T420] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 70.067569][ T1720] pim6reg1: entered promiscuous mode [ 70.073059][ T1720] pim6reg1: entered allmulticast mode [ 70.211847][ T420] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16770, setting to 1024 [ 70.224584][ T420] usb 4-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.40 [ 70.234088][ T420] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.242973][ T420] usb 4-1: Product: syz [ 70.247981][ T420] usb 4-1: Manufacturer: syz [ 70.253439][ T420] usb 4-1: SerialNumber: syz [ 70.311813][ T1728] rust_binder: inc_ref_done called when no active inc_refs [ 70.371515][ T64] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 70.552565][ T64] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 70.571522][ T64] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 70.580700][ T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.590556][ T64] usb 5-1: config 0 descriptor?? [ 70.595889][ T1719] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 70.678809][ T1704] bridge0: port 3(macsec0) entered blocking state [ 70.691535][ T1704] bridge0: port 3(macsec0) entered disabled state [ 70.704786][ T1704] macsec0: entered allmulticast mode [ 70.716758][ T1704] veth1_macvtap: entered allmulticast mode [ 70.730177][ T1733] rust_binder: Write failure EFAULT in pid:312 [ 70.730316][ T1704] macsec0: entered promiscuous mode [ 70.753282][ T1733] rust_binder: Failed to allocate buffer. len:1136, is_oneway:true [ 70.753511][ T1704] bridge0: port 3(macsec0) entered blocking state [ 70.767974][ T1704] bridge0: port 3(macsec0) entered forwarding state [ 70.781566][ T1704] bridge0: mtu less than device minimum [ 70.810192][ T420] usbhid 4-1:1.0: can't add hid device: -71 [ 70.818840][ T420] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 70.835749][ T420] usb 4-1: USB disconnect, device number 31 [ 70.894393][ T1737] netlink: 88 bytes leftover after parsing attributes in process `syz.3.457'. [ 71.007814][ T64] hid-generic 0003:04F3:0755.000A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 71.102211][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 71.102231][ T36] audit: type=1400 audit(71.073:404): avc: denied { shutdown } for pid=1741 comm="syz.3.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 71.206661][ T1719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.222202][ T1719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.231384][ T1750] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:329 [ 71.250823][ T648] usb 5-1: USB disconnect, device number 15 [ 71.311788][ T1761] loop7: detected capacity change from 0 to 7 [ 71.318764][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 71.328048][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 71.341594][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 71.350834][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 71.358760][ T334] loop7: unable to read partition table [ 71.366517][ T45] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 71.381848][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 71.391949][ T45] asix 3-1:0.0: probe with driver asix failed with error -71 [ 71.399422][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 71.399466][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 71.410471][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 71.418499][ T45] usb 3-1: USB disconnect, device number 18 [ 71.425785][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 71.439727][ T1761] loop7: unable to read partition table [ 71.446094][ T1761] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 71.461429][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 71.467963][ T1767] /dev/rnullb0: Can't open blockdev [ 71.470631][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 71.476733][ T1767] /dev/rnullb0: Can't open blockdev [ 71.485754][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 71.489840][ T1767] /dev/rnullb0: Can't open blockdev [ 71.498147][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 71.501191][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 71.505824][ T1767] /dev/rnullb0: Can't open blockdev [ 71.511262][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 71.521135][ T1767] /dev/rnullb0: Can't open blockdev [ 71.537809][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 