last executing test programs: 39.928042065s ago: executing program 1 (id=240): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, 0x0) (async) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = socket$inet6(0xa, 0x1, 0x1) getsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000100)=""/44, &(0x7f00000001c0)=0x2c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000200)={0x0, 0x4000003}) (async) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000200)={0x0, 0x4000003}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x50, 0x0, 0x0, 0x80000006}, {0x6, 0xfa, 0x0, 0x4}]}, 0x10) write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[], 0xfdef) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000f80)=0x1, 0x4) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) gettid() ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffff9, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffff9, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 39.860508166s ago: executing program 1 (id=241): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f00000000c0)={0x81, 0x0, 0x1}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r4, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b050000004b"], 0xffdd) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000c40)={"e54c1421593cb4d3f8fe6094dc821bbbe06520701fc6de7b0349f34b0f8c556a9e9aff1355aab8d6da26d74608530f150f127f9e3f0a2f1fff0be9774ca3d6c007c91903f78616596487bf50017c56b15385ab264cba5b168c62d971e67e6f3e73d60b5a8adbaaf2af8610c6a91c0a116f619adce4aa91d5a68faf8ee98693d32d8d8244381b5720ef596600e39491d216c22d0725904bab7d90fa10aa300ef098609b4fa6dd77b1b7c321b1fc6356564ce3f90826be3a9a5be186ffc48eb13824e9dae77ed212a0f802074ff4f1725c4ad88cf5bbd36e3406bc59d96e82047631d8be9462ee7e54e5b2897c3fff38eabf67e1e160c2b5e18be06457844d89c9a606b7d25fbde713f4887906737c78821371dcca63540f113a2b5edc4b327d1f9610377b97265d4aa875b4bc3c44bf8110d5df1beb1fe54794a0aa52dfc80df1caf7d812b4f1cdba1a6836b45ea2180d08439d411ce8e0755868cc839eaeac73e5d28f9f1990584038cf5fa6bee0c4095a27cc8c7b59519bf2a9bf1fedf54cc2dc6aea6c42c32de40c291e5f422f5c7692a08926af160fb379576dd81bac746232fb246817fc3248097914b75e83cc5eb518ce8fb643b34cc79c3b61f0d94e7db62dd480198d41e0862f1ec4429ab637569884a5ba446a0b09edfd986a2b3e15ee35bbd18610dad6271681ed240bb700b9199b541013c0aadc36484da57511896c14776a41602aa1426edfbb828897d9c218b7936a0572840ebbc796e888a439b24e640324b511deb6ed0b2ce2f7567447826944b4f34101e492e8d20a2deda950e96e78f86d6d4c976f0c99041c94944309e6ce08d84a7c96677d570d9a57ec0506a4321d9e049b55be883cff7f000000000000aea5e6c2ded2ce72fb68989ae381fe1394cf6966ab04285d5ff8256bc2e85462b8d89aeeebd5432157c945b5dc1960d9282c6cc00794d4954f956c71bcdf846f41392ebe0d3b289438d24ec4bc073617459a6b232445dd636a9f21140e14b162fd5ef1d626b0ff84884fd63d22cc1b05befb77ea937f3045cc15b125479b262c1e32fca75a5468423288c5776efee744b1fccb5e6d661d9d287cfa8582c96ea34a33c1bbc29c0035657da66a87150bbb885be5ee123e431fd793ea979a0fc77aaee66d874c0616cb32324826b36d0e27d14217ad1131cace3bae4ef82dfbc790e78de53a9bfbdb468bf0eb3ff134073b380858965de2d108862daf3fc6b49ad46f20832238aeaa5d010cf08e37938f0bb7bbe8a970c39ce9327a16fe07565708266ce9ef639bfa08538693b456228aa1c370d64ef9795b7cc208a2c528d381a042d149ed5c7f34ed26a7d5a4401b86434f054389e5dac7a4ee896e406d7b27240d925d478e0eb2202797832d3e2c74f4925ad583779b97034f9400"}) statx(0xffffffffffffffff, &(0x7f0000000540)='./file0/file0\x00', 0x0, 0x800, &(0x7f0000000fc0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) setsockopt$sock_int(r7, 0x1, 0xa, &(0x7f0000000600)=0x2, 0x4) fstat(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r9) syz_fuse_handle_req(r0, &(0x7f0000006280)="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", 0x2000, &(0x7f0000001980)={&(0x7f0000000300)={0x50, 0x0, 0x101, {0x7, 0x2b, 0x3, 0x1c4020, 0x6a3, 0x1ff, 0x6, 0x6, 0x0, 0x0, 0x1, 0x9}}, &(0x7f0000000380)={0x18, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f0000000400)={0x18, 0x0, 0xffffffffffffffff}, &(0x7f0000000440)={0x18, 0x0, 0x562e, {0xfffffffa}}, &(0x7f00000007c0)={0x28, 0x0, 0x4, {{0x7, 0x1}}}, &(0x7f0000000800)={0x60, 0x0, 0x9, {{0xfb5b, 0x2, 0x0, 0x927f, 0xe4d, 0x1, 0x1, 0x8000}}}, &(0x7f0000000880)={0x18, 0x0, 0x1, {0xa9}}, &(0x7f0000000940)={0x19, 0x0, 0xc4, {'/dev/kvm\x00'}}, &(0x7f0000000980)={0x20, 0x7e22b5daa0cf4d86, 0x5, {0x0, 0x2}}, &(0x7f0000000b00)={0x78, 0x0, 0x8, {0x7fffffff, 0x10001, 0x0, {0x5, 0x6, 0x7fffffffffffffff, 0x10, 0x6, 0x4, 0x5, 0xf2b3, 0x3, 0x1000, 0x2, 0x0, 0x0, 0x4}}}, 0x0, &(0x7f0000000d00)={0x50, 0x0, 0x9, [{0xfffffffffffffffd, 0x100000001, 0x4, 0x3, '$+^{'}, {0x1, 0xb73, 0x1, 0x1, '+'}]}, &(0x7f0000001500)={0x150, 0x0, 0x100000000, [{{0x4, 0x3, 0x8, 0x8, 0x7, 0x2, {0x1, 0xad21, 0x6, 0xc0, 0xe7d, 0x6, 0x2, 0xe3, 0x8000, 0x8000, 0x67d1, 0x0, 0x0, 0x1, 0x1000}}, {0x6, 0x5, 0x5, 0x6, 'fuse\x00'}}, {{0x6, 0x0, 0x3, 0x9, 0x5, 0xfff, {0x3, 0x4, 0x4, 0x5b86ff1a, 0x6, 0x80000000, 0x80000001, 0x6, 0xe3b, 0xc000, 0xd94d07b, 0x0, 0xee00, 0x6, 0x3}}, {0x4, 0xa8b, 0x3, 0x4, '9p\x00'}}]}, 0x0, 0x0, 0x0}) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x10e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x40, 0x4, [{{0x9, 0x4, 0x0, 0xf, 0x1, 0x3, 0x1, 0x3, 0xa, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x25a}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xa, 0x61, 0x4}}}}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x6, 0x8, 0x46, 0x40, 0x9}, 0x12e, &(0x7f0000000640)={0x5, 0xf, 0x12e, 0x6, [@generic={0xd9, 0x10, 0xb, "01196533e3bbb0db3f12f796d10058e67e5dc8af3b8724493ce80ce6a9641b7b0677638605ad2a5be89f19a781954f608f8e3facebc222aadb64986158349c593cc80bd7c6a4753637d37a125a18bd536a3eac2e81e2fb4d037bc8037353285792175a9bb01f1455e75d92c6151f019cdcedeef7125ee83d11201724e100c4e4f534c8a822948eb7318f4a29d977230c30fda4f2cdb3f5ad162356549cba5bed575f5d5454a5784778697c3f718f67486ce81002a0e04d8110d69251e71869c659032e1b22ac50383c48727f112d037cf1952ca4a8d6"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0x6, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x24, 0x0, 0x3, 0x200}, @ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x7fffff7, 0x0, 0x7fff, [0xf0, 0xff, 0x0, 0xc0, 0x30, 0xf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x7, 0x4, 0x7ff}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "577505c6ffc26713c203ba545ecdf6cc"}]}, 0x8, [{0xdc, &(0x7f00000009c0)=@string={0xdc, 0x3, "94ed4b583946c6d29c34862b5a4f8b37a01fb33fb5597c06de3c8f232faf9b750d97169b681c66cd708fce9b9fc63edd968ca768c0e4296016279a2e96f85afbf51b762fa3c8aa6d1c0b13f00c652bb785b3b1250e5b37b696af7f79fe2930023351440cd5227314c0eb14fa8a8937937d636818529fc6d72562654738a47f3a5a626276afc7b395c1ba6b416a04d31ae03f0cdd78c0a296e0da499021b558d43aa737cb900889397f5c5587eafea2aa5d8f7190f15be6ad788e6ebe5437777834e98e7ae8043d3e03292290bb4c41a68e7903c429f8e2601a0f"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x40e}}, {0x43, &(0x7f0000000b80)=ANY=[@ANYBLOB="4303f378258cb5dfac0650dea816980a3ba2e5b4b2b1c1e511ef269c1cd6a0a5ac926a4ba0de8fef9ec5d889d16d32eeab232f08b8cdd02f36cea600"/71]}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1004}}, {0x6e, &(0x7f0000000580)=@string={0x6e, 0x3, "96d89dc5d49dc780e5c52925fa1ccff73f1bef89ac4d0579cda22191293b1094fe32dead32c9d47c63f8f2118406dfd7537dd57b7bc9ad891594037c0858fd0a8c2a18e1ff743faaa486df41ecbb687654c72c8a939eabe82ed9e1993dac006d0fadaa6a89f1b8693a50fd3d"}}, {0xca, &(0x7f0000001100)=@string={0xca, 0x3, "d93a4b2fe9e99118c5aa98ed4100c5e993dbf7f6c3a025e893cb371991d461f3e9813b71e2926ea009725e0587e3e4c844acfa3a774f35e39b9897cde82a0cdb2133caabddb0d5f503ee65448b7ee89b61378d9de563504740f780dcfa10c91ac6825c02ec8602e28de4b3e1a621308a1ad63e16fc8730330ec99648fed16668535d0170521a1a3c02b091ab4a6e2d857eb1d83b287f0831ea0c9926827182895940b187d7581bdeb3bbf62f8d7f41cd2fafdcd405864b409f3e561755955f2035d2fe61717f2ef9"}}]}) 39.226957339s ago: executing program 1 (id=244): rt_sigsuspend(&(0x7f0000000100)={[0x5]}, 0x8) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) unshare(0x62040200) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000006c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x1}}) syz_usb_connect$cdc_ncm(0x4, 0x84, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x2, 0x1, 0x49, 0x0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "d303b4ea0036"}, {0x5, 0x24, 0x0, 0x6c9}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x5, 0x1, 0x4}, {0x6, 0x24, 0x1a, 0x0, 0x12}, [@acm={0x4, 0x24, 0x2, 0x8}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x200, 0x4, 0x4, 0x8, 0x65}]}, {{0x9, 0x5, 0x81, 0x3, 0x48, 0x4, 0x71, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x1, 0xab, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x9, 0x3, 0x3}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x9, 0x6, 0x2, 0x20, 0x9}, 0x121, &(0x7f0000000700)=ANY=[@ANYBLOB="050f210102b4100a3d83fc1fb7c5e5070058e13bb6aff47ad1079853e9fd9eed0923c56994c354453d635f43536c2b0efcd2fcefe4792a85b1c5c756925f07a8b5e8d10459a62e94d2c9774b701bbc783c618b01ca00a8989de002071caf40b9df0e3c8d99c4bdd03b13549aa013466f83d9c2a038f3126ec2eab137d940b518f7e8d113df22a022e385ec83029dd2e1eb9d0785f4d080163f25b0cf9cd0d3541c61fd4df4041e5fd36595103c131ed6b2c3e1784bc5fbac7968100b5d9250ef09a8ccaf006bfe3ef4078a162838b27d9edd5d9bab94403da2927fe8327eac44821ffb82cfb0e26b8dcf1cac430e41cbd13e03000000000000006b4ad1aa0cb4a6e3ca565eb4e95cae377be09bc029a63194c8ac10e43ff314ef691fb98c253b3e627a351ec259f54710bf349340603ab083b840f9916e52ff7352a1f255a05c3126d8f60b99969a8e014fe285b1d8e536e8bc200e5b2ea6b226c347a7cafa43e1bd2dec8fda0282bee8e90fc18480805749e4493e91a1c19949b693f5f5421bea526f2764d1bfd814baf3c20d0f3d9ec1"], 0x3, [{0xdc, &(0x7f0000000400)=@string={0xdc, 0x3, "183ac910e8eaf1d1dbc89789c99f4ee78089f63fc47547b7ec3525c1ff5bab2e0fd2eab3572dc9bd35ea52575162062304fd102b9f44a099f05e3c6cb0eaa8a323ac4093cd8c607fc6a5150cc7217352ac06be21c51d2ac3733ba8fd6ef8e2f310651921e54e4212239471b43e20d70f2d8a4e21f787db628bbe5f2f0add7fcf3683e2952c4c6cf89e75189793828710a0ca5e038a87e10d674a818e43c6418b1b2eb7698d0a331bbfa821a923e1d3512d3524f3d3712fd74109dc26de1e8fe9fe02b61154f55198fcb51af88b9a7524559c03a6c60505238406"}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0xc3c}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x438}}]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) pwritev(r2, &(0x7f00000008c0)=[{&(0x7f0000000180)="ff", 0x1}], 0x10000000000000e4, 0x0, 0x0) unshare(0x4050200) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0xc0044) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x27) close_range(r0, 0xffffffffffffffff, 0x0) 36.260773637s ago: executing program 1 (id=268): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000340)='./file0/file0\x00', 0x1) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) setresgid(0xffffffffffffffff, 0xee01, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x80000) r3 = fcntl$dupfd(r1, 0x406, r2) ioctl$int_in(r3, 0x5452, &(0x7f0000000240)=0x69) statx(r3, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x200, &(0x7f00000003c0)) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000740)={&(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c17b1"], 0x30}, 0x4000014) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x8940, 0x0) readv(r5, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000ffdbdf257200000008000300", @ANYRES32=r7, @ANYBLOB="0c0099000209040018000000"], 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x8010) 36.200601518s ago: executing program 1 (id=269): setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000100)=0x1, 0x4) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000200)=@other={'lock', ' ', 'io+mem'}, 0xc) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) r2 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f00000002c0)={'syz1\x00', {0x2, 0x1500, 0x4, 0x9}, 0x1e, [0x40000000, 0x4, 0x4, 0x9, 0x2b0, 0x2e, 0x80000001, 0x5f1, 0x6, 0x9, 0x4, 0x7fff, 0x8, 0x3, 0x0, 0x7fffffff, 0x1, 0x6, 0x0, 0x800, 0x7, 0x80, 0x5, 0x9, 0x0, 0x0, 0xe44, 0x4, 0x2, 0x401, 0x6, 0x3, 0xf2a, 0x9, 0x10001, 0x4, 0x80000000, 0x0, 0x2, 0x2, 0x9, 0x4, 0x66, 0x33, 0x7, 0x80, 0x0, 0x5, 0x5, 0x4, 0x5, 0x9, 0x3, 0xc, 0x2, 0x0, 0x93, 0x8, 0x2, 0x5, 0x6, 0x8, 0x3, 0xc], [0x2, 0x762f, 0x1, 0x100, 0x0, 0x4, 0x6, 0x80, 0x5, 0xe, 0x9, 0x9, 0x5, 0x7, 0x4, 0x3, 0x7, 0x3, 0x80000000, 0x2, 0x80000001, 0x2, 0x0, 0xff, 0x7, 0x2, 0x7, 0x3, 0x1, 0x8, 0x1, 0x1, 0x80, 0x3, 0x3, 0x9, 0x7, 0x9, 0x8, 0x3, 0x2, 0x90a, 0x5, 0x0, 0x6, 0x2, 0x2, 0x7c, 0x8c, 0x3ff, 0x8000, 0xf, 0x6, 0x1, 0x3, 0xc, 0x9, 0x5, 0xdec, 0x4, 0x4d9, 0x7, 0x7, 0x7fffffff], [0x0, 0xfff, 0x8, 0x7, 0x800, 0x1, 0x0, 0x0, 0x4, 0x4, 0xffffffff, 0x7fff, 0x10, 0x8, 0xd, 0x0, 0x9, 0x7, 0x7, 0x1f1, 0x1ff, 0x9, 0x9, 0x5, 0x1, 0xfffffc01, 0x8, 0xfffffff3, 0x8000, 0x2191, 0x5587, 0x9, 0x2, 0x9, 0x3, 0x7ff, 0x6, 0x9, 0x0, 0x7, 0x7, 0xa40, 0x4, 0x0, 0x800, 0x1, 0x3, 0x1748cfca, 0x10000, 0x8, 0xfffffffc, 0x8, 0xfffffffc, 0x1ff, 0x5, 0x4, 0xe7, 0x9, 0x20e6, 0x3, 0x8f, 0x1, 0x4, 0x80000000], [0x7, 0x5, 0x5, 0xfff, 0x1, 0xfff, 0x0, 0x2, 0x1ff, 0x2, 0x3, 0x9, 0x200, 0x1000, 0xffffffff, 0x1, 0xff, 0x8, 0x9, 0x9a5, 0x9, 0x1, 0x2, 0x4, 0x4, 0x5, 0x81, 0x23, 0x5, 0x8, 0x0, 0x3a6a, 0x7, 0x671, 0x3, 0x5, 0x4, 0x4, 0x6, 0x8, 0x7ec807e5, 0x0, 0x3, 0xffffffff, 0x6, 0x2, 0x8, 0x5, 0x1410, 0x6, 0x800, 0x1000, 0x4, 0xda02635, 0x2, 0x400, 0xff, 0x9128, 0x81, 0xb78, 0x1, 0x5, 0x9, 0x6]}, 0x45c) r4 = memfd_create(&(0x7f0000002180)='\t^\x1ax1\xc7\xbe\xa1\xc6F\xfa\x9cq\xb8w&\xdfP\xba\xdf%\x7f\xb7\xac\x952\x8d\xa0\x15\xbc\xf4nS\x11X\x95\xc0~srQ\xeaS\x88\xad\xd1Js\\\xb2\xc5\xed\xe8\x7f\xdc(\x01\xcey\xc7\x15?\n\xad\xe7Z\x9e\xe1K\xfd\xc95f@O}\\\xdd\xca!;\xf38\'D9\xcb\xda\xa1\xc1\v\xb9\xad\xb7}l\xbe\x95p\xd4)\x18x\x17\xab7\x06\x9f\xe3X\v\xf2\xcc\x05\xb4( m\xde\x0f\xf3\xf8\x1b\vW\x00\x90\x01\xfe\x1e<\xabL-3\xe6\x81V\x8d3\x1b\xe4}\xe3\x7f\x06\xce\xe1D\x94&\xac\x88\x95\xff\xda\x14d\xcbx\x93x\x95\xab\xcb@\x8d\xa0\xe4I\xff\x87\x90\xd9\x89O\x98\x90\x86\xff\xcc\xc1\xf5\r\xea\x19c\xba\xa9\"d$\x01h\x0f&/B\xa5\x18%\xc7\x7f\x81X)s\xc8\xc7ex#\xb0\xe4\x1b\xce\x0f\xear,\x8ch=:F$\xe6\x87\xf0AF\xd5\x84c\xd5\xd5(\xb3\xac\x9b\x80\x81y\xf1\a\x0f\x00\x00\x00\x00\xff\xff\xff\xff\xb8~\xaa-', 0xb) fchmod(r4, 0x1b0) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f0000000d40)={0x9, 0x6, 0x8}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) r5 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r5) r6 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x24) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000100)=0x1, 0x4) (async) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) (async) write$vga_arbiter(r0, &(0x7f0000000200)=@other={'lock', ' ', 'io+mem'}, 0xc) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) (async) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) write$uinput_user_dev(r3, &(0x7f00000002c0)={'syz1\x00', {0x2, 0x1500, 0x4, 0x9}, 0x1e, [0x40000000, 0x4, 0x4, 0x9, 0x2b0, 0x2e, 0x80000001, 0x5f1, 0x6, 0x9, 0x4, 0x7fff, 0x8, 0x3, 0x0, 0x7fffffff, 0x1, 0x6, 0x0, 0x800, 0x7, 0x80, 0x5, 0x9, 0x0, 0x0, 0xe44, 0x4, 0x2, 0x401, 0x6, 0x3, 0xf2a, 0x9, 0x10001, 0x4, 0x80000000, 0x0, 0x2, 0x2, 0x9, 0x4, 0x66, 0x33, 0x7, 0x80, 0x0, 0x5, 0x5, 0x4, 0x5, 0x9, 0x3, 0xc, 0x2, 0x0, 0x93, 0x8, 0x2, 0x5, 0x6, 0x8, 0x3, 0xc], [0x2, 0x762f, 0x1, 0x100, 0x0, 0x4, 0x6, 0x80, 0x5, 0xe, 0x9, 0x9, 0x5, 0x7, 0x4, 0x3, 0x7, 0x3, 0x80000000, 0x2, 0x80000001, 0x2, 0x0, 0xff, 0x7, 0x2, 0x7, 0x3, 0x1, 0x8, 0x1, 0x1, 0x80, 0x3, 0x3, 0x9, 0x7, 0x9, 0x8, 0x3, 0x2, 0x90a, 0x5, 0x0, 0x6, 0x2, 0x2, 0x7c, 0x8c, 0x3ff, 0x8000, 0xf, 0x6, 0x1, 0x3, 0xc, 0x9, 0x5, 0xdec, 0x4, 0x4d9, 0x7, 0x7, 0x7fffffff], [0x0, 0xfff, 0x8, 0x7, 0x800, 0x1, 0x0, 0x0, 0x4, 0x4, 0xffffffff, 0x7fff, 0x10, 0x8, 0xd, 0x0, 0x9, 0x7, 0x7, 0x1f1, 0x1ff, 0x9, 0x9, 0x5, 0x1, 0xfffffc01, 0x8, 0xfffffff3, 0x8000, 0x2191, 0x5587, 0x9, 0x2, 0x9, 0x3, 0x7ff, 0x6, 0x9, 0x0, 0x7, 0x7, 0xa40, 0x4, 0x0, 0x800, 0x1, 0x3, 0x1748cfca, 0x10000, 0x8, 0xfffffffc, 0x8, 0xfffffffc, 0x1ff, 0x5, 0x4, 0xe7, 0x9, 0x20e6, 0x3, 0x8f, 0x1, 0x4, 0x80000000], [0x7, 0x5, 0x5, 0xfff, 0x1, 0xfff, 0x0, 0x2, 0x1ff, 0x2, 0x3, 0x9, 0x200, 0x1000, 0xffffffff, 0x1, 0xff, 0x8, 0x9, 0x9a5, 0x9, 0x1, 0x2, 0x4, 0x4, 0x5, 0x81, 0x23, 0x5, 0x8, 0x0, 0x3a6a, 0x7, 0x671, 0x3, 0x5, 0x4, 0x4, 0x6, 0x8, 0x7ec807e5, 0x0, 0x3, 0xffffffff, 0x6, 0x2, 0x8, 0x5, 0x1410, 0x6, 0x800, 0x1000, 0x4, 0xda02635, 0x2, 0x400, 0xff, 0x9128, 0x81, 0xb78, 0x1, 0x5, 0x9, 0x6]}, 0x45c) (async) memfd_create(&(0x7f0000002180)='\t^\x1ax1\xc7\xbe\xa1\xc6F\xfa\x9cq\xb8w&\xdfP\xba\xdf%\x7f\xb7\xac\x952\x8d\xa0\x15\xbc\xf4nS\x11X\x95\xc0~srQ\xeaS\x88\xad\xd1Js\\\xb2\xc5\xed\xe8\x7f\xdc(\x01\xcey\xc7\x15?\n\xad\xe7Z\x9e\xe1K\xfd\xc95f@O}\\\xdd\xca!;\xf38\'D9\xcb\xda\xa1\xc1\v\xb9\xad\xb7}l\xbe\x95p\xd4)\x18x\x17\xab7\x06\x9f\xe3X\v\xf2\xcc\x05\xb4( m\xde\x0f\xf3\xf8\x1b\vW\x00\x90\x01\xfe\x1e<\xabL-3\xe6\x81V\x8d3\x1b\xe4}\xe3\x7f\x06\xce\xe1D\x94&\xac\x88\x95\xff\xda\x14d\xcbx\x93x\x95\xab\xcb@\x8d\xa0\xe4I\xff\x87\x90\xd9\x89O\x98\x90\x86\xff\xcc\xc1\xf5\r\xea\x19c\xba\xa9\"d$\x01h\x0f&/B\xa5\x18%\xc7\x7f\x81X)s\xc8\xc7ex#\xb0\xe4\x1b\xce\x0f\xear,\x8ch=:F$\xe6\x87\xf0AF\xd5\x84c\xd5\xd5(\xb3\xac\x9b\x80\x81y\xf1\a\x0f\x00\x00\x00\x00\xff\xff\xff\xff\xb8~\xaa-', 0xb) (async) fchmod(r4, 0x1b0) (async) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f0000000d40)={0x9, 0x6, 0x8}) (async) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) (async) syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) (async) syz_usb_disconnect(r5) (async) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x24) (async) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) 36.08424001s ago: executing program 1 (id=271): chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) fdatasync(0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x10, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) utime(&(0x7f0000000200)='.\x00', &(0x7f0000000240)={0x8000000000000000, 0xffffffffc86d5209}) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x2fe4) 36.051180271s ago: executing program 32 (id=271): chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) fdatasync(0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x10, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) utime(&(0x7f0000000200)='.