last executing test programs: 9.662589908s ago: executing program 3 (id=487): r0 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r0, &(0x7f0000000740), 0xff67) fcntl$addseals(r0, 0x409, 0x8) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x0, 0x2, 0xffff8000, 0x1, 0x3}}) 9.57498244s ago: executing program 3 (id=490): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x40086315}], 0x0, 0x0, 0x0}) r1 = socket(0x22, 0x1, 0xfffffbff) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x3ff}, 0x1c) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) 9.458751261s ago: executing program 3 (id=492): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc8, 0x0, &(0x7f0000000300)=[@exit_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0xa}, @fda={0x66646185, 0x1, 0x0, 0x34}, @ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/190, 0xbe, 0x1, 0x39}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x3, 0x0, 0x39}, @flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@handle={0x73682a85, 0x100, 0x2}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @free_buffer={0x40086303, r1}, @dead_binder_done, @register_looper, @request_death, @increfs={0x40046304, 0x1}, @release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 9.423814902s ago: executing program 3 (id=493): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x180) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000a00), 0x8000, 0x0) sendfile(r0, r2, 0x0, 0x1200000000003) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="2c63616368653d6d6d61702c6b6fc8eb6ac1923e8b90c8913f3bcffda91657a0"]) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000400)={0xb8, 0x0, &(0x7f0000000640)=[@increfs_done, @acquire_done={0x40106309, 0x1}, @enter_looper, @acquire={0x40046305, 0x1}, @request_death, @dead_binder_done, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f00000004c0)=""/240, 0xf0, 0x0, 0x34}, @fda={0x66646185, 0x5, 0x1, 0x17}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}}, @acquire_done={0x40106309, 0x2}, @clear_death={0x400c630f, 0x4}], 0x92, 0x0, &(0x7f0000000700)="ebfee438c4609005928e7510d2e4915709074a785ee0387a8db9b702a711168e410a63666f5fcac5963aae579d47b18c2f8603668cab4caa3975c33501579a661b61d75a83acc8bc8b322abeb4f8df503a908122a6c43fdacde82fb146c390222badf16e4b6f17ec6c951791b2e8bad4d8c411f7afd97135afdbeadaf7ad97b30eec2d2e911525f56abb33d5f16fc9ca07e4"}) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs2/binder1\x00', 0x802, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000200)=[@acquire, @enter_looper], 0x53, 0x0, 0x0}) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) rt_tgsigqueueinfo(r7, r7, 0x8, &(0x7f0000000140)={0x2, 0x5, 0xfffffff9}) tkill(r7, 0xa) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@ipv4={""/10, ""/2, @dev}, @in6=@private2}}, {{@in=@remote}, 0x0, @in6=@ipv4={""/10, ""/2, @initdev}}}, &(0x7f00000008c0)=0xe8) ptrace$peeksig(0x4209, r7, &(0x7f0000000a40)={0xa8, 0x0, 0x2}, &(0x7f00000002c0)=[{}, {}]) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) 9.091472977s ago: executing program 3 (id=496): syz_open_procfs$userns(0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'lo\x00', &(0x7f0000000500)=@ethtool_per_queue_op={0x4b, 0xf, [0x9, 0x1ff, 0x7fff, 0x1c2, 0x0, 0x7, 0x81, 0x7, 0x6, 0x5, 0x3ff, 0x80, 0x0, 0x942f, 0x10, 0x10000, 0xe157, 0x1000, 0x65, 0x9, 0x4, 0x8, 0x6, 0x2, 0x5, 0x3, 0x92, 0x1d, 0x1, 0x0, 0xf0000000, 0x3, 0x9, 0x6, 0x47cd, 0x3, 0x8, 0xff, 0x6, 0x9, 0xb2d5, 0xf045, 0x2, 0x1ff, 0x351, 0x9, 0x9, 0x1, 0x2, 0x80000000, 0x0, 0x7fff, 0x91, 0xb7c, 0xc, 0x7, 0x80000001, 0x8, 0x2, 0x4, 0x9, 0x41, 0x8000, 0x4, 0x20b, 0x2, 0x2, 0x9, 0x6, 0x6, 0x8b, 0xfffff91a, 0x4, 0x8, 0x1, 0x101, 0x80000000, 0x8, 0x2, 0x2, 0x7, 0x81, 0x6, 0x4, 0x3, 0x6, 0xaf6, 0x1, 0x9, 0x2, 0x2, 0x6, 0x81, 0x19a400, 0xcb, 0x27, 0x9, 0xe, 0x4, 0x10001, 0x4c, 0x8, 0x3, 0x1, 0x3, 0x4, 0x7, 0x6, 0xfffffffa, 0x20000, 0x8, 0xfffffffb, 0x0, 0x5, 0x0, 0x9, 0x1, 0x3, 0x0, 0xfb, 0x6, 0x8000, 0x7, 0x3, 0x9, 0x4, 0x6, 0x5]}}) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000740)={&(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x38}, 0x4000014) 8.938708249s ago: executing program 3 (id=498): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000080)={0x0, "54e8df682530b21c2d792c2c6bdcc417"}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000001080)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000001480)={0x0, 0x3fbf5db7, 0x8000000000000000}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001880)={0xcf42448f076252ed, 0x2, {0xf, @struct={0x8, 0xfffffffa}, r1, 0x8, 0xc5, 0x9, 0x5, 0x3, 0x3, @struct={0x2583}, 0x200, 0x6, [0xbc2, 0x8, 0x9, 0x3, 0x0, 0x3ff]}, {0xd793, @struct={0x8, 0x73}, r2, 0x7, 0xda2, 0x7, 0x3, 0x10000, 0x84, @struct={0x8, 0x2}, 0x0, 0xd4, [0x5e5, 0x55b, 0x2, 0x4, 0x9, 0x5]}, {0x5, @struct={0x7, 0x1ff}, r3, 0x0, 0xffffffffffffb37a, 0x5, 0xf38b, 0x5, 0x1, @usage=0x6, 0x5, 0x9, [0x5, 0x96e, 0x9, 0x8, 0x9, 0x8]}, {0xb, 0x45b, 0x7ff}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f0000001d40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x34, 0x1, 0x7, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xfffffffffffffff9}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7fff}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001d80)={"3250de269a071774dbca93d57c2ac2bf", 0x0, 0x0, {0x1, 0x8d}, {0x38, 0x3}, 0x1ff, [0x9b, 0x5, 0x8, 0x101, 0x7fff, 0x4, 0x3, 0xffff, 0xfffffffffffffff7, 0xa0, 0x1e, 0xffffffffffffffff, 0x100, 0x0, 0x95, 0x4]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000001f00)={{r4}, r5, 0x12, @inherit={0x50, &(0x7f0000001e80)={0x0, 0x1, 0x8, 0xfffffffffffffff8, {0x0, 0x471, 0xfff, 0xe, 0x2b53}, [0x2]}}, @subvolid=0x7}) r6 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ioctl$FS_IOC_GETFSUUID(r6, 0x80111500, &(0x7f0000002f00)) r7 = getpid() r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002f40)='/sys/power/pm_wakeup_irq', 0x4480, 0x8) ioctl$USBDEVFS_FREE_STREAMS(r8, 0x8008551d, &(0x7f0000002f80)={0x36f7, 0x1d, [{0xf}, {0x6, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x7, 0x1}, {0x7}, {0x9, 0x1}, {0xe}, {0xb}, {0x3, 0x1}, {0x1, 0x1}, {0xa, 0x1}, {0x5}, {0x3}, {0xa, 0x1}, {0x5, 0x1}, {0xd}, {0xb}, {0xe, 0x1}, {0xe}, {0x1, 0x1}, {0xb, 0x1}, {0xf}, {0x2}, {0xc}, {0x9, 0x1}, {0x6, 0x1}, {0x2}]}) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r8, &(0x7f0000003080)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003040)={&(0x7f0000003000)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24040040}, 0x4) flock(r4, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000030c0), r8) r10 = openat(r8, &(0x7f0000003100)='./file0\x00', 0x2, 0x142) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NETID(r11, &(0x7f0000003200)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000031c0)={&(0x7f0000003180)={0x24, r9, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0xfffffd3f}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4804) r12 = creat(&(0x7f0000003240)='./file0\x00', 0x0) setsockopt$MRT6_ADD_MFC(r12, 0x29, 0xcc, &(0x7f0000003280)={{0xa, 0x4e24, 0x3, @remote}, {0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x80000000}, 0x1, {[0xfe, 0xffff, 0xfffffff5, 0xc3, 0xb73, 0x7, 0xffffffff, 0x2]}}, 0x5c) fcntl$setownex(r4, 0xf, &(0x7f0000003300)={0x1, r7}) fsetxattr$security_evm(r6, &(0x7f0000003340), &(0x7f0000003380)=@ng={0x4, 0x13, "d571194eb14ffd70e5425f7dc7d7"}, 0x10, 0x1) setsockopt$TIPC_SRC_DROPPABLE(r10, 0x10f, 0x80, &(0x7f00000033c0)=0x6, 0x4) sendmsg$NFNL_MSG_COMPAT_GET(r12, &(0x7f00000034c0)={&(0x7f0000003400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003480)={&(0x7f0000003440)={0x34, 0x0, 0xb, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20044010) fchmodat(r12, &(0x7f0000003500)='./file0\x00', 0x3) sendmsg$nl_xfrm(r10, &(0x7f0000003a80)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003a40)={&(0x7f0000003840)=@polexpire={0x1dc, 0x1b, 0x2, 0x70bd2c, 0x25dfdbfb, {{{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e24, 0x800, 0x4e21, 0x3, 0x0, 0xe0, 0x20, 0x89}, {0xfffffffffffffff7, 0x1ff, 0x3, 0x7, 0x6, 0x7, 0x7, 0xecb}, {0x5, 0x3, 0x2a4, 0x5}, 0xc, 0x6e6bb5, 0x0, 0x1, 0x0, 0x1}, 0x5}, [@proto={0x5, 0x19, 0xff}, @sa={0xe4, 0x6, {{@in=@broadcast, @in6=@remote, 0x4e21, 0x4, 0x4e24, 0x6, 0x2, 0xa0, 0x20, 0x89}, {@in=@empty, 0x4d4, 0xff}, @in=@local, {0x791a, 0x4, 0x415e0de3, 0x10001, 0xeb2, 0x8, 0x8, 0x2}, {0x7, 0x4, 0xb, 0xb25c}, {0x100, 0x7, 0x5}, 0x70bd29, 0x3506, 0xa, 0x2, 0xaf, 0x40}}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x3a}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8, 0x5, 0x1}}, @replay_thresh={0x8, 0xb, 0x1}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x20000001}, 0x80) 8.84388712s ago: executing program 32 (id=498): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000080)={0x0, "54e8df682530b21c2d792c2c6bdcc417"}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000001080)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000001480)={0x0, 0x3fbf5db7, 0x8000000000000000}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001880)={0xcf42448f076252ed, 0x2, {0xf, @struct={0x8, 0xfffffffa}, r1, 0x8, 0xc5, 0x9, 0x5, 0x3, 0x3, @struct={0x2583}, 0x200, 0x6, [0xbc2, 0x8, 0x9, 0x3, 0x0, 0x3ff]}, {0xd793, @struct={0x8, 0x73}, r2, 0x7, 0xda2, 0x7, 0x3, 0x10000, 0x84, @struct={0x8, 0x2}, 0x0, 0xd4, [0x5e5, 0x55b, 0x2, 0x4, 0x9, 0x5]}, {0x5, @struct={0x7, 0x1ff}, r3, 0x0, 0xffffffffffffb37a, 0x5, 0xf38b, 0x5, 0x1, @usage=0x6, 0x5, 0x9, [0x5, 0x96e, 0x9, 0x8, 0x9, 0x8]}, {0xb, 0x45b, 0x7ff}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f0000001d40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x34, 0x1, 0x7, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xfffffffffffffff9}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7fff}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001d80)={"3250de269a071774dbca93d57c2ac2bf", 0x0, 0x0, {0x1, 0x8d}, {0x38, 0x3}, 0x1ff, [0x9b, 0x5, 0x8, 0x101, 0x7fff, 0x4, 0x3, 0xffff, 0xfffffffffffffff7, 0xa0, 0x1e, 0xffffffffffffffff, 0x100, 0x0, 0x95, 0x4]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000001f00)={{r4}, r5, 0x12, @inherit={0x50, &(0x7f0000001e80)={0x0, 0x1, 0x8, 0xfffffffffffffff8, {0x0, 0x471, 0xfff, 0xe, 0x2b53}, [0x2]}}, @subvolid=0x7}) r6 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ioctl$FS_IOC_GETFSUUID(r6, 0x80111500, &(0x7f0000002f00)) r7 = getpid() r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002f40)='/sys/power/pm_wakeup_irq', 0x4480, 0x8) ioctl$USBDEVFS_FREE_STREAMS(r8, 0x8008551d, &(0x7f0000002f80)={0x36f7, 0x1d, [{0xf}, {0x6, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x7, 0x1}, {0x7}, {0x9, 0x1}, {0xe}, {0xb}, {0x3, 0x1}, {0x1, 0x1}, {0xa, 0x1}, {0x5}, {0x3}, {0xa, 0x1}, {0x5, 0x1}, {0xd}, {0xb}, {0xe, 0x1}, {0xe}, {0x1, 0x1}, {0xb, 0x1}, {0xf}, {0x2}, {0xc}, {0x9, 0x1}, {0x6, 0x1}, {0x2}]}) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r8, &(0x7f0000003080)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003040)={&(0x7f0000003000)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24040040}, 0x4) flock(r4, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000030c0), r8) r10 = openat(r8, &(0x7f0000003100)='./file0\x00', 0x2, 0x142) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NETID(r11, &(0x7f0000003200)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000031c0)={&(0x7f0000003180)={0x24, r9, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0xfffffd3f}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4804) r12 = creat(&(0x7f0000003240)='./file0\x00', 0x0) setsockopt$MRT6_ADD_MFC(r12, 0x29, 0xcc, &(0x7f0000003280)={{0xa, 0x4e24, 0x3, @remote}, {0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x80000000}, 0x1, {[0xfe, 0xffff, 0xfffffff5, 0xc3, 0xb73, 0x7, 0xffffffff, 0x2]}}, 0x5c) fcntl$setownex(r4, 0xf, &(0x7f0000003300)={0x1, r7}) fsetxattr$security_evm(r6, &(0x7f0000003340), &(0x7f0000003380)=@ng={0x4, 0x13, "d571194eb14ffd70e5425f7dc7d7"}, 0x10, 0x1) setsockopt$TIPC_SRC_DROPPABLE(r10, 0x10f, 0x80, &(0x7f00000033c0)=0x6, 0x4) sendmsg$NFNL_MSG_COMPAT_GET(r12, &(0x7f00000034c0)={&(0x7f0000003400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003480)={&(0x7f0000003440)={0x34, 0x0, 0xb, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20044010) fchmodat(r12, &(0x7f0000003500)='./file0\x00', 0x3) sendmsg$nl_xfrm(r10, &(0x7f0000003a80)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003a40)={&(0x7f0000003840)=@polexpire={0x1dc, 0x1b, 0x2, 0x70bd2c, 0x25dfdbfb, {{{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e24, 0x800, 0x4e21, 0x3, 0x0, 0xe0, 0x20, 0x89}, {0xfffffffffffffff7, 0x1ff, 0x3, 0x7, 0x6, 0x7, 0x7, 0xecb}, {0x5, 0x3, 0x2a4, 0x5}, 0xc, 0x6e6bb5, 0x0, 0x1, 0x0, 0x1}, 0x5}, [@proto={0x5, 0x19, 0xff}, @sa={0xe4, 0x6, {{@in=@broadcast, @in6=@remote, 0x4e21, 0x4, 0x4e24, 0x6, 0x2, 0xa0, 0x20, 0x89}, {@in=@empty, 0x4d4, 0xff}, @in=@local, {0x791a, 0x4, 0x415e0de3, 0x10001, 0xeb2, 0x8, 0x8, 0x2}, {0x7, 0x4, 0xb, 0xb25c}, {0x100, 0x7, 0x5}, 0x70bd29, 0x3506, 0xa, 0x2, 0xaf, 0x40}}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x3a}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8, 0x5, 0x1}}, @replay_thresh={0x8, 0xb, 0x1}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x20000001}, 0x80) 5.70723632s ago: executing program 1 (id=510): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc), 0x80000000000b, 0x20000000, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) 4.778016524s ago: executing program 1 (id=518): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0x8, {"cbe9f88dc436966861046be4526ad1b6606de57d4e48687c87976c9cc1366792adc0e119f87eaf903707fd42f61ea08fc60b1eabf9462c8a99613d6f1673a65219cc05c7831ed458254ed73d189a393d9b84fd8e4b81f6e4e52221903ab5dd6a668b8112d6a09638f9545c271d118b6ddb9cf8772129b7626a271c895b94e60be93d2afb3561ac06a899699ff33e51205099dc5528d33594ee58c21bda0324afa07735233137ea33d73885e4928f5065d08e0efb5330a2013169e2d98004d794f3d10f14d8cf5a6808e2ffb18b76fb498496c6c2432d4fc7bf3cf280ee302e753e5fd4e3e4846d1de4db6529a89e14903e8e265952c4f418b7025f201b3083167a3d9b396135c69632702ec612524683b162cea51b9c6ebca00e55127b7d4533263130b0572e60f76d71146a5af34e03205f47e5e4715d8ee719108a036f93a03a30be670ab1ac27b476acc959ee5be2cd5f382b6270a358d8bc810d05a60023aaa42e461c155f63f23c99b7e19ef61c2a145013aaec331db767b1b77a93e520fb81712ca167d1b193a6aad587a8259d1d52c92194acc7bbe750b6c26c6bf4f06afe381721cc7882ba2c467c811f6e39cf952c153494f1958e65d4165ade578671b9c52b4e570f3ae078a11275b55af0592a65c78ba91aed8d3680c56871644cbd5ed1845cd5312b57693f3c6403e875f4cb89c17572e35acce06922d6335a0e19324183659a6946c8cd2686cf2fbabb06585dbca2affcd72d6263613619c78add1a6caa7d36a03b04748d927fdc476559deb8206545840f9758032d33e5cef8d189e114933194163dde732ed4bb1df4a185a0e71a27b9d73927ad0a37d06326ccc5ecfd62f9d9055c44a0d377d75c61918f217c8f8592e6fb5fd95aee4931a4dc0c2e48915a7d6b24b5aaa7d51a23ab2b1a2d6b72cef26b13d115c1482efb3f6a231a4d406904ec09be8ece5da6a88f74688c839818b05da5dcbc81325e8ad5c450a703b5cbcdeaeaea8df128e54c32236930e75505b97a62fc01fda75bc0432d84269a2838afc287f6d67303ba91b5e599b4fa58916a20841a841a3f88b389ed29efbaf860a6bb9252c4fcb226982a9c272d94b3079b9bafaaa7a78ba6c4ae8d156d358bfd1805ba2d14efd831624b20a3dcb0d8ccfe6078f7f57cc3ad5185c52dc29ca5d26369eafc82abcb47760d86f8e334d988494b189dfe8e5e57d298323cbf011ce0beec4767edbf5c7d5415899b6b079ad0b57914b2561b51bd0a8292c23f79aaef7c00580fc9334e3d4c520324f212b9efe86484353fae1769ba5edcea81371d1ef5a7e1c09a6fafa410c89fa34e7dbde4c1dca98bcc94755ec95233a2afa999f77ba39a3f949d1f287ab5e9156352efe9e884529ba207850d0648b39596d24f27b74d200dd289a5ccf9dd96f7a6ba46eff497133db943dff7aafcb31db1d5c6d114244ccb960539aec1821e193f244eeaf5352167681eda09ad0ae462537bebc2427c1451bc1c5ce5961dd9f2dcf8dfa6eba53c3af27c613d7d20aaf22739860af856cab733597fac2346504eee380f882d2f49531e58de25568f3fc77b48ce43ce12193f24cebd1913d8f08ff862b119b8eb4eabc924d92408312ff545e83e3b0cbaeea245d6f8982263614ae2a5bf2ffe13595b3dfd181c351ddce53985434d052642f8631369345d5be37cd19c5fd6f62fce8ecad24013cadd8d8ba0b07696e91e214a5f436cd2bf5be2551f3e2e2bde7703739a82e651cd57c1185df5ac6c540d39fc437821a8b93262e00008a04192ca1f36ce1bb7a00c6300b144e6234bdcfe56a20c16e988871e6540a149ee772eba01084cc964c48386d3c51cf5ef1bd5df20ae589004273cd1741449a881a53ca479164e64781d29c4a2ff8d05318e68729c13aef537f3f263ba5eec80cbf02a7c704ed273e1323510704008e798b644c0810d50d17f7750f3b66d5b2e5069df7ebcc0e6af7482c8a0ee5ec5845fc91e7218639aa2563b6f29d40ca61eb43c9c84b1e31e08844a1ee89124e787782298e910dc0708458e29bc16bf19120e8d991ec44187c26b3ccd8f98a27eee7c1dc23e97bc4e274f94285478f8933a812c10fdd07766b1007755521d21cfca2dab2b3787cca6e8bf33a3d17cb32a17e595d1d94279aa5ae1db06951ce4181e2795e9738abaa67ebfc869ab064f2e02cbe527868922368174b3dbbbc114e93a41691ac9f995a56cf2de796d9b37170cded8a0277bc2b6de9e0a6fef660ae799cf38f35db14b9ff43172fbc0bb48bad3f525257baf55568dede1efa5816b34b251df15764807540b21a3b5532aaf6456d18deb6627e92c2ada2d81345509e947f192e6f3cf79dd43950b9fa193cb57a42a4b6e5aac0bdffcdfd45b191bfc452c28ad92663ce53c9db5a7906e367f5cf610a552e23d2e35e52e9b1d69839108e756dc9fb25ee91044dc7e15be1f91042f07350911e961e0274b57c55749bee1d2768de6fe9f164e5e4923dbb79d00c78ef92cbf8593c4c9be05f55180b6b5396e65ebbb14d2a68c148f3f37ea12ee8077f41dc5b702558ce6918aa5f637a700a498b40349d0e865a354330ebd11e052186620e11d3c93188cbdbf363a85f82cc37933e5da24be3ad786573cd2d0671287da620312947f6756953dd5fc71002fdd1ed2237c1dbc6b3f16740054e522b52229809a177f94d0b8d0a529881947a55472a66d0b14807a305217fef5499fb26aed2e375f091edd5660becf42a020d1883393bd0a6d5a0016efd1371578077c101d532903b40e581ed0eab700af3e67f5ac5565d3ef8d00b45c7f8ed4d6dfbf5851355a5c73449884c7a41f031ce41564f826a7227484033663bb809963efdd960e121198e2bd1fd2a8670b6cdb84883fb19215cf619acc0e4d2fb1673fd0c847fbfe0a80565968f7515ccecf8c90dcfd95b75c5c74507ddb7bb9de1eefcae281d0a8b2d4c03699661aa9862cdfe0aa7fc4925868eae37cd7bf6190b2eeb01012584a0d2854ce191cb38ded59b6e9853a1dc3d68ecc3afd261ffee8dc4b9f02fac34658ac9e543edff3f12fc168cf5cf68c444a93ad2500c2974912c4bf3153832c13cee8cdcb5e183bc20665ff303882a2e08be9aba8120ec85b7f8b8a5af4c6ad590f6d5fc4e8edf8df77b881adbacef032ca710a081a7ac1853ee2b01395398298bb8dbd1cb8dbe2deb3e3debf27b1eb38282ad551882e906645b3cf738940af6781532d5480e20abfd59b95a91c0643a1784e7d1f5bd47939d642ec387b99e4037452fe9680fba96b9835f847b81e239bb16869669e4476661bee6191c0e4329ec945bd5478c933401027ddd19c580eb7a752ea0f94e38af561232da66fa4ab8317eb2cb4a281cc11e14768271f76fd145fdfcee1e3a95beb77004837607a57e27bd8e358218fb0c5f51f844b449bafc68f289504f7921301af41a1bbe8c3176e628627c5b1be81cd8498bdecf4cdb711eef2a708a3e4707894d7cc12b813e4a5f21f6812ffa74b9e57f08bba381399d1d52d29ca03fe61f8345dda36d0e44f8a494906dac1ea1feb0e5829556708e0f0a3d00d384d0af2e1d4fd83902a14df23973148b3a7e8ec5fa9e6d3a0fcbcd46d72efae2d6b70b442d54ea312b939596da42c5cd53d2cbf31398680532d27ee4ad664dffe4bdd7a38406f15b8a009537ef724ac02ea65e9956a37d277f6b90bd9c13dcac08bdb84b4da7417ba67ab6a2050891009e13d4b96613ca8b5e62037c1537886f9c2efb07e782118306f1b750795b53936d834062aba04902535f631b33eef2961349c488ee3e5ea66cc1543619b505f2f6a113c992e8e214c3aad556fd64c69a39c7020127f7249cefe4d17c53a42c0c02557725dd14bc0524cd6d7bb34be5a66391ea6347ba3908eb4fc59f17e738167aaf7f091b99d2d372d5c29991ef66e079c583332afcd897dd9941caed8719b6b5088ccf946d42ebb13ccf46b0c43da5bc170446ceb3341c867aa15e3dad1b3971b634f2bfa56fb5ee1aa6c24dfae35764fffb2fe13ea9a168db0bfa9d7948097d92dbb2e1b1e2f3c6a8c427ca8cd7535307acc2e4839ab5bb7a6208c2def924ba3969a5a50701e34c0ab4ce26fcda86cde5a7622d84e75234eca23ac13520e06f46c5b49b37169d04f93b6266ffe1bd77b4f9a21181c95500a6795faf9fc44a12a67dd59b6c1b686bfdbcdebb4855ff412f4079dbd5b3590f1e6316c5b03000b246982025ae79a6844fb6277a50823a4698042e95d1a8321cca4b8529317177bf6eae49b53ffeed42963c2e91a137779f9bdf89fd25b5815fa44ca8b2045bc1fc61e26b7ca6dba7e4a91a50aa07f7a3f50c00061d013e6e7cef872e78b7556da030d0e9c5c76ed7adb007bea10039cb7957d5c8388d58ccb423134b56de589f6606feac0563d40011f6da0637ae5cccda1cb0e8f2b9faf59514ab0d9adf1801d1d1dda75151cdaa7188b13927bdc1dfebb57d970a8f383d86d1a18f10fcba3e6989d8bafa859a2a34b3d15fa10f35059e46ea49bb8c82909daa211ae4b1c01063c64e50458eb938c0915415638c4bcd07daf1bb8cece7c1e322afc1d75c48f41315d8a69da65111bb128a884e5e1fdc3fbd5e7fa2372180984ba02f72cde3ffcd86faafdedee3fb817fe58f742bc794b183e79c8803d65bbea6dc55d3a7a42e28a3557272df4a893c350b3a1d88ae85990e631a52a143bb8cb6256e04d61409f96c21ed2ac916533bda6b3a6a6e6dc90f9a941893fec05a27635f2fa5d916a47ae850e1520b50dba286bcb53acdced254f94a19a8edfbb19963b1b79d415501d566ec45563595ac22546b5bc1d884c418d6289c5a956e441512d6fee642f7338610a83d3c6a3516482da3ef7a04442f3e54b9b9f9a426f2f530be7ec8e918a2a879f9cc0b9e80593961c1eba7bc051318108932e3e03464a332aa16f45cb0f5f6718096c28ec033dc97f0c6bea1e316d9ba78063b74f8960e6d4d5bbd6f4e8f130561f9b6b8c43679d3ae072f647b5bb4b7291c219833f491facf952f3875ea3b3f6972f8936c42597b75879e39a6e55d691d3148363859979f4bc0fa5d8960dc212e98b8dc47d80b32ed9fbe87005aa1fd8ac7ced2fb332d876f846bebd62d27add4494882ec12e06381e0c0dd50a6404a724e17178cb08fef3f7eb9869fcb344754c6c07485d05aa3b45bcf94f55a1dd57cf95684a4029bb982d413273624f4f9cfee53c97d0c041cd177ff100e609b5be8d0ba9536f9495b790acdd293ba362d00cf1dcda448e9cf46e61d15b5e2cf6962fc860684157dd46f6ccacfbdd6f4e5b7da84a18ab5ed647bc1d4c62c9cbb74088b25fabc47157e1701c378d04c90b275728bc59f2d49dfbcfe5ae274ecd60d5f1d86495961d0aaee92c8ff74df11f3177e9adac0f485e61033217b058db53cfae66fe0554f64f93d4cd3e73db9fb361fbad7a947f36c22178a2f0a29c91e3aa0d0cfea6ce013ab62506da286ddd1acad5996a2ce7ca31316d3b0337097b10f3a5c5d2eee9ac9bcb96598750b7959a5cce52d6190b8e58b294cf7580c28d9a751b768043012968011c921d39eeeb64fb2a7c27ce7efecf6f3fd3270e035bf891253dd2413947f534c775105c48948fc4d3aec1b70d9700600a3d88cb4e8b37036b9bd198f4dac9b86d43772278b59bbbeb9322ba2b679d93031355f83d6bd1d72127ff2f59fd8c4535214cbf9a2bd53a144e56b110474b96d910617981ea15a6c7f16b2c8946df84e85e763952d56cfd96aac069", 