last executing test programs: 1m18.004280589s ago: executing program 0 (id=18): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"]) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x43, 0xda1, 0x8, 0x2004cb, 0x0, 0x100001000000, 0xfffffffffffffffe, 0x1, 0x8000, 0x3], 0x3000, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000009800), 0x0, 0x40002100, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0x8000) msync(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x4) prlimit64(0x0, 0x0, &(0x7f0000000300)={0x0, 0x9c}, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 1m17.95857199s ago: executing program 0 (id=19): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x3000) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x0, 0x0}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0xa8, 0x0, 0x3}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f00000012c0)=[{&(0x7f0000000080)=""/152, 0x98}, {&(0x7f0000000000)=""/61, 0x3d}], 0x2, &(0x7f00000015c0)=[{&(0x7f0000001340)=""/189, 0xbd}, {0x0}], 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$negate(0xd, 0x0, 0x6, r3) eventfd(0x170cbf9) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='%\'\x00', 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x0, 0xf}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) r4 = dup3(r0, r0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000001c0), 0x4) 1m17.93804232s ago: executing program 0 (id=20): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000040)=""/32, &(0x7f0000000080)=0x20) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000000c0)={0x1, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e24, @multicast2}}}, 0x108) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000021c0)=ANY=[@ANYBLOB="3d8879"]) 1m17.848371701s ago: executing program 0 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x18d) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x395e000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r3, 0x0, 0x1fffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000040)='./file1\x00', 0x40) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x55) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee01) tkill(r5, 0x12) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000380)=[@increfs_done, @register_looper, @release], 0x0, 0x0, 0x0}) 1m17.640206164s ago: executing program 0 (id=25): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d81"], 0x0) getdents64(r0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) mknod$loop(0x0, 0xfff, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x3a, 0x1, 0x0, 0x2248485b15138871) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs(r2, &(0x7f0000000080)='net/xfrm_stat\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0xffffffff}, 0x10) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x103183, 0x0) close_range(r0, r4, 0x0) 1m17.590112945s ago: executing program 0 (id=27): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) listen(r2, 0x3) fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c9130001", 0x1f}], 0x1}, 0x0) socket(0x10, 0x80002, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r8, &(0x7f0000000000), 0xfffffecc) splice(r7, 0x0, r1, 0x0, 0x4ffe6, 0x12) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r9 = dup(r6) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x3, 0x80ef, 0x2}}, 0x30) getresuid(&(0x7f0000000800), &(0x7f0000000000), &(0x7f0000000340)) pwritev2(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)="32a1204683ab9df88085f7e44411f7bead3d197bbc48a3153aa387e48d35293e5cd4404a3f353420cbbc6b84b792f39b6461d3d17d749d2ee3d0f89467f498", 0x3f}], 0x1, 0x0, 0xfffffffa, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = getpid() sendmsg$netlink(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r11, r3, r4}}}], 0x20, 0x4}, 0x0) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r13 = mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r12, 0x0) r14 = syz_open_dev$evdev(&(0x7f0000000300), 0x22800, 0x40) ioctl$EVIOCGVERSION(r14, 0x80044501, &(0x7f0000000200)=""/121) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000600)=[@free_buffer={0x40086303, r13}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x10a}, @ptr={0x70742a85, 0x1, &(0x7f00000002c0)=""/47, 0x0, 0x0, 0x1d}}, &(0x7f00000005c0)}, 0x400}, @register_looper, @exit_looper, @exit_looper, @register_looper], 0xffffff75, 0x0, &(0x7f0000000140)="f3"}) close(r12) 1m17.537333086s ago: executing program 32 (id=27): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) listen(r2, 0x3) fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c9130001", 0x1f}], 0x1}, 0x0) socket(0x10, 0x80002, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r8, &(0x7f0000000000), 0xfffffecc) splice(r7, 0x0, r1, 0x0, 0x4ffe6, 0x12) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r9 = dup(r6) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x3, 0x80ef, 0x2}}, 0x30) getresuid(&(0x7f0000000800), &(0x7f0000000000), &(0x7f0000000340)) pwritev2(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)="32a1204683ab9df88085f7e44411f7bead3d197bbc48a3153aa387e48d35293e5cd4404a3f353420cbbc6b84b792f39b6461d3d17d749d2ee3d0f89467f498", 0x3f}], 0x1, 0x0, 0xfffffffa, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = getpid() sendmsg$netlink(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r11, r3, r4}}}], 0x20, 0x4}, 0x0) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r13 = mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r12, 0x0) r14 = syz_open_dev$evdev(&(0x7f0000000300), 0x22800, 0x40) ioctl$EVIOCGVERSION(r14, 0x80044501, &(0x7f0000000200)=""/121) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000600)=[@free_buffer={0x40086303, r13}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x10a}, @ptr={0x70742a85, 0x1, &(0x7f00000002c0)=""/47, 0x0, 0x0, 0x1d}}, &(0x7f00000005c0)}, 0x400}, @register_looper, @exit_looper, @exit_looper, @register_looper], 0xffffff75, 0x0, &(0x7f0000000140)="f3"}) close(r12) 1m15.739249151s ago: executing program 4 (id=48): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @flat=@handle={0x73682a85, 0x0, 0x1}, @fda={0x66646185, 0x5, 0x0, 0x34}}, &(0x7f00000004c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000280)=""/76, 0x4c, 0x22, &(0x7f0000000300)=@in={0x2, 0x4e1d, @loopback}, 0x80) 1m15.616905884s ago: executing program 4 (id=49): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x82000, 0x0) r2 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x2008}) select(0x0, 0x0, 0x0, 0x0, 0x0) close(r1) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000240)='+#(.\x00') ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000800)=""/92) 1m14.806014325s ago: executing program 4 (id=58): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000300)={0x0, 0x9c}, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/215, 0xd7}], 0x1, &(0x7f00000004c0)=[{0x0}, {0x0}], 0x2, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x80087601, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000040)=0x20, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x800, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) prlimit64(0x0, 0x0, &(0x7f0000000300)={0x0, 0x9c}, 0x0) (async) prlimit64(0x0, 0xc, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) close(r1) (async) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) (async) process_vm_readv(0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/215, 0xd7}], 0x1, &(0x7f00000004c0)=[{0x0}, {0x0}], 0x2, 0x0) (async) ioctl$TUNGETDEVNETNS(r1, 0x80087601, 0x0) (async) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000040)=0x20, 0x4) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) (async) 1m14.792294365s ago: executing program 4 (id=59): r0 = syz_clone(0x20042400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) ptrace(0x4207, r0) ptrace$pokeuser(0x6, r0, 0x1, 0x5) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) dup(r1) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x5e1e, 0x2, @mcast1, 0xfffffffd}, 0x1c) getsockopt$sock_buf(r2, 0x1, 0x19, 0x0, &(0x7f0000003080)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="8b2f2000000000020000010400000c009900"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, 0x0) r6 = openat(r5, &(0x7f0000000040)='./cgroup\x00', 0x40000, 0x35) read$FUSE(r6, &(0x7f0000002a40)={0x2020}, 0x2020) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/255, 0xff, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x9, 0x18, 0x40}}, 0x10}], 0x52, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"}) 1m14.703484036s ago: executing program 4 (id=60): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0xa6}) r1 = timerfd_create(0x9, 0x800) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000001040)={0x40, 0x2, 0x3}, 0x10) (async, rerun: 32) bind$tipc(r2, 0x0, 0x0) (async, rerun: 32) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/locks\x00', 0x0, 0x0) timerfd_settime(r3, 0x2, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000340)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = socket$unix(0x1, 0x5, 0x0) r6 = dup2(r5, r4) close_range(r6, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r7, 0x800448d3, 0x0) (async) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) (async, rerun: 32) r9 = signalfd4(r1, &(0x7f0000000100)={[0x140000000000000]}, 0x8, 0x800) (rerun: 32) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r8, 0x7, r1, &(0x7f00000001c0)={r9, r1, 0x2}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f00003b1000/0x1000)=nil, 0x1000}, 0x1}) (async) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) (async) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/key-users\x00', 0x0, 0x0) pread64(r10, &(0x7f00000002c0)=""/124, 0x7c, 0x7) (async) setsockopt$MRT6_ADD_MFC(r10, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x7, @empty, 0xb86}, {0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1, {[0x1, 0x400, 0x2, 0x1ff, 0x7, 0x8, 0xfff, 0xc]}}, 0x5c) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) 1m14.702554596s ago: executing program 4 (id=61): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1c02, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x80000002}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x3) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sctp\x00') r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)={0x178, r6, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7de1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x119f}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0x11c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3, @mcast1, 0x3}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xfff, @dev={0xfe, 0x80, '\x00', 0x17}, 0x1f5}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @mcast2, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xffffffff, @mcast1, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x2, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010102}}}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffeff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb19}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) close(r3) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000d00)=@flushsa={0x14, 0x1c, 0x173040933d947bfb, 0x70bd29, 0x25dfdbfb, {0x32}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) sendmsg$inet(r8, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'], 0x38}, 0xc804) close_range(r0, 0xffffffffffffffff, 0x0) 1m14.648317227s ago: executing program 33 (id=61): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1c02, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x80000002}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x3) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sctp\x00') r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)={0x178, r6, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7de1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x119f}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0x11c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3, @mcast1, 0x3}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xfff, @dev={0xfe, 0x80, '\x00', 0x17}, 0x1f5}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @mcast2, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xffffffff, @mcast1, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x2, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010102}}}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffeff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb19}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) close(r3) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000d00)=@flushsa={0x14, 0x1c, 0x173040933d947bfb, 0x70bd29, 0x25dfdbfb, {0x32}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) sendmsg$inet(r8, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'], 0x38}, 0xc804) close_range(r0, 0xffffffffffffffff, 0x0) 15.468541237s ago: executing program 1 (id=585): openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) chdir(&(0x7f0000000040)='./file0\x00') getrlimit(0x6, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='huge=always']) lsm_list_modules(&(0x7f0000000000)=[0x0, 0x0, 0x0], &(0x7f0000000040)=0x18, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000180)={0xb, 0x29, 0x2, {0x202}}, 0xb) fallocate(r0, 0x0, 0xfea000, 0x2000402) 15.419214488s ago: executing program 1 (id=586): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x2015, 0x100000000000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r2, &(0x7f0000000200)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x0, @remote}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x18, 0x0, &(0x7f0000000180)=[@increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, &(0x7f00000002c0)={'#! ', './file0/file0', [{0x20, '\xaa\xaa\xaa\xaa\xaa\xa7\xd2\xc2\xb4\xa5:\x89<\xce\xb7\xbf\xf6\x16\xe3\xaa\xf4\xc6\xe8\xebzu\x90^\xfe\x031\xc4\x8fB\xcd?\xabaO3\x16\f\xa6{Km\x19\xd3\x1e\xad<\xe3r\x9aH\x15\xfd\xc3\x19\x9cQ}\\\xe5\x96\xb0_\x90\xe1n^6s\x8b\x9a(\xd2\'!\xe3,\xd3\x03\xe1\xa6\xba\xb8j\xb9\x91H\xc0\xe1\xe8\xdb\x84\xc2c\xb1\xeaA\xb7\xdb=o\xc7\x16D\xc1\xff\x83\f\xc3\x98 }2\x91\xde\xeeb\b\x0eB\x14p*\xa3\x145>\xe5\x14\xc4`Q\xa9\x1f@\x83VY\xb4q\xaf]Y\x05\xa5~\xde\xa3\xa9\xa5=\\\xbdLysy\x88h\xdd\xa6V\xabJ\xff\x9a\xb8\xa1Ejl\xe7e\xa0\x9eV\xd4f\xe2\xb8\xee\xf0=\xcdb\xdd[\xe5\xab\\Zp\x8f\xe9YZ~\xb8r\x11\xeb\x87cZI\xa4p\xe0\xb1\x1c\xd0C\x95\x95^K~3\xd9=G\xeb\xb3\xfe'}]}, 0xf6) close(r3) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000004b80), 0x80000, 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) write$char_usb(r3, &(0x7f0000000000)="77fa8e626f59be9fc1852b", 0xb) 15.370251129s ago: executing program 1 (id=587): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, &(0x7f0000000200)={[{@huge_always}, {}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) 15.358087069s ago: executing program 1 (id=588): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff"], 0x52) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}]}}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000280)=0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x0, 0xffffffffffffffff}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000000)={0x0, 0x2, 0x1b9, 0x7fffffff}) fcntl$lock(r4, 0x24, &(0x7f0000000140)={0x0, 0x0, 0x4000000081, 0xfffffffffffffff9}) mkdirat(r4, &(0x7f0000000080)='./file0\x00', 0x31) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000580)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x3fffffffffffffff, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x18, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) 15.288209s ago: executing program 1 (id=589): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000005500)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000014c0)={0x2020}, 0x2020) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x0) (async) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) getpid() (async) r3 = getpid() syz_pidfd_open(r3, 0x0) tkill(r3, 0x36) (async) tkill(r3, 0x36) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x96a) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="1b2388a8"], 0xffdd) ioctl$RTC_AIE_OFF(r1, 0x7002) (async) ioctl$RTC_AIE_OFF(r1, 0x7002) 15.26436713s ago: executing program 1 (id=590): ioprio_set$pid(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) 15.205201842s ago: executing program 34 (id=590): ioprio_set$pid(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) 5.56426897s ago: executing program 2 (id=709): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000000)='/dev/audio#\x00') r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0022220000009623131e0b0093d12f3eb82a002827020000008304"], 0x0}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x5) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 3.935893573s ago: executing program 2 (id=716): creat(&(0x7f0000000000)='./file0\x00', 0x112) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0xc18da8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getuid() r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) keyctl$chown(0x4, 0x0, r8, r9) fstat(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r11}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r11, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r11, &(0x7f0000002280)={0x50, 0x0, r12, {0x7, 0x9, 0x0, 0x110002, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r11, &(0x7f0000007080)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r11, &(0x7f0000009080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r11, &(0x7f0000000080)={0x10, 0x0, r15}, 0x10) syz_fuse_handle_req(r11, &(0x7f0000002380)="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", 0x2000, &(0x7f0000004b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000045c0)={0x78, 0x0, 0x10006, {0x8, 0x7, 0x0, {0x0, 0x8001, 0x1, 0x40000000000, 0x4, 0x100000000004, 0xe767, 0x8, 0x10000, 0x8000, 0xffffffff, r13, r14, 0x80000001}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000008380)="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", 0x2000, &(0x7f0000000f40)={&(0x7f0000000280)={0x50, 0x0, 0x8aba, {0x7, 0x2b, 0xd, 0x400010, 0x6, 0x3, 0x9, 0x3, 0x0, 0x0, 0x20, 0x581}}, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x8}}, &(0x7f0000000340)={0x18, 0x0, 0xb, {0x2}}, &(0x7f0000000380)={0x18, 0xffffffffffffffda, 0x83, {0x9}}, &(0x7f00000003c0)={0x18, 0x0, 0x8, {0x7ff}}, &(0x7f0000000400)={0x28, 0x0, 0xa, {{0x5, 0x8, 0x1}}}, &(0x7f0000000440)={0x60, 0x0, 0x8, {{0x78fd, 0x759f, 0x0, 0x8d, 0x7, 0x78, 0x0, 0xfffffff7}}}, &(0x7f00000004c0)={0x18, 0x0, 0x7fff, {0x8}}, &(0x7f0000000500)={0x1a, 0xfffffffffffffff5, 0x7, {'/dev/fuse\x00'}}, &(0x7f0000000540)={0x20, 0xfffffffffffffffe, 0x1, {0x0, 0x1}}, &(0x7f0000000640)={0x78, 0x0, 0x3, {0x3, 0x4, 0x0, {0x4, 0x7fffffffffffffff, 0x7, 0x0, 0x2, 0x0, 0x8, 0x9, 0x80000001, 0xa000, 0x8d, r5, r3, 0x3, 0x7f}}}, &(0x7f00000006c0)={0x90, 0xfffffffffffffff5, 0x8, {0x4, 0x1, 0xa, 0x45dbf04d, 0x9, 0x2, {0x800, 0x7f9b, 0x5, 0xcd8b, 