\x00', &(0x7f0000000240)={0x8000000000000000, 0xffffffffc86d5209}) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x2fe4) 5.272873097s ago: executing program 4 (id=418): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)="2aadf02a970ff4f4a8654b95dcacd4b01f4b902f485a23c5ff68051000c075a67156871903a61cf84e3ff336421c80507434712b44f99eaf472f02d96054eddecec496742af229bc0b3f114b46ca", 0x4e) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000180)=[@increfs, @decrefs={0x40046307, 0x3}], 0x0, 0x0, 0x0}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) readv(r2, 0x0, 0xffffffffffffffec) r3 = dup3(r1, r0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x8, 0x0, &(0x7f0000000440)=[@decrefs={0x40046307, 0x3}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0xfffffd88, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 5.269824376s ago: executing program 4 (id=419): r0 = fsopen(&(0x7f0000000100)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000040)='utf8', &(0x7f0000000080)="a6", 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f00000001c0)='lc\x00', &(0x7f0000000200)='./cgroup\x00', 0xffffffffffffffff) r1 = socket$inet(0x2, 0x800, 0x5b1f) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000140)={{0x3b, @empty, 0x4e22, 0x3, 'lc\x00', 0x20, 0x5, 0x4f}, {@loopback, 0x4e24, 0x1, 0x3, 0x8, 0x7f}}, 0x44) 5.269434786s ago: executing program 4 (id=420): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendmsg$inet(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)="6e37cff5b582", 0x6}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "adb6c5b29ca2b8382d00", "7e609086", "bb10000000000001"}, 0x28) recvfrom$inet6(r1, &(0x7f0000000180)=""/12, 0x5e, 0x10140, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000080)={0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000003c0)={r1, r3, 0x54bc, 0xc7, &(0x7f00000002c0)="d80a85b70225c44c2fe0fc41c561a7399e4fa899147f0536f38147a86573b611aa56c7935333b4cef50c9b22c2846731ca805e3adebff876010a30d894d1e7e951f4bc7fde05b14ffdc662cda538b492c1e9cf92d0541c79dd753d7266184597b6a03ba1e52943efffbd0e7101476fe38189e36d15897b6613431ff365908724300b6abf251cea829332666122a936a273e103f6b8aa6bd5b6d02bcb1f5266adfb5a0b54b42188196328add9ae627d4a728dbafb44f7fa4c9f1ee20f5ddace9149a578cc296edb", 0x8, 0xac, 0x0, 0x7, 0xf7f, 0x1, 0x0, 'syz0\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x339) ioctl$TUNGETVNETBE(r4, 0x800454df, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 5.255145757s ago: executing program 4 (id=421): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r3, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3d, &(0x7f0000000080), 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x80000000000000c, 0x0, 0x4, 0x10000, 0x7, 0x9004, 0x9, 0x8, 0x9, 0x5, 0x49, 0x3ff, 0x5, 0x2, 0x1, 0x8, 0x7, 0xc1, 0x1, 0x2, 0x2, 0x6, 0x9, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x5, 0x7, 0x4, 0x3, 0x9, 0x888f, 0x1, 0x6, 0x46, 0x1, 0x3, 0xa3de, 0x20000000006, 0x8, 0x7, 0x400, 0x3, 0xffffffffffffffb7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x10001, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x4000000007, 0x2, 0x3, 0x2, 0x2, 0xfff, 0x6, 0x4, 0x1, 0xab6, 0x0, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x8061d, 0x3, 0x7, 0xf6, 0x4, 0x6, 0x204, 0x7, 0xe53e, 0x4, 0x8, 0x2293332f, 0x6, 0x5, 0x1e, 0xd, 0x2, 0x4, 0xfffffffffffffffb, 0x80000001, 0x7, 0xdfd4, 0xfff9, 0x10, 0x5, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x1000003]}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x28, 0x1e, 0x21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0xa, 0x2, 0x0, 0x0, @str='w\xa9\xe2\x00\x00\x00'}]}, 0x28}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)={0x25c, r7, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x162, 0x2a, [@mic={0x8c, 0x10, {0x806, "c9f0b6eb42d6", @short="7c65accd51895998"}}, @fast_bss_trans={0x37, 0x14a, {0x0, 0xa, "5ba43003622ca5d1143d813087e7aec3", "722bf2a146015de4ca1243068b8a7f99b02d69afeae063f0b1824ca9a7bf7e02", "7c2af6af28c2e62cb313dcd6ccf323e72ae11f34959fce2f4b60dd9357c475e1", [{0x1, 0x3, "620302"}, {0x2, 0x4, "5ea6fe23"}, {0x1, 0x21, "49775bf2cc163249126cf70d6d4fc6a58700d1a4ac45c1d620b4cd7b03bcff2a72"}, {0x3, 0x19, "a0f2bf87d2ff7ef7d65b1f520382f5013336d5e1225f09105d"}, {0x4, 0x26, "9cca4f634d0a94c96263be0fdf11f6a253fcc03450b4679969096073d3a8272ede661329b6d4"}, {0x4, 0x27, "7d11f2807f6a0b82de4387c4b5d8ad2398c96fb6411fdb7ce60d622f1237fb6acc5a135875c49f"}, {0x2, 0x21, "a5b24ca72df185c26f3638e9b26569be7c714978fad894cf68ad68fd57c7158277"}, {0x4, 0x13, "67ea778e15e70a878fe2830686ad20e1d9419a"}, {0x1, 0x20, "3a91d4abc9ec38d94cb6426e93e9330b0abc7267707c77aab6bea8c83a0c51f2"}, {0x2, 0x2, '\aX'}]}}]}, @NL80211_ATTR_IE={0xe1, 0x2a, [@link_id={0x65, 0x12, {@from_mac=@broadcast, @broadcast, @broadcast}}, @tim={0x5, 0xc4, {0x3, 0xea, 0x5, "6eeb63cae457f0ec92c727bf6240e131c60ac90da0a43775cc9a00365107a0812c4b084d15c83f260787782637844e74f3d0727a56c2d73b4e699f229db6f2119bf2a0773d0ba4be3a79d2531b083be2411d8736b0dd56aebe0c3af6d04b5a4b6e06cc0e179a67d9c5d49ab210d69ff739268ab9fd87945ee5b310d7093927eed5f53baffd36b7c5dda6a5e659c24697ef8c30644a74f2f06d84887199eef07c28f8be9cceb84bb26d5d79b29fc127db9e7faa515897b52af1b1e168fa8396aa4f"}}, @supported_rates={0x1, 0x1, [{0x3, 0x1}]}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x1}, 0x4) 5.239946857s ago: executing program 4 (id=422): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212"], 0x0) syz_usb_connect$cdc_ecm(0x1, 0x52, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x1, 0x4, 0x90, 0x5, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xff6b}, {0xd, 0x24, 0xf, 0x1, 0xf, 0x4, 0x2, 0xab}, [@obex={0x5, 0x24, 0x15, 0xd5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x1f, 0x0, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xc, 0xd, 0xcf}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x6, 0x0, 0x7, 0xff, 0x3}, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r2 = socket$netlink(0x10, 0x3, 0x9) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x14, 0x13, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}}, 0x28}, 0x1, 0x0, 0x0, 0x2404c005}, 0x20004010) close_range(r1, 0xffffffffffffffff, 0x0) 2.57104628s ago: executing program 0 (id=473): r0 = open(0x0, 0x48141, 0x21) fcntl$getflags(r0, 0x401) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xfffd, 0x2}, 0x6) recvmmsg(r1, &(0x7f0000007100)=[{{0x0, 0x0, &(0x7f00000009c0), 0x0, &(0x7f0000006b40)=""/137, 0x89}, 0x42}], 0x1, 0x20, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) finit_module(r3, 0x0, 0x1) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2.195027857s ago: executing program 4 (id=479): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='oom_adj\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x1c, 0x18, 0x209, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5, 0x0, 0x0, @uid}]}, 0x1c}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000060000402505a1a440000102030109025c0002010000000901000100020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010120ee0e"], 0x0) listen(r1, 0xfffff800) 982.882651ms ago: executing program 2 (id=492): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) unshare(0x44040200) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000280)={'filter\x00', 0x0, [0x664, 0x0, 0x7ff, 0x8, 0x1]}, &(0x7f00000001c0)=0x54) fadvise64(r1, 0x3, 0x0, 0x4) nanosleep(0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) syz_usb_connect$uac1(0x1, 0x84, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x2, 0x90, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x2}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x305, 0x3, 0x2, 0x8}, @selector_unit={0xa, 0x24, 0x5, 0x5, 0x3, "e2c215aff2"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x1, 0x4, 0x3, {0x7, 0x25, 0x1, 0x3, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x9, 0x1, 0xf1, {0x7, 0x25, 0x1, 0x80, 0x2, 0x7}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x6, 0x7, 0x1, 0x20, 0xd}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x457}}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x4c, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x6c1, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r3, 0x3309) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) (async) unshare(0x44040200) (async) socket$igmp6(0xa, 0x3, 0x2) (async) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000280)={'filter\x00', 0x0, [0x664, 0x0, 0x7ff, 0x8, 0x1]}, &(0x7f00000001c0)=0x54) (async) fadvise64(r1, 0x3, 0x0, 0x4) (async) nanosleep(0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) (async) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) (async) syz_usb_connect$uac1(0x1, 0x84, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x2, 0x90, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x2}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x305, 0x3, 0x2, 0x8}, @selector_unit={0xa, 0x24, 0x5, 0x5, 0x3, "e2c215aff2"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x1, 0x4, 0x3, {0x7, 0x25, 0x1, 0x3, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x9, 0x1, 0xf1, {0x7, 0x25, 0x1, 0x80, 0x2, 0x7}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x6, 0x7, 0x1, 0x20, 0xd}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x457}}]}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x4c, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x6c1, 0x0) (async) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r3, 0x3309) (async) 982.661821ms ago: executing program 2 (id=493): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030f000000000700000000000005000900e000000001d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac5500000000030006000000000002000000ac14141a000000000000000002000100000000000000020d0000e8ff030005000000000002"], 0x78}, 0x1, 0x7}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000100)={0x1}) 950.498131ms ago: executing program 2 (id=494): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket(0x9, 0x800, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0']) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) r5 = userfaultfd(0x80001) r6 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x72c}) r8 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x840) ioctl$BLKRRPART(r8, 0x125f, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) dup3(r2, r5, 0x80000) r9 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r9, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x3}) r10 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f0000000000)={r10}) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f0000000100)={r10, 0xfffffff9, 0x1, r10}) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)={0x40, 0x21, 0x20, {0x20, 0xd, "5071a17949e4de600de55bbf876485b1d3b3da4c092ba6de17bf2166e718"}}, &(0x7f0000000200)=ANY=[@ANYBLOB="00036b0000006b03a413c7b38ee8e41da9d1f9f83c86313b94aa6ff1edcec8ede21a788655298f30f43fde34862b1e82a09674369290f251f7a152d592f5bdbbaf580d2462369743ffa1735d3ee382cba86ba9f479537705a7ac85b3b144b6dc90213cff326079822ecdc0e7290b9e7895"], &(0x7f0000000280)={0x0, 0xf, 0x16, {0x5, 0xf, 0x16, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x7, 0x1, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x7, 0x3, 0x2}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x1, 0x0, 0xfe, "4ee0a3e4", "e8056be6"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x1, 0xdb, 0x3, 0x1, 0x6, 0x6}}}, &(0x7f0000000800)={0x84, &(0x7f00000008c0)=ANY=[@ANYBLOB="00143e0000005ab5effd35597f257ccd6d3ad25f084f189d9160e9afeafa6f18cd5a3855fe771fa22ca37be9440bbcb906cab14659d39d533ccb41e0974cb97a03fc63f59b7e89d737825cdd4a3b5b09b9f2c1302f0e014adfe01fab57f6e85b5d3683b2d80be52f4cdfb1501b121002eb65713d8f8abe33eb4e1778606488b9ba403a9fdba31522568e4116e6b4cb0d012397354af0b801a2bec03757"], &(0x7f0000000400)={0x0, 0xa, 0x1, 0x4a}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x24}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x400, 0x4}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0xe}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "2103"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000640)={0x40, 0x13, 0x6, @random='eFhLNh'}, &(0x7f0000000680)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "608d"}, &(0x7f0000000700)={0x40, 0x1a, 0x2}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x20}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x42}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x5}}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000b6e000/0x8000)=nil, 0x8000, 0x0, 0x0, 0x0, &(0x7f0000000980)=""/214, 0xd6, 0x1, &(0x7f0000000380)=""/2, 0x2}, &(0x7f0000000a80)=0x40) 764.929215ms ago: executing program 3 (id=496): inotify_init1(0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) syz_clone(0xa004000, &(0x7f0000000000)="fe6643f9434ca6ae6f538fc541e1f489886125d51ad109c66e2cb7be223919e0af44b59781e687ddf8421cf9313f0b2365cfdc41907cb21596641a30358bf621926235706e724468b3892ea1dde3de10da0ad9b918d1336ccac4daa896dd35b4a4c71fef98d80fdefa0bb093", 0x6c, &(0x7f0000000080), &(0x7f0000000140), &(0x7f00000001c0)="7163ad84036faf856b267248120d0c2c7f1d0a954271bf5ac275b2a9a6be69b4f70ab54e73f5243a4ca0cd11e4a04e0e22eb0c4a067b12a39c986c27275efa27937afee987c57a873b81617220bbb3cd89e7bddf48903f6c") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) (async) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000b80)='./file0/file0\x00', 0x100) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x221) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) (async) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 763.884665ms ago: executing program 3 (id=497): r0 = socket$key(0xf, 0x3, 0x2) r1 = openat(0xffffffffffffffff, 0x0, 0x408880, 0x40) syz_genetlink_get_family_id$nl80211(0x0, r1) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000400)={&(0x7f0000000280)=[0x0, 0x0], 0x2, 0x6}) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r3, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000180)='./file1\x00', 0x4) renameat2(r2, &(0x7f00000001c0)='./file1\x00', r3, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x4, [@sadb_address={0x3, 0x6, 0x33, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}]}, 0x60}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet(r5, &(0x7f0000000a40)={0x2, 0x4e24, @local}, 0x10) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x20) fstat(r4, &(0x7f0000000700)) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x40800, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r7 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x4) fcntl$addseals(r7, 0x409, 0x7) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RLINK(r8, &(0x7f00000005c0)={0x7, 0x47, 0x1}, 0x7) ftruncate(r7, 0x2) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000500)=""/85) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0xffffffffffffffc0, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xe}, @flat=@binder={0x73622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x52, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df52fc"}) fgetxattr(r9, &(0x7f0000000100)=@known='trusted.overlay.origin\x00', &(0x7f0000000380)=""/74, 0x4a) 763.631245ms ago: executing program 3 (id=498): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x14) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) write$uinput_user_dev(r3, &(0x7f0000000900)={'syz1\x00', {0x9, 0x0, 0x6}, 0x37b4, [0xfeff, 0x4, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x100, 0x1, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xbffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0xffffffff, 0x0, 0xffff, 0x0, 0x20, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x6, 0x0, 0x0, 0x20004, 0x8, 0x0, 0x105], [0x10, 0xffffffff, 0x7, 0x0, 0xffffffff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0xbb, 0x1, 0xfffffffc, 0x5, 0x800, 0x0, 0xfffffffc, 0x0, 0x100, 0x0, 0x3, 0xec6a, 0x5, 0x40000000, 0xffffffff, 0xfffffffc, 0x7fffffff, 0xfffffffd, 0x7fffffff, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x18d, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0xfffffffc, 0x100000, 0x6, 0x0, 0x6, 0x4000000, 0x80, 0x0, 0x4, 0x0, 0x7, 0x800000, 0x7], [0x10000, 0xab, 0x0, 0x0, 0xffffffff, 0x1, 0xa000000, 0x0, 0x9, 0xffff7ffd, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x520, 0xc, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x2af, 0x0, 0x9, 0x0, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x6, 0x400, 0x0, 0x0, 0x0, 0x82ce, 0x0, 0x3, 0x0, 0x0, 0xff, 0x4000005, 0x0, 0x4, 0xfffffffe, 0x400000, 0x0, 0x6, 0x100, 0x0, 0x0, 0xb], [0x0, 0x0, 0x0, 0x6, 0x0, 0x401, 0x0, 0x211, 0x4, 0x0, 0x100, 0x3, 0x1, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x5, 0x7fff, 0x0, 0xd, 0x800000, 0x0, 0x7, 0x0, 0x0, 0x4, 0x8000000, 0x0, 0x9, 0x3, 0x0, 0x0, 0x6, 0x9, 0x4, 0x4, 0x3, 0x0, 0x0, 0x1, 0xffffffff, 0x100, 0x4, 0x6, 0x3, 0xfffffffd, 0x53591b27, 0x3fffffd, 0x0, 0x0, 0x5, 0x400, 0x7, 0x9, 0x0, 0x0, 0x80000000, 0x1000000, 0x0, 0x5]}, 0x45c) close_range(r0, 0xffffffffffffffff, 0x0) 494.69525ms ago: executing program 0 (id=499): r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000080)={0x3, 'ip6tnl0\x00', {0x6}, 0x7ff}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000200)='.pending_reads\x00', 0xc000, 0x111) read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r4, &(0x7f0000002280)={0x18, 0x0, r5, {0x800}}, 0x18) r8 = openat$incfs(r4, &(0x7f00000022c0)='.pending_reads\x00', 0x121400, 0x0) write$FUSE_BMAP(r8, &(0x7f0000002300)={0x18, 0x0, r5, {0x40}}, 0x18) r9 = eventfd2(0x800, 0x0) io_submit(0x0, 0x2, &(0x7f0000002500)=[&(0x7f00000023c0)={0x0, 0x0, 0x0, 0x5, 0x7, r8, &(0x7f0000002340)="bd78ca5d4b4368c58276e94cd41917afa7d2f9839977905f2925d86fe1413b3aa6bf722ad96820b01cbba791084ae1248397bb3331a363a3d63895346846a9feb7ba40dc6d66d4fe92704d866cc0af3293f4a00f662c8cd5bf2d57a82d9381b627", 0x61, 0x9, 0x0, 0x1, r9}, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x5, r8, &(0x7f0000002400)="f5ef937e9ba63caec53e44ad928dcff6fe69e679d19c00b06c31ef82757ca888c7748faab1a1997fab00543f48dd680b8d480b2fdf6b79f193f5b1c8274336dbdcc121d558246439234bb3db2aef2c0adae29951df8bbd986d39df9eb12e978d16d6e071331d7cfed601671fcd60624bcfcb393b721fa3bb77f99c100dc29512b85cfbe287f26aaa309a3c29da", 0x8d, 0x1b1, 0x0, 0x1, r4}]) fcntl$setown(r0, 0x8, r7) fdatasync(r9) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r10, &(0x7f0000002640)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002600)={&(0x7f0000002580)=@newtfilter={0x74, 0x2c, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x1, 0xf}, {0x7, 0x5}, {0xfff2, 0xc}}, [@f_rsvp={{0x9}, {0x44, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x8, 0x5, 0xe1}, {0x7, 0x8, 0x5}, 0x73, 0x9}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x5, 0x6, 0x71}, {0xad940, 0x10001, 0x4}, 0x84, 0x7b, 0xff}}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r11 = socket$inet_udp(0x2, 0x2, 0x0) r12 = accept4(r11, &(0x7f0000002680)=@ethernet={0x0, @multicast}, &(0x7f0000002700)=0x80, 0x800) ioctl$sock_inet6_SIOCSIFDSTADDR(r12, 0x8918, &(0x7f0000002740)={@remote, 0x11, r1}) write$FUSE_WRITE(r8, &(0x7f0000002780)={0x18, 0x0, r5, {0x4}}, 0x18) io_setup(0x6, &(0x7f00000027c0)=0x0) io_cancel(r13, &(0x7f0000002880)={0x0, 0x0, 0x0, 0x1, 0x4, r12, &(0x7f0000002800)="e6a8ff85e8cce8dd51fae2eeace86cbe6e1387a9e224810cabbc51d5027a0aade2f3bfcf30d566db76670ff9be1fdefb2983ffe6d7a0543efc120afb421eb2e0aa06f2ac20e5bf351eaa2d04d3f31177cea2f0a92aca438bf732da98", 0x5c, 0x7fff, 0x0, 0x3, r9}, &(0x7f00000028c0)) io_destroy(r13) ioctl$F2FS_IOC_COMPRESS_FILE(r8, 0xf518, 0x0) r14 = inotify_init() r15 = dup2(r14, r4) io_cancel(r13, &(0x7f0000002980)={0x0, 0x0, 0x0, 0x0, 0x4, r4, &(0x7f0000002900)="d39797d53f0a2224d245f1ee2de0f1f54e5e39034146e2bba72dde222c00f4e6443b7bb299695aee8eb96cce10b2873b4c852af1e15af3e9f86e91a665c833519a6311eb29c4470f07f8ae4613ba546a", 0x50, 0x2}, &(0x7f00000029c0)) sendmmsg$inet(r8, &(0x7f0000004000)=[{{&(0x7f0000002a00)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000002b00)=[{0xffffffffffffffff}, {&(0x7f0000002a40)="f7a7cf5681a9804e4ea64c2c29fa1c9cfdb15f1d299052c82c5d56c7bf29d68b9807e9bb9ef96812bb78749109b7ac9cd490b37fb696f96e841cf029796a1f843d2ece9bc3b87aa241a19607cd1eec0635e46457461c69977f758722034e58b9b78a30e2d631c6c49843ed7b2ea8c9aeb58929cf8ae14fd23ed4554b26f85c32769a72ec018c4dadb9dc0963a78cd10cd6bf4d361c6d60ed54874156ddd7ffd47a26c2", 0xa3}], 0x2, &(0x7f0000002b40)=[@ip_retopts={{0x24, 0x0, 0x7, {[@noop, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0xb0, 0x3, 0x0, [{@multicast1, 0x9318}]}]}}}, @ip_retopts={{0x34, 0x0, 0x7, {[@rr={0x7, 0x17, 0xd9, [@dev={0xac, 0x14, 0x14, 0x3f}, @remote, @broadcast, @private=0xa010101, @rand_addr=0x64010101]}, @timestamp={0x44, 0xc, 0x39, 0x0, 0x0, [0x2d2b, 0x4]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x78}}, {{&(0x7f0000002bc0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000002c40)=[{&(0x7f0000002c00)="ca7ef1712e", 0x5}], 0x1}}, {{&(0x7f0000002c80)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000003e80)=[{&(0x7f0000002cc0)="a70fcd836fd327698d46db8360a09c562f8d2f4af4fc6d7c9753df1e78c68efc0699747b2fad4d08daf14405f07a78c382364a37270ab816beddf4ab61ccc80e497ff3c81dbbc7e51369c0e7f6", 0x4d}, {&(0x7f0000002d40)="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", 0x1000}, {&(0x7f0000003d40)="bac0f08f1bef750bf9cee59e743ebd3e77795cfe9e2674098fbacd9d8bfa3ca5bc21a1309cdd7f730269ceea61c580c23da4064befd9c04bd546e13334ed4779c430969865ec2c06d37bc3632c15d145b1cbaf8665d7b98c15", 0x59}, {&(0x7f0000003dc0)="e32f3a52a8080a6f441a9a4731415a4bc45efb5f34339f6a18ad5b265bee7236d6ddb54b42315a95b8d0dcc259af3fee2332d6bd6a3c44a9fd9d5a529ebd3a8547fd008d4aa6302ac6f3731bb4e8e104cfbd5286c2273940a88be5f59883304df7b2dcc5ea3214d28825a1142b8d98eac37075834764e9dce07588a9aa41b584e50e595e567c6ba6a9acc09fb8259b1c3c5fd3", 0x93}], 0x4, &(0x7f0000003ec0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x59dd23ec}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast1, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_retopts={{0x84, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x5f, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@rand_addr=0x64010102, 0x1}]}, @end, @lsrr={0x83, 0x17, 0x64, [@private=0xa010102, @loopback, @remote, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x1c, 0x38, 0x3, 0x9, [{@empty, 0x8}, {@empty, 0xa6fe}, {@loopback, 0x9}]}, @noop, @noop, @timestamp={0x44, 0x28, 0xb, 0x0, 0x9, [0x1, 0x7, 0x10, 0x7, 0xffffffff, 0x200, 0x200, 0x1, 0x29]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @broadcast, @multicast2}}}], 0x128}}], 0x3, 0x0) copy_file_range(r15, &(0x7f00000040c0)=0x25, r4, &(0x7f0000004100)=0x5, 0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000004180)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000004280)=0xe8) read$FUSE(r15, &(0x7f00000042c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) fsetxattr$system_posix_acl(r8, &(0x7f0000004140)='system.posix_acl_access\x00', &(0x7f0000006300)={{}, {0x1, 0x3}, [{0x2, 0x4, r3}, {0x2, 0x3, r3}, {0x2, 0x0, r3}, {0x2, 0x2, r16}, {0x2, 0x3, r17}], {}, [{0x8, 