0x1000}}, 0x1006) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000400)={0x0, 0x0}) (async) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000400)={0x0, 0x0}) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats=']) 4.578135628s ago: executing program 1 (id=519): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r2 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000140)=[{&(0x7f0000000100)=""/57, 0x39}], 0x1, &(0x7f0000000240)=[{&(0x7f0000000180)=""/122, 0x7a}], 0x1, 0x0) 4.369749751s ago: executing program 1 (id=520): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"]) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xfffffffd, 0x10408}}, 0x50) (async) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0x0, 0x0, {0x0, 0x10000000, 0x0, 0x0, 0x297, 0x0, 0x0, 0x3966, 0x6, 0x4000, 0x0, r2, r3, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup2(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x800040, &(0x7f00000000c0)={[{@pids_localevents}], [{@smackfstransmute={'smackfstransmute', 0x3d, '{\x8b'}}, {@fsmagic={'fsmagic', 0x3d, 0x5}}, {@fowner_lt={'fowner<', r2}}, {@obj_type={'obj_type', 0x3d, './binderfs\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@uid_gt={'uid>', 0xee00}}]}) 4.038451306s ago: executing program 1 (id=522): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@loopback, 0x78, r1}) r2 = socket(0x6, 0x4, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x3, 0xfffffffd}}) ioctl(r2, 0x891e, &(0x7f0000000000)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r4) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) ioctl$int_in(r5, 0x5452, &(0x7f00000001c0)=0x50) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) recvfrom$inet6(r5, &(0x7f0000000300)=""/218, 0xda, 0x120, 0x0, 0x0) shutdown(r5, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) r6 = gettid() io_setup(0x3, &(0x7f0000000000)=0x0) r8 = socket$unix(0x1, 0x1, 0x0) io_submit(r7, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0xb899, r8, &(0x7f0000000040), 0x0, 0x4}]) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) close_range(r0, r2, 0x0) futex(&(0x7f0000000080), 0x1, 0x0, 0x0, &(0x7f0000000100), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) setitimer(0x2, &(0x7f0000000b40)={{}, {0x0, 0x2710}}, 0x0) getitimer(0x2, &(0x7f0000000200)) 3.030598852s ago: executing program 1 (id=529): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) rt_sigqueueinfo(r0, 0x11, &(0x7f0000000000)={0x38, 0x9, 0x10000}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/sync_on_suspend', 0x228000, 0x22) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.778211876s ago: executing program 4 (id=532): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r4, 0x5) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r5, 0x6, 0x1, 0x0, &(0x7f0000000040)) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r6, 0x1) close(r3) prctl$PR_MCE_KILL(0x29, 0x0, 0x2) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r8, 0x10f, 0x80, &(0x7f00000001c0)=0x5, 0x4) r9 = dup3(0xffffffffffffffff, r8, 0x0) write$char_usb(r9, &(0x7f0000000040)="bef28f1725b010665e5286750011d8683e2323850e84dc390da25397d98e9bb1400da342db2e683addaf7801523393c96d3e386999a59e711177737d3d2077880e3f6082e92a4cea0dc92c06c568dd00a6fe08a0cadbc61af5c23dad7ae4de16c3378866cc423850c7e2fef4b0e54b411e3a9ba20afe2444ef51f96c182c75422d3617c56042ced86fe63d3a1db676a0529e90f1d476b53a0df74af247c093857070efbcf7ed1e03ba92188738680d69e408f96e068c77fbd4e7649a26e090da", 0xc0) ptrace(0x10, r2) ptrace$setregs(0x11, r2, 0x0, &(0x7f0000000540)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f000014f000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x1f, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r10, 0x4080aebf, &(0x7f0000005740)={{0x0, 0x0, 0x80, {0x0, 0x5000}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="65660fc736b9230200000f320fc5b0040000000f0f10970fe8fa640f01cfc4e21d4501c744240000000000c74424021c320000c744240600000000c4e17de69222ad2eec0e476e04b8200fae82ef66bafc0c66b8004066ef66b8296c", 0x5c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 2.315980693s ago: executing program 4 (id=533): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000080)={0x3, 0xffffffff, 0x2, 0x5, 0x400, 0x560}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="020000002b8c4ac24245739c02000200", @ANYRES32=0x0, @ANYBLOB="04000000000000001000a430000000002000000000000000"], 0x51, 0x1) 2.193061775s ago: executing program 0 (id=535): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000140)=0x3ff, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x217d, 0x4) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000005740)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40000040, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) write(r2, &(0x7f0000000140)="240000001e00fffffff881ff00081d000000000000000800090a00cf9aa5fba4dafbd70d", 0x24) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x53, 0x0, &(0x7f0000000400)="892a7863af87409b1b8fe4e183cc4e2c2eddca324f8c2a61fb078c81d7272d92b902bf051aacb6decd83ec368991a0d7599c3ce3f7bed9d8078ba649896475d964ddb0c6d4d498b0ef80a3f6170b75654851be"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000340)=[@increfs], 0x0, 0x0, 0x0}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x82e43, 0x0) 1.557392805s ago: executing program 2 (id=536): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x145480, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) read(r0, &(0x7f0000000040)=""/123, 0x7b) r1 = socket$packet(0x11, 0x3, 0x300) accept$packet(r1, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000380)={0x1, 0x1, 0x0, 0x0, 0x0, 0x8000000}) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/222, 0xde}], 0x1, 0x6, 0x5c, 0x19) 1.479017217s ago: executing program 2 (id=537): clock_adjtime(0x0, &(0x7f0000000200)={0x1000000000d1, 0x8000000000000001, 0x80000001, 0xd6, 0x9c7, 0xff, 0x100, 0xd5e3, 0x7, 0x7ffd, 0x3, 0x7, 0xf2e8, 0x8000000000000001, 0x6, 0x8, 0x9, 0x1fc00000000, 0x81, 0x6, 0x2, 0x4d8, 0x8, 0x200, 0x8001, 0x4}) (async) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x2002000, &(0x7f0000000000)=ANY=[@ANYBLOB='defcontext', @ANYRESOCT]) 1.478407137s ago: executing program 2 (id=538): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000700)="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", 0x5ad}], 0x1}}], 0x1, 0x4004404) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='fscontext?}']) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20801, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x1, 0x16b, 0x1, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x2}, 0x88, 0x3, 0x0, 0x0, "ae771949a0cb35d4"}}, 0x48}}, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="650fc72c16440f20c0350a000000a7aaaa22c00f784e008fe878c2e40066b805008ed0b8090000000f23c00f21f835030003000f23f8c4c3b54097988765f10b660f38827dafc744240000000000c744240261000000c7442406000000000f011424c4c2fd2a8c9d7d080000", 0x6c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@redirect_dir_on}, {@default_permissions}, {@uuid_auto}, {@xino_on}, {@xino_on}, {@metacopy_off}, {@uuid_null}, {@workdir={'workdir', 0x3d, './file0'}}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'binder\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@subj_role={'subj_role', 0x3d, 'binder\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '!&,]{+\xe4][*'}}]}) 1.318692469s ago: executing program 0 (id=539): ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r1, 0x0, 0x20000000) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x8241, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x40, 0x5, [{{0x9, 0x4, 0x0, 0xc, 0x1, 0x3, 0x1, 0x2, 0x10, {0x9, 0x21, 0xf0, 0x10, 0x1, {0x22, 0x248}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0x80, 0x41}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0xd, 0x8, 0x4}}]}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0xd5, 0xbc, 0x1, 0xff, 0x6}, 0x42, &(0x7f0000000240)={0x5, 0xf, 0x42, 0x5, [@ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x2, 0xf, 0x7fff, [0xc00f, 0xff000f, 0xf0, 0xc0]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x8, 0x7, 0x1000}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x10, "eacff84d7ba601d3e39691c61b7fae6c"}]}, 0x4, [{0xfa, &(0x7f0000000300)=@string={0xfa, 0x3, "fa7abb520e4afa78407e96d2ffd5ee97c86a721cb0a4652b92bd3ba0909a9267619cc02a02bee9c7654c91f6f59709b19cb8708e82dc9d86eb93000f942a7d33fd40548a388074d9e6e89301f2b2c99d2b2684cc1e0e4c7d8357492878000a5f01a3f4cf15b6ffa3c6f30ef699bab5dd226011c51e83bf2eeafd55bc04cb0909370141badd91204bdaebb858bd7e332f0d601c472f1f7bc6157ff5c922c8ff594f4da01b5f3f95e1edde47bf6b41727a7cbeac4372f5bdcdb37c0c56695c252589283a1c6871047cdfe0982397ae96cd12772d227aa937a034e8cddf116ecd61f4a5c1849e4fe4f8d43c6b2788ee93d03424c1f0f0306d52"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x807}}, {0x54, &(0x7f0000000440)=@string={0x54, 0x3, "b2b09ed8ba191fb2cdcc2a35a0a4ba1fad7381057d41aa405916a3959d76331d7a19f13befa28f36afc10cfdf25b8a6ded3a2a8b891cc1586ab9decb0644c2625570951a5936878353fc3c2a43baad05b8c2"}}]}) syz_usb_control_io$hid(r4, &(0x7f0000000700)={0x24, &(0x7f0000000540)={0x0, 0x30, 0xe0, {0xe0, 0x21, "820413aa4fa0393ce78b041d6e2ec91561e01597f33cb7d783578988737d595fb1314f624ed8e480b428348fa6dd3248861006fed2b46b214526b1cd55a1108ad939d4fbda94b68a78bfb9e48781ee25a2e0b7743a14b47ebf0d8041ad50cb95ee3caa98b6fe63a331e1a8d1466487b4c12972f03c466b5f9ddda9aa33e85ab6025033acadedb8ae15aefd291313f429056df50623d7e4968708903fa74f22eb4c1b8ea26076569f61d8debdde88016cfe3bc78db5514cb73f9ca07aee4b7807dd5bf8810bb68e976676829ef38b78be7be33525bc4e2522624b43e8799e"}}, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x860}}, &(0x7f0000000680)={0x0, 0x22, 0x27, {[@main=@item_4={0x3, 0x0, 0x9, "1262e84d"}, @local=@item_4={0x3, 0x2, 0x8, "90a3d123"}, @local=@item_012={0x0, 0x2, 0x8}, @main=@item_4={0x3, 0x0, 0x9, "66e949ed"}, @main=@item_4={0x3, 0x0, 0x8, "90f52866"}, @main=@item_4={0x3, 0x0, 0xc, "5ccc954c"}, @main=@item_012={0x2, 0x0, 0x2, "fddb"}, @local=@item_4={0x3, 0x2, 0x2, "b35239de"}, @global=@item_4={0x3, 0x1, 0x66f45aab6b5ea113, "884e74fc"}]}}, &(0x7f00000006c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfffa, 0x6, 0x1, {0x22, 0xcce}}}}, &(0x7f0000000940)={0x2c, &(0x7f0000000740)={0x40, 0x17, 0xa9, "7ea8a61f49a688a7cdfc257149674f7f24183305fc3a58ca75ed920b00f23be970ae67809f9690d9f9fe4d0c5acc2e42b678b4c8ea9e91bcc949e23abd699a8f95ea5d5bc7c87ad9b945d81b233445e6eec9c5e2ff5b501c04c66797c8c8e3e604d1c9f6f172e713527cb03bf0300e26fc6ba6dbf441e7d17f7288391cacda1cf639e02f1382179b3671b21bfffebda531c6eab974b993861c9179220814dfde9e494d671eae2f56f0"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000880)={0x20, 0x1, 0x61, "6d28698997a37a6a90f6c9afc9d2765df2b8f2616a37414d80feb21e5c39ca9e4a914f7b304b487b5dc6fc897f94171f365eabe4e75163d5dd31d38ea90a35f81dce6604bcc9f70051a155568c876eb4cd919f19a54e6ad64f137d7a5b8a6becae"}, &(0x7f0000000900)={0x20, 0x3, 0x1, 0xff}}) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xd) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000200)={0x0, 0x4a, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r2, 0x1, 0x0, 0x25dfdbfb, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x80, 0x20}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c8e}, 0x4050) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r7, 0x8953, 0x0) syz_clone(0x20040000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.30310402s ago: executing program 2 (id=540): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup2(r0, r0) connect$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0xd6, 0x6, @multicast}, 0x14) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x12, 0x0, 0x101}}) ioctl$KVM_CREATE_VCPU(r2, 0x40087707, 0x2) 1.202867911s ago: executing program 2 (id=541): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) (async) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_linger(r1, 0x1, 0xd, 0x0, &(0x7f00000002c0)) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x2020, @empty}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, &(0x7f0000000000)=0x4ba, 0x4) (async, rerun: 64) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) (async, rerun: 64) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r5 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x2, 0x0, 0x0, 0xa, 0x1, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "0609e8dbe108598948224ad5cafac11d875397bdc02d0000b420a1a93c524bfe4ab10000000000008dd4992861ac0100", "90be8b1c551265406c7f306003d8a0f4bd00"}}) (async) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6) (async, rerun: 32) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000080)=""/85, 0x55}], 0x1, 0xfffffff9, 0x7, 0xd) (async, rerun: 32) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000ed3000/0x3000)=nil, 0x3000}, 0x1}) (async) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x10}], 0x5b, 0x0, 0x0}) 1.150671302s ago: executing program 2 (id=542): getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sched_setaffinity(0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendto$inet_nvme_of_msg(0xffffffffffffffff, &(0x7f0000001240)={@data_h2c_no_hdigest={{0x6, 0x3, 0x18, 0x18, 0x953}, 0x100, 0xd0, 0x23, 0x4, "b3429b0a"}, @val=0x0}, 0x88, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x309, &(0x7f0000001480)={{0x12, 0x1, 0x110, 0xf2, 0x15, 0x49, 0x20, 0x19ab, 0x1000, 0x6e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f7, 0x1, 0x4, 0x6f, 0x0, 0x7, [{{0x9, 0x4, 0x7e, 0x8, 0xd, 0xe, 0x1, 0x0, 0x4, [@uac_as={[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xd, 0x1, 0xf8, 0xa, "3d87018b158a"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x7, 0x1, 0x63, 0x9, 'g'}]}], [{{0x9, 0x5, 0xe, 0x0, 0x10, 0x5, 0x1, 0x3, [@generic={0xa0, 0x5, "3c0b790e76f5dc0ec3df668a972a7d7f9f0fc317651613723482489851d553284debacb78c1550b2683826148314e3a8323c2ace566ab066c20c04dd93583fa27268d9fbaa8f5b797d5f8cbeceffe5afd984bad959139c89f32d4eafabd32b587a2e61ee4a61cc38762fcf2cf3a69a966287dfa7e090aafc99b4558df86e20b6bb57e8c5e74257d4dfb8267ad66f5b715d4bd3b8e302fc28b5c603cdd140"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xc1, 0x6}]}}, {{0x9, 0x5, 0x8, 0x8, 0x8, 0x7, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3f}]}}, {{0x9, 0x5, 0x9, 0xc, 0x400, 0x40, 0xa3, 0xf, [@generic={0x6c, 0x9, "046e000e1c9213c2132d1975f374d225c5d291e903cbb612feb39e5b4c718871fbd490efba0c930ac86a7f3f77e2dfb447d2da42ed819db626bc5f95ac7dd6649025ccfc0e507129e88e9e98b44122e7332702aabe426b289c0c912725ff89b5f436349413cbd3c11d5c"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0xe92}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x5, 0xb, 0x80, [@generic={0x63, 0x30, "0a4344fc44d6285c2c99115e5f64374da4688334d568b3549d9b9a65e9d993392583d84a7fb1fc2d4faefd15b353c643e8bae8cdbc6368c0ebbed544d018e12c8504e56bb1f1ac243d978440dbf6d18968179b7df96ed1796c563becd9052a2c4d"}, @generic={0x2, 0x23}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x80, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x2}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x3, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x9}]}}, {{0x9, 0x5, 0xb, 0x3, 0x40, 0x3, 0x7e, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x2}]}}, {{0x9, 0x5, 0x3, 0x8, 0x3ff, 0x80, 0x4, 0x6, [@generic={0xac, 0xe, "8b9b82b5f8b54feef9aebeb69ffc868e8a5784d2c1ff436777756b70c932302cfb58c493bab759849fa4c00d4979e6d155392620dc2fdc96eda402aff3e145d292ee83195cdfef5a22fa229c3ee5fd96e62263feb5dca64a4c3c4d89eca66d64d6031638463a54e33be019374e88e9a766b3bdd7b0d8d90df7d4e8a05625eca7fada4dd81e47597a52216279f5723172f8bc3a9178365632392cdb4c48e9d0b16e30dceedfaaa98ef2c6"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x9, 0x9, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xe4, 0xac1}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x2, 0x4, 0x10, [@generic={0x2, 0x4}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x6, 0xd, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x41, 0x8, 0x4}, @generic={0x2, 0x6}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0xa, 0x25, 0x1}}, {{0x9, 0x5, 0x1, 0x4, 0x40, 0xc0, 0x4, 0x5}}]}}]}}]}}, &(0x7f0000001d40)={0xa, &(0x7f0000001b00)={0xa, 0x6, 0x200, 0x28, 0x81, 0x7, 0xff, 0xfb}, 0x10, &(0x7f0000001b40)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x96, 0x10, 0x7f, 0x9}]}, 0x3, [{0xa4, &(0x7f0000001b80)=@string={0xa4, 0x3, "79d6bede7dad12747176de7d07ceeb945e2edb6ab7e694a89b822a5416ea347854fe0e2f49e11166165558a600a2bf729bc1029d370676f4904ea43eed1e86ba38d483bffd38112e67d8d854a1de6e29ad91f5112c9ab13114b4e8ac17f5498ba8d4aade70131b590ed34c4d2e957d3f3f21fc0afd93c2f6c5f47d09f1c5c3654bfd72b96d2749ae02d8f33ae26bb1e72ed2853d41e42aa891dfa61b21e9df107e1c"}}, {0x81, &(0x7f0000001c40)=@string={0x81, 0x3, "7983d186d1fbbc57a689f80619b334a6e81f2bfa7e91cfaa0d16d80cafc7c9b95bf340bc80fb5e7548667269086c52182d48232041df5df28dadb9f111e355c53bf3069f81210efe18dedc5a07bcffe526a2bb67791a2422df1bcb61739e75b44948b1d9a4cd93886a7946e06abd0ce7188978108aec97d26a9b8e4b467548"}}, {0x2d, &(0x7f0000001d00)=@string={0x2d, 0x3, "f48e64df63824de73bc1bdc999b1de2a4e9b8f7283038cde121a3408c177b0c6ca9464eb0869e32a6fa7f3"}}]}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000003b00)={'syztnl2\x00', &(0x7f0000003a00)={'tunl0\x00', 0x0, 0x700, 0x80, 0x7, 0x10000, {{0x35, 0x4, 0x0, 0x2, 0xd4, 0x66, 0x0, 0x40, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@generic={0x83, 0xf, "544fccdf6ddd9455f1c3ee4089"}, @timestamp={0x44, 0x18, 0x4a, 0x0, 0x8, [0x7fffffff, 0x3e80000, 0x9, 0x4b, 0x3]}, @timestamp_addr={0x44, 0x1c, 0xc6, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@empty, 0x1ff}, {@rand_addr=0x64010100, 0x9}]}, @lsrr={0x83, 0xb, 0x23, [@broadcast, @local]}, @noop, @cipso={0x86, 0x25, 0x3, [{0x0, 0x2}, {0x0, 0x5, "b8b0a2"}, {0x6, 0xd, "0b72bcc603559cb287c50a"}, {0x5, 0xb, "42a7c77cbe7e918583"}]}, @ssrr={0x89, 0xf, 0xc3, [@multicast1, @empty, @multicast2]}, @rr={0x7, 0x17, 0xa, [@private=0xa010101, @broadcast, @local, @local, @remote]}, @timestamp={0x44, 0x24, 0x56, 0x0, 0x1, [0x6, 0x0, 0x5, 0x6, 0x10001, 0x5d3e1e9b, 0xc3, 0x2]}]}}}}}) 431.368073ms ago: executing program 0 (id=543): syz_open_procfs$userns(0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'lo\x00', &(0x7f0000000500)=@ethtool_per_queue_op={0x4b, 0xf, [0x9, 0x1ff, 0x7fff, 0x1c2, 0x0, 0x7, 0x81, 0x7, 0x6, 0x5, 0x3ff, 0x80, 