last executing test programs: 48.376249356s ago: executing program 0 (id=431): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000006700)=[{{&(0x7f00000001c0)={0xa, 0x4e24, 0x7, @remote, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000002900000004000000110000000000000014"], 0x30}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000) syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee47000) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='.\x02\x00', 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 48.226834789s ago: executing program 0 (id=432): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) mount$bind(&(0x7f0000000140)='\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1a800, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee4a000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000131000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) eventfd2(0x10000, 0x80003) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x14) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='stat\x00') lseek(r2, 0x10001, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r3, 0x45809000) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup(r4) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000300)={{{@in=@empty, @in6=@loopback, 0x4e20, 0x5, 0x4e21, 0xc, 0xa, 0x90, 0xa0, 0xc}, {0x1, 0xf, 0x40000000, 0x4, 0xffffffffffffffff, 0x9, 0x7, 0x8}, {0x80, 0x7, 0x1, 0x81}, 0x662a, 0x0, 0x1, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d3, 0x32}, 0x2, @in6=@mcast1, 0x3503, 0x2, 0x2, 0xd, 0x7fffffff, 0x5, 0x8}}, 0xe8) 48.190697981s ago: executing program 0 (id=433): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) fcntl$getown(r0, 0x9) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) r2 = inotify_init() socket$inet6(0xa, 0x3, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x1100001c) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000009080)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000040)=""/190, 0xbe}, {&(0x7f0000000600)=""/101, 0x65}, {&(0x7f0000002580)=""/4084, 0xff4}], 0x4}, 0x5e}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xffff22cb}], 0x4, 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 48.148699425s ago: executing program 0 (id=434): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) r2 = socket(0x2, 0x3, 0x1) getsockopt(r2, 0xff, 0xfffffffe, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000000)={0x0, r4}) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000100)={0x2e4, 0x0, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_EXPECT_TUPLE={0xb8, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x9}, @CTA_EXPECT_NAT={0x98, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x42}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @empty}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_MASK={0x2c, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT={0xf8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa92bcc76f57efe32}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}]}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}]}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x34008000}, 0x4010) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000180)={0x67, 0x4, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000040)={0x800000, r4}) close_range(r0, 0xffffffffffffffff, 0x0) 48.063036122s ago: executing program 0 (id=435): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in=@broadcast, @in6=@private0, 0x0, 0x0, 0x4e22, 0x0, 0x2}, {0x0, 0x9, 0x0, 0x2}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@local, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00', 0x34ff, 0x4, 0x0, 0xb7}}, 0x400) sendfile(r0, r2, 0x0, 0x80000000) 48.061597012s ago: executing program 0 (id=436): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000100)={0x0, 0x2, 0x7, 0x40000001}) syz_clone3(&(0x7f0000001200)={0x5000, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range(r0, 0xffffffffffffffff, 0x0) 33.05161789s ago: executing program 32 (id=436): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000100)={0x0, 0x2, 0x7, 0x40000001}) syz_clone3(&(0x7f0000001200)={0x5000, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range(r0, 0xffffffffffffffff, 0x0) 13.829693187s ago: executing program 3 (id=720): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f00000000c0)="08001eb3b0335d00", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x8000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup3(r2, r0, 0x0) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"/400], 0x190}}, 0x20000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0xa, 0x1}) 13.829457407s ago: executing program 3 (id=721): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x5) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x9, 0x0, 0x3}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00"], 0x20}}, 0x40816) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x0, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0xf}, {0x2, 0x7}, {0x6, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x280a01, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000200)={'syzkaller0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000240)=ANY=[@ANYBLOB='1-2:', @ANYRESOCT, @ANYBLOB='E'], 0x31) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 13.698993178s ago: executing program 3 (id=724): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x802, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) io_getevents(0x0, 0x4, 0x0, 0x0, &(0x7f0000001740)) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x11) syz_usb_connect(0x0, 0x24, &(0x7f0000000880)={{0x12, 0x1, 0x201, 0xb7, 0x33, 0x45, 0x8, 0x19d2, 0x6a61, 0xb0c0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0xd, 0x90, 0x6c, [{{0x9, 0x4, 0x51, 0x0, 0x0, 0x2, 0x6, 0x0, 0x8e}}]}}]}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)={0x2c, r4, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80c0}, 0xc000) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x2ced, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x9588, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) io_setup(0x1, 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000000)) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xf) ioctl$KVM_SET_GSI_ROUTING(r7, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="080000000000000010080000030000000100000000000000c003000033204451000000000000000000000000000000000000000000000000ff0300000400000001000000000000000900000000000000030000000200000000000000000000000000000000000000d0030000020000000100000000000000000400000e000000ff0f000008000000000000000000000000000000000000000e000000040000000000000000000000090000000000010000000000000000000000000000000000000000000000000001000000050000000100000000000000ff01000005000000040000000100000000000000000000000000000000000000c1d30000010000000000000000000000e75bb803810000008100000057000000000000000000000000000000000002000000000000000000000000000000040000000800000000000000000000000000000000000000000000000000000004000000020000000000000000000000010000000600"/392]) io_submit(0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 13.16940861s ago: executing program 3 (id=737): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') readlink(0x0, &(0x7f0000000300)=""/194, 0xc2) listen(r0, 0x401) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000100)="ea", 0x1) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) splice(r1, 0x0, r4, 0x0, 0x25a5, 0x0) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0x5) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r5, 0x22e7c000) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r6, 0x1, 0x70bd2a, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x4}}}}, 0xfef2}, 0x1, 0x0, 0x0, 0x24008004}, 0x44009004) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r6, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x1, 0x7, 0x6, 0x8}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c801}, 0x4000000) mmap(&(0x7f0000018000/0xc000)=nil, 0xc000, 0x100000d, 0x13, r5, 0x16a60000) socket$key(0xf, 0x3, 0x2) 13.107078265s ago: executing program 3 (id=739): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) creat(0x0, 0xda) socket$can_raw(0x1d, 0x3, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r1 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x1) write$binfmt_script(r1, &(0x7f0000000040)={'#! ', './file0'}, 0xb) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) close_range(r0, 0xffffffffffffffff, 0x0) 13.106508635s ago: executing program 3 (id=740): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x2000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom1\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x8001) r3 = getpgid(0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x2, r3}) ptrace$poke(0x5, r3, &(0x7f0000000040), 0x1) pread64(r1, &(0x7f00000003c0)=""/58, 0x3a, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000100), 0x4) r5 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='oom_adj\x00') write$tcp_mem(r6, &(0x7f0000000140), 0x48) mknodat(r6, &(0x7f0000000080)='./file0\x00', 0x0, 0x6) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) readlink(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)=""/63, 0x3f) ptrace$getregset(0x4204, r3, 0x1, &(0x7f0000000e80)={&(0x7f0000000dc0)=""/178, 0xb2}) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') pread64(r9, &(0x7f000001a240)=""/102400, 0x19000, 0x4041e) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',debug=k', @ANYRESOCT=r5, @ANYRES8, @ANYRESOCT=r8, @ANYRES64=r0]) r10 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x27d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x60, 0x6, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x0, 0x6, {0x9, 0x21, 0x2, 0x87, 0x1, {0x22, 0xc62}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x1, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x8, 0xc0, 0x2}}]}}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x310, 0x80, 0x2, 0x76, 0x20, 0xd}, 0x24, &(0x7f0000000480)={0x5, 0xf, 0x24, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0xb1, 0xde, 0x9, 0x8, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "9a21e597af6ddd42a17e3698ee86d3cd"}]}, 0x6, [{0xdd, &(0x7f0000000600)=@string={0xdd, 0x3, "5b4d30b3269b3fcc8b0f01a24903fdce053b099852e43d0a921af110703db3f7ea24ee46aa559a50a2c0e5fd2ad136ab1d45b0aa3070b6ff76bbafb5a51b481c7a8441b74662990c34ce320c73ae32746749bb2e8ba3e1ca79a1967d66dd51f474551e932e44fae8cc880f90d50a3260e4632653486cbfa24abdbafb347aa784dd7e9ae2cd402f9db480f4b7ded2b7ceef71e23bafa68f0a7d316d9c98dedd434092fdbb3d909cd00bbed01b5f6da8a27e9dada7d7643624be964e763e6c8f8430a1e50703c05ec7f1f1db5dfc9c461c98098fe43926596d08441c"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x82c}}, {0xff, &(0x7f0000000700)=@string={0xff, 0x3, "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"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x3c0a}}, {0xd7, &(0x7f0000000800)=@string={0xd7, 0x3, "b9200af8189f15177885068ae8fa763e5c4a50dc041deade2f149d62bd22cb5bebd935b9224ec314154d02b1667ab5fcd4bb5aaf2305f16384aacda443580d90b2bc9a75cf2a51269ed335f1bbdaade1860bec50fac0253967509d061d74da1f01b1665e5ce8cb2d027b1b7a649762126911876b2e2fb6c68a07422963503f4f4121e63acaa554247c1cd888a99a0a43cc4854b1aa0dde4afff5eac29dde8870a6a9618a9dc709cd847358adc07128ac472eba7bea59a5cd4067c2dc972ec443f8010bad41ee9804409f8ef2f45147bcfd05e64d59"}}]}) syz_usb_control_io$hid(r10, &(0x7f0000000b40)={0x24, &(0x7f0000000980)={0x0, 0x24, 0x78, {0x78, 0xd, "4727d494e2cdf980c63d006f13390b73b0f83b31572bd9ea4dcf6a99337d6e5cdd9fda9c702a8ea224624c1ec535a83ce523365621e955a318bdf9f8f8b468540e9dc56214a02ab14f8b8dbe3cbce2ac8b0507295fae03c0d295dd4b3ee84a5e5f6cc8c60f619a8fa34732bb56a2577dbbdbd53ac262"}}, &(0x7f0000000a00)={0x0, 0x3, 0x7d, @string={0x7d, 0x3, "41805d9bb63872916b0d26a6cbb07059c067df39445a28fbd467c36b32442fb40285dce8b0d9beaed78f9c3f1e855d69075f24a574d8bc405ba2fcf9f57eedf527662d47d3b9fd6cf179050d715c93638613bedb44b11b5870fc62cd7fec0300364ef2e4589d0ec7800e1e176bab209b79ccc45ad999ebb8d8eb4a"}}, &(0x7f0000000ac0)={0x0, 0x22, 0xa, {[@global=@item_4={0x3, 0x1, 0x5, "59a84c09"}, @main=@item_012={0x1, 0x0, 0xb, '\"'}, @global=@item_012={0x1, 0x1, 0x6, '+'}, @main=@item_012={0x0, 0x0, 0xa}]}}, &(0x7f0000000b00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x67, 0x1, {0x22, 0xdb3}}}}, &(0x7f0000000d80)={0x2c, &(0x7f0000000b80)=ANY=[@ANYBLOB="0012d80000008dd32e1a066d00f21fcea6042d6859456be8845fe2ede28a3424bcf98980cf2668c8a5552f932ce2ba888dab130cbc6c078d405a76d443bc49c4522ad3f6b76ef5416afd22bdd9d30fde7fb9469e477ae54c10f4282ff101b689a612e2b5a34d5aa72bad3ae2796807008a63268ace4c35838c531ae8a9d0d041f8ded78a75cc13acf131177ca9da7c89da45222753803b0a9a720feedf2d720efac2e3fb8908462c37d3d594c4e0e9fe8a6c647ea8aae2a450f1e35f5e67adcd07d54372187f55b5c34181855483ffb2771bafab709d9149446be9e777ee"], &(0x7f0000000c80)={0x0, 0xa, 0x1, 0xf9}, &(0x7f0000000cc0)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000d00)={0x20, 0x1, 0x31, "8ebfc4c8587202a4f6e0ae3d63a4a8fa61d382bc76fa63075c61aeae1558d269d0410af6a166d0cad4c1eb7774ffaae359"}, &(0x7f0000000d40)={0x20, 0x3, 0x1, 0x5}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 5.675953343s ago: executing program 4 (id=781): sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000040)=0x4, 0x4) sched_yield() sched_yield() sched_yield() sched_yield() ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) sched_yield() ioctl$KVM_CAP_XEN_HVM(r1, 0x4068aea3, &(0x7f0000000080)={0x26, 0x0, 0x41}) sched_yield() sched_yield() sched_yield() sched_yield() sched_yield() 5.611081118s ago: executing program 4 (id=782): r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r0, &(0x7f0000000540)=[{{&(0x7f0000000200)={0x2, 0x4e1e, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f00000002c0)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x4048810) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0x8ee4a000) openat$rnullb(0xffffffffffffff9c, 0x0, 0x40, 0x0) fadvise64(r1, 0xffff, 0x36, 0x5) r2 = syz_open_dev$rtc(&(0x7f0000000000), 0x8, 0x4a40) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000040)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) 4.798412794s ago: executing program 4 (id=784): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) ioperm(0x1, 0x3, 0x163f) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioperm(0x9, 0x7ff, 0x100000000) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpgrp(r2) kcmp(r3, r2, 0x0, r1, r1) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) (async) r4 = fcntl$dupfd(r0, 0x0, r0) (async, rerun: 64) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) (async, rerun: 64) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b"]) (async, rerun: 32) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x4000) (rerun: 32) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000340)=@gcm_256={{0x304}, "3fb72a932325d560", "d2754beb616fd79605d84ccd1b3a91afae845cc075a59702f89188e0fcf97b96", "035c65b8", "ee2404089ab78eed"}, 0x38) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async, rerun: 64) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) ptrace(0x4206, r8) (async) quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0xffffffffffffffff, 0x0) (async) tkill(r8, 0x12) (async) ptrace(0x4207, r8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'batadv0\x00', 0x400}) (async) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r9, 0x400454cb, 0x1) 4.638975017s ago: executing program 4 (id=785): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0x27, 0xc0, 0xde, 0x20, 0x86a, 0x3, 0xf03f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x2, 0x2, 0x2, 0xf3, 0xbf, 0xf5, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00031600000016032d"]}, 0x0) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x7, 0x400, 0xfffeffff, {}, {}, {0x1}, 0x1, @can={{0x2, 0x1, 0x1, 0x1}, 0x2, 0x2, 0x0, 0x0, "6213c646fddb8c86"}}, 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x240400d4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee4a000) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000000c0)={0x1, 0x0, @pic={0x4e, 0x5, 0x57, 0x5, 0x66, 0x1, 0x0, 0x1, 0xa, 0x41, 0x3, 0x3, 0x2, 0x6, 0x7, 0x3}}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x40) r4 = openat$rnullb(0xffffffffffffff9c, 0x0, 0x141342, 0x0) r5 = dup(r4) fallocate(r5, 0x8, 0x3, 0x401) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000280), 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x2, 0x1, 0x0, 0x1000, &(0x7f0000ff9000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000340)={0x2, 0x1, 0x6000, 0x1000, &(0x7f0000ff9000/0x1000)=nil}) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x169142, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="66baa00066ed3666440738821d00000000263e47f4b9a5030000540f3232bad104b0fb6e3e0f01c53e0f21910f32440f20c0350e000000440f22c067660f32", 0x3f}], 0x1, 0x10, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f000028d000/0x4000)=nil, 0x4000, 0x11) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.97728176s ago: executing program 1 (id=798): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x80, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x2000000) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xb, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0}, 0x10fc}], 0x0, 0x0, 0x0}) 3.805631834s ago: executing program 1 (id=799): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder-control\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xea200, 0x0) (async) mmap(&(0x7f0000200000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, r0, 0xabef6000) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x1, 'pimreg0\x00', {}, 0x3}) (async, rerun: 32) r2 = socket$inet6(0xa, 0x3, 0x88) (rerun: 32) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x7ffffffb, @private0, 0xfffffffc}, 0x1c) (async) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x725e65a8, 0x3) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='auxv\x00') r7 = fsmount(0xffffffffffffffff, 0x1, 0x8b) ioctl$MON_IOCT_RING_SIZE(r7, 0x9204, 0x4e9e4) pread64(r6, 0x0, 0x0, 0xffffffff) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffef01000000010000005600000025000000190004000400000007fdd400"/57, 0x39}], 0x1) (async) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034701bb5be3c3e4feff0600000001000000450000002500000200"/57, 0x39}], 0x1) (async, rerun: 64) r9 = socket$inet6(0x10, 0x3, 0x0) (rerun: 64) sendto$inet6(r9, &(0x7f00000005c0)="23000000220021bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) (async) recvfrom$inet6(r9, &(0x7f0000000000)=""/177, 0xb1, 0x400101c3, 0x0, 0x0) (async) sendto$inet6(r9, &(0x7f0000000000)="900000a453001f", 0x7, 0x20000080, 0x0, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002280), 0x480, 0x0) ioctl$KVM_CHECK_EXTENSION(r10, 0xae03, 0x7) sendto$inet6(r6, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x0, 0x0, 0x0) (async) sendto$inet6(r4, &(0x7f0000000000)='q', 0x1, 0x40000, 0x0, 0x0) (async, rerun: 64) close_range(r5, r0, 0x2) (rerun: 64) write$binfmt_elf64(r4, &(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYBLOB="9acd0087be4bc2b0265ce3095c4e48294d47f5292be1c363863207fad1b0844f278c57dcbe18724623424cc9a18013e1f8d8000e1dda8e904485cbc8f189fa071cedc612c0b046e1952e7809959bb5f98e2e63f7961da9590514fdcdf0dce17268836bee4e1b70e09cce4e10155ab3b53b5a48f9271f4c00e7724c59fc3e5d13030cab28f347f2", @ANYRES16=r6, @ANYBLOB="858774ae905c28b666d449d13cd0e881e538878ccad1b8c383b730b5b251ae9d5849cb00af1aee0b0aae70", @ANYRESHEX=r2, @ANYBLOB="47c8d2a93269ac6e9951824940259f933b7923ec1f1b3dd1c3badf0d498620be787292b8ebb023b3650200e414ba66b7c99ec23ad90373ed43cc1372066222b038bc1a7f42c8955de539e6b59ea085175b98e9c08775cd43ad2863859fcd5bb28d959e7fcd00466591730f3634a0b67e29280214671f567be3b9bd48dc694e4c24d6d02b354ea438af61b910359451448e514eafcd539bfa125c494ddacdea442a9cfe696d2fd8390f6e85b6b28f3cee3b403e55cdb0a63322c7243f9a0ae6ee29099ff0d9661366e0bde6ef62927ae41f349503"], 0xfffffd88) (async, rerun: 64) unshare(0x6060600) (async, rerun: 64) mkdirat(r6, &(0x7f0000000000)='./file0\x00', 0x11) 3.734950129s ago: executing program 1 (id=800): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee4a000) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, 0x0, 0x60a00, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r2 = openat$rnullb(0xffffffffffffff9c, 0x0, 0x40, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x401, 0x88143) r4 = open(&(0x7f0000000180)='./bus\x00', 0x14507e, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000000c0)={r4, 0x0, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0x1, 0x1b, 0x15, "2e7da51a8dc4b9505dfa1ab0a34a10622e64ee4edb80cc9bd36b93b23733e6180aa539ec68114b5aba1c98911df5ba72296d56740d56ea4d0434aa3592a47913", "fc0177a6f3bb16d5d5568693e0e50bbf206c9d8db97cd01095e7ea15b0ba5f8a654e14dc7c4cc6b50488873b3acc6e02cd3eac8be657b534bfa1142100696b29", "c921095856cdf9fd8199034f3b875fe5c92394e3c7a178fb1c16c99189819ef4", [0x80, 0x8000000000000000]}}) ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f0000000000)={0x57c}) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000002c0)={0x3, 0x69}) fadvise64(r2, 0x3, 0x0, 0x4) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000300)={{}, 0x8, 0xfffffffffffffffe, 0x4}) statx(0xffffffffffffff9c, &(0x7f0000002300)='./file0\x00', 0x400, 0x121, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)={0x54, r7, 0x11, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xfffffffb, 0xfffffffc}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x2, 0x28}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) mprotect(&(0x7f00000bb000/0x3000)=nil, 0x3000, 0x1000009) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4e22, 0x1000, @dev={0xfe, 0x80, '\x00', 0x4}, 0x9}, 0x1c) 3.095191701s ago: executing program 4 (id=802): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x2}, @transaction={0x40406300, {0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x0, 0x2}, @fd, @fda={0x66646185, 0x0, 0x2, 0x3d}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r2, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/247, 0xf7}, {0x0}], 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000800)={0xac, 0x0, &(0x7f0000000740)=[@enter_looper, @increfs={0x40046304, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x1, &(0x7f0000000080), 0x0, 0x0, 0x34}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x5, 0x2, 0x13}}, &(0x7f00000000c0)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x3}, @release={0x40046306, 0x2}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000380)={@flat=@weak_binder={0x77622a85, 0xa, 0x2}, @flat=@binder={0x73622a85, 0x1101, 0x3}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000400)={0x0, 0x18, 0x30}}}], 0x13, 0x0, &(0x7f0000000440)="c2e63f221729f85f7f1935a9b2aed555e1a2de"}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r5, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_u}]}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000000000074d564b"]) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000319021508fd070100e56a0102030109022400010c0a40060904000702a35fc303090508032000060204"], 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00"], 0x13c}}, 0x20040880) r10 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil) syz_kvm_add_vcpu$x86(r10, &(0x7f0000000040)={0x0, &(0x7f00000004c0)=[@code={0xa, 0x8e, {"66450f38807fa666baf80cb8f631ec8aef66bafc0c66ed650f01c366baa000b80070ffffefb94e060000b8f768018dba000000000f3066baf80cb8fae1bc8bef66bafc0c66ed450f01cf660f3880841b78e527a148b8a4660000000000000f23c00f21f835010000000f23f8b9bb020000b800200000ba000000000f30"}}, @wr_crn={0x46, 0x20, {0x8, 0x8}}, @code={0xa, 0x66, {"f2470f5eff0f00d666baf80cb88549aa82ef66bafc0cb000ee0f01cfc7442400c9000000c744240200780000ff2c24b90b030000b800000000ba008000000f30400f01c36467f3400f09c462959fd266b8cb008ee0"}}, @wrmsr={0x1e, 0x20, {0xb47, 0xc}}, @uexit={0x0, 0x18, 0x8000000000000000}, @cpuid={0x14, 0x18, {0xe, 0x41}}, @cpuid={0x14, 0x18, {0x7f, 0x7f}}, @rdmsr={0x32, 0x18, {0x8d2}}, @uexit={0x0, 0x18, 0x2}, @code={0xa, 0x68, {"c744240029010000c7442402eb200000ff2c24c4429937d0440f210b2e65490fc76cb100646666440f2b51b6b9f10800000f32c74424000e000000c744240204000000ff2c24480fc76d0066b8df000f00d866ba2000ed"}}, @uexit={0x0, 0x18, 0x6117}, @cpuid={0x14, 0x18, {0x7, 0xfffff587}}, @cpuid={0x14, 0x18, {0x9, 0x4}}], 0x25c}) 2.928963334s ago: executing program 1 (id=806): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x108) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x6, 0x2, 0xa244, 0x2, 0x1, 0x3}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3, 0x8000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x800000000000003}, @flat=@weak_binder={0x77622a85, 0xa, 0x80000003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x108) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) (async) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) (async) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x6, 0x2, 0xa244, 0x2, 0x1, 0x3}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3, 0x8000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x800000000000003}, @flat=@weak_binder={0x77622a85, 0xa, 0x80000003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async) 2.871098489s ago: executing program 1 (id=807): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x11, r0, 0xd6bb1000) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, 0x0, &(0x7f0000000400)) 2.800514054s ago: executing program 1 (id=808): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) setitimer(0x2, &(0x7f0000000b40)={{}, {0x0, 0x2710}}, 0x0) getitimer(0x2, &(0x7f0000000200)) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000840}, 0x4040044) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x7) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x301) close_range(r1, 0xffffffffffffffff, 0x0) 2.746574389s ago: executing program 33 (id=808): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) setitimer(0x2, &(0x7f0000000b40)={{}, {0x0, 0x2710}}, 0x0) getitimer(0x2, &(0x7f0000000200)) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000840}, 0x4040044) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x7) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x301) close_range(r1, 0xffffffffffffffff, 0x0) 2.318491094s ago: executing program 5 (id=816): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x2, 0x4, 0x0, 0x8, 0xe, 0x0, 0x400000, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, 