0x2, r6}, {0x8, 0x4, r6}, {0x8, 0x2, r6}, {0x8, 0x1, r6}, {0x8, 0x5, r6}, {0x8, 0x3, r6}], {0x10, 0x2}, {0x20, 0x2}}, 0x7c, 0x2) 407.263912ms ago: executing program 0 (id=500): mount(&(0x7f0000000000)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='cpuset\x00', 0x108020, 0x0) 352.963693ms ago: executing program 0 (id=501): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x40000071, 0x0, 0xffffffffffffff00}]}) r5 = syz_socket_connect_nvme_tcp() r6 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000000)={r5, r6, 0x32e6, 0xdb, &(0x7f0000000280)="13b56d29e6f7b5471c0532126b0d7224288e5f34a5e8898c5e3f797bb3aa816827de381fb6b0fa736e9d21249db144d41f3905ce2989536c115110cfa44bfa3f5adb2d1081fdd35a28dec6433a2eadef589c810c940a3fe7559b1480ea87a56706b947da8681bd0e95eec8e05347e7e3a871ee6c8a50c69929ab82eb54a297de4d24ac8f24d6447e514affdc9527124703c31e7a52dbdf0e5ba0f613702c908a0273a5806fa50769e9a8581919b43db0ca3553ec940d7620fe4c21ec9d2540bc3639dfc1e2a1dd1fec527a4e70ed780b2702f22a07cb4cba6461f9", 0x7, 0xf, 0x400, 0x4, 0x7, 0x3, 0x6, 'syz1\x00'}) 329.919704ms ago: executing program 2 (id=502): recvmsg$inet_nvme(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000000)=@rc, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000100)=""/133, 0x85}, {&(0x7f00000001c0)=""/182, 0xb6}, {&(0x7f0000000280)=""/171, 0xab}, {&(0x7f0000000080)=""/51, 0x33}, {&(0x7f0000000340)}, {&(0x7f0000000480)=""/240, 0xf0}, {&(0x7f0000000380)=""/157, 0x9d}, {&(0x7f00000005c0)=""/181, 0xb5}, {&(0x7f0000000680)=""/168, 0xa8}, {&(0x7f0000000740)=""/67, 0x43}], 0xa, &(0x7f0000000880)=""/246, 0xf6}, 0x2) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x3a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r2, &(0x7f0000000240)={'syz0\x00', {0x508, 0x7, 0x87, 0x1}, 0x47, [0x5f11bec3, 0x3, 0x5, 0x40, 0x0, 0x3, 0x0, 0x7d, 0x80013, 0x5, 0x0, 0x6, 0x0, 0x0, 0x4000000, 0x2, 0x1a4, 0xfffff605, 0x3, 0x0, 0x4, 0x7ff, 0xe2b, 0x7, 0x681c1eb5, 0x11e, 0x0, 0x2, 0x0, 0xe9, 0x0, 0xffff, 0xfffffffd, 0x4, 0x1, 0x3, 0x0, 0x1, 0x5de82a4e, 0x0, 0x0, 0x9, 0x4, 0xfffffffe, 0x1, 0x0, 0x8000, 0x7, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff7, 0x0, 0xf685, 0x0, 0x1ab9, 0x6, 0x2, 0x0, 0x9, 0x1c15d73a, 0x2], [0x0, 0x0, 0x0, 0x5, 0x4, 0x1, 0x8, 0x5, 0x3, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x61c5fb46, 0x10000, 0x0, 0x35, 0x10001, 0x75, 0x0, 0x4, 0x0, 0xd, 0x80000000, 0x0, 0xfffff303, 0x9, 0x0, 0x9, 0x2, 0xff, 0x2, 0xa, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x9, 0x441238c7, 0x0, 0x3, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x20, 0xc50, 0x3, 0x9f5, 0x0, 0xa02, 0x1c75, 0xf51, 0xdb, 0x40, 0x0, 0x21, 0x24000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0xfffffffd, 0xc, 0x200000, 0x200, 0xcc0, 0x3fd, 0x6, 0x6, 0x0, 0x0, 0xffffff7f, 0x80, 0x921, 0x2f, 0x0, 0x0, 0xfffffffd, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x4, 0x0, 0x6574, 0x7, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0x0, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x3ff, 0x8, 0x2, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0x4ad, 0x8, 0x0, 0x80000001, 0x3, 0x0, 0x400, 0x101, 0x0, 0x1, 0x0, 0x40, 0x8000010, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x10800, 0x5, 0xd, 0x0, 0x40000000, 0x0, 0x4, 0x6, 0x4, 0x0, 0xfff, 0xb2, 0xa, 0xb]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r2, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x6e20, 0x101, @mcast1, 0xa3c}, {0xa, 0xfffe, 0xbffffffd, @mcast2, 0x4}, 0xffffffffffffffff, {[0x4, 0x0, 0xfffffffb, 0xfffffef9, 0x0, 0x0, 0xfffffff7]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000009c0)={{0xa, 0x4e21, 0x5, @private1, 0x80}, {0xa, 0x4e20, 0x7fffffff, @empty, 0xd4b0}, 0x1, {[0x631, 0x400, 0x7fff, 0xb1d1, 0x800, 0x10001, 0x5, 0x7]}}, 0x5c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000580)=[@acquire_done], 0x0, 0x0, 0x0}) 316.870314ms ago: executing program 2 (id=503): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x1263b000) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write(r0, &(0x7f0000000400)="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", 0x1f000) 246.967426ms ago: executing program 0 (id=504): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x200, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)=0x5) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) timer_create(0xfffffffd, 0x0, &(0x7f0000000000)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt(r4, 0x0, 0x2, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) getgroups(0x2, &(0x7f0000000140)=[0xee00, 0xee00]) chown(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, r6) timer_settime(r3, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(r3, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1001, 0x2}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newsa={0x13c, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in6=@private1, 0x40000040, 0x32}, @in=@private=0xa010104, {0x7, 0x7, 0x3, 0x40000000000004, 0xffffffffffffffff, 0xffffffffffffffff, 0x7f}, {0x0, 0x8, 0xcc, 0x8000}, {0xf6}, 0x0, 0x0, 0x2, 0x1, 0xfe}, [@algo_aead={0x4c, 0x12, {{'aegis128-generic\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x804) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xdc2, 0x0) ioctl$TUNSETCARRIER(r8, 0x400454e2, &(0x7f0000000100)=0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000002300090028bd7000ffd3df2501000000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r10, 0x29, 0x3d, 0x0, &(0x7f00000000c0)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x6c, r12, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x565}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x16, 0xa, 'generic-gcm-aesni\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9785}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40194}, 0x40080) 230.967535ms ago: executing program 2 (id=505): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) 72.859849ms ago: executing program 3 (id=506): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) (async) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (rerun: 32) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x8}, 'syz1\x00', 0x46}) ioctl$UI_DEV_CREATE(r1, 0x5501) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 2.58893ms ago: executing program 0 (id=507): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) (async, rerun: 32) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) (async, rerun: 64) r3 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) (async) setsockopt$packet_int(r3, 0x107, 0x16, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 530.38µs ago: executing program 3 (id=508): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x14) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x10201, 0x4, 0xeefc8004, 0x1000, &(0x7f0000fff000/0x1000)=nil}) (async) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r0, 0x4068aea3, &(0x7f0000000040)={0xa8, 0x0, 0x1}) (async) r1 = openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000900)={0x208000, 0x0, 0xb}, 0x18) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000940)={0x100000, 0x0, [0x194, 0x8, 0x2, 0x5, 0x3, 0x7fff, 0x0, 0x2c]}) ptrace$ARCH_SHSTK_STATUS(0x1e, 0xffffffffffffffff, &(0x7f00000009c0), 0x5005) (async) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000a00)={0x2f, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x1, 'dh\x00', 0x20, 0x9, 0x64}, 0x2c) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000a40)='illinois\x00', 0x9) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), r1) (async) getsockname$packet(r1, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000b40)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000c40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x64, r3, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40880}, 0x20000800) (async) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000c80)={0x401, 0x0, 0x0, 0x0, 0x7fffffff}, 0x14) (async) r5 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) (async) read(r1, &(0x7f0000000cc0)=""/200, 0xc8) (async) ioctl$FIOCLEX(r0, 0x5451) (async) pipe2$9p(&(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r7, &(0x7f0000000e00)={0x7, 0x4d, 0x1}, 0x7) (async) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000e40)) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000ec0), 0x44200, 0x0) ioctl$TUNSETPERSIST(r8, 0x400454cb, 0x1) (async) r9 = openat$cgroup_devices(r1, &(0x7f0000001140)='devices.deny\x00', 0x2, 0x0) read$FUSE(r5, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) fstat(r6, &(0x7f00000031c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r12 = inotify_init() (async) newfstatat(0xffffffffffffff9c, &(0x7f0000003240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003a80)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) (async) r14 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x40) sendmsg$unix(r5, &(0x7f0000003c80)={&(0x7f0000000f00)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001100)=[{&(0x7f0000000f80)="2c4cdbb39689b083925879b6283a7711364badeedd148982fede48205218a382869f39a04aaac68999db31b9d9215edd6c545b11f986b6882f9e2f25462b2163e7a4549598fe7bc823ed1b055972771e5031f7c79ff76e36e34d350c8dc53da6e856134a2b5d962a869e20cd87564fb24026920428bb066f1d06e0df3b1ab27ed9dda6061b9d701f8cb60dd2583cf9b0", 0x90}, {&(0x7f0000001040)="1c31b69bf69db804d9454590d2d3eb715170d41d73ee6b2f4d393d887b8fb08d790162e27ef4ac26cd3e04b67a6a88adbe6c4961166ba4246aaf414546b52c81f9e305387bd8b59974438a0e0388", 0x4e}, {&(0x7f00000010c0)}], 0x3, &(0x7f0000003b40)=[@rights={{0x24, 0x1, 0x1, [r1, r8, r9, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xffffffffffffffff, r11}}}, @rights={{0x34, 0x1, 0x1, [r7, r2, r12, r1, r6, r5, r8, r7, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r13, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [r0, r14, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [r6, r7, r0, r1, 0xffffffffffffffff, r1, r1, r7]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}], 0x108, 0x24000010}, 0x40000) 0s ago: executing program 3 (id=509): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x2, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x3c}, {}, {0x0, 0x5}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010102, 0x0, 0x33}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='configfs\x00', 0x0, 0x0) creat(&(0x7f00000014c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r4, 0x28, 0x400, 0xfffffffffffffffc, &(0x7f0000000000)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r5, 0xc008ae88, &(0x7f00000001c0)={0x7, 0x0, [{0xa3c, 0x0, 0x10001}, {0xab8, 0x0, 0x1c}, {0xb24, 0x0, 0xca}, {0xa63, 0x0, 0xb8}, {0x98d, 0x0, 0x8}, {0xc0000081, 0x0, 0xffffffff}, {0x32b, 0x0, 0x78}]}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$RTC_RD_TIME(r6, 0x80247009, &(0x7f0000000100)) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r8 = fcntl$dupfd(r7, 0x0, r7) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x891f, &(0x7f00000003c0)={'ip6tnl0\x00', 0x0}) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 0] usb 1-1: config 220 interface 76 has no altsetting 0 [ 25.644864][ T330] usb 1-1: config 220 interface 1 has no altsetting 0 [ 25.648893][ T486] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 25.653107][ T330] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 25.670064][ T330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.678399][ T330] usb 1-1: Product: syz [ 25.682605][ T330] usb 1-1: Manufacturer: syz [ 25.687296][ T330] usb 1-1: SerialNumber: syz [ 25.774689][ T36] kauditd_printk_skb: 120 callbacks suppressed [ 25.774704][ T36] audit: type=1400 audit(1757408650.100:194): avc: denied { relabelfrom } for pid=472 comm="syz.1.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 25.786488][ T473] syzkaller0: entered promiscuous mode [ 25.800822][ T36] audit: type=1400 audit(1757408650.100:195): avc: denied { relabelto } for pid=472 comm="syz.1.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 25.806498][ T473] syzkaller0: entered allmulticast mode [ 25.833576][ T31] usb 2-1: USB disconnect, device number 3 [ 26.134590][ T330] usb 1-1: selecting invalid altsetting 0 [ 26.140738][ T330] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 26.147251][ T330] usb 1-1: No valid video chain found. [ 26.155321][ T330] usb 1-1: USB disconnect, device number 2 [ 26.390442][ T491] Zero length message leads to an empty skb [ 26.399844][ T36] audit: type=1400 audit(1757408650.730:196): avc: denied { map } for pid=490 comm="syz.2.46" path="socket:[4641]" dev="sockfs" ino=4641 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.430729][ T497] binder: Bad value for 'stats' [ 26.438461][ T498] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 26.441453][ T36] audit: type=1400 audit(1757408650.730:197): avc: denied { accept } for pid=490 comm="syz.2.46" path="socket:[4641]" dev="sockfs" ino=4641 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.455511][ T495] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 26.475654][ T36] audit: type=1400 audit(1757408650.800:198): avc: denied { getopt } for pid=496 comm="syz.2.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.476362][ T495] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:31 [ 26.516477][ T36] audit: type=1400 audit(1757408650.840:199): avc: denied { listen } for pid=502 comm="syz.2.49" path=003566393363 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 26.560974][ T329] usb 4-1: USB disconnect, device number 2 [ 26.612277][ T512] rust_binder: 507 RLIMIT_NICE not set [ 26.617007][ T31] rust_binder: 505: removing orphan mapping 0:4248 [ 26.663904][ T36] audit: type=1400 audit(1757408650.990:200): avc: denied { ioctl } for pid=516 comm="syz.0.54" path="socket:[4991]" dev="sockfs" ino=4991 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.709969][ T36] audit: type=1400 audit(1757408651.000:201): avc: denied { read } for pid=93 comm="acpid" name="mouse7" dev="devtmpfs" ino=448 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 26.733224][ T511] veth0_to_team: entered promiscuous mode [ 26.742368][ T511] veth0_to_team: entered allmulticast mode [ 26.745756][ T36] audit: type=1400 audit(1757408651.000:202): avc: denied { open } for pid=93 comm="acpid" path="/dev/input/mouse7" dev="devtmpfs" ino=448 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 26.759687][ T508] rust_binder: 75: no such ref 3 [ 26.791045][ T36] audit: type=1400 audit(1757408651.000:203): avc: denied { ioctl } for pid=93 comm="acpid" path="/dev/input/mouse7" dev="devtmpfs" ino=448 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 26.791472][ T511] rust_binder: 75: no such ref 3 [ 26.841449][ T330] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 26.853500][ T522] netlink: 'syz.3.53': attribute type 4 has an invalid length. [ 26.879265][ T522] netlink: 17 bytes leftover after parsing attributes in process `syz.3.53'. [ 26.930332][ T529] loop2: detected capacity change from 0 to 7 [ 26.952478][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 26.961709][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 26.971200][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 26.980468][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 26.989683][ T288] loop2: unable to read partition table [ 26.996102][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 27.005279][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 27.021409][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 27.030628][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 27.032791][ T529] loop2: unable to read partition table [ 27.051308][ T330] usb 2-1: Using ep0 maxpacket: 32 [ 27.051457][ T529] loop_reread_partitions: partition scan of loop2 (CjP=ý?}X %`ɬր{֐) failed (rc=-5) [ 27.062116][ T330] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 27.080584][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 27.089853][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 27.097986][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 27.101238][ T330] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 27.107204][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 27.129142][ T330] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 27.129192][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 27.147405][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 27.151217][ T330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 27.155943][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 27.174211][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 27.181207][ T330] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 27.194492][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 27.203817][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 27.238844][ T330] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 27.261231][ T330] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 27.270536][ T330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.300988][ T330] usb 2-1: config 0 descriptor?? [ 27.509656][ T510] rust_binder: Write failure EINVAL in pid:34 [ 27.519782][ T330] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 27.543870][ T330] usb 2-1: USB disconnect, device number 4 [ 27.551699][ T330] usblp0: removed [ 27.608476][ T548] fuse: Unknown parameter 'vK^Q/oߑIۭ?S{32D$|ERѱըwʏ$.!v<' [ 27.630632][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 27.961211][ T330] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 28.011239][ T543] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 28.111224][ T330] usb 2-1: Using ep0 maxpacket: 32 [ 28.117426][ T330] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 28.125842][ T330] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 28.134624][ T330] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 28.143672][ T330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 28.153560][ T330] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 28.163224][ T330] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 28.176364][ T330] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 28.185468][ T330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.194347][ T543] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 28.202685][ T330] usb 2-1: config 0 descriptor?? [ 28.207686][ T543] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 28.217797][ T543] usb 4-1: config 0 has no interface number 0 [ 28.224369][ T543] usb 4-1: config 0 interface 16 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 28.239893][ T543] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 28.249090][ T543] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.257113][ T543] usb 4-1: Product: syz [ 28.261309][ T543] usb 4-1: Manufacturer: syz [ 28.265923][ T543] usb 4-1: SerialNumber: syz [ 28.271061][ T543] usb 4-1: config 0 descriptor?? [ 28.276865][ T543] usb-storage 4-1:0.16: USB Mass Storage device detected [ 28.284782][ T543] usb-storage 4-1:0.16: Quirks match for vid 04e6 pid 000b: 4 [ 28.424592][ T510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.433215][ T510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.483740][ T330] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 28.496161][ T330] usb 2-1: USB disconnect, device number 5 [ 28.502730][ T330] usblp0: removed [ 29.191397][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 29.519930][ T583] capability: warning: `syz.1.71' uses 32-bit capabilities (legacy support in use) [ 29.671233][ T536] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 29.671243][ T53] Bluetooth: hci1: command 0x1003 tx timeout [ 30.134550][ T599] ======================================================= [ 30.134550][ T599] WARNING: The mand mount option has been deprecated and [ 30.134550][ T599] and is ignored by this kernel. Remove the mand [ 30.134550][ T599] option from the mount to silence this warning. [ 30.134550][ T599] ======================================================= [ 30.199930][ T607] PM: Enabling pm_trace changes system date and time during resume. [ 30.199930][ T607] PM: Correct system time has to be restored manually after resume. [ 30.216277][ T607] binder: Bad value for 'max' [ 30.225038][ T607] rust_binder: 607 RLIMIT_NICE not set [ 30.228040][ T352] rust_binder: 606: removing orphan mapping 0:1192 [ 30.441239][ T489] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 30.481252][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 30.536785][ T613] rust_binder: 86: no such ref 3 [ 30.543083][ T613] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 30.552121][ T613] rust_binder: Write failure EINVAL in pid:86 [ 30.591293][ T489] usb 2-1: Using ep0 maxpacket: 8 [ 30.610469][ T489] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 30.620063][ T489] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.628242][ T489] usb 2-1: Product: syz [ 30.632664][ T489] usb 2-1: Manufacturer: syz [ 30.637271][ T489] usb 2-1: SerialNumber: syz [ 30.641231][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 30.651552][ T31] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 30.659975][ T31] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 30.668645][ T31] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 30.677659][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 30.687349][ T31] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 30.697055][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 30.710040][ T31] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 30.719098][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.727756][ T31] usb 3-1: config 0 descriptor?? [ 30.846845][ T352] usb 4-1: USB disconnect, device number 3 [ 30.854585][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 30.854600][ T36] audit: type=1400 audit(1757408655.180:235): avc: denied { read } for pid=604 comm="syz.1.80" path="socket:[5394]" dev="sockfs" ino=5394 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.930151][ T620] random: crng reseeded on system resumption [ 30.930609][ T36] audit: type=1400 audit(1757408655.250:236): avc: denied { read append } for pid=619 comm="syz.3.86" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 30.939748][ T31] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 30.960639][ T36] audit: type=1400 audit(1757408655.250:237): avc: denied { ioctl open } for pid=619 comm="syz.3.86" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 30.987697][ T31] usb 3-1: USB disconnect, device number 2 [ 31.002108][ T31] usblp0: removed [ 31.007671][ T36] audit: type=1400 audit(1757408655.330:238): avc: denied { connect } for pid=619 comm="syz.3.