0x0, 0x942f, 0x10, 0x10000, 0xe157, 0x1000, 0x65, 0x9, 0x4, 0x8, 0x6, 0x2, 0x5, 0x3, 0x92, 0x1d, 0x1, 0x0, 0xf0000000, 0x3, 0x9, 0x6, 0x47cd, 0x3, 0x8, 0xff, 0x6, 0x9, 0xb2d5, 0xf045, 0x2, 0x1ff, 0x351, 0x9, 0x9, 0x1, 0x2, 0x80000000, 0x0, 0x7fff, 0x91, 0xb7c, 0xc, 0x7, 0x80000001, 0x8, 0x2, 0x4, 0x9, 0x41, 0x8000, 0x4, 0x20b, 0x2, 0x2, 0x9, 0x6, 0x6, 0x8b, 0xfffff91a, 0x4, 0x8, 0x1, 0x101, 0x80000000, 0x8, 0x2, 0x2, 0x7, 0x81, 0x6, 0x4, 0x3, 0x6, 0xaf6, 0x1, 0x9, 0x2, 0x2, 0x6, 0x81, 0x19a400, 0xcb, 0x27, 0x9, 0xe, 0x4, 0x10001, 0x4c, 0x8, 0x3, 0x1, 0x3, 0x4, 0x7, 0x6, 0xfffffffa, 0x20000, 0x8, 0xfffffffb, 0x0, 0x5, 0x0, 0x9, 0x1, 0x3, 0x0, 0xfb, 0x6, 0x8000, 0x7, 0x3, 0x9, 0x4, 0x6, 0x5]}}) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000740)={&(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x38}, 0x4000014) 398.361974ms ago: executing program 4 (id=544): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@loopback, 0x78, r1}) r2 = socket(0x6, 0x4, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x3, 0xfffffffd}}) ioctl(r2, 0x891e, &(0x7f0000000000)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r4) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) ioctl$int_in(r5, 0x5452, &(0x7f00000001c0)=0x50) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) recvfrom$inet6(r5, &(0x7f0000000300)=""/218, 0xda, 0x120, 0x0, 0x0) shutdown(r5, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) r6 = gettid() io_setup(0x3, &(0x7f0000000000)=0x0) r8 = socket$unix(0x1, 0x1, 0x0) io_submit(r7, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0xb899, r8, &(0x7f0000000040), 0x0, 0x4}]) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) close_range(r0, r2, 0x0) futex(&(0x7f0000000080), 0x1, 0x0, 0x0, &(0x7f0000000100), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) setitimer(0x2, &(0x7f0000000b40)={{}, {0x0, 0x2710}}, 0x0) getitimer(0x2, &(0x7f0000000200)) 345.708194ms ago: executing program 0 (id=545): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x11) close_range(r0, r1, 0x0) uname(0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14) 258.972206ms ago: executing program 4 (id=546): pipe2$9p(&(0x7f0000005500)={0xffffffffffffffff}, 0x800) fcntl$getflags(r0, 0x408) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000540)={0xe57d4018dd50ea61, 0x0, &(0x7f0000725000/0x2000)=nil}) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) 142.984268ms ago: executing program 0 (id=547): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) socket(0x2, 0x4, 0x8) timer_create(0x2, 0x0, &(0x7f0000000480)) (async) timer_create(0x2, 0x0, &(0x7f0000000480)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000480)) (async) timer_create(0x2, 0x0, &(0x7f0000000480)=0x0) timer_settime(r1, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_delete(r1) bind$tipc(0xffffffffffffffff, 0x0, 0x0) (async) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) (async) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) r3 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x60) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000140)={'gretap0\x00', {0x2, 0x0, @multicast2}}) 142.325938ms ago: executing program 4 (id=548): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'vlan0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async, rerun: 64) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) (rerun: 64) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aa", 0xf, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) (async, rerun: 32) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) (rerun: 32) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$lock(r4, 0x6, &(0x7f00000006c0)={0x2, 0x1, 0x33eab16a, 0xfffffffffffffffe}) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = dup3(r3, r3, 0x80000) bind$tipc(r6, &(0x7f0000000100)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x3}}, 0x10) (async) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180), 0x0) (async) tee(r8, r2, 0x1, 0x8) (async, rerun: 64) write$binfmt_script(r9, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "d1113f85f729881f5f36ae4bd0caf8ce03aa27c8804d641e59040000007fd884a79195232e281832a5caaab9769dc24d77dddb3f2599eebf19fbd7aadcba6004ddfc054e"}, 0x4f) (async, rerun: 64) r10 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r10, 0x0, 0x0) (async) r11 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000040)={0x4000042, 0x83f}, 0x10) (async, rerun: 64) socket$tipc(0x1e, 0x5, 0x0) (rerun: 64) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/slabinfo\x00', 0x41, 0x0) write$FUSE_INTERRUPT(r12, 0x0, 0x0) (async, rerun: 64) bind$tipc(r9, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x3, 0xffbfffff}}, 0x10) (async, rerun: 64) sendmsg$tipc(r7, &(0x7f0000000540)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x1, 0x2}, 0x1}}, 0x10, 0x0}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000200)={0x41, 0x2, 0x2}, 0x10) 136.539868ms ago: executing program 0 (id=549): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="f40100000002"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000500), 0x309000, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000080)={0x11, 0x8, 0xc, 0x1a, 0x6, 0x80000000, 0x0, 0x21, 0x1}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="080026bd7000fcdbdf2501000000084f099be2ffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x60, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @flat=@binder={0x73622a85, 0x100a, 0x2}, @flat=@binder={0x73622a85, 0x3000, 0x2}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}, @acquire_done={0x40106309, 0x3}], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x40, 0x0, &(0x7f0000000140)=[@release={0x40046306, 0x1}, @decrefs={0x40046307, 0x1}, @free_buffer={0x40086303, r5}, @clear_death={0x400c630f, 0x1}, @increfs={0x40046304, 0x1}, @dead_binder_done], 0xae, 0x0, &(0x7f00000002c0)="25286777aa1d4179a26bad4386a323869edb973d5dffba4d482e2e5eb49417410d6bdc6a8f3936fa7104f4df718c4e348399d32dc6b1b6f44e713426c7d6ae112f9bf41e03c55c2d44a220299b8bc45f468e85ad1b74a41843cebfc9820d2611ca4b66844ee952294997648c976a0580855fe3ce32fb606a1eeb01aed88b0b36f75dd5e4aa0fd27cfceb3c70e5f208f3e7078a52b3ffd47abed4526112faf64bcb4c7b6304d2d55b49e898ff581f"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=550): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"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"}) (async) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x2, 0x20, 0x8, '\x00', 0x6}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): n item tag 0x0 [ 67.420616][ T1108] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 67.438994][ T31] hid-generic 01FF:0004:0400.0004: hidraw0: HID v0.05 Device [syz0] on syz1 [ 67.484219][ T1138] SELinux: Context /dev/kvm is not valid (left unmapped). [ 67.597383][ T1139] fido_id[1139]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 67.658476][ T1148] rust_binder: Write failure EINVAL in pid:120 [ 67.979616][ T332] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 67.996272][ T1159] SELinux: security_context_str_to_sid () failed with errno=-22 [ 68.100454][ T36] kauditd_printk_skb: 765 callbacks suppressed [ 68.100471][ T36] audit: type=1400 audit(1750766732.630:4908): avc: denied { read write } for pid=1163 comm="syz.0.237" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.163941][ T36] audit: type=1400 audit(1750766732.670:4909): avc: denied { mounton } for pid=1164 comm="syz.1.238" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.168116][ T332] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 68.202573][ T36] audit: type=1400 audit(1750766732.670:4910): avc: denied { read write open } for pid=1163 comm="syz.0.237" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.238300][ T332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 68.269594][ T332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 68.275777][ T36] audit: type=1400 audit(1750766732.670:4911): avc: denied { ioctl } for pid=1163 comm="syz.0.237" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.281389][ T332] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 68.308558][ T36] audit: type=1400 audit(1750766732.670:4912): avc: denied { ioctl } for pid=1163 comm="syz.0.237" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.347640][ T36] audit: type=1400 audit(1750766732.670:4913): avc: denied { ioctl } for pid=1163 comm="syz.0.237" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.349635][ T332] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 68.375723][ T36] audit: type=1400 audit(1750766732.670:4914): avc: denied { ioctl } for pid=1163 comm="syz.0.237" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.409605][ T332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.410792][ T31] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 68.429988][ T36] audit: type=1400 audit(1750766732.670:4915): avc: denied { mounton } for pid=1164 comm="syz.1.238" path="/79/memory.events" dev="tmpfs" ino=457 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 68.431167][ T332] usb 4-1: config 0 descriptor?? [ 68.459937][ T36] audit: type=1400 audit(1750766732.690:4916): avc: denied { ioctl } for pid=1149 comm="syz.3.230" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.523768][ T36] audit: type=1400 audit(1750766732.690:4917): avc: denied { ioctl } for pid=1149 comm="syz.3.230" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.642749][ T31] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 68.651374][ T31] usb 1-1: config 0 has no interface number 0 [ 68.658125][ T31] usb 1-1: config 0 interface 41 has no altsetting 0 [ 68.670321][ T31] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 68.680934][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.689408][ T31] usb 1-1: Product: syz [ 68.693938][ T31] usb 1-1: Manufacturer: syz [ 68.698890][ T31] usb 1-1: SerialNumber: syz [ 68.707151][ T31] usb 1-1: config 0 descriptor?? [ 68.920059][ T332] usbhid 4-1:0.0: can't add hid device: -71 [ 68.926251][ T332] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 68.964269][ T332] usb 4-1: USB disconnect, device number 16 [ 69.324781][ T1165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.237'. [ 69.336371][ T31] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 69.348812][ T31] usb 1-1: USB disconnect, device number 9 [ 69.531283][ T1185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.550071][ T1185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.740197][ T9] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 69.749438][ T9] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input9 [ 69.759657][ T802] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 69.773771][ T9] usb 3-1: USB disconnect, device number 9 [ 69.929581][ T802] usb 4-1: device descriptor read/64, error -71 [ 70.175102][ T31] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 70.189751][ T802] usb 4-1: device descriptor read/64, error -71 [ 70.364970][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.392540][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.413950][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 70.439602][ T802] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 70.449587][ T31] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 70.469051][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.492318][ T31] usb 1-1: config 0 descriptor?? [ 70.609887][ T802] usb 4-1: device descriptor read/64, error -71 [ 70.759976][ T31] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 70.799117][ T31] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 70.830731][ T31] usb 1-1: USB disconnect, device number 10 [ 70.870617][ T802] usb 4-1: device descriptor read/64, error -71 [ 70.910810][ T1200] fido_id[1200]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 70.999718][ T802] usb usb4-port1: attempt power cycle [ 71.259603][ T31] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 71.340338][ T802] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 71.349605][ T306] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 71.361961][ T802] usb 4-1: device descriptor read/8, error -71 [ 71.399607][ T31] usb 1-1: device descriptor read/64, error -71 [ 71.491870][ T802] usb 4-1: device descriptor read/8, error -71 [ 71.514650][ T306] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 71.527163][ T306] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 71.539094][ T306] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 71.549174][ T306] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 71.562813][ T306] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 71.572777][ T306] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.590681][ T306] usb 2-1: config 0 descriptor?? [ 71.639790][ T31] usb 1-1: device descriptor read/64, error -71 [ 71.729598][ T802] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 71.753712][ T802] usb 4-1: device descriptor read/8, error -71 [ 71.889634][ T31] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 71.904981][ T802] usb 4-1: device descriptor read/8, error -71 [ 72.009483][ T306] usbhid 2-1:0.0: can't add hid device: -71 [ 72.015897][ T306] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 72.024362][ T802] usb usb4-port1: unable to enumerate USB device [ 72.035799][ T306] usb 2-1: USB disconnect, device number 8 [ 72.041981][ T31] usb 1-1: device descriptor read/64, error -71 [ 72.299599][ T31] usb 1-1: device descriptor read/64, error -71 [ 72.409729][ T31] usb usb1-port1: attempt power cycle [ 72.569993][ T1226] binder: Unknown parameter 'fscontext?}' [ 72.749638][ T31] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 72.772412][ T31] usb 1-1: device descriptor read/8, error -71 [ 72.779733][ T397] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 72.901937][ T31] usb 1-1: device descriptor read/8, error -71 [ 72.929667][ T306] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 72.941851][ T397] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 72.955021][ T397] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 72.966650][ T397] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 72.977162][ T397] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 72.991021][ T397] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 73.001019][ T397] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.011564][ T397] usb 2-1: config 0 descriptor?? [ 73.079710][ T306] usb 4-1: Using ep0 maxpacket: 32 [ 73.089499][ T306] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 73.104601][ T306] usb 4-1: config 0 interface 0 has no altsetting 0 [ 73.111930][ T306] usb 4-1: New USB device found, idVendor=056a, idProduct=00f6, bcdDevice= 0.00 [ 73.122142][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.132380][ T306] usb 4-1: config 0 descriptor?? [ 73.138399][ T36] kauditd_printk_skb: 586 callbacks suppressed [ 73.138416][ T36] audit: type=1400 audit(1750766737.660:5504): avc: denied { ioctl } for pid=1227 comm="syz.3.260" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.175927][ T36] audit: type=1400 audit(1750766737.660:5505): avc: denied { ioctl } for pid=1227 comm="syz.3.260" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.179581][ T31] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 73.205807][ T36] audit: type=1400 audit(1750766737.660:5506): avc: denied { ioctl } for pid=1227 comm="syz.3.260" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.261806][ T36] audit: type=1400 audit(1750766737.660:5507): avc: denied { ioctl } for pid=1227 comm="syz.3.260" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.281322][ T31] usb 1-1: device descriptor read/8, error -71 [ 73.315386][ T1230] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 73.323923][ T36] audit: type=1400 audit(1750766737.780:5508): avc: denied { read write } for pid=291 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 73.351449][ T36] audit: type=1400 audit(1750766737.780:5509): avc: denied { read write open } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 73.379626][ T36] audit: type=1400 audit(1750766737.780:5510): avc: denied { ioctl } for pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 73.406771][ T36] audit: type=1400 audit(1750766737.790:5511): avc: denied { ioctl } for pid=1223 comm="syz.1.258" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.433750][ T36] audit: type=1400 audit(1750766737.790:5512): avc: denied { ioctl } for pid=1223 comm="syz.1.258" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.460149][ T36] audit: type=1400 audit(1750766737.790:5513): avc: denied { ioctl } for pid=1199 comm="syz.0.249" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.470155][ T397] plantronics 0003:047F:FFFF.0006: ignoring exceeding usage max [ 73.489113][ T31] usb 1-1: device descriptor read/8, error -71 [ 73.496903][ T397] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 73.514108][ T397] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 73.547296][ T306] wacom 0003:056A:00F6.0007: unknown main item tag 0x0 [ 73.566750][ T306] wacom 0003:056A:00F6.0007: unknown main item tag 0x0 [ 73.589857][ T306] wacom 0003:056A:00F6.0007: unknown main item tag 0x0 [ 73.598500][ T306] wacom 0003:056A:00F6.0007: unknown main item tag 0x0 [ 73.617228][ T306] wacom 0003:056A:00F6.0007: unknown main item tag 0x0 [ 73.631767][ T306] wacom 0003:056A:00F6.0007: hidraw1: USB HID v4.03 Device [HID 056a:00f6] on usb-dummy_hcd.3-1/input0 [ 73.650108][ T31] usb usb1-port1: unable to enumerate USB device [ 73.702855][ T1241] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:258 [ 73.756390][ T1228] rust_binder: Write failure EFAULT in pid:158 [ 73.787712][ T306] usb 4-1: USB disconnect, device number 21 [ 73.943289][ T1261] rust_binder: Write failure EINVAL in pid:147 [ 73.944237][ T1261] rust_binder: Write failure EINVAL in pid:147 [ 73.960260][ T1261] rust_binder: Write failure EINVAL in pid:147 [ 73.991013][ T1261] rust_binder: Write failure EINVAL in pid:147 [ 73.998615][ T1261] rust_binder: Write failure EINVAL in pid:147 [ 74.006991][ T1261] rust_binder: Write failure EINVAL in pid:147 [ 74.014893][ T1261] rust_binder: Write failure EINVAL in pid:147 [ 74.022756][ T1261] rust_binder: Write failure EINVAL in pid:147 [ 74.029825][ T1261] rust_binder: Write failure EINVAL in pid:147 [ 74.037239][ T1261] rust_binder: Write failure EINVAL in pid:147 [ 74.044117][ T1261] rust_binder: Write failure EINVAL in pid:147 [ 74.052461][ T1261] rust_binder: Write failure EINVAL in pid:147 [ 74.059606][ T1261] rust_binder: Write failure EINVAL in pid:147 [ 74.066361][ T1261] rust_binder: Write failure EINVAL in pid:147 [ 74.072399][ T1224] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:251 [ 74.073559][ T1261] rust_binder: Write failure EINVAL in pid:147 [ 74.079679][ T1224] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 74.090640][ T1261] rust_binder: Write failure EINVAL in pid:147 [ 74.096688][ T802] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 74.107087][ T1261] rust_binder: Write failure EINVAL in pid:147 [ 74.115236][ T1224] rust_binder: Read failure Err(EFAULT) in pid:251 [ 74.122106][ T1261] rust_binder: Write failure EINVAL in pid:147 [ 74.134221][ T306] usb 2-1: USB disconnect, device number 9 [ 74.136076][ T1261] rust_binder: Write failure EINVAL in pid:147 [ 74.161737][ T1261] rust_binder: Write failure EINVAL in pid:147 [ 74.168518][ T1261] rust_binder: Write failure EINVAL in pid:147 [ 74.182493][ T1261] rust_binder: Write failure EINVAL in pid:147 [ 74.189239][ T1261] rust_binder: Write failure EINVAL in pid:147 [ 74.196295][ T1261] rust_binder: Write failure EINVAL in pid:147 [ 74.203257][ T1261] rust_binder: Write failure EINVAL in pid:147 [ 74.210181][ T1261] rust_binder: Write failure EINVAL in pid:147 [ 74.216779][ T1261] rust_binder: Write failure EINVAL in pid:147 [ 74.224445][ T1261] rust_binder: Write failure EINVAL in pid:147 [ 74.231208][ T1261] rust_binder: Write failure EINVAL in pid:147 [ 74.238067][ T1261] rust_binder: Write