0x20000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x90) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000081000/0x400000)=nil) 1.858773441s ago: executing program 5 (id=812): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200), 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55a854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r1 = fsmount(0xffffffffffffffff, 0x0, 0xb7) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000000680)={0x710, 0x0, 0x5, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [{{0x254, 0x1, {{0x2}, 0x7, 0x4, 0x5, 0x9, 0x1c, 'syz1\x00', "547b7079c52003ac0769261c01b29c2dfe9ea6b7557215f4ca482cfba94ffb4e", "2ddc7fe7b90c1db1bbf760e2a37c6e3d4e6b8308ad4bf4d42f95e085085ecd36", [{0x7, 0x7, {0x0, 0x3}}, {0xfff7, 0x8, {0x1, 0x187}}, {0x6, 0x101, {0x3, 0x500}}, {0xd6, 0x4, {0x2}}, {0x3, 0x6, {0x3, 0x9}}, {0x7, 0xa9, {0x0, 0x6}}, {0x2, 0xb, {0x3, 0x3}}, {0x8001, 0xfff8, {0x1, 0x10001}}, {0x6, 0x5, {0x1, 0x5}}, {0x81, 0x7, {0x0, 0x5}}, {0x29ef, 0x5, {0x2, 0x9}}, {0x0, 0x200, {0x2, 0x8001}}, {0xaa69, 0x7e, {0x1, 0x9}}, {0x3, 0x4, {0x3, 0x6}}, {0x8, 0xff2}, {0x7, 0xfffb, {0x2, 0xfffffff7}}, {0x3, 0x400, {0x1, 0x2}}, {0x4, 0xe331, {0x3, 0xed}}, {0xe771, 0x6, {0x2, 0x5}}, {0x9cd9, 0x7, {0x1, 0x95}}, {0x8, 0x6, {0x0, 0x1}}, {0x1, 0x8, {0x3, 0x7ff}}, {0x5, 0x9, {0x1, 0x9}}, {0x4, 0xfffa, {0x2, 0x7fff}}, {0x3, 0x4, {0x2, 0x3ff}}, {0x5, 0xfffe, {0x1, 0x8}}, {0x6, 0x7, {0x1, 0x40}}, {0x9, 0x6, {0x1, 0x4}}, {0x4, 0x2, {0x2, 0x3d7aeb6}}, {0xfffb, 0x1, {0x0, 0x499}}, {0x3, 0x4, {0xf0d4e831524c2a00, 0x8}}, {0x4, 0x8, {0x2, 0xfffffffd}}, {0x1, 0x4, {0x1, 0x8}}, {0x7, 0xc6, {0x0, 0x3}}, {0xd06, 0x5, {0x1, 0x5}}, {0xfffa, 0x101, {0x0, 0x5}}, {0x5, 0x401, {0x2, 0xfffffffe}}, {0x6, 0x9, {0x2, 0x2}}, {0xbc, 0x81, {0x1, 0x56f}}, {0x6, 0x9, {0x1, 0x8}}]}}}, {{0x254, 0x1, {{0xcf5bc707b506802d, 0x8}, 0x6, 0x8, 0x6, 0x7fff, 0x6, 'syz0\x00', "1eb0fbbff850e74f5ca3cef159d2c8f71beaef721875ba26c0cac488d1efd336", "9da010720c7ed7d74463a4df1197b236fefba5e6ca9128843c55eb59bec5a79c", [{0x79d4, 0x4, {0x37b5f23c9b14da2c, 0xf31}}, {0x9488, 0x4}, {0x3008, 0xff, {0x0, 0xd}}, {0x5, 0x2, {0x1, 0x7ff}}, {0x2, 0x81, {0x0, 0x9}}, {0x1, 0x0, {0x0, 0x4}}, {0x3, 0xfff, {0x3, 0x1}}, {0x100, 0x7, {0x2, 0x6}}, {0x6, 0xdcaf, {0x2, 0x2}}, {0x4, 0x2, {0x1, 0x6}}, {0x3, 0xd79, {0x0, 0x80000001}}, {0x9, 0xe, {0x3, 0x49}}, {0x4, 0xfb5b, {0x0, 0x9}}, {0x3, 0x1, {0x3, 0x10}}, {0xfeff, 0x2500, {0x1, 0x9}}, {0x0, 0xa03, {0x0, 0x100}}, {0xa750, 0x8, {0x1, 0xc}}, {0x5, 0x7ff, {0x3, 0x6}}, {0x9, 0x5, {0x2, 0x3}}, {0x6, 0x800, {0x0, 0x3}}, {0x0, 0x4, {0x1, 0x5e}}, {0x8a6b, 0x4, {0x1}}, {0x7, 0x3672, {0x0, 0x7}}, {0x8, 0x0, {0x3, 0x2}}, {0x6, 0x200, {0x0, 0xa65}}, {0x2, 0xf, {0x3, 0x4}}, {0x5, 0x3ff, {0x3, 0x7}}, {0x9, 0x6, {0x3, 0xcd}}, {0x18, 0x3b4, {0x1, 0x1}}, {0x81, 0xa, {0x3, 0x5}}, {0x5, 0x8, {0x2, 0x3}}, {0x1, 0x1000, {0x0, 0x5}}, {0x4, 0x6}, {0x0, 0x9, {0x3, 0x7fff}}, {0x1b27, 0x1, {0x2, 0x1000}}, {0xf, 0x8, {0x0, 0x10001}}, {0x6, 0x5, {0x1, 0xffff0000}}, {0x0, 0x5, {0x3, 0x5}}, {0xfff9, 0x8, {0x1, 0xc0}}, {0x5, 0x2, {0x0, 0x3}}]}}}, {{0x254, 0x1, {{0x3, 0x7}, 0x10, 0xd, 0x3, 0xc, 0xc, 'syz0\x00', "6bd4d93f0ddca15f3ce34bb059959dd17d9565e444b7b83c42bd71c744cf30ed", "8199f020e25d45d4acec219c8a612fc329ee82046d806e3a5c1ed26c2f558970", [{0x9, 0x8, {0x0, 0x5}}, {0x2, 0xb, {0x0, 0x401}}, {0x7ff, 0x10, {0x3, 0x5}}, {0x1000, 0x0, {0x3, 0x73bc}}, {0x1, 0xff4b, {0x3, 0xf}}, {0x67, 0x1, {0x1, 0x3}}, {0x7ff, 0x0, {0x0, 0x8}}, {0x8, 0x7fff, {0x2, 0x2e8}}, {0x3, 0x2, {0x3, 0x200}}, {0xb, 0xf7, {0x0, 0xfffffffe}}, {0x9, 0x5, {0x0, 0xbd}}, {0x8, 0x465}, {0x5, 0x2, {0x0, 0x81}}, {0x1, 0x3, {0x2, 0x1f9}}, {0xe, 0x8, {0x0, 0x9}}, {0x1, 0x2, {0x3, 0xba}}, {0x3, 0x1, {0x0, 0x9}}, {0x2, 0x3, {0x2, 0x8000}}, {0x5, 0x8, {0x2, 0x3}}, {0xe, 0x5, {0x1, 0x3}}, {0xfb, 0x7, {0x0, 0x6}}, {0x5, 0x0, {0x1, 0x4}}, {0x7, 0x4, {0x3, 0x1}}, {0x4, 0xc000, {0x3, 0x6}}, {0xac, 0x2a6e, {0x1, 0x3}}, {0x8100, 0x2, {0x0, 0x7}}, {0x9, 0xfff9, {0x3, 0x7159}}, {0x3, 0x10, {0x3, 0x10}}, {0x6, 0x2, {0x1}}, {0x1, 0x4, {0x2, 0x4}}, {0x10, 0x4, {0x3, 0x40}}, {0x7, 0x7338, {0x3, 0x817}}, {0x8, 0x9, {0x2, 0x9}}, {0x0, 0x7, {0x1, 0x16}}, {0x9, 0x9ffc, {0x3, 0xd692}}, {0x6f5, 0x1}, {0xfffa, 0x2, {0x1, 0x8}}, {0xab, 0x9, {0x1, 0xb}}, {0x1, 0x6, {0x0, 0x5dc1}}, {0x800, 0x0, {0x1, 0x4}}]}}}]}, 0x710}}, 0x80) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200), 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55a854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (async) fsmount(0xffffffffffffffff, 0x0, 0xb7) (async) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000000680)={0x710, 0x0, 0x5, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [{{0x254, 0x1, {{0x2}, 0x7, 0x4, 0x5, 0x9, 0x1c, 'syz1\x00', "547b7079c52003ac0769261c01b29c2dfe9ea6b7557215f4ca482cfba94ffb4e", "2ddc7fe7b90c1db1bbf760e2a37c6e3d4e6b8308ad4bf4d42f95e085085ecd36", [{0x7, 0x7, {0x0, 0x3}}, {0xfff7, 0x8, {0x1, 0x187}}, {0x6, 0x101, {0x3, 0x500}}, {0xd6, 0x4, {0x2}}, {0x3, 0x6, {0x3, 0x9}}, {0x7, 0xa9, {0x0, 0x6}}, {0x2, 0xb, {0x3, 0x3}}, {0x8001, 0xfff8, {0x1, 0x10001}}, {0x6, 0x5, {0x1, 0x5}}, {0x81, 0x7, {0x0, 0x5}}, {0x29ef, 0x5, {0x2, 0x9}}, {0x0, 0x200, {0x2, 0x8001}}, {0xaa69, 0x7e, {0x1, 0x9}}, {0x3, 0x4, {0x3, 0x6}}, {0x8, 0xff2}, {0x7, 0xfffb, {0x2, 0xfffffff7}}, {0x3, 0x400, {0x1, 0x2}}, {0x4, 0xe331, {0x3, 0xed}}, {0xe771, 0x6, {0x2, 0x5}}, {0x9cd9, 0x7, {0x1, 0x95}}, {0x8, 0x6, {0x0, 0x1}}, {0x1, 0x8, {0x3, 0x7ff}}, {0x5, 0x9, {0x1, 0x9}}, {0x4, 0xfffa, {0x2, 0x7fff}}, {0x3, 0x4, {0x2, 0x3ff}}, {0x5, 0xfffe, {0x1, 0x8}}, {0x6, 0x7, {0x1, 0x40}}, {0x9, 0x6, {0x1, 0x4}}, {0x4, 0x2, {0x2, 0x3d7aeb6}}, {0xfffb, 0x1, {0x0, 0x499}}, {0x3, 0x4, {0xf0d4e831524c2a00, 0x8}}, {0x4, 0x8, {0x2, 0xfffffffd}}, {0x1, 0x4, {0x1, 0x8}}, {0x7, 0xc6, {0x0, 0x3}}, {0xd06, 0x5, {0x1, 0x5}}, {0xfffa, 0x101, {0x0, 0x5}}, {0x5, 0x401, {0x2, 0xfffffffe}}, {0x6, 0x9, {0x2, 0x2}}, {0xbc, 0x81, {0x1, 0x56f}}, {0x6, 0x9, {0x1, 0x8}}]}}}, {{0x254, 0x1, {{0xcf5bc707b506802d, 0x8}, 0x6, 0x8, 0x6, 0x7fff, 0x6, 'syz0\x00', "1eb0fbbff850e74f5ca3cef159d2c8f71beaef721875ba26c0cac488d1efd336", "9da010720c7ed7d74463a4df1197b236fefba5e6ca9128843c55eb59bec5a79c", [{0x79d4, 0x4, {0x37b5f23c9b14da2c, 0xf31}}, {0x9488, 0x4}, {0x3008, 0xff, {0x0, 0xd}}, {0x5, 0x2, {0x1, 0x7ff}}, {0x2, 0x81, {0x0, 0x9}}, {0x1, 0x0, {0x0, 0x4}}, {0x3, 0xfff, {0x3, 0x1}}, {0x100, 0x7, {0x2, 0x6}}, {0x6, 0xdcaf, {0x2, 0x2}}, {0x4, 0x2, {0x1, 0x6}}, {0x3, 0xd79, {0x0, 0x80000001}}, {0x9, 0xe, {0x3, 0x49}}, {0x4, 0xfb5b, {0x0, 0x9}}, {0x3, 0x1, {0x3, 0x10}}, {0xfeff, 0x2500, {0x1, 0x9}}, {0x0, 0xa03, {0x0, 0x100}}, {0xa750, 0x8, {0x1, 0xc}}, {0x5, 0x7ff, {0x3, 0x6}}, {0x9, 0x5, {0x2, 0x3}}, {0x6, 0x800, {0x0, 0x3}}, {0x0, 0x4, {0x1, 0x5e}}, {0x8a6b, 0x4, {0x1}}, {0x7, 0x3672, {0x0, 0x7}}, {0x8, 0x0, {0x3, 0x2}}, {0x6, 0x200, {0x0, 0xa65}}, {0x2, 0xf, {0x3, 0x4}}, {0x5, 0x3ff, {0x3, 0x7}}, {0x9, 0x6, {0x3, 0xcd}}, {0x18, 0x3b4, {0x1, 0x1}}, {0x81, 0xa, {0x3, 0x5}}, {0x5, 0x8, {0x2, 0x3}}, {0x1, 0x1000, {0x0, 0x5}}, {0x4, 0x6}, {0x0, 0x9, {0x3, 0x7fff}}, {0x1b27, 0x1, {0x2, 0x1000}}, {0xf, 0x8, {0x0, 0x10001}}, {0x6, 0x5, {0x1, 0xffff0000}}, {0x0, 0x5, {0x3, 0x5}}, {0xfff9, 0x8, {0x1, 0xc0}}, {0x5, 0x2, {0x0, 0x3}}]}}}, {{0x254, 0x1, {{0x3, 0x7}, 0x10, 0xd, 0x3, 0xc, 0xc, 'syz0\x00', "6bd4d93f0ddca15f3ce34bb059959dd17d9565e444b7b83c42bd71c744cf30ed", "8199f020e25d45d4acec219c8a612fc329ee82046d806e3a5c1ed26c2f558970", [{0x9, 0x8, {0x0, 0x5}}, {0x2, 0xb, {0x0, 0x401}}, {0x7ff, 0x10, {0x3, 0x5}}, {0x1000, 0x0, {0x3, 0x73bc}}, {0x1, 0xff4b, {0x3, 0xf}}, {0x67, 0x1, {0x1, 0x3}}, {0x7ff, 0x0, {0x0, 0x8}}, {0x8, 0x7fff, {0x2, 0x2e8}}, {0x3, 0x2, {0x3, 0x200}}, {0xb, 0xf7, {0x0, 0xfffffffe}}, {0x9, 0x5, {0x0, 0xbd}}, {0x8, 0x465}, {0x5, 0x2, {0x0, 0x81}}, {0x1, 0x3, {0x2, 0x1f9}}, {0xe, 0x8, {0x0, 0x9}}, {0x1, 0x2, {0x3, 0xba}}, {0x3, 0x1, {0x0, 0x9}}, {0x2, 0x3, {0x2, 0x8000}}, {0x5, 0x8, {0x2, 0x3}}, {0xe, 0x5, {0x1, 0x3}}, {0xfb, 0x7, {0x0, 0x6}}, {0x5, 0x0, {0x1, 0x4}}, {0x7, 0x4, {0x3, 0x1}}, {0x4, 0xc000, {0x3, 0x6}}, {0xac, 0x2a6e, {0x1, 0x3}}, {0x8100, 0x2, {0x0, 0x7}}, {0x9, 0xfff9, {0x3, 0x7159}}, {0x3, 0x10, {0x3, 0x10}}, {0x6, 0x2, {0x1}}, {0x1, 0x4, {0x2, 0x4}}, {0x10, 0x4, {0x3, 0x40}}, {0x7, 0x7338, {0x3, 0x817}}, {0x8, 0x9, {0x2, 0x9}}, {0x0, 0x7, {0x1, 0x16}}, {0x9, 0x9ffc, {0x3, 0xd692}}, {0x6f5, 0x1}, {0xfffa, 0x2, {0x1, 0x8}}, {0xab, 0x9, {0x1, 0xb}}, {0x1, 0x6, {0x0, 0x5dc1}}, {0x800, 0x0, {0x1, 0x4}}]}}}]}, 0x710}}, 0x80) (async) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) 1.747417429s ago: executing program 5 (id=813): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffff}, {0x7, 0x8}, {0xb, 0x7}}}, 0x24}}, 0x4000050) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001100"], 0x30}], 0x1}, 0x0) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async) r6 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, 0x0, 0x1ffcc35c6ab96c2b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r5, 0x8ee4a000) (async, rerun: 32) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) ioctl$TCFLSH(r7, 0x540b, 0x2) unshare(0x62040200) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0xffffffffffffffff) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0xffffffffffffffff, 0x2004c8, 0xdc3, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x400, 0x1], 0xeeee8000, 0x6200}) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = fsopen(&(0x7f0000000140)='aio\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, 0x0, &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, 0x0, &(0x7f0000000080)='\xe0^@&&}\'\x00', 0x0) close(r11) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.646318687s ago: executing program 5 (id=814): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000340)="00214717a70700000000030600f100000000000000a6721d5864002f46780feb56a29357215d78fc44fac3f44d000000e4ff", 0x32}], 0x1, 0x73a, 0x21) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0) chdir(0x0) rmdir(0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26001, 0x13, r0, 0x22e7c000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x7, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x0, 0xf) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000080)={r5, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed16831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) ioctl$LOOP_CLR_FD(r4, 0x4c01) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000280)={{0x0, 0x0, 0x3, 0x1}, 'syz1\x00', 0x10}) ioctl$UI_DEV_CREATE(r6, 0x5501) close_range(r3, 0xffffffffffffffff, 0x0) 1.562966365s ago: executing program 5 (id=815): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff001080000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) syz_clone3(&(0x7f0000000b40)={0x2000000, &(0x7f0000000880), 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x8) (async) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xf4}}, 0x50) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="00fe9d9ab40000f4462b733304a3a3825e38744982120793e1ab31c57d6c88e5a29cb17265c94e225627fab1438a0a43b51dc94c3ee0a102869dc2006ab5991aa8fee0be081ef863bb8e598ff73f7c9fbd0c87edee2b49fd0f2f4a8f523d5264ba6cc0d815ab39e02619a8122447d7f9ac58ed7c37e22b2a88274f1c97c19f9a4f676cbf3a663ed30f52449f4a2466aa319804a8a2baf28a249d4c78", @ANYRESHEX=r2, @ANYBLOB=',afid=0x0000000000000000,k']) (async) read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020) (async) chmod(&(0x7f0000000000)='./file0\x00', 0x148) 1.561934974s ago: executing program 5 (id=817): r0 = syz_usb_connect(0x6, 0x795, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x94, 0x8b, 0x90, 0xff, 0x9e8, 0x62, 0x1cd2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x783, 0x2, 0xd, 0x8d, 0x30, 0xf8, [{{0x9, 0x4, 0xa4, 0xbc, 0xb, 0x2b, 0x8, 0x5a, 0x7, [@generic={0x3b, 0x22, "8a44beecbf9e8b57bf7f3f39775cb87f9bb73183487b01a4c08ab237b41f10bde7c8e4fe5010e545ebfd7a0c22bb5b3f019d49a7dac70e1413"}, @hid_hid={0x9, 0x21, 0x3, 0xe, 0x1, {0x22, 0xf3c}}], [{{0x9, 0x5, 0x7, 0x4, 0x0, 0x2, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xfd, 0x1ff}]}}, {{0x9, 0x5, 0xb, 0x3, 0x10, 0x3, 0x6, 0x2, [@generic={0xb4, 0x4, "7269cef2e03c7c4ecc008e6925f65f80ba9c79b66f2f8179c6c5263b8165bf32d49729d627540fd0904ed201c7fbfe3b7b13e0a26029b31de7d50615f195691a0c7a38647b620a2c5c8a19654b59bf63eeecf83bbdf2c5f821034719c07cff57ad86e59ff08ea2286e54c6b20b9c353f6df0b1aede090ce9eead55b3c4045e612ccc52b2c3a969699e6c09d3c452ca4c874622397d7193ceae10b3701dad698feb92ce1c27506cb5ac76a6d3a571d6430f7f"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x9, 0x7, 0x2, [@generic={0xf6, 0x31, "a90405bc5ef231c252b3259d3e2a30ae9fed5e196ffcc2cf26ec0094a5b152a2541aecbe65a6810eabb343e0f63de9165aeebcb8601a8f44c90027972a93794f50c6e6e2b4fc79b29e00c23686a7c19ade460deb2ce9a7dbe377378642c2b4736aee7f49dda3760a8f280237e3163081c2a1c343f262ec386ffc4bb319f02847111e1f29dab3a9c2880e0776d20d130c22e334ac497f31ad956872876794eb46fda58447a52389b8f7928d65a0b02ac36ac7a8f4a022c9dd472f9bd018d1599d21c448597fd2dba5ae8e8c7f3f9cb75e86d2da021b30ac28311c6f731fa924b83c3117635d96e19bd76a12a7f184aa45aa0dc025"}, @generic={0xbf, 0x31, "f13fcd29660819d72ffd3cfd3749e3e3f6010e888eaba24f6438ba40d76690e1b8309f49fad1fdd11ef52a6e7a498e2b85013f1671d5e605bab23af8817f1b9d3cb82589cc21fbf6e21056493f485b8bbe3d7398dc03ea69cbb33a693fb79e0eadd481688a72443fc53e637e7cffe9865eb943800ccad5e6997597e4d2acdbd642f524a5a07a29d25864cbbb2b4f39c701e5f0b7b037157fa994502378f83e89ef98d33a47a449f4df1d165b84bcbc8257f7e2bd48c4a082832136695b"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x3ff, 0x7, 0x4a, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x48, 0x2}]}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0xb, 0x80, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xc, 0x1}]}}, {{0x9, 0x5, 0x1, 0x4, 0x400, 0x0, 0xf1, 0x6, [@generic={0xbb, 0x21, "39dd832156e98cb43b880e896b7d948e37b05b989bf9893b8d1b834298168cd2132c0c7e935d3289ece8a895bc52e7645a7b35417e9719c97b2247ef233b2ec430b032b180558f76de86f8f9d2bb42ff440c6b4cacc70d7d25f92bc6925d8e9f57b30947d29c9f4f74fbe60dfe8d76ab9625bc6d922296f8bb663048e3e9e154608c6dc2e3adf498588b754cfa3aa812a686d5fa90ef8f72702c827d25d71a14cfbba39cc7a264b14250f3460a24135966b42dcd9a4584dab7"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x4, 0x91, 0x8f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0xff}]}}, {{0x9, 0x5, 0x9, 0x12, 0x8, 0xe3, 0x10, 0x9, [@generic={0xf1, 0x21, "65f688d3f9a9199077c7cd6d81ff43edc71305c2b4b3c98b39b5d8a08f5315994332e8dd18dea5a2ce1311456800e57cb68c86a7c149db99b219bd24c59455b5410475f9bc41a1b8878c781781aea7f3bddefe726e33d1947c58aac2fb6ef8b340b7115c3854789186dd6da5a7a2408c0c89a8402172d1ec34c6b5662ca1d3b66ee6fa08b7bc000a88441dbf30721393a796ddd5e1179d9c54ec7cf824b4735fdf5235099dca10cfc127303bb84d414776d33e5e6f16ad5cb3687ce0e3ad093df31d3f1e50de0d65a4a5872c4481a66af0891202b4331ad451245147d0ff13380076ee50eb5b0ebc93ee7cf4a9d8b8"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x400, 0x1, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x1}]}}, {{0x9, 0x5, 0xc, 0x3, 0x400, 0x4, 0x0, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x6}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x7, 0x0, 0xde, [@generic={0xba, 0x4, "4bb7010c75d5f0e5ccae980dbf6e283b64806f50a59bbe199873286f45ed51c2804960368c2fb953d1b008a877beb62740c37739c9754b29d47c0595b3401879c76384943a9e3576bbb6f1d3ed6daee91cc802d578eeebf3ac8241642b4780126345c1c2ea6188c178838fb794dbacf222b59ea6d2e6443f7797869ceb494565bf814f978f98957720d590c4a06c7c0bf4c9b4478495e7c8bfcb53ac38898473782942169eb6ce842c75dcd507d4f6761d388eab034bb5ef"}]}}]}}, {{0x9, 0x4, 0xa3, 0xfd, 0x7, 0x92, 0x34, 0x3, 0x9, [@hid_hid={0x9, 0x21, 0x6, 0x3, 0x1, {0x22, 0xeb8}}], [{{0x9, 0x5, 0x0, 0x10, 0x20, 0x81, 0x74, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x2, 0x1, 0xff, [@generic={0x31, 0x10, "8a17f8dae613fad461f5123d153120fed89a11b0abff7fdc78cba732747bad48d036c76d0cd9585e66e8cf4a986acb"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0xfb, 0xc, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0x8540}]}}, {{0x9, 0x5, 0xf, 0xc, 0x20, 0x2, 0x7, 0xd7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x10, 0x3}]}}, {{0x9, 0x5, 0x83, 0x1, 0x40, 0x9, 0xf2, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x65, 0x4}]}}, {{0x9, 0x5, 0x80, 0xb, 0x200, 0x0, 0x5, 0x8, [@generic={0xe4, 0xa, "1111de056ebe3e93cf91478ad21b4b00e1dd3562948737d3e3e2ca3d2a1480dc0a079306a810700a0af2800d7f84d18e260e0823d0673daaa0b2a46e6ef1176243c442fa79e08008dbc75a799aa4f21687bad3a42ef9c8612092738d8090ea9a2eeefc9d8bf941e315f457ca893a0a372f9ba3393cb48f49cf378cdc23fbed9c42a14128e466a001d9c19fb08c6ec0d588c7581f4b614ea50bf80f9bd8d37af5d3afeed7ab3cb206582e01cbd4004e2ff0af61f6bbe9c9dc866fcdc83c0490a7218e8decf4fb6cab7db91fa7f43ba7d5a61f4ded76a8b80be438f1cde614a9a6fc66"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x9, 0xf8, 0x5, [@generic={0x4f, 0xd, "6544f47bbb330437bee8656cb44d33b93e942eac9b542a1e730c5e0640ab5981f7c06cd1cf3cd19eb7d5c7c7e72a75de255cb45a4f3a9511ab3ab57d59933ac94124be9b860664812e2c9364c3"}]}}]}}]}}]}}, &(0x7f0000000a00)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x310, 0x83, 0x2, 0x5, 0xf7, 0xe}, 0x19, &(0x7f0000000800)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "77f2102988c89c0d423a8fb32fee6318"}]}, 0x5, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x2809}}, {0x8b, &(0x7f0000000940)=@string={0x8b, 0x3, "a2521788d0c442cf9fe0a11a452521b2563b57503eee4f024706edcdf6e02cd925e85fab2eec8424198508f0efb71647ec18c71d9d34756a337a5c7b6c64532a00b08edad81260915d362c4011c586771917faa0b504fcf0d3aeac48cda867bd9efffeb25359e4bddcbe3a3156da9a468e982c1f306bcac17c692d315c6ba0d4d12b2999c8022b13dc"}}]}) syz_usb_ep_read(r0, 0x6, 0x4f, &(0x7f0000000a80)=""/79) syz_usb_control_io(r0, &(0x7f0000000d00)={0x2c, &(0x7f0000000b00)={0x20, 0x3, 0xa9, {0xa9, 0xe, "bc4fe577ee9043b845c897972a12c949b705b61beef62be58a9800da9c0f50688925185ceb4337433af7b4bd28545b6ac5d95942be013f0ab86a0f543eb1bb52ba6ba2226c8f24caf463585ee82c7a69d456af3d7a7e3a41e93f24aa18579df0adc9f895f49edf333ef651c585548c9fd66d7d3d4112bef4f87d8034a48f51dc09a69d5a65a00162ed417ff6903a29301195a3c9c2310c1a9c079ec9dae77cc3627b274f6cb383"}}, &(0x7f0000000bc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81d}}, &(0x7f0000000c00)={0x0, 0xf, 0x56, {0x5, 0xf, 0x56, 0x3, [@wireless={0xb, 0x10, 0x1, 0x4, 0x41, 0x40, 0x6, 0xb7, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x1, 0xff}, @generic={0x3c, 0x10, 0x2, "96605dacf2bf9ceb18674d0d58a40f95619ca1be8573f11922d3351b864187b9a6ccf2ad72c275b9c26b04c2d960ad6d977eedc1938bef876a"}]}}, &(0x7f0000000c80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x80, 0x0, 0x9, "3ee76542", "f8063354"}}, &(0x7f0000000cc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x0, 0x8, 0x11, 0x6, 0x24d6, 0x6}}}, &(0x7f0000001180)={0x84, &(0x7f0000000d40)={0x20, 0x14, 0x50, "826205916e3a67a8db91161d30e20fd87d0c53cf7e3769d62c4fa1bb26b482b4a0eef16d34bbf77055d63239e249d8917b1eb9e74a199ec8ac69f0f8e3d4e4b3b8ae5b5bc4346ae27525c3687ad8ad21"}, &(0x7f0000000dc0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000e00)={0x0, 0x8, 0x1}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000e80)={0x20, 0x0, 0x4, {0x200, 0x60}}, &(0x7f0000000ec0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000f00)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000f40)={0x40, 0xb, 0x2, "4ce3"}, &(0x7f0000000f80)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000fc0)={0x40, 0x13, 0x6, @random="cc9eae4e757c"}, &(0x7f0000001000)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, &(0x7f0000001040)={0x40, 0x19, 0x2, ',l'}, &(0x7f0000001080)={0x40, 0x1a, 0x2, 0x5}, &(0x7f00000010c0)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000001100)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000001140)={0x40, 0x21, 0x1, 0x7f}}) io_setup(0x6, &(0x7f0000001240)) (async) io_setup(0x6, &(0x7f0000001240)=0x0) syz_usb_control_io$hid(r0, &(0x7f0000001400)={0x24, &(0x7f0000001280)={0x0, 0x23, 0x97, {0x97, 0x23, "d2b92d9ae3edf8695913be5118281963a46e3dcea7b4daca8c72d0f46e7b180f89415162020cf8b6a418158fc5653e0c20a44db8ea032959d7a493cd83fe689d6431518b36248b2c5cbca4e6712d8864368fc154f8b529d56c446366425f0a13d7523d0a4ece61f13acd0b61a8dc3a7fc6f59d209ead79afd913f735f3d8dea4d21ad09d1bc9ed761a0f99b7e72ed3e9d9bd81c2ac"}}, &(0x7f0000001340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4c0a}}, &(0x7f0000001380)={0x0, 0x22, 0x13, {[@local=@item_012={0x0, 0x2, 0x9}, @main=@item_4={0x3, 0x0, 0x8, "e6e6f580"}, @global=@item_012={0x2, 0x1, 0x0, "e03b"}, @main=@item_4={0x3, 0x0, 0xa, "db7cb220"}, @global=@item_4={0x3, 0x1, 0x1, "aed8a83e"}]}}, &(0x7f00000013c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0xe4, 0x1, {0x22, 0xb21}}}}, &(0x7f00000016c0)={0x2c, &(0x7f0000001440)={0x0, 0x17, 0xab, "e8aae8ff9ab0af2b3e44a151c9c053b42d63159851696f4c35edbe797aa1b0e5982c823ad6bc08e940681c9c0c8f191dc14371c8fba2cf67103f24179328994db8e353315c8854b4fb639fd7e956413a23a569be85eb75b70426bbfcc69d3f943243c577c12315a4e6999552c2331dd1b0fd5a8097256fe390e3a50c898537371e8a6ec6875d5eee1fb5e70b5559a4ea04b04530183cb0701ff1d3b7e83568b5238300919bbc1386a18819"}, &(0x7f0000001500)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001540)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001580)={0x20, 0x1, 0xc4, "e6f60d754f84cc704428f757c9feb0218b6dddeaf6a4ab3ac0dc23579a10af6d9ceff74acbc8f3a332f95b862b61295a2b415633b044c583f67338a51ef5436b03d37ca1364b487d49189879d24484f157b60023ab49293de0c62f3a5e517bcaec9317cea3e7437c259f0f139659ad9b80345ddf32d76b1104725ae935330619da7caf733907c218fec208582ce9ec00c9fabdf8b245518846bb8f27c55a949273ccb2be0605b78f286be3a667a8487031c19feabf0798a7f094de9fdb87b91323673c07"}, &(0x7f0000001680)={0x20, 0x3, 0x1, 0x2f}}) (async) syz_usb_control_io$hid(r0, &(0x7f0000001400)={0x24, &(0x7f0000001280)={0x0, 0x23, 0x97, {0x97, 0x23, "d2b92d9ae3edf8695913be5118281963a46e3dcea7b4daca8c72d0f46e7b180f89415162020cf8b6a418158fc5653e0c20a44db8ea032959d7a493cd83fe689d6431518b36248b2c5cbca4e6712d8864368fc154f8b529d56c446366425f0a13d7523d0a4ece61f13acd0b61a8dc3a7fc6f59d209ead79afd913f735f3d8dea4d21ad09d1bc9ed761a0f99b7e72ed3e9d9bd81c2ac"}}, &(0x7f0000001340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4c0a}}, &(0x7f0000001380)={0x0, 0x22, 0x13, {[@local=@item_012={0x0, 0x2, 0x9}, @main=@item_4={0x3, 0x0, 0x8, "e6e6f580"}, @global=@item_012={0x2, 0x1, 0x0, "e03b"}, @main=@item_4={0x3, 0x0, 0xa, "db7cb220"}, @global=@item_4={0x3, 0x1, 0x1, "aed8a83e"}]}}, &(0x7f00000013c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0xe4, 0x1, {0x22, 0xb21}}}}, &(0x7f00000016c0)={0x2c, &(0x7f0000001440)={0x0, 0x17, 0xab, "e8aae8ff9ab0af2b3e44a151c9c053b42d63159851696f4c35edbe797aa1b0e5982c823ad6bc08e940681c9c0c8f191dc14371c8fba2cf67103f24179328994db8e353315c8854b4fb639fd7e956413a23a569be85eb75b70426bbfcc69d3f943243c577c12315a4e6999552c2331dd1b0fd5a8097256fe390e3a50c898537371e8a6ec6875d5eee1fb5e70b5559a4ea04b04530183cb0701ff1d3b7e83568b5238300919bbc1386a18819"}, &(0x7f0000001500)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001540)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001580)={0x20, 0x1, 0xc4, "e6f60d754f84cc704428f757c9feb0218b6dddeaf6a4ab3ac0dc23579a10af6d9ceff74acbc8f3a332f95b862b61295a2b415633b044c583f67338a51ef5436b03d37ca1364b487d49189879d24484f157b60023ab49293de0c62f3a5e517bcaec9317cea3e7437c259f0f139659ad9b80345ddf32d76b1104725ae935330619da7caf733907c218fec208582ce9ec00c9fabdf8b245518846bb8f27c55a949273ccb2be0605b78f286be3a667a8487031c19feabf0798a7f094de9fdb87b91323673c07"}, &(0x7f0000001680)={0x20, 0x3, 0x1, 0x2f}}) syz_usb_control_io(r0, &(0x7f00000018c0)={0x2c, &(0x7f0000001700)={0x20, 0x21, 0x3b, {0x3b, 0xa, "7eb27c8e987dc82f80d915a1717d0adc7361c571c76a71be2320491663dc1293b1b5bc8b31cf79bb32320eb595f144dbd740be997ca5d1d391"}}, &(0x7f0000001780)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f00000017c0)={0x0, 0xf, 0x4a, {0x5, 0xf, 0x4a, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x7fffff6, 0xf, 0x3ff, [0xff000f, 0xc000]}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0xb, 0x6, 0x800, 0xf00, 0x8, [0xff0030, 0x3f0f, 0xc0, 0x3f0f, 0xffff00, 0xff]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xf8, 0x4, 0xd2}]}}, &(0x7f0000001840)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5d, 0x1, 0x5, 0x0, "80677a8d", "2f4da92e"}}, &(0x7f0000001880)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x0, 0x9, 0xc, 0x7, 0x400, 0x5}}}, &(0x7f0000001d40)={0x84, &(0x7f0000001900)={0x20, 0x10, 0x4d, "9058981349a7dab6e74f1fa6f280d9a674417332bb9636f1326dab09bb3df8393598107c9f1757bbd8a08c8de15c0363f6230896c5c6171526d36f6b9c274465246a3a88d586715bf6b42ca327"}, &(0x7f0000001980)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000019c0)={0x0, 0x8, 0x1, 0x50}, &(0x7f0000001a00)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000001a40)={0x20, 0x0, 0x4, {0x2, 0x4}}, &(0x7f0000001a80)={0x40, 0x7, 0x2, 0xfff1}, &(0x7f0000001ac0)={0x40, 0x9, 0x1, 0xff}, &(0x7f0000001b00)={0x40, 0xb, 0x2, '3\a'}, &(0x7f0000001b40)={0x40, 0xf, 0x2, 0x7fff}, &(0x7f0000001b80)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000001bc0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000001c00)={0x40, 0x19, 0x2, '^-'}, &(0x7f0000001c40)={0x40, 0x1a, 0x2, 0xfffe}, &(0x7f0000001c80)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000001cc0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000001d00)={0x40, 0x21, 0x1, 0x7}}) r2 = syz_usb_connect(0x0, 0x3d1, &(0x7f0000001e00)={{0x12, 0x1, 0x250, 0x3a, 0x4f, 0xe7, 0x0, 0x51c, 0xc001, 0x320f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3bf, 0x1, 0xfa, 0xb, 0xc0, 0x2, [{{0x9, 0x4, 0xd4, 0xd, 0x10, 0xdd, 0x6e, 0xea, 0x40, [], [{{0x9, 0x5, 0x0, 0x10, 0x200, 0x8, 0x96, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xfd, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x23c7669f84ca4569, 0x3, 0xe40e}]}}, {{0x9, 0x5, 0x1, 0x19, 0x200, 0x8, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x80, 0x6961}, @generic={0xba, 0x21, "7f664fa49a58f7ca192be584054301c980d272632cb0ef409d4559151a6022edbe4a28111e3b22d6bb383cf2a74e7ad8b007b087cde4af0aebbeb4def701487d319a1c782c195b859d13d36ecbf9af03f8daf9f16cfc94471a3f872738eecdd498ae8236c7c4fea43c9650ed9d35f7966cfd0a6170c6c9a2d03f57fea8eb0351bb2787b612cdf75cd9b8957136515e2a684d905ea9c389db6162570acff59f446eab50ea50cd74ff6a4d7d59cfb1034304a8b4be4a499dfe"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x200, 0xb, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6d, 0x101}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x8}]}}, {{0x9, 0x5, 0xe, 0x2, 0x20, 0x80, 0x1, 