0x76, 0x63, 0x80, 0x0, 0xf69, 0xc000, 0x0, r2, r3, 0x6, 0x3}}}, &(0x7f000000b0c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0x288, 0xffffffffffffffda, 0x8, [{{0x6, 0x1, 0x3, 0x1ff, 0x0, 0x3, {0x0, 0x5, 0x800, 0x8, 0x4, 0x9, 0x10c8c1c3, 0x4, 0x2, 0x8000, 0x1, r2, r3, 0x8, 0x9}}, {0x3, 0xdd, 0x5, 0x8, 'fuse\x00'}}, {{0x6, 0x2, 0x8000, 0x263, 0x4, 0x20, {0x6, 0x8001, 0xf32, 0x100000000, 0x5, 0x9, 0x7f, 0x0, 0x7, 0x4000, 0x4e7, r6, r9, 0x2, 0x4}}, {0x4, 0x8001, 0x8, 0x1, 'seclabel'}}, {{0x6, 0x0, 0xfffffffffffffe00, 0x7, 0x2, 0x2, {0x0, 0x0, 0xad1b, 0x2, 0x5, 0x100000000000, 0x7, 0xa, 0x9, 0x4000, 0x9, r2, r3, 0x1800000, 0x1}}, {0x4, 0xffffffffffff011d, 0x0, 0xed24}}, {{0x5, 0x3, 0x3, 0x1576, 0x8, 0x80000000, {0x1, 0x8000, 0x7, 0x6, 0x1, 0x0, 0x200, 0x4, 0xffff8001, 0x2000, 0x9, r2, r10, 0x7, 0x1}}, {0x3, 0x8000000000000000, 0x4, 0x8, '^%##'}}]}, &(0x7f0000000d40)={0xa0, 0x0, 0x7, {{0x2, 0x2, 0x88, 0x1c5, 0x78, 0x2, {0x1, 0x9, 0x8, 0x100, 0x1, 0xe, 0x0, 0xc, 0x1, 0x4000, 0xff, r2, r3, 0xff, 0x2}}, {0x0, 0x4}}}, &(0x7f0000000c40)={0x20, 0xffffffffffffffda, 0x589, {0x8, 0x4, 0x0, 0x9}}, &(0x7f0000000e00)={0x130, 0x0, 0x5, {0x194ed0fe, 0x6, 0x0, '\x00', {0x40, 0x2, 0x7, 0xd5, r2, r14, 0x4000, '\x00', 0x1, 0x10, 0x0, 0x2, {0x2, 0x7}, {0xfffffffffffff801, 0x4}, {0x2, 0x2}, {0x3, 0x1ff}, 0x6d, 0x3, 0x1, 0x4}}}}) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x0, {0x0, 0x2, 0x0, {0x0, 0x4000000, 0x0, 0x100, 0x0, 0x0, 0x8000000, 0x8000, 0x200, 0x8000, 0x0, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r16 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x0) write$tcp_congestion(r16, &(0x7f0000000180)='scalable\x00', 0x9) dup2(r16, r0) r17 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r17, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) recvmsg(r17, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x23) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000006200)=ANY=[@ANYBLOB="7365636c616203000000724e4cb030b1d59469b67103000000de23834a7facfb1c2afc1b33f58504f4cf86ce00128968"]) syz_open_procfs(r4, &(0x7f0000000100)='net/sockstat6\x00') 3.136021074s ago: executing program 2 (id=722): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000017c0)=ANY=[@ANYBLOB="0500000000000000910300000000000006000000000000007b0b00000000000007000000000000008e0a000000000000ff00000000000000400800000000000003000000000000003d0a0000000000000900000000000000574796815657b39b380399c836080f114e"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x43, 0xda1, 0x8, 0x2004cb, 0x0, 0x100001000000, 0xfffffffffffffffe, 0x1, 0x47, 0x3], 0x3000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket(0x10, 0x803, 0x0) 3.009472796s ago: executing program 2 (id=723): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x24, 0x2e, 0x21, 0x0, 0x0, {0x19}, [@generic="a890bf6b68b722a6fbc30cf96f"]}, 0x24}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x84, 0x0, &(0x7f00000003c0)=[@acquire_done, @dead_binder_done, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000480)={@ptr={0x70742a85, 0x1, &(0x7f00000005c0)=""/149, 0x95, 0x2, 0xb5}, @ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/103, 0x67, 0x1, 0x3}, @fd}, &(0x7f0000000000)={0x0, 0x28, 0x50}}, 0x1000}, @dead_binder_done, @dead_binder_done], 0x50, 0x0, &(0x7f00000002c0)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) 3.008877156s ago: executing program 2 (id=724): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) fcntl$getflags(r1, 0x408) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620b, 0xfffffffffffffffe) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000240)={r3, 0x5, 0xd3, 0x6}) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000006c0)={0x30, 0x5, 0x0, {0x0, 0x6, 0xba}}, 0x30) write$vga_arbiter(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='lock i'], 0xc) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000700)={0x2, 0x5}) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f00000002c0)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x54, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@weak_handle={0x77682a85, 0x1001, 0x3}, @fd={0x66642a85, 0x0, r6}, @ptr={0x70742a85, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}, @release={0x40046306, 0x3}], 0x5a, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948409bc69ce5464f37"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) fcntl$getflags(r1, 0x408) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620b, 0xfffffffffffffffe) (async) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000240)={r3, 0x5, 0xd3, 0x6}) (async) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000006c0)={0x30, 0x5, 0x0, {0x0, 0x6, 0xba}}, 0x30) (async) write$vga_arbiter(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='lock i'], 0xc) (async) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000700)={0x2, 0x5}) (async) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f00000002c0)) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x54, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@weak_handle={0x77682a85, 0x1001, 0x3}, @fd={0x66642a85, 0x0, r6}, @ptr={0x70742a85, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}, @release={0x40046306, 0x3}], 0x5a, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948409bc69ce5464f37"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) (async) 2.941436448s ago: executing program 2 (id=725): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120141014813442024040075ee69e30103010902240001000010000904b8070296d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001580)={0x44, &(0x7f0000001280)={0x40, 0xf, 0x4, "6496c0a4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001100)={0x84, &(0x7f0000000c00)={0x20, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000013c0)={0x34, &(0x7f00000012c0)={0x40, 0xe, 0x4, "4ccf8ee5"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.516918118s ago: executing program 3 (id=730): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xff}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xf2d}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xee}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000000}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x10e, 0x484, 0x0, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r2) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x24, r3, 0xb88df4a44738005f, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x20040010) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xf0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x40, 0x0, 0x9, 0x7, {{0xb, 0x4, 0x0, 0x34, 0x2c, 0x67, 0x0, 0x6, 0x2f, 0x0, @remote, @local, {[@rr={0x7, 0xb, 0xa4, [@private=0xa010101, @loopback]}, @generic={0x86, 0xb, "5c8c56e2cb593e745e"}]}}}}}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000001180)={0xf10, r3, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_PEERS={0x9b4, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "41d241c93eb6ae171bb317499cb9b6c92110526aa9716fef92725d8a614527d5"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x69e4, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x81}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x98, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xe, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "10aebb35b0031d144145aa1cd04689d941615f105f8499c6d088b8176607619c"}]}, {0x60, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x84, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @broadcast}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xdc1, @loopback, 0x6}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x0, @remote, 0xcd0}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x74, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x0, @private2, 0x4}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7550a9dbdb4223b3a7f62b8ffc7175492a140039813f6fe14f26fad2996fb7e4"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1a17699f14f7462417dda995980ff6e070c7686d653f31d5e2253e492c806dcb"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8a0b}]}, {0x3bc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4c225a9bce2fa42fbe7e818b7b3011c1a69958c1cc58695ab8a3b020fdb25a91"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x400}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @remote}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x330, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1b}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x44}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @empty}}]}, {0x2d4, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x288, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x4}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x148, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x43}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @local}}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010102}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @broadcast}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "111f6fa4da4588dcdd01245232ae8dda30a4a5a0d3c2da40665866361b917b10"}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_PEERS={0x4d8, 0x8, 0x0, 0x1, [{0x3a8, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}, @WGPEER_A_ALLOWEDIPS={0x35c, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x33}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x40, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4ddc5a82bebc99d16d80982ae629db3790d7718f781490a836466fbb6b43f378"}]}, {0x88, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "32d25f26bc6353486c55c8815a3e4c1d2870a1e11c5f88057cfafa652ddfae8c"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c1c5d14e1a8192a2d9ed47ed82d512990422d38420e1f4799000da46e5b245b2"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x58, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x0, @mcast1, 0x101}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b7f6206d8250ee84ea6108e18cd257761117ec4da7d1331403362a48aed2761f"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0xf10}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040001) fadvise64(r4, 0xb, 0x0, 0x6) read(r4, &(0x7f0000000040)=""/106, 0x6a) 1.461485478s ago: executing program 3 (id=731): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000910300000000000006000000000000007b0b00000000000007000000000000008e0a000000000000ff00000000000000400800000000000003000000000000003d0a0000000000000900000000000000574796815657b39b380399c836080f114e"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x5, 0x3, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1, 0x0, 0x43, 0xda1, 0x8, 0x2004cb, 0x0, 0x100001000000, 0xfffffffffffffffe, 0x1, 0x8004, 0x3], 0x3000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket(0x10, 0x803, 0x0) socket$igmp(0x2, 0x3, 0x2) 1.408472459s ago: executing program 3 (id=732): r0 = syz_open_dev$loop(&(0x7f0000000000), 0xf90, 0x48040) ioctl$LOOP_CLR_FD(r0, 0x4c01) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0xff4f370c567f0000) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r3, 0x45809000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)) 1.3964106s ago: executing program 3 (id=733): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80000) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r3, 0x4068aea3, &(0x7f0000000140)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r6, &(0x7f00000024c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002480)={&(0x7f0000002000)=ANY=[@ANYBLOB="2c040000f303000127bd7000fbdbdf251000000003000000310000000800000002000000000018000300000009000000070000004cc0000007000000060000000800000001800000001000000180000001000000010100000300000005000000080000000900000000000000d5f6ffff0800000009000000090000000300000002000000090000000b000000ff070000f7ffffff090000000100000000000100080000000700000005000000090000000002000007000000fe7f0000050000000500000006000000cf000000070000001000000000000000ff0f00000200000006000000fa710000030000000f050000d80600000600000007000000070000000a0000000400000001040000f10b00000400000002000000030000000600000006000000030000000400000007000000020000000180000000020000ffffffffe30f0000ff030000ff03000000000000ff7f000005000000fffffffff3c20000b6000000ff0000000800000004000000030000000900000008000000050000000400000009000000e50a9e02d0ab73e309000000030000000101000010000000fea000001a000000d5030000100000000100000008000000ff0000000080000001000000000800002d0200000800000008000000ff0f0000010000000100000001f0ffff0800000003000000020000001000000051000000060000000900000000000100c0ffffff03000000030000000600000012600000d80e000006000000ffff00000a07000008000000030000009a7b00000000000000000000001000000400000003000000090000000002000001000000d4ffffff050000000400000000000000000800000200000088c7902a00080000070000000400000009000000be920000100000000700000009000000010000000700000056000000020000004909000006000000060000000400000000080000285c00000700000007000000000200004301000008000000ae0b0000000000007d610000050000000a00000005000000020000000800000002000000dd0000007f0000000100000002000000010000000600000003000000050000008000000004000000020000000a000000060000000100000003000000010000000800000002000000070000000300000000000000070000000a0000000b0000008000000001000000000000000500000004000000018000000200000003000000030000000300000004000000ad9b0000080000000300000006000000010000800500000001000000dd0b000000100000400000000000000004000000080000000200000003000000ff0100003a08000005000000010000000600000017000000040000000100008005000000040000000001000007000000ff03000003000000080000007f000000080000000600000003000000080000000f000000f9ffffff0600000005000000090000000b0000002426005e3a5c295ee7000000"], 0x42c}, 0x1, 0x0, 0x0, 0x800}, 0x8044) setuid(0xee00) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000440)={0x7f}, 0xffffff64) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a00000002100010027bd7000fbdbdf25fc000000000000000000000000000000000000000000000000000000000000004e2338b64e220037020020a087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b76b6e000000000050001100200100000000000000000000000000010000000000000000000000000000000100000000000000000000000000000000ff010000000000000000000000000001ff0300000535000002000a00c484ab73b892d3b4a2af577fa73bc1111b7e00d1b27ce1a88d0af0a9f4e32148c8f120c9ea827e4d14a60fb19a625628852f4685d9b920bc77b8ae1bf588c1cb252ccb002b33419077904ab2b9d9545f1701e42648716020c7f41cf70e789e3149169a"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x24040010) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x17, 0x0, 0x0) mmap(&(0x7f0000cf9000/0x4000)=nil, 0x4000, 0x2000004, 0x12, r1, 0x8ca1b000) 1.148296133s ago: executing program 3 (id=734): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) (async) setuid(0xee00) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) clock_gettime(0x0, &(0x7f0000000100)) nanosleep(&(0x7f0000000180), 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f00000003c0)=ANY=[], 0x10) (async) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f00000003c0)=ANY=[], 0x10) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x6, 0x0, 0x0) (async) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x6, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) (async) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8008550e, 0x0) (async) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8008550e, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) (async) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="35b932808bcf"}) write$cgroup_subtree(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e46558"], 0xfdef) (async) write$cgroup_subtree(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e46558"], 0xfdef) pread64(r5, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 1.103165594s ago: executing program 3 (id=735): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120141014813442024040075ee69e30103010902240001000010000904b8070296d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001580)={0x44, &(0x7f0000001280)={0x40, 0xf, 0x4, "6496c0a4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001100)={0x84, &(0x7f0000000c00)={0x20, 0x30, 0x4, "aa8208d2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000013c0)={0x34, &(0x7f00000012c0)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000400)={0x0, 0x12, 0x4, "9e39d9e1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 777.790408ms ago: executing program 6 (id=742): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x931766f6319eed40) shutdown(0xffffffffffffffff, 0x1) mount(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f00000001c0)='vxfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) syz_genetlink_get_family_id$mptcp(0x0, r2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x200000c0) ftruncate(r3, 0x2007ffb) sendfile(r3, r3, 0x0, 0x1000000201005) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendfile(r5, r4, 0x0, 0x7ffff000) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x8b22, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f422741b13103e52f400", [0x0, 0x2000000000001]}}) ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x2, 0x74, 0x0, 0x12, 0x12, 0x9, "8f4d0ae712e9db98522e581d38bc7144bf538c7f69bbd403c90d84d1ac2043bdc97f98fe08a0bc708006e5a2838642f4cfedac8bb9c5e434a7221790f5576253", "031438010ea45ca4824044320f0daefce75ff1110800c67fee7e50a0851393f07a308a1c49e40afed4b8e718a7ee5efa19e8055f9863d7802e0021d55e71b678", "30d511dd8225bcd90de20e62aa8aa993618164198dae9f38b908ae00f1515b68", [0x2d01, 0x5]}) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c80, 0x7000000) 395.919514ms ago: executing program 6 (id=743): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x65, 0x0, &(0x7f0000000140)="6efa86ba44c4dcef07b59db7e9a27f48a6e930da91c08c993e71a416eb2235d1314cf41411de9aa874429c871656ff38656d42c237a569b22dc9923150d6eb5b381125c2173cdb022eb5d8fc7a7df730ad34e08a536eaca88d851d6505f7b2b6831911631a"}) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x96b91bf2c586682}) 247.312306ms ago: executing program 5 (id=745): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20102, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000d80)={{0x0, 0x0, 0x80}}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'xfrm0\x00', 0x0}) sendto(r3, &(0x7f0000000140)="ca", 0x1, 0x0, &(0x7f0000000240)=@xdp={0x2c, 0x8, r4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 196.022867ms ago: executing program 5 (id=746): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x810408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ioctl$HIDIOCGUSAGES(r2, 0x40806685, 0x0) 132.389078ms ago: executing program 5 (id=747): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001b80), r0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e4000d"], 0x66) 132.105098ms ago: executing program 6 (id=748): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) 131.733708ms ago: executing program 6 (id=749): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x0) socketpair(0xf, 0xa, 