failure EINVAL in pid:147 [ 74.244813][ T1261] rust_binder: Write failure EINVAL in pid:147 [ 74.251415][ T1261] rust_binder: Write failure EINVAL in pid:147 [ 74.257755][ T1261] rust_binder: Write failure EINVAL in pid:147 [ 74.291886][ T802] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 74.311760][ T802] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 74.339590][ T802] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 74.360177][ T802] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 74.385063][ T802] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 74.394618][ T802] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.404279][ T802] usb 3-1: config 0 descriptor?? [ 74.822008][ T802] usbhid 3-1:0.0: can't add hid device: -71 [ 74.833949][ T802] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 74.843757][ T802] usb 3-1: USB disconnect, device number 10 [ 75.026092][ T1277] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.060834][ T1279] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.078583][ T1279] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:264 [ 75.085897][ T1280] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:264 [ 75.206294][ T1288] SELinux: Context system_u:object_r:modules_conf_t:s0 is not valid (left unmapped). [ 75.207836][ T1289] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.549613][ T306] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 75.712633][ T306] usb 1-1: config 1 interface 0 altsetting 253 bulk endpoint 0x3 has invalid maxpacket 1023 [ 75.723945][ T306] usb 1-1: config 1 interface 0 altsetting 253 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 75.737783][ T306] usb 1-1: config 1 interface 0 has no altsetting 0 [ 75.747037][ T306] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 75.758137][ T306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 75.767340][ T306] usb 1-1: SerialNumber: syz [ 75.779463][ T1288] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 76.074555][ T306] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 76.090013][ T306] usb 1-1: USB disconnect, device number 15 [ 76.798524][ T1324] kvm: pic: non byte write [ 76.834849][ T1324] random: crng reseeded on system resumption [ 76.901378][ T1330] FAULT_INJECTION: forcing a failure. [ 76.901378][ T1330] name fail_futex, interval 1, probability 0, space 0, times 1 [ 76.931180][ T1330] CPU: 0 UID: 0 PID: 1330 Comm: syz.2.291 Not tainted 6.12.30-syzkaller-g9d80e3254812 #0 0af3bb1b2b1f0d17039a87b1bb907b41f79d5270 [ 76.931215][ T1330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 76.931231][ T1330] Call Trace: [ 76.931238][ T1330] [ 76.931245][ T1330] __dump_stack+0x21/0x30 [ 76.931281][ T1330] dump_stack_lvl+0x10c/0x190 [ 76.931301][ T1330] ? __cfi_dump_stack_lvl+0x10/0x10 [ 76.931323][ T1330] dump_stack+0x19/0x20 [ 76.931342][ T1330] should_fail_ex+0x3d9/0x530 [ 76.931364][ T1330] should_fail+0xf/0x20 [ 76.931382][ T1330] get_futex_key+0x5ba/0x930 [ 76.931405][ T1330] ? pick_next_task_fair+0x870/0x900 [ 76.931426][ T1330] ? __cfi_get_futex_key+0x10/0x10 [ 76.931448][ T1330] ? _raw_spin_lock+0x8c/0x120 [ 76.931472][ T1330] ? futex_setup_timer+0xb4/0xd0 [ 76.931494][ T1330] futex_wait_requeue_pi+0x224/0x8a0 [ 76.931512][ T1330] ? __cfi_futex_wait_requeue_pi+0x10/0x10 [ 76.931531][ T1330] ? kstrtouint_from_user+0xfb/0x150 [ 76.931554][ T1330] ? __kasan_check_write+0x18/0x20 [ 76.931576][ T1330] ? proc_fail_nth_write+0x17e/0x210 [ 76.931595][ T1330] ? __cfi_futex_wake_mark+0x10/0x10 [ 76.931613][ T1330] ? vfs_write+0x8ba/0xe80 [ 76.931634][ T1330] ? irqentry_exit+0x4a/0x60 [ 76.931656][ T1330] do_futex+0x15e/0x500 [ 76.931679][ T1330] ? __cfi_do_futex+0x10/0x10 [ 76.931701][ T1330] ? mutex_unlock+0x8b/0x240 [ 76.931720][ T1330] ? __fget_files+0x2c5/0x340 [ 76.931752][ T1330] __se_sys_futex+0x28f/0x300 [ 76.931776][ T1330] ? fput+0x1a5/0x240 [ 76.931792][ T1330] ? __x64_sys_futex+0x110/0x110 [ 76.931816][ T1330] ? __kasan_check_write+0x18/0x20 [ 76.931837][ T1330] __x64_sys_futex+0xe9/0x110 [ 76.931861][ T1330] x64_sys_call+0x227f/0x2ee0 [ 76.931883][ T1330] do_syscall_64+0x58/0xf0 [ 76.931899][ T1330] ? clear_bhb_loop+0x50/0xa0 [ 76.931919][ T1330] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 76.931938][ T1330] RIP: 0033:0x7f9d00b8e929 [ 76.931957][ T1330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.931971][ T1330] RSP: 002b:00007f9d01a72038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 76.931997][ T1330] RAX: ffffffffffffffda RBX: 00007f9d00db5fa0 RCX: 00007f9d00b8e929 [ 76.932010][ T1330] RDX: 0000000000000000 RSI: 000080000000000b RDI: 000020000000cffc [ 76.932022][ T1330] RBP: 00007f9d01a72090 R08: 0000200000048000 R09: 0000000000000000 [ 76.932034][ T1330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.932044][ T1330] R13: 0000000000000000 R14: 00007f9d00db5fa0 R15: 00007ffc98484408 [ 76.932058][ T1330] [ 77.629600][ T802] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 77.779581][ T802] usb 4-1: Using ep0 maxpacket: 32 [ 77.793852][ T802] usb 4-1: config 4 has an invalid interface number: 126 but max is 0 [ 77.809868][ T802] usb 4-1: config 4 has an invalid interface descriptor of length 2, skipping [ 77.819791][ T802] usb 4-1: config 4 has no interface number 0 [ 77.838567][ T802] usb 4-1: config 4 interface 126 altsetting 8 has an endpoint descriptor with address 0x3C, changing to 0xC [ 77.850691][ T802] usb 4-1: config 4 interface 126 altsetting 8 endpoint 0xC has an invalid bInterval 118, changing to 10 [ 77.862440][ T802] usb 4-1: config 4 interface 126 altsetting 8 endpoint 0xC has invalid maxpacket 1657, setting to 1024 [ 77.887430][ T802] usb 4-1: config 4 interface 126 altsetting 8 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 77.907987][ T802] usb 4-1: config 4 interface 126 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 77.926058][ T802] usb 4-1: config 4 interface 126 altsetting 8 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 77.939153][ T1353] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 77.942492][ T1353] rust_binder: Error in use_page_slow: ESRCH [ 77.944565][ T802] usb 4-1: config 4 interface 126 altsetting 8 has a duplicate endpoint with address 0x3, skipping [ 77.967438][ T1353] rust_binder: use_range failure ESRCH [ 77.967468][ T1353] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 77.968403][ T802] usb 4-1: config 4 interface 126 altsetting 8 has a duplicate endpoint with address 0x3, skipping [ 77.978904][ T1353] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 77.982001][ T802] usb 4-1: config 4 interface 126 altsetting 8 has 11 endpoint descriptors, different from the interface descriptor's value: 15 [ 77.994812][ T1353] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:284 [ 78.003508][ T802] usb 4-1: config 4 interface 126 has no altsetting 0 [ 78.037049][ T802] usb 4-1: New USB device found, idVendor=19ab, idProduct=1000, bcdDevice= 0.6e [ 78.046899][ T802] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.055180][ T802] usb 4-1: Product: 軴艣섻즽놙⫞魎犏΃ᨒ࠴矁우铊椈⫣ꝯ [ 78.064236][ T802] usb 4-1: Manufacturer: 荹蛑﯑垼覦۸댙꘴Ῠ飼酾꫏ᘍ೘잯막뱀ﮀ畞晈楲氈ᡒ䠭‣궍압鼆ↁ︎嫜밇ꈦ枻᩹∤ᯟ懋鹳둵䡉춤袓祪뵪褘ၸ튗魪䮎畆 [ 78.095658][ T802] usb 4-1: SerialNumber: syz [ 78.106058][ T1339] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 78.155673][ T36] kauditd_printk_skb: 644 callbacks suppressed [ 78.155691][ T36] audit: type=1400 audit(1750766742.680:6158): avc: denied { read } for pid=1356 comm="syz.1.301" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 78.186263][ T36] audit: type=1400 audit(1750766742.680:6159): avc: denied { read open } for pid=1356 comm="syz.1.301" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 78.210232][ T36] audit: type=1400 audit(1750766742.680:6160): avc: denied { ioctl } for pid=1356 comm="syz.1.301" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 78.243628][ T36] audit: type=1400 audit(1750766742.690:6161): avc: denied { ioctl } for pid=1356 comm="syz.1.301" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 78.289109][ T36] audit: type=1400 audit(1750766742.810:6162): avc: denied { read write } for pid=289 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 78.315179][ T36] audit: type=1400 audit(1750766742.810:6163): avc: denied { read write open } for pid=289 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 78.349076][ T36] audit: type=1400 audit(1750766742.810:6164): avc: denied { ioctl } for pid=289 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 78.379633][ T36] audit: type=1400 audit(1750766742.870:6165): avc: denied { read } for pid=1362 comm="syz.0.302" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 78.394402][ T802] usb 4-1: Found UVC 0.00 device 軴艣섻즽놙⫞魎犏΃ᨒ࠴矁우铊椈⫣ꝯ (19ab:1000) [ 78.430606][ T36] audit: type=1400 audit(1750766742.870:6166): avc: denied { read open } for pid=1362 comm="syz.0.302" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 78.442487][ T802] usb 4-1: No valid video chain found. [ 78.485346][ T1365] 9pnet_fd: Insufficient options for proto=fd [ 78.498498][ T36] audit: type=1400 audit(1750766742.900:6167): avc: denied { map } for pid=1362 comm="syz.0.302" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 78.502733][ T802] usb 4-1: USB disconnect, device number 22 [ 78.532092][ T1365] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.533199][ T1365] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 78.548145][ T1365] rust_binder: Write failure EINVAL in pid:166 [ 78.604739][ T1367] FAULT_INJECTION: forcing a failure. [ 78.604739][ T1367] name fail_futex, interval 1, probability 0, space 0, times 0 [ 78.637958][ T1367] CPU: 0 UID: 0 PID: 1367 Comm: syz.1.304 Not tainted 6.12.30-syzkaller-g9d80e3254812 #0 0af3bb1b2b1f0d17039a87b1bb907b41f79d5270 [ 78.637997][ T1367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 78.638008][ T1367] Call Trace: [ 78.638015][ T1367] [ 78.638022][ T1367] __dump_stack+0x21/0x30 [ 78.638052][ T1367] dump_stack_lvl+0x10c/0x190 [ 78.638073][ T1367] ? __cfi_dump_stack_lvl+0x10/0x10 [ 78.638094][ T1367] dump_stack+0x19/0x20 [ 78.638113][ T1367] should_fail_ex+0x3d9/0x530 [ 78.638136][ T1367] should_fail+0xf/0x20 [ 78.638154][ T1367] get_futex_key+0x16b/0x930 [ 78.638180][ T1367] ? is_bpf_text_address+0x17b/0x1a0 [ 78.638205][ T1367] ? __cfi_get_futex_key+0x10/0x10 [ 78.638228][ T1367] futex_wait_setup+0x9f/0x260 [ 78.638246][ T1367] ? __cfi_futex_wait_setup+0x10/0x10 [ 78.638265][ T1367] ? futex_setup_timer+0xb4/0xd0 [ 78.638285][ T1367] futex_wait_requeue_pi+0x2b1/0x8a0 [ 78.638303][ T1367] ? __cfi_futex_wait_requeue_pi+0x10/0x10 [ 78.638322][ T1367] ? kstrtouint_from_user+0xfb/0x150 [ 78.638343][ T1367] ? __x64_sys_openat+0x13a/0x170 [ 78.638362][ T1367] ? x64_sys_call+0xe69/0x2ee0 [ 78.638387][ T1367] ? __kasan_check_write+0x18/0x20 [ 78.638409][ T1367] ? proc_fail_nth_write+0x17e/0x210 [ 78.638429][ T1367] ? __cfi_futex_wake_mark+0x10/0x10 [ 78.638445][ T1367] ? vfs_write+0x8ba/0xe80 [ 78.638464][ T1367] do_futex+0x15e/0x500 [ 78.638485][ T1367] ? __cfi_do_futex+0x10/0x10 [ 78.638506][ T1367] ? mutex_unlock+0x8b/0x240 [ 78.638525][ T1367] ? __fget_files+0x2c5/0x340 [ 78.638546][ T1367] __se_sys_futex+0x28f/0x300 [ 78.638565][ T1367] ? fput+0x1a5/0x240 [ 78.638580][ T1367] ? __x64_sys_futex+0x110/0x110 [ 78.638600][ T1367] ? __cfi_ksys_write+0x10/0x10 [ 78.638618][ T1367] __x64_sys_futex+0xe9/0x110 [ 78.638646][ T1367] x64_sys_call+0x227f/0x2ee0 [ 78.638674][ T1367] do_syscall_64+0x58/0xf0 [ 78.638689][ T1367] ? clear_bhb_loop+0x50/0xa0 [ 78.638714][ T1367] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 78.638732][ T1367] RIP: 0033:0x7feec0d8e929 [ 78.638749][ T1367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.638772][ T1367] RSP: 002b:00007feec1b2d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 78.638792][ T1367] RAX: ffffffffffffffda RBX: 00007feec0fb5fa0 RCX: 00007feec0d8e929 [ 78.638806][ T1367] RDX: 0000000000000000 RSI: 000080000000000b RDI: 000020000000cffc [ 78.638818][ T1367] RBP: 00007feec1b2d090 R08: 0000200000048000 R09: 0000000000000000 [ 78.638830][ T1367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.638841][ T1367] R13: 0000000000000000 R14: 00007feec0fb5fa0 R15: 00007fff2ceda748 [ 78.638855][ T1367] [ 78.923060][ T1371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.099689][ T1378] tipc: Started in network mode [ 79.150955][ T1378] tipc: Node identity , cluster identity 4711 [ 79.183279][ T1378] tipc: Failed to set node id, please configure manually [ 79.213849][ T1378] tipc: Enabling of bearer rejected, failed to enable media [ 79.359629][ T802] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 79.418457][ T1387] rust_binder: validate_parent_fixup: fixup_min_offset=50, parent_offset=26 [ 79.418482][ T1387] rust_binder: Error while translating object. [ 79.437946][ T1387] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 79.460820][ T1387] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:180 [ 79.466929][ T1389] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.509592][ T802] usb 1-1: device descriptor read/64, error -71 [ 79.514702][ T1390] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 79.522669][ T1390] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:294 [ 79.613700][ T397] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 79.769623][ T802] usb 1-1: device descriptor read/64, error -71 [ 79.809592][ T397] usb 3-1: Using ep0 maxpacket: 16 [ 79.836593][ T397] usb 3-1: config 6 has an invalid interface number: 247 but max is 2 [ 79.858416][ T397] usb 3-1: config 6 has an invalid interface number: 163 but max is 2 [ 79.868193][ T397] usb 3-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 79.878937][ T397] usb 3-1: config 6 has an invalid interface number: 19 but max is 2 [ 79.888048][ T397] usb 3-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 79.898853][ T397] usb 3-1: config 6 has an invalid descriptor of length 166, skipping remainder of the config [ 79.910101][ T397] usb 3-1: config 6 has no interface number 0 [ 79.916324][ T397] usb 3-1: config 6 has no interface number 1 [ 79.929646][ T397] usb 3-1: config 6 has no interface number 2 [ 79.937742][ T397] usb 3-1: config 6 interface 163 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 79.950216][ T397] usb 3-1: config 6 interface 163 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 79.961413][ T397] usb 3-1: config 6 interface 163 altsetting 0 has an endpoint descriptor with address 0xB2, changing to 0x82 [ 79.974294][ T397] usb 3-1: config 6 interface 163 altsetting 0 endpoint 0x82 has invalid maxpacket 247, setting to 64 [ 79.986384][ T397] usb 3-1: config 6 interface 163 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 64 [ 79.996891][ T397] usb 3-1: config 6 interface 163 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 80.008344][ T397] usb 3-1: config 6 interface 163 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 80.019593][ T802] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 80.027330][ T397] usb 3-1: config 6 interface 163 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 80.038975][ T397] usb 3-1: config 6 interface 163 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 80.053346][ T397] usb 3-1: config 6 interface 19 altsetting 7 has an invalid endpoint descriptor of length 2, skipping [ 80.075604][ T397] usb 3-1: config 6 interface 19 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 80.089487][ T397] usb 3-1: config 6 interface 247 has no altsetting 0 [ 80.097294][ T397] usb 3-1: config 6 interface 19 has no altsetting 0 [ 80.107615][ T397] usb 3-1: New USB device found, idVendor=0421, idProduct=048e, bcdDevice=6c.18 [ 80.139591][ T397] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.148267][ T397] usb 3-1: Product: 勨籂ᢅౖ잤絝棴솣ｧ巘渢芸爈蕙﬛릇ᩐ䍖粘㫨缋锃ﵤ㛣暫贈ᥤ陿岔﯋뗣혇㸐煱◇纜庱㽴푌ࠑĴ琥ㆆ燳㻂遤湅㛭௽㟫Ɓ乾ꞯꢶᮃੇퟌ蘟⍔︀꫰Ӭ梎制䢷▖悡딇鍃躺帑知ೄ㋞䠛췖㣯貑ലᒼ睐禵驇谷箔诫㗦ೲ輓蠷鱐틾߲椅꼺 [ 80.186753][ T397] usb 3-1: Manufacturer: ྖ䋒證ꝥ뷰兗壇莌枱ᐺᴗ納匉毪噦㨙뤤巢竈䌅腇ⲛ쾢‷䵺舥᎖隩ᯰ逍匭꥕ꍤ俉㛘佨乔洤굢控彏匢䆘俠ᖏꗅ캇죦ܬ楳鵔ȣ焜隷첆菀⛅煲籯桖옕瑏⾳剝Թ퓽趷䗎詴讏㑌フ⯲ꍰӥ怜ꪣ곟뿪㚋ᤶ褩檵퉖實먱芟귋옔⏐ [ 80.216580][ T802] usb 1-1: device descriptor read/64, error -71 [ 80.217473][ T397] usb 3-1: SerialNumber: ࠓ [ 80.468771][ T397] rndis_host 3-1:6.247: skipping garbage [ 80.479640][ T802] usb 1-1: device descriptor read/64, error -71 [ 80.484921][ T397] usb 3-1: bad CDC descriptors [ 80.499613][ T45] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 80.500677][ T397] cdc_acm 3-1:6.247: skipping garbage [ 80.531985][ T397] usb 3-1: USB disconnect, device number 11 [ 80.590133][ T802] usb usb1-port1: attempt power cycle [ 80.662091][ T45] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 80.670608][ T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.682171][ T45] usb 2-1: config 0 has no interface number 0 [ 80.688372][ T45] usb 2-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 80.701301][ T45] usb 2-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7 [ 80.710369][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.721261][ T45] usb 2-1: config 0 descriptor?? [ 80.787059][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 80.949710][ T802] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 80.981611][ T802] usb 1-1: device descriptor read/8, error -71 [ 80.983126][ T397] usb 2-1: USB disconnect, device number 10 [ 81.113972][ T802] usb 1-1: device descriptor read/8, error -71 [ 81.134335][ T1413] rust_binder: Write failure EFAULT in pid:192 [ 81.275268][ T1419] rust_binder: Error while translating object. [ 81.297168][ T1419] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 81.303787][ T1419] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:307 [ 81.379641][ T802] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 81.427607][ T802] usb 1-1: device descriptor read/8, error -71 [ 81.470814][ T1426] binder: Binderfs stats mode cannot be changed during a remount [ 81.563247][ T802] usb 1-1: device descriptor read/8, error -71 [ 81.578470][ T1432] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.679786][ T802] usb usb1-port1: unable to enumerate USB device [ 81.749652][ T45] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 81.819680][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 81.902154][ T45] usb 3-1: not running at top speed; connect to a high speed hub [ 81.912258][ T45] usb 3-1: config 1 has an invalid interface number: 232 but max is 3 [ 81.920538][ T45] usb 3-1: config 1 has an invalid interface number: 6 but max is 3 [ 81.928870][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.940030][ T45] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 4 [ 81.949097][ T45] usb 3-1: config 1 has no interface number 0 [ 81.955335][ T45] usb 3-1: config 1 has no interface number 1 [ 81.961513][ T45] usb 3-1: too many endpoints for config 1 interface 6 altsetting 192: 242, using maximum allowed: 30 [ 81.972781][ T45] usb 3-1: config 1 interface 6 altsetting 192 has 0 endpoint descriptors, different from the interface descriptor's value: 242 [ 81.986098][ T45] usb 3-1: config 1 interface 232 has no altsetting 0 [ 81.992983][ T45] usb 3-1: config 1 interface 6 has no altsetting 0 [ 81.997407][ T9] usb 2-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 82.003350][ T45] usb 3-1: New USB device found, idVendor=15a9, idProduct=0006, bcdDevice=aa.4e [ 82.009871][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.019959][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.028112][ T9] usb 2-1: Product: syz [ 82.039343][ T9] usb 2-1: Manufacturer: syz [ 82.045558][ T9] usb 2-1: SerialNumber: syz [ 82.051163][ T45] usb 3-1: Product: syz [ 82.056854][ T45] usb 3-1: Manufacturer: చ [ 82.069568][ T45] usb 3-1: SerialNumber: syz [ 82.287227][ T1428] rust_binder: inc_ref_done called when no active inc_refs [ 82.289394][ T1428] rust_binder: Error while translating object. [ 82.302572][ T1428] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 82.310506][ T1428] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:314 [ 82.328859][ T45] usb 3-1: USB disconnect, device number 12 [ 82.500116][ T802] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 