0x1}}, {{0x9, 0x5, 0x9, 0x4, 0x3ff, 0xd, 0x40, 0xc7}}, {{0x9, 0x5, 0x6, 0x10, 0x630, 0x82, 0x10, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x1}]}}, {{0x9, 0x5, 0x9, 0x3, 0x200, 0x9, 0xfc, 0x7f, [@generic={0xb5, 0x2, "39e270b6ab384b11003a37ac979cc7a73ce21f482eded4b9915173a441633d113a441ab46f761aebd6cd95e23dbab7a66a672e12d5706e802a68dd0e27b319da0d329967c228510c5248fea660280204ce7401975bbdbedd2f5e1b6dd7db9cf918696a72136bef30a9002744b3efe6b0af0ae19fc85efb82c5ec2f252aee44958247101b948f7d21b46905eb49181c07ca0d0d15fcc79bea9555ef052d0751d28b6794d882fef961af5cf35e37e1f8211930e1"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x10, 0x1cc5}]}}, {{0x9, 0x5, 0xb, 0x0, 0x7ef, 0x2, 0x4, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x7f}, @generic={0x46, 0xe, "5e8480d1f9933701fbaa3cd95df82a805540c44bd2c4f2c23a6de3347d6838ed05b7c13241738de063da9a94703cdb9d7f71ffd9bc108911a19803157c3218028f060697"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x5, 0x4, 0x4, [@generic={0x31, 0xb, "bd2cede75d3904c5c54bdc1220f4e378ca2cd05ca51caebb68b9c311b7aebcc42894b0c2d58f73282f97f75f4296a6"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x7, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0xaaf0}]}}, {{0x9, 0x5, 0x6, 0x10, 0x7df, 0x81, 0x0, 0xfc, [@generic={0x49, 0xf, "735a71cfa5dd6ef6f7cccd0fd56f97d7ebe10e2b816ec2f903915dd768c39b7ece672ed50bf92824d73c34633467b2fc3899ce39093f4f5ea2ceaec75118973794e93068e207cf"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x200, 0x9, 0x2f, 0x0, [@generic={0x6a, 0x24, "a1e2d4ecfef5ec2e267ddf8d542269f764ad61c8e2c6168623bd5b83516f9f04ed8f95067294585a001108f8f1b0326d0acf0c6e463a0f9ae2418632f9c74643e57ed6cc48c1ac0fcf989ae8f0fc5c0b1d8a98e642135910af144f99d2691aa79434aca9ac06a334"}]}}, {{0x9, 0x5, 0x2, 0x13, 0x20, 0x6, 0xe, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x800}]}}, {{0x9, 0x5, 0xe, 0x2, 0x20, 0x81, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x8}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x8, 0x7, 0x3, [@generic={0x30, 0x10, "dd421d457a3f01cdfcc6503aedaeef9e812876196eb24313fae471422a9a319276187811b3836cf014711f46290c"}]}}, {{0x9, 0x5, 0xb, 0xc, 0x8, 0x4, 0x1, 0x3}}]}}]}}]}}, &(0x7f00000024c0)={0xa, &(0x7f0000002200)={0xa, 0x6, 0x110, 0x6, 0x9, 0x0, 0x20, 0x6}, 0x38, &(0x7f0000002240)={0x5, 0xf, 0x38, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "5bf8fac115d4d7a9005ba7f88dcfc3cb"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x6, 0x1, 0xd}, @ext_cap={0x7, 0x10, 0x2, 0x2e, 0x3, 0x3, 0xfffb}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x28, 0x1, 0x6, 0x5, 0xe}]}, 0x5, [{0x4, &(0x7f0000002280)=@lang_id={0x4, 0x3, 0x3009}}, {0x55, &(0x7f00000022c0)=@string={0x55, 0x3, "552604bc0a7b41154a3360ff5d1f29aa5f394ab036f7c6800787a7741a0827886a823bbfbf53cc4b8657611da644809c884f0d2309487f5efd66f92815b0ab82bd752f63d0c115d8d438ab83575b1e2de25f2f"}}, {0xd4, &(0x7f0000002340)=@string={0xd4, 0x3, "01657b658f368780bce9c43d4f90154b3abb1233fe3c5cc0e03e33a9ed1607320acf81dfa22edd98c8a8cc98dc0d6727198dad8d7db8284e25210e80e4d32f5bfa70fbace51c65ca3e3862499c5cd11ae67a39cd4ea704b5d5c7aee446afc7c8b5d2e87079c83abcf297ff57389eeaecdcc485f44e49bdcd613a7335ba8d4139e5c52dc4c8fe5d339a4915947020f37a72c0e9a435eeddb487187b002eb3b4395993ca280003c9cb50c2dd3133be9192dbafc415eb786814adbf97bcbf1309252040b96a0da6adca61be1204a66d3db07381"}}, {0x4, &(0x7f0000002440)=@lang_id={0x4, 0x3, 0x380a}}, {0x1e, &(0x7f0000002480)=@string={0x1e, 0x3, "2df20096610b439a8f881c9d6c9e3a4fafb4cc2c3e37c0a5be0de955"}}]}) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000002640)={0x14, &(0x7f0000002540)={0x40, 0x22, 0xab, {0xab, 0xd, "11dea898aa0975884db8af14783c3e04eabce4884d6cefa0d4da23a5ec18b039c481e8faf156b14988dc1aebde06194dba05ad74c27b32a5769a37a72e4c43257d0d472c9f7c1005a7798749260a46a62a8eeb26c19522ceb31828aa2ce61d3be20dd334792492ed9b5c4c8fdfd263553172dd90bbd48c18c55cfb890a923742948cbdbb948cca013c88e65f5d9215bd81d205c19c7c7d6b53d17ce941c36fc0db8626148defad9f1e"}}, &(0x7f0000002600)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002780)={0x1c, &(0x7f0000002680)={0x0, 0xd, 0x52, "8f2ed2cb11ae5f2664383e74841c9794f03bc1f2c4ef1d42c469e62aaf1752ed8c149375685e4ad9ebd00a14beb32a24697cfdefd282f4f9e856cadfbbf8f28d630f5a663bad565e0c9c686be1767d3c4aec"}, &(0x7f0000002700)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002740)={0x0, 0x8, 0x1, 0x4}}) syz_usb_control_io$uac1(r2, &(0x7f0000002900)={0x14, &(0x7f00000027c0)={0x40, 0xc, 0xda, {0xda, 0x10, "6c76ae9fbeaafdab9cd86ebeb740eaacf4deed86668905cfe1a91504a6df80e24e26458bf973d66326fcccef6bb6d7da3c5680623dc2ea621e55020de6c215c03319270b64ec766256bc5a9567f4299d47f97de2df005b49e323b239d4dde05c3aed32b29039a3d7f956093a9ed182bc2fadfc38baa05469a132533302b6c399098b2493c3f69fddc8ab9f371df062806a24871e40b82ecdf79ff8c9a108869ff0980c2965023d837acb2f39505563e5e398b585528b609ef50774a49094a41c1384327f9a3314c17df5742b592e22911486d5971adfca33"}}, &(0x7f00000028c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x410}}}, &(0x7f0000002b40)={0x44, &(0x7f0000002940)={0x20, 0x14, 0x11, "09ffea7b4265b5f0bc512b3286a1797f53"}, &(0x7f0000002980)={0x0, 0xa, 0x1, 0x19}, &(0x7f00000029c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000002a00)={0x20, 0x81, 0x2, "4ddc"}, &(0x7f0000002a40)={0x20, 0x82, 0x1, "d6"}, &(0x7f0000002a80)={0x20, 0x83, 0x2, "852e"}, &(0x7f0000002ac0)={0x20, 0x84, 0x2, '3n'}, &(0x7f0000002b00)={0x20, 0x85, 0x3, "bddd96"}}) r3 = syz_usb_connect$uac1(0x4, 0xfa, &(0x7f0000002bc0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x48, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe8, 0x3, 0x1, 0x0, 0x10, 0x40, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x53}, [@extension_unit={0x8, 0x24, 0x8, 0x2, 0x9, 0xd1, "fe"}, @selector_unit={0x8, 0x24, 0x5, 0x1, 0x40, "e56c5b"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x202, 0x4, 0x9, 0x4, 0x6, 0x81}, @mixer_unit={0xa, 0x24, 0x4, 0x5, 0xd, "8a1427dc1c"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x302, 0x3, 0x2, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x73, 0x1, 0xff, 0x5, "8e13", "b0"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1, 0x3, 0x9, 0x5, 'J', '~'}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x2, 0x4, 0xf2, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x4, 0x3, 0x6, {0x7, 0x25, 0x1, 0x3, 0x3, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x8, 0x1, 0x5, "8e"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xdb, 0x4, 0xd, 0x0, '&\fJ', "88"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x1, 0x4, 0xe, "6f93", "13"}, @as_header={0x7, 0x24, 0x1, 0x81, 0x6}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x4, 0x5, 0x6, "dc4c", '^'}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7, 0x3, 0xa, 0x7, "", "c2d2"}]}, {{0x9, 0x5, 0x82, 0x9, 0x260, 0x2, 0xa0, 0x7, {0x7, 0x25, 0x1, 0x2, 0x6, 0xda6a}}}}}}}]}}, &(0x7f0000003040)={0xa, &(0x7f0000002cc0)={0xa, 0x6, 0x110, 0x7d, 0x2, 0xff, 0x8}, 0x1f6, &(0x7f0000002d00)={0x5, 0xf, 0x1f6, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x0, 0x8}, @generic={0xf9, 0x10, 0x2, "7eda5d659640696bae58de9fde83a1874230fba96d66c501fb01c4dd02ade3e4328abd2e97e0c05abbb43dd228ad7248de7babaae18f1dd9788f82316fb87a81feb68bc80a39f4dbef0bdf8fc92460e1cd1b200afb3ef70bd9dfcdeda1dad5bc8853c6aac5229f1681012a8e2ee74a1b2c3a57c9ade6e4046e846854a35f4bc239858923bb98e82ef4997ed5f1b994616b601e5356dda8c041fe82512e2009459a4967328fca7d9430f46528ef69dcce8a2b1251906b24d00a44ef233f8df6c1f3c95e2ef002f803d7e717141f89d0e5402860272ba832aa819ec56910a6e4b6d77593e3f7df935d19787e795fe81e43c6100c44ffe4"}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "811628c120b4693a389bd2dd49ba11b3"}, @ptm_cap={0x3}, @generic={0xd6, 0x10, 0x3, "0cd2f944fd903dda3339754ff0c5c27995018beba7c9fef1c7ae62af296e0187ad1297250d9ad6fbad9baac6977d86131151b715f2f08fcf0cfa0c0799b7c00a6078f553a8743200aa75e78bc589a6fc862ae51c037c0bb6df6f1dd1d26cd948278a779536cc07eeb733e7ea049c8b8d11f14bf79a3920ea180353322b2c462bd9ac5ec8a120b812b1eda7036632dabdf9bc9cd0f0ab8b9741b47a6d518653aba54c1b4571aef68f898a7d2eddb9f78569eead557a3c67233a6997bbd8d517ac454dfc4ac84e8142901020bbde92f47d789077"}]}, 0x4, [{0x7a, &(0x7f0000002f00)=@string={0x7a, 0x3, "6d3a6c2c7d20d0fdbdf2cca170b06e66068463e570f33a0365637a4552d0b8982a93fc2b10c205809c46159704bf14d15f3c5607cc0e2c9b6e46ee4e8c0974587de1fc74238b13a947636eb0dfa7efd7dcf48c9b74f49f19d21b8610b117bacccd5d95592dd20a707cbe2d2c3bb26e692d72904c70056518"}}, {0x4, &(0x7f0000002f80)=@lang_id={0x4, 0x3, 0x827}}, {0x1b, &(0x7f0000002fc0)=@string={0x1b, 0x3, "54e24e50c684a8c1632c92ffe8ae96740e07fe912d288d86f9"}}, {0x4, &(0x7f0000003000)=@lang_id={0x4, 0x3, 0x84e}}]}) syz_usb_control_io$uac1(r3, &(0x7f0000003140)={0x14, &(0x7f00000030c0)={0x20, 0x9, 0x20, {0x20, 0x2, "76832983eed333bbe8e5fa710bb98be75d76a6ad34df5deb7a9c0d680755"}}, &(0x7f0000003100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x240a}}}, &(0x7f00000033c0)={0x44, &(0x7f0000003180)={0x0, 0x18, 0x70, "0ca13c76ecad5e252fa407c9b02b1b3fb5df29b9e260e367fe649fd4f3ffc9bf973a0063d86ca0c937a91250c463e5e1357d3f3b99795815cf0941fd7ff388a3083b13c381f75983ff23149aec98b1659e68e9003d318767fe3a7690ca60d757943343e0eaeb60d9dc0880a58b27c0c2"}, &(0x7f0000003200)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000003240)={0x0, 0x8, 0x1}, &(0x7f0000003280)={0x20, 0x81, 0x1, '.'}, &(0x7f00000032c0)={0x20, 0x82, 0x3, "7d4ac2"}, &(0x7f0000003300)={0x20, 0x83, 0x2, 'Y\a'}, &(0x7f0000003340)={0x20, 0x84, 0x1, "bf"}, &(0x7f0000003380)={0x20, 0x85, 0x3, "3be54b"}}) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000003440), 0x2, 0x0) (async) r4 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000003440), 0x2, 0x0) r5 = eventfd(0x347) io_cancel(r1, &(0x7f00000034c0)={0x0, 0x0, 0x0, 0x3, 0xa789, r4, &(0x7f0000003480)="c0bfdd7a581e4328acf38ef1256cc75853f301eb44d082e8a844e7117cca00", 0x1f, 0x56, 0x0, 0x2, r5}, &(0x7f0000003500)) (async) io_cancel(r1, &(0x7f00000034c0)={0x0, 0x0, 0x0, 0x3, 0xa789, r4, &(0x7f0000003480)="c0bfdd7a581e4328acf38ef1256cc75853f301eb44d082e8a844e7117cca00", 0x1f, 0x56, 0x0, 0x2, r5}, &(0x7f0000003500)) syz_usb_connect(0x6, 0x996, &(0x7f0000003540)={{0x12, 0x1, 0x110, 0x1d, 0x52, 0x5f, 0x10, 0xc45, 0x613b, 0x9aaa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x984, 0x2, 0xe, 0xd, 0xe0, 0x34, [{{0x9, 0x4, 0x6d, 0x34, 0x8, 0xd6, 0xb1, 0x3f, 0x0, [], [{{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x7, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x9a9a}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x1, 0x7, 0x0, [@generic={0xf4, 0x4, "b98e0cc8e8a8ec58f10ba752c1e8fb2e7004fe6880bab9d931d05d7f8a87cc98e6c75f27bc877d18fd2e7b4ad5b66ad17132240cad87f0272ed1d87aaa47b5b49d557efeff6ee39af39405626a18b761ce59adaa00fa7c217ab04eafbe7fed2b699774f44930f510020449a148d822567a4e7a317436289272d02f7a1915f37944451a14b97e7acd3c27497d989d70ff8db757783c3e0bd40d0d65c36b6f27b8ede13f3bf7e7b50d123f5d77a4f69007821b83c552932b8b82bae1bea5b5185a5999d3af7db525ffac7f5bbb90e45c10beb9649eebecfa7a4adb57a7cc8c74b550a7e56522f4d11a6f4313c19ab4eeee8f36"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xb, 0x2}]}}, {{0x9, 0x5, 0xb, 0x1, 0x10, 0x2b, 0x7, 0x9}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x5, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x7fca}]}}, {{0x9, 0x5, 0xb, 0x0, 0x0, 0x5, 0xb, 0x10, [@generic={0xec, 0x21, "f37d44e45e0223188cafe186e7e22f061554475232aeaad338581c2537d40b3a2646d320302835c2692058a7d29e69f4063fc7f30568e95cb38a6e665c83aecddb58b96e05f1c18bf3714d548c0233f332e0f43d52505d5009825696593842e8eaeeda2cf241824b80e4ed611ba397414976de5c1f7294129c935b8381e54134d2906bcab308ab65279afc094d332744ae6073b30d544108f9f8538c9f116cc97dfa9b6ef76321dc254d3343c6186486ef14557fe4432038df45b3a8bed96f978eb99a23cc265c8c8ece75fc72c7c56631d8aa737808da5ecf01dcc2a756fc2701874b4b8ce7c635af92"}, @generic={0xe9, 0x22, "b8f62a8445761d70f3f35072beb4d6c40e91d4046de066f3d7575ea4673c8c0b7b7260a9d8d9825d2013abf490b6f73d83182aac59f289ecf572a436d3791ec13a672693934e79caeeb1557d9e637127b97841b4276849dff305da50ccdec3eb5abdb7a6399aae49ec9ccfbd776a1bc452c56dcd6a724383c69bb06df2c163b82b027570d920bb8072a4b893e0d64d1d84ebc1e3de033a54813dc3bddd29e9e0a2ab282bada1f62e1d178c1285ba6f3ae32d94ccf9f6215452ed5f4f8f22ef7ca71bc9b3f30539360ceca8650350816a5f31d78b10adad95965a8d24fc6369a929de368dc1107a"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0xd9, 0x10, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9c, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x5, 0x4, 0x10}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0xb5, 0x7, 0x77}}, {{0x9, 0x5, 0xf, 0x2, 0x400, 0xc, 0x4}}]}}, {{0x9, 0x4, 0x1, 0x7, 0xe, 0x7c, 0x7d, 0xbd, 0x10, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xd689}, {0xd, 0x24, 0xf, 0x1, 0x8000, 0x62, 0x10, 0x4}, [@mbim={0xc, 0x24, 0x1b, 0x4, 0xf16d, 0x1, 0x9, 0x8, 0x1}, @mdlm_detail={0xc1, 0x24, 0x13, 0x1, "6b9eac4108181740cf58cef3d574dce6e1f3e8aa7686acde8d04130822430fdf28c3d8d57ff5b7fed4d3e3507fbf326f574847d286da4a86c938cc3ae16275560c0cf47d99285c78de773359e109fe9a029efcb33e09db8c65c989232e40f34f9ea8c4928ca3473ea4c64bf5c8b83c99ded0a78b587ef77dd5606caffa006ef0302bd247c45c6d6baf03714e4fc37143c87bb57530323d1617cbeacbd77a306398b442236aa27bc80fb4bcc9417b4131cd092a8fc1d24d354336c5da41"}, @mdlm={0x15, 0x24, 0x12, 0x1caf}, @mbim_extended={0x8, 0x24, 0x1c, 0x100, 0x2c, 0x40}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0xf, 0x3, 0xb8}, @country_functional={0x8, 0x24, 0x7, 0x94, 0x8, [0x9]}]}, @uac_control={{0xa, 0x24, 0x1, 0x200, 0x9}, [@extension_unit={0xa, 0x24, 0x8, 0x1, 0x7, 0xb2, "bf6448"}, @feature_unit={0xd, 0x24, 0x6, 0x6, 0x3, 0x3, [0x8, 0x2, 0x1], 0x9}, @feature_unit={0x11, 0x24, 0x6, 0x3, 0x2, 0x5, [0xa, 0x8, 0x3, 0x9, 0x1], 0x8}, @mixer_unit={0x5, 0x24, 0x4, 0x6, 0xf7}]}], [{{0x9, 0x5, 0x1, 0x8, 0x8, 0xf3, 0x16, 0x6, [@generic={0xe0, 0x5, "582a6423c4514b1a127c312979f393dd2ac6d2e77b16017b105877cf1ead88b4a495ca152928b6ce5d6bc52bab0ee8ec8cfd6d6550f35f258c4dab56749622e10d9dcdf4bbd35f512b1ee88594729efca58c2ebf2f3f8358c03169d10b98f7c93d79adcd1da10d7244562c097ad49f33a214fd81bb9f064d5fd67be6fd3e1e85be35952d9b71a9d3c51ce3d9c522cec9f8dc995c18d393f63f08088c0992f6d4e4d745a7150703c357d6e119fd18b7a69f13fbc1a22a3486d94435b6515ea6217f44bd90ffbec8fda003159b5e36994f73065154226378e025884b295c61"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x200}]}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0xf6, 0x10, 0x8}}, {{0x9, 0x5, 0x1, 0x4, 0x20, 0xff, 0xd, 0x2, [@generic={0xfc, 0x23, "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"}]}}, {{0x9, 0x5, 0x8, 0xc, 0x10, 0x2, 0x6, 0x3}}, {{0x9, 0x5, 0x4, 0x2, 0x200, 0xc, 0x4, 0x7, [@generic={0x65, 0x9, "f8c02c4b8cfeb005496ac25abd69100a7fb99f18b492d6728f7659e04805f0ee69e69a93d718dc676c400359e76c2e43a2a6cd435b179219f30cacddc2ac47dc4ff2dba6ef6cea4380d907cb0655bb0104b81d4d13fad05c0dcb5e29fb02f009547325"}]}}, {{0x9, 0x5, 0xf, 0x8, 0x40, 0xf2, 0x2, 0x4}}, {{0x9, 0x5, 0x9, 0x3, 0x400, 0xdb, 0x8a, 0xc, [@generic={0x63, 0xd, "5ca2aa4c6bcbe4b383bc35b5570212154c4c0b7d28ba3ef7ff1407957dfde1b31ca0089e4403cde5a9ea5b4788ba33c4c5b1be2fcf0917a2967060c025990fed446ea3ec3a9119d2320b5c32f216ac0662a084031d0a9a6bd302277824b6f6b1a0"}, @generic={0x97, 0x30, "9113d2582d5d3021e28a5229637c0567d0f8cbd695e8247cea540eb01303db46ea41116d04e80fab9d5f4baa0f8eba9a32e96d1c526405b5c42dcc0086a86fd1443002eb871420ff4ad392292229a1680da5534af596497c4891cda3e6ce03e52be3fbf1c04c712c62b3e224ff3901c6854b24cd1b74e8fbcb4b898bfddf963aaeeed61bdf62d1a9cff26ad0a7232737b887eb9260"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x8, 0x94, 0x7f, 0xf8, [@generic={0x18, 0x7, "c515bf9c71d7766ab3ab652426023d75c61ed04f0c85"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x10, 0xff, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xf, 0x3}, @generic={0x57, 0x23, "b84da9b1cf618fcee6dbe79490f4dfa9fe576de6b63b0a775eda989365b1c67efba22f02b8b7428454f7513e0813daa18813c61412905142c3ded14af16ac98fae400d6a41b438b4dca904b8988281b0129542b3db"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0xd5, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x6}]}}, {{0x9, 0x5, 0x5, 0x0, 0x28, 0x6, 0x7f, 0xfe, [@generic={0x36, 0xc, "27c36852cbbe0efd0a8912ec4e26122c62b3efab7f0ec3ed51e87fcefe60d244520342f6f4f1cab2de4ef08923d83cbf710bf273"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x8000}]}}, {{0x9, 0x5, 0x3, 0x8, 0x20, 0x2, 0x8, 0x7, [@generic={0x1b, 0x9, "23f17cd3faa9ae63986bb26598bc23b1eeb9dc091a57c78771"}, @generic={0x53, 0x9, "cabcc5b333795e33266bf92dfcdd61066e6a9b6396c306060d80be00537a7ce82b2bd8581c3162118238eb6ebc9dde051527a212b615d324558ad3a619c8f74ee56523c315bcb638bd767ba72b9243ef31"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x9, 0x3, 0xf}}, {{0x9, 0x5, 0x2, 0x4, 0x200, 0x5, 0x0, 0x6}}]}}]}}]}}, &(0x7f0000004040)={0xa, &(0x7f0000003f00)={0xa, 0x6, 0x200, 0x80, 0x0, 0x4, 0x8, 0x3}, 0x25, &(0x7f0000003f40)={0x5, 0xf, 0x25, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x6, 0x8, 0x45da}, @wireless={0xb, 0x10, 0x1, 0xc, 0x44, 0x3, 0xac, 0x8, 0x5}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x7, 0x41, 0x2, 0xc7}]}, 0x3, [{0x4, &(0x7f0000003f80)=@string={0x4, 0x3, "53ab"}}, {0x24, &(0x7f0000003fc0)=@string={0x24, 0x3, "b73ecb2a317d9eee9b9e759ea951d2e9cfe166e3cf7a0bfba4e7e9b2edb8400e08cd"}}, {0x4, &(0x7f0000004000)=@lang_id={0x4, 0x3, 0x7c0b}}]}) (async) r6 = syz_usb_connect(0x6, 0x996, &(0x7f0000003540)={{0x12, 0x1, 0x110, 0x1d, 0x52, 0x5f, 0x10, 0xc45, 0x613b, 0x9aaa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x984, 0x2, 0xe, 0xd, 0xe0, 0x34, [{{0x9, 0x4, 0x6d, 0x34, 0x8, 0xd6, 0xb1, 0x3f, 0x0, [], [{{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x7, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x9a9a}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x1, 0x7, 0x0, [@generic={0xf4, 0x4, "b98e0cc8e8a8ec58f10ba752c1e8fb2e7004fe6880bab9d931d05d7f8a87cc98e6c75f27bc877d18fd2e7b4ad5b66ad17132240cad87f0272ed1d87aaa47b5b49d557efeff6ee39af39405626a18b761ce59adaa00fa7c217ab04eafbe7fed2b699774f44930f510020449a148d822567a4e7a317436289272d02f7a1915f37944451a14b97e7acd3c27497d989d70ff8db757783c3e0bd40d0d65c36b6f27b8ede13f3bf7e7b50d123f5d77a4f69007821b83c552932b8b82bae1bea5b5185a5999d3af7db525ffac7f5bbb90e45c10beb9649eebecfa7a4adb57a7cc8c74b550a7e56522f4d11a6f4313c19ab4eeee8f36"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xb, 0x2}]}}, {{0x9, 0x5, 0xb, 0x1, 0x10, 0x2b, 0x7, 0x9}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x5, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x7fca}]}}, {{0x9, 0x5, 0xb, 0x0, 0x0, 0x5, 0xb, 0x10, [@generic={0xec, 0x21, "f37d44e45e0223188cafe186e7e22f061554475232aeaad338581c2537d40b3a2646d320302835c2692058a7d29e69f4063fc7f30568e95cb38a6e665c83aecddb58b96e05f1c18bf3714d548c0233f332e0f43d52505d5009825696593842e8eaeeda2cf241824b80e4ed611ba397414976de5c1f7294129c935b8381e54134d2906bcab308ab65279afc094d332744ae6073b30d544108f9f8538c9f116cc97dfa9b6ef76321dc254d3343c6186486ef14557fe4432038df45b3a8bed96f978eb99a23cc265c8c8ece75fc72c7c56631d8aa737808da5ecf01dcc2a756fc2701874b4b8ce7c635af92"}, @generic={0xe9, 0x22, "b8f62a8445761d70f3f35072beb4d6c40e91d4046de066f3d7575ea4673c8c0b7b7260a9d8d9825d2013abf490b6f73d83182aac59f289ecf572a436d3791ec13a672693934e79caeeb1557d9e637127b97841b4276849dff305da50ccdec3eb5abdb7a6399aae49ec9ccfbd776a1bc452c56dcd6a724383c69bb06df2c163b82b027570d920bb8072a4b893e0d64d1d84ebc1e3de033a54813dc3bddd29e9e0a2ab282bada1f62e1d178c1285ba6f3ae32d94ccf9f6215452ed5f4f8f22ef7ca71bc9b3f30539360ceca8650350816a5f31d78b10adad95965a8d24fc6369a929de368dc1107a"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0xd9, 0x10, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9c, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x5, 0x4, 0x10}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0xb5, 0x7, 0x77}}, {{0x9, 0x5, 0xf, 0x2, 0x400, 0xc, 0x4}}]}}, {{0x9, 0x4, 0x1, 0x7, 0xe, 0x7c, 0x7d, 0xbd, 0x10, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xd689}, {0xd, 0x24, 0xf, 0x1, 0x8000, 0x62, 0x10, 0x4}, [@mbim={0xc, 0x24, 0x1b, 0x4, 0xf16d, 0x1, 0x9, 0x8, 0x1}, @mdlm_detail={0xc1, 0x24, 0x13, 0x1, "6b9eac4108181740cf58cef3d574dce6e1f3e8aa7686acde8d04130822430fdf28c3d8d57ff5b7fed4d3e3507fbf326f574847d286da4a86c938cc3ae16275560c0cf47d99285c78de773359e109fe9a029efcb33e09db8c65c989232e40f34f9ea8c4928ca3473ea4c64bf5c8b83c99ded0a78b587ef77dd5606caffa006ef0302bd247c45c6d6baf03714e4fc37143c87bb57530323d1617cbeacbd77a306398b442236aa27bc80fb4bcc9417b4131cd092a8fc1d24d354336c5da41"}, @mdlm={0x15, 0x24, 0x12, 0x1caf}, @mbim_extended={0x8, 0x24, 0x1c, 0x100, 0x2c, 0x40}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0xf, 0x3, 0xb8}, @country_functional={0x8, 0x24, 0x7, 0x94, 0x8, [0x9]}]}, @uac_control={{0xa, 0x24, 0x1, 0x200, 0x9}, [@extension_unit={0xa, 0x24, 0x8, 0x1, 0x7, 0xb2, "bf6448"}, @feature_unit={0xd, 0x24, 0x6, 0x6, 0x3, 0x3, [0x8, 0x2, 0x1], 0x9}, @feature_unit={0x11, 0x24, 0x6, 0x3, 0x2, 0x5, [0xa, 0x8, 0x3, 0x9, 0x1], 0x8}, @mixer_unit={0x5, 0x24, 0x4, 0x6, 0xf7}]}], [{{0x9, 0x5, 0x1, 0x8, 0x8, 0xf3, 0x16, 0x6, [@generic={0xe0, 0x5, "582a6423c4514b1a127c312979f393dd2ac6d2e77b16017b105877cf1ead88b4a495ca152928b6ce5d6bc52bab0ee8ec8cfd6d6550f35f258c4dab56749622e10d9dcdf4bbd35f512b1ee88594729efca58c2ebf2f3f8358c03169d10b98f7c93d79adcd1da10d7244562c097ad49f33a214fd81bb9f064d5fd67be6fd3e1e85be35952d9b71a9d3c51ce3d9c522cec9f8dc995c18d393f63f08088c0992f6d4e4d745a7150703c357d6e119fd18b7a69f13fbc1a22a3486d94435b6515ea6217f44bd90ffbec8fda003159b5e36994f73065154226378e025884b295c61"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x200}]}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0xf6, 0x10, 0x8}}, {{0x9, 0x5, 0x1, 0x4, 0x20, 0xff, 0xd, 0x2, [@generic={0xfc, 0x23, "8e71979465d1ceb914ef1d52b16842729e978d0976f1761883d1a5fabb9650c13797379b6e06e7e82a00d6a46c05d01bef927c74c78e860bab6f0b87b6c2e986dd939c64eff83d64fc96cc121b462d857e2f51cc939cae7b5847048cf5092321940deed73afee799d103a927b72c5863d970b3ecac58da3b4458289d2d419ecca27266c274da4c402c65857b39167815bd077eff527f1cf3cb36ed663aa3685c851f137d2c46145101eb3612726f583379c1776a07d7e8e844c4e547a7a17181151d9c0ad6c89c5ccfe0ecb6c9b20785f99f31c250eaa5212aeaa10cb87e3c26716c3b547345e212ad381ee99c58f849686bd25d34ea8bfaa0ce"}]}}, {{0x9, 0x5, 0x8, 0xc, 0x10, 0x2, 0x6, 0x3}}, {{0x9, 0x5, 0x4, 0x2, 0x200, 0xc, 0x4, 0x7, [@generic={0x65, 0x9, "f8c02c4b8cfeb005496ac25abd69100a7fb99f18b492d6728f7659e04805f0ee69e69a93d718dc676c400359e76c2e43a2a6cd435b179219f30cacddc2ac47dc4ff2dba6ef6cea4380d907cb0655bb0104b81d4d13fad05c0dcb5e29fb02f009547325"}]}}, {{0x9, 0x5, 0xf, 0x8, 0x40, 0xf2, 0x2, 0x4}}, {{0x9, 0x5, 0x9, 0x3, 0x400, 0xdb, 0x8a, 0xc, [@generic={0x63, 0xd, "5ca2aa4c6bcbe4b383bc35b5570212154c4c0b7d28ba3ef7ff1407957dfde1b31ca0089e4403cde5a9ea5b4788ba33c4c5b1be2fcf0917a2967060c025990fed446ea3ec3a9119d2320b5c32f216ac0662a084031d0a9a6bd302277824b6f6b1a0"}, @generic={0x97, 0x30, "9113d2582d5d3021e28a5229637c0567d0f8cbd695e8247cea540eb01303db46ea41116d04e80fab9d5f4baa0f8eba9a32e96d1c526405b5c42dcc0086a86fd1443002eb871420ff4ad392292229a1680da5534af596497c4891cda3e6ce03e52be3fbf1c04c712c62b3e224ff3901c6854b24cd1b74e8fbcb4b898bfddf963aaeeed61bdf62d1a9cff26ad0a7232737b887eb9260"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x8, 0x94, 0x7f, 0xf8, [@generic={0x18, 0x7, "c515bf9c71d7766ab3ab652426023d75c61ed04f0c85"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x10, 0xff, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xf, 0x3}, @generic={0x57, 0x23, "b84da9b1cf618fcee6dbe79490f4dfa9fe576de6b63b0a775eda989365b1c67efba22f02b8b7428454f7513e0813daa18813c61412905142c3ded14af16ac98fae400d6a41b438b4dca904b8988281b0129542b3db"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0xd5, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x6}]}}, {{0x9, 0x5, 0x5, 0x0, 0x28, 0x6, 0x7f, 0xfe, [@generic={0x36, 0xc, "27c36852cbbe0efd0a8912ec4e26122c62b3efab7f0ec3ed51e87fcefe60d244520342f6f4f1cab2de4ef08923d83cbf710bf273"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x8000}]}}, {{0x9, 0x5, 0x3, 0x8, 0x20, 0x2, 0x8, 0x7, [@generic={0x1b, 0x9, "23f17cd3faa9ae63986bb26598bc23b1eeb9dc091a57c78771"}, @generic={0x53, 0x9, "cabcc5b333795e33266bf92dfcdd61066e6a9b6396c306060d80be00537a7ce82b2bd8581c3162118238eb6ebc9dde051527a212b615d324558ad3a619c8f74ee56523c315bcb638bd767ba72b9243ef31"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x9, 0x3, 0xf}}, {{0x9, 0x5, 0x2, 0x4, 0x200, 0x5, 0x0, 0x6}}]}}]}}]}}, &(0x7f0000004040)={0xa, &(0x7f0000003f00)={0xa, 0x6, 0x200, 0x80, 0x0, 0x4, 0x8, 0x3}, 0x25, &(0x7f0000003f40)={0x5, 0xf, 0x25, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x6, 0x8, 0x45da}, @wireless={0xb, 0x10, 0x1, 0xc, 0x44, 0x3, 0xac, 0x8, 0x5}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x7, 0x41, 0x2, 0xc7}]}, 0x3, [{0x4, &(0x7f0000003f80)=@string={0x4, 0x3, "53ab"}}, {0x24, &(0x7f0000003fc0)=@string={0x24, 0x3, "b73ecb2a317d9eee9b9e759ea951d2e9cfe166e3cf7a0bfba4e7e9b2edb8400e08cd"}}, {0x4, &(0x7f0000004000)=@lang_id={0x4, 0x3, 0x7c0b}}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000004080)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000004080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000004100)={r7, 0x0, 0x4}) (async) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000004100)={r7, 0x0, 0x4}) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000004140)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r9, &(0x7f0000004280)={&(0x7f0000004180)={0x1d, r10}, 0x10, &(0x7f0000004240)={&(0x7f00000041c0)={0x4, 0x2c5, 0xd, {0x0, 0x2710}, {0x0, 0xea60}, {0x2, 0x1}, 0x1, @canfd={{0x4, 0x1}, 0x34, 0x3, 0x0, 0x0, "dbdf1275c366a3dc1091331277ad0980a6d59ea6f9ea11e835ab1e7d0e100c39b4af614ea57928aa2aee630cc1f47ddcdd2198e042bcf5d5373c52afaad46a7e"}}, 0x80}, 0x1, 0x0, 0x0, 0x40800}, 0x4048040) syz_usb_ep_write(r0, 0x4, 0x100, &(0x7f00000042c0)="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") (async) syz_usb_ep_write(r0, 0x4, 0x100, &(0x7f00000042c0)="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") mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000e, 0x10, r4, 0x60f2e000) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000e, 0x10, r4, 0x60f2e000) syz_usb_ep_write(r6, 0x4, 0xb6, &(0x7f00000043c0)="bd98e9627b414f26116811c13e19dc11c59f96bfa7cacc0c0e1c444c089dfd364664f1a13587708e7ced823744061f79bb0ce120e3e2a555e390436369063fd84b2c944bbf9c1c5a3f420ad82bf4230599297c206da55666c71aee2722bfb38ebc22641fcfb3d638fa5e054ff9a16fa1f78906c7d4f8dee61b9dba42a1881713e312d1c23b1ca64e8b8a922059c8ff5cf8e86535681aa216603e74f58888808cc554669837e95f2e1b0d25e93a8e1258fd746a06a565") ioctl$sock_SIOCOUTQ(r9, 