0x8, &(0x7f0000000300)) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001280)={r2, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000100000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x8a2]}}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1181}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) getpeername$packet(r5, 0x0, &(0x7f0000000280)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000e00)=[@request_death={0x400c6313}, @clear_death={0x400c6313}], 0x0, 0x0, 0x0}) 114.044898ms ago: executing program 6 (id=750): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = getpid() r2 = getpid() kcmp(r1, r2, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0xf0d) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in=@empty, 0x4e21, 0x3, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x30}, {0x0, 0x15000000000000, 0x0, 0x4, 0x8001, 0xfffffffffffffffd, 0x10000000, 0xd3d}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x89, 0x1, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4da, 0x3c}, 0xa, @in=@multicast2, 0xfffffffe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x5}}, 0xe8) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0) fadvise64(r5, 0x8, 0xb8, 0x2) r6 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x1000000, 0x5}, 0x8) readahead(r5, 0x1, 0x79844e1c) accept4$unix(r6, 0x0, &(0x7f0000000000), 0x800) memfd_secret(0x80000) close(r6) close(r6) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) getsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f00000034c0)=""/211, 0xd3}, {&(0x7f0000000400)=""/241, 0xf1}, {&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000000780)=""/83, 0x53}, {&(0x7f0000000800)=""/127, 0x7f}], 0x9}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x2100, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x51, 0x0, &(0x7f0000000700)="93ca2efc9445b68c079d41dcfff066e61c4d8f1021949c8c75c29113ed78c691e4a88534e71804ab594c9c0cea97e979adb05f81276775d60f54e903eb87a57f7cbe1f97039cb9d611ffa16ca4582a68cd"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x0, 0xf}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 102.794558ms ago: executing program 5 (id=751): prctl$PR_SET_MM_MAP(0x34, 0xe, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r2, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "9e62a75006b570d16a85f3f5ca06d477565a26e8c7e2f80d71387d2b7a78e4c3f6f79c1b7837952f7644db0dc039e2a845287b3059b81455bb9cc8412b1c457fdde1517a11a1"}, 0x56) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x99b33000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000080)=@usbdevfs_connect={0x6}) 23.634209ms ago: executing program 5 (id=752): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') write$selinux_load(0xffffffffffffffff, 0x0, 0x2046) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab00070000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd0000000c0001000a0c100000000000224e0000", 0x58}], 0x1) rt_sigqueueinfo(0x0, 0x13, &(0x7f0000000000)={0x2e, 0x1, 0x100}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) 21.935309ms ago: executing program 5 (id=753): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r4 = dup(r3) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB='max']) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_DEBUGREGS(r7, 0x4080aea2, &(0x7f0000000140)={[0x80a0000, 0x8080000, 0x100000, 0x4000], 0x3, 0x1, 0xa0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, 0x0}) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x29c101, 0x0) write$cgroup_subtree(r9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r12, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r11, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8810, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) 0s ago: executing program 6 (id=754): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x810408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, &(0x7f0000000d40)={{0x2, 0x200, 0xfffffffd, 0x9, 0x6, 0x2}, 0x395, [0x1, 0x5, 0x7f, 0x6, 0x0, 0xfffffff9, 0x6, 0x3, 0x0, 0x7fff, 0x0, 0x10000, 0x1d6, 0x1, 0xff, 0xb, 0x9, 0x6, 0x1, 0x0, 0x96, 0xffffffff, 0x7, 0x2, 0x4, 0x5, 0x53, 0x5, 0xfe, 0x80, 0xe, 0xb4, 0xffffffff, 0x7, 0x1ff, 0x4, 0xd9, 0x7, 0xff, 0x6, 0x800, 0xa5a, 0x4000, 0x9, 0x71, 0x200, 0x5, 0x9, 0xfffffff7, 0xf, 0x8000, 0x6, 0x9, 0x581500ab, 0x0, 0x3, 0x400, 0x4, 0x1, 0x9, 0x6, 0x1, 0x0, 0x5, 0x6, 0x5, 0x2, 0x4, 0x800, 0x0, 0x2, 0x9, 0x5, 0x4, 0x2, 0x9, 0xe, 0x9, 0x2, 0x81, 0x1, 0xf3, 0x3, 0x209, 0x100, 0x1000, 0x1, 0x6, 0x2, 0xc82a, 0x4000000, 0xa, 0x7, 0x4, 0x3, 0x2, 0x40, 0x100, 0x6, 0x1, 0xffff, 0xfffffffa, 0xf, 0x8f, 0x7, 0x6f81, 0x9, 0x2, 0x3, 0xd0800000, 0x8, 0x9, 0x6, 0x7f, 0x5eba, 0xdcd, 0x68, 0xf, 0x7, 0x5, 0xe, 0x2, 0x2b, 0x4, 0x6eb, 0x4, 0x9, 0x8, 0x6, 0x0, 0x4, 0xffff, 0x7, 0x0, 0xb, 0x5b4a5d87, 0x5, 0x4, 0x4, 0x7, 0x0, 0x4, 0xfffffff5, 0xa, 0x1000, 0x6, 0x30000, 0x1, 0x200b1ea5, 0x7, 0x9, 0xb, 0x7f, 0x7, 0x9, 0xd6, 0xb17, 0xffffffff, 0x4, 0xe, 0x519, 0x5, 0xb, 0x7, 0xa, 0x0, 0x7, 0x0, 0x9, 0x0, 0x7f, 0xffffffff, 0x7ff, 0x5, 0xfffffff5, 0xf, 0x1010, 0x6, 0x3, 0x81, 0x7, 0x8, 0xd, 0x2, 0x3, 0x0, 0x46b, 0x6, 0x54, 0x1, 0xfffffffd, 0x6, 0x5, 0x80000001, 0x7, 0x4, 0x6, 0x1, 0x7, 0x4, 0x3, 0xac, 0x4, 0x8a900000, 0x8, 0xad, 0xfffff801, 0xffffff49, 0x8001, 0x400, 0x5, 0x7e0, 0x1, 0xc, 0x8, 0xffffffff, 0x9, 0x4, 0x20e, 0x4, 0x101, 0x33af, 0x1, 0xb, 0x2, 0xffff, 0x2, 0xe9, 0x6, 0x0, 0xb4b80000, 0x3ff, 0x6, 0x7, 0x13, 0xfffffff7, 0x80000001, 0x6, 0x8, 0x10001, 0x5, 0x8c6, 0x4aa, 0x8, 0xffffffcf, 0x5, 0xff, 0x5, 0x6, 0x8000, 0xe, 0x4, 0x2, 0x2, 0x1, 0x4, 0x9, 0xe2, 0x83, 0x4, 0xfffffffb, 0x5, 0x3, 0x2, 0x4, 0x2, 0x4, 0x1, 0x0, 0x2, 0x6d, 0x8131, 0x10000, 0xa42, 0x8ea, 0x0, 0x9, 0x6ad3d576, 0x80000001, 0x0, 0x3, 0x7fffffff, 0x9, 0x47, 0x4, 0x1, 0xed, 0x3, 0xffffffff, 0x2, 0x3, 0x1, 0x9, 0x3371, 0x1000, 0xfffffffe, 0xfffffff9, 0x6b2f, 0x4e9f, 0x8, 0x0, 0x2, 0x6, 0xae, 0x2, 0x6, 0x7, 0x5, 0x2, 0x7, 0x9, 0x8, 0x83, 0x9, 0x0, 0x134, 0x9, 0x4, 0x4, 0x1, 0x6a4, 0x4, 0xe, 0x35, 0x6, 0x200, 0x7, 0x10001, 0x3, 0x200, 0xc, 0x2, 0xff, 0x0, 0x5, 0xab, 0xfff, 0x2, 0x8, 0x0, 0x6, 0x1, 0x4, 0x81, 0x5, 0x21e85071, 0x0, 0x80000000, 0x0, 0x9, 0x8000000, 0x4, 0x1, 0x5, 0xb, 0x1000, 0x0, 0x1, 0xfffe, 0x0, 0xffff, 0x5123, 0xb, 0x5, 0x764, 0x2, 0x9, 0xe, 0xc3, 0x78b7, 0x1, 0x7, 0x7, 0x0, 0x5, 0x7, 0x4, 0x854, 0x3, 0x8, 0x1, 0x9, 0x1, 0x2, 0x8, 0x19580000, 0x9, 0x5, 0x5, 0x1ff, 0x7, 0x9, 0x1, 0x8, 0xffff779f, 0x5, 0x6, 0x7fff, 0x5, 0x4, 0x0, 0xb, 0x80, 0x1, 0x6, 0x6, 0x1, 0x6, 0x8, 0x0, 0x0, 0x1, 0xfffff801, 0x7ff, 0x0, 0x555, 0x3ff, 0x2, 0x9, 0x8e07, 0x8daf, 0x8, 0x3, 0xef46, 0x665, 0xd, 0x4ba, 0x80, 0x340, 0x67, 0x2, 0x9, 0x7e, 0x3, 0x8, 0x9, 0x9, 0x1, 0xf2, 0x5, 0x2df, 0x6, 0x1, 0x321, 0x7, 0x4, 0x0, 0xe, 0x6, 0xd9, 0x3, 0xffffffff, 0xffff8000, 0xdb, 0xd12f, 0x3, 0x4, 0x6, 0x2000, 0xc39, 0x2, 0x0, 0x8, 0x7f, 0x400, 0x4, 0x95, 0x4, 0x1ff, 0x5, 0x3ff, 0x100, 0x1, 0x6, 0x17, 0x8, 0x7, 0x2, 0x4, 0x6, 0x81, 0x7, 0x4, 0x9, 0x200, 0x4, 0x6, 0xf, 0x9, 0xfffff801, 0x8, 0x8, 0x6, 0x7f, 0x2, 0xfffffff6, 0x6a9, 0x5, 0x800, 0x9, 0x7, 0x6, 0x7fff, 0x7, 0x3ff, 0x0, 0x8c94, 0x9, 0xe39, 0x5, 0x13, 0x8, 0x5, 0xc, 0x2, 0x3ff, 0xe3, 0x1ff, 0x5, 0x58, 0x7, 0x101, 0x3, 0x50, 0x4, 0x0, 0x0, 0x3, 0xce, 0x5, 0x8, 0x1f3, 0xc0000000, 0xffffff80, 0x8, 0x7, 0x7, 0x2, 0xa, 0x3, 0x9, 0x3, 0x6, 0xb, 0x200, 0x9, 0xc435, 0x7ff, 0x1, 0x2, 0xe10, 0x1, 0xffff, 0x0, 0x9, 0x0, 0x9, 0x81, 0x2, 0xb, 0xd7, 0x3, 0x2, 0x1, 0xd41, 0xf, 0xffffff89, 0x6, 0x4, 0x4, 0x0, 0x0, 0x8, 0x6, 0xfffffff7, 0x9, 0xf0f, 0xffffff45, 0x2, 0x7, 0x400, 0x8e, 0x6, 0x8, 0x0, 0x4, 0x1, 0x1, 0x4574, 0x6, 0x0, 0x3ff, 0x2, 0x8, 0x0, 0x2, 0x3, 0x4, 0xae0, 0x2, 0x5, 0xffffffff, 0x4, 0x9, 0x2, 0x1000, 0x537b, 0x4, 0x2, 0xb4ba, 0x81, 0x8000, 0x1, 0x6, 0x2, 0x1ff, 0xe12, 0xffffffff, 0x8, 0x4, 0x3, 0x3, 0x7, 0x9, 0x9, 0x400, 0xffff590a, 0xb, 0x0, 0x86500000, 0x5, 0xffffffff, 0x10, 0x0, 0x8, 0x7, 0x10000, 0x3, 0x6, 0x9, 0x4, 0x652, 0x4, 0x7ff, 0x1, 0x3f4, 0xff, 0x3f0, 0xb5c9, 0xbe32, 0x2, 0xdac1, 0x8, 0x6a2, 0x1, 0x7, 0x3, 0x5, 0x7, 0x2, 0xffff, 0x6, 0x6, 0x4, 0xc, 0x1, 0xb080, 0x6ed646d9, 0x1, 0x5, 0x161c8876, 0x8, 0x4, 0x2, 0x7fffffff, 0x5, 0xfffffff9, 0x0, 0x42712e0f, 0x7c, 0x401, 0x4, 0x5, 0xfffff209, 0x1, 0x2, 0x0, 0x20000000, 0xd, 0x2, 0x9, 0x9, 0x6dd5bea6, 0x2, 0x4, 0x5e, 0x4, 0xb, 0x0, 0x5, 0xffff, 0x7, 0x1d, 0x19, 0xa87, 0xfffffff7, 0x8c, 0xe6, 0x1ce0418, 0x9, 0x3, 0x158, 0x8, 0xf, 0x7fff, 0x6, 0xff, 0xfffffff8, 0x200, 0xb, 0x1b4, 0x0, 0x6, 0xf, 0x5, 0x7, 0xffffffff, 0x9, 0x10000, 0x400, 0x3, 0x10001, 0x6d, 0x6, 0xa663, 0x7, 0x2, 0xd, 0x1, 0x3, 0x3, 0x4, 0x3, 0x101, 0x2, 0xea, 0x8, 0x7fffffff, 0x6, 0x0, 0x80000000, 0x7fffffff, 0x7, 0x5, 0x1ec, 0xfffffff7, 0x6, 0x1, 0x1, 0x1, 0x5, 0x800, 0x8, 0x200, 0x4, 0xfffffffe, 0x0, 0x6, 0xa1, 0x1, 0x0, 0xc765, 0x5659, 0x4451, 0x401, 0x6, 0xffffffff, 0x5, 0x9, 0x6, 0x80000000, 0x6, 0x8, 0xa, 0x6, 0x1, 0x3ff, 0x1000, 0x0, 0x8, 0x7, 0x2, 0x3, 0x7fff, 0x7fff, 0xa1, 0x7, 0x4, 0x3ffa, 0xffffffb5, 0x4, 0x9, 0x1, 0x2, 0x2, 0x1000, 0x4, 0x2, 0x9, 0x1, 0xfffffff8, 0x2, 0x2, 0xf, 0x1, 0x0, 0x3, 0x1, 0x0, 0x4, 0x3, 0x6, 0x7, 0xfffffff9, 0x7, 0x0, 0x2f1, 0x4, 0x1f32, 0x33da, 0x322e, 0x9, 0x8, 0x9, 0xdb, 0xffff, 0x1000, 0x4, 0x3, 0x5, 0xa00, 0x5, 0x9, 0x10001, 0x3, 0x8, 0x0, 0x4, 0xfffffff9, 0x3ff, 0x1, 0x80000000, 0x7, 0xffffffff, 0x3, 0x7fff, 0x7, 0x4ed3, 0x9, 0x100, 0x40, 0x5, 0xac1, 0x0, 0x3, 0x0, 0xba, 0x10000, 0xfffff2ab, 0x80, 0x1, 0x88, 0x1, 0xfff, 0x2, 0x5, 0x4, 0x8, 0x1, 0x4, 0xa, 0xff, 0x400, 0xfffffeff, 0xc, 0x3, 0xbd, 0x6, 0x5, 0x9, 0x7, 0xfffffc00, 0x101, 0x3ff, 0xff, 0x4, 0xe59, 0x3, 0x8, 0xf6d, 0x8, 0x0, 0x4, 0x1ff, 0x37d, 0x627e, 0x8, 0x3, 0x35, 0x6c, 0x4, 0x7, 0x0, 0x4, 0x2, 0x101, 0x9, 0x6, 0x1ff, 0x4, 0x4, 0xfffffffe, 0x3ff, 0xdf, 0xd, 0xd, 0xa, 0x2, 0x3, 0x8000, 0x0, 0x4, 0x3, 0xb5, 0x0, 0x2, 0x0, 0x7, 0x0, 0xfffffff7, 0xffff, 0xf56, 0x3, 0x1, 0x81, 0x0, 0x400, 0x1, 0xfffffff2, 0x20000000, 0x6, 0x9, 0xfffff058, 0x10, 0x8000, 0x8, 0x9, 0x100, 0x3ff, 0x0, 0x101, 0xbd, 0xfff, 0x1000, 0x7, 0x1, 0x7fff, 0x2, 0xa, 0x5, 0x4, 0x6, 0x8, 0xffffffff, 0x4, 0xffff0001, 0xa28, 0x6, 0x0, 0x75be660b, 0x3, 0x5, 0x5, 0x1, 0x9, 0xfffe0000, 0x7, 0x6, 0x0, 0x3, 0xe, 0x8, 0x7fffffff, 0x74, 0x0, 0x81, 0x0, 0x6, 0x3, 0x4, 0x80000000, 0x2, 0x7, 0x1, 0x9, 0x8, 0x9, 0x7, 0x4, 0x800, 0xfffffff8, 0x8, 0xb94, 0x3, 0x4, 0x5, 0x81, 0xffffffad, 0xfffffffd, 0x6, 0x9, 0x423, 0xdfd1, 0x5]}) dup2(r2, r0) kernel console output (not intermixed with test programs): e with driver smsc75xx failed with error -32 [ 46.432831][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 46.582800][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 46.589159][ T9] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 46.597444][ T9] usb 6-1: config 0 has no interface number 0 [ 46.603957][ T9] usb 6-1: config 0 interface 184 has no altsetting 0 [ 46.612129][ T9] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 46.621224][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.629280][ T9] usb 6-1: Product: syz [ 46.633460][ T9] usb 6-1: Manufacturer: syz [ 46.638042][ T9] usb 6-1: SerialNumber: syz [ 46.643225][ T9] usb 6-1: config 0 descriptor?? [ 46.649139][ T9] smsc75xx v1.0.0 [ 47.548800][ T10] usb 4-1: USB disconnect, device number 13 [ 47.557958][ T495] usb 2-1: USB disconnect, device number 8 [ 47.591721][ T36] audit: type=1400 audit(1750771888.890:264): avc: denied { read write } for pid=969 comm="syz.3.206" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 47.615001][ T36] audit: type=1400 audit(1750771888.890:265): avc: denied { open } for pid=969 comm="syz.3.206" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 47.638436][ T36] audit: type=1400 audit(1750771888.890:266): avc: denied { getopt } for pid=967 comm="syz.1.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 47.649801][ T968] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.658709][ T949] Bluetooth: hci0: command 0x1003 tx timeout [ 47.663240][ T968] rust_binder: Got transaction with invalid offset. [ 47.665216][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 47.672257][ T968] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 47.684309][ T13] Bluetooth: hci1: Frame reassembly failed (-84) [ 47.689307][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 47.708667][ T968] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:117 [ 47.718370][ T36] audit: type=1400 audit(1750771889.020:267): avc: denied { shutdown } for pid=969 comm="syz.3.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.887412][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 47.898403][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 47.908129][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 47.918445][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 47.927893][ T9] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 47.937539][ T9] usb 6-1: USB disconnect, device number 7 [ 48.752802][ T495] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 48.922799][ T495] usb 4-1: Using ep0 maxpacket: 8 [ 48.929921][ T495] usb 4-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 48.943192][ T495] usb 4-1: config 1 interface 0 has no altsetting 0 [ 48.951485][ T495] usb 4-1: New USB device found, idVendor=1784, idProduct=0016, bcdDevice= 0.40 [ 48.960785][ T495] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.968887][ T495] usb 4-1: Product: syz [ 48.973252][ T495] usb 4-1: Manufacturer: syz [ 48.977930][ T495] usb 4-1: SerialNumber: syz [ 49.187829][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 49.187862][ T36] audit: type=1400 audit(1750771890.490:274): avc: denied { map } for pid=984 comm="syz.3.210" path="socket:[8719]" dev="sockfs" ino=8719 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 49.216820][ T36] audit: type=1400 audit(1750771890.490:275): avc: denied { read } for pid=984 comm="syz.3.210" path="socket:[8719]" dev="sockfs" ino=8719 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 49.244094][ T495] usbhid 4-1:1.0: can't add hid device: -71 [ 49.250193][ T495] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 49.258866][ T495] usb 4-1: USB disconnect, device number 14 [ 49.271986][ T36] audit: type=1400 audit(1750771890.570:276): avc: denied { name_bind } for pid=990 comm="syz.5.212" src=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 49.293233][ T36] audit: type=1400 audit(1750771890.570:277): avc: denied { node_bind } for pid=990 comm="syz.5.212" saddr=255.255.255.255 src=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 49.316129][ T36] audit: type=1400 audit(1750771890.570:278): avc: denied { create } for pid=990 comm="syz.5.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 49.449618][ T36] audit: type=1400 audit(1750771890.750:279): avc: denied { create } for pid=994 comm="syz.2.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 49.470447][ T36] audit: type=1400 audit(1750771890.750:280): avc: denied { execute } for pid=994 comm="syz.2.214" path="/selinux/commit_pending_bools" dev="selinuxfs" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 49.495961][ T36] audit: type=1400 audit(1750771890.750:281): avc: denied { ioctl } for pid=994 comm="syz.2.214" path="socket:[8732]" dev="sockfs" ino=8732 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 49.521630][ T36] audit: type=1400 audit(1750771890.810:282): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 49.550208][ T1002] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:183 [ 49.613571][ T36] audit: type=1400 audit(1750771890.920:283): avc: denied { name_bind } for pid=1008 comm="syz.2.218" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 49.644733][ T31] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 49.644780][ T950] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 49.716457][ T1015] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.777780][ T1017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.221'. [ 49.822836][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 49.832250][ T31] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 49.843723][ T31] usb 6-1: config 0 has no interface number 0 [ 49.851357][ T31] usb 6-1: config 0 interface 184 has no altsetting 0 [ 49.863086][ T31] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 49.873001][ T31] usb 6-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 49.881593][ T31] usb 6-1: Product: syz [ 49.887683][ T31] usb 6-1: Manufacturer: syz [ 49.892652][ T31] usb 6-1: SerialNumber: syz [ 49.904224][ T31] usb 6-1: config 0 descriptor?? [ 49.916143][ T31] smsc75xx v1.0.0 [ 50.054229][ T1019] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.111830][ T1021] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 50.521540][ T31] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 50.553232][ T31] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 50.631321][ T1039] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 50.658772][ T1039] rust_binder: Write failure EINVAL in pid:122 [ 50.658991][ T1039] rust_binder: Write failure EFAULT in pid:122 [ 50.668267][ T1041] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 50.697273][ T1041] rust_binder: Write failure EINVAL in pid:211 [ 50.715215][ T1043] incfs: Error accessing: /dev/rnullb0. [ 50.740486][ T1043] incfs: mount failed -20 [ 50.819001][ T1047] tipc: Enabling of bearer rejected, failed to enable media [ 50.855470][ T1047] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 50.998005][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 51.170992][ T31] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 51.181881][ T31] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 51.196837][ T31] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 51.212791][ T312] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 51.222836][ T31] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -32 [ 51.362784][ T312] usb 4-1: Using ep0 maxpacket: 32 [ 51.369045][ T312] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 51.377508][ T312] usb 4-1: config 0 has no interface number 0 [ 51.383750][ T312] usb 4-1: config 0 interface 184 has no altsetting 0 [ 51.392075][ T312] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 51.401502][ T312] usb 4-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 51.412904][ T312] usb 4-1: Product: syz [ 51.417551][ T312] usb 4-1: Manufacturer: syz [ 51.422386][ T312] usb 4-1: SerialNumber: syz [ 51.431063][ T312] usb 4-1: config 0 descriptor?? [ 51.431882][ T1052] can: request_module (can-proto-0) failed. [ 51.438339][ T312] smsc75xx v1.0.0 [ 51.517371][ T1054] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.752846][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 51.913013][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 51.919192][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.929344][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 51.938242][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 51.951155][ T9] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 51.960204][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.969777][ T9] hub 2-1:1.0: bad descriptor, ignoring hub [ 51.976071][ T9] hub 2-1:1.0: probe with driver hub failed with error -5 [ 51.983372][ T9] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 