82.558008][ T1447] FAULT_INJECTION: forcing a failure. [ 82.558008][ T1447] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 82.575791][ T1447] CPU: 1 UID: 0 PID: 1447 Comm: syz.1.329 Not tainted 6.12.30-syzkaller-g9d80e3254812 #0 0af3bb1b2b1f0d17039a87b1bb907b41f79d5270 [ 82.575824][ T1447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 82.575834][ T1447] Call Trace: [ 82.575840][ T1447] [ 82.575847][ T1447] __dump_stack+0x21/0x30 [ 82.575875][ T1447] dump_stack_lvl+0x10c/0x190 [ 82.575896][ T1447] ? __cfi_dump_stack_lvl+0x10/0x10 [ 82.575915][ T1447] ? kstrtoull+0x13b/0x1e0 [ 82.575934][ T1447] dump_stack+0x19/0x20 [ 82.575952][ T1447] should_fail_ex+0x3d9/0x530 [ 82.575973][ T1447] should_fail+0xf/0x20 [ 82.575990][ T1447] should_fail_usercopy+0x1e/0x30 [ 82.576010][ T1447] _copy_from_user+0x22/0xb0 [ 82.576032][ T1447] ___sys_sendmsg+0x159/0x2a0 [ 82.576051][ T1447] ? __sys_sendmsg+0x280/0x280 [ 82.576068][ T1447] ? proc_fail_nth_write+0x17e/0x210 [ 82.576088][ T1447] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 82.576110][ T1447] __x64_sys_sendmsg+0x1eb/0x2c0 [ 82.576128][ T1447] ? fput+0x1a5/0x240 [ 82.576145][ T1447] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 82.576164][ T1447] ? ksys_write+0x1ef/0x250 [ 82.576187][ T1447] ? __kasan_check_read+0x15/0x20 [ 82.576207][ T1447] x64_sys_call+0x2a4c/0x2ee0 [ 82.576229][ T1447] do_syscall_64+0x58/0xf0 [ 82.576245][ T1447] ? clear_bhb_loop+0x50/0xa0 [ 82.576264][ T1447] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 82.576282][ T1447] RIP: 0033:0x7feec0d8e929 [ 82.576297][ T1447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.576313][ T1447] RSP: 002b:00007feec1b2d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.576334][ T1447] RAX: ffffffffffffffda RBX: 00007feec0fb5fa0 RCX: 00007feec0d8e929 [ 82.576348][ T1447] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 82.576361][ T1447] RBP: 00007feec1b2d090 R08: 0000000000000000 R09: 0000000000000000 [ 82.576371][ T1447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.576381][ T1447] R13: 0000000000000000 R14: 00007feec0fb5fa0 R15: 00007fff2ceda748 [ 82.576395][ T1447] [ 82.578366][ T1446] rust_binder: Write failure EFAULT in pid:203 [ 82.657863][ T1449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.829587][ T802] usb 1-1: Using ep0 maxpacket: 32 [ 82.840788][ T802] usb 1-1: too many configurations: 236, using maximum allowed: 8 [ 82.868570][ T802] usb 1-1: config 0 has no interfaces? [ 82.877705][ T802] usb 1-1: config 0 has no interfaces? [ 82.892965][ T802] usb 1-1: config 0 has no interfaces? [ 82.895481][ T1449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.901916][ T802] usb 1-1: config 0 has no interfaces? [ 82.928575][ T802] usb 1-1: config 0 has no interfaces? [ 82.934900][ T1449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.955660][ T802] usb 1-1: config 0 has no interfaces? [ 82.970567][ T802] usb 1-1: config 0 has no interfaces? [ 82.979565][ T1453] rust_binder: Write failure EINVAL in pid:316 [ 82.979948][ T1453] rust_binder: Read failure Err(EAGAIN) in pid:316 [ 82.984551][ T802] usb 1-1: config 0 has no interfaces? [ 83.002435][ T802] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 83.012179][ T802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 83.021580][ T1454] rust_binder: Write failure EINVAL in pid:316 [ 83.022282][ T1453] rust_binder: Read failure Err(EAGAIN) in pid:316 [ 83.023082][ T1455] rust_binder: Write failure EINVAL in pid:316 [ 83.051779][ T802] usb 1-1: Product: syz [ 83.072343][ T802] usb 1-1: Manufacturer: syz [ 83.077035][ T802] usb 1-1: SerialNumber: syz [ 83.090741][ T802] usb 1-1: config 0 descriptor?? [ 83.156660][ T1459] netlink: 12 bytes leftover after parsing attributes in process `syz.3.334'. [ 83.166198][ T36] kauditd_printk_skb: 701 callbacks suppressed [ 83.166214][ T36] audit: type=1400 audit(1750766747.700:6869): avc: denied { create } for pid=1457 comm="syz.2.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.209582][ T36] audit: type=1400 audit(1750766747.720:6870): avc: denied { connect } for pid=1457 comm="syz.2.335" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.243355][ T36] audit: type=1400 audit(1750766747.720:6871): avc: denied { ioctl } for pid=1458 comm="syz.3.334" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 83.292080][ T36] audit: type=1400 audit(1750766747.740:6872): avc: denied { write } for pid=1457 comm="syz.2.335" path="socket:[10217]" dev="sockfs" ino=10217 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.343500][ T9] usb 2-1: Found UVC 0.00 device syz (093a:2476) [ 83.355863][ T802] usb 1-1: USB disconnect, device number 20 [ 83.365750][ T9] usb 2-1: No valid video chain found. [ 83.397191][ T9] usb 2-1: USB disconnect, device number 11 [ 83.399590][ T36] audit: type=1400 audit(1750766747.740:6873): avc: denied { write } for pid=1457 comm="syz.2.335" laddr=::1 lport=135 faddr=::1 fport=65533 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.479311][ T36] audit: type=1400 audit(1750766747.740:6874): avc: denied { ioctl } for pid=1457 comm="syz.2.335" path="/dev/binderfs/binder1" dev="binder" ino=8 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 83.610642][ T36] audit: type=1400 audit(1750766747.740:6875): avc: denied { set_context_mgr } for pid=1457 comm="syz.2.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 83.699496][ T36] audit: type=1400 audit(1750766747.750:6876): avc: denied { read } for pid=1457 comm="syz.2.335" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 83.774962][ T36] audit: type=1400 audit(1750766747.750:6877): avc: denied { read open } for pid=1457 comm="syz.2.335" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 83.864970][ T36] audit: type=1400 audit(1750766747.760:6878): avc: denied { read write } for pid=290 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 84.016994][ T1474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.340'. [ 84.141441][ T1479] binder: Unknown parameter '' [ 84.624150][ T1492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.348'. [ 84.654008][ T1494] netlink: 57 bytes leftover after parsing attributes in process `syz.0.349'. [ 84.700849][ T1494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.349'. [ 85.170815][ T1506] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 85.204587][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 85.399648][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 85.431686][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.461919][ T10] usb 4-1: config 0 has no interfaces? [ 85.482755][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 85.493775][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.509709][ T10] usb 4-1: config 0 descriptor?? [ 85.679598][ T802] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 85.747512][ T1502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.765037][ T1502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.811124][ T10] usb 4-1: USB disconnect, device number 23 [ 85.862720][ T802] usb 3-1: Using ep0 maxpacket: 32 [ 85.880075][ T802] usb 3-1: config 4 has an invalid interface number: 126 but max is 0 [ 85.888950][ T802] usb 3-1: config 4 has an invalid interface descriptor of length 2, skipping [ 85.919576][ T802] usb 3-1: config 4 has no interface number 0 [ 85.925778][ T802] usb 3-1: config 4 interface 126 altsetting 8 has an endpoint descriptor with address 0x3C, changing to 0xC [ 85.949993][ T802] usb 3-1: config 4 interface 126 altsetting 8 endpoint 0xC has an invalid bInterval 118, changing to 10 [ 85.969592][ T802] usb 3-1: config 4 interface 126 altsetting 8 endpoint 0xC has invalid maxpacket 1657, setting to 1024 [ 85.999611][ T802] usb 3-1: config 4 interface 126 altsetting 8 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 86.019576][ T802] usb 3-1: config 4 interface 126 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 86.041377][ T802] usb 3-1: config 4 interface 126 altsetting 8 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 86.069572][ T802] usb 3-1: config 4 interface 126 altsetting 8 has a duplicate endpoint with address 0x3, skipping [ 86.090503][ T802] usb 3-1: config 4 interface 126 altsetting 8 has a duplicate endpoint with address 0x3, skipping [ 86.115635][ T802] usb 3-1: config 4 interface 126 altsetting 8 has 11 endpoint descriptors, different from the interface descriptor's value: 14 [ 86.129788][ T802] usb 3-1: config 4 interface 126 has no altsetting 0 [ 86.141576][ T802] usb 3-1: New USB device found, idVendor=19ab, idProduct=1000, bcdDevice= 0.6e [ 86.151150][ T802] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.159241][ T802] usb 3-1: Product: 軴艣섻즽놙⫞魎犏΃ᨒ࠴矁우铊椈⫣ꝯ [ 86.169378][ T802] usb 3-1: Manufacturer: 荹蛑﯑垼覦۸댙꘴Ῠ飼酾꫏ᘍ೘잯막뱀ﮀ畞晈楲氈ᡒ䠭‣궍압鼆ↁ︎嫜밇ꈦ枻᩹∤ᯟ懋鹳둵䡉춤袓祪뵪褘ၸ튗魪䮎畆 [ 86.190269][ T802] usb 3-1: SerialNumber: syz [ 86.198739][ T1516] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 86.269595][ T45] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 86.328976][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.329269][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.359264][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.367376][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.374892][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.382755][ T1526] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 86.396495][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.396755][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.403550][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.410315][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.412713][ T802] usb 3-1: Found UVC 0.00 device 軴艣섻즽놙⫞魎犏΃ᨒ࠴矁우铊椈⫣ꝯ (19ab:1000) [ 86.423495][ T1526] rust_binder: Write failure EINVAL in pid:338 [ 86.434671][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.442021][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.446547][ T802] usb 3-1: No valid video chain found. [ 86.450575][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.459642][ T802] usb 3-1: USB disconnect, device number 13 [ 86.462419][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.473008][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.474999][ T45] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 86.483020][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.487583][ T45] usb 4-1: config 0 has no interface number 0 [ 86.507191][ T45] usb 4-1: config 0 interface 184 has no altsetting 0 [ 86.514924][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.515182][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.525337][ T45] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=69.ee [ 86.529886][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.532192][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.555546][ T45] usb 4-1: Product: syz [ 86.559756][ T45] usb 4-1: Manufacturer: syz [ 86.560416][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.564633][ T45] usb 4-1: SerialNumber: syz [ 86.566301][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.577555][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.585016][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.589686][ T45] usb 4-1: config 0 descriptor?? [ 86.596515][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.603250][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.610338][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.617022][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.624487][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.631749][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.638608][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.646033][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.653261][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.660458][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.667104][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.673864][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.680557][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.687180][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.693894][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.700553][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.707140][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.713930][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.720557][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.727240][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.734200][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.740874][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.747589][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.754436][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.761062][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.767689][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.774454][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.781197][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.787778][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.794459][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.801237][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.807978][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.810084][ T802] usb 4-1: USB disconnect, device number 24 [ 86.814780][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.827835][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.834565][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.841273][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.847961][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.854711][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.861504][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.868300][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.875043][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.881783][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.888380][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.387086][ T1543] binder: Unknown parameter 'defcontext01777777777777777777777' [ 87.449583][ T397] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 87.611959][ T397] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.622460][ T397] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 87.637384][ T397] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 87.646687][ T397] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 87.654707][ T397] usb 3-1: SerialNumber: syz [ 87.662405][ T397] usb 3-1: bad CDC descriptors [ 88.324480][ T36] kauditd_printk_skb: 638 callbacks suppressed [ 88.324519][ T36] audit: type=1400 audit(1750766752.850:7517): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 88.337294][ T397] usb 3-1: USB disconnect, device number 14 [ 88.374028][ T36] audit: type=1400 audit(1750766752.900:7518): avc: denied { read write } for pid=290 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 88.402354][ T36] audit: type=1400 audit(1750766752.900:7519): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 88.466104][ T36] audit: type=1400 audit(1750766752.900:7520): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 88.499571][ T36] audit: type=1400 audit(1750766752.900:7521): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 88.527054][ T1560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.371'. [ 88.537928][ T36] audit: type=1400 audit(1750766752.900:7522): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 88.565074][ T36] audit: type=1400 audit(1750766752.930:7524): avc: denied { create } for pid=1555 comm="syz.3.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 88.612755][ T36] audit: type=1400 audit(1750766752.930:7523): avc: denied { read write } for pid=1555 comm="syz.3.369" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 88.641374][ T36] audit: type=1400 audit(1750766752.930:7525): avc: denied { read write open } for pid=1555 comm="syz.3.369" path="/dev/binderfs/binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 88.687891][ T36] audit: type=1400 audit(1750766752.930:7526): avc: denied { write } for pid=1555 comm="syz.3.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 88.769583][ T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 88.791097][ T1580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.376'. [ 88.932628][ T10] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 4 [ 88.946217][ T10] usb 4-1: can't read configurations, error -22 [ 89.100492][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 89.109589][ T1591] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 89.118379][ T1591] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 89.130398][ T1593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.381'. [ 89.160475][ T1591] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 89.205173][ T1594] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 89.317203][ T10] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 4 [ 89.339593][ T10] usb 4-1: can't read configurations, error -22 [ 89.347821][ T10] usb usb4-port1: attempt power cycle [ 89.690946][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 89.722819][ T10] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 4 [ 89.739578][ T10] usb 4-1: can't read configurations, error -22 [ 89.869642][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 89.912006][ T10] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 4 [ 89.921342][ T10] usb 4-1: can't read configurations, error -22 [ 89.928362][ T10] usb usb4-port1: unable to enumerate USB device [ 90.039593][ T31] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 90.189596][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 90.196821][ T31] usb 2-1: config 6 has an invalid interface number: 247 but max is 2 [ 90.205210][ T31] usb 2-1: config 6 has an invalid interface number: 163 but max is 2 [ 90.213560][ T31] usb 2-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 90.222348][ T31] usb 2-1: config 6 has an invalid interface number: 19 but max is 2 [ 90.230675][ T31] usb 2-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 90.239456][ T31] usb 2-1: config 6 has an invalid descriptor of length 166, skipping remainder of the config [ 90.249811][ T31] usb 2-1: config 6 has no interface number 0 [ 90.255895][ T31] usb 2-1: config 6 has no interface number 1 [ 90.262105][ T31] usb 2-1: config 6 has no interface number 2 [ 90.268207][ T31] usb 2-1: config 6 interface 163 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 90.279426][ T31] usb 2-1: config 6 interface 163 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 90.289294][ T31] usb 2-1: config 6 interface 163 altsetting 0 has an endpoint descriptor with address 0xB2, changing to 0x82 [ 90.303433][ T31] usb 2-1: config 6 interface 163 altsetting 0 endpoint 0x82 has invalid maxpacket 247, setting to 64 [ 90.314439][ T31] usb 2-1: config 6 interface 163 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 64 [ 90.324407][ T31] usb 2-1: config 6 interface 163 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 90.335146][ T31] usb 2-1: config 6 interface 163 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 90.345869][ T31] usb 2-1: config 6 interface 163 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 90.356627][ T31] usb 2-1: config 6 interface 163 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 90.370814][ T31] usb 2-1: config 6 interface 19 altsetting 7 has an invalid endpoint descriptor of length 2, skipping [ 90.382078][ T31] usb 2-1: config 6 interface 19 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 90.395159][ T31] usb 2-1: config 6 interface 247 has no altsetting 0 [ 90.402597][ T31] usb 2-1: config 6 interface 19 has no altsetting 0 [ 90.418088][ T31] usb 2-1: New USB device found, idVendor=0421, idProduct=048e, bcdDevice=6c.18 [ 90.428946][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.437717][ T31] usb 2-1: Product: 勨籂ᢅౖ잤絝棴솣ｧ巘渢芸爈蕙﬛릇ᩐ䍖粘㫨缋锃ﵤ㛣暫贈ᥤ陿岔﯋뗣혇㸐煱◇纜庱㽴푌ࠑĴ琥ㆆ燳㻂遤湅㛭௽㟫Ɓ乾ꞯꢶᮃੇퟌ蘟⍔︀꫰Ӭ梎制䢷▖悡딇鍃躺帑知ೄ㋞䠛췖㣯貑ലᒼ睐禵驇谷箔诫㗦ೲ輓蠷鱐틾߲椅꼺 [ 90.470030][ T31] usb 2-1: Manufacturer: ྖ䋒證ꝥ뷰兗壇莌枱ᐺᴗ納匉毪噦㨙뤤巢竈䌅腇ⲛ쾢‷䵺舥᎖隩ᯰ逍匭꥕ꍤ俉㛘佨乔洤굢控彏匢䆘俠ᖏꗅ캇죦ܬ楳鵔ȣ焜隷첆菀⛅煲籯桖옕瑏⾳剝Թ퓽趷䗎詴讏㑌フ⯲ꍰӥ怜ꪣ곟뿪㚋ᤶ褩檵퉖實먱芟귋옔⏐ [ 90.500251][ T31] usb 2-1: SerialNumber: ࠓ [ 90.680015][ T1637] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 90.680047][ T1637] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:228 [ 90.717707][ T31] rndis_host 2-1:6.247: skipping garbage [ 90.749575][ T31] usb 2-1: bad CDC descriptors [ 90.758257][ T31] cdc_acm 2-1:6.247: skipping garbage [ 90.784898][ T31] usb 2-1: USB disconnect, device number 12 [ 90.989607][ T802] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 91.141406][ T802] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.152352][ T802] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.162426][ T802] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 91.171488][ T802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.180899][ T802] usb 1-1: config 0 descriptor?? [ 91.775079][ T1672] binder: Unknown parameter 'rw' [ 91.869608][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 92.019622][ T9] usb 4-1: device descriptor read/64, error -71 [ 92.209267][ T802] input: HID 256c:006d as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0008/input/input14 [ 92.241832][ T802] input: HID 256c:006d as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0008/input/input15 [ 92.259664][ T9] usb 4-1: device descriptor read/64, error -71 [ 92.272491][ T802] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0008/input/input16 [ 92.287021][ T802] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0008/input/input17 [ 92.320824][ T802] uclogic 0003:256C:006D.0008: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 92.412141][ T1643] FAT-fs (rnullb0): bogus number of reserved sectors [ 92.439301][ T1643] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 92.446220][ T45] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 92.475985][ T802] usb 1-1: USB disconnect, device number 21 [ 92.519613][ T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 92.642091][ T45] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 92.663876][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 92.676576][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 92.679605][ T9] usb 4-1: device descriptor read/64, error -71 [ 92.687322][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 92.718563][ T45] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 92.728334][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.749052][ T45] usb 2-1: config 0 descriptor?? [ 92.949634][ T31] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 92.949642][ T9] usb 4-1: device descriptor read/64, error -71 [ 93.011177][ T1698] can0: slcan on ttyS3. [ 93.075420][ T9] usb usb4-port1: attempt power cycle [ 93.095432][ T1699] can0 (unregistered): slcan off ttyS3. [ 93.102278][ T31] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 93.111306][ T31] usb 3-1: config 0 has no interface number 0 [ 93.119721][ T31] usb 3-1: config 0 interface 41 has no altsetting 0 [ 93.146398][ T31] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 93.164145][ T45] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 93.180481][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.188716][ T45] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 93.200542][ T31] usb 3-1: Product: syz [ 93.204736][ T31] usb 3-1: Manufacturer: syz [ 93.215306][ T45] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 93.223445][ T31] usb 3-1: SerialNumber: syz [ 93.241358][ T31] usb 3-1: config 0 descriptor?? [ 93.246625][ T45] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 93.255214][ T45] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 93.265547][ T31] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -22 [ 93.275068][ T45] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 93.310016][ T45] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 93.351837][ T36] kauditd_printk_skb: 965 callbacks suppressed [ 93.351853][ T36] audit: type=1400 audit(1750766757.880:8492): avc: denied { read write } for pid=289 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 93.402449][ T36] audit: type=1400 audit(1750766757.890:8493): avc: denied { ioctl } for pid=1667 comm="syz.3.407" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 93.419663][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 93.460015][ T45] usb 2-1: USB disconnect, device number 13 [ 93.497788][ T9] usb 4-1: device descriptor read/8, error -71 [ 93.503831][ T36] audit: type=1400 audit(1750766757.890:8494): avc: denied { search } for pid=1708 comm="sed" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.530331][ T802] usb 3-1: USB disconnect, device number 15 [ 93.546478][ T1709] fido_id[1709]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 93.561320][ T36] audit: type=1400 audit(1750766757.890:8495): avc: denied { read } for pid=1708 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 93.603572][ T36] audit: type=1400 audit(1750766757.890:8496): avc: denied { read open } for pid=1708 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 93.634836][ T9] usb 4-1: device descriptor read/8, error -71 [ 93.653236][ T36] audit: type=1400 audit(1750766757.890:8497): avc: denied { getattr } for pid=1708 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 93.691621][ T36] audit: type=1400 audit(1750766757.900:8498): avc: denied { read write open } for pid=289 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 93.704673][ T1703] audit: audit_backlog=65 > audit_backlog_limit=64 [ 93.717971][ T36] audit: type=1400 audit(1750766757.900:8499): avc: denied { ioctl } for pid=289 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 93.727611][ T1703] audit: audit_lost=578 audit_rate_limit=0 audit_backlog_limit=64 [ 93.879573][ T397] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 93.887202][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 93.911974][ T9] usb 4-1: device descriptor read/8, error -71 [ 94.042747][ T9] usb 4-1: device descriptor read/8, error -71 [ 94.051122][ T397] usb 1-1: unable to get BOS descriptor or descriptor too short [ 94.093488][ T397] usb 1-1: config 3 has an invalid interface number: 24 but max is 0 [ 94.111791][ T397] usb 1-1: config 3 has no interface number 0 [ 94.117913][ T397] usb 1-1: config 3 interface 24 altsetting 4 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 94.144466][ T397] usb 1-1: config 3 interface 24 has no altsetting 0 [ 94.162706][ T397] usb 1-1: New USB device found, idVendor=0b57, idProduct=b2eb, bcdDevice=36.b7 [ 94.180331][ T9] usb usb4-port1: unable to enumerate USB device [ 94.187876][ T397] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.203053][ T397] usb 1-1: Product: syz [ 94.205061][ T1740] syz.2.422 uses obsolete (PF_INET,SOCK_PACKET) [ 94.207241][ T397] usb 1-1: Manufacturer: syz [ 94.225912][ T397] usb 1-1: SerialNumber: syz [ 94.329590][ T802] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 94.451119][ T397] usbhid 1-1:3.24: couldn't find an input interrupt endpoint [ 94.459970][ T397] usb 1-1: USB disconnect, device number 22 [ 94.492058][ T802] usb 2-1: config 0 has too many interfaces: 202, using maximum allowed: 32 [ 94.501245][ T802] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.512107][ T802] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 202 [ 94.523835][ T802] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 94.532990][ T802] usb 2-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 94.541085][ T802] usb 2-1: Product: syz [ 94.545295][ T802] usb 2-1: Manufacturer: syz [ 94.549913][ T802] usb 2-1: SerialNumber: syz [ 94.555833][ T802] usb 2-1: config 0 descriptor?? [ 94.609050][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 94.703995][ T1752] tmpfs: Invalid uid '0x00000000ffffffff' [ 94.713394][ T1752] netlink: 24 bytes leftover after parsing attributes in process `syz.3.427'. [ 94.774981][ T802] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 94.783396][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 94.787325][ T802] usb 2-1: USB disconnect, device number 14 [ 94.808624][ T10] usb 3-1: config 1 has an invalid interface number: 214 but max is 0 [ 94.821341][ T10] usb 3-1: config 1 has no interface number 0 [ 94.830225][ T10] usb 3-1: config 1 interface 214 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 94.845842][ T10] usb 3-1: config 1 interface 214 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 94.859969][ T10] usb 3-1: config 1 interface 214 has no altsetting 0 [ 94.872539][ T10] usb 3-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 94.889564][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.902691][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 94.919878][ T10] usb 3-1: Product: syz [ 94.924055][ T10] usb 3-1: Manufacturer: syz [ 94.928645][ T10] usb 3-1: SerialNumber: syz [ 94.938046][ T1746] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 94.952020][ T1746] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 94.993848][ T10] ums-alauda 3-1:1.214: USB Mass Storage device detected [ 95.027043][ T10] scsi host1: usb-storage 3-1:1.214 [ 95.218500][ T45] usb 3-1: USB disconnect, device number 16 [ 95.612331][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 95.774160][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 95.782069][ T305] Bluetooth: hci0: Frame reassembly failed (-84) [ 95.804943][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 95.811373][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 95.821274][ T1773] binder: Unknown parameter 'm' [ 95.841661][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 95.871780][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 95.895769][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 95.908759][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.920928][ T10] usb 2-1: config 0 descriptor?? [ 95.944185][ T1778] rust_binder: Error while translating object. [ 95.944234][ T1778] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 95.951221][ T1778] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:388 [ 96.329894][ T397] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 96.350825][ T10] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 96.358256][ T10] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 96.368746][ T10] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 96.376195][ T10] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 96.383622][ T10] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 96.392102][ T10] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 96.404303][ T10] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 96.521074][ T397] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.539578][ T397] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.560194][ T397] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 96.569268][ T397] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 96.590350][ T397] usb 3-1: SerialNumber: syz [ 96.615135][ T802] usb 2-1: USB disconnect, device number 15 [ 96.673637][ T1800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.444'. [ 96.776161][ T1802] kvm: kvm [1801]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0xaf [ 96.790974][ T1802] netlink: 16 bytes leftover after parsing attributes in process `syz.3.445'. [ 96.869199][ T397] usb 3-1: 0:2 : does not exist [ 96.889621][ T397] usb 3-1: unit 5 not found! [ 96.899632][ T397] usb 3-1: USB disconnect, device number 17 [ 97.002134][ T1805] futex_wake_op: syz.3.446 tries to shift op by 144; fix this program [ 97.010490][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 97.021793][ T1805] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 97.253263][ T1809] kvm: pic: non byte write [ 97.261489][ T1809] random: crng reseeded on system resumption [ 97.389645][ T802] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 97.541193][ T802] usb 4-1: Using ep0 maxpacket: 32 [ 97.550456][ T45] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 97.576980][ T802] usb 4-1: config 4 has an invalid interface number: 126 but max is 0 [ 97.586954][ T802] usb 4-1: config 4 has an invalid interface descriptor of length 2, skipping [ 97.598010][ T1818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.606963][ T802] usb 4-1: config 4 has no interface number 0 [ 97.607702][ T1818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.622918][ T802] usb 4-1: config 4 interface 126 altsetting 8 has an endpoint descriptor with address 0x3C, changing to 0xC [ 97.635888][ T802] usb 4-1: config 4 interface 126 altsetting 8 endpoint 0xC has an invalid bInterval 118, changing to 10 [ 97.647277][ T802] usb 4-1: config 4 interface 126 altsetting 8 endpoint 0xC has invalid maxpacket 1657, setting to 1024 [ 97.661111][ T802] usb 4-1: config 4 interface 126 altsetting 8 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 97.672183][ T802] usb 4-1: config 4 interface 126 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 97.683249][ T802] usb 4-1: config 4 interface 126 altsetting 8 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 97.694229][ T802] usb 4-1: config 4 interface 126 altsetting 8 has a duplicate endpoint with address 0x3, skipping [ 97.704941][ T802] usb 4-1: config 4 interface 126 altsetting 8 has a duplicate endpoint with address 0x3, skipping [ 97.715732][ T802] usb 4-1: config 4 interface 126 altsetting 8 has 11 endpoint descriptors, different from the interface descriptor's value: 13 [ 97.729016][ T802] usb 4-1: config 4 interface 126 has no altsetting 0 [ 97.738420][ T802] usb 4-1: New USB device found, idVendor=19ab, idProduct=1000, bcdDevice= 0.6e [ 97.747600][ T802] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.756076][ T802] usb 4-1: Product: 軴艣섻즽놙⫞魎犏΃ᨒ࠴矁우铊椈⫣ꝯ [ 97.765938][ T802] usb 4-1: Manufacturer: 荹蛑﯑垼覦۸댙꘴Ῠ飼酾꫏ᘍ೘잯막뱀ﮀ畞晈楲氈ᡒ䠭‣궍압鼆ↁ︎嫜밇ꈦ枻᩹∤ᯟ懋鹳둵䡉춤袓祪뵪褘ၸ튗魪䮎畆 [ 97.785986][ T802] usb 4-1: SerialNumber: syz [ 97.793916][ T1807] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 97.804831][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 97.814014][ T45] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 97.822833][ T45] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 97.831579][ T45] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 97.837947][ T1818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.840641][ T1503] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 97.855046][ T1774] Bluetooth: hci0: command 0x1003 tx timeout [ 97.856800][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 97.861241][ T45] usb 2-1: config 1 has no interface number 1 [ 97.879609][ T45] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 97.887600][ T1818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.896140][ T45] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 97.910160][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.918182][ T45] usb 2-1: Product: syz [ 97.922429][ T45] usb 2-1: Manufacturer: syz [ 97.927049][ T45] usb 2-1: SerialNumber: syz [ 98.017256][ T802] usb 4-1: Found UVC 0.00 device 軴艣섻즽놙⫞魎犏΃ᨒ࠴矁우铊椈⫣ꝯ (19ab:1000) [ 98.029218][ T802] usb 4-1: No valid video chain found. [ 98.039777][ T802] usb 4-1: USB disconnect, device number 33 [ 98.092046][ T9] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 98.113707][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.152470][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 98.163498][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.172187][ T9] usb 3-1: Product: Ё [ 98.176274][ T9] usb 3-1: Manufacturer: У [ 98.184688][ T9] usb 3-1: SerialNumber: 쪽洛嫦ぃ姓 ｱ撷隹줗걘ᥭ扁몏宐碨ࠕᔎ婴㥻ꮈ펂䩊ꢀ늾䊈嫥焵ࠇ勰ܰૃ [ 98.204764][ T45] usb 2-1: found format II with max.bitrate = 8, frame size=9 [ 98.226993][ T45] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 98.250468][ T1829] rust_binder: Write failure EINVAL in pid:260 [ 98.254146][ T1829] overlayfs: failed to resolve './file0': -2 [ 98.280806][ T45] usb 2-1: USB disconnect, device number 16 [ 98.370180][ T36] kauditd_printk_skb: 923 callbacks suppressed [ 98.370197][ T36] audit: type=1400 audit(1750766762.890:9422): avc: denied { read write } for pid=1830 comm="syz.0.455" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 98.400644][ T36] audit: type=1400 audit(1750766762.900:9423): avc: denied { read write open } for pid=1830 comm="syz.0.455" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 98.402133][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 98.426479][ T36] audit: type=1400 audit(1750766762.900:9424): avc: denied { mount } for pid=1830 comm="syz.0.455" name="/" dev="configfs" ino=2621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 98.484523][ T36] audit: type=1400 audit(1750766762.900:9425): avc: denied { search } for pid=1830 comm="syz.0.455" name="/" dev="configfs" ino=2621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 98.489349][ T9] usb 3-1: 0:2 : does not exist [ 98.510925][ T36] audit: type=1400 audit(1750766762.900:9426): avc: denied { search } for pid=1830 comm="syz.0.455" name="/" dev="configfs" ino=2621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 98.561977][ T9] usb 3-1: USB disconnect, device number 18 [ 98.570096][ T36] audit: type=1400 audit(1750766762.900:9427): avc: denied { read } for pid=1830 comm="syz.0.455" name="/" dev="configfs" ino=2621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 98.595162][ T36] audit: type=1400 audit(1750766762.900:9428): avc: denied { read open } for pid=1830 comm="syz.0.455" path="/" dev="configfs" ino=2621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 98.624491][ T36] audit: type=1400 audit(1750766762.900:9429): avc: denied { map } for pid=1830 comm="syz.0.455" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 98.657250][ T371] udevd[371]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 98.670096][ T36] audit: type=1400 audit(1750766763.000:9430): avc: denied { read write } for pid=289 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 98.699684][ T36] audit: type=1400 audit(1750766763.000:9431): avc: denied { read write open } for pid=289 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 98.711532][ T1837] input: syz1 as /devices/virtual/input/input19 [ 98.758158][ T1837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.457'. [ 98.767170][ T45] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 98.838552][ T1839] rust_binder: Write failure EFAULT in pid:278 [ 98.918444][ T1843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.460'. [ 98.931831][ T45] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 98.958159][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 98.976220][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 98.986285][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 98.999585][ T45] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 99.009569][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.021647][ T45] usb 1-1: config 0 descriptor?? [ 99.199705][ T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 99.355223][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.369292][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.379648][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 99.395265][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 99.407472][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.421148][ T9] usb 4-1: config 0 descriptor?? [ 99.441420][ T45] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 99.459689][ T45] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 99.472853][ T45] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 99.481186][ T45] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 99.490349][ T45] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 99.498466][ T45] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 99.510290][ T45] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 99.696741][ T1867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=1867 comm=syz.2.470 [ 99.721026][ T332] usb 1-1: USB disconnect, device number 23 [ 99.838878][ T9] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 