0x5411, &(0x7f0000004480)) (async) ioctl$sock_SIOCOUTQ(r9, 0x5411, &(0x7f0000004480)) openat$cgroup_ro(r9, &(0x7f00000044c0)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) r11 = open$dir(&(0x7f0000004500)='./file0\x00', 0x250082, 0x60) write(r11, &(0x7f0000004540)="02d26d70c6a3235e54ad676eb0a3d104c62b41c351f72db9bc10f29859a507a6dfdfa00d89723cf003285379c468e5bf588c4ad38c003253eeb4dd09f24a7e530c93d254ce606f49d6b650e5aea5d702c316d02e1ba3777480b761a6c99dae77209bf52e07a8de4aa5207d4dd755335305b36a885998efd6c4dac450604fee1996dea26fa1e52d857f06ca4778c4584283a3fe7cf7988b9a5a4bde9faf68a9aefdcb0ea25a884d8fa757358e7e5680ea823eacbe308f03de27a60b71e918af6b49e6ba87dd", 0xc5) ioctl$EVIOCRMFF(r9, 0x40044581, &(0x7f0000004640)=0x10001) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) 731.545271ms ago: executing program 2 (id=820): openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) socket$inet6(0xa, 0x5, 0xff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x280a01, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xe8acb1aa35e8425c}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/42, 0x0, 0x10000}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/49}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000080)={{0x0, 0x4, 0x40}, 'syz0\x00', 0x4c}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$pid(0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='stack\x00') readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/95, 0x5f}], 0x1) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000180)={0x35, {0x9, 0x1, 0x2000000, 0x3, 0xfffffffd, 0xfffffffe}}) r5 = userfaultfd(0x80000) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000180)) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000000000/0x4000)=nil, 0x4000}) 731.070421ms ago: executing program 2 (id=821): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (async) r1 = socket$inet6(0xa, 0x80003, 0xff) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) (async) bind$xdp(r2, &(0x7f0000000040)={0x2c, 0xd}, 0x10) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x280a01, 0x0) close(r4) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) (async, rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) 730.893091ms ago: executing program 2 (id=822): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x13}]}, 0x20}, 0x1, 0x0, 0x0, 0xa011}, 0x8880) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 642.360078ms ago: executing program 2 (id=823): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x11) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) r0 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 32) bind$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x0, @local}, 0x10) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) (async) syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000400)="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", 0x1000) 642.165868ms ago: executing program 2 (id=824): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x402, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd700000ffffff81"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x13, 0x0, &(0x7f0000000040)=[@enter_looper, @increfs={0x40046304, 0x3}, @request_death={0x400c630e, 0x2}], 0xbb, 0x0, &(0x7f0000000240)="05de66730879c09a3dad5fda5a11568bd6922cdb8a6c55bad3ce0e7d04883d574b211f9860b41a93ac458aca9afb423d03bb15483d60c14ac6fee5f3fae5d384e42707be029a067801fd291926efc34abc3049c3e2a53a6b88d05b53f9e0e598d164bd80d7dc3a2b92cafd605e38d9d62ed71495a0a11f2b2df6f33e9482ae85adda08eee500da7654f7ab9d754db694b9b9bbad95115f25efc6dd563e708784f81ca79e966bc1608167fa9eb815a3b09bd4042fd962392f1bd82e"}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x402, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd700000ffffff81"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x13, 0x0, &(0x7f0000000040)=[@enter_looper, @increfs={0x40046304, 0x3}, @request_death={0x400c630e, 0x2}], 0xbb, 0x0, &(0x7f0000000240)="05de66730879c09a3dad5fda5a11568bd6922cdb8a6c55bad3ce0e7d04883d574b211f9860b41a93ac458aca9afb423d03bb15483d60c14ac6fee5f3fae5d384e42707be029a067801fd291926efc34abc3049c3e2a53a6b88d05b53f9e0e598d164bd80d7dc3a2b92cafd605e38d9d62ed71495a0a11f2b2df6f33e9482ae85adda08eee500da7654f7ab9d754db694b9b9bbad95115f25efc6dd563e708784f81ca79e966bc1608167fa9eb815a3b09bd4042fd962392f1bd82e"}) (async) 634.973709ms ago: executing program 2 (id=825): syz_usb_connect(0x3, 0x24, &(0x7f0000001640)=ANY=[@ANYBLOB="12010000e1476040d61000220200000003010902"], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) ioctl$TCFLSH(r0, 0x8924, 0x0) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000001f00)={'binder0\x00'}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121300, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) r1 = syz_open_dev$mouse(&(0x7f0000000140), 0x7, 0x400100) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000180), &(0x7f0000000200)=0x80) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xab, 0x0) syz_usb_disconnect(r2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x80, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x110b}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f00000001c0)={0x4}) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) flock(0xffffffffffffffff, 0x8) listen(r5, 0x9) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000040), 0x4) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0x400, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 0s ago: executing program 4 (id=826): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @local=@item_4={0x3, 0x2, 0x4, "64b12ff5"}, @main=@item_4={0x3, 0x0, 0xb, "813e2503"}, @local=@item_4={0x3, 0x2, 0x1, "dde84050"}, @local=@item_4={0x3, 0x2, 0x3, "5d8c3dda"}]}}, 0x0}, 0x0) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000080)={@mcast2, @dev={0xfe, 0x80, '\x00', 0xf}}) r2 = socket$netlink(0x10, 0x3, 0x0) clock_gettime(0xfffffffffffffff9, 0x0) r3 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r3, 0x0, 0x0) read(r3, 0x0, 0x0) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000013c0)={0x10, 0x24, 0x1}, 0x10}], 0x1}, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='fscontext?}']) kernel console output (not intermixed with test programs): 2452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:90460kB inactive_anon:0kB active_file:87392kB inactive_file:8896kB unevictable:0kB writepending:128kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:4896kB local_pcp:2592kB free_cma:0kB [ 57.733510][ T1564] lowmem_reserve[]: 0 0 0 [ 57.737889][ T1564] DMA32: 3*4kB (M) 3*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 57.753421][ T1564] Normal: 897*4kB (UME) 756*8kB (UME) 264*16kB (UME) 48*32kB (E) 240*64kB (UE) 102*128kB (UE) 33*256kB (UE) 7*512kB (UM) 5*1024kB (UME) 3*2048kB (ME) 733*4096kB (M) = 3069476kB [ 57.771297][ T1564] 40552 total pagecache pages [ 57.776071][ T1564] 0 pages in swap cache [ 57.780316][ T1564] Free swap = 124384kB [ 57.781055][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 57.784754][ T1564] Total swap = 124996kB [ 57.793191][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 57.796468][ T1564] 2097051 pages RAM [ 57.809420][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 57.811147][ T1564] 0 pages HighMem/MovableOnly [ 57.811159][ T1564] 351525 pages reserved [ 57.811168][ T1564] 0 pages cma reserved [ 57.820747][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.827718][ T1564] Memory allocations: [ 57.829379][ T9] usb 1-1: Product: syz [ 57.833204][ T1564] 0 B 0 init/main.c:1370 func:do_initcalls [ 57.833229][ T1564] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 57.841632][ T9] usb 1-1: Manufacturer: à ” [ 57.845388][ T1564] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 57.845411][ T1564] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 57.845431][ T1564] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 57.845450][ T1564] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 57.845470][ T1564] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 57.845490][ T1564] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 57.845509][ T1564] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 57.845530][ T1564] 0 B 0 init/initramfs.c:101 func:find_link [ 57.934348][ T9] usb 1-1: SerialNumber: syz [ 58.002954][ T31] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 58.044034][ T31] usb 3-1: device descriptor read/8, error -71 [ 58.174014][ T31] usb 3-1: device descriptor read/8, error -71 [ 58.316121][ T36] audit: type=1400 audit(1754372855.530:443): avc: denied { create } for pid=1576 comm="syz.3.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 58.357353][ T1552] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 58.371084][ T1578] futex_wake_op: syz.3.369 tries to shift op by 144; fix this program [ 58.412984][ T31] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 58.434049][ T31] usb 3-1: device descriptor read/8, error -71 [ 58.565452][ T31] usb 3-1: device descriptor read/8, error -71 [ 58.574787][ T9] cdc_ncm 1-1:1.0: bind() failure [ 58.581102][ T9] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 58.589474][ T9] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 58.600518][ T9] usb 1-1: USB disconnect, device number 21 [ 58.642965][ T842] Bluetooth: hci0: command 0x1003 tx timeout [ 58.643052][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 58.673108][ T31] usb usb3-port1: unable to enumerate USB device [ 59.109236][ T36] audit: type=1400 audit(1754372856.320:444): avc: denied { listen } for pid=1579 comm="syz.2.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.149105][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 59.174315][ T9] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 59.174784][ T1591] rust_binder: 212: no such ref 3 [ 59.203000][ T1591] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 59.270437][ T1602] binder: Bad value for 'max' [ 59.334580][ T9] usb 2-1: USB disconnect, device number 15 [ 59.342314][ T9] ftdi_sio 2-1:0.0: device disconnected [ 59.462550][ T1622] rust_binder: Error while translating object. [ 59.462620][ T1622] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 59.472942][ T1622] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:225 [ 59.732967][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 59.814905][ T1627] rust_binder: 294: no such ref 0 [ 59.820160][ T1627] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:294 [ 59.904039][ T9] usb 2-1: config 160 has an invalid interface number: 200 but max is 0 [ 59.921672][ T9] usb 2-1: config 160 has no interface number 0 [ 59.928020][ T9] usb 2-1: config 160 interface 200 has no altsetting 0 [ 59.936557][ T9] usb 2-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 59.945720][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.953926][ T9] usb 2-1: Product: syz [ 59.958206][ T9] usb 2-1: Manufacturer: syz [ 59.962950][ T9] usb 2-1: SerialNumber: syz [ 60.040479][ T1639] fuse: Unknown parameter 'rootmode500400r_id-' [ 60.172615][ T1615] netlink: 4520 bytes leftover after parsing attributes in process `syz.1.378'. [ 60.194762][ T1615] tipc: Started in network mode [ 60.202091][ T1615] tipc: Node identity ac141411, cluster identity 4711 [ 60.210309][ T1615] tipc: New replicast peer: 172.30.0.1 [ 60.216224][ T1615] tipc: Enabled bearer , priority 10 [ 60.243417][ T9] usb 2-1: MIDIStreaming interface descriptor not found [ 60.274848][ T9] usb 2-1: USB disconnect, device number 16 [ 60.312955][ T65] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 60.453009][ T65] usb 3-1: device descriptor read/64, error -71 [ 60.602964][ T45] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 60.692988][ T65] usb 3-1: device descriptor read/64, error -71 [ 60.732956][ T45] usb 4-1: device descriptor read/64, error -71 [ 60.850242][ T1658] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 8388608 [ 60.858279][ T1658] rust_binder: Write failure EINVAL in pid:382 [ 60.858505][ T1658] rust_binder: Write failure EFAULT in pid:382 [ 60.933009][ T65] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 60.958619][ T1672] rust_binder: validate_parent_fixup: fixup_min_offset=50, parent_offset=36 [ 60.958648][ T1672] rust_binder: Error while translating object. [ 60.967502][ T1672] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 60.973797][ T1672] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:396 [ 60.973836][ T45] usb 4-1: device descriptor read/64, error -71 [ 61.005753][ T1674] binder: Unknown parameter 'contextÀ' [ 61.025240][ T1676] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=52 sclass=netlink_audit_socket pid=1676 comm=syz.1.399 [ 61.038237][ T1676] /dev/nullb0: Can't lookup blockdev [ 61.038250][ T1677] /dev/nullb0: Can't lookup blockdev [ 61.038744][ T1677] rust_binder: Failed to allocate buffer. len:1112, is_oneway:true [ 61.072968][ T65] usb 3-1: device descriptor read/64, error -71 [ 61.141345][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 61.141364][ T36] audit: type=1400 audit(1754372858.350:446): avc: denied { ioctl } for pid=1682 comm="syz.1.402" path="socket:[17154]" dev="sockfs" ino=17154 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 61.172053][ T36] audit: type=1400 audit(1754372858.360:447): avc: denied { bind } for pid=1682 comm="syz.1.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 61.217428][ T1685] rust_binder: Write failure EINVAL in pid:233 [ 61.217884][ T1685] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 61.222942][ T36] audit: type=1400 audit(1754372858.430:448): avc: denied { getopt } for pid=1684 comm="syz.0.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 61.243316][ T45] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 61.262028][ T456] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 61.270164][ T456] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 61.298992][ T1688] fido_id[1688]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 61.324788][ T65] usb 3-1: device descriptor read/64, error -71 [ 61.342963][ T456] tipc: Node number set to 2886997009 [ 61.413005][ T45] usb 4-1: device descriptor read/64, error -71 [ 61.445675][ T65] usb usb3-port1: attempt power cycle [ 61.583092][ T456] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 61.653063][ T45] usb 4-1: device descriptor read/64, error -71 [ 61.734153][ T456] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 61.742995][ T9] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 61.743907][ T456] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 61.763101][ T45] usb usb4-port1: attempt power cycle [ 61.769045][ T456] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 61.778177][ T456] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.786222][ T456] usb 2-1: Product: syz [ 61.790385][ T456] usb 2-1: Manufacturer: syz [ 61.792970][ T65] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 61.795030][ T456] usb 2-1: SerialNumber: syz [ 61.807788][ T456] usb 2-1: config 0 descriptor?? [ 61.814463][ T65] usb 3-1: device descriptor read/8, error -71 [ 61.872989][ T9] usb 1-1: device descriptor read/64, error -71 [ 61.944019][ T65] usb 3-1: device descriptor read/8, error -71 [ 62.102961][ T45] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 62.112968][ T9] usb 1-1: device descriptor read/64, error -71 [ 62.123996][ T45] usb 4-1: device descriptor read/8, error -71 [ 62.173180][ T1690] rust_binder: Read failure Err(EFAULT) in pid:409 [ 62.177567][ T456] usb 2-1: USB disconnect, device number 17 [ 62.187195][ T65] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 62.196538][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 62.215170][ T65] usb 3-1: device descriptor read/8, error -71 [ 62.254041][ T45] usb 4-1: device descriptor read/8, error -71 [ 62.344116][ T65] usb 3-1: device descriptor read/8, error -71 [ 62.352995][ T9] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 62.453070][ T65] usb usb3-port1: unable to enumerate USB device [ 62.483045][ T9] usb 1-1: device descriptor read/64, error -71 [ 62.493103][ T45] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 62.514040][ T45] usb 4-1: device descriptor read/8, error -71 [ 62.644194][ T45] usb 4-1: device descriptor read/8, error -71 [ 62.689867][ T1709] /dev/rnullb0: Can't open blockdev [ 62.699022][ T1709] netlink: 680 bytes leftover after parsing attributes in process `syz.1.410'. [ 62.710650][ T36] audit: type=1400 audit(1754372859.920:449): avc: denied { map } for pid=1708 comm="syz.1.410" path="socket:[17206]" dev="sockfs" ino=17206 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 62.734718][ T9] usb 1-1: device descriptor read/64, error -71 [ 62.753109][ T45] usb usb4-port1: unable to enumerate USB device [ 62.804908][ T36] audit: type=1400 audit(1754372860.020:450): avc: denied { remount } for pid=1712 comm="syz.1.412" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 62.852968][ T9] usb usb1-port1: attempt power cycle [ 62.970734][ T36] audit: type=1400 audit(1754372860.180:451): avc: denied { getopt } for pid=1717 comm="syz.1.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.151315][ T36] audit: type=1400 audit(1754372860.360:452): avc: denied { load_policy } for pid=1729 comm="syz.2.418" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 63.175646][ T1730] SELinux: failed to load policy [ 63.193009][ T9] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 63.214720][ T9] usb 1-1: device descriptor read/8, error -71 [ 63.252970][ T65] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 63.274407][ T1733] fuse: Bad value for 'fd' [ 63.357358][ T9] usb 1-1: device descriptor read/8, error -71 [ 63.382967][ T65] usb 2-1: device descriptor read/64, error -71 [ 63.482221][ T36] audit: type=1400 audit(1754372860.690:453): avc: denied { setattr } for pid=1740 comm="syz.2.422" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 63.632955][ T9] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 63.652967][ T65] usb 2-1: device descriptor read/64, error -71 [ 63.660406][ T9] usb 1-1: device descriptor read/8, error -71 [ 63.794000][ T9] usb 1-1: device descriptor read/8, error -71 [ 63.893064][ T65] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 63.903055][ T9] usb usb1-port1: unable to enumerate USB device [ 63.952969][ T469] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 64.022991][ T65] usb 2-1: device descriptor read/64, error -71 [ 64.104078][ T469] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 64.115160][ T469] usb 4-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 64.124260][ T469] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.133341][ T469] usb 4-1: config 0 descriptor?? [ 64.262995][ T65] usb 2-1: device descriptor read/64, error -71 [ 64.373086][ T65] usb usb2-port1: attempt power cycle [ 64.482137][ T36] audit: type=1400 audit(1754372861.690:454): avc: denied { read } for pid=1792 comm="syz.0.431" name="usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 64.505954][ T36] audit: type=1400 audit(1754372861.690:455): avc: denied { open } for pid=1792 comm="syz.0.431" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 64.541820][ T469] hid-generic 0003:04F3:0754.0005: unknown main item tag 0x0 [ 64.549513][ T469] hid-generic 0003:04F3:0754.0005: unknown main item tag 0x0 [ 64.557210][ T469] hid-generic 0003:04F3:0754.0005: unknown main item tag 0x0 [ 64.564820][ T469] hid-generic 0003:04F3:0754.0005: unknown main item tag 0x0 [ 64.572345][ T469] hid-generic 0003:04F3:0754.0005: unknown main item tag 0x0 [ 64.585472][ T469] hid-generic 0003:04F3:0754.0005: hidraw0: USB HID v1.01 Device [HID 04f3:0754] on usb-dummy_hcd.3-1/input0 [ 64.712952][ T65] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 64.734338][ T65] usb 2-1: device descriptor read/8, error -71 [ 64.784418][ T469] usb 4-1: USB disconnect, device number 15 [ 64.874188][ T65] usb 2-1: device descriptor read/8, error -71 [ 65.122998][ T65] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 65.144092][ T65] usb 2-1: device descriptor read/8, error -71 [ 65.274117][ T65] usb 2-1: device descriptor read/8, error -71 [ 65.391933][ T65] usb usb2-port1: unable to enumerate USB device [ 65.648342][ T334] Bluetooth: hci0: Frame reassembly failed (-84) [ 66.544709][ T1780] overlayfs: statfs failed on './file0' [ 66.706684][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 66.706703][ T36] audit: type=1400 audit(1754372863.920:459): avc: denied { mounton } for pid=1849 comm="syz.1.453" path="/146/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 67.162860][ T1876] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 67.441988][ T1879] Unsupported ieee802154 address type: 0 [ 67.448545][ T65] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 67.456325][ T36] audit: type=1400 audit(1754372864.650:460): avc: denied { bind } for pid=1877 comm="syz.2.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 67.622945][ T65] usb 2-1: Using ep0 maxpacket: 32 [ 67.634133][ T65] usb 2-1: config 162 has an invalid interface number: 103 but max is 1 [ 67.646081][ T65] usb 2-1: config 162 has an invalid interface number: 146 but max is 1 [ 67.654773][ T65] usb 2-1: config 162 has no interface number 0 [ 67.661056][ T65] usb 2-1: config 162 has no interface number 1 [ 67.667677][ T65] usb 2-1: config 162 interface 103 altsetting 15 endpoint 0x6 has invalid wMaxPacketSize 0 [ 67.678160][ T65] usb 2-1: config 162 interface 103 altsetting 15 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 67.682991][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 67.689826][ T65] usb 2-1: config 162 interface 146 altsetting 150 endpoint 0xE has invalid maxpacket 919, setting to 64 [ 67.695657][ T842] Bluetooth: hci0: command 0x1003 tx timeout [ 67.708162][ T65] usb 2-1: config 162 interface 103 has no altsetting 0 [ 67.723320][ T65] usb 2-1: config 162 interface 146 has no altsetting 0 [ 67.732176][ T65] usb 2-1: New USB device found, idVendor=24c6, idProduct=ac88, bcdDevice= 1.01 [ 67.741614][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.751695][ T65] usb 2-1: Product: Ч [ 67.761875][ T65] usb 2-1: Manufacturer: ད뚪ꆮꃩ앇묹㲗ã‡ï†„î‡å›žê€Ší‹·á¿ˆá«“æ’‹î·ç”©ë“˜ãºÚ¬î¤Œè©¥èˆ¾ç†™ä¤‰ì›³äŽ‡à§ƒî†‚éšì¼¶ïŽ©çŒ—ïµé¹›à¯¾ï¯½ç‹˜ì»´ã®»â«§ä²¿ê”žê…¹â¹£ï¼©îŒ¸í‰žë»²ç©²îµë ½à¥¼è½î ­é”µí‚è»é’紊݌䟰픑á“캅錔ꗅ䬤ൢëžîª¼æ°‰åš»èŸŒâ©£È©ä¯–ì¨îŸ£é«¾êœèˆŒå‡’짧梡⾉ë¤ê˜™ç™´ç§“ᜭïˆè¾—囨瑽잞ឈ뾹嗳鉆廯缨çŒå£œäŒêœ”꫌幓㮲鱷ṟ풂勉ꄜ纅⚎ [ 67.839527][ T65] usb 2-1: SerialNumber: Ó¿ [ 68.152953][ T45] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 68.267062][ T65] usb 2-1: USB disconnect, device number 22 [ 68.322961][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 68.331811][ T45] usb 4-1: config 0 has an invalid interface number: 148 but max is 0 [ 68.344063][ T45] usb 4-1: config 0 has no interface number 0 [ 68.350268][ T45] usb 4-1: config 0 interface 148 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 32 [ 68.360608][ T45] usb 4-1: New USB device found, idVendor=0499, idProduct=8206, bcdDevice=f4.55 [ 68.369909][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.379560][ T45] usb 4-1: config 0 descriptor?? [ 68.385193][ T1891] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 68.402767][ T343] udevd[343]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.148/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 68.588383][ T36] audit: type=1400 audit(1754372865.800:461): avc: denied { lock } for pid=1896 comm="syz.2.466" path="socket:[18243]" dev="sockfs" ino=18243 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 68.594810][ T1891] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.638763][ T1891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.665516][ T1891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.698754][ T1891] rust_binder: Error in use_page_slow: ESRCH [ 68.698782][ T1891] rust_binder: use_range failure ESRCH [ 68.705919][ T1891] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 68.712276][ T1891] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 68.720886][ T1891] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:372 [ 69.658559][ T1924] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=1924 comm=syz.2.474 [ 69.762032][ T1928] can0: slcan on ptm0. [ 69.848555][ T1928] can0 (unregistered): slcan off ptm0. [ 69.922956][ T65] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 70.092948][ T65] usb 3-1: Using ep0 maxpacket: 32 [ 70.103806][ T65] usb 3-1: no configurations [ 70.110675][ T65] usb 3-1: can't read configurations, error -22 [ 70.252979][ T65] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 70.402969][ T65] usb 3-1: Using ep0 maxpacket: 32 [ 70.408687][ T65] usb 3-1: no configurations [ 70.413716][ T65] usb 3-1: can't read configurations, error -22 [ 70.420241][ T65] usb usb3-port1: attempt power cycle [ 70.762966][ T65] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 70.783337][ T65] usb 3-1: Using ep0 maxpacket: 32 [ 70.789019][ T65] usb 3-1: no configurations [ 70.794024][ T65] usb 3-1: can't read configurations, error -22 [ 70.883368][ T45] usb 4-1: USB disconnect, device number 16 [ 70.922512][ T36] audit: type=1400 audit(1754372868.130:462): avc: denied { append } for pid=1978 comm="syz.3.482" name="001" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 70.953154][ T65] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 70.973398][ T65] usb 3-1: Using ep0 maxpacket: 32 [ 70.981182][ T65] usb 3-1: no configurations [ 70.990785][ T65] usb 3-1: can't read configurations, error -22 [ 70.998622][ T65] usb usb3-port1: unable to enumerate USB device [ 71.089851][ T1983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.484'. [ 71.253010][ T45] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 71.403000][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 71.409683][ T45] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 71.418115][ T45] usb 4-1: config 0 has no interface number 0 [ 71.424548][ T45] usb 4-1: config 0 interface 196 has no altsetting 0 [ 71.433153][ T45] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 71.442364][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.450654][ T45] usb 4-1: Product: syz [ 71.462955][ T45] usb 4-1: Manufacturer: syz [ 71.472981][ T31] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 71.480765][ T45] usb 4-1: SerialNumber: syz [ 71.489969][ T45] usb 4-1: config 0 descriptor?? [ 71.644136][ T31] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 