52.039943][ T312] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 52.051509][ T312] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 52.171382][ T1054] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 52.171416][ T1054] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:127 [ 52.282917][ T9] usb 2-1: USB disconnect, device number 9 [ 52.387879][ T31] usb 6-1: USB disconnect, device number 8 [ 52.553382][ T1060] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.607454][ T1063] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 52.863158][ T312] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 52.882681][ T312] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 52.892498][ T312] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 52.903237][ T312] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 53.002887][ T950] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 53.002887][ T52] Bluetooth: hci0: command 0x1003 tx timeout [ 53.142831][ T9] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 53.272894][ T9] usb 2-1: device descriptor read/64, error -71 [ 53.409259][ T1077] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.410636][ T1077] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.417366][ T1077] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:161 [ 53.480506][ T1082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.490135][ T1082] rust_binder: Error while translating object. [ 53.496637][ T1082] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 53.502998][ T1082] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:165 [ 53.512806][ T9] usb 2-1: device descriptor read/64, error -71 [ 53.544262][ T1090] binder: Bad value for 'max' [ 53.586105][ T1089] cgroup: fork rejected by pids controller in /syz2 [ 53.762794][ T31] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 53.772859][ T9] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 53.903260][ T9] usb 2-1: device descriptor read/64, error -71 [ 53.912862][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 53.919380][ T31] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 53.927786][ T31] usb 6-1: config 0 has no interface number 0 [ 53.934044][ T31] usb 6-1: config 0 interface 184 has no altsetting 0 [ 53.942428][ T31] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 53.951712][ T31] usb 6-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 53.960486][ T31] usb 6-1: Product: syz [ 53.965204][ T31] usb 6-1: Manufacturer: syz [ 53.969918][ T31] usb 6-1: SerialNumber: syz [ 53.976774][ T31] usb 6-1: config 0 descriptor?? [ 53.982845][ T31] smsc75xx v1.0.0 [ 54.006751][ T1132] binder: Unknown parameter ' ' [ 54.081819][ T10] usb 4-1: USB disconnect, device number 15 [ 54.096344][ T1134] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.142835][ T9] usb 2-1: device descriptor read/64, error -71 [ 54.263024][ T9] usb usb2-port1: attempt power cycle [ 54.584381][ T31] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 54.595248][ T31] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 54.614299][ T9] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 54.645005][ T9] usb 2-1: device descriptor read/8, error -71 [ 54.773977][ T9] usb 2-1: device descriptor read/8, error -71 [ 54.821039][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 54.821055][ T36] audit: type=1400 audit(1750771896.125:293): avc: denied { read } for pid=1141 comm="syz.3.251" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 54.851303][ T36] audit: type=1400 audit(1750771896.125:294): avc: denied { open } for pid=1141 comm="syz.3.251" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 54.876136][ T36] audit: type=1400 audit(1750771896.135:295): avc: denied { ioctl } for pid=1141 comm="syz.3.251" path="/dev/usbmon0" dev="devtmpfs" ino=87 ioctlcmd=0xae85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 54.933064][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 54.957623][ T36] audit: type=1400 audit(1750771896.265:296): avc: denied { setopt } for pid=1145 comm="syz.3.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 54.962088][ T1146] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.989137][ T1146] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:141 [ 55.012938][ T9] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 55.044234][ T9] usb 2-1: device descriptor read/8, error -71 [ 55.084329][ T36] audit: type=1400 audit(1750771896.395:297): avc: denied { bind } for pid=1152 comm="syz.3.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 55.085056][ T1153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.255'. [ 55.105103][ T36] audit: type=1400 audit(1750771896.395:298): avc: denied { setopt } for pid=1152 comm="syz.3.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 55.135346][ T10] usb 3-1: config 8 has an invalid interface number: 161 but max is 2 [ 55.144171][ T10] usb 3-1: config 8 has an invalid interface number: 210 but max is 2 [ 55.153103][ T10] usb 3-1: config 8 has an invalid interface number: 76 but max is 2 [ 55.161581][ T10] usb 3-1: config 8 has no interface number 0 [ 55.167890][ T10] usb 3-1: config 8 has no interface number 1 [ 55.174479][ T10] usb 3-1: config 8 has no interface number 2 [ 55.180743][ T10] usb 3-1: config 8 interface 161 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 55.191754][ T10] usb 3-1: config 8 interface 161 altsetting 8 endpoint 0x4 has invalid wMaxPacketSize 0 [ 55.201751][ T10] usb 3-1: config 8 interface 161 altsetting 8 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 55.213313][ T10] usb 3-1: config 8 interface 161 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 55.213384][ T9] usb 2-1: device descriptor read/8, error -71 [ 55.213407][ T31] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 55.231732][ T31] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 55.242291][ T10] usb 3-1: config 8 interface 161 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 55.253799][ T31] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 55.266586][ T10] usb 3-1: config 8 interface 210 altsetting 9 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 55.276204][ T31] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -61 [ 55.286696][ T10] usb 3-1: config 8 interface 210 altsetting 9 endpoint 0x2 has invalid maxpacket 1536, setting to 64 [ 55.306438][ T10] usb 3-1: config 8 interface 210 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 55.317260][ T10] usb 3-1: config 8 interface 76 altsetting 7 has an endpoint descriptor with address 0xAE, changing to 0x8E [ 55.329126][ T10] usb 3-1: config 8 interface 76 altsetting 7 endpoint 0x8E has an invalid bInterval 236, changing to 7 [ 55.341117][ T9] usb usb2-port1: unable to enumerate USB device [ 55.347581][ T10] usb 3-1: config 8 interface 76 altsetting 7 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 55.358999][ T10] usb 3-1: config 8 interface 161 has no altsetting 0 [ 55.366024][ T10] usb 3-1: config 8 interface 210 has no altsetting 0 [ 55.373039][ T10] usb 3-1: config 8 interface 76 has no altsetting 0 [ 55.381753][ T10] usb 3-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=40.72 [ 55.391090][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.399763][ T10] usb 3-1: Product: syz [ 55.403955][ T10] usb 3-1: Manufacturer: syz [ 55.408539][ T10] usb 3-1: SerialNumber: syz [ 55.602900][ T31] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 55.625595][ T10] usb 3-1: USB disconnect, device number 10 [ 55.752873][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 55.759338][ T31] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 55.767572][ T31] usb 4-1: config 0 has no interface number 0 [ 55.773697][ T31] usb 4-1: config 0 interface 184 has no altsetting 0 [ 55.782041][ T31] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 55.791165][ T31] usb 4-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 55.799372][ T31] usb 4-1: Product: syz [ 55.803553][ T31] usb 4-1: Manufacturer: syz [ 55.808155][ T31] usb 4-1: SerialNumber: syz [ 55.813518][ T31] usb 4-1: config 0 descriptor?? [ 55.819163][ T31] smsc75xx v1.0.0 [ 55.980242][ T1162] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 55.980270][ T1162] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 55.989803][ T1162] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:137 [ 56.033300][ T36] audit: type=1400 audit(1750771897.345:299): avc: denied { read } for pid=1163 comm="syz.1.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 56.114537][ T36] audit: type=1400 audit(1750771897.425:300): avc: denied { watch watch_reads } for pid=1163 comm="syz.1.259" path="/45/file0" dev="tmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 56.193410][ T1173] rust_binder: Write failure EINVAL in pid:267 [ 56.421925][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 56.438946][ T312] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 56.446579][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 56.537107][ T64] usb 6-1: USB disconnect, device number 9 [ 56.547736][ T1177] netlink: 288 bytes leftover after parsing attributes in process `syz.5.262'. [ 56.604641][ T312] usb 2-1: config 9 has an invalid interface number: 51 but max is 0 [ 56.612845][ T312] usb 2-1: config 9 has no interface number 0 [ 56.621001][ T312] usb 2-1: string descriptor 0 read error: -22 [ 56.627350][ T312] usb 2-1: New USB device found, idVendor=07a6, idProduct=07c2, bcdDevice=37.12 [ 56.636448][ T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.848755][ T1172] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 56.849491][ T1172] rust_binder: Error while translating object. [ 56.856299][ T1172] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 56.862508][ T1172] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:145 [ 56.872579][ T312] usb 2-1: USB disconnect, device number 14 [ 56.887755][ T64] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 57.042791][ T64] usb 6-1: Using ep0 maxpacket: 32 [ 57.049277][ T64] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 57.057699][ T64] usb 6-1: config 0 has no interface number 0 [ 57.064233][ T64] usb 6-1: config 0 interface 184 has no altsetting 0 [ 57.073011][ T64] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 57.082073][ T64] usb 6-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 57.090438][ T64] usb 6-1: Product: syz [ 57.094637][ T64] usb 6-1: Manufacturer: syz [ 57.099220][ T64] usb 6-1: SerialNumber: syz [ 57.104847][ T64] usb 6-1: config 0 descriptor?? [ 57.116516][ T64] smsc75xx v1.0.0 [ 57.239401][ T36] audit: type=1400 audit(1750771898.545:301): avc: denied { map } for pid=1196 comm="syz.2.268" path="/dev/bus/usb/009/001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 57.264435][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 57.275436][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 57.285319][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 57.294792][ T36] audit: type=1400 audit(1750771898.595:302): avc: denied { write } for pid=1198 comm="syz.2.269" name="usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 57.318575][ T31] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 57.516851][ T1210] rust_binder: Error while translating object. [ 57.516875][ T1210] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 57.523158][ T1210] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:296 [ 57.632812][ T31] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 57.720438][ T1219] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 57.728782][ T1219] rust_binder: Write failure EINVAL in pid:304 [ 57.733235][ T64] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 57.746030][ T1221] overlayfs: upper fs does not support tmpfile. [ 57.750901][ T64] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 57.792791][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 57.799043][ T31] usb 2-1: config 5 has an invalid interface number: 143 but max is 2 [ 57.807529][ T31] usb 2-1: config 5 has an invalid interface number: 6 but max is 2 [ 57.815558][ T31] usb 2-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 57.824341][ T31] usb 2-1: config 5 has an invalid descriptor of length 166, skipping remainder of the config [ 57.834768][ T31] usb 2-1: config 5 has no interface number 1 [ 57.840872][ T31] usb 2-1: config 5 has no interface number 2 [ 57.847061][ T31] usb 2-1: config 5 interface 143 altsetting 30 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 57.860500][ T31] usb 2-1: too many endpoints for config 5 interface 6 altsetting 7: 122, using maximum allowed: 30 [ 57.860823][ T1228] incfs: Can't find or create .index dir in ./file0 [ 57.871363][ T31] usb 2-1: config 5 interface 6 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 122 [ 57.879029][ T1228] incfs: mount failed -1 [ 57.891179][ T31] usb 2-1: too many endpoints for config 5 interface 0 altsetting 5: 36, using maximum allowed: 30 [ 57.906350][ T31] usb 2-1: config 5 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 36 [ 57.918727][ T1227] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 57.919598][ T31] usb 2-1: config 5 interface 143 has no altsetting 0 [ 57.929831][ T1227] SELinux: failed to load policy [ 57.936765][ T31] usb 2-1: config 5 interface 6 has no altsetting 0 [ 57.948327][ T31] usb 2-1: config 5 interface 0 has no altsetting 0 [ 57.956389][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=fc.f3 [ 57.965473][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.973600][ T31] usb 2-1: Product: syz [ 57.977778][ T31] usb 2-1: Manufacturer: syz [ 57.982356][ T31] usb 2-1: SerialNumber: syz [ 58.188694][ T1205] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.244609][ T1237] overlayfs: failed to resolve 'euid<00000000000000000000': -2 [ 58.401111][ T31] usb 2-1: MIDIStreaming interface descriptor not found [ 58.411835][ T31] usb 2-1: USB disconnect, device number 15 [ 58.479946][ T1214] usb 4-1: USB disconnect, device number 16 [ 58.507985][ T1242] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.511940][ T1242] Zero length message leads to an empty skb [ 58.574799][ T64] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 58.585757][ T64] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 58.595504][ T64] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 58.605650][ T64] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -32 [ 58.843543][ T1247] input: syz1 as /devices/virtual/input/input8 [ 59.055837][ T1260] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 59.236768][ T1266] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.237994][ T1266] rust_binder: Error in use_page_slow: ESRCH [ 59.244547][ T1266] rust_binder: use_range failure ESRCH [ 59.250582][ T1266] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 59.256196][ T1266] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 59.264335][ T1266] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:167 [ 59.313971][ T1273] tmpfs: Bad value for 'huge' [ 59.374167][ T1275] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 59.381542][ T1275] rust_binder: Write failure EINVAL in pid:323 [ 59.514462][ T1291] rust_binder: Error in use_page_slow: ESRCH [ 59.514487][ T1291] rust_binder: use_range failure ESRCH [ 59.520503][ T1291] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 59.526126][ T1291] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 59.534375][ T1291] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:337 [ 59.557337][ T1295] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 59.566683][ T1295] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:340 [ 59.592353][ T1299] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.597863][ T10] usb 6-1: USB disconnect, device number 10 [ 59.606885][ T1299] rust_binder: Error in use_page_slow: ESRCH [ 59.615316][ T1299] rust_binder: use_range failure ESRCH [ 59.623543][ T1299] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 59.630269][ T1302] tmpfs: Bad value for 'huge' [ 59.630851][ T1299] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 59.643868][ T1299] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:178 [ 59.782496][ T1310] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 59.884148][ T1316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.900620][ T1318] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:349 [ 59.916432][ T36] kauditd_printk_skb: 30 callbacks suppressed [ 59.916450][ T36] audit: type=1400 audit(1750771901.225:333): avc: denied { ioctl } for pid=1319 comm="syz.5.313" path="socket:[10362]" dev="sockfs" ino=10362 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 59.917396][ T1316] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:349 [ 59.963838][ T1321] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.002828][ T1321] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 60.074305][ T1321] rust_binder: Write failure EINVAL in pid:183 [ 60.088081][ T1328] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.108099][ T1330] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 60.125940][ T1330] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 60.142883][ T1330] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:189 [ 60.157531][ T36] audit: type=1400 audit(1750771901.465:334): avc: denied { nlmsg_write } for pid=1331 comm="syz.2.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 60.377447][ T1339] tmpfs: Bad value for 'huge' [ 61.120357][ T36] audit: type=1400 audit(1750771902.425:335): avc: denied { bind } for pid=1340 comm="syz.5.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 61.492856][ T64] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 61.542855][ T1214] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 61.643003][ T64] usb 3-1: Using ep0 maxpacket: 8 [ 61.679754][ T36] audit: type=1400 audit(1750771902.985:336): avc: denied { name_bind } for pid=1363 comm="syz.3.327" src=28200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 61.701430][ T1214] usb 6-1: Using ep0 maxpacket: 32 [ 61.701565][ T36] audit: type=1400 audit(1750771902.985:337): avc: denied { name_bind } for pid=1363 comm="syz.3.327" src=28200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 61.711063][ T1214] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 61.740840][ T36] audit: type=1400 audit(1750771903.045:338): avc: denied { ioctl } for pid=1364 comm="syz.1.328" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 ioctlcmd=0xaf03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 61.741858][ T1214] usb 6-1: can't read configurations, error -22 [ 61.767563][ T1370] tmpfs: Bad value for 'huge' [ 61.849071][ T64] usb 3-1: unable to get BOS descriptor or descriptor too short [ 61.863807][ T64] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 61.872044][ T64] usb 3-1: can't read configurations, error -71 [ 61.892846][ T1214] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 62.050925][ T1374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=1374 comm=syz.1.332 [ 62.072788][ T1214] usb 6-1: Using ep0 maxpacket: 32 [ 62.079649][ T1214] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 62.087130][ T1378] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.089663][ T1378] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 62.091113][ T1214] usb 6-1: can't read configurations, error -22 [ 62.115359][ T1214] usb usb6-port1: attempt power cycle [ 62.182598][ T1385] random: crng reseeded on system resumption [ 62.230667][ T36] audit: type=1400 audit(1750771903.535:339): avc: denied { connect } for pid=1390 comm="syz.3.