99.863770][ T9] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 99.882532][ T9] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 99.899591][ T9] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 99.907505][ T9] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 99.918637][ T9] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 99.930923][ T9] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 99.942389][ T9] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 99.951135][ T9] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 99.958913][ T9] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 99.969800][ T9] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 100.149644][ T389] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 100.250769][ T1880] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 100.302796][ T389] usb 3-1: Using ep0 maxpacket: 16 [ 100.310834][ T389] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.332077][ T389] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 100.359574][ T389] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 100.410452][ T389] usb 3-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 100.432229][ T389] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.449569][ T389] usb 3-1: Product: syz [ 100.453769][ T389] usb 3-1: Manufacturer: syz [ 100.462914][ T389] usb 3-1: SerialNumber: syz [ 100.479414][ T389] usb 3-1: config 0 descriptor?? [ 100.618513][ T332] usb 4-1: USB disconnect, device number 34 [ 100.719101][ T1874] netlink: 76 bytes leftover after parsing attributes in process `syz.2.473'. [ 100.760909][ T389] usb 3-1: USB disconnect, device number 19 [ 100.826505][ T1908] rust_binder: Error while translating object. [ 100.826546][ T1908] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 100.840595][ T1908] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:288 [ 100.961323][ T1920] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.995596][ T1924] rust_binder: Write failure EFAULT in pid:292 [ 101.089351][ T1928] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:294 [ 101.259887][ T1933] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 101.287001][ T1933] rust_binder: Read failure Err(EFAULT) in pid:296 [ 101.529390][ T1943] rust_binder: Error while translating object. [ 101.539420][ T60] bridge_slave_1: left allmulticast mode [ 101.554468][ T1943] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 101.554500][ T1943] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:281 [ 101.576674][ T60] bridge_slave_1: left promiscuous mode [ 101.628427][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.644875][ T332] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 101.653234][ T60] bridge_slave_0: left allmulticast mode [ 101.659012][ T60] bridge_slave_0: left promiscuous mode [ 101.669892][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.790019][ T802] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 101.802999][ T60] veth1_macvtap: left promiscuous mode [ 101.808747][ T60] veth0_vlan: left promiscuous mode [ 101.822084][ T332] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.832951][ T332] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 101.852587][ T332] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 101.869592][ T332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 101.879266][ T332] usb 2-1: SerialNumber: syz [ 101.927889][ T1948] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.935101][ T1948] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.944870][ T1948] bridge_slave_0: entered allmulticast mode [ 101.953894][ T1948] bridge_slave_0: entered promiscuous mode [ 101.955627][ T802] usb 1-1: not running at top speed; connect to a high speed hub [ 101.962264][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 101.969881][ T802] usb 1-1: config 0 has an invalid interface number: 41 but max is 2 [ 101.977071][ T1948] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.985104][ T802] usb 1-1: config 0 has an invalid interface number: 10 but max is 2 [ 101.991054][ T1948] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.999374][ T802] usb 1-1: config 0 has an invalid interface number: 89 but max is 2 [ 102.006372][ T1948] bridge_slave_1: entered allmulticast mode [ 102.014542][ T802] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 102.021761][ T1948] bridge_slave_1: entered promiscuous mode [ 102.029171][ T802] usb 1-1: config 0 has no interface number 0 [ 102.040487][ T802] usb 1-1: config 0 has no interface number 1 [ 102.046604][ T802] usb 1-1: config 0 has no interface number 2 [ 102.052755][ T802] usb 1-1: config 0 interface 41 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 102.063584][ T802] usb 1-1: config 0 interface 41 altsetting 3 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 102.074520][ T802] usb 1-1: config 0 interface 41 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 102.085415][ T802] usb 1-1: config 0 interface 41 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 102.096479][ T802] usb 1-1: config 0 interface 41 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 102.108921][ T802] usb 1-1: config 0 interface 10 altsetting 14 has a duplicate endpoint with address 0x7, skipping [ 102.136565][ T802] usb 1-1: config 0 interface 10 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 102.148164][ T802] usb 1-1: config 0 interface 10 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 102.159076][ T802] usb 1-1: config 0 interface 10 altsetting 14 has a duplicate endpoint with address 0xE, skipping [ 102.170000][ T802] usb 1-1: config 0 interface 89 altsetting 9 has an endpoint descriptor with address 0x6F, changing to 0xF [ 102.181546][ T802] usb 1-1: config 0 interface 89 altsetting 9 endpoint 0xF has invalid wMaxPacketSize 0 [ 102.182612][ T10] usb 3-1: no configurations [ 102.191439][ T802] usb 1-1: config 0 interface 89 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 102.197515][ T10] usb 3-1: can't read configurations, error -22 [ 102.206925][ T802] usb 1-1: config 0 interface 89 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 102.223860][ T802] usb 1-1: config 0 interface 89 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 102.234512][ T802] usb 1-1: config 0 interface 89 altsetting 9 has a duplicate endpoint with address 0xE, skipping [ 102.246625][ T332] usb 2-1: 0:2 : does not exist [ 102.260882][ T332] usb 2-1: unit 5: unexpected type 0x0c [ 102.265858][ T802] usb 1-1: config 0 interface 89 altsetting 9 has a duplicate endpoint with address 0xE, skipping [ 102.279483][ T802] usb 1-1: config 0 interface 89 altsetting 9 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 102.282712][ T332] usb 2-1: USB disconnect, device number 17 [ 102.308870][ T802] usb 1-1: config 0 interface 89 altsetting 9 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 102.319893][ T802] usb 1-1: config 0 interface 89 altsetting 9 has a duplicate endpoint with address 0xD, skipping [ 102.330615][ T802] usb 1-1: config 0 interface 89 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 102.341603][ T802] usb 1-1: config 0 interface 89 altsetting 9 has a duplicate endpoint with address 0xD, skipping [ 102.352173][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 102.364634][ T802] usb 1-1: config 0 interface 89 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 102.377369][ T802] usb 1-1: config 0 interface 89 altsetting 9 has a duplicate endpoint with address 0xF, skipping [ 102.388785][ T802] usb 1-1: config 0 interface 89 altsetting 9 has an endpoint descriptor with address 0x79, changing to 0x9 [ 102.391216][ T1948] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.407324][ T1948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.410594][ T802] usb 1-1: config 0 interface 89 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 102.414703][ T1948] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.426012][ T802] usb 1-1: config 0 interface 89 altsetting 9 has a duplicate endpoint with address 0xE, skipping [ 102.432232][ T1948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.443714][ T802] usb 1-1: config 0 interface 89 altsetting 9 has 17 endpoint descriptors, different from the interface descriptor's value: 16 [ 102.451957][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 102.464101][ T802] usb 1-1: config 0 interface 41 has no altsetting 0 [ 102.498872][ T802] usb 1-1: config 0 interface 10 has no altsetting 0 [ 102.511785][ T802] usb 1-1: config 0 interface 89 has no altsetting 0 [ 102.528860][ T802] usb 1-1: New USB device found, idVendor=067b, idProduct=23c3, bcdDevice=5b.68 [ 102.539228][ T802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.548069][ T802] usb 1-1: Product: syz [ 102.552870][ T802] usb 1-1: Manufacturer: 骚鼑ㄱ䡳榍乘呖播픘坭ﳹ똻奝ˬ刴뿖ꨋ栎뙒咼護આ蜊寛牆䇌翨ᔬ쓌喣焇➞肈⫠Ｋ㷄㼈癵ᔷ痪䳷㙰荘啥䮾刏ᡩ쬸駤틅⭧黩ഉ蠌돡쵝廃聟䭲뷓⏤䁬噂际鼣뮋甆贸嗙瀬慸揭꓊赙鹕텹洟ᵲ嫄䅞虎꣔ⵦ䠉渨跶䖎 [ 102.561177][ T10] usb 3-1: no configurations [ 102.587540][ T802] usb 1-1: SerialNumber: syz [ 102.589939][ T10] usb 3-1: can't read configurations, error -22 [ 102.592861][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.599611][ T10] usb usb3-port1: attempt power cycle [ 102.611579][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.619011][ T802] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 102.628832][ T802] usb 1-1: no configuration chosen from 1 choice [ 102.635655][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.642745][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.655263][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.662364][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.740254][ T1948] veth0_vlan: entered promiscuous mode [ 102.769954][ T1948] veth1_macvtap: entered promiscuous mode [ 102.913996][ T1956] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 102.914021][ T1956] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 102.914203][ T1957] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 102.934479][ T1956] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:4 [ 102.944292][ T1957] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 102.954438][ T1957] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:4 [ 102.959590][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 103.021290][ T10] usb 3-1: no configurations [ 103.025993][ T10] usb 3-1: can't read configurations, error -22 [ 103.169626][ T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 103.191371][ T10] usb 3-1: no configurations [ 103.196107][ T10] usb 3-1: can't read configurations, error -22 [ 103.203310][ T10] usb usb3-port1: unable to enumerate USB device [ 103.219677][ T397] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 103.299688][ T31] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 103.369650][ T397] usb 2-1: Using ep0 maxpacket: 32 [ 103.377036][ T397] usb 2-1: config 4 has an invalid interface number: 126 but max is 0 [ 103.385403][ T397] usb 2-1: config 4 has an invalid interface descriptor of length 2, skipping [ 103.394884][ T397] usb 2-1: config 4 has no interface number 0 [ 103.401109][ T397] usb 2-1: config 4 interface 126 altsetting 8 has an endpoint descriptor with address 0x3C, changing to 0xC [ 103.412988][ T397] usb 2-1: config 4 interface 126 altsetting 8 endpoint 0xC has an invalid bInterval 118, changing to 10 [ 103.424858][ T397] usb 2-1: config 4 interface 126 altsetting 8 endpoint 0xC has invalid maxpacket 1657, setting to 1024 [ 103.436038][ T397] usb 2-1: config 4 interface 126 altsetting 8 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 103.447541][ T397] usb 2-1: config 4 interface 126 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 103.458506][ T397] usb 2-1: config 4 interface 126 altsetting 8 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 103.459580][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 103.469538][ T397] usb 2-1: config 4 interface 126 altsetting 8 has a duplicate endpoint with address 0x3, skipping [ 103.476634][ T36] kauditd_printk_skb: 814 callbacks suppressed [ 103.476649][ T36] audit: type=1400 audit(1750766768.000:10246): avc: denied { ioctl } for pid=1960 comm="syz.4.503" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.485429][ T397] usb 2-1: config 4 interface 126 altsetting 8 has a duplicate endpoint with address 0x3, skipping [ 103.502746][ T36] audit: type=1400 audit(1750766768.030:10247): avc: denied { ioctl } for pid=1960 comm="syz.4.503" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.517942][ T397] usb 2-1: config 4 interface 126 altsetting 8 has 11 endpoint descriptors, different from the interface descriptor's value: 12 [ 103.528775][ T36] audit: type=1400 audit(1750766768.030:10248): avc: denied { ioctl } for pid=1960 comm="syz.4.503" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.528848][ T31] usb 5-1: config 6 has an invalid interface number: 247 but max is 2 [ 103.552741][ T397] usb 2-1: config 4 interface 126 has no altsetting 0 [ 103.594073][ T397] usb 2-1: New USB device found, idVendor=19ab, idProduct=1000, bcdDevice= 0.6e [ 103.598918][ T31] usb 5-1: config 6 has an invalid interface number: 163 but max is 2 [ 103.606202][ T397] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.616619][ T36] audit: type=1400 audit(1750766768.060:10249): avc: denied { ioctl } for pid=1960 comm="syz.4.503" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.623129][ T397] usb 2-1: Product: 軴艣섻즽놙⫞魎犏΃ᨒ࠴矁우铊椈⫣ꝯ [ 103.632968][ T31] usb 5-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 103.657097][ T36] audit: type=1400 audit(1750766768.060:10250): avc: denied { ioctl } for pid=1960 comm="syz.4.503" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.666679][ T31] usb 5-1: config 6 has an invalid interface number: 19 but max is 2 [ 103.674643][ T397] usb 2-1: Manufacturer: 荹蛑﯑垼覦۸댙꘴Ῠ飼酾꫏ᘍ೘잯막뱀ﮀ畞晈楲氈ᡒ䠭‣궍압鼆ↁ︎嫜밇ꈦ枻᩹∤ᯟ懋鹳둵䡉춤袓祪뵪褘ၸ튗魪䮎畆 [ 103.702190][ T31] usb 5-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 103.707978][ T36] audit: type=1400 audit(1750766768.100:10251): avc: denied { ioctl } for pid=1960 comm="syz.4.503" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.728705][ T31] usb 5-1: config 6 has an invalid descriptor of length 166, skipping remainder of the config [ 103.736451][ T397] usb 2-1: SerialNumber: syz [ 103.763528][ T31] usb 5-1: config 6 has no interface number 0 [ 103.772191][ T36] audit: type=1400 audit(1750766768.120:10252): avc: denied { ioctl } for pid=1958 comm="syz.1.502" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.777735][ T31] usb 5-1: config 6 has no interface number 1 [ 103.782957][ T36] audit: type=1400 audit(1750766768.120:10253): avc: denied { ioctl } for pid=1958 comm="syz.1.502" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.809317][ T31] usb 5-1: config 6 has no interface number 2 [ 103.819515][ T1959] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 103.849115][ T31] usb 5-1: config 6 interface 163 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 103.852360][ T36] audit: type=1400 audit(1750766768.120:10254): avc: denied { ioctl } for pid=1958 comm="syz.1.502" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.865115][ T31] usb 5-1: config 6 interface 163 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 103.889471][ T36] audit: type=1400 audit(1750766768.120:10255): avc: denied { ioctl } for pid=1958 comm="syz.1.502" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.899092][ T31] usb 5-1: config 6 interface 163 altsetting 0 has an endpoint descriptor with address 0xB2, changing to 0x82 [ 103.934959][ T31] usb 5-1: config 6 interface 163 altsetting 0 endpoint 0x82 has invalid maxpacket 247, setting to 64 [ 103.946088][ T31] usb 5-1: config 6 interface 163 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 64 [ 103.956064][ T31] usb 5-1: config 6 interface 163 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 103.966906][ T31] usb 5-1: config 6 interface 163 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 103.977628][ T31] usb 5-1: config 6 interface 163 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 103.988451][ T31] usb 5-1: config 6 interface 163 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 104.002644][ T31] usb 5-1: config 6 interface 19 altsetting 7 has an invalid endpoint descriptor of length 2, skipping [ 104.013751][ T31] usb 5-1: config 6 interface 19 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 104.027358][ T31] usb 5-1: config 6 interface 247 has no altsetting 0 [ 104.034200][ T31] usb 5-1: config 6 interface 19 has no altsetting 0 [ 104.044079][ T31] usb 5-1: New USB device found, idVendor=0421, idProduct=048e, bcdDevice=6c.18 [ 104.053275][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.061378][ T31] usb 5-1: Product: 勨籂ᢅౖ잤絝棴솣ｧ巘渢芸爈蕙﬛릇ᩐ䍖粘㫨缋锃ﵤ㛣暫贈ᥤ陿岔﯋뗣혇㸐煱◇纜庱㽴푌ࠑĴ琥ㆆ燳㻂遤湅㛭௽㟫Ɓ乾ꞯꢶᮃੇퟌ蘟⍔︀꫰Ӭ梎制䢷▖悡딇鍃躺帑知ೄ㋞䠛췖㣯貑ലᒼ睐禵驇谷箔诫㗦ೲ輓蠷鱐틾߲椅꼺 [ 104.093697][ T31] usb 5-1: Manufacturer: ྖ䋒證ꝥ뷰兗壇莌枱ᐺᴗ納匉毪噦㨙뤤巢竈䌅腇ⲛ쾢‷䵺舥᎖隩ᯰ逍匭꥕ꍤ俉㛘佨乔洤굢控彏匢䆘俠ᖏꗅ캇죦ܬ楳鵔ȣ焜隷첆菀⛅煲籯桖옕瑏⾳剝Թ퓽趷䗎詴讏㑌フ⯲ꍰӥ怜ꪣ곟뿪㚋ᤶ褩檵퉖實먱芟귋옔⏐ [ 104.123058][ T31] usb 5-1: SerialNumber: ࠓ [ 104.139036][ T397] usb 2-1: Found UVC 0.00 device 軴艣섻즽놙⫞魎犏΃ᨒ࠴矁우铊椈⫣ꝯ (19ab:1000) [ 104.155282][ T397] usb 2-1: No valid video chain found. [ 104.165904][ T397] usb 2-1: USB disconnect, device number 18 [ 104.356226][ T31] rndis_host 5-1:6.247: skipping garbage [ 104.362034][ T31] usb 5-1: bad CDC descriptors [ 104.369485][ T31] cdc_acm 5-1:6.247: skipping garbage [ 104.381606][ T31] usb 5-1: USB disconnect, device number 2 [ 104.523340][ T389] usb 1-1: USB disconnect, device number 24 [ 104.860346][ T1977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.511'. [ 105.031124][ T1987] overlayfs: workdir and upperdir must be separate subtrees [ 105.051290][ T1987] rust_binder: Write failure EINVAL in pid:446 [ 105.169579][ T397] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 105.353075][ T397] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 105.378130][ T397] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 105.400152][ T397] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 105.426127][ T397] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 105.449235][ T397] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 105.459580][ T389] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 105.468547][ T397] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.486101][ T397] usb 5-1: config 0 descriptor?? [ 105.515783][ T1998] __vm_enough_memory: pid: 1998, comm: syz.2.517, bytes: 70373039144960 not enough memory for the allocation [ 105.645905][ T389] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.676319][ T389] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 105.711339][ T389] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 105.729559][ T389] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 105.747692][ T389] usb 1-1: SerialNumber: syz [ 105.765416][ T389] usb 1-1: bad CDC descriptors [ 105.918928][ T397] plantronics 0003:047F:FFFF.000D: ignoring exceeding usage max [ 105.940888][ T397] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 105.948610][ T397] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 105.969585][ T397] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 105.989580][ T397] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 105.997021][ T397] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 106.020949][ T397] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 106.060394][ T397] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 106.200964][ T397] usb 5-1: USB disconnect, device number 3 [ 106.335252][ T2010] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 106.461624][ T2015] netlink: 'syz.2.521': attribute type 27 has an invalid length. [ 106.503038][ T2015] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.510280][ T2015] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.762697][ T2026] binder: Bad value for 'max' [ 107.677470][ T2040] fuse: Bad value for 'user_id' [ 107.683008][ T2040] fuse: Bad value for 'user_id' [ 107.690576][ T389] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 