71.655154][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.666411][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.676580][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 71.690746][ T31] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 71.712229][ T36] audit: type=1400 audit(1754372868.910:463): avc: denied { watch watch_reads } for pid=1978 comm="syz.3.482" path="/118/file0" dev="tmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 71.737335][ T31] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 71.745861][ T31] usb 2-1: Manufacturer: syz [ 71.751568][ T31] usb 2-1: config 0 descriptor?? [ 71.824949][ T45] ipheth 4-1:0.196: Unable to find endpoints [ 71.839304][ T45] usb 4-1: USB disconnect, device number 17 [ 72.025626][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 72.031632][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 72.057187][ T31] usb 2-1: USB disconnect, device number 23 [ 72.387223][ T36] audit: type=1400 audit(1754372869.600:464): avc: denied { checkpoint_restore } for pid=1995 comm="syz.3.489" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.442949][ T31] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 72.537048][ T45] kernel write not supported for file /379/loginuid (pid: 45 comm: kworker/1:1) [ 72.547835][ T1999] netlink: 'syz.3.490': attribute type 46 has an invalid length. [ 72.556350][ T36] audit: type=1400 audit(1754372869.770:465): avc: denied { map } for pid=1997 comm="syz.3.490" path="socket:[19249]" dev="sockfs" ino=19249 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 72.602951][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 72.609394][ T31] usb 2-1: config index 0 descriptor too short (expected 50356, got 796) [ 72.618315][ T31] usb 2-1: config 41 has too many interfaces: 195, using maximum allowed: 32 [ 72.627443][ T31] usb 2-1: config 41 has an invalid descriptor of length 0, skipping remainder of the config [ 72.637986][ T31] usb 2-1: config 41 has 0 interfaces, different from the descriptor's value: 195 [ 72.648960][ T31] usb 2-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 72.658574][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.666901][ T31] usb 2-1: Product: syz [ 72.671229][ T31] usb 2-1: Manufacturer: syz [ 72.676418][ T31] usb 2-1: SerialNumber: syz [ 72.764939][ T2003] kvm: emulating exchange as write [ 72.821689][ T2005] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:400 [ 72.960279][ T31] usb 2-1: USB disconnect, device number 24 [ 73.362935][ T2009] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.769834][ T2018] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 73.776745][ T2018] rust_binder: Read failure Err(EFAULT) in pid:523 [ 73.791945][ T2018] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 73.807440][ T2018] rust_binder: Write failure EINVAL in pid:523 [ 74.274576][ T2036] rust_binder: Write failure EINVAL in pid:539 [ 74.293805][ T2036] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 74.343285][ T2034] netlink: 20 bytes leftover after parsing attributes in process `syz.3.502'. [ 74.545598][ T2042] __vm_enough_memory: pid: 2042, comm: syz.3.505, bytes: 18014402804453376 not enough memory for the allocation [ 74.616110][ T2054] FAULT_INJECTION: forcing a failure. [ 74.616110][ T2054] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 74.617970][ T2056] rust_binder: Write failure EFAULT in pid:395 [ 74.649424][ T2054] CPU: 1 UID: 0 PID: 2054 Comm: syz.1.508 Not tainted 6.12.38-syzkaller-g1ccd114e35d8 #0 7f6878a07b38e51fc2ff36e8efb54c4a01c5a999 [ 74.649469][ T2054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 74.649483][ T2054] Call Trace: [ 74.649491][ T2054] [ 74.649499][ T2054] __dump_stack+0x21/0x30 [ 74.649531][ T2054] dump_stack_lvl+0x10c/0x190 [ 74.649557][ T2054] ? __cfi_dump_stack_lvl+0x10/0x10 [ 74.649586][ T2054] dump_stack+0x19/0x20 [ 74.649611][ T2054] should_fail_ex+0x3d9/0x530 [ 74.649642][ T2054] should_fail+0xf/0x20 [ 74.649670][ T2054] should_fail_usercopy+0x1e/0x30 [ 74.649702][ T2054] _copy_from_user+0x22/0xb0 [ 74.649724][ T2054] get_user_ifreq+0x71/0x180 [ 74.649749][ T2054] sock_ioctl+0x6fb/0x7b0 [ 74.649772][ T2054] ? __cfi_sock_ioctl+0x10/0x10 [ 74.649799][ T2054] ? bpf_lsm_file_ioctl+0xd/0x20 [ 74.649826][ T2054] ? security_file_ioctl+0x34/0xd0 [ 74.649847][ T2054] ? __cfi_sock_ioctl+0x10/0x10 [ 74.649874][ T2054] __se_sys_ioctl+0x135/0x1b0 [ 74.649895][ T2054] __x64_sys_ioctl+0x7f/0xa0 [ 74.649916][ T2054] x64_sys_call+0x1878/0x2ee0 [ 74.649946][ T2054] do_syscall_64+0x58/0xf0 [ 74.649976][ T2054] ? clear_bhb_loop+0x50/0xa0 [ 74.650001][ T2054] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 74.650024][ T2054] RIP: 0033:0x7f169538eb69 [ 74.650042][ T2054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.650062][ T2054] RSP: 002b:00007f169623f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.650086][ T2054] RAX: ffffffffffffffda RBX: 00007f16955b5fa0 RCX: 00007f169538eb69 [ 74.650104][ T2054] RDX: 0000200000000440 RSI: 00000000000089f1 RDI: 0000000000000003 [ 74.650120][ T2054] RBP: 00007f169623f090 R08: 0000000000000000 R09: 0000000000000000 [ 74.650134][ T2054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.650149][ T2054] R13: 0000000000000000 R14: 00007f16955b5fa0 R15: 00007fffa3159af8 [ 74.650190][ T2054] [ 74.714511][ T2065] rust_binder: Got transaction with invalid offset. [ 74.863446][ T2067] netlink: 80 bytes leftover after parsing attributes in process `syz.3.513'. [ 74.881341][ T2065] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 74.881379][ T2065] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:553 [ 74.930369][ T36] audit: type=1400 audit(1754372873.135:466): avc: denied { nlmsg_write } for pid=2073 comm="syz.3.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 74.960653][ T2074] rust_binder: 407: no such ref 3 [ 74.966156][ T2074] rust_binder: Write failure EFAULT in pid:407 [ 74.966359][ T36] audit: type=1400 audit(1754372873.135:467): avc: denied { mount } for pid=2071 comm="syz.1.515" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 74.997718][ T36] audit: type=1400 audit(1754372873.175:468): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 75.138548][ T2085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.517'. [ 75.214674][ T2091] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 75.224984][ T2091] netlink: 124 bytes leftover after parsing attributes in process `syz.1.520'. [ 75.346875][ T2093] FAULT_INJECTION: forcing a failure. [ 75.346875][ T2093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.360040][ T2093] CPU: 1 UID: 0 PID: 2093 Comm: syz.1.521 Not tainted 6.12.38-syzkaller-g1ccd114e35d8 #0 7f6878a07b38e51fc2ff36e8efb54c4a01c5a999 [ 75.360080][ T2093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 75.360095][ T2093] Call Trace: [ 75.360103][ T2093] [ 75.360112][ T2093] __dump_stack+0x21/0x30 [ 75.360145][ T2093] dump_stack_lvl+0x10c/0x190 [ 75.360173][ T2093] ? __cfi_dump_stack_lvl+0x10/0x10 [ 75.360204][ T2093] dump_stack+0x19/0x20 [ 75.360230][ T2093] should_fail_ex+0x3d9/0x530 [ 75.360262][ T2093] should_fail+0xf/0x20 [ 75.360289][ T2093] should_fail_usercopy+0x1e/0x30 [ 75.360321][ T2093] _copy_from_user+0x22/0xb0 [ 75.360352][ T2093] ip_tunnel_parm_from_user+0xa3/0x380 [ 75.360382][ T2093] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 75.360405][ T2093] ? __cfi_ip_tunnel_parm_from_user+0x10/0x10 [ 75.360437][ T2093] ip_tunnel_siocdevprivate+0x9a/0x190 [ 75.360466][ T2093] ? __cfi_ip_tunnel_siocdevprivate+0x10/0x10 [ 75.360497][ T2093] ? ioctl_has_perm+0x384/0x4d0 [ 75.360521][ T2093] ipip6_tunnel_siocdevprivate+0x247/0xe20 [ 75.360549][ T2093] ? __cfi_ipip6_tunnel_siocdevprivate+0x10/0x10 [ 75.360577][ T2093] ? full_name_hash+0xa1/0xf0 [ 75.360611][ T2093] dev_ifsioc+0xb02/0xe60 [ 75.360645][ T2093] ? dev_ioctl+0x1030/0x1030 [ 75.360678][ T2093] ? dev_get_by_name_rcu+0xe9/0x140 [ 75.360714][ T2093] dev_ioctl+0xa9b/0x1030 [ 75.360748][ T2093] sock_ioctl+0x737/0x7b0 [ 75.360775][ T2093] ? __cfi_sock_ioctl+0x10/0x10 [ 75.360804][ T2093] ? bpf_lsm_file_ioctl+0xd/0x20 [ 75.360831][ T2093] ? security_file_ioctl+0x34/0xd0 [ 75.360853][ T2093] ? __cfi_sock_ioctl+0x10/0x10 [ 75.360878][ T2093] __se_sys_ioctl+0x135/0x1b0 [ 75.360901][ T2093] __x64_sys_ioctl+0x7f/0xa0 [ 75.360922][ T2093] x64_sys_call+0x1878/0x2ee0 [ 75.360953][ T2093] do_syscall_64+0x58/0xf0 [ 75.360985][ T2093] ? clear_bhb_loop+0x50/0xa0 [ 75.361013][ T2093] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 75.361038][ T2093] RIP: 0033:0x7f169538eb69 [ 75.361057][ T2093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.361077][ T2093] RSP: 002b:00007f169623f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.361101][ T2093] RAX: ffffffffffffffda RBX: 00007f16955b5fa0 RCX: 00007f169538eb69 [ 75.361120][ T2093] RDX: 0000200000000440 RSI: 00000000000089f1 RDI: 0000000000000003 [ 75.361137][ T2093] RBP: 00007f169623f090 R08: 0000000000000000 R09: 0000000000000000 [ 75.361150][ T2093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.361165][ T2093] R13: 0000000000000000 R14: 00007f16955b5fa0 R15: 00007fffa3159af8 [ 75.361185][ T2093] [ 75.772953][ T842] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 76.026368][ T2099] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 76.026921][ T2100] rust_binder: Write failure EINVAL in pid:415 [ 76.122882][ T2105] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 76.232427][ T2107] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:421 [ 76.689918][ T2121] FAULT_INJECTION: forcing a failure. [ 76.689918][ T2121] name failslab, interval 1, probability 0, space 0, times 1 [ 76.712234][ T2121] CPU: 1 UID: 0 PID: 2121 Comm: syz.1.530 Not tainted 6.12.38-syzkaller-g1ccd114e35d8 #0 7f6878a07b38e51fc2ff36e8efb54c4a01c5a999 [ 76.712274][ T2121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 76.712289][ T2121] Call Trace: [ 76.712296][ T2121] [ 76.712305][ T2121] __dump_stack+0x21/0x30 [ 76.712337][ T2121] dump_stack_lvl+0x10c/0x190 [ 76.712364][ T2121] ? __cfi_dump_stack_lvl+0x10/0x10 [ 76.712393][ T2121] dump_stack+0x19/0x20 [ 76.712418][ T2121] should_fail_ex+0x3d9/0x530 [ 76.712449][ T2121] should_failslab+0xac/0x100 [ 76.712483][ T2121] __kmalloc_node_noprof+0x6c/0x450 [ 76.712513][ T2121] ? __kvmalloc_node_noprof+0x11d/0x300 [ 76.712542][ T2121] __kvmalloc_node_noprof+0x11d/0x300 [ 76.712569][ T2121] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 76.712597][ T2121] ? selinux_perf_event_alloc+0xa0/0x110 [ 76.712621][ T2121] alloc_netdev_mqs+0xb6/0x13e0 [ 76.712650][ T2121] ? __cfi_ipip6_tunnel_setup+0x10/0x10 [ 76.712676][ T2121] ipip6_tunnel_locate+0x489/0x780 [ 76.712705][ T2121] ? skb_clone_writable+0x1e0/0x1e0 [ 76.712739][ T2121] ? security_capable+0xcf/0xf0 [ 76.712765][ T2121] ? ns_capable+0x91/0xf0 [ 76.712793][ T2121] ipip6_tunnel_ctl+0xc94/0x15e0 [ 76.712820][ T2121] ip_tunnel_siocdevprivate+0x101/0x190 [ 76.712848][ T2121] ? __cfi_ip_tunnel_siocdevprivate+0x10/0x10 [ 76.712878][ T2121] ? ioctl_has_perm+0x384/0x4d0 [ 76.712905][ T2121] ipip6_tunnel_siocdevprivate+0x247/0xe20 [ 76.712933][ T2121] ? __cfi_ipip6_tunnel_siocdevprivate+0x10/0x10 [ 76.712961][ T2121] ? full_name_hash+0xa1/0xf0 [ 76.712995][ T2121] dev_ifsioc+0xb02/0xe60 [ 76.713036][ T2121] ? dev_ioctl+0x1030/0x1030 [ 76.713068][ T2121] ? dev_get_by_name_rcu+0xe9/0x140 [ 76.713102][ T2121] dev_ioctl+0xa9b/0x1030 [ 76.713133][ T2121] sock_ioctl+0x737/0x7b0 [ 76.713159][ T2121] ? __cfi_sock_ioctl+0x10/0x10 [ 76.713187][ T2121] ? bpf_lsm_file_ioctl+0xd/0x20 [ 76.713213][ T2121] ? security_file_ioctl+0x34/0xd0 [ 76.713234][ T2121] ? __cfi_sock_ioctl+0x10/0x10 [ 76.713259][ T2121] __se_sys_ioctl+0x135/0x1b0 [ 76.713281][ T2121] __x64_sys_ioctl+0x7f/0xa0 [ 76.713301][ T2121] x64_sys_call+0x1878/0x2ee0 [ 76.713330][ T2121] do_syscall_64+0x58/0xf0 [ 76.713368][ T2121] ? clear_bhb_loop+0x50/0xa0 [ 76.713394][ T2121] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 76.713418][ T2121] RIP: 0033:0x7f169538eb69 [ 76.713436][ T2121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.713457][ T2121] RSP: 002b:00007f169623f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.713489][ T2121] RAX: ffffffffffffffda RBX: 00007f16955b5fa0 RCX: 00007f169538eb69 [ 76.713507][ T2121] RDX: 0000200000000440 RSI: 00000000000089f1 RDI: 0000000000000003 [ 76.713523][ T2121] RBP: 00007f169623f090 R08: 0000000000000000 R09: 0000000000000000 [ 76.713538][ T2121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.713552][ T2121] R13: 0000000000000000 R14: 00007f16955b5fa0 R15: 00007fffa3159af8 [ 76.713572][ T2121] [ 77.108766][ T2131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.534'. [ 77.176126][ T36] audit: type=1400 audit(1754372875.385:469): avc: denied { mount } for pid=2133 comm="syz.2.535" name="/" dev="configfs" ino=1214 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 77.254911][ T36] audit: type=1400 audit(1754372875.385:470): avc: denied { search } for pid=2133 comm="syz.2.535" name="/" dev="configfs" ino=1214 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 77.299757][ T36] audit: type=1400 audit(1754372875.385:471): avc: denied { write } for pid=2133 comm="syz.2.535" name="/" dev="configfs" ino=1214 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 77.382677][ T36] audit: type=1400 audit(1754372875.385:472): avc: denied { add_name } for pid=2133 comm="syz.2.535" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 77.413753][ T2141] rust_binder: 590: no such ref 3 [ 77.425634][ T36] audit: type=1400 audit(1754372875.385:473): avc: denied { create } for pid=2133 comm="syz.2.535" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 77.433379][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.462949][ T36] audit: type=1400 audit(1754372875.405:474): avc: denied { setopt } for pid=2133 comm="syz.2.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 77.466273][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.472509][ T36] audit: type=1400 audit(1754372875.405:475): avc: denied { read } for pid=2133 comm="syz.2.535" name="/" dev="configfs" ino=1214 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 77.516601][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.516632][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.522830][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.548393][ T36] audit: type=1400 audit(1754372875.405:476): avc: denied { open } for pid=2133 comm="syz.2.535" path="/" dev="configfs" ino=1214 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 77.561483][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.578633][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.584961][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.591331][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.598359][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.604667][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.610903][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.634095][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.640609][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.647168][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.654337][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.660621][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.666876][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.673153][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.679381][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.686191][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.692419][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.698718][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.711943][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.718224][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.724531][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.730776][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.737085][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.743323][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.749601][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.755845][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.762108][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.768609][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.774911][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.781142][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.787429][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.793654][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.799919][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.806158][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.812414][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.818655][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.824943][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.831200][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.837694][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.843958][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.850224][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.856470][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.862829][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.869088][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.875372][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.881607][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.887922][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.894168][ T65] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 77.908106][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.908138][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.914557][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.920839][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.927092][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.933365][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.939589][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.945869][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.952097][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.958386][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.964627][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.970925][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 77.977165][ T2141] rust_binder: Write failure EINVAL in pid:590 [ 78.064069][ T65] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 78.097577][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.108676][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.123569][ T65] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 78.137337][ T2148] FAULT_INJECTION: forcing a failure. [ 78.137337][ T2148] name failslab, interval 1, probability 0, space 0, times 0 [ 78.150196][ T65] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 78.150256][ T2148] CPU: 1 UID: 0 PID: 2148 Comm: syz.1.539 Not tainted 6.12.38-syzkaller-g1ccd114e35d8 #0 7f6878a07b38e51fc2ff36e8efb54c4a01c5a999 [ 78.150293][ T2148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 78.150310][ T2148] Call Trace: [ 78.150319][ T2148] [ 78.150330][ T2148] __dump_stack+0x21/0x30 [ 78.150368][ T2148] dump_stack_lvl+0x10c/0x190 [ 78.150397][ T2148] ? __cfi_dump_stack_lvl+0x10/0x10 [ 78.150430][ T2148] dump_stack+0x19/0x20 [ 78.150458][ T2148] should_fail_ex+0x3d9/0x530 [ 78.150490][ T2148] should_failslab+0xac/0x100 [ 78.150529][ T2148] __kmalloc_cache_noprof+0x41/0x3c0 [ 78.150561][ T2148] ? __hw_addr_add_ex+0x20b/0x840 [ 78.150587][ T2148] __hw_addr_add_ex+0x20b/0x840 [ 78.150612][ T2148] dev_addr_init+0x150/0x230 [ 78.150636][ T2148] ? __cfi_mutex_unlock+0x10/0x10 [ 78.150661][ T2148] ? __cfi_dev_addr_init+0x10/0x10 [ 78.150683][ T2148] ? __kvmalloc_node_noprof+0x168/0x300 [ 78.150715][ T2148] alloc_netdev_mqs+0x2f0/0x13e0 [ 78.150748][ T2148] ? __cfi_ipip6_tunnel_setup+0x10/0x10 [ 78.150777][ T2148] ipip6_tunnel_locate+0x489/0x780 [ 78.150807][ T2148] ? skb_clone_writable+0x1e0/0x1e0 [ 78.150835][ T2148] ? security_capable+0xcf/0xf0 [ 78.150864][ T2148] ? ns_capable+0x91/0xf0 [ 78.150896][ T2148] ipip6_tunnel_ctl+0xc94/0x15e0 [ 78.150925][ T2148] ip_tunnel_siocdevprivate+0x101/0x190 [ 78.150957][ T2148] ? __cfi_ip_tunnel_siocdevprivate+0x10/0x10 [ 78.150989][ T2148] ? ioctl_has_perm+0x384/0x4d0 [ 78.151014][ T2148] ipip6_tunnel_siocdevprivate+0x247/0xe20 [ 78.151044][ T2148] ? __cfi_ipip6_tunnel_siocdevprivate+0x10/0x10 [ 78.151074][ T2148] ? full_name_hash+0xa1/0xf0 [ 78.151111][ T2148] dev_ifsioc+0xb02/0xe60 [ 78.151158][ T2148] ? dev_ioctl+0x1030/0x1030 [ 78.151191][ T2148] ? dev_get_by_name_rcu+0xe9/0x140 [ 78.151229][ T2148] dev_ioctl+0xa9b/0x1030 [ 78.151264][ T2148] sock_ioctl+0x737/0x7b0 [ 78.151292][ T2148] ? __cfi_sock_ioctl+0x10/0x10 [ 78.151322][ T2148] ? bpf_lsm_file_ioctl+0xd/0x20 [ 78.151352][ T2148] ? security_file_ioctl+0x34/0xd0 [ 78.151374][ T2148] ? __cfi_sock_ioctl+0x10/0x10 [ 78.151401][ T2148] __se_sys_ioctl+0x135/0x1b0 [ 78.151426][ T2148] __x64_sys_ioctl+0x7f/0xa0 [ 78.151449][ T2148] x64_sys_call+0x1878/0x2ee0 [ 78.151481][ T2148] do_syscall_64+0x58/0xf0 [ 78.151515][ T2148] ? clear_bhb_loop+0x50/0xa0 [ 78.151543][ T2148] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 78.151569][ T2148] RIP: 0033:0x7f169538eb69 [ 78.151590][ T2148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.151612][ T2148] RSP: 002b:00007f169623f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 78.151639][ T2148] RAX: ffffffffffffffda RBX: 00007f16955b5fa0 RCX: 00007f169538eb69 [ 78.151658][ T2148] RDX: 0000200000000440 RSI: 00000000000089f1 RDI: 0000000000000003 [ 78.151676][ T2148] RBP: 00007f169623f090 R08: 0000000000000000 R09: 0000000000000000 [ 78.151691][ T2148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.151710][ T2148] R13: 0000000000000000 R14: 00007f16955b5fa0 R15: 00007fffa3159af8 [ 78.151730][ T2148] [ 78.469241][ T65] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 78.477413][ T65] usb 3-1: Manufacturer: syz [ 78.501250][ T65] usb 3-1: config 0 descriptor?? [ 78.565390][ T2158] rust_binder: Error while translating object. [ 78.565452][ T2158] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 78.571829][ T2158] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:599 [ 79.177637][ T65] usbhid 3-1:0.0: can't add hid device: -71 [ 79.193627][ T65] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 79.209029][ T65] usb 3-1: USB disconnect, device number 22 [ 79.866543][ T292] bridge_slave_1: left allmulticast mode [ 79.872301][ T292] bridge_slave_1: left promiscuous mode [ 79.883088][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.887456][ T36] audit: type=1400 audit(1754372878.095:477): avc: denied { mounton } for pid=2185 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 79.911890][ T292] bridge_slave_0: left allmulticast mode [ 79.917778][ T292] bridge_slave_0: left promiscuous mode [ 79.923469][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.959701][ T2187] kvm: kvm [2186]: vcpu2, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0x405 [ 79.970724][ T2187] kvm: kvm [2186]: vcpu2, guest rIP: 0x9134 Unhandled WRMSR(0x186) = 0x2c05 [ 79.979609][ T2187] kvm: kvm [2186]: vcpu2, guest rIP: 0x9134 Unhandled WRMSR(0x187) = 0x6505 [ 79.990199][ T2187] kvm_intel: kvm [2186]: vcpu2, guest rIP: 0x9134 Unhandled WRMSR(0x1d9) = 0xa705 [ 80.067678][ T2185] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.074852][ T2185] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.081973][ T2185] bridge_slave_0: entered allmulticast mode [ 80.088432][ T2185] bridge_slave_0: entered promiscuous mode [ 80.095061][ T2185] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.102138][ T2185] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.109276][ T2185] bridge_slave_1: entered allmulticast mode [ 80.115836][ T2185] bridge_slave_1: entered promiscuous mode [ 80.156324][ T292] veth1_macvtap: left promiscuous mode [ 80.161856][ T292] veth0_vlan: left promiscuous mode [ 80.232089][ T2185] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.239197][ T2185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.246602][ T2185] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.253807][ T2185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.276764][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.284140][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.293720][ T582] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.300790][ T582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.310351][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.317453][ T334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.354510][ T2185] veth0_vlan: entered promiscuous mode [ 80.366357][ T2185] veth1_macvtap: entered promiscuous mode [ 80.389732][ T36] audit: type=1400 audit(1754372878.595:478): avc: denied { mounton } for pid=2185 comm="syz-executor" path="/root/syzkaller.CxqRHO/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 80.463898][ T2216] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 80.464965][ T2221] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 80.471934][ T2216] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:456 [ 80.505893][ T2226] netlink: 'syz.2.559': attribute type 27 has an invalid length. [ 80.542587][ T2229] syzkaller0: entered promiscuous mode [ 80.552979][ T2229] syzkaller0: entered allmulticast mode [ 80.586496][ T2230] 9pnet_fd: Insufficient options for proto=fd [ 80.678029][ T2240] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 80.742452][ T36] audit: type=1400 audit(1754372878.945:479): avc: denied { bind } for pid=2243 comm="syz.3.