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 62.332878][ T310] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 62.361876][ T1398] tmpfs: Bad value for 'huge' [ 62.462265][ T1214] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 62.472925][ T31] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 62.483405][ T1214] usb 6-1: Using ep0 maxpacket: 32 [ 62.491149][ T1214] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 62.499502][ T1214] usb 6-1: can't read configurations, error -22 [ 62.502895][ T310] usb 2-1: Using ep0 maxpacket: 32 [ 62.514391][ T310] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 62.522950][ T310] usb 2-1: config 0 has no interface number 0 [ 62.529227][ T310] usb 2-1: config 0 interface 184 has no altsetting 0 [ 62.537209][ T1404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.537829][ T310] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 62.541591][ T1404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.547738][ T310] usb 2-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 62.570770][ T1409] rust_binder: Error while translating object. [ 62.570801][ T1409] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 62.577068][ T1409] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:388 [ 62.586486][ T310] usb 2-1: Product: syz [ 62.600056][ T310] usb 2-1: Manufacturer: syz [ 62.604871][ T310] usb 2-1: SerialNumber: syz [ 62.612513][ T310] usb 2-1: config 0 descriptor?? [ 62.618744][ T310] smsc75xx v1.0.0 [ 62.632823][ T1214] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 62.642876][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 62.649074][ T31] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.660561][ T31] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.671721][ T1214] usb 6-1: Using ep0 maxpacket: 32 [ 62.677130][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 62.683953][ T31] usb 4-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 62.693396][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.702588][ T1214] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 62.711071][ T31] usb 4-1: config 0 descriptor?? [ 62.718097][ T1214] usb 6-1: can't read configurations, error -22 [ 62.724952][ T1214] usb usb6-port1: unable to enumerate USB device [ 62.932302][ T1392] netlink: 12 bytes leftover after parsing attributes in process `syz.3.336'. [ 62.950945][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 62.968297][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 62.982181][ T31] usb 4-1: USB disconnect, device number 17 [ 63.220299][ T310] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 63.231362][ T310] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 63.284560][ T1420] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.902837][ T64] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 64.042814][ T310] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 64.053709][ T310] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 64.063402][ T310] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 64.072934][ T310] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 64.073980][ T64] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.091398][ T64] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 64.100992][ T64] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 64.110071][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 64.118172][ T64] usb 3-1: SerialNumber: syz [ 64.329582][ T36] audit: type=1400 audit(1750771905.635:340): avc: denied { ioctl } for pid=1430 comm="syz.2.348" path="socket:[12096]" dev="sockfs" ino=12096 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 64.359522][ T64] usb 3-1: 0:2 : does not exist [ 64.363331][ T1438] netlink: 108 bytes leftover after parsing attributes in process `syz.5.350'. [ 64.369530][ T64] usb 3-1: USB disconnect, device number 13 [ 64.411663][ T36] audit: type=1400 audit(1750771905.715:341): avc: denied { append } for pid=1443 comm="syz.5.352" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.896317][ T1449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.896721][ T1449] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 64.913015][ T1451] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.974552][ T36] audit: type=1400 audit(1750771906.285:342): avc: denied { write } for pid=1450 comm="syz.3.355" path="socket:[11047]" dev="sockfs" ino=11047 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.999475][ T1457] binder: Bad value for 'max' [ 65.091302][ T10] usb 2-1: USB disconnect, device number 16 [ 65.194859][ T1479] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.204858][ T36] audit: type=1400 audit(1750771906.515:343): avc: denied { map } for pid=1469 comm="syz.1.362" path="socket:[12299]" dev="sockfs" ino=12299 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.290157][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.329691][ T36] audit: type=1400 audit(1750771906.635:344): avc: denied { write } for pid=1485 comm="syz.1.369" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 65.337581][ T1486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.367980][ T36] audit: type=1400 audit(1750771906.675:345): avc: denied { create } for pid=1487 comm="syz.5.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 65.384237][ T1488] binder: Unknown parameter 'max' [ 65.431076][ T1495] sit0: entered promiscuous mode [ 65.440825][ T1495] netlink: 'syz.5.372': attribute type 1 has an invalid length. [ 65.451173][ T1495] netlink: 1 bytes leftover after parsing attributes in process `syz.5.372'. [ 65.464062][ T1495] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 65.538453][ T1498] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=54 sclass=netlink_xfrm_socket pid=1498 comm=syz.5.373 [ 65.550965][ T1498] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=64 sclass=netlink_xfrm_socket pid=1498 comm=syz.5.373 [ 65.612810][ T1214] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 65.762829][ T1214] usb 2-1: Using ep0 maxpacket: 16 [ 65.769541][ T1214] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 65.780692][ T1214] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 65.790378][ T1214] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 65.802906][ T1214] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 65.812412][ T1214] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.820875][ T1214] usb 2-1: Product: syz [ 65.825282][ T1214] usb 2-1: Manufacturer: syz [ 65.829963][ T1214] usb 2-1: SerialNumber: syz [ 66.041486][ T1486] rust_binder: Error while translating object. [ 66.041515][ T1486] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 66.049433][ T1486] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:219 [ 66.060559][ T1214] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 66.083995][ T1214] usb 2-1: failed to enable PITCH for EP 0x82 [ 66.090594][ T1214] usb 2-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 66.107266][ T1214] usb 2-1: USB disconnect, device number 17 [ 66.175131][ T1511] rust_binder: Error while translating object. [ 66.175152][ T1511] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 66.181327][ T1511] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:419 [ 66.272811][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 66.412866][ T10] usb 4-1: device descriptor read/64, error -71 [ 66.652827][ T10] usb 4-1: device descriptor read/64, error -71 [ 67.111704][ T1523] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 67.111730][ T1523] rust_binder: Read failure Err(EFAULT) in pid:429 [ 67.642808][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 67.812819][ T10] usb 4-1: device descriptor read/64, error -71 [ 68.052810][ T10] usb 4-1: device descriptor read/64, error -71 [ 68.162919][ T10] usb usb4-port1: attempt power cycle [ 68.390279][ T1537] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.474108][ T36] audit: type=1400 audit(1750771909.785:346): avc: denied { wake_alarm } for pid=1540 comm="syz.1.389" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 68.483603][ T1541] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.495381][ T36] audit: type=1400 audit(1750771909.785:347): avc: denied { accept } for pid=1540 comm="syz.1.389" path="socket:[12755]" dev="sockfs" ino=12755 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.525855][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 68.563916][ T10] usb 4-1: device descriptor read/8, error -71 [ 68.693879][ T10] usb 4-1: device descriptor read/8, error -71 [ 68.708583][ T1559] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 68.912865][ T31] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 68.932844][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 68.953842][ T10] usb 4-1: device descriptor read/8, error -71 [ 69.066092][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 69.080426][ T31] usb 3-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 69.091365][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.093332][ T10] usb 4-1: device descriptor read/8, error -71 [ 69.099785][ T31] usb 3-1: Product: syz [ 69.110242][ T31] usb 3-1: Manufacturer: syz [ 69.116769][ T31] usb 3-1: SerialNumber: syz [ 69.212915][ T10] usb usb4-port1: unable to enumerate USB device [ 69.275326][ T36] audit: type=1400 audit(1750771910.585:348): avc: denied { mount } for pid=1580 comm="syz.5.400" name="/" dev="configfs" ino=2369 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 69.298208][ T36] audit: type=1400 audit(1750771910.585:349): avc: denied { search } for pid=1580 comm="syz.5.400" name="/" dev="configfs" ino=2369 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 69.312131][ T1583] netlink: 96 bytes leftover after parsing attributes in process `syz.5.401'. [ 69.325559][ T36] audit: type=1400 audit(1750771910.585:350): avc: denied { setattr } for pid=1580 comm="syz.5.400" name="/" dev="configfs" ino=2369 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 69.354815][ T1551] rust_binder: Error in use_page_slow: ESRCH [ 69.354839][ T1551] rust_binder: use_range failure ESRCH [ 69.362931][ T1585] fuse: Bad value for 'fd' [ 69.374297][ T36] audit: type=1400 audit(1750771910.675:351): avc: denied { mounton } for pid=1584 comm="syz.1.402" path="/79/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 69.374988][ T1551] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 69.396536][ T1551] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 69.404537][ T1551] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:446 [ 69.422013][ T31] snd-usb-audio 3-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 69.442521][ T31] usb 3-1: USB disconnect, device number 14 [ 69.445545][ T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:222.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 69.542843][ T10] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 69.694050][ T10] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 69.703188][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.711693][ T10] usb 4-1: config 0 descriptor?? [ 69.752857][ T1214] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 69.903852][ T1214] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.914030][ T1214] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 69.923102][ T1214] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 69.940080][ T1214] usb 6-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 69.949177][ T1214] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.957302][ T1214] usb 6-1: Product: syz [ 69.961475][ T1214] usb 6-1: Manufacturer: syz [ 69.966100][ T1214] usb 6-1: SerialNumber: syz [ 69.971293][ T1214] usb 6-1: config 0 descriptor?? [ 69.977241][ T1214] usb 6-1: Found UVC 34.00 device syz (8086:0b5b) [ 69.983980][ T1214] usb 6-1: No valid video chain found. [ 70.123452][ T10] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 70.133699][ T10] asix 4-1:0.0: probe with driver asix failed with error -32 [ 70.178771][ T1214] usb 6-1: USB disconnect, device number 15 [ 70.183312][ T574] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 70.277439][ T310] usb 4-1: USB disconnect, device number 22 [ 70.296484][ T1603] kvm: user requested TSC rate below hardware speed [ 70.343950][ T574] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.355647][ T574] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.366218][ T574] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 70.375532][ T574] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.384381][ T574] usb 3-1: config 0 descriptor?? [ 70.492862][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 70.642897][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 70.649585][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 70.661311][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.672224][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 70.681588][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.693070][ T10] usb 2-1: config 0 descriptor?? [ 70.742903][ T310] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 70.902906][ T310] usb 4-1: Using ep0 maxpacket: 16 [ 70.910089][ T310] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 70.922190][ T310] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 70.931891][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.940253][ T310] usb 4-1: Product: syz [ 70.944786][ T310] usb 4-1: Manufacturer: syz [ 70.949452][ T310] usb 4-1: SerialNumber: syz [ 70.993249][ T574] usb 3-1: string descriptor 0 read error: -22 [ 71.106614][ T10] logitech 0003:046D:C298.0006: hidraw0: USB HID v0.00 Device [HID 046d:c298] on usb-dummy_hcd.1-1/input0 [ 71.121679][ T10] logitech 0003:046D:C298.0006: no inputs found [ 71.161792][ T1608] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 71.200317][ T574] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0005/input/input9 [ 71.221052][ T574] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0005/input/input10 [ 71.239025][ T574] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0005/input/input11 [ 71.266242][ T574] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0005/input/input12 [ 71.304149][ T10] usb 2-1: USB disconnect, device number 18 [ 71.310933][ T574] uclogic 0003:256C:006D.0005: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 71.371447][ T310] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 71.377633][ T310] cdc_ncm 4-1:1.0: bind() failure [ 71.384110][ T310] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 71.391181][ T310] cdc_ncm 4-1:1.1: bind() failure [ 71.397967][ T1597] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 71.416462][ T310] usb 3-1: USB disconnect, device number 15 [ 71.441467][ T1626] rust_binder: Error while translating object. [ 71.441524][ T1626] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 71.448240][ T1626] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:454 [ 71.472602][ T1626] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.695644][ T1636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.414'. [ 71.846285][ T1214] usb 4-1: USB disconnect, device number 23 [ 71.912802][ T64] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 71.923057][ T1654] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 71.999556][ T1658] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 71.999582][ T1658] rust_binder: Error while translating object. [ 72.009184][ T1658] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 72.016846][ T1658] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:473 [ 72.082834][ T64] usb 6-1: Using ep0 maxpacket: 32 [ 72.098859][ T64] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 72.107392][ T64] usb 6-1: config 0 has no interface number 0 [ 72.113613][ T64] usb 6-1: config 0 interface 196 has no altsetting 0 [ 72.121857][ T64] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 72.131321][ T64] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.139613][ T64] usb 6-1: Product: syz [ 72.144689][ T64] usb 6-1: Manufacturer: syz [ 72.149795][ T64] usb 6-1: SerialNumber: syz [ 72.154570][ T1214] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 72.163688][ T64] usb 6-1: config 0 descriptor?? [ 72.170566][ T64] ipheth 6-1:0.196: Unable to find alternate settings interface [ 72.316796][ T1650] /dev/rnullb0: Can't open blockdev [ 72.323151][ T1650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.331845][ T1650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.339679][ T1214] usb 4-1: unable to get BOS descriptor or descriptor too short [ 72.348255][ T1214] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 72.356138][ T1214] usb 4-1: can't read configurations, error -71 [ 72.373224][ T64] usb 6-1: USB disconnect, device number 16 [ 72.893598][ T1680] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.898362][ T1680] rust_binder: Error while translating object. [ 72.922893][ T1680] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 72.953201][ T1680] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:249 [ 72.966412][ T1688] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.976182][ T1687] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:249 [ 73.062217][ T1690] rust_binder: Write failure EINVAL in pid:262 [ 73.226620][ T1700] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.355549][ T1706] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.495142][ T1678] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 73.501840][ T1678] rust_binder: Error while translating object. [ 73.513165][ T1678] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 73.519392][ T1678] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:481 [ 73.602847][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 73.629252][ T36] audit: type=1326 audit(1750771914.935:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1709 comm="syz.2.438" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9cf578e929 code=0x0 [ 73.642809][ T310] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 73.738525][ T36] audit: type=1400 audit(1750771915.045:353): avc: denied { getopt } for pid=1709 comm="syz.2.