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 31.024391][ T621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.036531][ T621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.169426][ T625] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 31.177708][ T625] rust_binder: Write failure EINVAL in pid:33 [ 31.178212][ T626] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 31.192663][ T626] rust_binder: Write failure EINVAL in pid:33 [ 31.229703][ T630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.90'. [ 31.230978][ T36] audit: type=1400 audit(1757408655.550:239): avc: denied { nlmsg_write } for pid=629 comm="syz.3.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 31.392461][ T634] rust_binder: 40: no such ref 1 [ 31.397550][ T634] rust_binder: 40: no such ref 2 [ 31.402896][ T634] rust_binder: Write failure EINVAL in pid:40 [ 31.404095][ T634] netlink: 104 bytes leftover after parsing attributes in process `syz.3.92'. [ 31.404110][ T36] audit: type=1400 audit(1757408655.730:240): avc: denied { nlmsg_read } for pid=633 comm="syz.3.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 31.439589][ T634] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:40 [ 31.440139][ T635] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.460003][ T639] binder: Unknown parameter '0x00000000000000000xffffffffffffffff0000000000000000000300000000000000000000003' [ 31.489402][ T36] audit: type=1400 audit(1757408655.810:241): avc: denied { setcurrent } for pid=640 comm="syz.3.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 31.492748][ T641] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 31.508667][ T36] audit: type=1400 audit(1757408655.810:242): avc: denied { create } for pid=640 comm="syz.3.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 31.536748][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 31.536947][ T36] audit: type=1400 audit(1757408655.810:243): avc: denied { write } for pid=640 comm="syz.3.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 31.563469][ T36] audit: type=1400 audit(1757408655.850:244): avc: denied { listen } for pid=640 comm="syz.3.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 31.601292][ T330] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 31.691256][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 31.699185][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 31.708506][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.716559][ T31] usb 1-1: Product: syz [ 31.720722][ T31] usb 1-1: Manufacturer: syz [ 31.725367][ T31] usb 1-1: SerialNumber: syz [ 31.731267][ T330] usb 3-1: device descriptor read/64, error -71 [ 31.938738][ T31] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 31.971240][ T330] usb 3-1: device descriptor read/64, error -71 [ 32.091191][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 32.211247][ T330] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 32.241201][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 32.247770][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 32.255470][ T9] usb 4-1: can't read configurations, error -61 [ 32.292789][ T31] usb 1-1: USB disconnect, device number 3 [ 32.299518][ T31] usblp0: removed [ 32.341267][ T330] usb 3-1: device descriptor read/64, error -71 [ 32.391379][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 32.551211][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 32.557752][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 32.565554][ T9] usb 4-1: can't read configurations, error -61 [ 32.572080][ T9] usb usb4-port1: attempt power cycle [ 32.581214][ T330] usb 3-1: device descriptor read/64, error -71 [ 32.691338][ T330] usb usb3-port1: attempt power cycle [ 32.852683][ T661] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:94 [ 32.911209][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 32.941573][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 32.948274][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 32.956280][ T9] usb 4-1: can't read configurations, error -61 [ 33.031234][ T330] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 33.052395][ T330] usb 3-1: device descriptor read/8, error -71 [ 33.091218][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 33.111657][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 33.118188][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 33.125995][ T9] usb 4-1: can't read configurations, error -61 [ 33.132536][ T9] usb usb4-port1: unable to enumerate USB device [ 33.182432][ T330] usb 3-1: device descriptor read/8, error -71 [ 33.203203][ T489] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 33.222433][ T489] usb 2-1: USB disconnect, device number 6 [ 33.233577][ T489] usblp0: removed [ 33.304436][ T670] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 33.368245][ T676] binder: Unknown parameter 'statsp' [ 33.495451][ T682] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 33.504270][ T682] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 33.512893][ T682] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 33.643576][ T689] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.643615][ T689] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:98 [ 33.656847][ T689] rust_binder: 98: no such ref 2 [ 33.670866][ T689] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:98 [ 33.704015][ T695] netlink: 24 bytes leftover after parsing attributes in process `syz.0.112'. [ 33.796541][ T698] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 33.811190][ T31] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 33.831874][ T702] tipc: Enabling of bearer rejected, media not registered [ 33.855328][ T693] netlink: 28 bytes leftover after parsing attributes in process `syz.2.111'. [ 33.982231][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.993506][ T31] usb 2-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x2C, changing to 0xC [ 34.005074][ T31] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0xC has an invalid bInterval 99, changing to 10 [ 34.016076][ T31] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0xC has invalid maxpacket 24941, setting to 1024 [ 34.028463][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 34.037683][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.045845][ T31] usb 2-1: Product: syz [ 34.050001][ T31] usb 2-1: Manufacturer: syz [ 34.054602][ T31] usb 2-1: SerialNumber: syz [ 34.408168][ T706] rust_binder: Error in use_page_slow: ESRCH [ 34.408185][ T706] rust_binder: use_range failure ESRCH [ 34.414217][ T706] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 34.419686][ T706] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 34.427703][ T706] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:109 [ 34.906474][ T712] netlink: 40 bytes leftover after parsing attributes in process `syz.3.116'. [ 35.064242][ T31] cdc_ncm 2-1:1.0: bind() failure [ 35.070184][ T31] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 35.078364][ T31] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 35.087978][ T31] usb 2-1: USB disconnect, device number 7 [ 35.241207][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 35.391233][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 35.398170][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.408361][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 35.417272][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 35.431865][ T489] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 35.440075][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 35.449637][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.457690][ T9] usb 4-1: Product: syz [ 35.461878][ T9] usb 4-1: Manufacturer: 斁쿢໳琙訟콗ך갤냢ᨊ椲䶱䊑컷攎蒲琐䅇ᤄᇏⲋ嬕䑷₊팘┯ꤼ䃺ꍤ㒕㥊矣뱡쭸⁠㝏象閹봞삑뛆栏ᰘ晽࡙棵蛊⑫蜮ᗷײᵳ繃巎嘻⍺뺌䀘헾⼩뵆⚏톙礤枤ꪁॎ롣濳骽㧇㹐 [ 35.487721][ T9] usb 4-1: SerialNumber: syz [ 35.591263][ T489] usb 1-1: Using ep0 maxpacket: 32 [ 35.604529][ T489] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 35.613106][ T489] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 35.621780][ T489] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 35.630864][ T489] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 35.640841][ T489] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 35.650954][ T489] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 35.664328][ T489] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 35.673525][ T489] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.682398][ T489] usb 1-1: config 0 descriptor?? [ 35.791382][ T724] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 35.889716][ T489] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 35.913344][ T9] usb 4-1: 0:2 : does not exist [ 35.920304][ T9] usb 4-1: USB disconnect, device number 8 [ 35.927440][ T489] usb 1-1: USB disconnect, device number 4 [ 35.937197][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.953387][ T489] usblp0: removed [ 36.401227][ T489] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 36.422018][ T731] overlayfs: overlapping lowerdir path [ 36.551193][ T489] usb 1-1: Using ep0 maxpacket: 32 [ 36.557442][ T489] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 36.566029][ T489] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 36.574669][ T489] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 36.583692][ T489] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 36.593357][ T489] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 36.603056][ T489] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 36.616039][ T489] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 36.625084][ T489] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.633748][ T489] usb 1-1: config 0 descriptor?? [ 36.649175][ T733] rust_binder: Error while translating object. [ 36.649210][ T733] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 36.655533][ T733] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:85 [ 36.684760][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 36.684778][ T36] audit: type=1400 audit(1757408661.010:261): avc: denied { wake_alarm } for pid=736 comm="syz.1.126" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 36.737704][ T740] overlay: ./file0 is not a directory [ 36.743786][ T739] /dev/rnullb0: Can't open blockdev [ 36.766534][ T36] audit: type=1400 audit(1757408661.090:262): avc: denied { name_bind } for pid=743 comm="syz.2.128" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 36.793199][ T36] audit: type=1400 audit(1757408661.090:263): avc: denied { node_bind } for pid=743 comm="syz.2.128" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 36.818076][ T36] audit: type=1400 audit(1757408661.090:264): avc: denied { name_bind } for pid=743 comm="syz.2.128" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 36.870433][ T750] rust_binder: Error while translating object. [ 36.870491][ T750] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 36.876797][ T750] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:124 [ 36.921086][ T36] audit: type=1400 audit(1757408661.240:265): avc: denied { remount } for pid=756 comm="syz.2.133" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 36.973767][ T761] support for the xor transformation has been removed. [ 37.014712][ T769] veth1: entered allmulticast mode [ 37.022771][ T770] veth1: left allmulticast mode [ 37.036364][ T773] rust_binder: 82: no such ref 3 [ 37.041702][ T773] rust_binder: Write failure EINVAL in pid:82 [ 37.043769][ T773] rust_binder: 82: no such ref 1 [ 37.044292][ T489] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 37.049860][ T773] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:82 [ 37.056469][ T489] usb 1-1: USB disconnect, device number 5 [ 37.084165][ T15] Bluetooth: hci0: Frame reassembly failed (-84) [ 37.093609][ T489] usblp0: removed [ 37.121217][ T330] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 37.221254][ T352] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 37.271245][ T330] usb 2-1: Using ep0 maxpacket: 8 [ 37.277433][ T330] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 37.285806][ T330] usb 2-1: config 0 has no interface number 0 [ 37.292003][ T330] usb 2-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 37.303765][ T330] usb 2-1: config 0 interface 200 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 37.314821][ T330] usb 2-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid maxpacket 1126, setting to 1024 [ 37.326063][ T330] usb 2-1: config 0 interface 200 has no altsetting 0 [ 37.334237][ T330] usb 2-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 37.343324][ T330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.351971][ T330] usb 2-1: Product: syz [ 37.356135][ T330] usb 2-1: Manufacturer: syz [ 37.360882][ T330] usb 2-1: SerialNumber: syz [ 37.366254][ T330] usb 2-1: config 0 descriptor?? [ 37.371799][ T755] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 37.381184][ T352] usb 3-1: Using ep0 maxpacket: 16 [ 37.387991][ T352] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.398548][ T352] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 37.407575][ T352] usb 3-1: config 1 has no interface number 1 [ 37.413709][ T352] usb 3-1: too many endpoints for config 1 interface 2 altsetting 2: 51, using maximum allowed: 30 [ 37.424425][ T352] usb 3-1: config 1 interface 2 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 51 [ 37.437518][ T352] usb 3-1: config 1 interface 2 has no altsetting 0 [ 37.445535][ T352] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 37.454621][ T352] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.462678][ T352] usb 3-1: Product: А [ 37.466755][ T352] usb 3-1: Manufacturer: ƨѣ㒔씾퓙냆㏱檝B [ 37.473116][ T352] usb 3-1: SerialNumber: ఋ [ 37.580873][ T755] rust_binder: Write failure EINVAL in pid:92 [ 37.583572][ T36] audit: type=1400 audit(1757408661.910:266): avc: denied { bind } for pid=779 comm="syz.0.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 37.583620][ T330] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.200/input/input6 [ 37.621589][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 37.622775][ T330] usb 2-1: USB disconnect, device number 8 [ 37.628739][ C0] usb 2-1: hanwang_irq - usb_submit_urb failed with result -19 [ 37.642557][ T36] audit: type=1400 audit(1757408661.950:267): avc: denied { read } for pid=93 comm="acpid" name="event3" dev="devtmpfs" ino=494 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.664962][ T36] audit: type=1400 audit(1757408661.950:268): avc: denied { open } for pid=93 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=494 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.692265][ T36] audit: type=1400 audit(1757408661.950:269): avc: denied { ioctl } for pid=93 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=494 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.717104][ T36] audit: type=1326 audit(1757408662.000:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=783 comm="syz.0.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37aeb8ebe9 code=0x7ffc0000 [ 37.723984][ T352] usb 3-1: USB disconnect, device number 7 [ 37.750689][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.913224][ T826] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.913254][ T826] rust_binder: Read failure Err(EFAULT) in pid:127 [ 38.921583][ T826] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.928087][ T826] rust_binder: Read failure Err(EFAULT) in pid:127 [ 38.936223][ T826] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.942762][ T826] rust_binder: Read failure Err(EFAULT) in pid:127 [ 38.950839][ T826] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.957388][ T826] rust_binder: Read failure Err(EFAULT) in pid:127 [ 38.965420][ T826] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.971953][ T826] rust_binder: Read failure Err(EFAULT) in pid:127 [ 38.979951][ T826] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.986465][ T826] rust_binder: Read failure Err(EFAULT) in pid:127 [ 38.994506][ T826] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 39.001004][ T826] rust_binder: Read failure Err(EFAULT) in pid:127 [ 39.009032][ T826] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 39.015661][ T826] rust_binder: Read failure Err(EFAULT) in pid:127 [ 39.023692][ T826] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 39.030183][ T826] rust_binder: Read failure Err(EFAULT) in pid:127 [ 39.038246][ T826] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 39.044850][ T826] rust_binder: Read failure Err(EFAULT) in pid:127 [ 39.052873][ T826] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 39.059372][ T826] rust_binder: Read failure Err(EFAULT) in pid:127 [ 39.067489][ T826] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 39.074003][ T826] rust_binder: Read failure Err(EFAULT) in pid:127 [ 39.082028][ T826] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 39.088544][ T826] rust_binder: Read failure Err(EFAULT) in pid:127 [ 39.096605][ T826] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 39.103123][ T826] rust_binder: Read failure Err(EFAULT) in pid:127 [ 39.111108][ T826] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 39.117672][ T826] rust_binder: Read failure Err(EFAULT) in pid:127 [ 39.121228][ T536] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 39.125704][ T826] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 39.132198][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 39.138399][ T826] rust_binder: Read failure Err(EFAULT) in pid:127 [ 39.155881][ T826] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 39.162668][ T826] rust_binder: Read failure Err(EFAULT) in pid:127 [ 39.171201][ T826] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 39.177845][ T826] rust_binder: Read failure Err(EFAULT) in pid:127 [ 39.187457][ T826] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 39.194534][ T826] rust_binder: Read failure Err(EFAULT) in pid:127 [ 39.202870][ T826] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 39.209426][ T826] rust_binder: Read failure Err(EFAULT) in pid:127 [ 39.217590][ T826] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 39.224118][ T826] rust_binder: Read failure Err(EFAULT) in pid:127 [ 39.232139][ T826] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 39.238632][ T826] rust_binder: Read failure Err(EFAULT) in pid:127 [ 39.246647][ T826] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 39.253245][ T826] rust_binder: Read failure Err(EFAULT) in pid:127 [ 39.261274][ T826] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 39.267784][ T826] rust_binder: Read failure Err(EFAULT) in pid:127 [ 39.275913][ T826] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 39.282439][ T826] rust_binder: Read failure Err(EFAULT) in pid:127 [ 39.291201][ T826] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 39.297886][ T826] rust_binder: Read failure Err(EFAULT) in pid:127 [ 39.305972][ T826] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 39.312614][ T826] rust_binder: Read failure Err(EFAULT) in pid:127 [ 39.320897][ T826] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 39.331329][ T826] rust_binder: Read failure Err(EFAULT) in pid:127 [ 39.339469][ T826] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 39.348851][ T826] rust_binder: Read failure Err(EFAULT) in pid:127 [ 39.359437][ T826] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 39.366542][ T826] rust_binder: Read failure Err(EFAULT) in pid:127 [ 39.374701][ T826] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 39.381255][ T826] rust_binder: Read failure Err(EFAULT) in pid:127 [ 39.382379][ T837] rust_binder: Write failure EFAULT in pid:168 [ 39.389255][ T826] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 39.389266][ T826] rust_binder: Read failure Err(EFAULT) in pid:127 [ 39.389287][ T826] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 39.419121][ T826] rust_binder: Read failure Err(EFAULT) in pid:127 [ 39.548347][ T844] netlink: 324 bytes leftover after parsing attributes in process `syz.0.163'. [ 39.567975][ T849] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 39.568003][ T849] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 39.577566][ T849] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:177 [ 39.891249][ T352] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 40.029406][ T857] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 40.038205][ T857] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 40.058450][ T862] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.067226][ T352] usb 3-1: unable to get BOS descriptor or descriptor too short [ 40.076586][ T352] usb 3-1: not running at top speed; connect to a high speed hub [ 40.085176][ T352] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 40.096902][ T352] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 40.107314][ T352] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 40.116492][ T352] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.124729][ T352] usb 3-1: Product: syz [ 40.128901][ T352] usb 3-1: Manufacturer: syz [ 40.133760][ T352] usb 3-1: SerialNumber: syz [ 40.156081][ T866] netlink: 'syz.0.171': attribute type 22 has an invalid length. [ 40.285118][ T874] usb usb8: usbfs: process 874 (syz.3.174) did not claim interface 0 before use [ 40.295156][ T874] syz.3.174: attempt to access beyond end of device [ 40.295156][ T874] loop3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 40.308584][ T874] EXT4-fs (loop3): unable to read superblock [ 40.322498][ T874] rust_binder: Write failure EFAULT in pid:96 [ 40.343249][ T352] usb 3-1: 0:2 : does not exist [ 40.373493][ T352] usb 3-1: USB disconnect, device number 8 [ 40.383792][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.441622][ T330] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 40.591208][ T330] usb 1-1: device descriptor read/64, error -71 [ 40.831188][ T330] usb 1-1: device descriptor read/64, error -71 [ 41.071200][ T330] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 41.178645][ T881] binder: Unknown parameter 'defcontext01777777777777777777777' [ 41.201243][ T330] usb 1-1: device descriptor read/64, error -71 [ 41.371259][ T887] devpts: called with bogus options [ 41.441215][ T330] usb 1-1: device descriptor read/64, error -71 [ 41.551299][ T330] usb usb1-port1: attempt power cycle [ 41.671230][ T31] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 41.790174][ T36] kauditd_printk_skb: 48 callbacks suppressed [ 41.790189][ T36] audit: type=1400 audit(1757408666.110:319): avc: denied { append } for pid=896 comm="syz.1.183" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 41.819482][ T36] audit: type=1326 audit(1757408666.110:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=896 comm="syz.1.183" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f67bc98ebe9 code=0x0 [ 41.841824][ T898] SELinux: security_context_str_to_sid () failed with errno=-22 [ 41.851225][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 41.864543][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.874940][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 41.876017][ T908] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 41.885485][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 41.899038][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.901783][ T907] syzkaller0: create flow: hash 3082873410 index 1 [ 41.907234][ T31] usb 4-1: Product: syz [ 41.917826][ T330] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 41.925529][ T31] usb 4-1: Manufacturer: syz [ 41.930196][ T908] syzkaller0: delete flow: hash 3082873410 index 1 [ 41.930642][ T31] usb 4-1: SerialNumber: syz [ 41.942370][ T330] usb 1-1: device descriptor read/8, error -71 [ 42.072236][ T330] usb 1-1: device descriptor read/8, error -71 [ 42.153966][ T31] usb 4-1: 0:2 : does not exist [ 42.170576][ T31] usb 4-1: USB disconnect, device number 9 [ 42.286467][ T36] audit: type=1400 audit(1757408666.610:321): avc: denied { getopt } for pid=916 comm="syz.1.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.286548][ T917] netlink: 24 bytes leftover after parsing attributes in process `syz.1.189'. [ 42.316057][ T330] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 42.342135][ T330] usb 1-1: device descriptor read/8, error -71 [ 42.472356][ T330] usb 1-1: device descriptor read/8, error -71 [ 42.501239][ T489] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 42.581274][ T330] usb usb1-port1: unable to enumerate USB device [ 42.652220][ T489] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 42.661317][ T31] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 42.666623][ T489] usb 3-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 42.685754][ T489] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.693797][ T489] usb 3-1: Product: syz [ 42.697962][ T489] usb 3-1: Manufacturer: syz [ 42.702645][ T489] usb 3-1: SerialNumber: syz [ 42.707752][ T489] usb 3-1: config 0 descriptor?? [ 42.811216][ T330] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 42.821337][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 42.827537][ T31] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 42.835753][ T31] usb 2-1: config 1 has no interface number 0 [ 42.841865][ T31] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 42.851794][ T31] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 42.861966][ T31] usb 2-1: config 1 interface 105 has no altsetting 0 [ 42.870121][ T31] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 42.879403][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.887504][ T31] usb 2-1: Product: syz [ 42.891806][ T31] usb 2-1: Manufacturer: syz [ 42.896417][ T31] usb 2-1: SerialNumber: syz [ 42.902029][ T922] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 42.909320][ T922] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 42.951250][ T330] usb 1-1: device descriptor read/64, error -71 [ 43.118235][ T36] audit: type=1400 audit(1757408667.440:322): avc: denied { create } for pid=912 comm="syz.2.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 43.119958][ T489] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 43.139400][ T36] audit: type=1400 audit(1757408667.440:323): avc: denied { write } for pid=912 comm="syz.2.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 43.149076][ T489] asix 3-1:0.0: probe with driver asix failed with error -71 [ 43.179842][ T489] usb 3-1: USB disconnect, device number 9 [ 43.191212][ T330] usb 1-1: device descriptor read/64, error -71 [ 43.349001][ T922] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 43.356256][ T922] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 43.385428][ T36] audit: type=1400 audit(1757408667.710:324): avc: denied { lock } for pid=932 comm="syz.0.194" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 43.416415][ T36] audit: type=1400 audit(1757408667.740:325): avc: denied { mount } for pid=937 comm="syz.0.195" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 43.417441][ T938] SELinux: security_context_str_to_sid () failed with errno=-22 [ 43.438907][ T36] audit: type=1400 audit(1757408667.740:326): avc: denied { mounton } for pid=937 comm="syz.0.195" path="/53/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 43.469159][ T36] audit: type=1400 audit(1757408667.740:327): avc: denied { remount } for pid=937 comm="syz.0.195" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 43.488944][ T36] audit: type=1400 audit(1757408667.780:328): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 43.492674][ T941] binder: Bad value for 'defcontext' [ 43.624925][ T31] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 43.635919][ T31] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71 [ 43.650649][ T31] usb 2-1: USB disconnect, device number 10 [ 43.702501][ T958] devpts: called with bogus options [ 43.728449][ T960] usb usb8: usbfs: process 960 (syz.0.202) did not claim interface 63 before use [ 43.738317][ T960] rust_binder: Write failure EFAULT in pid:172 [ 43.790156][ T965] veth0_vlan: entered allmulticast mode [ 43.921493][ T973] binder: Bad value for 'max' [ 43.926596][ T973] binder: Bad value for 'max' [ 43.931737][ T974] ip6gretap0: mtu less than device minimum [ 43.973761][ T981] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 43.973966][ T981] netlink: 'syz.0.209': attribute type 28 has an invalid length. [ 43.993931][ T981] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=981 comm=syz.0.209 [ 44.006294][ T981] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=981 comm=syz.0.209 [ 44.018857][ T981] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=981 comm=syz.0.209 [ 44.041114][ T984] rust_binder: Write failure EFAULT in pid:193 [ 44.257373][ T992] batadv_slave_1: entered promiscuous mode [ 44.270071][ T992] binder: Unknown parameter 'dirsync}7' [ 44.324182][ T991] batadv_slave_1: left promiscuous mode [ 44.371190][ T330] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 44.501201][ T330] usb 1-1: device descriptor read/64, error -71 [ 44.588782][ T998] rust_binder: Write failure EFAULT in pid:194 [ 44.741201][ T330] usb 1-1: device descriptor read/64, error -71 [ 44.861284][ T330] usb usb1-port1: attempt power cycle [ 45.201224][ T330] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 45.223585][ T330] usb 1-1: device descriptor read/8, error -71 [ 45.352284][ T330] usb 1-1: device descriptor read/8, error -71 [ 45.489852][ T1008] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 45.489879][ T1008] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:147 [ 45.601223][ T330] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 45.633208][ T330] usb 1-1: device descriptor read/8, error -71 [ 45.762255][ T330] usb 1-1: device descriptor read/8, error -71 [ 45.814438][ T1021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.814866][ T1020] rust_binder: Failed copying into alloc: EFAULT [ 45.821529][ T1020] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 45.827925][ T1020] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 45.836241][ T1020] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:159 [ 45.872462][ T330] usb usb1-port1: unable to enumerate USB device [ 45.873341][ T1023] netlink: 40 bytes leftover after parsing attributes in process `syz.1.222'. [ 45.901748][ T1024] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 45.901770][ T1024] rust_binder: Read failure Err(EFAULT) in pid:162 [ 45.942270][ T1030] /dev/rnullb0: Can't open blockdev [ 46.266136][ T1046] veth1: entered allmulticast mode [ 46.273037][ T1045] veth1: left allmulticast mode [ 46.291227][ T352] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 46.441433][ T352] usb 2-1: Using ep0 maxpacket: 8 [ 46.453338][ T352] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 46.463374][ T352] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.472195][ T352] usb 2-1: Product: syz [ 46.476446][ T352] usb 2-1: Manufacturer: syz [ 46.481083][ T352] usb 2-1: SerialNumber: syz [ 46.545130][ T1056] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:217 [ 46.687541][ T1039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.705360][ T1039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.714335][ T352] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 46.743780][ T1060] 9pnet: Could not find request transport: Xd [ 46.791209][ T489] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 46.915440][ T1039] netlink: 'syz.1.228': attribute type 1 has an invalid length. [ 46.921214][ T489] usb 3-1: device descriptor read/64, error -71 [ 46.925998][ T330] usb 2-1: USB disconnect, device number 11 [ 46.937082][ T1039] usblp0: removed [ 47.161227][ T489] usb 3-1: device descriptor read/64, error -71 [ 47.401210][ T489] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 47.531248][ T489] usb 3-1: device descriptor read/64, error -71 [ 47.545840][ T1075] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 47.545832][ T1074] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 47.771226][ T489] usb 3-1: device descriptor read/64, error -71 [ 47.891314][ T489] usb usb3-port1: attempt power cycle [ 47.992179][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 47.992194][ T36] audit: type=1400 audit(1757408672.320:348): avc: denied { mounton } for pid=1082 comm="syz.0.243" path="/70/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 47.992247][ T1083] incfs: Error accessing: ./file0. [ 48.025646][ T1083] incfs: mount failed -20 [ 48.231353][ T489] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 48.254739][ T489] usb 3-1: device descriptor read/8, error -71 [ 48.392181][ T489] usb 3-1: device descriptor read/8, error -71 [ 48.501202][ T330] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 48.631262][ T489] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 48.651271][ T330] usb 2-1: Using ep0 maxpacket: 8 [ 48.652334][ T489] usb 3-1: device descriptor read/8, error -71 [ 48.658779][ T330] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 48.671686][ T330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.679699][ T330] usb 2-1: Product: syz [ 48.683920][ T330] usb 2-1: Manufacturer: syz [ 48.688518][ T330] usb 2-1: SerialNumber: syz [ 48.792259][ T489] usb 3-1: device descriptor read/8, error -71 [ 48.895074][ T330] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 48.901307][ T489] usb usb3-port1: unable to enumerate USB device [ 49.105535][ T330] usb 2-1: USB disconnect, device number 12 [ 49.112773][ T330] usblp0: removed [ 49.577877][ T36] audit: type=1400 audit(1757408673.900:349): avc: denied { write } for pid=1089 comm="syz.2.245" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 49.664844][ T36] audit: type=1400 audit(1757408673.990:350): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 49.891707][ T1105] rust_binder: Error while translating object. [ 49.891742][ T1105] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 49.897976][ T1105] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:124 [ 49.919735][ T36] audit: type=1400 audit(1757408674.240:351): avc: denied { mounton } for pid=1106 comm="syz.3.250" path="/proc/126/task" dev="proc" ino=12505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 50.201221][ T489] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 50.352030][ T489] usb 1-1: not running at top speed; connect to a high speed hub [ 50.360604][ T489] usb 1-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 50.370921][ T489] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 4 [ 50.382058][ T489] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 50.396243][ T489] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 50.405586][ T489] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.413597][ T489] usb 1-1: Product: syz [ 50.417855][ T489] usb 1-1: Manufacturer: syz [ 50.422477][ T489] usb 1-1: SerialNumber: syz [ 50.629968][ T1111] rust_binder: Error while translating object. [ 50.630025][ T1111] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 50.636388][ T1111] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:208 [ 50.647905][ T489] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 50.668246][ T489] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 50.683384][ T489] usb 1-1: USB disconnect, device number 14 [ 50.715725][ T1139] 9pnet_fd: Insufficient options for proto=fd [ 50.726240][ T480] udevd[480]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 51.036416][ T1152] binder: Binderfs stats mode cannot be changed during a remount [ 51.338909][ T36] audit: type=1400 audit(1757408675.660:352): avc: denied { sqpoll } for pid=1164 comm="syz.3.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 51.392548][ T15] bridge_slave_1: left allmulticast mode [ 51.398337][ T15] bridge_slave_1: left promiscuous mode [ 51.404235][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.414105][ T15] bridge_slave_0: left allmulticast mode [ 51.419803][ T15] bridge_slave_0: left promiscuous mode [ 51.421199][ T489] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 51.425803][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.454110][ T36] audit: type=1400 audit(1757408675.780:353): avc: denied { connect } for pid=1171 comm="syz.3.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.499663][ T36] audit: type=1400 audit(1757408675.820:354): avc: denied { mounton } for pid=1173 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 51.537937][ T36] audit: type=1400 audit(1757408675.860:355): avc: denied { bpf } for pid=1177 comm="syz.3.274" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 51.574878][ T15] veth1_macvtap: left promiscuous mode [ 51.580446][ T15] veth0_vlan: left promiscuous mode [ 51.602186][ T489] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 51.611313][ T489] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.621725][ T489] usb 1-1: config 0 descriptor?? [ 51.636560][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.643693][ T1173] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.650792][ T1173] bridge_slave_0: entered allmulticast mode [ 51.657159][ T1173] bridge_slave_0: entered promiscuous mode [ 51.663705][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.670841][ T1173] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.680585][ T36] audit: type=1400 audit(1757408676.000:356): avc: denied { map } for pid=1183 comm="syz.3.275" path="socket:[10216]" dev="sockfs" ino=10216 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.704934][ T1173] bridge_slave_1: entered allmulticast mode [ 51.710932][ T36] audit: type=1400 audit(1757408676.000:357): avc: denied { read } for pid=1183 comm="syz.3.275" path="socket:[10216]" dev="sockfs" ino=10216 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.712242][ T1173] bridge_slave_1: entered promiscuous mode [ 51.778629][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.785692][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.792977][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.799996][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.820392][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.827972][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.838323][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.845401][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.858713][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.865789][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.889094][ T1173] veth0_vlan: entered promiscuous mode [ 51.903397][ T1173] veth1_macvtap: entered promiscuous mode [ 52.191219][ T330] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 52.278380][ T1207] binder: Bad value for 'stats' [ 52.342627][ T330] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.356911][ T1213] SELinux: Context ϧ-):E2٭ؾ)đJu39{@m[ is not valid (left unmapped). [ 52.357963][ T330] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 15 [ 52.376148][ T330] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 is Bulk; changing to Interrupt [ 52.386302][ T330] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 52.401363][ T330] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 52.416651][ T330] usb 3-1: string descriptor 0 read error: -22 [ 52.423191][ T330] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 52.432608][ T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.442682][ T330] usb 3-1: 0:2 : does not exist [ 52.563876][ T1221] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=1221 comm=syz.3.286 [ 52.661300][ T662] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 52.728451][ T352] usb 3-1: USB disconnect, device number 14 [ 52.812210][ T662] usb 5-1: config 0 has an invalid interface number: 199 but max is 1 [ 52.820507][ T662] usb 5-1: config 0 has no interface number 1 [ 52.826705][ T662] usb 5-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 52.836660][ T662] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 52.848408][ T662] usb 5-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 52.857781][ T662] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 52.865963][ T662] usb 5-1: SerialNumber: syz [ 52.871592][ T662] usb 5-1: config 0 descriptor?? [ 52.877514][ T662] usb 5-1: Found UVC 0.00 device (0002:0000) [ 52.884438][ T662] usb 5-1: No valid video chain found. [ 53.123844][ T352] usb 5-1: USB disconnect, device number 2 [ 53.173748][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 53.173764][ T36] audit: type=1400 audit(1757408677.500:365): avc: denied { create } for pid=1243 comm="syz.3.