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 80.769246][ T456] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 80.798712][ T2247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.807555][ T2247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.816608][ T2248] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 80.816632][ T2248] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 80.816649][ T2247] rust_binder: Error while translating object. [ 80.825297][ T2248] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:447 [ 80.841604][ T2247] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 80.853889][ T2247] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:447 [ 80.934058][ T456] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 80.952224][ T456] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.963078][ T456] usb 2-1: config 0 descriptor?? [ 81.032989][ T45] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 81.180523][ T2257] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.180829][ T2257] rust_binder: Read failure Err(EAGAIN) in pid:18 [ 81.203014][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 81.216565][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 81.225124][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.235338][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 81.246342][ T45] usb 3-1: string descriptor 0 read error: -22 [ 81.252582][ T45] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 81.261711][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.273952][ T45] usb 3-1: 0:2 : does not exist [ 81.422946][ T31] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 81.472001][ T45] usb 3-1: USB disconnect, device number 23 [ 81.569665][ T456] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 81.579736][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 81.584984][ T456] asix 2-1:0.0: probe with driver asix failed with error -61 [ 81.594483][ T31] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 81.602876][ T31] usb 5-1: config 0 has no interface number 0 [ 81.609225][ T31] usb 5-1: config 0 interface 184 has no altsetting 0 [ 81.617670][ T31] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 81.626833][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.635206][ T31] usb 5-1: Product: syz [ 81.639420][ T31] usb 5-1: Manufacturer: syz [ 81.644093][ T31] usb 5-1: SerialNumber: syz [ 81.649414][ T31] usb 5-1: config 0 descriptor?? [ 81.655414][ T31] smsc75xx v1.0.0 [ 82.065304][ T2266] syzkaller0: entered promiscuous mode [ 82.070859][ T2266] syzkaller0: entered allmulticast mode [ 82.151431][ T2269] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:456 [ 82.169529][ T2271] ip6_vti0: entered promiscuous mode [ 82.258851][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 82.269771][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 82.279220][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 82.290163][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 82.299895][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 82.310215][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 82.319679][ T31] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 82.329119][ T31] usb 5-1: USB disconnect, device number 2 [ 82.355718][ T2272] ip6_vti0: left promiscuous mode [ 82.682978][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 82.882975][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 82.916003][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.938002][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.947818][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 82.960773][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 82.969961][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.979332][ T9] usb 3-1: config 0 descriptor?? [ 83.404755][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0006/input/input13 [ 83.426500][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0006/input/input14 [ 83.435878][ T31] usb 2-1: USB disconnect, device number 25 [ 83.456053][ T9] kye 0003:0458:5011.0006: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 83.479134][ T2291] incfs: Options parsing error. -22 [ 83.502930][ T2291] incfs: mount failed -22 [ 83.598028][ T65] usb 3-1: USB disconnect, device number 24 [ 83.932974][ T31] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 84.084533][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 84.093796][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.102473][ T31] usb 2-1: config 0 descriptor?? [ 84.156532][ T2302] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 84.316145][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 84.335993][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 84.352694][ T31] usb 2-1: USB disconnect, device number 26 [ 84.476691][ T2313] __vm_enough_memory: pid: 2313, comm: syz.4.583, bytes: 18014402804453376 not enough memory for the allocation [ 84.531335][ T2317] kvm: kvm [2316]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 84.539992][ T2317] kvm: kvm [2316]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 84.556445][ T2317] kvm_intel: kvm [2316]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x1 [ 84.567391][ T2317] kvm: kvm [2316]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x1 [ 84.576017][ T2317] kvm: kvm [2316]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x1 [ 84.587496][ T2317] kvm: kvm [2316]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x1 [ 84.598284][ T2317] kvm: kvm [2316]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x1 [ 84.606845][ T2317] kvm: kvm [2316]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x1 [ 84.623167][ T2317] kvm_intel: kvm [2316]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x1 [ 84.647739][ T2317] kvm_intel: kvm [2316]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x1 [ 84.676528][ T2317] kvm_intel: kvm [2316]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x1 [ 84.704509][ T2317] kvm_intel: kvm [2316]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x1 [ 84.766826][ T2325] kvm_intel: kvm [2324]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x1 [ 84.798513][ T2330] rust_binder: 36: no such ref 0 [ 84.857910][ T36] audit: type=1400 audit(1754372883.065:480): avc: denied { mounton } for pid=2336 comm="syz.3.591" path="/proc/480/cgroup" dev="proc" ino=22345 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 84.858678][ T2337] SELinux: Context system_u:object_r:ksm_device_t:s0 is not valid (left unmapped). [ 84.881000][ T36] audit: type=1400 audit(1754372883.065:481): avc: denied { getattr } for pid=2336 comm="syz.3.591" path="/proc/480/cgroup" dev="nsfs" ino=4026532296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 84.913441][ T36] audit: type=1400 audit(1754372883.105:482): avc: denied { relabelto } for pid=2336 comm="syz.3.591" name="memfd:vcan0" dev="tmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ksm_device_t:s0" [ 84.940307][ T36] audit: type=1400 audit(1754372883.105:483): avc: denied { associate } for pid=2336 comm="syz.3.591" name="memfd:vcan0" dev="tmpfs" ino=57 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:ksm_device_t:s0" [ 84.968661][ T36] audit: type=1400 audit(1754372883.105:484): avc: denied { mounton } for pid=2336 comm="syz.3.591" path="/proc/480/cgroup" dev="nsfs" ino=4026532296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 85.071933][ T2349] kvm_pr_unimpl_wrmsr: 24 callbacks suppressed [ 85.071958][ T2349] kvm: kvm [2348]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 85.087005][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 85.094836][ T2349] kvm: kvm [2348]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 85.117041][ T2349] kvm_intel: kvm [2348]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x1 [ 85.129236][ T2349] kvm: kvm [2348]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x1 [ 85.138216][ T2349] kvm: kvm [2348]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x1 [ 85.151161][ T2349] kvm: kvm [2348]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x1 [ 85.162606][ T2349] kvm: kvm [2348]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x1 [ 85.171338][ T2349] kvm: kvm [2348]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x1 [ 85.189881][ T65] rust_binder: 2308: removing orphan mapping 0:1048 [ 85.206531][ T2349] kvm_intel: kvm [2348]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x1 [ 85.235386][ T2349] kvm: kvm [2348]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x1 [ 85.249582][ T2363] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.256993][ T2365] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 120, size: 4096) [ 85.257024][ T2365] rust_binder: Error while translating object. [ 85.268087][ T2349] kvm: kvm [2348]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x1 [ 85.268667][ T2365] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 85.274444][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 85.276494][ T9] usb 5-1: config 5 has an invalid interface number: 185 but max is 3 [ 85.284217][ T2365] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:490 [ 85.296316][ T2349] kvm: kvm [2348]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x1 [ 85.323550][ T9] usb 5-1: config 5 has an invalid interface number: 239 but max is 3 [ 85.331775][ T9] usb 5-1: config 5 has an invalid interface number: 182 but max is 3 [ 85.345442][ T9] usb 5-1: config 5 has an invalid interface number: 172 but max is 3 [ 85.357870][ T2377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.358095][ T2377] rust_binder: 503: no such ref 1 [ 85.359106][ T9] usb 5-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 85.381023][ T9] usb 5-1: config 5 has no interface number 0 [ 85.385097][ T2349] kvm_intel: kvm [2348]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x1 [ 85.387204][ T9] usb 5-1: config 5 has no interface number 1 [ 85.402705][ T9] usb 5-1: config 5 has no interface number 2 [ 85.418990][ T9] usb 5-1: config 5 has no interface number 3 [ 85.424547][ T2349] kvm_intel: kvm [2348]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x1 [ 85.432670][ T9] usb 5-1: config 5 interface 185 altsetting 6 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 85.445412][ T2378] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:503 [ 85.445816][ T9] usb 5-1: config 5 interface 185 altsetting 6 endpoint 0x5 has invalid wMaxPacketSize 0 [ 85.464996][ T2380] netlink: 5 bytes leftover after parsing attributes in process `syz.1.603'. [ 85.466449][ T2349] kvm_intel: kvm [2348]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x1 [ 85.474009][ T9] usb 5-1: config 5 interface 185 altsetting 6 endpoint 0x7 has an invalid bInterval 253, changing to 11 [ 85.494498][ T9] usb 5-1: config 5 interface 185 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 85.505306][ T9] usb 5-1: config 5 interface 185 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 85.516285][ T9] usb 5-1: config 5 interface 185 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 85.534350][ T9] usb 5-1: config 5 interface 185 altsetting 6 has an endpoint descriptor with address 0x12, changing to 0x2 [ 85.546086][ T9] usb 5-1: config 5 interface 185 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 85.556961][ T9] usb 5-1: config 5 interface 185 altsetting 6 has an endpoint descriptor with address 0x21, changing to 0x1 [ 85.568623][ T9] usb 5-1: config 5 interface 185 altsetting 6 endpoint 0x1 has an invalid bInterval 239, changing to 11 [ 85.579929][ T9] usb 5-1: config 5 interface 185 altsetting 6 endpoint 0x1 has invalid maxpacket 59321, setting to 1024 [ 85.591225][ T9] usb 5-1: config 5 interface 185 altsetting 6 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 85.602347][ T9] usb 5-1: config 5 interface 185 altsetting 6 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 85.616126][ T9] usb 5-1: config 5 interface 239 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 85.627052][ T9] usb 5-1: config 5 interface 239 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 85.637797][ T9] usb 5-1: config 5 interface 239 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 85.648709][ T9] usb 5-1: config 5 interface 182 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 85.659465][ T9] usb 5-1: config 5 interface 182 altsetting 2 endpoint 0x88 has invalid maxpacket 62503, setting to 1024 [ 85.670830][ T9] usb 5-1: config 5 interface 182 altsetting 2 bulk endpoint 0x88 has invalid maxpacket 1024 [ 85.681152][ T9] usb 5-1: config 5 interface 182 altsetting 2 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 85.692784][ T9] usb 5-1: config 5 interface 182 altsetting 2 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.705910][ T9] usb 5-1: config 5 interface 172 altsetting 255 has a duplicate endpoint with address 0xD, skipping [ 85.716822][ T9] usb 5-1: config 5 interface 172 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 85.727740][ T9] usb 5-1: config 5 interface 172 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 85.738834][ T9] usb 5-1: config 5 interface 172 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 85.749811][ T9] usb 5-1: config 5 interface 172 altsetting 255 has a duplicate endpoint with address 0x2, skipping [ 85.760823][ T9] usb 5-1: config 5 interface 172 altsetting 255 has a duplicate endpoint with address 0x4, skipping [ 85.772207][ T9] usb 5-1: config 5 interface 172 altsetting 255 endpoint 0xB has invalid maxpacket 2048, setting to 64 [ 85.783398][ T9] usb 5-1: config 5 interface 172 altsetting 255 endpoint 0x8 has an invalid bInterval 194, changing to 11 [ 85.794832][ T9] usb 5-1: config 5 interface 185 has no altsetting 0 [ 85.801720][ T9] usb 5-1: config 5 interface 239 has no altsetting 0 [ 85.808539][ T9] usb 5-1: config 5 interface 182 has no altsetting 0 [ 85.815379][ T9] usb 5-1: config 5 interface 172 has no altsetting 0 [ 85.823758][ T9] usb 5-1: New USB device found, idVendor=058b, idProduct=0041, bcdDevice=49.40 [ 85.832821][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.840901][ T9] usb 5-1: Product: 螅왶à¤í™‡æ°å±ä‘ä‘–ç⢸꠺녛È몿ቋ楒èµÝ¼å‹†ç¾©ï–굚î“á½ì¯ˆè—¬ä£¨â³Œè¯ ã …ꪛ [ 85.853092][ T9] usb 5-1: Manufacturer: 꿇䘑늢牨쟅멹쥯嘤ἅ㓶䞫㋢磜냆䦎瘂ç…텊䡑ﾗ瀰꾹â€à±®ìƒ¢ä›²å¥šî°šå–Œí‹©îŒ¹ì¼‡è–”춆齺耠黫ሳê²å¨–褂֪å›é‹³í–ŽæˆŒá‰œãœµë¸™ê¼œã°‡ä´¤êŠ¸â¥€è³± [ 85.873052][ T9] usb 5-1: SerialNumber: á°€ [ 85.878851][ T2335] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 86.090615][ T2391] GUP no longer grows the stack in syz.1.608 (2391): 200000005000-200000008000 (200000004000) [ 86.101034][ T2391] CPU: 0 UID: 0 PID: 2391 Comm: syz.1.608 Not tainted 6.12.38-syzkaller-g1ccd114e35d8 #0 7f6878a07b38e51fc2ff36e8efb54c4a01c5a999 [ 86.101076][ T2391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 86.101088][ T2391] Call Trace: [ 86.101094][ T2391] [ 86.101101][ T2391] __dump_stack+0x21/0x30 [ 86.101132][ T2391] dump_stack_lvl+0x10c/0x190 [ 86.101153][ T2391] ? __cfi_dump_stack_lvl+0x10/0x10 [ 86.101173][ T2391] ? find_vma+0xcd/0x110 [ 86.101197][ T2391] dump_stack+0x19/0x20 [ 86.101216][ T2391] __get_user_pages+0x1e34/0x22d0 [ 86.101234][ T2391] ? __kasan_check_write+0x18/0x20 [ 86.101256][ T2391] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 86.101278][ T2391] ? down_read_killable+0x79/0xf0 [ 86.101299][ T2391] ? populate_vma_page_range+0x230/0x230 [ 86.101315][ T2391] ? __switch_to+0xc7b/0x1310 [ 86.101338][ T2391] __gup_longterm_locked+0xcb1/0x1580 [ 86.101356][ T2391] ? pick_next_task_fair+0x900/0x990 [ 86.101383][ T2391] ? _raw_spin_unlock+0x45/0x60 [ 86.101407][ T2391] ? __switch_to_asm+0x3d/0x70 [ 86.101429][ T2391] ? __pte_offset_map+0x1b0/0x230 [ 86.101450][ T2391] gup_fast_fallback+0x12ae/0x14a0 [ 86.101471][ T2391] ? detach_entity_load_avg+0x7b0/0x7b0 [ 86.101496][ T2391] ? get_user_pages_fast_only+0xc0/0xc0 [ 86.101514][ T2391] ? preempt_schedule_common+0x2d/0x60 [ 86.101530][ T2391] ? preempt_schedule+0xb0/0xd0 [ 86.101544][ T2391] ? __cfi_preempt_schedule+0x10/0x10 [ 86.101561][ T2391] get_user_pages_fast+0x73/0xb0 [ 86.101578][ T2391] get_futex_key+0x24d/0x930 [ 86.101603][ T2391] ? __cfi_get_futex_key+0x10/0x10 [ 86.101628][ T2391] futex_wake_op+0x146/0xd80 [ 86.101644][ T2391] ? wake_up_q+0x10f/0x1c0 [ 86.101667][ T2391] ? futex_wake+0x63a/0x900 [ 86.101684][ T2391] ? __cfi_futex_wake_op+0x10/0x10 [ 86.101701][ T2391] ? mas_walk+0x3f7/0x650 [ 86.101718][ T2391] ? userfaultfd_unmap_complete+0x279/0x2d0 [ 86.101745][ T2391] ? mas_find+0x358/0x5f0 [ 86.101763][ T2391] ? __kasan_check_write+0x18/0x20 [ 86.101784][ T2391] do_futex+0x37b/0x500 [ 86.101809][ T2391] ? __cfi_do_futex+0x10/0x10 [ 86.101834][ T2391] ? __vm_munmap+0x2c7/0x370 [ 86.101857][ T2391] __se_sys_futex+0x28f/0x300 [ 86.101895][ T2391] ? __x64_sys_futex+0x110/0x110 [ 86.101921][ T2391] ? __kasan_check_write+0x18/0x20 [ 86.101941][ T2391] __x64_sys_futex+0xe9/0x110 [ 86.101966][ T2391] x64_sys_call+0x227f/0x2ee0 [ 86.101988][ T2391] do_syscall_64+0x58/0xf0 [ 86.102011][ T2391] ? clear_bhb_loop+0x50/0xa0 [ 86.102029][ T2391] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 86.102046][ T2391] RIP: 0033:0x7f169538eb69 [ 86.102060][ T2391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.102077][ T2391] RSP: 002b:00007f169623f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 86.102103][ T2391] RAX: ffffffffffffffda RBX: 00007f16955b5fa0 RCX: 00007f169538eb69 [ 86.102121][ T2391] RDX: 00000000fffffffd RSI: 0000000000000005 RDI: 0000200000004000 [ 86.102138][ T2391] RBP: 00007f1695411df1 R08: 0000000000000000 R09: 0000000000000000 [ 86.102155][ T2391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.102165][ T2391] R13: 0000000000000000 R14: 00007f16955b5fa0 R15: 00007fffa3159af8 [ 86.102179][ T2391] [ 86.208333][ T2395] rust_binder: 644: no such ref 2 [ 86.270054][ T9] usb 5-1: USB disconnect, device number 3 [ 86.274532][ T2395] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:644 [ 86.277894][ T2391] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:644 [ 86.981382][ T2418] netlink: 24 bytes leftover after parsing attributes in process `syz.4.616'. [ 87.233403][ T2431] rust_binder: Error while translating object. [ 87.233459][ T2431] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 87.242564][ T2431] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:654 [ 87.259416][ T2435] x_tables: duplicate underflow at hook 1 [ 87.262975][ T469] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 87.302444][ T2439] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.302658][ T2439] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 87.319182][ T2439] rust_binder: Read failure Err(EFAULT) in pid:506 [ 87.365980][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 87.432974][ T469] usb 5-1: Using ep0 maxpacket: 16 [ 87.439613][ T469] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.450774][ T469] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.460692][ T469] usb 5-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 87.469810][ T469] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.473393][ T36] audit: type=1400 audit(1754372885.685:485): avc: denied { create } for pid=2459 comm="syz.1.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 87.484236][ T469] usb 5-1: config 0 descriptor?? [ 87.502758][ T36] audit: type=1400 audit(1754372885.715:486): avc: denied { sys_admin } for pid=2459 comm="syz.1.631" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 87.527193][ T36] audit: type=1400 audit(1754372885.715:487): avc: denied { create } for pid=2459 comm="syz.1.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 87.926507][ T469] playstation 0003:054C:05C4.0007: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.4-1/input0 [ 88.013009][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 88.173019][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 88.179585][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.190695][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.200540][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 88.213657][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 88.222731][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.231514][ T9] usb 2-1: config 0 descriptor?? [ 88.282810][ T2480] rust_binder: Failed to allocate buffer. len:4248, is_oneway:true [ 88.282835][ T2480] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 88.290863][ T2480] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:518 [ 88.639532][ T9] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 88.656152][ T9] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 88.663437][ T9] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 88.670687][ T9] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 88.678160][ T9] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 88.685433][ T9] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 88.692710][ T9] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 88.699987][ T9] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 88.707256][ T9] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 88.714620][ T9] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 88.723924][ T9] microsoft 0003:045E:07DA.0008: No inputs registered, leaving [ 88.734334][ T9] microsoft 0003:045E:07DA.0008: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 88.745863][ T9] microsoft 0003:045E:07DA.0008: no inputs found [ 88.752284][ T9] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway [ 88.840849][ T9] usb 2-1: USB disconnect, device number 27 [ 89.344516][ T1788] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 89.443004][ T842] Bluetooth: hci0: command 0x1003 tx timeout [ 89.443218][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 89.482992][ T1788] usb 4-1: device descriptor read/64, error -71 [ 89.603654][ T65] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 89.722933][ T1788] usb 4-1: device descriptor read/64, error -71 [ 89.752956][ T65] usb 2-1: Using ep0 maxpacket: 16 [ 89.759193][ T65] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.769569][ T65] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 89.779975][ T65] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 89.789083][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.797144][ T65] usb 2-1: Product: syz [ 89.801336][ T65] usb 2-1: Manufacturer: syz [ 89.806013][ T2498] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 89.813653][ T65] usb 2-1: SerialNumber: syz [ 89.962938][ T2498] usb 3-1: Using ep0 maxpacket: 8 [ 89.968066][ T1788] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 89.976848][ T2498] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 241, changing to 11 [ 89.988310][ T2498] usb 3-1: config 1 interface 0 has no altsetting 0 [ 89.996412][ T2498] usb 3-1: New USB device found, idVendor=1b96, idProduct=0011, bcdDevice= 0.40 [ 90.005544][ T2498] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.013766][ T2498] usb 3-1: Product: ꫱ꦃࢤ㞱倻䇚贛೑⤼ឲꓘ嚋朿눠ꀃ욪è’帶䘨Ỹᴄ䙣钦鵣֢煓ì‘Ⓗ縯柚柕à¡Û”뎶 [ 90.027770][ T2498] usb 3-1: Manufacturer: Ц [ 90.032380][ T2498] usb 3-1: SerialNumber: á°› [ 90.037148][ T469] playstation 0003:054C:05C4.0007: Failed to retrieve feature with reportID 163: -71 [ 90.047255][ T469] playstation 0003:054C:05C4.0007: Failed to retrieve DualShock4 firmware info: -71 [ 90.057274][ T469] playstation 0003:054C:05C4.0007: Failed to get firmware info from DualShock4 [ 90.066584][ T469] playstation 0003:054C:05C4.0007: HW/FW version data in sysfs will be invalid. [ 90.076144][ T469] playstation 0003:054C:05C4.0007: Failed to retrieve feature with reportID 2: -71 [ 90.083728][ T2506] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 90.085470][ T2506] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 90.093499][ T469] playstation 0003:054C:05C4.0007: Retrying DualShock 4 get calibration report (0x02) request [ 90.093867][ T469] playstation 0003:054C:05C4.0007: Failed to retrieve feature with reportID 2: -71 [ 90.104061][ T2506] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:687 [ 90.113594][ T1788] usb 4-1: device descriptor read/64, error -71 [ 90.138249][ T469] playstation 0003:054C:05C4.0007: Retrying DualShock 4 get calibration report (0x02) request [ 90.148918][ T469] playstation 0003:054C:05C4.0007: Failed to retrieve feature with reportID 2: -71 [ 90.158304][ T469] playstation 0003:054C:05C4.0007: Failed to retrieve DualShock4 calibration info: -71 [ 90.168325][ T469] playstation 0003:054C:05C4.0007: Invalid gyro calibration data for axis (3), disabling calibration. [ 90.179380][ T469] playstation 0003:054C:05C4.0007: Invalid gyro calibration data for axis (4), disabling calibration. [ 90.190541][ T469] playstation 0003:054C:05C4.0007: Invalid gyro calibration data for axis (5), disabling calibration. [ 90.201589][ T469] playstation 0003:054C:05C4.0007: Invalid accelerometer calibration data for axis (0), disabling calibration. [ 90.213441][ T469] playstation 0003:054C:05C4.0007: Invalid accelerometer calibration data for axis (1), disabling calibration. [ 90.225539][ T469] playstation 0003:054C:05C4.0007: Invalid accelerometer calibration data for axis (2), disabling calibration. [ 90.237326][ T469] playstation 0003:054C:05C4.0007: Failed to get calibration data from DualShock4 [ 90.246598][ T469] playstation 0003:054C:05C4.0007: Gyroscope and accelerometer will be inaccurate. [ 90.257390][ T469] input: HID 054c:05c4 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:05C4.0007/input/input15 [ 90.272457][ T469] input: HID 054c:05c4 Motion Sensors as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:05C4.0007/input/input16 [ 90.308099][ T2498] usbhid 3-1:1.0: can't add hid device: -71 [ 90.324883][ T469] input: HID 054c:05c4 Touchpad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:05C4.0007/input/input17 [ 90.338015][ T2498] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 90.351496][ T2498] usb 3-1: USB disconnect, device number 25 [ 90.361389][ T469] playstation 0003:054C:05C4.0007: Registered DualShock4 controller hw_version=0x00000000 fw_version=0x00000000 [ 90.383830][ T469] usb 5-1: USB disconnect, device number 4 [ 90.402962][ T1788] usb 4-1: device descriptor read/64, error -71 [ 90.439808][ T2519] /dev/rnullb0: Can't open blockdev [ 90.513139][ T1788] usb usb4-port1: attempt power cycle [ 90.752958][ T2498] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 90.822978][ T469] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 90.852996][ T1788] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 90.874089][ T1788] usb 4-1: device descriptor read/8, error -71 [ 90.882978][ T2498] usb 3-1: device descriptor read/64, error -71 [ 90.974151][ T469] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 90.985292][ T469] usb 5-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 90.994436][ T469] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.004392][ T1788] usb 4-1: device descriptor read/8, error -71 [ 91.011070][ T469] usb 5-1: config 0 descriptor?? [ 91.132939][ T2498] usb 3-1: device descriptor read/64, error -71 [ 91.219043][ T469] hid-generic 0003:04F3:0754.0009: unknown main item tag 0x0 [ 91.226654][ T469] hid-generic 0003:04F3:0754.0009: unknown main item tag 0x0 [ 91.234095][ T469] hid-generic 0003:04F3:0754.0009: unknown main item tag 0x0 [ 91.241531][ T469] hid-generic 0003:04F3:0754.0009: unknown main item tag 0x0 [ 91.249115][ T1788] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 