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.772819][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 73.779026][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.790070][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.799908][ T10] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 73.808997][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.817102][ T310] usb 4-1: Using ep0 maxpacket: 32 [ 73.823188][ T10] usb 6-1: config 0 descriptor?? [ 73.828906][ T310] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 73.837485][ T310] usb 4-1: config 0 has no interface number 0 [ 73.843830][ T310] usb 4-1: config 0 interface 184 has no altsetting 0 [ 73.852533][ T310] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 73.861737][ T310] usb 4-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 73.869968][ T310] usb 4-1: Product: syz [ 73.874232][ T310] usb 4-1: Manufacturer: syz [ 73.878926][ T310] usb 4-1: SerialNumber: syz [ 73.884269][ T310] usb 4-1: config 0 descriptor?? [ 73.889997][ T310] smsc75xx v1.0.0 [ 74.231452][ T10] hid-multitouch 0003:1FD2:6007.0007: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.5-1/input0 [ 74.302818][ T1214] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 74.432318][ T1706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.441358][ T1706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.450237][ T1706] rust_binder: Write failure EINVAL in pid:269 [ 74.450537][ T10] usb 6-1: USB disconnect, device number 17 [ 74.452832][ T1214] usb 2-1: Using ep0 maxpacket: 32 [ 74.469873][ T1214] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 74.478112][ T1214] usb 2-1: config 0 has no interface number 0 [ 74.484239][ T1214] usb 2-1: config 0 interface 184 has no altsetting 0 [ 74.491928][ T310] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 74.493446][ T1214] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 74.503037][ T310] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 74.515479][ T1214] usb 2-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 74.529897][ T1214] usb 2-1: Product: syz [ 74.534387][ T1214] usb 2-1: Manufacturer: syz [ 74.539019][ T1214] usb 2-1: SerialNumber: syz [ 74.544752][ T1214] usb 2-1: config 0 descriptor?? [ 74.550584][ T1214] smsc75xx v1.0.0 [ 74.562884][ T1719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1719 comm=syz.2.441 [ 74.833040][ T31] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 74.983487][ T31] usb 3-1: not running at top speed; connect to a high speed hub [ 74.992101][ T31] usb 3-1: config index 0 descriptor too short (expected 32914, got 146) [ 75.000719][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.010991][ T31] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 75.020852][ T31] usb 3-1: config 1 has no interface number 1 [ 75.029815][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 75.042875][ T31] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 75.055452][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 75.064581][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.073769][ T31] usb 3-1: Product: syz [ 75.077953][ T31] usb 3-1: Manufacturer: syz [ 75.082594][ T31] usb 3-1: SerialNumber: syz [ 75.152652][ T1214] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 75.163518][ T1214] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 75.290919][ T1724] overlayfs: missing 'lowerdir' [ 75.300050][ T31] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 75.307977][ T31] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 75.319275][ T31] usb 3-1: USB disconnect, device number 16 [ 75.331518][ T592] udevd[592]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 75.347595][ T310] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 75.358529][ T310] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 75.368726][ T310] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 75.378370][ T310] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 75.779536][ T1214] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 75.790438][ T1214] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 75.801017][ T1214] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 75.810987][ T1214] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 75.840922][ T1740] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 75.840947][ T1740] rust_binder: Error while translating object. [ 75.856566][ T1740] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 75.862842][ T1740] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:500 [ 75.910796][ T1748] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:507 [ 75.937715][ T1752] netlink: 104 bytes leftover after parsing attributes in process `syz.5.454'. [ 75.957303][ T1752] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 75.975997][ T1756] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.977292][ T1757] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false [ 75.983866][ T1756] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false [ 75.991866][ T1756] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 75.992342][ T1757] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 76.000330][ T1756] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:283 [ 76.009636][ T1757] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:283 [ 76.045291][ T36] audit: type=1400 audit(1750771917.355:354): avc: denied { create } for pid=1759 comm="syz.5.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 76.051112][ T1760] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 76.079883][ T1760] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 76.097188][ T1760] rust_binder: Write failure EINVAL in pid:286 [ 76.274514][ T1771] netlink: 20 bytes leftover after parsing attributes in process `syz.5.461'. [ 76.306799][ T36] audit: type=1400 audit(1750771917.615:355): avc: denied { mounton } for pid=1779 comm="syz.5.464" path="/101/file0" dev="ramfs" ino=13944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 76.341486][ T1784] netlink: 104 bytes leftover after parsing attributes in process `syz.2.465'. [ 76.347275][ T1786] syz.5.466: vmalloc error: size 17179873280, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0 [ 76.350660][ T36] audit: type=1400 audit(1750771917.645:356): avc: denied { accept } for pid=1785 comm="syz.5.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.365845][ T1786] CPU: 1 UID: 0 PID: 1786 Comm: syz.5.466 Not tainted 6.12.30-syzkaller-g9d80e3254812 #0 0af3bb1b2b1f0d17039a87b1bb907b41f79d5270 [ 76.365879][ T1786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 76.365906][ T1786] Call Trace: [ 76.365913][ T1786] [ 76.365921][ T1786] __dump_stack+0x21/0x30 [ 76.365954][ T1786] dump_stack_lvl+0x10c/0x190 [ 76.365975][ T1786] ? __cfi_dump_stack_lvl+0x10/0x10 [ 76.365998][ T1786] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 76.366027][ T1786] dump_stack+0x19/0x20 [ 76.366046][ T1786] warn_alloc+0x1bc/0x2a0 [ 76.366064][ T1786] ? stack_depot_save_flags+0x38/0x800 [ 76.366087][ T1786] ? __cfi_warn_alloc+0x10/0x10 [ 76.366104][ T1786] ? kasan_save_track+0x4f/0x80 [ 76.366127][ T1786] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 76.366149][ T1786] ? xskq_create+0x68/0x2a0 [ 76.366167][ T1786] ? xsk_init_queue+0xb6/0x120 [ 76.366193][ T1786] ? xsk_setsockopt+0x43f/0x6f0 [ 76.366211][ T1786] ? do_sock_setsockopt+0x26a/0x400 [ 76.366231][ T1786] ? __x64_sys_setsockopt+0x1b8/0x250 [ 76.366250][ T1786] ? x64_sys_call+0x2adc/0x2ee0 [ 76.366273][ T1786] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 76.366295][ T1786] __vmalloc_node_range_noprof+0x135/0x1420 [ 76.366320][ T1786] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 76.366340][ T1786] ? avc_has_perm+0x144/0x220 [ 76.366359][ T1786] ? kasan_save_alloc_info+0x40/0x50 [ 76.366378][ T1786] ? __kasan_kmalloc+0x96/0xb0 [ 76.366401][ T1786] vmalloc_user_noprof+0x77/0x90 [ 76.366420][ T1786] ? xskq_create+0xdb/0x2a0 [ 76.366438][ T1786] xskq_create+0xdb/0x2a0 [ 76.366457][ T1786] xsk_init_queue+0xb6/0x120 [ 76.366475][ T1786] xsk_setsockopt+0x43f/0x6f0 [ 76.366493][ T1786] ? __cfi_xsk_setsockopt+0x10/0x10 [ 76.366511][ T1786] ? do_futex+0x309/0x500 [ 76.366536][ T1786] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 76.366554][ T1786] ? security_socket_setsockopt+0x33/0xd0 [ 76.366576][ T1786] ? __cfi_xsk_setsockopt+0x10/0x10 [ 76.366594][ T1786] do_sock_setsockopt+0x26a/0x400 [ 76.366613][ T1786] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 76.366633][ T1786] __x64_sys_setsockopt+0x1b8/0x250 [ 76.366652][ T1786] x64_sys_call+0x2adc/0x2ee0 [ 76.366674][ T1786] do_syscall_64+0x58/0xf0 [ 76.366689][ T1786] ? clear_bhb_loop+0x50/0xa0 [ 76.366708][ T1786] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 76.366733][ T1786] RIP: 0033:0x7ffaa6d8e929 [ 76.366753][ T1786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.366770][ T1786] RSP: 002b:00007ffaa53f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 76.366792][ T1786] RAX: ffffffffffffffda RBX: 00007ffaa6fb5fa0 RCX: 00007ffaa6d8e929 [ 76.366808][ T1786] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 76.366820][ T1786] RBP: 00007ffaa6e10b39 R08: 0000000000000004 R09: 0000000000000000 [ 76.366833][ T1786] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 76.366846][ T1786] R13: 0000000000000000 R14: 00007ffaa6fb5fa0 R15: 00007ffd5102ae38 [ 76.366861][ T1786] [ 76.367015][ T1786] Mem-Info: [ 76.389191][ T1784] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 76.399930][ T1786] active_anon:7245 inactive_anon:0 isolated_anon:0 [ 76.399930][ T1786] active_file:20077 inactive_file:2236 isolated_file:0 [ 76.399930][ T1786] unevictable:0 dirty:95 writeback:0 [ 76.399930][ T1786] slab_reclaimable:6469 slab_unreclaimable:69866 [ 76.399930][ T1786] mapped:24527 shmem:168 pagetables:940 [ 76.399930][ T1786] sec_pagetables:0 bounce:0 [ 76.399930][ T1786] kernel_misc_reclaimable:0 [ 76.399930][ T1786] free:1523637 free_pcp:3803 free_cma:0 [ 76.575263][ T10] usb 4-1: USB disconnect, device number 26 [ 76.590771][ T1786] Node 0 active_anon:28824kB inactive_anon:0kB active_file:80308kB inactive_file:8944kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:98148kB dirty:436kB writeback:0kB shmem:672kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4720kB pagetables:3616kB sec_pagetables:0kB all_unreclaimable? no [ 76.785893][ T1786] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2966020kB mlocked:0kB bounce:0kB free_pcp:5808kB local_pcp:0kB free_cma:0kB [ 76.815815][ T1786] lowmem_reserve[]: 0 3921 3921 [ 76.820708][ T1786] Normal free:3141392kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28860kB inactive_anon:0kB active_file:80308kB inactive_file:8944kB unevictable:0kB writepending:440kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:2328kB local_pcp:1556kB free_cma:0kB [ 76.852121][ T1786] lowmem_reserve[]: 0 0 0 [ 76.856588][ T1786] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 6*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 76.872076][ T1786] Normal: 1621*4kB (UME) 467*8kB (UME) 337*16kB (UME) 1489*32kB (UME) 992*64kB (UME) 310*128kB (UME) 63*256kB (UME) 29*512kB (UME) 12*1024kB (UME) 7*2048kB (UME) 712*4096kB (M) = 3140380kB [ 76.890805][ T1786] 22475 total pagecache pages [ 76.897033][ T1786] 0 pages in swap cache [ 76.901323][ T1786] Free swap = 124728kB [ 76.906002][ T1786] Total swap = 124996kB [ 76.910172][ T1786] 2097051 pages RAM [ 76.914096][ T1786] 0 pages HighMem/MovableOnly [ 76.918764][ T1786] 351516 pages reserved [ 76.923001][ T1786] 0 pages cma reserved [ 76.928343][ T1786] Memory allocations: [ 76.932417][ T1786] 0 B 0 init/main.c:1370 func:do_initcalls [ 76.939674][ T1786] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 76.947788][ T1786] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 76.956619][ T1786] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 76.964777][ T1786] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 76.972732][ T1786] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 76.981600][ T1786] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 76.989701][ T1786] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 76.997656][ T1786] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 77.006427][ T1786] 0 B 0 init/initramfs.c:101 func:find_link [ 77.039164][ T36] audit: type=1400 audit(1750771918.345:357): avc: denied { append } for pid=1807 comm="syz.5.473" name="usbmon8" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 77.076027][ T10] usb 2-1: USB disconnect, device number 19 [ 77.086817][ T1811] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 77.098052][ T1814] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 77.197221][ T1812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 77.204275][ T1808] rust_binder: Error while translating object. [ 77.210734][ T1808] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 77.216945][ T1808] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:310 [ 77.227489][ T36] audit: type=1400 audit(1750771918.535:358): avc: denied { block_suspend } for pid=1807 comm="syz.5.473" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 77.422841][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 77.448811][ T1839] can0: slcan on ttyS3. [ 77.452666][ T36] audit: type=1400 audit(1750771918.755:359): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 77.478580][ T36] audit: type=1400 audit(1750771918.785:360): avc: denied { search } for pid=148 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.501230][ T36] audit: type=1400 audit(1750771918.785:361): avc: denied { read } for pid=148 comm="dhcpcd" name="n15" dev="tmpfs" ino=2614 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 77.576293][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 77.585671][ T10] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 77.593924][ T10] usb 2-1: config 0 has no interface number 0 [ 77.601897][ T10] usb 2-1: config 0 interface 184 has no altsetting 0 [ 77.618244][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 77.631570][ T10] usb 2-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 77.640048][ T10] usb 2-1: Product: syz [ 77.645389][ T10] usb 2-1: Manufacturer: syz [ 77.650012][ T10] usb 2-1: SerialNumber: syz [ 77.664135][ T10] usb 2-1: config 0 descriptor?? [ 77.671645][ T10] smsc75xx v1.0.0 [ 77.705438][ T64] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 77.745464][ T1871] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:530 [ 77.746682][ T1872] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 77.771759][ T1876] Unsupported ieee802154 address type: 0 [ 77.784417][ T1877] Unsupported ieee802154 address type: 0 [ 77.862801][ T64] usb 4-1: Using ep0 maxpacket: 32 [ 77.869228][ T64] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 77.879196][ T64] usb 4-1: config 0 has no interface number 0 [ 77.885889][ T64] usb 4-1: config 0 interface 184 has no altsetting 0 [ 77.894636][ T64] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 77.904132][ T64] usb 4-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 77.912381][ T64] usb 4-1: Product: syz [ 77.917109][ T64] usb 4-1: Manufacturer: syz [ 77.921966][ T64] usb 4-1: SerialNumber: syz [ 77.928854][ T64] usb 4-1: config 0 descriptor?? [ 77.935159][ T64] smsc75xx v1.0.0 [ 78.092814][ T1214] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 78.243803][ T1214] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 78.252028][ T1214] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.262164][ T1214] usb 3-1: config 0 has no interface number 0 [ 78.269785][ T1214] usb 3-1: New USB device found, idVendor=056d, idProduct=0000, bcdDevice=39.00 [ 78.279279][ T1214] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.279905][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 78.287317][ T1214] usb 3-1: Product: syz [ 78.287337][ T1214] usb 3-1: Manufacturer: syz [ 78.287350][ T1214] usb 3-1: SerialNumber: syz [ 78.294044][ T1214] usb 3-1: config 0 descriptor?? [ 78.303086][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 78.514216][ T1880] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 78.514241][ T1880] rust_binder: Error while translating object. [ 78.524839][ T1880] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 78.531125][ T1880] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:535 [ 78.536929][ T64] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 78.560551][ T64] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 78.616390][ T1214] usb 3-1: Found UVC 0.00 device syz (056d:0000) [ 78.622940][ T1214] usb 3-1: No valid video chain found. [ 78.632144][ T1214] usb 3-1: USB disconnect, device number 17 [ 79.170267][ T1908] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 79.177631][ T1908] rust_binder: Write failure EINVAL in pid:550 [ 79.178125][ T64] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 79.195727][ T64] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 79.206917][ T64] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 79.217179][ T64] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 79.552209][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 79.563388][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 79.573219][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 79.573977][ T1917] futex_wake_op: syz.5.500 tries to shift op by -1; fix this program [ 79.582715][ T10] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 79.631852][ T1916] KVM: debugfs: duplicate directory 1916-14 [ 79.790901][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 79.790918][ T36] audit: type=1400 audit(1750771921.095:376): avc: denied { bind } for pid=1922 comm="syz.5.