71.539457][ T1767] /dev/rnullb0: Can't open blockdev [ 71.548050][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 71.554127][ T1767] /dev/rnullb0: Can't open blockdev [ 71.561723][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 71.566877][ T1767] /dev/rnullb0: Can't open blockdev [ 71.575527][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 71.589323][ T31] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 71.597726][ T1767] /dev/rnullb0: Can't open blockdev [ 71.603430][ T1767] /dev/rnullb0: Can't open blockdev [ 71.608953][ T1767] /dev/rnullb0: Can't open blockdev [ 71.614746][ T1767] /dev/rnullb0: Can't open blockdev [ 71.620209][ T1767] /dev/rnullb0: Can't open blockdev [ 71.633395][ T1767] /dev/rnullb0: Can't open blockdev [ 71.643946][ T1767] /dev/rnullb0: Can't open blockdev [ 71.650792][ T1767] /dev/rnullb0: Can't open blockdev [ 71.656417][ T1767] /dev/rnullb0: Can't open blockdev [ 71.662330][ T1767] /dev/rnullb0: Can't open blockdev [ 71.667936][ T1767] /dev/rnullb0: Can't open blockdev [ 71.673682][ T1767] /dev/rnullb0: Can't open blockdev [ 71.679103][ T1767] /dev/rnullb0: Can't open blockdev [ 71.684676][ T1767] /dev/rnullb0: Can't open blockdev [ 71.690164][ T1767] /dev/rnullb0: Can't open blockdev [ 71.695880][ T1767] /dev/rnullb0: Can't open blockdev [ 71.701364][ T1767] /dev/rnullb0: Can't open blockdev [ 71.706937][ T1767] /dev/rnullb0: Can't open blockdev [ 71.712488][ T1767] /dev/rnullb0: Can't open blockdev [ 71.717893][ T1767] /dev/rnullb0: Can't open blockdev [ 71.723517][ T1767] /dev/rnullb0: Can't open blockdev [ 71.728916][ T1767] /dev/rnullb0: Can't open blockdev [ 71.734419][ T1767] /dev/rnullb0: Can't open blockdev [ 71.739867][ T1767] /dev/rnullb0: Can't open blockdev [ 71.745142][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 71.750573][ T1767] /dev/rnullb0: Can't open blockdev [ 71.756666][ T31] usb 4-1: config 0 has an invalid interface number: 66 but max is 0 [ 71.764926][ T31] usb 4-1: config 0 has no interface number 0 [ 71.771362][ T31] usb 4-1: config 0 interface 66 has no altsetting 0 [ 71.780382][ T31] usb 4-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=35.87 [ 71.789768][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.800090][ T31] usb 4-1: config 0 descriptor?? [ 71.901493][ T420] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 72.041454][ T420] usb 5-1: device descriptor read/64, error -71 [ 72.061552][ T45] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 72.213211][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 72.224273][ T45] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 72.233460][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.245495][ T45] usb 3-1: config 0 descriptor?? [ 72.251070][ T1776] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 72.281475][ T420] usb 5-1: device descriptor read/64, error -71 [ 72.316929][ T31] usb 4-1: string descriptor 0 read error: -71 [ 72.324463][ T31] usb 4-1: MBOX3: Invalid descriptor size=18. [ 72.333172][ T31] usb 4-1: USB disconnect, device number 32 [ 72.339465][ T1780] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.390953][ T1781] rust_binder: Failed to allocate buffer. len:104, is_oneway:true [ 72.521480][ T420] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 72.661493][ T420] usb 5-1: device descriptor read/64, error -71 [ 72.671991][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 72.678818][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 72.689880][ T45] usb 3-1: USB disconnect, device number 19 [ 72.901494][ T420] usb 5-1: device descriptor read/64, error -71 [ 73.011583][ T420] usb usb5-port1: attempt power cycle [ 73.186300][ T1783] input: syz1 as /devices/virtual/input/input11 [ 73.197029][ T36] audit: type=1400 audit(73.163:405): avc: denied { listen } for pid=1782 comm="syz.3.