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 53.260187][ T489] usb 1-1: Cannot set autoneg [ 53.265819][ T489] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 53.278977][ T489] usb 1-1: USB disconnect, device number 15 [ 53.551221][ T352] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 53.639988][ T1262] netlink: 72 bytes leftover after parsing attributes in process `syz.4.300'. [ 53.651757][ T1264] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:17 [ 53.702372][ T352] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 53.721864][ T352] usb 3-1: config 0 has no interfaces? [ 53.727339][ T352] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 53.736424][ T352] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.747439][ T352] usb 3-1: config 0 descriptor?? [ 53.792315][ T1269] /dev/rnullb0: Can't open blockdev [ 53.871814][ T36] audit: type=1400 audit(1757408678.200:366): avc: denied { bind } for pid=1271 comm="syz.0.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 53.959509][ T1260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.968159][ T1260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.052951][ T1279] syzkaller0: create flow: hash 3082873410 index 1 [ 54.063141][ T46] syzkaller0: tun_net_xmit 76 [ 54.067907][ T46] syzkaller0: tun_net_xmit 48 [ 54.078473][ T1278] syzkaller0: delete flow: hash 3082873410 index 1 [ 54.172824][ T1293] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 54.184549][ T1293] overlayfs: missing 'lowerdir' [ 54.327744][ T1296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.336280][ T1296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.421205][ T352] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 54.493660][ T1301] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.493690][ T1301] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.533377][ T36] audit: type=1400 audit(1757408678.860:367): avc: denied { ioctl } for pid=1304 comm="syz.4.310" path="socket:[13774]" dev="sockfs" ino=13774 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 54.570360][ T489] usb 3-1: USB disconnect, device number 15 [ 54.578045][ T36] audit: type=1400 audit(1757408678.890:368): avc: denied { read } for pid=147 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 54.609141][ T36] audit: type=1400 audit(1757408678.890:369): avc: denied { search } for pid=147 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.630619][ T352] usb 1-1: Using ep0 maxpacket: 16 [ 54.637207][ T36] audit: type=1400 audit(1757408678.890:370): avc: denied { read } for pid=147 comm="dhcpcd" name="n15" dev="tmpfs" ino=2229 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 54.659036][ T36] audit: type=1400 audit(1757408678.890:371): avc: denied { open } for pid=147 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2229 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 54.682087][ T352] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.695392][ T352] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 54.704445][ T36] audit: type=1400 audit(1757408678.890:372): avc: denied { getattr } for pid=147 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2229 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 54.729008][ T352] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 54.738132][ T352] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.746167][ T352] usb 1-1: Product: syz [ 54.750543][ T352] usb 1-1: Manufacturer: syz [ 54.755409][ T352] usb 1-1: SerialNumber: syz [ 54.778298][ T36] audit: type=1326 audit(1757408679.100:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1313 comm="syz.2.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b6d18ebe9 code=0x7ffc0000 [ 54.801649][ T36] audit: type=1326 audit(1757408679.100:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1313 comm="syz.2.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3b6d18ebe9 code=0x7ffc0000 [ 54.881404][ T543] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 54.965101][ T352] usb 1-1: cannot find UAC_HEADER [ 54.974698][ T352] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 54.987087][ T352] usb 1-1: USB disconnect, device number 16 [ 54.994726][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 55.011193][ T45] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 55.026291][ T1321] netlink: 'syz.3.315': attribute type 39 has an invalid length. [ 55.035519][ T543] usb 5-1: config 9 has an invalid interface number: 97 but max is 3 [ 55.043638][ T543] usb 5-1: config 9 has an invalid interface number: 4 but max is 3 [ 55.051652][ T543] usb 5-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 55.060320][ T543] usb 5-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 55.069018][ T543] usb 5-1: config 9 has 2 interfaces, different from the descriptor's value: 4 [ 55.077996][ T543] usb 5-1: config 9 has no interface number 0 [ 55.084254][ T543] usb 5-1: config 9 has no interface number 1 [ 55.090350][ T543] usb 5-1: config 9 interface 97 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 55.103521][ T543] usb 5-1: config 9 interface 4 altsetting 128 has an invalid endpoint descriptor of length 3, skipping [ 55.114734][ T543] usb 5-1: config 9 interface 4 altsetting 128 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 55.125692][ T543] usb 5-1: config 9 interface 4 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 55.136558][ T543] usb 5-1: config 9 interface 4 altsetting 128 has 3 endpoint descriptors, different from the interface descriptor's value: 30 [ 55.149687][ T543] usb 5-1: config 9 interface 97 has no altsetting 0 [ 55.156572][ T543] usb 5-1: config 9 interface 4 has no altsetting 0 [ 55.164707][ T543] usb 5-1: New USB device found, idVendor=19d2, idProduct=1084, bcdDevice=64.cc [ 55.173785][ T543] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.181811][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 55.186880][ T543] usb 5-1: Product: Ы [ 55.190965][ T543] usb 5-1: Manufacturer: Е [ 55.195668][ T543] usb 5-1: SerialNumber: 䢓듳榖僉샤ਙ쓠顎ꦪꥈꔀꖌ틎楹멑ᴬ隝勑舺 [ 55.208383][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 55.216914][ T45] usb 3-1: config 6 has an invalid interface number: 248 but max is 0 [ 55.225150][ T45] usb 3-1: config 6 has no interface number 0 [ 55.231344][ T45] usb 3-1: config 6 interface 248 has no altsetting 0 [ 55.239602][ T45] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 55.248760][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.257304][ T45] usb 3-1: Product: syz [ 55.261598][ T45] usb 3-1: Manufacturer: syz [ 55.266208][ T45] usb 3-1: SerialNumber: syz [ 55.407673][ T1308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.416534][ T1308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.424727][ T1308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.433368][ T1308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.442106][ T1308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.450653][ T1308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.459009][ T1308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.467785][ T1308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.476385][ T1308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.485263][ T1308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.493730][ T45] ums-karma 3-1:6.248: USB Mass Storage device detected [ 55.518718][ T1333] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:284 [ 55.525378][ T45] usb 3-1: USB disconnect, device number 16 [ 55.712510][ T543] usb 5-1: USB disconnect, device number 3 [ 71.968883][ T1348] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 71.968922][ T1348] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:291 [ 71.979273][ T1343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.321'. [ 72.005837][ T36] kauditd_printk_skb: 63 callbacks suppressed [ 72.005855][ T36] audit: type=1400 audit(1757408696.330:438): avc: denied { write } for pid=1341 comm="syz.0.321" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 72.011269][ T1343] netlink: 32 bytes leftover after parsing attributes in process `syz.0.321'. [ 72.021171][ T36] audit: type=1400 audit(1757408696.330:439): avc: denied { open } for pid=1341 comm="syz.0.321" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 72.041165][ T1343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.321'. [ 72.079044][ T1356] syz.4.326 uses obsolete (PF_INET,SOCK_PACKET) [ 72.086355][ T1356] netlink: 'syz.4.326': attribute type 4 has an invalid length. [ 72.087196][ T36] audit: type=1400 audit(1757408696.420:440): avc: denied { bind } for pid=1355 comm="syz.4.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.115592][ T1356] netlink: 'syz.4.326': attribute type 4 has an invalid length. [ 72.142111][ T1356] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.142390][ T1356] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 72.173435][ T1369] /dev/rnullb0: Can't open blockdev [ 72.257708][ T36] audit: type=1400 audit(1757408696.580:441): avc: denied { ioctl } for pid=1370 comm="syz.0.332" path="socket:[13137]" dev="sockfs" ino=13137 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.280475][ T1373] overlayfs: overlapping lowerdir path [ 72.306707][ T1381] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 72.405534][ T1385] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 72.405557][ T1385] rust_binder: Error while translating object. [ 72.414566][ T1385] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 72.420781][ T1385] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:50 [ 72.559245][ T36] audit: type=1326 audit(1757408696.880:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1388 comm="syz.4.337" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff4f6f8ebe9 code=0x0 [ 73.105569][ T1431] overlayfs: failed to resolve './file0': -2 [ 73.120363][ T1435] KVM: debugfs: duplicate directory 1435-6 [ 73.225125][ T15] Bluetooth: hci0: Frame reassembly failed (-84) [ 73.355512][ T1450] tmpfs: Bad value for 'nr_blocks' [ 73.375236][ T15] Bluetooth: hci1: Frame reassembly failed (-84) [ 73.380770][ T1408] cgroup: fork rejected by pids controller in /syz3 [ 73.611162][ T352] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 73.631164][ T489] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 73.761165][ T489] usb 1-1: device descriptor read/64, error -71 [ 73.771169][ T352] usb 5-1: Using ep0 maxpacket: 32 [ 73.777392][ T352] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 73.785837][ T352] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 73.801182][ T352] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 73.810221][ T352] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 73.825382][ T352] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 73.835412][ T352] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 73.851201][ T352] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 73.860253][ T352] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.877938][ T352] usb 5-1: config 0 descriptor?? [ 74.001176][ T489] usb 1-1: device descriptor read/64, error -71 [ 74.088080][ T352] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 74.108663][ T352] usb 5-1: USB disconnect, device number 4 [ 74.121382][ T352] usblp0: removed [ 74.251219][ T489] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 74.391165][ T489] usb 1-1: device descriptor read/64, error -71 [ 74.581191][ T543] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 74.631477][ T489] usb 1-1: device descriptor read/64, error -71 [ 74.731201][ T543] usb 5-1: device descriptor read/64, error -71 [ 74.741300][ T489] usb usb1-port1: attempt power cycle [ 74.756699][ T1422] syz.3.342 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 74.789981][ T1422] CPU: 0 UID: 0 PID: 1422 Comm: syz.3.342 Not tainted syzkaller #0 1976820a860199aae9d2abf4727fc3b97aa7bbea [ 74.790014][ T1422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 74.790033][ T1422] Call Trace: [ 74.790040][ T1422] [ 74.790047][ T1422] __dump_stack+0x21/0x30 [ 74.790086][ T1422] dump_stack_lvl+0x10c/0x190 [ 74.790109][ T1422] ? __cfi_dump_stack_lvl+0x10/0x10 [ 74.790131][ T1422] ? ___ratelimit+0x3f7/0x5a0 [ 74.790153][ T1422] dump_stack+0x19/0x20 [ 74.790174][ T1422] dump_header+0xd7/0x490 [ 74.790193][ T1422] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 74.790216][ T1422] oom_kill_process+0x4c0/0x7e0 [ 74.790237][ T1422] ? sched_clock_cpu+0x75/0x400 [ 74.790262][ T1422] out_of_memory+0x7ee/0xbd0 [ 74.790282][ T1422] ? __cfi_out_of_memory+0x10/0x10 [ 74.790300][ T1422] ? mutex_lock_killable+0x92/0x1c0 [ 74.790323][ T1422] ? __cfi_mutex_lock_killable+0x10/0x10 [ 74.790345][ T1422] mem_cgroup_out_of_memory+0x279/0x350 [ 74.790363][ T1422] ? drain_obj_stock+0xed0/0xed0 [ 74.790382][ T1422] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 74.790400][ T1422] try_charge_memcg+0x8f7/0xde0 [ 74.790423][ T1422] ? __cfi_try_charge_memcg+0x10/0x10 [ 74.790446][ T1422] ? __alloc_pages_noprof+0x31f/0x7b0 [ 74.790470][ T1422] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 74.790491][ T1422] ? __folio_batch_add_and_move+0x2ab/0x370 [ 74.790512][ T1422] __mem_cgroup_charge+0xf6/0x410 [ 74.790537][ T1422] ? _raw_spin_lock+0x8c/0x120 [ 74.790560][ T1422] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 74.790585][ T1422] shmem_alloc_and_add_folio+0x86d/0x1050 [ 74.790608][ T1422] ? put_swap_device+0x130/0x130 [ 74.790626][ T1422] ? shmem_huge_global_enabled+0x2da/0x360 [ 74.790644][ T1422] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 74.790663][ T1422] ? __kasan_check_write+0x18/0x20 [ 74.790685][ T1422] ? _raw_spin_lock+0x8c/0x120 [ 74.790709][ T1422] shmem_get_folio_gfp+0x5f0/0x1380 [ 74.790730][ T1422] ? shmem_get_folio+0xc0/0xc0 [ 74.790744][ T1422] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 74.790764][ T1422] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 74.790783][ T1422] ? inode_to_bdi+0x6d/0x100 [ 74.790802][ T1422] shmem_write_begin+0xf4/0x270 [ 74.790819][ T1422] generic_perform_write+0x32d/0x960 [ 74.790845][ T1422] ? __cfi_generic_perform_write+0x10/0x10 [ 74.790864][ T1422] ? down_write+0xe9/0x2a0 [ 74.790881][ T1422] ? mnt_get_write_access_file+0x1af/0x3b0 [ 74.790900][ T1422] ? mnt_put_write_access_file+0xc2/0x100 [ 74.790918][ T1422] ? file_update_time+0x1ef/0x220 [ 74.790937][ T1422] shmem_file_write_iter+0x105/0x130 [ 74.790955][ T1422] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 74.790973][ T1422] __kernel_write_iter+0x395/0x830 [ 74.790988][ T1422] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 74.791006][ T1422] ? __cfi___kernel_write_iter+0x10/0x10 [ 74.791019][ T1422] ? get_dump_page+0x160/0x220 [ 74.791037][ T1422] ? __asan_memset+0x39/0x50 [ 74.791056][ T1422] ? iov_iter_bvec+0xc0/0x180 [ 74.791074][ T1422] dump_user_range+0xb06/0xdf0 [ 74.791090][ T1422] ? __cfi_dump_emit+0x10/0x10 [ 74.791115][ T1422] ? __cfi_dump_user_range+0x10/0x10 [ 74.791130][ T1422] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 74.791153][ T1422] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 74.791175][ T1422] elf_core_dump+0x2cd9/0x3810 [ 74.791194][ T1422] ? __cfi_elf_core_dump+0x10/0x10 [ 74.791215][ T1422] ? dump_interrupted+0xf0/0xf0 [ 74.791235][ T1422] ? filp_open+0x182/0x1d0 [ 74.791253][ T1422] ? 0xffffffffff600000 [ 74.791270][ T1422] do_coredump+0x1bfa/0x2bd0 [ 74.791293][ T1422] ? __cfi_do_coredump+0x10/0x10 [ 74.791312][ T1422] ? asm_exc_page_fault+0x2b/0x30 [ 74.791336][ T1422] ? __kasan_slab_free+0x6a/0x80 [ 74.791352][ T1422] ? kmem_cache_free+0x1c1/0x510 [ 74.791374][ T1422] ? get_signal+0xa75/0x14f0 [ 74.791394][ T1422] get_signal+0x11fd/0x14f0 [ 74.791414][ T1422] arch_do_signal_or_restart+0x96/0x720 [ 74.791438][ T1422] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 74.791461][ T1422] irqentry_exit_to_user_mode+0x4e/0xb0 [ 74.791480][ T1422] irqentry_exit+0x16/0x60 [ 74.791497][ T1422] exc_page_fault+0x66/0xc0 [ 74.791514][ T1422] asm_exc_page_fault+0x2b/0x30 [ 74.791530][ T1422] RIP: 0033:0x7fb4c6d8ebf1 [ 74.791543][ T1422] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 74.791556][ T1422] RSP: 002b:ffffffffffffff10 EFLAGS: 00010217 [ 74.791572][ T1422] RAX: 0000000000000000 RBX: 00007fb4c6fc6090 RCX: 00007fb4c6d8ebe9 [ 74.791584][ T1422] RDX: 0000000000000000 RSI: ffffffffffffff10 RDI: 0000000080000000 [ 74.791596][ T1422] RBP: 00007fb4c6e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 74.791606][ T1422] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 74.791616][ T1422] R13: 00007fb4c6fc6128 R14: 00007fb4c6fc6090 R15: 00007ffd8d504ba8 [ 74.791630][ T1422] [ 75.011204][ T543] usb 5-1: device descriptor read/64, error -71 [ 75.020406][ T1422] memory: usage 307200kB, limit 307200kB, failcnt 19007 [ 75.280075][ T1422] memory+swap: usage 432188kB, limit 9007199254740988kB, failcnt 0 [ 75.288091][ T556] Bluetooth: hci0: command 0x1003 tx timeout [ 75.288273][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 75.294147][ T1422] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 75.300451][ T543] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 75.314049][ T1422] Memory cgroup stats for /syz3: [ 75.314923][ T1422] cache 314499072 [ 75.328685][ T1422] rss 65536 [ 75.331925][ T1422] rss_huge 0 [ 75.335219][ T1422] shmem 314499072 [ 75.339041][ T1422] mapped_file 0 [ 75.341169][ T489] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 75.342650][ T1422] dirty 0 [ 75.353672][ T1422] writeback 0 [ 75.357154][ T1422] workingset_refault_anon 0 [ 75.361887][ T1422] workingset_refault_file 0 [ 75.366474][ T1422] swap 127987712 [ 75.370024][ T1422] swapcached 8192 [ 75.372151][ T489] usb 1-1: device descriptor read/8, error -71 [ 75.373689][ T1422] pgpgin 137646 [ 75.373698][ T1422] pgpgout 60846 [ 75.373704][ T1422] pgfault 24608 [ 75.373709][ T1422] pgmajfault 4 [ 75.373714][ T1422] inactive_anon 136699904 [ 75.373720][ T1422] active_anon 177872896 [ 75.373726][ T1422] inactive_file 0 [ 75.373731][ T1422] active_file 0 [ 75.409294][ T1422] unevictable 0 [ 75.412766][ T1422] hierarchical_memory_limit 314572800 [ 75.419080][ T1422] hierarchical_memsw_limit 9223372036854771712 [ 75.425414][ T1422] total_cache 314499072 [ 75.429594][ T1422] total_rss 65536 [ 75.431191][ T53] Bluetooth: hci1: command 0x1003 tx timeout [ 75.433666][ T1422] total_rss_huge 0 [ 75.439206][ T536] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 75.443388][ T1422] total_shmem 314499072 [ 75.453395][ T1422] total_mapped_file 0 [ 75.457366][ T1422] total_dirty 0 [ 75.460892][ T1422] total_writeback 0 [ 75.464706][ T1422] total_workingset_refault_anon 0 [ 75.469741][ T1422] total_workingset_refault_file 0 [ 75.474859][ T1422] total_swap 127987712 [ 75.478928][ T1422] total_swapcached 8192 [ 75.483105][ T1422] total_pgpgin 137646 [ 75.487067][ T1422] total_pgpgout 60846 [ 75.491205][ T1422] total_pgfault 24608 [ 75.491225][ T543] usb 5-1: device descriptor read/64, error -71 [ 75.495175][ T1422] total_pgmajfault 4 [ 75.495185][ T1422] total_inactive_anon 136699904 [ 75.510361][ T1422] total_active_anon 177872896 [ 75.515675][ T1422] total_inactive_file 0 [ 75.519986][ T1422] total_active_file 0 [ 75.520619][ T489] usb 1-1: device descriptor