91.256752][ T469] hid-generic 0003:04F3:0754.0009: unknown main item tag 0x0 [ 91.265314][ T469] hid-generic 0003:04F3:0754.0009: hidraw0: USB HID v1.01 Device [HID 04f3:0754] on usb-dummy_hcd.4-1/input0 [ 91.294144][ T1788] usb 4-1: device descriptor read/8, error -71 [ 91.392945][ T2498] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 91.418137][ T31] usb 5-1: USB disconnect, device number 5 [ 91.424083][ T1788] usb 4-1: device descriptor read/8, error -71 [ 91.522947][ T2498] usb 3-1: device descriptor read/64, error -71 [ 91.533149][ T1788] usb usb4-port1: unable to enumerate USB device [ 91.763356][ T2498] usb 3-1: device descriptor read/64, error -71 [ 91.873066][ T2498] usb usb3-port1: attempt power cycle [ 92.136953][ T2540] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.137202][ T2539] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:539 [ 92.174639][ T2548] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.183938][ T2548] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.190398][ T2548] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.197215][ T2548] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.203724][ T2548] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.210249][ T2548] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.216894][ T2498] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 92.216908][ T2548] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.234030][ T2498] usb 3-1: device descriptor read/8, error -71 [ 92.367840][ T2559] SELinux: policydb string length 1836477231 does not match expected length 8 [ 92.376997][ T2559] SELinux: failed to load policy [ 92.381998][ T65] usb 2-1: 0:2 : does not exist [ 92.385904][ T2559] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.388162][ T2559] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.395591][ T2498] usb 3-1: device descriptor read/8, error -71 [ 92.411201][ T65] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 92.422477][ T65] usb 2-1: USB disconnect, device number 28 [ 92.432424][ T2515] udevd[2515]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 92.464366][ T2564] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.464552][ T2564] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.642956][ T2498] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 92.673930][ T2498] usb 3-1: device descriptor read/8, error -71 [ 92.805334][ T2498] usb 3-1: device descriptor read/8, error -71 [ 92.893069][ T31] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 92.913080][ T2498] usb usb3-port1: unable to enumerate USB device [ 92.959560][ T2586] __vm_enough_memory: pid: 2586, comm: syz.4.666, bytes: 18014402804453376 not enough memory for the allocation [ 93.044386][ T31] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 93.056000][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 93.067228][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 93.078421][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 93.091406][ T31] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.100518][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.109381][ T31] usb 2-1: config 0 descriptor?? [ 93.114883][ T2572] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 93.329599][ T31] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 93.362525][ T31] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 93.377121][ T31] usb 2-1: USB disconnect, device number 29 [ 93.403877][ T2599] fido_id[2599]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 93.422444][ T456] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 93.431023][ T456] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 93.441603][ T2606] rust_binder: 2598 RLIMIT_NICE not set [ 93.639758][ T2615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.675'. [ 93.654284][ T2498] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 93.670695][ T2617] input: syz1 as /devices/virtual/input/input19 [ 93.744282][ T2621] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 93.744685][ T2622] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 93.802943][ T2498] usb 4-1: Using ep0 maxpacket: 32 [ 93.816646][ T2498] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.827728][ T2498] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.841797][ T2498] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 93.850490][ T2630] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32 [ 93.858473][ T2630] rust_binder: Write failure EINVAL in pid:80 [ 93.858597][ T2498] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.876717][ T2498] usb 4-1: config 0 descriptor?? [ 93.889758][ T2633] binder: Bad value for 'defcontext' [ 94.153204][ T65] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 94.173753][ T2651] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11038 sclass=netlink_route_socket pid=2651 comm=syz.4.687 [ 94.241501][ T2654] rust_binder: Error while translating object. [ 94.241554][ T2654] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 94.248084][ T2654] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:704 [ 94.285106][ T2498] koneplus 0003:1E7D:2D51.000C: unknown main item tag 0x0 [ 94.304541][ T2498] koneplus 0003:1E7D:2D51.000C: unknown main item tag 0x0 [ 94.311723][ T2498] koneplus 0003:1E7D:2D51.000C: unknown main item tag 0x0 [ 94.319274][ T65] usb 3-1: Using ep0 maxpacket: 16 [ 94.325519][ T2498] koneplus 0003:1E7D:2D51.000C: unknown main item tag 0x0 [ 94.340038][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.352938][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.365072][ T2498] koneplus 0003:1E7D:2D51.000C: unknown main item tag 0x0 [ 94.373596][ T65] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 94.386763][ T2498] koneplus 0003:1E7D:2D51.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0 [ 94.398223][ T65] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 94.413665][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.423733][ T65] usb 3-1: config 0 descriptor?? [ 94.539518][ T2663] rust_binder: Write failure EINVAL in pid:710 [ 94.539618][ T2663] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:710 [ 94.688771][ T45] usb 4-1: USB disconnect, device number 22 [ 94.782915][ T36] audit: type=1400 audit(1754372892.985:488): avc: denied { write } for pid=2666 comm="syz.1.693" name="usbmon3" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 94.807589][ T2667] fuse: Bad value for 'fd' [ 95.240516][ T65] usbhid 3-1:0.0: can't add hid device: -71 [ 95.251951][ T65] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 95.264028][ T65] usb 3-1: USB disconnect, device number 30 [ 95.287021][ T2704] netlink: 72 bytes leftover after parsing attributes in process `syz.3.703'. [ 95.524795][ T2718] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 95.576626][ T2719] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 95.693011][ T45] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 95.844090][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.855122][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.866268][ T45] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice=ff.fc [ 95.875593][ T45] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 95.884208][ T45] usb 5-1: Product: syz [ 95.888469][ T45] usb 5-1: Manufacturer: syz [ 95.894556][ T45] usb 5-1: config 0 descriptor?? [ 95.991591][ T2727] 9pnet_fd: Insufficient options for proto=fd [ 96.332995][ T31] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 96.371756][ T45] usbhid 5-1:0.0: can't add hid device: -71 [ 96.383058][ T45] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 96.395873][ T45] usb 5-1: USB disconnect, device number 6 [ 96.504450][ T31] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 96.516183][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 96.527726][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 96.537032][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.547671][ T31] usb 2-1: config 0 descriptor?? [ 96.556110][ T2737] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 96.567342][ T31] hub 2-1:0.0: USB hub found [ 96.632962][ T456] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 96.765132][ T31] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 96.783049][ T456] usb 4-1: Using ep0 maxpacket: 32 [ 96.789208][ T456] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 96.797609][ T456] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 96.806465][ T456] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 96.815466][ T456] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 96.825158][ T456] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 96.834848][ T456] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 96.842957][ T65] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 96.847859][ T456] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 96.864515][ T456] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.873290][ T456] usb 4-1: config 0 descriptor?? [ 97.012971][ T65] usb 3-1: Using ep0 maxpacket: 32 [ 97.019515][ T65] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 97.027953][ T65] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 97.036614][ T65] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 97.045666][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 97.055453][ T65] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 97.065216][ T65] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 97.078260][ T65] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 97.087373][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.090234][ T456] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 97.106197][ T65] usb 3-1: config 0 descriptor?? [ 97.108997][ T456] usb 4-1: USB disconnect, device number 23 [ 97.125633][ T456] usblp0: removed [ 97.177523][ T2737] input: syz1 as /devices/virtual/input/input20 [ 97.232977][ T45] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 97.324952][ T65] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 31 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 97.337561][ T65] usb 3-1: USB disconnect, device number 31 [ 97.344527][ T65] usblp0: removed [ 97.384075][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.395114][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.404975][ T45] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 97.414076][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.422788][ T45] usb 5-1: config 0 descriptor?? [ 97.533033][ T469] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 97.682982][ T469] usb 4-1: Using ep0 maxpacket: 32 [ 97.694016][ T469] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 97.702418][ T469] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 97.716513][ T469] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 97.732964][ T469] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 97.743830][ T469] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 97.756949][ T469] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 97.772950][ T456] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 97.775112][ T469] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 97.796183][ T469] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.808383][ T469] usb 4-1: config 0 descriptor?? [ 97.932930][ T456] usb 3-1: Using ep0 maxpacket: 32 [ 97.943799][ T456] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 97.953143][ T456] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 97.962584][ T456] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 97.972317][ T456] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 97.982428][ T456] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 97.992224][ T456] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 98.005830][ T456] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 98.015160][ T456] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.025041][ T469] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 98.025079][ T456] usb 3-1: config 0 descriptor?? [ 98.226151][ T36] audit: type=1400 audit(1754372896.435:489): avc: denied { read write } for pid=2740 comm="syz.3.713" name="lp0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 98.249764][ T36] audit: type=1400 audit(1754372896.435:490): avc: denied { open } for pid=2740 comm="syz.3.713" path="/dev/usb/lp0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 98.274265][ T36] audit: type=1400 audit(1754372896.445:491): avc: denied { audit_write } for pid=2740 comm="syz.3.713" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 98.295520][ T456] usblp 3-1:0.0: usblp1: USB Bidirectional printer dev 32 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 98.496603][ T45] usbhid 5-1:0.0: can't add hid device: -71 [ 98.502681][ T45] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 98.511592][ T45] usb 5-1: USB disconnect, device number 7 [ 98.764560][ T469] usb 4-1: USB disconnect, device number 24 [ 98.773054][ T469] usblp0: removed [ 98.780581][ T2759] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 98.789696][ T2759] overlayfs: missing 'lowerdir' [ 98.797765][ T2759] rust_binder: Error while translating object. [ 98.797805][ T2759] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 98.804073][ T2759] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:588 [ 98.939687][ T2763] rust_binder: Write failure EFAULT in pid:592 [ 98.972376][ T2767] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 98.980277][ T2767] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.000518][ T2769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.721'. [ 99.087393][ T2775] rust_binder: Error while translating object. [ 99.087440][ T2775] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 99.095897][ T2775] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:130 [ 99.129474][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 99.150924][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 99.174187][ T31] usb 2-1: USB disconnect, device number 30 [ 99.270882][ T2779] syz.4.725 uses obsolete (PF_INET,SOCK_PACKET) [ 99.311495][ T2791] binder: Bad value for 'max' [ 99.322299][ T2796] netlink: 24 bytes leftover after parsing attributes in process `syz.1.729'. [ 99.332852][ T36] audit: type=1400 audit(1754372897.545:492): avc: denied { append } for pid=2795 comm="syz.1.729" name="event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 99.356589][ T2799] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.357275][ T2800] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 99.371116][ T2799] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 99.375489][ T2802] rust_binder: Got transaction with invalid offset. [ 99.378472][ T2802] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 99.385143][ T2802] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:764 [ 99.408197][ T2806] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:145 [ 99.431525][ T2809] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 99.472527][ T36] audit: type=1400 audit(1754372897.675:493): avc: denied { read } for pid=2811 comm="syz.4.733" name="file0" dev="tmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 99.494770][ T36] audit: type=1400 audit(1754372897.685:494): avc: denied { mounton } for pid=2811 comm="syz.4.733" path="/45/file0" dev="tmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 99.611639][ T45] usb 3-1: USB disconnect, device number 32 [ 99.628823][ T45] usblp1: removed [ 99.680196][ T2822] netlink: 392 bytes leftover after parsing attributes in process `syz.2.738'. [ 99.708082][ T36] audit: type=1400 audit(1754372897.915:495): avc: denied { execute } for pid=2824 comm="syz.3.739" dev="tmpfs" ino=69 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 99.743534][ T36] audit: type=1400 audit(1754372897.915:496): avc: denied { execute_no_trans } for pid=2824 comm="syz.3.739" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=69 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 99.783484][ T2827] syz.3.740 (2827): /proc/2826/oom_adj is deprecated, please use /proc/2826/oom_score_adj instead. [ 99.832945][ T2498] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 99.962974][ T2498] usb 5-1: device descriptor read/64, error -71 [ 100.009914][ T36] audit: type=1400 audit(1754372898.215:497): avc: denied { getopt } for pid=2829 comm="syz.2.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 100.116339][ T2837] overlayfs: missing 'lowerdir' [ 100.212944][ T2498] usb 5-1: device descriptor read/64, error -71 [ 100.452940][ T2498] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 100.582967][ T2498] usb 5-1: device descriptor read/64, error -71 [ 100.699866][ T2873] input: syz1 as /devices/virtual/input/input21 [ 100.832945][ T2498] usb 5-1: device descriptor read/64, error -71 [ 100.943091][ T2498] usb usb5-port1: attempt power cycle [ 101.292947][ T2498] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 101.314066][ T2498] usb 5-1: device descriptor read/8, error -71 [ 101.444006][ T2498] usb 5-1: device descriptor read/8, error -71 [ 101.558374][ T36] audit: type=1400 audit(1754372899.765:498): avc: denied { bind } for pid=2883 comm="syz.1.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 101.559325][ T2884] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.578155][ T36] audit: type=1400 audit(1754372899.795:499): avc: denied { sqpoll } for pid=2883 comm="syz.1.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 101.632820][ T2885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.643253][ T2885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.682944][ T2498] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 101.703992][ T2498] usb 5-1: device descriptor read/8, error -71 [ 101.766894][ T2892] rust_binder: 583: no such ref 0 [ 101.834007][ T2498] usb 5-1: device descriptor read/8, error -71 [ 101.863012][ T65] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 101.943060][ T2498] usb usb5-port1: unable to enumerate USB device [ 102.013009][ T65] usb 2-1: Using ep0 maxpacket: 8 [ 102.019223][ T65] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.030341][ T65] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.040132][ T65] usb 2-1: config 0 interface 0 has no altsetting 0 [ 102.046797][ T65] usb 2-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 102.055906][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.066897][ T65] usb 2-1: config 0 descriptor?? [ 102.302991][ T31] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 102.452952][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 102.459374][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.469534][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.480152][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 102.489274][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.497317][ T31] usb 3-1: Product: syz [ 102.501492][ T31] usb 3-1: Manufacturer: syz [ 102.506116][ T31] usb 3-1: SerialNumber: syz [ 102.714329][ T2900] kernel profiling enabled (shift: 7) [ 102.883976][ T31] usb 3-1: 0:2 : does not exist [ 102.891301][ T31] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 102.903113][ T31] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5) [ 102.913229][ T31] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 102.923368][ T31] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 102.932720][ T31] usb 3-1: USB disconnect, device number 33 [ 102.992935][ T2498] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 103.144009][ T2498] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 103.154928][ T2498] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.165879][ T2498] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.175682][ T2498] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 103.189518][ T2498] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 103.198613][ T2498] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 103.207543][ T2498] usb 5-1: Manufacturer: syz [ 103.213076][ T2498] usb 5-1: config 0 descriptor?? [ 103.461919][ T36] audit: type=1400 audit(1754372901.665:500): avc: denied { setattr } for pid=2906 comm="syz.2.757" name="tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 103.537355][ T2910] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 32 [ 103.544919][ T2910] rust_binder: Write failure EINVAL in pid:599 [ 103.792941][ T469] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 103.820554][ T36] audit: type=1400 audit(1754372902.025:501): avc: denied { mount } for pid=2901 comm="syz.4.755" name="/" dev="ramfs" ino=26364 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 103.821973][ T2902] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 103.842924][ T36] audit: type=1400 audit(1754372902.025:502): avc: denied { mounton } for pid=2901 comm="syz.4.755" path="/47/file0/bus" dev="ramfs" ino=26367 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 103.849847][ T2902] overlayfs: failed to set xattr on upper [ 103.875698][ T2914] Bluetooth: hci0: Frame reassembly failed (-84) [ 103.878402][ T2902] overlayfs: ...falling back to redirect_dir=nofollow. [ 103.885796][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 103.891707][ T2902] overlayfs: ...falling back to uuid=null. [ 103.962916][ T469] usb 3-1: Using ep0 maxpacket: 8 [ 103.969373][ T469] usb 3-1: unable to get BOS descriptor or descriptor too short [ 103.979759][ T469] usb 3-1: string descriptor 0 read error: -22 [ 103.985994][ T469] usb 3-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=82.fe [ 103.995069][ T469] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.204828][ T469] asix 3-1:7.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 104.571432][ T65] usbhid 2-1:0.0: can't add hid device: -71 [ 104.578096][ T65] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 104.588407][ T65] usb 2-1: USB disconnect, device number 31 [ 104.611752][ T2917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.620374][ T2917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.659841][ T36] audit: type=1400 audit(1754372902.865:503): avc: denied { write } for pid=2923 comm="syz.2.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 104.726450][ T36] audit: type=1400 audit(1754372902.935:504): avc: denied { mounton } for pid=2926 comm="syz.2.763" path="/177/file0" dev="tmpfs" ino=1012 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 104.763162][ T469] asix 3-1:7.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 104.773295][ T469] asix 3-1:7.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 104.892950][ T65] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 104.895803][ T2935] rust_binder: 2933 RLIMIT_NICE not set [ 104.945164][ T469] asix 3-1:7.0 eth1: register 'asix' at usb-dummy_hcd.2-1, ASIX AX88178 USB 2.0 Ethernet, ca:31:18:4a:79:e7 [ 104.965823][ T469] usb 3-1: USB disconnect, device number 34 [ 104.972009][ T469] asix 3-1:7.0 eth1: unregister 'asix' usb-dummy_hcd.2-1, ASIX AX88178 USB 2.0 Ethernet [ 105.022966][ T65] usb 2-1: device descriptor read/64, error -71 [ 105.262976][ T65] usb 2-1: device descriptor read/64, error -71 [ 105.382968][ T469] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 105.502938][ T65] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 105.532948][ T469] usb 3-1: Using ep0 maxpacket: 16 [ 105.539356][ T469] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.549528][ T469] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 105.559895][ T469] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 105.569016][ T469] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.577160][ T469] usb 3-1: Product: syz [ 105.581381][ T469] usb 3-1: Manufacturer: syz [ 105.586192][ T469] usb 3-1: SerialNumber: syz [ 105.643023][ T65] usb 2-1: device descriptor read/64, error -71 [ 105.799401][ T469] usb 3-1: 0:2 : does not exist [ 105.807105][ T469] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 105.818656][ T469] usb 3-1: USB disconnect, device number 35 [ 105.827762][ T343] udevd[343]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 105.882979][ T65] usb 2-1: device descriptor read/64, error -71 [ 105.922991][ T842] Bluetooth: hci0: command 0x1003 tx timeout [ 105.922989][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 105.942531][ T2498] usbhid 5-1:0.0: can't add hid device: -71 [ 105.942732][ T36] audit: type=1400 audit(1754372904.145:505): avc: denied { unmount } for pid=2185 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 105.949082][ T2498] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 105.977852][ T2498] usb 5-1: USB disconnect, device number 12 [ 105.994179][ T65] usb usb2-port1: attempt power cycle [ 106.009203][ T2977] binder: Bad value for 'max' [ 106.014207][ T2977] binder: Bad value for 'max' [ 106.018974][ T2977] binder: Bad value for 'max' [ 106.023872][ T2977] binder: Bad value for 'max' [ 106.028660][ T2977] binder: Bad value for 'max' [ 106.033468][ T2977] binder: Bad value for 'max' [ 106.038251][ T2977] binder: Bad value for 'max' [ 106.043035][ T2977] binder: Bad value for 'max' [ 106.047776][ T2977] binder: Bad value for 'max' [ 106.052524][ T2977] binder: Bad value for 'max' [ 106.057310][ T2977] binder: Bad value for 'max' [ 106.062087][ T2977] binder: Bad value for 'max' [ 106.067017][ T2977] binder: Bad value for 'max' [ 106.071884][ T2977] binder: Bad value for 'max' [ 106.076669][ T2977] binder: Bad value for 'max' [ 106.081390][ T2977] binder: Bad value for 'max' [ 106.086159][ T2977] binder: Bad value for 'max' [ 106.090914][ T2977] binder: Bad value for 'max' [ 106.095677][ T2977] binder: Bad value for 'max' [ 106.100414][ T2977] binder: Bad value for 'max' [ 106.105315][ T2977] binder: Bad value for 'max' [ 106.110162][ T2977] binder: Bad value for 'max' [ 106.115072][ T2977] binder: Bad value for 'max' [ 106.119833][ T2977] binder: Bad value for 'max' [ 106.124608][ T2977] binder: Bad value for 'max' [ 106.129377][ T2977] binder: Bad value for 'max' [ 106.134146][ T2977] binder: Bad value for 'max' [ 106.138898][ T2977] binder: Bad value for 'max' [ 106.143696][ T2977] binder: Bad value for 'max' [ 106.148457][ T2977] binder: Bad value for 'max' [ 106.153384][ T2977] binder: Bad value for 'max' [ 106.158190][ T2977] binder: Bad value for 'max' [ 106.163065][ T2977] binder: Bad value for 'max' [ 106.333049][ T65] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 106.347669][ T2993] mmap: syz.2.775 (2993): VmData 29208576 exceed data ulimit 68. Update