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 73.245994][ T1787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.246676][ T1787] rust_binder: Failed to allocate buffer. len:1136, is_oneway:true [ 73.248893][ T1790] ------------[ cut here ]------------ [ 73.266642][ T1790] WARNING: CPU: 0 PID: 1790 at mm/page_alloc.c:5234 __alloc_pages_noprof+0xe8/0x7b0 [ 73.276127][ T1790] Modules linked in: [ 73.280099][ T1790] CPU: 0 UID: 0 PID: 1790 Comm: syz.2.475 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 73.284733][ T1793] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:346 [ 73.291649][ T1790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 73.291687][ T1790] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 73.304128][ T1793] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 73.310893][ T1790] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 32 0f ee 05 00 0f 85 be 00 00 00 c6 05 25 0f ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 73.343519][ T1790] RSP: 0018:ffffc90007fcf980 EFLAGS: 00010246 [ 73.349635][ T1790] RAX: 0000000000000000 RBX: 0000000000000034 RCX: 0000000000000000 [ 73.357709][ T1790] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90007fcfa38 [ 73.365751][ T1790] RBP: ffffc90007fcfaa8 R08: ffffc90007fcfa37 R09: 0000000000000000 [ 73.373766][ T1790] R10: ffffc90007fcfa20 R11: fffff52000ff9f47 R12: ffffc90007fcf9c0 [ 73.381987][ T1790] R13: dffffc0000000000 R14: 1ffff92000ff9f34 R15: 0000000000000000 [ 73.390005][ T1790] FS: 00007f1fe9fd86c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 73.399024][ T1790] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.405701][ T1790] CR2: 00007f1fe9fb6f98 CR3: 000000010de7c000 CR4: 00000000003526b0 [ 73.413777][ T1790] DR0: 0000000000000100 DR1: 0000000000200004 DR2: 0000000000080007 [ 73.421834][ T1790] DR3: 0000000000000008 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 73.429836][ T1790] Call Trace: [ 73.433172][ T1790] [ 73.436129][ T1790] ? __futex_queue+0x19a/0x340 [ 73.440907][ T1790] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 73.446694][ T1790] ? futex_wait_setup+0x1bc/0x260 [ 73.451782][ T1790] ? pending_reads_dispatch_ioctl+0xc70/0x1fa0 [ 73.457990][ T1790] ___kmalloc_large_node+0x81/0x220 [ 73.463264][ T1790] ? pending_reads_dispatch_ioctl+0xc70/0x1fa0 [ 73.469458][ T1790] __kmalloc_large_node_noprof+0x1e/0xe0 [ 73.475171][ T1790] ? pending_reads_dispatch_ioctl+0xc70/0x1fa0 [ 73.481363][ T1790] __kmalloc_noprof+0x336/0x530 [ 73.486287][ T1790] ? __kasan_check_write+0x18/0x20 [ 73.491462][ T1790] pending_reads_dispatch_ioctl+0xc70/0x1fa0 [ 73.497478][ T1790] ? futex_setup_timer+0xb4/0xd0 [ 73.502459][ T1790] ? futex_wait+0x29a/0x7a0 [ 73.506996][ T1790] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 73.513465][ T1790] ? _raw_spin_lock+0x8c/0x120 [ 73.518261][ T1790] ? selinux_file_ioctl+0x6e0/0x1360 [ 73.523597][ T1790] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 73.529181][ T1790] ? do_futex+0x309/0x500 [ 73.533554][ T1790] ? __cfi_do_futex+0x10/0x10 [ 73.538283][ T1790] ? __fget_files+0x2c5/0x340 [ 73.543018][ T1790] ? bpf_lsm_file_ioctl+0xd/0x20 [ 73.548027][ T1790] ? security_file_ioctl+0x34/0xd0 [ 73.553211][ T1790] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 73.559668][ T1790] __se_sys_ioctl+0x135/0x1b0 [ 73.564410][ T1790] __x64_sys_ioctl+0x7f/0xa0 [ 73.569031][ T1790] x64_sys_call+0x1878/0x2ee0 [ 73.573770][ T1790] do_syscall_64+0x58/0xf0 [ 73.578223][ T1790] ? clear_bhb_loop+0x50/0xa0 [ 73.582948][ T1790] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 73.588874][ T1790] RIP: 0033:0x7f1fe918f6c9 [ 73.593339][ T1790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.612995][ T1790] RSP: 002b:00007f1fe9fd8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.621471][ T1790] RAX: ffffffffffffffda RBX: 00007f1fe93e6090 RCX: 00007f1fe918f6c9 [ 73.629475][ T1790] RDX: 00002000000000c0 RSI: 0000000040106726 RDI: 0000000000000004 [ 73.637491][ T1790] RBP: 00007f1fe9211f91 R08: 0000000000000000 R09: 0000000000000000 [ 73.645536][ T1790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.653553][ T1790] R13: 00007f1fe93e6128 R14: 00007f1fe93e6090 R15: 00007ffe27e6e008 [ 73.661588][ T1790] [ 73.664622][ T1790] ---[ end trace 0000000000000000 ]--- [ 73.681481][ T414] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 73.687713][ T653] Bluetooth: hci0: command 0x1003 tx timeout [ 73.721554][ T420] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 73.742614][ T420] usb 5-1: device descriptor read/8, error -71 [ 73.872612][ T420] usb 5-1: device descriptor read/8, error -71 [ 74.111533][ T420] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 74.132617][ T420] usb 5-1: device descriptor read/8, error -71 [ 74.262820][ T420] usb 5-1: device descriptor read/8, error -71 [ 74.371582][ T420] usb usb5-port1: unable to enumerate USB device