read/8, error -71 [ 75.524230][ T1422] total_unevictable 0 [ 75.534173][ T1422] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.342,pid=1411,uid=0 [ 75.550817][ T1422] Memory cgroup out of memory: Killed process 1411 (syz.3.342) total-vm:90168kB, anon-rss:988kB, file-rss:48128kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:0 [ 75.641153][ T11] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 75.741159][ T543] usb 5-1: device descriptor read/64, error -71 [ 75.761160][ T489] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 75.782188][ T489] usb 1-1: device descriptor read/8, error -71 [ 75.801150][ T11] usb 3-1: Using ep0 maxpacket: 16 [ 75.807359][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 75.818811][ T11] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 75.836467][ T11] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 75.845801][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.846382][ T1442] syz.3.342 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 75.863545][ T543] usb usb5-port1: attempt power cycle [ 75.869385][ T11] usb 3-1: config 0 descriptor?? [ 75.922217][ T489] usb 1-1: device descriptor read/8, error -71 [ 75.971149][ T1442] CPU: 1 UID: 0 PID: 1442 Comm: syz.3.342 Not tainted syzkaller #0 1976820a860199aae9d2abf4727fc3b97aa7bbea [ 75.971182][ T1442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 75.971194][ T1442] Call Trace: [ 75.971200][ T1442] [ 75.971208][ T1442] __dump_stack+0x21/0x30 [ 75.971236][ T1442] dump_stack_lvl+0x10c/0x190 [ 75.971257][ T1442] ? __cfi_dump_stack_lvl+0x10/0x10 [ 75.971279][ T1442] ? ___ratelimit+0x3f7/0x5a0 [ 75.971298][ T1442] dump_stack+0x19/0x20 [ 75.971319][ T1442] dump_header+0xd7/0x490 [ 75.971336][ T1442] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 75.971359][ T1442] oom_kill_process+0x4c0/0x7e0 [ 75.971380][ T1442] ? sched_clock_cpu+0x75/0x400 [ 75.971402][ T1442] out_of_memory+0x7ee/0xbd0 [ 75.971421][ T1442] ? __cfi_out_of_memory+0x10/0x10 [ 75.971440][ T1442] ? mutex_lock_killable+0x92/0x1c0 [ 75.971460][ T1442] ? __cfi_mutex_lock_killable+0x10/0x10 [ 75.971482][ T1442] mem_cgroup_out_of_memory+0x279/0x350 [ 75.971500][ T1442] ? drain_obj_stock+0xed0/0xed0 [ 75.971518][ T1442] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 75.971536][ T1442] try_charge_memcg+0x8f7/0xde0 [ 75.971559][ T1442] ? __cfi_try_charge_memcg+0x10/0x10 [ 75.971581][ T1442] ? __alloc_pages_noprof+0x31f/0x7b0 [ 75.971611][ T1442] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 75.971633][ T1442] ? __folio_batch_add_and_move+0x2ab/0x370 [ 75.971655][ T1442] __mem_cgroup_charge+0xf6/0x410 [ 75.971679][ T1442] ? _raw_spin_lock+0x8c/0x120 [ 75.971701][ T1442] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 75.971727][ T1442] shmem_alloc_and_add_folio+0x86d/0x1050 [ 75.971749][ T1442] ? put_swap_device+0x130/0x130 [ 75.971768][ T1442] ? shmem_huge_global_enabled+0x2da/0x360 [ 75.971787][ T1442] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 75.971806][ T1442] ? __kasan_check_write+0x18/0x20 [ 75.971829][ T1442] ? _raw_spin_lock+0x8c/0x120 [ 75.971853][ T1442] shmem_get_folio_gfp+0x5f0/0x1380 [ 75.971873][ T1442] ? shmem_get_folio+0xc0/0xc0 [ 75.971890][ T1442] ? follow_page_pte+0xa5c/0xb90 [ 75.971912][ T1442] ? inode_to_bdi+0x6d/0x100 [ 75.971934][ T1442] shmem_write_begin+0xf4/0x270 [ 75.971954][ T1442] generic_perform_write+0x32d/0x960 [ 75.971979][ T1442] ? __cfi_generic_perform_write+0x10/0x10 [ 75.972001][ T1442] ? down_write+0xe9/0x2a0 [ 75.972022][ T1442] ? file_update_time+0xa3/0x220 [ 75.972045][ T1442] shmem_file_write_iter+0x105/0x130 [ 75.972066][ T1442] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 75.972088][ T1442] __kernel_write_iter+0x395/0x830 [ 75.972105][ T1442] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 75.972126][ T1442] ? __cfi___kernel_write_iter+0x10/0x10 [ 75.972142][ T1442] ? get_dump_page+0x160/0x220 [ 75.972163][ T1442] ? __asan_memset+0x39/0x50 [ 75.972185][ T1442] ? iov_iter_bvec+0xc0/0x180 [ 75.972205][ T1442] dump_user_range+0xb06/0xdf0 [ 75.972224][ T1442] ? __cfi_dump_emit+0x10/0x10 [ 75.972248][ T1442] ? __cfi_dump_user_range+0x10/0x10 [ 75.972264][ T1442] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 75.972289][ T1442] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 75.972313][ T1442] elf_core_dump+0x2cd9/0x3810 [ 75.972336][ T1442] ? __cfi_elf_core_dump+0x10/0x10 [ 75.972362][ T1442] ? dump_interrupted+0xf0/0xf0 [ 75.972385][ T1442] ? filp_open+0x182/0x1d0 [ 75.972406][ T1442] ? 0xffffffffff600000 [ 75.972421][ T1442] do_coredump+0x1bfa/0x2bd0 [ 75.972445][ T1442] ? finish_task_switch+0x13a/0x780 [ 75.972468][ T1442] ? __cfi_do_coredump+0x10/0x10 [ 75.972514][ T1442] ? preempt_schedule_irq+0x9c/0x100 [ 75.972533][ T1442] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 75.972552][ T1442] ? raw_irqentry_exit_cond_resched+0x33/0x40 [ 75.972575][ T1442] ? irqentry_exit+0x4a/0x60 [ 75.972600][ T1442] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 75.972621][ T1442] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 75.972645][ T1442] ? _raw_spin_unlock_irq+0x4e/0x70 [ 75.972669][ T1442] get_signal+0x11fd/0x14f0 [ 75.972695][ T1442] arch_do_signal_or_restart+0x96/0x720 [ 75.972720][ T1442] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 75.972748][ T1442] irqentry_exit_to_user_mode+0x4e/0xb0 [ 75.972770][ T1442] irqentry_exit+0x16/0x60 [ 75.972789][ T1442] exc_page_fault+0x66/0xc0 [ 75.972809][ T1442] asm_exc_page_fault+0x2b/0x30 [ 75.972829][ T1442] RIP: 0033:0x7fb4c6d8ebf1 [ 75.972843][ T1442] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 75.972859][ T1442] RSP: 002b:ffffffffffffff10 EFLAGS: 00010217 [ 75.972876][ T1442] RAX: 0000000000000000 RBX: 00007fb4c6fc6090 RCX: 00007fb4c6d8ebe9 [ 75.972890][ T1442] RDX: 0000000000000000 RSI: ffffffffffffff10 RDI: 0000000080000000 [ 75.972903][ T1442] RBP: 00007fb4c6e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 75.972915][ T1442] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 75.972927][ T1442] R13: 00007fb4c6fc6128 R14: 00007fb4c6fc6090 R15: 00007ffd8d504ba8 [ 75.972942][ T1442] [ 75.972950][ T1442] memory: usage 303128kB, limit 307200kB, failcnt 23204 [ 76.041272][ T489] usb usb1-port1: unable to enumerate USB device [ 76.065086][ T1442] memory+swap: usage 432188kB, limit 9007199254740988kB, failcnt 0 [ 76.282990][ T489] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 76.285785][ T1442] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 76.294395][ T11] playstation 0003:054C:0DF2.0002: hidraw0: USB HID v0.09 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 76.298767][ T1442] Memory cgroup stats for [ 76.421153][ T489] usb 1-1: device descriptor read/64, error -71 [ 76.422505][ T543] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 76.430560][ T1442] /syz3: [ 76.523211][ T1442] cache 314466304 [ 76.523463][ T11] playstation 0003:054C:0DF2.0002: Invalid reportID received, expected 9 got 53 [ 76.526157][ T1442] rss 65536 [ 76.529767][ T11] playstation 0003:054C:0DF2.0002: Failed to retrieve DualSense pairing info: -22 [ 76.539289][ T1442] rss_huge 0 [ 76.542049][ T11] playstation 0003:054C:0DF2.0002: Failed to get MAC address from DualSense [ 76.551592][ T1442] shmem 314466304 [ 76.554515][ T11] playstation 0003:054C:0DF2.0002: Failed to create dualsense. [ 76.563490][ T1442] mapped_file 0 [ 76.569420][ T11] playstation 0003:054C:0DF2.0002: probe with driver playstation failed with error -22 [ 76.579083][ T1442] dirty 0 [ 76.591104][ T1442] writeback 0 [ 76.594485][ T1442] workingset_refault_anon 0 [ 76.598990][ T1442] workingset_refault_file 0 [ 76.603529][ T1442] swap 127954944 [ 76.607144][ T1442] swapcached 40960 [ 76.611393][ T1442] pgpgin 144565 [ 76.615589][ T1442] pgpgout 67765 [ 76.619979][ T1442] pgfault 25040 [ 76.623496][ T1442] pgmajfault 4 [ 76.626880][ T1442] inactive_anon 289902592 [ 76.631279][ T1442] active_anon 24670208 [ 76.636990][ T1442] inactive_file 0 [ 76.640636][ T1442] active_file 0 [ 76.644236][ T1442] unevictable 0 [ 76.647688][ T1442] hierarchical_memory_limit 314572800 [ 76.653100][ T1442] hierarchical_memsw_limit 9223372036854771712 [ 76.659512][ T1442] total_cache 314466304 [ 76.663699][ T1442] total_rss 65536 [ 76.667323][ T1442] total_rss_huge 0 [ 76.671036][ T1442] total_shmem 314466304 [ 76.675238][ T1442] total_mapped_file 0 [ 76.679368][ T1442] total_dirty 0 [ 76.683034][ T1442] total_writeback 0 [ 76.686841][ T1442] total_workingset_refault_anon 0 [ 76.692048][ T1442] total_workingset_refault_file 0 [ 76.697063][ T1442] total_swap 127954944 [ 76.701316][ T1442] total_swapcached 40960 [ 76.705576][ T1442] total_pgpgin 144565 [ 76.709542][ T1442] total_pgpgout 67765 [ 76.713539][ T1442] total_pgfault 25040 [ 76.717508][ T1442] total_pgmajfault 4 [ 76.721423][ T1442] total_inactive_anon 289902592 [ 76.726356][ T1442] total_active_anon 24670208 [ 76.730952][ T1442] total_inactive_file 0 [ 76.734250][ T11] usb 3-1: USB disconnect, device number 17 [ 76.735150][ T1442] total_active_file 0 [ 76.745285][ T1442] total_unevictable 0 [ 76.749272][ T1442] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.342,pid=1410,uid=0 [ 76.764040][ T1442] Memory cgroup out of memory: Killed process 1410 (syz.3.342) total-vm:90168kB, anon-rss:1012kB, file-rss:47104kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:0 [ 76.789437][ T1418] syz.3.342 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 76.841298][ T1418] CPU: 1 UID: 0 PID: 1418 Comm: syz.3.342 Not tainted syzkaller #0 1976820a860199aae9d2abf4727fc3b97aa7bbea [ 76.841331][ T1418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 76.841342][ T1418] Call Trace: [ 76.841348][ T1418] [ 76.841356][ T1418] __dump_stack+0x21/0x30 [ 76.841383][ T1418] dump_stack_lvl+0x10c/0x190 [ 76.841405][ T1418] ? __cfi_dump_stack_lvl+0x10/0x10 [ 76.841425][ T1418] ? ___ratelimit+0x3f7/0x5a0 [ 76.841441][ T1418] dump_stack+0x19/0x20 [ 76.841467][ T1418] dump_header+0xd7/0x490 [ 76.841482][ T1418] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 76.841502][ T1418] oom_kill_process+0x4c0/0x7e0 [ 76.841521][ T1418] ? sched_clock_cpu+0x75/0x400 [ 76.841544][ T1418] out_of_memory+0x7ee/0xbd0 [ 76.841563][ T1418] ? __cfi_out_of_memory+0x10/0x10 [ 76.841581][ T1418] ? mutex_lock_killable+0x104/0x1c0 [ 76.841602][ T1418] ? __cfi_mutex_lock_killable+0x10/0x10 [ 76.841623][ T1418] mem_cgroup_out_of_memory+0x279/0x350 [ 76.841640][ T1418] ? drain_obj_stock+0xed0/0xed0 [ 76.841657][ T1418] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 76.841674][ T1418] try_charge_memcg+0x8f7/0xde0 [ 76.841696][ T1418] ? __cfi_try_charge_memcg+0x10/0x10 [ 76.841717][ T1418] ? __alloc_pages_noprof+0x31f/0x7b0 [ 76.841738][ T1418] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 76.841759][ T1418] ? __folio_batch_add_and_move+0x2ab/0x370 [ 76.841780][ T1418] __mem_cgroup_charge+0xf6/0x410 [ 76.841803][ T1418] ? _raw_spin_lock+0x8c/0x120 [ 76.841825][ T1418] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 76.841849][ T1418] shmem_alloc_and_add_folio+0x86d/0x1050 [ 76.841871][ T1418] ? put_swap_device+0x130/0x130 [ 76.841890][ T1418] ? shmem_huge_global_enabled+0x2da/0x360 [ 76.841908][ T1418] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 76.841926][ T1418] ? __kasan_check_write+0x18/0x20 [ 76.841949][ T1418] ? _raw_spin_lock+0x8c/0x120 [ 76.841971][ T1418] shmem_get_folio_gfp+0x5f0/0x1380 [ 76.841992][ T1418] ? shmem_get_folio+0xc0/0xc0 [ 76.842008][ T1418] ? follow_page_pte+0xa5c/0xb90 [ 76.842029][ T1418] ? inode_to_bdi+0x6d/0x100 [ 76.842051][ T1418] shmem_write_begin+0xf4/0x270 [ 76.842070][ T1418] generic_perform_write+0x32d/0x960 [ 76.842094][ T1418] ? __cfi_generic_perform_write+0x10/0x10 [ 76.842116][ T1418] ? down_write+0xe9/0x2a0 [ 76.842136][ T1418] ? file_update_time+0xa3/0x220 [ 76.842159][ T1418] shmem_file_write_iter+0x105/0x130 [ 76.842180][ T1418] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 76.842200][ T1418] __kernel_write_iter+0x395/0x830 [ 76.842217][ T1418] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 76.842238][ T1418] ? __cfi___kernel_write_iter+0x10/0x10 [ 76.842253][ T1418] ? get_dump_page+0x160/0x220 [ 76.842272][ T1418] ? __asan_memset+0x39/0x50 [ 76.842294][ T1418] ? iov_iter_bvec+0xc0/0x180 [ 76.842314][ T1418] dump_user_range+0xb06/0xdf0 [ 76.842332][ T1418] ? __cfi_dump_emit+0x10/0x10 [ 76.842356][ T1418] ? __cfi_dump_user_range+0x10/0x10 [ 76.842373][ T1418] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 76.842396][ T1418] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 76.842421][ T1418] elf_core_dump+0x2cd9/0x3810 [ 76.842443][ T1418] ? __cfi_elf_core_dump+0x10/0x10 [ 76.842476][ T1418] ? dump_interrupted+0xf0/0xf0 [ 76.842499][ T1418] ? filp_open+0x182/0x1d0 [ 76.842520][ T1418] ? 0xffffffffff600000 [ 76.842534][ T1418] do_coredump+0x1bfa/0x2bd0 [ 76.842560][ T1418] ? __cfi_do_coredump+0x10/0x10 [ 76.842581][ T1418] ? asm_exc_page_fault+0x2b/0x30 [ 76.842609][ T1418] ? __kasan_slab_free+0x6a/0x80 [ 76.842626][ T1418] ? kmem_cache_free+0x1c1/0x510 [ 76.842650][ T1418] ? get_signal+0xa75/0x14f0 [ 76.842671][ T1418] get_signal+0x11fd/0x14f0 [ 76.842695][ T1418] arch_do_signal_or_restart+0x96/0x720 [ 76.842718][ T1418] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 76.842744][ T1418] irqentry_exit_to_user_mode+0x4e/0xb0 [ 76.842766][ T1418] irqentry_exit+0x16/0x60 [ 76.842785][ T1418] exc_page_fault+0x66/0xc0 [ 76.842804][ T1418] asm_exc_page_fault+0x2b/0x30 [ 76.842824][ T1418] RIP: 0033:0x7fb4c6d8ebf1 [ 76.842839][ T1418] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 76.842854][ T1418] RSP: 002b:ffffffffffffff10 EFLAGS: 00010217 [ 76.842871][ T1418] RAX: 0000000000000000 RBX: 00007fb4c6fc6090 RCX: 00007fb4c6d8ebe9 [ 76.842892][ T1418] RDX: 0000000000000000 RSI: ffffffffffffff10 RDI: 0000000080000000 [ 76.842905][ T1418] RBP: 00007fb4c6e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 76.842917][ T1418] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 76.842928][ T1418] R13: 00007fb4c6fc6128 R14: 00007fb4c6fc6090 R15: 00007ffd8d504ba8 [ 76.842944][ T1418] [ 76.842951][ T1418] memory: usage 297984kB, limit 307200kB, failcnt 23533 [ 76.981173][ T489] usb 1-1: device descriptor read/64, error -71 [ 76.983827][ T543] usb 5-1: device not accepting address 7, error -71 [ 77.031154][ T1418] memory+swap: usage 431716kB, limit 9007199254740988kB, failcnt 0 [ 77.325072][ T1502] pim6reg1: entered promiscuous mode [ 77.336783][ T1418] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 77.337407][ T1502] pim6reg1: entered allmulticast mode [ 77.343999][ T1418] Memory cgroup stats for /syz3: [ 77.349415][ T1418] cache 314433536 [ 77.358067][ T1418] rss 65536 [ 77.361265][ T1418] rss_huge 0 [ 77.364456][ T1418] shmem 314433536 [ 77.368099][ T1418] mapped_file 0 [ 77.371595][ T1418] dirty 0 [ 77.374532][ T1418] writeback 0 [ 77.377803][ T1418] workingset_refault_anon 8 [ 77.382334][ T1418] workingset_refault_file 64 [ 77.386903][ T1418] swap 127963136 [ 77.390418][ T1418] swapcached 32768 [ 77.394273][ T1418] pgpgin 151273 [ 77.397719][ T1418] pgpgout 74483 [ 77.401350][ T1418] pgfault 25478 [ 77.404821][ T1418] pgmajfault 7 [ 77.408164][ T1418] inactive_anon 142749696 [ 77.412519][ T1418] active_anon 171782144 [ 77.416653][ T1418] inactive_file 0 [ 77.420257][ T1418] active_file 0 [ 77.423716][ T1418] unevictable 0 [ 77.427161][ T1418] hierarchical_memory_limit 314572800 [ 77.432729][ T1418] hierarchical_memsw_limit 9223372036854771712 [ 77.438972][ T1418] total_cache 314433536 [ 77.445261][ T1418] total_rss 65536 [ 77.449005][ T1418] total_rss_huge 0 [ 77.453025][ T1418] total_shmem 314433536 [ 77.457435][ T1418] total_mapped_file 0 [ 77.461198][ T489] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 77.461736][ T1418] total_dirty 0 [ 77.472681][ T1418] total_writeback 0 [ 77.476513][ T1418] total_workingset_refault_anon 8 [ 77.481591][ T1418] total_workingset_refault_file 64 [ 77.486716][ T1418] total_swap 127963136 [ 77.490777][ T1418] total_swapcached 32768 [ 77.495041][ T1418] total_pgpgin 151273 [ 77.499013][ T1418] total_pgpgout 74483 [ 77.503158][ T1418] total_pgfault 25478 [ 77.507262][ T1418] total_pgmajfault 7 [ 77.508713][ T1508] rust_binder: 330: no such ref 3 [ 77.511203][ T1418] total_inactive_anon 142749696 [ 77.511214][ T1418] total_active_anon 171782144 [ 77.511220][ T1418] total_inactive_file 0 [ 77.511226][ T1418] total_active_file 0 [ 77.511232][ T1418] total_unevictable 0 [ 77.537874][ T1418] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.342,pid=1414,uid=0 [ 77.552785][ T1418] Memory cgroup out of memory: Killed process 1414 (syz.3.342) total-vm:90168kB, anon-rss:1012kB, file-rss:52864kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:0 [ 77.631150][ T489] usb 1-1: Using ep0 maxpacket: 32 [ 77.637716][ T489] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 77.646349][ T489] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 77.655937][ T489] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 77.664938][ T489] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 77.681393][ T489] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 77.691054][ T489] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 77.711174][ T489] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 77.720318][ T489] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.730952][ T1446] syz.3.342 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 77.732014][ T489] usb 1-1: config 0 descriptor?? [ 77.760767][ T1446] CPU: 1 UID: 0 PID: 1446 Comm: syz.3.342 Not tainted syzkaller #0 1976820a860199aae9d2abf4727fc3b97aa7bbea [ 77.760799][ T1446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 77.760811][ T1446] Call Trace: [ 77.760817][ T1446] [ 77.760825][ T1446] __dump_stack+0x21/0x30 [ 77.760853][ T1446] dump_stack_lvl+0x10c/0x190 [ 77.760875][ T1446] ? __cfi_dump_stack_lvl+0x10/0x10 [ 77.760897][ T1446] ? ___ratelimit+0x3f7/0x5a0 [ 77.760917][ T1446] dump_stack+0x19/0x20 [ 77.760937][ T1446] dump_header+0xd7/0x490 [ 77.760955][ T1446] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 77.760977][ T1446] oom_kill_process+0x4c0/0x7e0 [ 77.760998][ T1446] ? sched_clock_cpu+0x75/0x400 [ 77.761021][ T1446] out_of_memory+0x7ee/0xbd0 [ 77.761040][ T1446] ? __cfi_out_of_memory+0x10/0x10 [ 77.761059][ T1446] ? mutex_lock_killable+0x92/0x1c0 [ 77.761080][ T1446] ? __cfi_mutex_lock_killable+0x10/0x10 [ 77.761103][ T1446] mem_cgroup_out_of_memory+0x279/0x350 [ 77.761121][ T1446] ? drain_obj_stock+0xed0/0xed0 [ 77.761137][ T1446] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 77.761154][ T1446] try_charge_memcg+0x8f7/0xde0 [ 77.761183][ T1446] ? __cfi_try_charge_memcg+0x10/0x10 [ 77.761205][ T1446] ? __alloc_pages_noprof+0x31f/0x7b0 [ 77.761227][ T1446] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 77.761249][ T1446] __mem_cgroup_charge+0xf6/0x410 [ 77.761274][ T1446] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 77.761298][ T1446] ? do_pte_missing+0x2bdb/0x4240 [ 77.761320][ T1446] shmem_alloc_and_add_folio+0x86d/0x1050 [ 77.761343][ T1446] ? put_swap_device+0x130/0x130 [ 77.761363][ T1446] ? shmem_huge_global_enabled+0x2da/0x360 [ 77.761382][ T1446] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 77.761406][ T1446] ? __kasan_check_write+0x18/0x20 [ 77.761431][ T1446] ? _raw_spin_lock+0x8c/0x120 [ 77.761454][ T1446] shmem_get_folio_gfp+0x5f0/0x1380 [ 77.761475][ T1446] ? shmem_get_folio+0xc0/0xc0 [ 77.761491][ T1446] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 77.761515][ T1446] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 77.761539][ T1446] ? inode_to_bdi+0x6d/0x100 [ 77.761561][ T1446] shmem_write_begin+0xf4/0x270 [ 77.761581][ T1446] generic_perform_write+0x32d/0x960 [ 77.761607][ T1446] ? __cfi_generic_perform_write+0x10/0x10 [ 77.761629][ T1446] ? down_write+0xe9/0x2a0 [ 77.761649][ T1446] ? mnt_get_write_access_file+0x1af/0x3b0 [ 77.761671][ T1446] ? mnt_put_write_access_file+0xc2/0x100 [ 77.761694][ T1446] ? file_update_time+0x1ef/0x220 [ 77.761715][ T1446] shmem_file_write_iter+0x105/0x130 [ 77.761737][ T1446] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 77.761758][ T1446] __kernel_write_iter+0x395/0x830 [ 77.761775][ T1446] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 77.761797][ T1446] ? __cfi___kernel_write_iter+0x10/0x10 [ 77.761813][ T1446] ? get_dump_page+0x160/0x220 [ 77.761833][ T1446] ? __asan_memset+0x39/0x50 [ 77.761857][ T1446] ? iov_iter_bvec+0xc0/0x180 [ 77.761877][ T1446] dump_user_range+0xb06/0xdf0 [ 77.761895][ T1446] ? __cfi_dump_emit+0x10/0x10 [ 77.761920][ T1446] ? __cfi_dump_user_range+0x10/0x10 [ 77.761937][ T1446] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 77.761962][ T1446] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 77.761987][ T1446] elf_core_dump+0x2cd9/0x3810 [ 77.762010][ T1446] ? __cfi_elf_core_dump+0x10/0x10 [ 77.762036][ T1446] ? dump_interrupted+0xf0/0xf0 [ 77.762059][ T1446] ? filp_open+0x182/0x1d0 [ 77.762080][ T1446] ? 