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.068837][ T1931] rust_binder: Error while translating object. [ 80.068870][ T1931] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 80.075218][ T1931] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:558 [ 80.092865][ T310] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 80.138935][ T1937] rust_binder: Write failure EFAULT in pid:563 [ 80.254123][ T310] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 57343, setting to 64 [ 80.271418][ T310] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 80.283196][ T310] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 80.292433][ T310] usb 6-1: New USB device strings: Mfr=1, Product=66, SerialNumber=3 [ 80.300584][ T310] usb 6-1: Product: syz [ 80.302715][ T1951] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 80.304791][ T1951] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 80.305842][ T310] usb 6-1: Manufacturer: syz [ 80.322401][ T310] usb 6-1: SerialNumber: syz [ 80.328198][ T310] usb 6-1: config 0 descriptor?? [ 80.333532][ T1928] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 80.483045][ T310] usb 4-1: USB disconnect, device number 27 [ 80.513514][ T1968] tipc: Trying to set illegal importance in message [ 80.573605][ T64] usb 2-1: USB disconnect, device number 20 [ 80.601809][ T1973] rust_binder: Write failure EINVAL in pid:292 [ 80.757225][ T1987] rust_binder: Write failure EINVAL in pid:297 [ 80.764352][ T1987] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 80.770697][ T1987] rust_binder: Read failure Err(EFAULT) in pid:297 [ 80.830125][ T1988] rust_binder: Write failure EINVAL in pid:297 [ 81.058746][ T64] usb 6-1: USB disconnect, device number 18 [ 81.084586][ T1991] bpf: Bad value for 'mode' [ 81.291575][ T2001] binder: Bad value for 'defcontext' [ 81.402813][ T64] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 81.542797][ T1214] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 81.550066][ T2008] /dev/rnullb0: Can't open blockdev [ 81.565429][ T64] usb 6-1: Using ep0 maxpacket: 32 [ 81.573661][ T64] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 81.582162][ T64] usb 6-1: config 0 has no interface number 0 [ 81.585989][ T2012] tmpfs: Bad value for 'nr_blocks' [ 81.588915][ T64] usb 6-1: config 0 interface 184 has no altsetting 0 [ 81.612108][ T2014] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.614477][ T64] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 81.631962][ T64] usb 6-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 81.640893][ T64] usb 6-1: Product: syz [ 81.645315][ T64] usb 6-1: Manufacturer: syz [ 81.650793][ T64] usb 6-1: SerialNumber: syz [ 81.659062][ T64] usb 6-1: config 0 descriptor?? [ 81.665306][ T64] smsc75xx v1.0.0 [ 81.693118][ T1214] usb 3-1: Using ep0 maxpacket: 32 [ 81.699807][ T1214] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 81.708072][ T1214] usb 3-1: config 0 has no interface number 0 [ 81.714221][ T1214] usb 3-1: config 0 interface 184 has no altsetting 0 [ 81.724078][ T1214] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 81.733194][ T1214] usb 3-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 81.744469][ T1214] usb 3-1: Product: syz [ 81.748793][ T1214] usb 3-1: Manufacturer: syz [ 81.754067][ T1214] usb 3-1: SerialNumber: syz [ 81.763763][ T2024] rust_binder: Error while translating object. [ 81.763804][ T2024] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 81.770859][ T2024] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:307 [ 81.780732][ T1214] usb 3-1: config 0 descriptor?? [ 81.783016][ T2024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.790935][ T1214] smsc75xx v1.0.0 [ 81.803552][ T2026] rust_binder: Error while translating object. [ 81.806069][ T2026] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 81.812627][ T2026] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:307 [ 81.835061][ T36] audit: type=1400 audit(1750771923.145:377): avc: denied { accept } for pid=2027 comm="syz.3.535" path="socket:[15360]" dev="sockfs" ino=15360 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 81.899790][ T2033] fuse: Bad value for 'fd' [ 81.916724][ T2035] rust_binder: Write failure EFAULT in pid:318 [ 81.939214][ T2040] batadv_slave_1: entered promiscuous mode [ 82.013745][ T2039] batadv_slave_1: left promiscuous mode [ 82.065308][ T2042] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:325 [ 82.116571][ T36] audit: type=1400 audit(1750771923.425:378): avc: denied { create } for pid=2041 comm="syz.3.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 82.116904][ T2043] rust_binder: Write failure EINVAL in pid:325 [ 82.269258][ T64] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 82.286664][ T64] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 82.408840][ T1214] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 82.421957][ T1214] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 82.530379][ T2051] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742) [ 82.530406][ T2051] rust_binder: Error while translating object. [ 82.542917][ T2051] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 82.549326][ T2051] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:303 [ 82.615629][ T2057] fuse: Bad value for 'fd' [ 82.622687][ T36] audit: type=1400 audit(1750771923.925:379): avc: denied { mounton } for pid=2056 comm="syz.1.545" path="/105/file0" dev="tmpfs" ino=606 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 82.898081][ T64] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 82.909075][ T64] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 82.919156][ T64] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 82.929522][ T64] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -61 [ 82.954047][ T36] audit: type=1400 audit(1750771924.265:380): avc: denied { bind } for pid=2065 comm="syz.3.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 82.992937][ T310] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 83.143885][ T310] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.155587][ T310] usb 2-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51 [ 83.164875][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.172928][ T310] usb 2-1: Product: syz [ 83.177232][ T310] usb 2-1: Manufacturer: syz [ 83.181842][ T310] usb 2-1: SerialNumber: syz [ 83.187228][ T310] usb 2-1: config 0 descriptor?? [ 83.193110][ T310] usb 2-1: bad CDC descriptors [ 83.198049][ T310] cdc_acm 2-1:0.0: Control and data interfaces are not separated! [ 83.205919][ T310] cdc_acm 2-1:0.0: This needs exactly 3 endpoints [ 83.212350][ T310] cdc_acm 2-1:0.0: probe with driver cdc_acm failed with error -22 [ 83.382795][ T312] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 83.396953][ T64] usb 2-1: USB disconnect, device number 21 [ 83.408994][ T2073] netlink: 16 bytes leftover after parsing attributes in process `syz.1.551'. [ 83.419631][ T2074] netlink: 16 bytes leftover after parsing attributes in process `syz.1.551'. [ 83.542853][ T312] usb 4-1: Using ep0 maxpacket: 16 [ 83.549396][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.561399][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.573636][ T312] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 83.583277][ T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.592222][ T312] usb 4-1: config 0 descriptor?? [ 83.637948][ T36] audit: type=1400 audit(1750771924.945:381): avc: denied { create } for pid=2080 comm="syz.1.553" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 83.638402][ T2081] /dev/rnullb0: Can't open blockdev [ 83.659112][ T36] audit: type=1400 audit(1750771924.965:382): avc: denied { link } for pid=2080 comm="syz.1.553" name="file1" dev="tmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 83.664479][ T1214] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 83.699793][ T2085] fuse: Bad value for 'fd' [ 83.702606][ T1214] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 83.719273][ T1214] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 83.728809][ T1214] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 84.119703][ T310] usb 6-1: USB disconnect, device number 19 [ 84.128618][ T2094] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.204647][ T312] hid-multitouch 0003:1FD2:6007.0008: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 84.241168][ T2102] random: crng reseeded on system resumption [ 84.394924][ T2116] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.395036][ T2116] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.404522][ T2116] overlayfs: failed to get inode (-116) [ 84.408223][ T312] usb 4-1: USB disconnect, device number 28 [ 84.410986][ T2116] overlayfs: failed to look up (bus) for ino (-116) [ 84.454581][ T2122] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.454964][ T2122] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 84.521240][ T2129] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.555960][ T2133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.619392][ T2138] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 84.634099][ T2138] rust_binder: Write failure EINVAL in pid:405 [ 84.690273][ T312] usb 3-1: USB disconnect, device number 18 [ 84.758048][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 84.832440][ T2149] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 85.020775][ T36] audit: type=1400 audit(1750771926.325:383): avc: denied { execute } for pid=2158 comm="syz.2.576" name="file1" dev="tmpfs" ino=1084 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 85.047063][ T2153] rust_binder: Write failure EINVAL in pid:334 [ 85.062888][ T36] audit: type=1400 audit(1750771926.325:384): avc: denied { execute_no_trans } for pid=2158 comm="syz.2.576" path="/189/file1" dev="tmpfs" ino=1084 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 85.103064][ T36] audit: type=1400 audit(1750771926.325:385): avc: denied { listen } for pid=2158 comm="syz.2.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 85.342830][ T312] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 85.492835][ T312] usb 3-1: Using ep0 maxpacket: 32 [ 85.499640][ T312] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 85.508726][ T312] usb 3-1: config 0 has no interface number 0 [ 85.515122][ T312] usb 3-1: config 0 interface 184 has no altsetting 0 [ 85.523429][ T312] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 85.532603][ T312] usb 3-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 85.541565][ T312] usb 3-1: Product: syz [ 85.545913][ T312] usb 3-1: Manufacturer: syz [ 85.550506][ T312] usb 3-1: SerialNumber: syz [ 85.555711][ T312] usb 3-1: config 0 descriptor?? [ 85.562362][ T312] smsc75xx v1.0.0 [ 85.602802][ T64] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 85.732792][ T64] usb 4-1: device descriptor read/64, error -71 [ 85.972863][ T64] usb 4-1: device descriptor read/64, error -71 [ 86.164213][ T312] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 86.175207][ T312] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 86.212825][ T64] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 86.342989][ T64] usb 4-1: device descriptor read/64, error -71 [ 86.582788][ T64] usb 4-1: device descriptor read/64, error -71 [ 86.692927][ T64] usb usb4-port1: attempt power cycle [ 86.762860][ T950] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 86.762877][ T52] Bluetooth: hci0: command 0x1003 tx timeout [ 87.042813][ T64] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 87.063934][ T64] usb 4-1: device descriptor read/8, error -71 [ 87.121928][ T2188] rust_binder: Write failure EINVAL in pid:346 [ 87.146800][ T2192] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:350 [ 87.193926][ T64] usb 4-1: device descriptor read/8, error -71 [ 87.226075][ T13] bridge_slave_1: left allmulticast mode [ 87.231768][ T13] bridge_slave_1: left promiscuous mode [ 87.237500][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.246246][ T13] bridge_slave_0: left allmulticast mode [ 87.251988][ T13] bridge_slave_0: left promiscuous mode [ 87.257896][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.358284][ T36] audit: type=1400 audit(1750771928.665:386): avc: denied { mounton } for pid=2197 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 87.383890][ T13] veth1_macvtap: left promiscuous mode [ 87.389413][ T13] veth0_vlan: left promiscuous mode [ 87.395171][ T312] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 87.406375][ T312] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 87.416106][ T312] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 87.431082][ T312] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 87.443564][ T64] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 87.456456][ T2199] binder: Bad value for 'stats' [ 87.473790][ T64] usb 4-1: device descriptor read/8, error -71 [ 87.488909][ T2197] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.496096][ T2197] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.503263][ T2197] bridge_slave_0: entered allmulticast mode [ 87.509445][ T2197] bridge_slave_0: entered promiscuous mode [ 87.515971][ T2197] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.523145][ T2197] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.530195][ T2197] bridge_slave_1: entered allmulticast mode [ 87.536477][ T2197] bridge_slave_1: entered promiscuous mode [ 87.577865][ T2197] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.584945][ T2197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.592226][ T2197] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.599270][ T2197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.614160][ T64] usb 4-1: device descriptor read/8, error -71 [ 87.622654][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.630224][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.640158][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.647238][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.657674][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.664747][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.687349][ T2197] veth0_vlan: entered promiscuous mode [ 87.698081][ T2197] veth1_macvtap: entered promiscuous mode [ 87.722900][ T64] usb usb4-port1: unable to enumerate USB device [ 87.821073][ T2213] netlink: 72 bytes leftover after parsing attributes in process `syz.6.597'. [ 87.829987][ T2213] netlink: 12 bytes leftover after parsing attributes in process `syz.6.597'. [ 88.344330][ T2232] rust_binder: Write failure EFAULT in pid:425 [ 88.357035][ T2234] netlink: 24 bytes leftover after parsing attributes in process `syz.5.604'. [ 88.374754][ T2234] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 88.405928][ T36] audit: type=1400 audit(1750771929.715:387): avc: denied { read write } for pid=2238 comm="syz.5.606" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 88.433279][ T36] audit: type=1400 audit(1750771929.715:388): avc: denied { open } for pid=2238 comm="syz.5.606" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 88.453976][ T10] usb 3-1: USB disconnect, device number 19 [ 88.487397][ T2249] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 88.487676][ T2249] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 88.494310][ T2249] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 88.523165][ T2249] rust_binder: Read failure Err(EFAULT) in pid:434 [ 88.528287][ T2251] rust_binder: Error while translating object. [ 88.540213][ T2251] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 88.549920][ T2251] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:19 [ 88.729797][ T2256] rust_binder: Error while translating object. [ 88.739023][ T2256] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 88.745467][ T2256] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:356 [ 88.802799][ T10] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 88.972788][ T10] usb 3-1: Invalid ep0 maxpacket: 32 [ 89.002826][ T1611] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 89.014246][ T2254] netlink: 9 bytes leftover after parsing attributes in process `syz.5.611'. [ 89.023452][ T2254] gretap0: entered promiscuous mode [ 89.052565][ T2254] netlink: 5 bytes leftover after parsing attributes in process `syz.5.611'. [ 89.061790][ T2254] 0{X: renamed from gretap0 [ 89.067982][ T2254] 0{X: left promiscuous mode [ 89.073403][ T2254] 0{X: entered allmulticast mode [ 89.079314][ T2254] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 89.112832][ T10] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 89.152782][ T1611] usb 4-1: Using ep0 maxpacket: 16 [ 89.158986][ T1611] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.172786][ T1611] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.190822][ T1611] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 89.212783][ T1611] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.237875][ T1611] usb 4-1: config 0 descriptor?? [ 89.272882][ T10] usb 3-1: Invalid ep0 maxpacket: 32 [ 89.278455][ T10] usb usb3-port1: attempt power cycle [ 89.286118][ T36] audit: type=1400 audit(1750771930.595:389): avc: denied { bind } for pid=2265 comm="syz.6.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 89.286857][ T2268] rust_binder: Error while translating object. [ 89.313947][ T2267] rust_binder: Error while translating object. [ 89.313979][ T2267] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 89.320242][ T2267] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:27 [ 89.330866][ T2268] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 89.340532][ T2268] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:27 [ 89.387817][ T36] audit: type=1400 audit(1750771930.695:390): avc: denied { bind } for pid=2253 comm="syz.5.611" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.421541][ T36] audit: type=1400 audit(1750771930.725:391): avc: denied { name_bind } for pid=2253 comm="syz.5.611" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 89.442706][ T36] audit: type=1400 audit(1750771930.725:392): avc: denied { node_bind } for pid=2253 comm="syz.5.611" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 89.626236][ T2278] netlink: 'syz.6.620': attribute type 4 has an invalid length. [ 89.633974][ T2278] netlink: 'syz.6.620': attribute type 27 has an invalid length. [ 89.641770][ T2278] netlink: 3609 bytes leftover after parsing attributes in process `syz.6.620'. [ 89.652872][ T10] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 89.668699][ T1611] hid-multitouch 0003:1FD2:6007.0009: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 89.681212][ T10] usb 3-1: Invalid ep0 maxpacket: 32 [ 89.742987][ T306] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 89.812924][ T10] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 89.833211][ T10] usb 3-1: Invalid ep0 maxpacket: 32 [ 89.838622][ T10] usb usb3-port1: unable to enumerate USB device [ 89.887052][ T10] usb 4-1: USB disconnect, device number 33 [ 89.893871][ T306] usb 6-1: Using ep0 maxpacket: 32 [ 89.901773][ T306] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 89.910507][ T306] usb 6-1: config 0 has no interface number 0 [ 89.916740][ T306] usb 6-1: config 0 interface 184 has no altsetting 0 [ 89.928267][ T306] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 89.937652][ T306] usb 6-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 89.945930][ T306] usb 6-1: Product: syz [ 89.950200][ T306] usb 6-1: Manufacturer: syz [ 89.954911][ T306] usb 6-1: SerialNumber: syz [ 89.965661][ T306] usb 6-1: config 0 descriptor?? [ 89.973158][ T306] smsc75xx v1.0.0 [ 90.543064][ T36] audit: type=1400 audit(2000000000.050:393): avc: denied { setopt } for pid=2311 comm="syz.3.