limits or use boot option ignore_rlimit_data. [ 106.369213][ T65] usb 2-1: device descriptor read/8, error -71 [ 106.504069][ T65] usb 2-1: device descriptor read/8, error -71 [ 106.653049][ T3001] rust_binder: Error while translating object. [ 106.653085][ T3001] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 106.659297][ T3001] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:637 [ 106.681594][ T3003] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 106.690742][ T3003] rust_binder: Read failure Err(EFAULT) in pid:639 [ 106.742973][ T65] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 106.774079][ T65] usb 2-1: device descriptor read/8, error -71 [ 106.794976][ T36] audit: type=1400 audit(1754372905.005:506): avc: denied { ioctl } for pid=3004 comm="syz.2.779" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 106.904142][ T65] usb 2-1: device descriptor read/8, error -71 [ 107.013036][ T65] usb usb2-port1: unable to enumerate USB device [ 107.032932][ T469] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 107.147681][ T3008] rust_binder: Error while translating object. [ 107.147725][ T3008] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 107.153968][ T3008] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:182 [ 107.172971][ T469] usb 3-1: device descriptor read/64, error -71 [ 107.422942][ T469] usb 3-1: device descriptor read/64, error -71 [ 107.662983][ T469] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 107.792935][ T469] usb 3-1: device descriptor read/64, error -71 [ 108.032960][ T469] usb 3-1: device descriptor read/64, error -71 [ 108.116375][ T3019] cgroup: fork rejected by pids controller in /syz4 [ 108.143068][ T469] usb usb3-port1: attempt power cycle [ 108.402963][ T31] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 108.442260][ T3153] rust_binder: Write failure EFAULT in pid:821 [ 108.492981][ T469] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 108.519225][ T3157] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 108.519253][ T3157] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:825 [ 108.529822][ T469] usb 3-1: device descriptor read/8, error -71 [ 108.545738][ T36] audit: type=1400 audit(1754372906.765:507): avc: denied { ioctl } for pid=3158 comm="syz.1.789" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0x9361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 108.572960][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 108.579791][ T31] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 108.590529][ T31] usb 5-1: config 0 has no interface number 0 [ 108.597081][ T31] usb 5-1: config 0 interface 2 has no altsetting 0 [ 108.605676][ T31] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 108.614952][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.622982][ T31] usb 5-1: Product: syz [ 108.627180][ T31] usb 5-1: Manufacturer: syz [ 108.631769][ T31] usb 5-1: SerialNumber: syz [ 108.637921][ T31] usb 5-1: config 0 descriptor?? [ 108.673995][ T469] usb 3-1: device descriptor read/8, error -71 [ 108.689924][ T3169] SELinux: failed to load policy [ 108.695815][ T3168] rust_binder: Error while translating object. [ 108.695856][ T3168] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 108.702176][ T3168] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:836 [ 108.757952][ T3177] netlink: 'syz.1.795': attribute type 16 has an invalid length. [ 108.774929][ T3177] netlink: 'syz.1.795': attribute type 3 has an invalid length. [ 108.782597][ T3177] netlink: 64054 bytes leftover after parsing attributes in process `syz.1.795'. [ 108.912979][ T469] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 108.930945][ T3185] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 108.930970][ T3185] rust_binder: Read failure Err(EFAULT) in pid:851 [ 108.939512][ T3185] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 108.940210][ T469] usb 3-1: device descriptor read/8, error -71 [ 108.946209][ T3185] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:851 [ 109.077094][ T3192] support for the xor transformation has been removed. [ 109.099784][ T469] usb 3-1: device descriptor read/8, error -71 [ 109.209921][ T31] usb 5-1: USB disconnect, device number 13 [ 109.213057][ T469] usb usb3-port1: unable to enumerate USB device [ 109.223515][ T343] udevd[343]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 109.757119][ T3200] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:323 [ 109.809051][ T3201] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 109.917459][ T3210] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:655 [ 109.918275][ T3210] rust_binder: Read failure Err(EFAULT) in pid:655 [ 110.025721][ T12] bridge_slave_1: left allmulticast mode [ 110.038596][ T12] bridge_slave_1: left promiscuous mode [ 110.044567][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.052562][ T12] bridge_slave_0: left allmulticast mode [ 110.058595][ T12] bridge_slave_0: left promiscuous mode [ 110.064415][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.071836][ T2498] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 110.174934][ T12] tipc: Disabling bearer [ 110.180368][ T12] tipc: Left network mode [ 110.189493][ T12] veth1_macvtap: left promiscuous mode [ 110.195119][ T12] veth0_vlan: left promiscuous mode [ 110.223056][ T2498] usb 5-1: Using ep0 maxpacket: 8 [ 110.260868][ T3216] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.268126][ T3216] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.275286][ T3216] bridge_slave_0: entered allmulticast mode [ 110.282130][ T3216] bridge_slave_0: entered promiscuous mode [ 110.288872][ T3216] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.296046][ T3216] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.303159][ T3216] bridge_slave_1: entered allmulticast mode [ 110.309524][ T3216] bridge_slave_1: entered promiscuous mode [ 110.369415][ T3216] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.376536][ T3216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.383913][ T3216] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.391032][ T3216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.416885][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.424505][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.434309][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.441408][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.450907][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.457997][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.487108][ T3216] veth0_vlan: entered promiscuous mode [ 110.499588][ T3216] veth1_macvtap: entered promiscuous mode [ 110.816053][ T36] audit: type=1400 audit(1754372909.025:508): avc: denied { audit_read } for pid=3233 comm="syz.2.810" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 111.031640][ T3240] rust_binder: got new transaction with bad transaction stack [ 111.031666][ T3240] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:6 [ 111.108440][ T3244] netlink: 4 bytes leftover after parsing attributes in process `syz.5.813'. [ 111.152937][ T469] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 111.251810][ T3251] 9pnet_fd: Insufficient options for proto=fd [ 111.302954][ T469] usb 3-1: Using ep0 maxpacket: 32 [ 111.309270][ T469] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 111.317430][ T469] usb 3-1: config 0 has no interface number 0 [ 111.325091][ T469] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 111.334179][ T469] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.342194][ T469] usb 3-1: Product: syz [ 111.346427][ T469] usb 3-1: Manufacturer: syz [ 111.351057][ T469] usb 3-1: SerialNumber: syz [ 111.356442][ T469] usb 3-1: config 0 descriptor?? [ 111.362225][ T469] smsc95xx v2.0.0 [ 111.502945][ T401] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 111.632956][ T401] usb 6-1: device descriptor read/64, error -71 [ 111.872955][ T401] usb 6-1: device descriptor read/64, error -71 [ 111.971247][ T469] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 111.982705][ T469] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 111.992352][ T469] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 112.004238][ T469] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 112.013849][ T469] usb 3-1: USB disconnect, device number 40 [ 112.122967][ T401] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 112.185138][ T3279] rust_binder: 686: no such ref 3 [ 112.190237][ T3279] rust_binder: Write failure EFAULT in pid:686 [ 112.190979][ T3281] rust_binder: 686: no such ref 3 [ 112.202853][ T3281] rust_binder: Write failure EFAULT in pid:686 [ 112.253056][ T401] usb 6-1: device descriptor read/64, error -71 [ 112.453061][ T45] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 112.503009][ T401] usb 6-1: device descriptor read/64, error -71 [ 112.604185][ T45] usb 3-1: config 0 has no interfaces? [ 112.611450][ T45] usb 3-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 112.620766][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 112.628860][ T401] usb usb6-port1: attempt power cycle [ 112.634585][ T45] usb 3-1: SerialNumber: syz [ 112.639908][ T45] usb 3-1: config 0 descriptor?? [ 112.773009][ T2498] usb 5-1: unable to get BOS descriptor or descriptor too short [ 112.781723][ T2498] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 112.789374][ T2498] usb 5-1: can't read configurations, error -71 [ 112.853793][ T3283] can0: slcan on ptm0. [ 112.972957][ T401] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 112.994215][ T401] usb 6-1: device descriptor read/8, error -71 [ 113.124338][ T401] usb 6-1: device descriptor read/8, error -71 [ 113.133019][ T2498] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 113.282944][ T2498] usb 5-1: Using ep0 maxpacket: 16 [ 113.289238][ T2498] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.300161][ T2498] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.309947][ T2498] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 113.322779][ T2498] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 113.331857][ T2498] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.340546][ T2498] usb 5-1: config 0 descriptor?? [ 113.362969][ T401] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 113.384021][ T401] usb 6-1: device descriptor read/8, error -71 [ 113.514080][ T401] usb 6-1: device descriptor read/8, error -71 [ 113.623055][ T401] usb usb6-port1: unable to enumerate USB device [ 113.747735][ T2498] microsoft 0003:045E:07DA.000D: ignoring exceeding usage max [ 113.758405][ T2498] ================================================================== [ 113.766496][ T2498] BUG: KASAN: slab-out-of-bounds in mon_bin_event+0x12c1/0x23e0 [ 113.774160][ T2498] Read of size 3264 at addr ffff88810be655c1 by task kworker/0:6/2498 [ 113.782313][ T2498] [ 113.784643][ T2498] CPU: 0 UID: 0 PID: 2498 Comm: kworker/0:6 Not tainted 6.12.38-syzkaller-g1ccd114e35d8 #0 7f6878a07b38e51fc2ff36e8efb54c4a01c5a999 [ 113.784670][ T2498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 113.784682][ T2498] Workqueue: usb_hub_wq hub_event [ 113.784701][ T2498] Call Trace: [ 113.784709][ T2498] [ 113.784717][ T2498] __dump_stack+0x21/0x30 [ 113.784739][ T2498] dump_stack_lvl+0x10c/0x190 [ 113.784760][ T2498] ? __cfi_dump_stack_lvl+0x10/0x10 [ 113.784780][ T2498] ? __cfi__printk+0x10/0x10 [ 113.784813][ T2498] print_address_description+0x71/0x220 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 113.784830][ T2498] print_report+0x4a/0x70 [ 113.784846][ T2498] kasan_report+0x163/0x1a0 [ 113.784862][ T2498] ? mon_bin_event+0x12c1/0x23e0 [ 113.784886][ T2498] ? mon_bin_event+0x12c1/0x23e0 [ 113.784909][ T2498] kasan_check_range+0x299/0x2a0 [ 113.784926][ T2498] ? mon_bin_event+0x12c1/0x23e0 [ 113.784948][ T2498] __asan_memcpy+0x31/0x80 [ 113.784970][ T2498] mon_bin_event+0x12c1/0x23e0 [ 113.784995][ T2498] ? mon_bin_complete+0x50/0x50 [ 113.785017][ T2498] ? __kmalloc_noprof+0x1b1/0x450 [ 113.785040][ T2498] ? __hid_request+0x1e8/0x410 [ 113.785063][ T2498] ? hid_connect+0x49a/0x1a20 [ 113.785098][ T2498] ? hid_hw_start+0xcb/0x160 [ 113.785133][ T2498] ? ms_probe+0x194/0x460 [ 113.785155][ T2498] ? __cfi_mon_bin_submit+0x10/0x10 [ 113.785178][ T2498] mon_bin_submit+0x2b/0x40 [ 113.785200][ T2498] mon_submit+0x1b6/0x230 [ 113.785220][ T2498] usb_hcd_submit_urb+0x12d/0x1a20 [ 113.785237][ T2498] ? bus_probe_device+0x18b/0x270 [ 113.785260][ T2498] ? usb_probe_device+0x1d4/0x380 [ 113.785275][ T2498] ? really_probe+0x2d6/0x890 [ 113.785290][ T2498] ? __driver_probe_device+0x198/0x280 [ 113.785306][ T2498] ? driver_probe_device+0x54/0x3f0 [ 113.785322][ T2498] ? __device_attach_driver+0x2f1/0x4b0 [ 113.785339][ T2498] usb_submit_urb+0x111b/0x1800 [ 113.785362][ T2498] usb_start_wait_urb+0x11b/0x2f0 [ 113.785385][ T2498] ? usb_api_blocking_completion+0xd0/0xd0 [ 113.785409][ T2498] ? __kasan_kmalloc+0x96/0xb0 [ 113.785436][ T2498] ? __kasan_check_write+0x18/0x20 [ 113.785457][ T2498] ? usb_alloc_urb+0x9b/0x200 [ 113.785477][ T2498] usb_control_msg+0x25a/0x490 [ 113.785501][ T2498] usbhid_raw_request+0x457/0x590 [ 113.785524][ T2498] __hid_request+0x1e8/0x410 [ 113.785549][ T2498] hidinput_connect+0x241b/0x3340 [ 113.785571][ T2498] hid_connect+0x49a/0x1a20 [ 113.785596][ T2498] ? usbhid_start+0x1a67/0x2530 [ 113.785617][ T2498] ? __cfi_hid_connect+0x10/0x10 [ 113.785644][ T2498] hid_hw_start+0xcb/0x160 [ 113.785668][ T2498] ms_probe+0x194/0x460 [ 113.785689][ T2498] hid_device_probe+0x2c1/0x5d0 [ 113.785716][ T2498] ? __cfi_hid_device_probe+0x10/0x10 [ 113.785742][ T2498] really_probe+0x2d6/0x890 [ 113.785758][ T2498] __driver_probe_device+0x198/0x280 [ 113.785774][ T2498] driver_probe_device+0x54/0x3f0 [ 113.785805][ T2498] ? __device_attach_driver+0x2db/0x4b0 [ 113.785829][ T2498] __device_attach_driver+0x2f1/0x4b0 [ 113.785853][ T2498] bus_for_each_drv+0x260/0x2f0 [ 113.785882][ T2498] ? __cfi___device_attach_driver+0x10/0x10 [ 113.785905][ T2498] ? __cfi_bus_for_each_drv+0x10/0x10 [ 113.785927][ T2498] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 113.785954][ T2498] __device_attach+0x2bd/0x3a0 [ 113.785969][ T2498] ? device_attach+0x40/0x40 [ 113.785994][ T2498] ? _raw_spin_lock+0x8c/0x120 [ 113.786017][ T2498] ? __cfi__raw_spin_lock+0x10/0x10 [ 113.786042][ T2498] device_initial_probe+0x1e/0x30 [ 113.786056][ T2498] bus_probe_device+0x18b/0x270 [ 113.786078][ T2498] device_add+0x80c/0xc00 [ 113.786104][ T2498] hid_add_device+0x39b/0x560 [ 113.786130][ T2498] usbhid_probe+0xde3/0x12b0 [ 113.786153][ T2498] usb_probe_interface+0x696/0xc00 [ 113.786177][ T2498] ? __cfi_usb_probe_interface+0x10/0x10 [ 113.786202][ T2498] really_probe+0x2d6/0x890 [ 113.786228][ T2498] __driver_probe_device+0x198/0x280 [ 113.786244][ T2498] driver_probe_device+0x54/0x3f0 [ 113.786260][ T2498] ? __device_attach_driver+0x2db/0x4b0 [ 113.786277][ T2498] __device_attach_driver+0x2f1/0x4b0 [ 113.786294][ T2498] bus_for_each_drv+0x260/0x2f0 [ 113.786315][ T2498] ? __cfi___device_attach_driver+0x10/0x10 [ 113.786332][ T2498] ? __cfi_bus_for_each_drv+0x10/0x10 [ 113.786360][ T2498] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 113.786386][ T2498] __device_attach+0x2bd/0x3a0 [ 113.786400][ T2498] ? device_attach+0x40/0x40 [ 113.786426][ T2498] ? _raw_spin_lock+0x8c/0x120 [ 113.786449][ T2498] ? __cfi__raw_spin_lock+0x10/0x10 [ 113.786475][ T2498] device_initial_probe+0x1e/0x30 [ 113.786489][ T2498] bus_probe_device+0x18b/0x270 [ 113.786511][ T2498] device_add+0x80c/0xc00 [ 113.786554][ T2498] usb_set_configuration+0x1ad4/0x20b0 [ 113.786586][ T2498] usb_generic_driver_probe+0x95/0x160 [ 113.786609][ T2498] usb_probe_device+0x1d4/0x380 [ 113.786624][ T2498] ? __cfi_usb_probe_device+0x10/0x10 [ 113.786640][ T2498] really_probe+0x2d6/0x890 [ 113.786656][ T2498] __driver_probe_device+0x198/0x280 [ 113.786672][ T2498] driver_probe_device+0x54/0x3f0 [ 113.786688][ T2498] ? __device_attach_driver+0x2db/0x4b0 [ 113.786707][ T2498] __device_attach_driver+0x2f1/0x4b0 [ 113.786724][ T2498] bus_for_each_drv+0x260/0x2f0 [ 113.786745][ T2498] ? __cfi___device_attach_driver+0x10/0x10 [ 113.786761][ T2498] ? __cfi_bus_for_each_drv+0x10/0x10 [ 113.786785][ T2498] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 113.786817][ T2498] __device_attach+0x2bd/0x3a0 [ 113.786832][ T2498] ? device_attach+0x40/0x40 [ 113.786856][ T2498] ? _raw_spin_lock+0x8c/0x120 [ 113.786879][ T2498] ? __cfi__raw_spin_lock+0x10/0x10 [ 113.786904][ T2498] device_initial_probe+0x1e/0x30 [ 113.786918][ T2498] bus_probe_device+0x18b/0x270 [ 113.786940][ T2498] device_add+0x80c/0xc00 [ 113.786965][ T2498] usb_new_device+0x9ed/0x1590 [ 113.786990][ T2498] ? __cfi_usb_new_device+0x10/0x10 [ 113.787015][ T2498] hub_event+0x2c81/0x4270 [ 113.787036][ T2498] ? __cfi_hub_event+0x10/0x10 [ 113.787050][ T2498] ? __kasan_check_write+0x18/0x20 [ 113.787073][ T2498] ? pwq_dec_nr_in_flight+0x6c7/0xc60 [ 113.787096][ T2498] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 113.787121][ T2498] ? kick_pool+0xb9/0x550 [ 113.787138][ T2498] process_scheduled_works+0x7d2/0x1020 [ 113.787165][ T2498] worker_thread+0xc58/0x1250 [ 113.787192][ T2498] kthread+0x2ca/0x370 [ 113.787206][ T2498] ? __cfi_worker_thread+0x10/0x10 [ 113.787230][ T2498] ? __cfi_kthread+0x10/0x10 [ 113.787245][ T2498] ret_from_fork+0x67/0xa0 [ 113.787272][ T2498] ? __cfi_kthread+0x10/0x10 [ 113.787294][ T2498] ret_from_fork_asm+0x1a/0x30 [ 113.787330][ T2498] [ 113.787338][ T2498] [ 113.799753][ T36] audit: type=1400 audit(1754372912.005:509): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[1611]" dev="pipefs" ino=1611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 113.800873][ T2498] Allocated by task 2498: [ 114.438665][ T2498] kasan_save_track+0x3e/0x80 [ 114.443363][ T2498] kasan_save_alloc_info+0x40/0x50 [ 114.448480][ T2498] __kasan_kmalloc+0x96/0xb0 [ 114.453094][ T2498] __kmalloc_noprof+0x1b1/0x450 [ 114.458059][ T2498] __hid_request+0xa9/0x410 [ 114.462571][ T2498] hidinput_connect+0x241b/0x3340 [ 114.467598][ T2498] hid_connect+0x49a/0x1a20 [ 114.472110][ T2498] hid_hw_start+0xcb/0x160 [ 114.476546][ T2498] ms_probe+0x194/0x460 [ 114.480711][ T2498] hid_device_probe+0x2c1/0x5d0 [ 114.485571][ T2498] really_probe+0x2d6/0x890 [ 114.490082][ T2498] __driver_probe_device+0x198/0x280 [ 114.495369][ T2498] driver_probe_device+0x54/0x3f0 [ 114.500395][ T2498] __device_attach_driver+0x2f1/0x4b0 [ 114.505769][ T2498] bus_for_each_drv+0x260/0x2f0 [ 114.510630][ T2498] __device_attach+0x2bd/0x3a0 [ 114.515391][ T2498] device_initial_probe+0x1e/0x30 [ 114.520420][ T2498] bus_probe_device+0x18b/0x270 [ 114.525277][ T2498] device_add+0x80c/0xc00 [ 114.529624][ T2498] hid_add_device+0x39b/0x560 [ 114.534329][ T2498] usbhid_probe+0xde3/0x12b0 [ 114.538932][ T2498] usb_probe_interface+0x696/0xc00 [ 114.544045][ T2498] really_probe+0x2d6/0x890 [ 114.548555][ T2498] __driver_probe_device+0x198/0x280 [ 114.553846][ T2498] driver_probe_device+0x54/0x3f0 [ 114.558870][ T2498] __device_attach_driver+0x2f1/0x4b0 [ 114.564238][ T2498] bus_for_each_drv+0x260/0x2f0 [ 114.569091][ T2498] __device_attach+0x2bd/0x3a0 [ 114.573852][ T2498] device_initial_probe+0x1e/0x30 [ 114.578880][ T2498] bus_probe_device+0x18b/0x270 [ 114.583742][ T2498] device_add+0x80c/0xc00 [ 114.588084][ T2498] usb_set_configuration+0x1ad4/0x20b0 [ 114.593558][ T2498] usb_generic_driver_probe+0x95/0x160 [ 114.599021][ T2498] usb_probe_device+0x1d4/0x380 [ 114.603870][ T2498] really_probe+0x2d6/0x890 [ 114.608373][ T2498] __driver_probe_device+0x198/0x280 [ 114.613655][ T2498] driver_probe_device+0x54/0x3f0 [ 114.618677][ T2498] __device_attach_driver+0x2f1/0x4b0 [ 114.624043][ T2498] bus_for_each_drv+0x260/0x2f0 [ 114.628902][ T2498] __device_attach+0x2bd/0x3a0 [ 114.633669][ T2498] device_initial_probe+0x1e/0x30 [ 114.638690][ T2498] bus_probe_device+0x18b/0x270 [ 114.643545][ T2498] device_add+0x80c/0xc00 [ 114.647881][ T2498] usb_new_device+0x9ed/0x1590 [ 114.652657][ T2498] hub_event+0x2c81/0x4270 [ 114.657076][ T2498] process_scheduled_works+0x7d2/0x1020 [ 114.662639][ T2498] worker_thread+0xc58/0x1250 [ 114.667328][ T2498] kthread+0x2ca/0x370 [ 114.671396][ T2498] ret_from_fork+0x67/0xa0 [ 114.675820][ T2498] ret_from_fork_asm+0x1a/0x30 [ 114.680607][ T2498] [ 114.682945][ T2498] The buggy address belongs to the object at ffff88810be655c0 [ 114.682945][ T2498] which belongs to the cache kmalloc-8 of size 8 [ 114.696668][ T2498] The buggy address is located 1 bytes inside of [ 114.696668][ T2498] allocated 7-byte region [ffff88810be655c0, ffff88810be655c7) [ 114.710483][ T2498] [ 114.712815][ T2498] The buggy address belongs to the physical page: [ 114.719221][ T2498] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10be65 [ 114.728071][ T2498] flags: 0x4000000000000000(zone=1) [ 114.733286][ T2498] page_type: f5(slab) [ 114.737280][ T2498] raw: 4000000000000000 ffff888100041500 dead000000000100 dead000000000122 [ 114.745874][ T2498] raw: 0000000000000000 0000000080800080 00000001f5000000 0000000000000000 [ 114.754468][ T2498] page dumped because: kasan: bad access detected [ 114.760877][ T2498] page_owner tracks the page as allocated [ 114.766598][ T2498] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 2117714166, free_ts 2079092617 [ 114.784926][ T2498] post_alloc_hook+0x3b9/0x3f0 [ 114.789706][ T2498] prep_new_page+0x1c/0x120 [ 114.794215][ T2498] get_page_from_freelist+0x48ce/0x4960 [ 114.799769][ T2498] __alloc_pages_noprof+0x31f/0x7b0 [ 114.804972][ T2498] alloc_slab_page+0x6b/0x1f0 [ 114.809651][ T2498] allocate_slab+0x69/0x440 [ 114.814156][ T2498] ___slab_alloc+0x59a/0x8b0 [ 114.818756][ T2498] __kmalloc_noprof+0x243/0x450 [ 114.823614][ T2498] acpi_ns_internalize_name+0x2cf/0x470 [ 114.829162][ T2498] acpi_ns_get_node+0x1a4/0x350 [ 114.834015][ T2498] acpi_ns_evaluate+0x36b/0xa50 [ 114.838879][ T2498] acpi_ut_evaluate_object+0x153/0x5a0 [ 114.844345][ T2498] acpi_ut_execute_HID+0xb6/0x470 [ 114.849378][ T2498] acpi_ns_get_device_callback+0x1a4/0x4a0 [ 114.855194][ T2498] acpi_ns_walk_namespace+0x251/0x6b0 [ 114.860571][ T2498] acpi_get_devices+0xfe/0x160 [ 114.865334][ T2498] page last free pid 1 tgid 1 stack trace: [ 114.871141][ T2498] free_unref_page+0xb4d/0xee0 [ 114.875914][ T2498] __free_pages+0x6b/0x3b0 [ 114.880333][ T2498] __free_slab+0xb6/0x110 [ 114.884671][ T2498] free_slab+0x18/0xf0 [ 114.888763][ T2498] discard_slab+0x23/0x40 [ 114.893100][ T2498] __slab_free+0x201/0x2b0 [ 114.897528][ T2498] ___cache_free+0xc9/0xe0 [ 114.901950][ T2498] qlist_free_all+0xb5/0x130 [ 114.906547][ T2498] kasan_quarantine_remove_cache+0x1df/0x360 [ 114.912539][ T2498] kasan_cache_shrink+0xd/0x20 [ 114.917305][ T2498] kmem_cache_shrink+0x11/0x30 [ 114.922077][ T2498] acpi_os_purge_cache+0x19/0x30 [ 114.927029][ T2498] acpi_purge_cached_objects+0xbc/0xd0 [ 114.932495][ T2498] acpi_initialize_objects+0x32/0xb0 [ 114.937788][ T2498] acpi_bus_init+0xcf/0x6d0 [ 114.942304][ T2498] acpi_init+0xc5/0x23b [ 114.946483][ T2498] [ 114.948809][ T2498] Memory state around the buggy address: [ 114.954439][ T2498] ffff88810be65480: 05 fc fc fc fa fc fc fc fa fc fc fc 05 fc fc fc [ 114.962500][ T2498] ffff88810be65500: 05 fc fc fc 04 fc fc fc 05 fc fc fc 05 fc fc fc [ 114.970560][ T2498] >ffff88810be65580: fa fc fc fc fa fc fc fc 07 fc fc fc fa fc fc fc [ 114.978620][ T2498] ^ [ 114.984780][ T2498] ffff88810be65600: 06 fc fc fc fa fc fc fc 00 fc fc fc fa fc fc fc [ 114.992850][ T2498] ffff88810be65680: fa fc fc fc fa fc fc fc fa fc fc fc 05 fc fc fc [ 115.000922][ T2498] ================================================================== [ 115.008989][ T2498] Disabling lock debugging due to kernel taint [ 115.030693][ T36] audit: type=1400 audit(1754372913.235:510): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 115.052555][ T36] audit: type=1400 audit(1754372913.235:511): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.080213][ T36] audit: type=1400 audit(1754372913.235:512): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.103934][ T36] audit: type=1400 audit(1754372913.235:513): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.131184][ T36] audit: type=1400 audit(1754372913.235:514): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 115.152197][ T36] audit: type=1400 audit(1754372913.235:515): avc: denied { append open } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 115.175257][ T36] audit: type=1400 audit(1754372913.235:516): avc: denied { getattr } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 115.213600][ T2498] microsoft 0003:045E:07DA.000D: No inputs registered, leaving [ 115.222127][ T2498] microsoft 0003:045E:07DA.000D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 115.234353][ T12] bridge_slave_1: left allmulticast mode [ 115.240038][ T12] bridge_slave_1: left promiscuous mode [ 115.245725][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.255013][ T2498] microsoft 0003:045E:07DA.000D: no inputs found [ 115.261450][ T2498] microsoft 0003:045E:07DA.000D: could not initialize ff, continuing anyway [ 115.270567][ T12] bridge_slave_0: left allmulticast mode [ 115.280871][ T12] bridge_slave_0: left promiscuous mode [ 115.286920][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.297354][ T2498] usb 5-1: USB disconnect, device number 15 [ 115.445398][ T12] veth1_macvtap: left promiscuous mode [ 115.450916][ T12] veth0_vlan: left promiscuous mode [ 115.605706][ T3283] can0 (unregistered): slcan off ptm0. [ 115.611677][ T401] usb 3-1: USB disconnect, device number 41 [ 115.767138][ T12] bridge_slave_1: left allmulticast mode [ 115.772967][ T12] bridge_slave_1: left promiscuous mode [ 115.778620][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.786386][ T12] bridge_slave_0: left allmulticast mode [ 115.792063][ T12] bridge_slave_0: left promiscuous mode [ 115.797835][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.805823][ T12] bridge_slave_1: left allmulticast mode [ 115.811507][ T12] bridge_slave_1: left promiscuous mode [ 115.817244][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.824987][ T12] bridge_slave_0: left allmulticast mode [ 115.830754][ T12] bridge_slave_0: left promiscuous mode [ 115.836554][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.066831][ T12] veth1_macvtap: left promiscuous mode [ 116.072371][ T12] veth0_vlan: left promiscuous mode [ 116.077972][ T12] veth1_macvtap: left promiscuous mode [ 116.083843][ T12] veth0_vlan: left promiscuous mode