0xffffffffff600000 [ 77.762095][ T1446] do_coredump+0x1bfa/0x2bd0 [ 77.762121][ T1446] ? __cfi_do_coredump+0x10/0x10 [ 77.762145][ T1446] ? asm_exc_page_fault+0x2b/0x30 [ 77.762172][ T1446] ? __kasan_slab_free+0x6a/0x80 [ 77.762190][ T1446] ? kmem_cache_free+0x1c1/0x510 [ 77.762214][ T1446] ? get_signal+0xa75/0x14f0 [ 77.762236][ T1446] get_signal+0x11fd/0x14f0 [ 77.762259][ T1446] arch_do_signal_or_restart+0x96/0x720 [ 77.762284][ T1446] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 77.762312][ T1446] irqentry_exit_to_user_mode+0x4e/0xb0 [ 77.762333][ T1446] irqentry_exit+0x16/0x60 [ 77.762353][ T1446] exc_page_fault+0x66/0xc0 [ 77.762373][ T1446] asm_exc_page_fault+0x2b/0x30 [ 77.762393][ T1446] RIP: 0033:0x7fb4c6d8ebf1 [ 77.762415][ T1446] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 77.762430][ T1446] RSP: 002b:ffffffffffffff10 EFLAGS: 00010217 [ 77.762447][ T1446] RAX: 0000000000000000 RBX: 00007fb4c6fc6090 RCX: 00007fb4c6d8ebe9 [ 77.762461][ T1446] RDX: 0000000000000000 RSI: ffffffffffffff10 RDI: 0000000080000000 [ 77.762475][ T1446] RBP: 00007fb4c6e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 77.762487][ T1446] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 77.762499][ T1446] R13: 00007fb4c6fc6128 R14: 00007fb4c6fc6090 R15: 00007ffd8d504ba8 [ 77.762515][ T1446] [ 77.811225][ T11] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 77.921148][ T1446] memory: usage 286408kB, limit 307200kB, failcnt 26078 [ 78.047264][ T1515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.049469][ T1446] memory+swap: usage 431936kB, limit 9007199254740988kB, failcnt 0 [ 78.055043][ T1515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.064272][ T1446] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 78.078425][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 78.083030][ T1446] Memory cgroup stats for [ 78.087098][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 78.091472][ T1446] /syz3: [ 78.091586][ T1446] cache 314167296 [ 78.109868][ T11] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 78.121327][ T1446] rss 65536 [ 78.127904][ T1515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.129214][ T1446] rss_huge 0 [ 78.129224][ T1446] shmem 309710848 [ 78.129230][ T1446] mapped_file 4325376 [ 78.129237][ T1446] dirty 0 [ 78.135417][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.151181][ T1446] writeback 0 [ 78.155701][ T1515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.160314][ T1446] workingset_refault_anon 15 [ 78.160324][ T1446] workingset_refault_file 1152 [ 78.169989][ T11] usb 3-1: Product: syz [ 78.211839][ T1446] swap 127836160 [ 78.222776][ T489] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 78.237553][ T1446] swapcached 65536 [ 78.263550][ T11] usb 3-1: Manufacturer: syz [ 78.265275][ T1446] pgpgin 159302 [ 78.272462][ T489] usb 1-1: USB disconnect, device number 22 [ 78.279244][ T1446] pgpgout 82570 [ 78.288745][ T11] usb 3-1: SerialNumber: syz [ 78.293275][ T1446] pgfault 25921 [ 78.303885][ T489] usblp0: removed [ 78.306183][ T1446] pgmajfault 12 [ 78.315963][ T11] usb 3-1: config 0 descriptor?? [ 78.320018][ T1446] inactive_anon 102961152 [ 78.326310][ T11] usb 3-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 78.330017][ T1446] active_anon 206864384 [ 78.449498][ T1446] inactive_file 0 [ 78.453304][ T1446] active_file 4456448 [ 78.457323][ T1446] unevictable 0 [ 78.460786][ T1446] hierarchical_memory_limit 314572800 [ 78.466448][ T1446] hierarchical_memsw_limit 9223372036854771712 [ 78.472701][ T1446] total_cache 314167296 [ 78.476929][ T1446] total_rss 65536 [ 78.480565][ T1446] total_rss_huge 0 [ 78.484440][ T1446] total_shmem 309710848 [ 78.488606][ T1446] total_mapped_file 4325376 [ 78.493181][ T1446] total_dirty 0 [ 78.496641][ T1446] total_writeback 0 [ 78.500439][ T1446] total_workingset_refault_anon 15 [ 78.505565][ T1446] total_workingset_refault_file 1152 [ 78.510844][ T1446] total_swap 127836160 [ 78.514922][ T1446] total_swapcached 65536 [ 78.519159][ T1446] total_pgpgin 159302 [ 78.523164][ T1446] total_pgpgout 82570 [ 78.527146][ T1446] total_pgfault 25921 [ 78.531360][ T1446] total_pgmajfault 12 [ 78.535357][ T1446] total_inactive_anon 102961152 [ 78.540219][ T1446] total_active_anon 206864384 [ 78.544938][ T1446] total_inactive_file 0 [ 78.549095][ T1446] total_active_file 4456448 [ 78.553623][ T1446] total_unevictable 0 [ 78.557614][ T1446] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.342,pid=1424,uid=0 [ 78.580238][ T1446] Memory cgroup out of memory: Killed process 1424 (syz.3.342) total-vm:90168kB, anon-rss:1012kB, file-rss:46848kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:0 [ 78.591291][ T11] usb 3-1: USB disconnect, device number 18 [ 78.604186][ T489] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 78.761157][ T489] usb 1-1: Using ep0 maxpacket: 8 [ 78.772429][ T489] usb 1-1: unable to get BOS descriptor or descriptor too short [ 78.780801][ T489] usb 1-1: config index 0 descriptor too short (expected 27597, got 18) [ 78.791711][ T489] usb 1-1: config 162 has too many interfaces: 76, using maximum allowed: 32 [ 78.800505][ T489] usb 1-1: config 162 has an invalid descriptor of length 96, skipping remainder of the config [ 78.821239][ T489] usb 1-1: config 162 has 0 interfaces, different from the descriptor's value: 76 [ 78.831868][ T489] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 78.841007][ T489] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.851135][ T489] usb 1-1: Product: syz [ 78.855304][ T489] usb 1-1: Manufacturer: syz [ 78.859895][ T489] usb 1-1: SerialNumber: syz [ 79.085444][ T489] usb 1-1: USB disconnect, device number 23 [ 79.106290][ T36] audit: type=1400 audit(1757408703.430:443): avc: denied { setopt } for pid=1526 comm="syz.2.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.127426][ T1527] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 79.141757][ T1527] rust_binder: Write failure EINVAL in pid:334 [ 79.252414][ T1528] SELinux: Context system_u:object_r:syslog_conf_t:s0 is not valid (left unmapped). [ 79.408714][ T36] audit: type=1400 audit(1757408703.730:444): avc: denied { relabelto } for pid=1523 comm="syz.3.360" name="rnullb0" dev="tmpfs" ino=349 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:syslog_conf_t:s0" [ 79.435555][ T36] audit: type=1400 audit(1757408703.760:445): avc: denied { associate } for pid=1523 comm="syz.3.360" name="rnullb0" dev="tmpfs" ino=349 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:syslog_conf_t:s0" [ 79.680882][ T1538] /dev/rnullb0: Can't open blockdev [ 79.814400][ T1549] cgroup: fork rejected by pids controller in /syz0 [ 79.884845][ T1583] can0: slcan on ptm0. [ 79.930847][ T36] audit: type=1400 audit(1757408704.250:446): avc: denied { read } for pid=1591 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.967180][ T1582] can0 (unregistered): slcan off ptm0. [ 79.973392][ T36] audit: type=1400 audit(1757408704.250:447): avc: denied { open } for pid=1591 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.019854][ T36] audit: type=1400 audit(1757408704.250:448): avc: denied { getattr } for pid=1591 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.094530][ T36] audit: type=1400 audit(1757408704.420:449): avc: denied { write } for pid=1590 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.133170][ T36] audit: type=1400 audit(1757408704.420:450): avc: denied { add_name } for pid=1590 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.156844][ T36] audit: type=1400 audit(1757408704.420:451): avc: denied { create } for pid=1590 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 80.185614][ T1615] /dev/rnullb0: Can't open blockdev [ 80.193713][ T1620] rust_binder: Error while translating object. [ 80.193761][ T1620] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 80.201297][ T1620] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:353 [ 80.210919][ T36] audit: type=1400 audit(1757408704.420:452): avc: denied { write } for pid=1590 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=2563 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 80.283718][ T1631] rust_binder: Failed copying into alloc: EFAULT [ 80.283744][ T1631] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 80.296035][ T1631] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 80.311174][ T1631] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:73 [ 80.383902][ T1650] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 80.560160][ T1677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.381'. [ 80.562233][ T1676] __vm_enough_memory: pid: 1676, comm: syz.0.382, bytes: 18014402804453376 not enough memory for the allocation [ 80.597314][ T1683] netlink: 'syz.2.384': attribute type 4 has an invalid length. [ 80.781179][ T11] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 80.800233][ T1691] cgroup: fork rejected by pids controller in /syz2 [ 80.814859][ T1690] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=568208745 (2272834980 ns) > initial count (932309172 ns). Using initial count to start timer. [ 80.882134][ T1826] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 80.888143][ T1826] syzkaller0: group set to 60928 [ 80.931168][ T11] usb 5-1: Using ep0 maxpacket: 8 [ 80.944112][ T11] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 80.961369][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.969686][ T1826] binder: Unknown parameter 'fscontext?}' [ 80.971173][ T11] usb 5-1: Product: syz [ 80.988654][ T11] usb 5-1: Manufacturer: syz [ 80.994493][ T11] usb 5-1: SerialNumber: syz [ 81.008165][ T1838] 9pnet_fd: Insufficient options for proto=fd [ 81.210617][ T11] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 81.232510][ T1850] rust_binder: 518: no such ref 0 [ 81.242472][ T1850] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 81.250048][ T1850] rust_binder: 518: no such ref 0 [ 81.291241][ T1867] /dev/rnullb0: Can't open blockdev [ 81.329226][ T1871] syzkaller0: entered promiscuous mode [ 81.334976][ T1871] syzkaller0: entered allmulticast mode [ 81.414498][ T45] usb 5-1: USB disconnect, device number 9 [ 81.421073][ T45] usblp0: removed [ 81.448697][ T1877] rust_binder: Write failure EFAULT in pid:531 [ 81.778732][ T1884] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:371 [ 81.891747][ T1891] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 81.900966][ T1891] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:378 [ 81.945838][ T1899] rust_binder: Write failure EFAULT in pid:85 [ 82.173653][ T1914] /dev/rnullb0: Can't open blockdev [ 82.251163][ T11] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 82.402492][ T11] usb 1-1: Using ep0 maxpacket: 8 [ 82.408636][ T11] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 82.417188][ T11] usb 1-1: config 179 has no interface number 0 [ 82.423522][ T11] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 82.434761][ T11] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 82.445990][ T11] usb 1-1: config 179 interface 65 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 82.456937][ T11] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 82.470324][ T11] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 82.479391][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 82.486969][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.495930][ T1905] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 82.642295][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.652523][ T9] usb 5-1: config 0 has no interfaces? [ 82.658047][ T9] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 82.667148][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.676010][ T9] usb 5-1: config 0 descriptor?? [ 82.705091][ T45] usb 1-1: USB disconnect, device number 24 [ 82.883452][ T1920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.892076][ T1920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.378047][ T1960] netlink: 20 bytes leftover after parsing attributes in process `syz.3.439'. [ 83.400977][ T1964] TCP: TCP_TX_DELAY enabled [ 83.420553][ T1966] overlayfs: failed to clone upperpath [ 83.461201][ T45] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 83.611171][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 83.617522][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.629003][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.640901][ T45] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 83.656964][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.669168][ T45] usb 1-1: config 0 descriptor?? [ 84.084543][ T1937] netlink: 36 bytes leftover after parsing attributes in process `syz.0.430'. [ 84.095282][ T45] konepure 0003:1E7D:2DB4.0003: unknown main item tag 0x0 [ 84.102535][ T45] konepure 0003:1E7D:2DB4.0003: unknown main item tag 0x0 [ 84.109681][ T45] konepure 0003:1E7D:2DB4.0003: unknown main item tag 0x0 [ 84.116914][ T45] konepure 0003:1E7D:2DB4.0003: unknown main item tag 0x0 [ 84.124745][ T45] konepure 0003:1E7D:2DB4.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.0-1/input0 [ 84.300124][ T1937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=1937 comm=syz.0.430 [ 84.313404][ T45] usb 1-1: USB disconnect, device number 25 [ 84.360212][ T2031] overlayfs: failed to clone upperpath [ 84.425937][ T2034] netlink: 20 bytes leftover after parsing attributes in process `syz.3.466'. [ 84.798840][ T2041] overlayfs: failed to resolve './bus': -2 [ 84.866127][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 84.866144][ T36] audit: type=1400 audit(1757408709.190:467): avc: denied { connect } for pid=2054 comm="syz.2.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.906846][ T2057] netlink: 'syz.2.475': attribute type 3 has an invalid length. [ 84.917933][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 84.937907][ T2060] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=2060 comm=syz.2.476 [ 84.951526][ T2060] netlink: 188 bytes leftover after parsing attributes in process `syz.2.476'. [ 85.215278][ T2065] af_packet: tpacket_rcv: packet too big, clamped from 3 to 4294967272. macoff=96 [ 85.228331][ T36] audit: type=1400 audit(1757408709.550:468): avc: denied { create } for pid=2064 comm="syz.3.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 85.257094][ T9] usb 5-1: USB disconnect, device number 10 [ 85.271965][ T36] audit: type=1400 audit(1757408709.550:469): avc: denied { sys_admin } for pid=2064 comm="syz.3.478" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 85.293556][ T36] audit: type=1400 audit(1757408709.550:470): avc: denied { associate } for pid=2069 comm="syz.3.478" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 85.316593][ T36] audit: type=1326 audit(1757408709.600:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2070 comm="syz.4.479" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff4f6f8ebe9 code=0x0 [ 85.641165][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 85.792221][ T9] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 85.801241][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.811355][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 85.820296][ T9] usb 5-1: config 1 has no interface number 0 [ 85.826415][ T9] usb 5-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 85.837255][ T9] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 85.851759][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 85.860926][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.868942][ T9] usb 5-1: Product: syz [ 85.873136][ T9] usb 5-1: Manufacturer: syz [ 85.877718][ T9] usb 5-1: SerialNumber: syz [ 86.053122][ T2090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.486'. [ 86.062045][ T2091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.486'. [ 86.517734][ T2119] fuse: Invalid rootmode [ 86.951191][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 86.951191][ T536] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 87.062097][ T36] audit: type=1400 audit(1757408711.390:472): avc: denied { remount } for pid=2137 comm="syz.0.500" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 87.432607][ T2160] ------------[ cut here ]------------ [ 87.433992][ T36] audit: type=1400 audit(1757408711.760:473): avc: denied { mount } for pid=2166 comm="syz.3.509" name="/" dev="configfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 87.438191][ T2160] WARNING: CPU: 1 PID: 2160 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 87.467991][ T36] audit: type=1400 audit(1757408711.790:474): avc: denied { getopt } for pid=2166 comm="syz.3.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.470337][ T2160] Modules linked in: [ 87.493609][ T2160] CPU: 1 UID: 0 PID: 2160 Comm: syz.0.507 Not tainted syzkaller #0 1976820a860199aae9d2abf4727fc3b97aa7bbea [ 87.505148][ T2160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 87.515271][ T2160] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 87.521237][ T2160] Code: 00 48 8b 5d a0 74 08 48 89 df e8 c2 4e 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d e9 18 e0 20 04 cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 87.540881][ T2160] RSP: 0018:ffffc9000cd77888 EFLAGS: 00010202 [ 87.546996][ T2160] RAX: 1ffffd1ffff862fa RBX: ffffc9000edca8e8 RCX: ffffffff816dc9a9 [ 87.555039][ T2160] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc317d0 [ 87.563314][ T2160] RBP: ffffc9000cd778f0 R08: ffffe8ffffc317d7 R09: 1ffffd1ffff862fa [ 87.571327][ T2160] R10: dffffc0000000000 R11: fffff91ffff862fb R12: dffffc0000000000 [ 87.579396][ T2160] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc317d0 [ 87.587582][ T2160] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 87.596650][ T2160] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.603367][ T2160] CR2: 00007fb4c7ce5f98 CR3: 000000011b9ac000 CR4: 00000000003526b0 [ 87.611401][ T2160] Call Trace: [ 87.614710][ T2160] [ 87.617633][ T2160] kvm_put_kvm+0x1100/0x12b0 [ 87.622276][ T2160] ? __cfi_kvm_vm_release+0x10/0x10 [ 87.627573][ T2160] kvm_vm_release+0x47/0x70 [ 87.632134][ T2160] __fput+0x1fe/0xa00 [ 87.636167][ T2160] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 87.641743][ T2160] ____fput+0x20/0x30 [ 87.645856][ T2160] task_work_run+0x1e3/0x250 [ 87.650544][ T2160] ? __cfi_task_work_run+0x10/0x10 [ 87.655724][ T2160] ? __kasan_check_write+0x18/0x20 [ 87.660850][ T2160] do_exit+0x9bc/0x2630 [ 87.665045][ T2160] ? __cfi_do_exit+0x10/0x10 [ 87.669646][ T2160] ? __kasan_check_write+0x18/0x20 [ 87.674835][ T2160] ? _raw_spin_lock_irq+0x8d/0x120 [ 87.679962][ T2160] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 87.685559][ T2160] do_group_exit+0x22a/0x300 [ 87.690155][ T2160] ? __kasan_check_write+0x18/0x20 [ 87.695303][ T2160] get_signal+0x139d/0x14f0 [ 87.699824][ T2160] arch_do_signal_or_restart+0x96/0x720 [ 87.705424][ T2160] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 87.711615][ T2160] ? _raw_spin_lock_irq+0x8d/0x120 [ 87.716908][ T2160] ? __kasan_check_write+0x18/0x20 [ 87.722073][ T2160] ? recalc_sigpending+0x185/0x1d0 [ 87.727192][ T2160] ? _raw_spin_unlock_irq+0x45/0x70 [ 87.732445][ T2160] ? calculate_sigpending+0x81/0x90 [ 87.737656][ T2160] syscall_exit_to_user_mode+0x58/0xb0 [ 87.743170][ T2160] ret_from_fork+0x3a/0xa0 [ 87.747601][ T2160] ret_from_fork_asm+0x1a/0x30 [ 87.752412][ T2160] RIP: 0033:0x7f37aebc3449 [ 87.756848][ T2160] Code: Unable to access opcode bytes at 0x7f37aebc341f. [ 87.764214][ T2160] RSP: 002b:00007f37ad5d61c0 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3 [ 87.772660][ T2160] RAX: 0000000000000000 RBX: 00007f37aeb45830 RCX: 00007f37aebc3449 [ 87.780655][ T2160] RDX: 00007f37aeb45830 RSI: 0000000000000058 RDI: 00007ffe31e14b70 [ 87.788696][ T2160] RBP: 00007f37ad5d66c0 R08: 00007f37ad5d66c0 R09: 00007ffe31e14c57 [ 87.796714][ T2160] R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffa8 [ 87.804809][ T2160] R13: 000000000000000b R14: 00007ffe31e14b70 R15: 00007ffe31e14c58 [ 87.812817][ T2160] [ 87.815842][ T2160] ---[ end trace 0000000000000000 ]--- [ 88.283801][ T9] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 88.295664][ T9] usb 5-1: USB disconnect, device number 11