107.726779][ T2044] overlayfs: failed to resolve './file1': -2 [ 107.809266][ T2047] netlink: 'syz.4.532': attribute type 27 has an invalid length. [ 107.809589][ T802] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 107.833393][ T2047] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.839785][ T389] usb 3-1: Using ep0 maxpacket: 16 [ 107.842210][ T2047] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.851336][ T389] usb 3-1: config 6 has an invalid interface number: 247 but max is 2 [ 107.868161][ T389] usb 3-1: config 6 has an invalid interface number: 163 but max is 2 [ 107.877145][ T389] usb 3-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 107.886873][ T389] usb 3-1: config 6 has an invalid interface number: 19 but max is 2 [ 107.895162][ T389] usb 3-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 107.904200][ T389] usb 3-1: config 6 has an invalid descriptor of length 166, skipping remainder of the config [ 107.914517][ T389] usb 3-1: config 6 has no interface number 0 [ 107.920676][ T389] usb 3-1: config 6 has no interface number 1 [ 107.926787][ T389] usb 3-1: config 6 has no interface number 2 [ 107.932948][ T389] usb 3-1: config 6 interface 163 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 107.944343][ T389] usb 3-1: config 6 interface 163 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 107.954761][ T389] usb 3-1: config 6 interface 163 altsetting 0 has an endpoint descriptor with address 0xB2, changing to 0x82 [ 107.966532][ T802] usb 2-1: device descriptor read/64, error -71 [ 107.972859][ T389] usb 3-1: config 6 interface 163 altsetting 0 endpoint 0x82 has invalid maxpacket 247, setting to 64 [ 107.984028][ T389] usb 3-1: config 6 interface 163 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 64 [ 107.994446][ T389] usb 3-1: config 6 interface 163 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 108.006090][ T389] usb 3-1: config 6 interface 163 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 108.016988][ T389] usb 3-1: config 6 interface 163 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 108.027877][ T389] usb 3-1: config 6 interface 163 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 108.041142][ T389] usb 3-1: config 6 interface 19 altsetting 7 has an invalid endpoint descriptor of length 2, skipping [ 108.052288][ T389] usb 3-1: config 6 interface 19 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 108.065349][ T389] usb 3-1: config 6 interface 247 has no altsetting 0 [ 108.072319][ T389] usb 3-1: config 6 interface 19 has no altsetting 0 [ 108.083279][ T389] usb 3-1: New USB device found, idVendor=0421, idProduct=048e, bcdDevice=6c.18 [ 108.093511][ T389] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.101995][ T389] usb 3-1: Product: 勨籂ᢅౖ잤絝棴솣ｧ巘渢芸爈蕙﬛릇ᩐ䍖粘㫨缋锃ﵤ㛣暫贈ᥤ陿岔﯋뗣혇㸐煱◇纜庱㽴푌ࠑĴ琥ㆆ燳㻂遤湅㛭௽㟫Ɓ乾ꞯꢶᮃੇퟌ蘟⍔︀꫰Ӭ梎制䢷▖悡딇鍃躺帑知ೄ㋞䠛췖㣯貑ലᒼ睐禵驇谷箔诫㗦ೲ輓蠷鱐틾߲椅꼺 [ 108.134640][ T389] usb 3-1: Manufacturer: ྖ䋒證ꝥ뷰兗壇莌枱ᐺᴗ納匉毪噦㨙뤤巢竈䌅腇ⲛ쾢‷䵺舥᎖隩ᯰ逍匭꥕ꍤ俉㛘佨乔洤굢控彏匢䆘俠ᖏꗅ캇죦ܬ楳鵔ȣ焜隷첆菀⛅煲籯桖옕瑏⾳剝Թ퓽趷䗎詴讏㑌フ⯲ꍰӥ怜ꪣ곟뿪㚋ᤶ褩檵퉖實먱芟귋옔⏐ [ 108.165260][ T389] usb 3-1: SerialNumber: ࠓ [ 108.219754][ T802] usb 2-1: device descriptor read/64, error -71 [ 108.270716][ T9] usb 1-1: USB disconnect, device number 25 [ 108.389737][ T2056] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:296 [ 108.392899][ T389] rndis_host 3-1:6.247: skipping garbage [ 108.415413][ T389] usb 3-1: bad CDC descriptors [ 108.421988][ T389] cdc_acm 3-1:6.247: skipping garbage [ 108.432576][ T389] usb 3-1: USB disconnect, device number 24 [ 108.453154][ T2057] rust_binder: Write failure EINVAL in pid:296 [ 108.459638][ T802] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 108.479589][ T45] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 108.488291][ T36] kauditd_printk_skb: 442 callbacks suppressed [ 108.488634][ T36] audit: type=1400 audit(1750766773.010:10698): avc: denied { ioctl } for pid=2051 comm="syz.4.533" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 108.520293][ T36] audit: type=1400 audit(1750766773.010:10699): avc: denied { ioctl } for pid=2051 comm="syz.4.533" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 108.545415][ T36] audit: type=1400 audit(1750766773.050:10700): avc: denied { ioctl } for pid=2051 comm="syz.4.533" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 108.570525][ T36] audit: type=1400 audit(1750766773.080:10701): avc: denied { ioctl } for pid=2036 comm="syz.1.529" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 108.599647][ T802] usb 2-1: device descriptor read/64, error -71 [ 108.606527][ T36] audit: type=1400 audit(1750766773.130:10702): avc: denied { ioctl } for pid=2051 comm="syz.4.533" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 108.680249][ T36] audit: type=1400 audit(1750766773.210:10703): avc: denied { ioctl } for pid=2051 comm="syz.4.533" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 108.682479][ T45] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 108.705482][ T36] audit: type=1400 audit(1750766773.210:10704): avc: denied { ioctl } for pid=2051 comm="syz.4.533" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 108.717345][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 108.741772][ T36] audit: type=1400 audit(1750766773.210:10705): avc: denied { ioctl } for pid=2051 comm="syz.4.533" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 108.755819][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 108.778255][ T36] audit: type=1400 audit(1750766773.210:10706): avc: denied { ioctl } for pid=2051 comm="syz.4.533" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 108.788787][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 108.813957][ T36] audit: type=1400 audit(1750766773.210:10707): avc: denied { ioctl } for pid=2051 comm="syz.4.533" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 108.826708][ T45] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 108.863442][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.873549][ T45] usb 5-1: config 0 descriptor?? [ 108.919600][ T802] usb 2-1: device descriptor read/64, error -71 [ 109.030510][ T802] usb usb2-port1: attempt power cycle [ 109.055203][ T2064] binder: Unknown parameter 'fscontext?}' [ 109.292907][ T45] plantronics 0003:047F:FFFF.000E: ignoring exceeding usage max [ 109.320789][ T45] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 109.331285][ T45] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 109.340515][ T45] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 109.359574][ T45] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 109.367066][ T45] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 109.375551][ T45] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 109.387179][ T45] plantronics 0003:047F:FFFF.000E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 109.399857][ T802] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 109.424947][ T802] usb 2-1: device descriptor read/8, error -71 [ 109.575358][ T802] usb 2-1: device descriptor read/8, error -71 [ 109.577681][ T397] usb 5-1: USB disconnect, device number 4 [ 109.717371][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 109.820572][ T802] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 109.843025][ T802] usb 2-1: device descriptor read/8, error -71 [ 109.872163][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 109.880440][ T9] usb 3-1: config 4 has an invalid interface number: 126 but max is 0 [ 109.888747][ T9] usb 3-1: config 4 has an invalid interface descriptor of length 2, skipping [ 109.897661][ T9] usb 3-1: config 4 has no interface number 0 [ 109.903836][ T9] usb 3-1: config 4 interface 126 altsetting 8 has an endpoint descriptor with address 0x3C, changing to 0xC [ 109.915727][ T9] usb 3-1: config 4 interface 126 altsetting 8 endpoint 0xC has an invalid bInterval 118, changing to 10 [ 109.927148][ T9] usb 3-1: config 4 interface 126 altsetting 8 endpoint 0xC has invalid maxpacket 1657, setting to 1024 [ 109.938616][ T9] usb 3-1: config 4 interface 126 altsetting 8 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 109.949966][ T9] usb 3-1: config 4 interface 126 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 109.960864][ T9] usb 3-1: config 4 interface 126 altsetting 8 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 109.972437][ T9] usb 3-1: config 4 interface 126 altsetting 8 has a duplicate endpoint with address 0x3, skipping [ 109.983244][ T9] usb 3-1: config 4 interface 126 altsetting 8 has a duplicate endpoint with address 0x3, skipping [ 109.987963][ T802] usb 2-1: device descriptor read/8, error -71 [ 109.993972][ T9] usb 3-1: config 4 interface 126 altsetting 8 has 11 endpoint descriptors, different from the interface descriptor's value: 13 [ 110.013334][ T9] usb 3-1: config 4 interface 126 has no altsetting 0 [ 110.023176][ T9] usb 3-1: New USB device found, idVendor=19ab, idProduct=1000, bcdDevice= 0.6e [ 110.032553][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.040570][ T9] usb 3-1: Product: 軴艣섻즽놙⫞魎犏΃ᨒ࠴矁우铊椈⫣ꝯ [ 110.049918][ T9] usb 3-1: Manufacturer: 荹蛑﯑垼覦۸댙꘴Ῠ飼酾꫏ᘍ೘잯막뱀ﮀ畞晈楲氈ᡒ䠭‣궍압鼆ↁ︎嫜밇ꈦ枻᩹∤ᯟ懋鹳둵䡉춤袓祪뵪褘ၸ튗魪䮎畆 [ 110.069911][ T9] usb 3-1: SerialNumber: syz [ 110.077983][ T2077] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 110.110005][ T802] usb usb2-port1: unable to enumerate USB device [ 110.243879][ T2084] can0: slcan on ttyS3. [ 110.310301][ T2084] can0 (unregistered): slcan off ttyS3. [ 110.313163][ T9] usb 3-1: Found UVC 0.00 device 軴艣섻즽놙⫞魎犏΃ᨒ࠴矁우铊椈⫣ꝯ (19ab:1000) [ 110.350198][ T9] usb 3-1: No valid video chain found. [ 110.369936][ T9] usb 3-1: USB disconnect, device number 25 [ 110.425561][ T2094] capability: warning: `syz.0.549' uses 32-bit capabilities (legacy support in use) [ 110.482127][ T2094] rust_binder: Write failure EINVAL in pid:310 [ 110.482812][ T2094] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 110.518307][ T332] rust_kernel: panicked at drivers/android/binder/node.rs:877:13: [ 110.518307][ T332] attempt to subtract with overflow SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 110.584375][ T332] ------------[ cut here ]------------ [ 110.590187][ T332] kernel BUG at rust/helpers/bug.c:7! [ 110.663501][ T332] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 110.670566][ T332] CPU: 0 UID: 0 PID: 332 Comm: kworker/0:3 Not tainted 6.12.30-syzkaller-g9d80e3254812 #0 0af3bb1b2b1f0d17039a87b1bb907b41f79d5270 [ 110.684282][ T332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 110.694338][ T332] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ [ 110.711116][ T332] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 110.716406][ T332] Code: 3e ca e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 1b c1 e3 d0 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 51 05 aa 5c 90 90 90 90 90 90 90 90 90 [ 110.736208][ T332] RSP: 0018:ffffc9000c116670 EFLAGS: 00010246 [ 110.742370][ T332] RAX: 0000000000000061 RBX: 1ffff92001822cd0 RCX: 69cdc4ca1a0ac900 [ 110.750432][ T332] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 110.758417][ T332] RBP: ffffc9000c116670 R08: ffffc9000c116367 R09: 1ffff92001822c6c [ 110.766412][ T332] R10: dffffc0000000000 R11: fffff52001822c6d R12: 0000000000000000 [ 110.774833][ T332] R13: dffffc0000000000 R14: ffffc9000c1166a0 R15: ffffc9000c1166d0 [ 110.782807][ T332] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 110.791737][ T332] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.798329][ T332] CR2: 000056020b8c4b98 CR3: 0000000104a6a000 CR4: 00000000003526b0 [ 110.806310][ T332] DR0: 00000000000006d8 DR1: 0000000000000000 DR2: 0000000000000000 [ 110.814383][ T332] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 110.822371][ T332] Call Trace: [ 110.825632][ T332] [ 110.828551][ T332] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 110.836014][ T332] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 110.843988][ T332] ? update_curr+0x60d/0xc60 [ 110.848568][ T332] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 110.862120][ T332] ? kvm_sched_clock_read+0x15/0x30 [ 110.867338][ T332] ? sched_clock_noinstr+0xd/0x30 [ 110.872388][ T332] ? sched_clock+0x44/0x60 [ 110.876869][ T332] ? sched_clock_cpu+0x75/0x400 [ 110.881713][ T332] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 110.888996][ T332] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 110.896888][ T332] ? resched_curr+0xaa/0x430 [ 110.901557][ T332] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0xb2/0xc0 [ 110.911439][ T332] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0x10/0x10 [ 110.922103][ T332] _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x17e5/0x1860 [ 110.931836][ T332] ? __kasan_check_write+0x18/0x20 [ 110.936956][ T332] ? _raw_spin_lock+0x8c/0x120 [ 110.941721][ T332] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x10/0x10 [ 110.951779][ T332] ? _RNvMs0_NtCs43vyB533jt3_6kernel4pageNtB5_4Page8read_raw+0x136/0x190 [ 110.960193][ T332] ? __asan_memcpy+0x5a/0x80 [ 110.964778][ T332] ? _RINvMs4_NtCshgDM7dBCdno_11rust_binder10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x7bc/0xad0 [ 110.977977][ T332] ? __asan_memcpy+0x5a/0x80 [ 110.982569][ T332] ? _RINvMs4_NtCshgDM7dBCdno_11rust_binder10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x590/0xad0 [ 110.995784][ T332] ? __cfi__RINvMs4_NtCshgDM7dBCdno_11rust_binder10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x10/0x10 [ 111.009352][ T332] ? __cfi__RINvMNtCshgDM7dBCdno_11rust_binder10allocationNtB3_10Allocation4readjEB5_+0x10/0x10 [ 111.019779][ T332] ? __kasan_check_write+0x18/0x20 [ 111.024886][ T332] ? _raw_spin_lock+0x8c/0x120 [ 111.029648][ T332] ? rust_helper_kunmap_local+0xd/0x20 [ 111.035121][ T332] ? _RNvMs0_NtCs43vyB533jt3_6kernel4pageNtB5_4Page8read_raw+0x13e/0x190 [ 111.043535][ T332] _RNvXs_NtCshgDM7dBCdno_11rust_binder10allocationNtB4_10AllocationNtNtNtCs9jEwPDbx20M_4core3ops4drop4Drop4drop+0xe89/0x47a0 [ 111.056569][ T332] ? __cfi__RNvXs_NtCshgDM7dBCdno_11rust_binder10allocationNtB4_10AllocationNtNtNtCs9jEwPDbx20M_4core3ops4drop4Drop4drop+0x10/0x10 [ 111.070122][ T332] ? __kasan_check_write+0x18/0x20 [ 111.075237][ T332] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 111.080691][ T332] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 111.086579][ T332] ? arch_scale_cpu_capacity+0x1c/0xb0 [ 111.092030][ T332] ? unwind_next_frame+0x3c2/0x750 [ 111.097147][ T332] ? __kernel_text_address+0x11/0x40 [ 111.102426][ T332] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 111.108571][ T332] ? arch_stack_walk+0x139/0x170 [ 111.113500][ T332] ? ret_from_fork_asm+0x1a/0x30 [ 111.118464][ T332] ? stack_depot_save_flags+0x38/0x800 [ 111.123930][ T332] ? dequeue_pushable_task+0x1b9/0x2e0 [ 111.129399][ T332] ? kasan_save_track+0x4f/0x80 [ 111.134245][ T332] ? kasan_save_track+0x3e/0x80 [ 111.139085][ T332] ? kasan_save_free_info+0x4a/0x60 [ 111.144268][ T332] ? __kasan_slab_free+0x5f/0x80 [ 111.149196][ T332] ? kfree+0x156/0x400 [ 111.153254][ T332] ? krealloc_noprof+0xfa/0x130 [ 111.158091][ T332] ? rust_helper_krealloc+0x33/0xd0 [ 111.163278][ T332] ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0xaf/0x100 [ 111.172810][ T332] ? _RINvNtCs9jEwPDbx20M_4core3ptr13drop_in_placeINtNtCs43vyB533jt3_6kernel6rbtree6RBTreelINtNtNtBL_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder6thread6ThreadEEEB1M_+0x112/0x190 [ 111.190426][ T332] ? _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x243e/0x2860 [ 111.203454][ T332] ? process_scheduled_works+0x7d2/0x1020 [ 111.209182][ T332] ? worker_thread+0xc58/0x1250 [ 111.214048][ T332] ? kthread+0x2ca/0x370 [ 111.218296][ T332] ? ret_from_fork+0x64/0xa0 [ 111.222898][ T332] ? ret_from_fork_asm+0x1a/0x30 [ 111.227849][ T332] ? __kasan_check_write+0x18/0x20 [ 111.232953][ T332] ? _raw_spin_lock+0x8c/0x120 [ 111.237713][ T332] ? __cfi__raw_spin_lock+0x10/0x10 [ 111.242905][ T332] ? _RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x3aa/0x810 [ 111.253133][ T332] ? _RNvXs_NtCshgDM7dBCdno_11rust_binder11transactionNtB4_11TransactionNtB6_13DeliverToRead6cancel+0xf4/0x370 [ 111.264847][ T332] _RNvXs_NtCshgDM7dBCdno_11rust_binder11transactionNtB4_11TransactionNtB6_13DeliverToRead6cancel+0x17b/0x370 [ 111.276564][ T332] ? __cfi__raw_spin_lock+0x10/0x10 [ 111.281760][ T332] ? __cfi__RNvXs_NtCshgDM7dBCdno_11rust_binder11transactionNtB4_11TransactionNtB6_13DeliverToRead6cancel+0x10/0x10 [ 111.294093][ T332] ? _raw_spin_lock+0x8c/0x120 [ 111.298871][ T332] ? __asan_memset+0x39/0x50 [ 111.303461][ T332] ? _RNvMs6_NtCs43vyB533jt3_6kernel4listINtB5_4ListINtCshgDM7dBCdno_11rust_binder7DTRWrapDNtBL_13DeliverToReadEL_EE15remove_internalBL_+0x2f2/0x3e0 [ 111.318483][ T332] _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0xec1/0x2860 [ 111.331346][ T332] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 111.337475][ T332] ? update_curr+0x60d/0xc60 [ 111.342083][ T332] ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10 [ 111.355290][ T332] ? update_load_avg+0x506/0x19a0 [ 111.360305][ T332] ? detach_entity_load_avg+0x7b0/0x7b0 [ 111.365842][ T332] ? __kasan_check_read+0x15/0x20 [ 111.370858][ T332] ? dequeue_entity+0xa9c/0x1750 [ 111.375873][ T332] ? tg_unthrottle_up+0x980/0x980 [ 111.380894][ T332] ? detach_entity_load_avg+0x7b0/0x7b0 [ 111.386444][ T332] ? __cfi_enqueue_task+0x10/0x10 [ 111.391463][ T332] ? kvm_sched_clock_read+0x15/0x30 [ 111.396669][ T332] ? sched_clock_noinstr+0xd/0x30 [ 111.401702][ T332] ? sched_clock+0x44/0x60 [ 111.406118][ T332] ? sched_clock_cpu+0x75/0x400 [ 111.410960][ T332] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 111.417018][ T332] ? kvm_sched_clock_read+0x15/0x30 [ 111.422236][ T332] ? __cfi_sched_clock_cpu+0x10/0x10 [ 111.427519][ T332] ? __kasan_check_write+0x18/0x20 [ 111.432625][ T332] ? __switch_to+0xc7b/0x1310 [ 111.437292][ T332] ? psi_group_change+0xb44/0x1130 [ 111.442394][ T332] ? __cfi___switch_to+0x10/0x10 [ 111.447328][ T332] ? __switch_to_asm+0x3d/0x70 [ 111.452097][ T332] ? __schedule+0x1463/0x1f10 [ 111.456764][ T332] ? kick_pool+0xb9/0x550 [ 111.461084][ T332] process_scheduled_works+0x7d2/0x1020 [ 111.466635][ T332] worker_thread+0xc58/0x1250 [ 111.471323][ T332] ? try_to_wake_up+0xdd2/0x1aa0 [ 111.476264][ T332] kthread+0x2ca/0x370 [ 111.480325][ T332] ? __cfi_worker_thread+0x10/0x10 [ 111.485429][ T332] ? __cfi_kthread+0x10/0x10 [ 111.490100][ T332] ret_from_fork+0x64/0xa0 [ 111.494508][ T332] ? __cfi_kthread+0x10/0x10 [ 111.499097][ T332] ret_from_fork_asm+0x1a/0x30 [ 111.503857][ T332] [ 111.506861][ T332] Modules linked in: [ 111.511082][ T332] ---[ end trace 0000000000000000 ]--- [ 111.647820][ T332] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 111.653243][ T332] Code: 3e ca e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 1b c1 e3 d0 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 51 05 aa 5c 90 90 90 90 90 90 90 90 90 [ 111.675696][ T332] RSP: 0018:ffffc9000c116670 EFLAGS: 00010246 [ 111.686049][ T332] RAX: 0000000000000061 RBX: 1ffff92001822cd0 RCX: 69cdc4ca1a0ac900 [ 111.700019][ T332] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 111.715011][ T332] RBP: ffffc9000c116670 R08: ffffc9000c116367 R09: 1ffff92001822c6c [ 111.743101][ T332] R10: dffffc0000000000 R11: fffff52001822c6d R12: 0000000000000000 [ 111.751688][ T332] R13: dffffc0000000000 R14: ffffc9000c1166a0 R15: ffffc9000c1166d0 [ 111.760275][ T332] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 111.774881][ T332] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.783412][ T332] CR2: 000056020b8c4b98 CR3: 000000010bb8a000 CR4: 00000000003526b0 [ 111.822742][ T332] DR0: 00000000000006d8 DR1: 0000000000000000 DR2: 0000000000000000 [ 111.832339][ T332] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 111.841402][ T60] bridge_slave_1: left allmulticast mode [ 111.847056][ T60] bridge_slave_1: left promiscuous mode [ 111.854275][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.862266][ T332] Kernel panic - not syncing: Fatal exception [ 111.868637][ T332] Kernel Offset: disabled [ 111.872951][ T332] Rebooting in 86400 seconds..