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 90.551271][ T2312] rust_binder: Error while translating object. [ 90.562691][ T2312] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 90.564402][ T36] audit: type=1326 audit(2000000000.050:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2311 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05a58e929 code=0x7ffc0000 [ 90.569153][ T2312] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:371 [ 90.578631][ T36] audit: type=1326 audit(2000000000.050:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2311 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe05a58e929 code=0x7ffc0000 [ 90.602071][ T306] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 90.612337][ T36] audit: type=1326 audit(2000000000.050:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2311 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05a58e929 code=0x7ffc0000 [ 90.635232][ T306] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 90.646144][ T36] audit: type=1326 audit(2000000000.050:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2311 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe05a58e929 code=0x7ffc0000 [ 90.701537][ T36] audit: type=1326 audit(2000000000.050:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2311 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05a58e929 code=0x7ffc0000 [ 90.724829][ T36] audit: type=1326 audit(2000000000.050:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2311 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe05a58d290 code=0x7ffc0000 [ 90.748055][ T36] audit: type=1326 audit(2000000000.050:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2311 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05a58e929 code=0x7ffc0000 [ 90.771303][ T36] audit: type=1326 audit(2000000000.050:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2311 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe05a58e929 code=0x7ffc0000 [ 90.794820][ T36] audit: type=1326 audit(2000000000.050:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2311 comm="syz.3.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05a58e929 code=0x7ffc0000 [ 91.759508][ T2336] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 91.766904][ T2336] rust_binder: Write failure EINVAL in pid:46 [ 91.822795][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 91.893279][ T306] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 91.904419][ T306] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 91.914332][ T306] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 91.924982][ T306] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -32 [ 91.929879][ T2352] rust_binder: Error while translating object. [ 91.933352][ T2352] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 91.939703][ T2352] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:57 [ 91.982799][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 91.998149][ T10] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 193, changing to 11 [ 92.013413][ T10] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.023256][ T10] usb 3-1: config 0 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 92.036204][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 92.042987][ T10] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 92.046583][ T2363] SELinux: failed to load policy [ 92.052100][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.068804][ T10] usb 3-1: config 0 descriptor?? [ 92.086542][ T2367] rust_binder: inc_ref_done called when no active inc_refs [ 92.086567][ T2367] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:70 [ 92.274792][ T2342] netlink: 2885 bytes leftover after parsing attributes in process `syz.2.637'. [ 92.302024][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 92.314991][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 92.332955][ T10] usb 3-1: USB disconnect, device number 24 [ 92.355707][ T2383] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 92.915116][ T10] usb 6-1: USB disconnect, device number 20 [ 93.081270][ T2405] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 93.082931][ T2405] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 93.089615][ T2405] rust_binder: Write failure EINVAL in pid:452 [ 93.108244][ T2410] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 93.114513][ T2410] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:653 [ 93.342834][ T10] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 93.362862][ T306] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 93.406240][ T2428] rust_binder: Write failure EINVAL in pid:91 [ 93.429403][ T2430] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 93.435615][ T2430] rust_binder: Read failure Err(EFAULT) in pid:93 [ 93.512948][ T306] usb 3-1: Using ep0 maxpacket: 32 [ 93.525798][ T10] usb 6-1: descriptor type invalid, skip [ 93.531658][ T306] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 93.539919][ T306] usb 3-1: config 0 has no interface number 0 [ 93.546057][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 93.554114][ T306] usb 3-1: config 0 interface 184 has no altsetting 0 [ 93.563481][ T10] usb 6-1: config 0 has no interfaces? [ 93.571612][ T2438] binder: Bad value for 'stats' [ 93.573801][ T306] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 93.586589][ T306] usb 3-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 93.595051][ T306] usb 3-1: Product: syz [ 93.595127][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 93.608462][ T306] usb 3-1: Manufacturer: syz [ 93.613094][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.621176][ T10] usb 6-1: Product: syz [ 93.625483][ T306] usb 3-1: SerialNumber: syz [ 93.630312][ T10] usb 6-1: Manufacturer: syz [ 93.635269][ T306] usb 3-1: config 0 descriptor?? [ 93.640306][ T10] usb 6-1: SerialNumber: syz [ 93.645563][ T306] smsc75xx v1.0.0 [ 93.650151][ T10] usb 6-1: config 0 descriptor?? [ 93.822874][ T312] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 93.860657][ T2412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.869219][ T2412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.972818][ T312] usb 7-1: Using ep0 maxpacket: 16 [ 93.980670][ T312] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 93.989795][ T312] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.997845][ T312] usb 7-1: Product: syz [ 94.002031][ T312] usb 7-1: Manufacturer: syz [ 94.006667][ T312] usb 7-1: SerialNumber: syz [ 94.012278][ T312] usb 7-1: config 0 descriptor?? [ 94.018229][ T312] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 94.026080][ T312] usb 7-1: Detected FT4233HP [ 94.084609][ T2444] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:390 [ 94.218555][ T312] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 94.235569][ T312] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 94.247322][ T306] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 94.258285][ T306] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 94.381822][ T312] usb 6-1: USB disconnect, device number 21 [ 94.438424][ T64] usb 7-1: USB disconnect, device number 2 [ 94.444975][ T64] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 94.454575][ T64] ftdi_sio 7-1:0.0: device disconnected [ 94.812817][ T312] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 94.963552][ T312] usb 6-1: Using ep0 maxpacket: 32 [ 94.973642][ T2460] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 94.973682][ T2460] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:394 [ 94.976905][ T312] usb 6-1: unable to get BOS descriptor or descriptor too short [ 95.003355][ T312] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 95.017157][ T312] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 95.027813][ T312] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 95.037398][ T312] usb 6-1: config 128 has no interface number 0 [ 95.043894][ T312] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 95.055422][ T312] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 95.065571][ T312] usb 6-1: config 128 interface 127 has no altsetting 0 [ 95.074160][ T312] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 95.083490][ T312] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.091520][ T312] usb 6-1: Product: syz [ 95.095835][ T312] usb 6-1: Manufacturer: syz [ 95.100496][ T312] usb 6-1: SerialNumber: syz [ 95.185680][ T2507] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 95.185708][ T2507] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 95.327457][ T312] usb 6-1: USB disconnect, device number 22 [ 95.349809][ T544] udevd[544]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 95.461919][ T2532] fuse: Unknown parameter 'f/dsW_Ws?Ni&&˄Y/?1/Eo)-:nP٩^%#%8X;B x#`3-]ԡ[f;45%kɃ' [ 95.461983][ T2531] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:129 [ 95.476686][ T306] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 95.496906][ T306] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 95.507160][ T306] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 95.517223][ T306] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 95.608086][ T2537] binder: Unknown parameter 'defcontext01777777777777777777777' [ 95.668525][ T2545] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 95.772871][ T312] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 95.922807][ T312] usb 7-1: Using ep0 maxpacket: 32 [ 95.928017][ T45] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 95.936579][ T312] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.947525][ T312] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.957286][ T312] usb 7-1: config 0 interface 0 has no altsetting 0 [ 95.963916][ T312] usb 7-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 95.973000][ T312] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.981453][ T312] usb 7-1: config 0 descriptor?? [ 96.082821][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 96.089680][ T45] usb 4-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1023 [ 96.099806][ T45] usb 4-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.113105][ T45] usb 4-1: config 1 interface 0 has no altsetting 0 [ 96.122281][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 96.131802][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.139878][ T45] usb 4-1: Product: syz [ 96.144088][ T45] usb 4-1: Manufacturer: ࠇ [ 96.148741][ T45] usb 4-1: SerialNumber: syz [ 96.153900][ T45] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 96.162588][ T45] usb 4-1: no configuration chosen from 1 choice [ 96.388212][ T2535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.399120][ T2535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.424293][ T312] hid-steam 0003:28DE:1205.000A: hidraw0: USB HID v0.00 Device [HID 28de:1205] on usb-dummy_hcd.6-1/input0 [ 96.518190][ T312] usb 3-1: USB disconnect, device number 25 [ 96.555890][ T2560] SELinux: failed to load policy [ 96.563158][ T2560] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 96.570798][ T2560] rust_binder: Write failure EINVAL in pid:659 [ 96.627368][ T45] usb 7-1: USB disconnect, device number 3 [ 96.800036][ T2556] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:469 [ 96.839889][ T2570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.706'. [ 96.872485][ T2572] binder: Bad value for 'max' [ 96.889726][ T2574] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:672 [ 96.890068][ T2574] rust_binder: Error while translating object. [ 96.899372][ T2574] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 96.905587][ T2574] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:672 [ 97.162851][ T45] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 97.322801][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 97.329120][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.340050][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.349809][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 97.362790][ T45] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 97.371856][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.380400][ T45] usb 3-1: config 0 descriptor?? [ 97.393128][ T306] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 97.542873][ T306] usb 6-1: Using ep0 maxpacket: 32 [ 97.549220][ T306] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 97.557483][ T1611] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 97.564998][ T306] usb 6-1: config 0 has no interface number 0 [ 97.571083][ T306] usb 6-1: config 0 interface 184 has no altsetting 0 [ 97.579436][ T306] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 97.588555][ T306] usb 6-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 97.597014][ T306] usb 6-1: Product: syz [ 97.601187][ T306] usb 6-1: Manufacturer: syz [ 97.605800][ T306] usb 6-1: SerialNumber: syz [ 97.611099][ T306] usb 6-1: config 0 descriptor?? [ 97.616855][ T306] smsc75xx v1.0.0 [ 97.722810][ T1611] usb 7-1: Using ep0 maxpacket: 8 [ 97.728897][ T1611] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 97.737213][ T1611] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 97.745684][ T1611] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 97.754760][ T1611] usb 7-1: config 250 has no interface number 0 [ 97.761046][ T1611] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 97.772666][ T1611] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 97.783139][ T1611] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 97.791765][ T45] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 97.793435][ T1611] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 97.802618][ T45] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 97.811790][ T1611] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 97.819621][ T45] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 97.832211][ T1611] usb 7-1: config 250 interface 228 has no altsetting 0 [ 97.839202][ T45] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 97.847024][ T1611] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 97.853260][ T45] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 97.862472][ T1611] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 97.869882][ T45] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 97.878361][ T1611] usb 7-1: Product: syz [ 97.885412][ T45] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 97.889667][ T1611] usb 7-1: SerialNumber: syz [ 97.896881][ T45] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 97.903885][ T1611] hub 7-1:250.228: bad descriptor, ignoring hub [ 97.908961][ T45] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 97.915108][ T1611] hub 7-1:250.228: probe with driver hub failed with error -5 [ 97.929865][ T45] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 97.940086][ T45] microsoft 0003:045E:07DA.000B: No inputs registered, leaving [ 97.948861][ T45] microsoft 0003:045E:07DA.000B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 97.960368][ T45] microsoft 0003:045E:07DA.000B: no inputs found [ 97.966748][ T45] microsoft 0003:045E:07DA.000B: could not initialize ff, continuing anyway [ 97.997857][ T10] usb 3-1: USB disconnect, device number 26 [ 98.104331][ T1611] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 4 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 98.246726][ T306] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 98.257649][ T306] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 98.304395][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 98.304412][ T36] audit: type=1400 audit(2000000007.810:424): avc: denied { read write } for pid=2588 comm="syz.6.715" name="lp0" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 98.333972][ T36] audit: type=1400 audit(2000000007.810:425): avc: denied { open } for pid=2588 comm="syz.6.715" path="/dev/usb/lp0" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 98.688430][ T312] usb 4-1: USB disconnect, device number 34 [ 98.739361][ T36] audit: type=1400 audit(2000000008.240:426): avc: denied { write } for pid=2605 comm="syz.3.719" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 98.826771][ T2610] fuse: Bad value for 'rootmode' [ 98.884589][ T2596] binder: Unknown parameter 'seclab' [ 99.443197][ T2618] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:686 [ 99.451613][ T36] audit: type=1400 audit(2000000008.950:427): avc: denied { ioctl } for pid=2619 comm="syz.2.724" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 99.453098][ T2620] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.486800][ T306] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 99.487276][ T2620] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 99.493705][ T306] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 99.504514][ T2620] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 99.512549][ T306] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 99.522608][ T2621] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.530265][ T306] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -32 [ 99.792849][ T495] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 99.942794][ T495] usb 3-1: Using ep0 maxpacket: 32 [ 99.948999][ T495] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 99.957229][ T495] usb 3-1: config 0 has no interface number 0 [ 99.962809][ T306] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 99.963340][ T495] usb 3-1: config 0 interface 184 has no altsetting 0 [ 99.979010][ T495] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 99.988260][ T495] usb 3-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 99.996459][ T495] usb 3-1: Product: syz [ 100.000622][ T495] usb 3-1: Manufacturer: syz [ 100.005242][ T495] usb 3-1: SerialNumber: syz [ 100.010608][ T495] usb 3-1: config 0 descriptor?? [ 100.016337][ T495] smsc75xx v1.0.0 [ 100.112838][ T306] usb 4-1: Using ep0 maxpacket: 32 [ 100.119095][ T306] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 100.127163][ T306] usb 4-1: config 0 has no interface number 0 [ 100.133278][ T306] usb 4-1: too many endpoints for config 0 interface 2 altsetting 2: 129, using maximum allowed: 30 [ 100.144331][ T306] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 1536, setting to 1024 [ 100.155429][ T306] usb 4-1: config 0 interface 2 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 100.165452][ T306] usb 4-1: config 0 interface 2 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 100.178450][ T306] usb 4-1: config 0 interface 2 has no altsetting 0 [ 100.186681][ T306] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 100.195796][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.203848][ T306] usb 4-1: Product: syz [ 100.208014][ T306] usb 4-1: Manufacturer: syz [ 100.212596][ T306] usb 4-1: SerialNumber: syz [ 100.218201][ T306] usb 4-1: config 0 descriptor?? [ 100.223545][ T2627] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 100.433786][ T306] usb 4-1: invalid MIDI out EP 0 [ 100.441297][ T306] snd-usb-audio 4-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 100.452116][ T306] usb 4-1: USB disconnect, device number 35 [ 100.458681][ T309] udevd[309]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 100.498216][ T1214] usb 6-1: USB disconnect, device number 23 [ 100.623970][ T495] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 100.634833][ T495] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 100.832833][ T1214] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 100.982796][ T1214] usb 6-1: Using ep0 maxpacket: 32 [ 100.991422][ T1214] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.003866][ T1214] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 101.013016][ T1214] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.021017][ T1214] usb 6-1: Product: syz [ 101.025193][ T1214] usb 6-1: Manufacturer: syz [ 101.029805][ T1214] usb 6-1: SerialNumber: syz [ 101.035268][ T1214] usb 6-1: config 0 descriptor?? [ 101.104334][ T36] audit: type=1400 audit(2000000010.610:428): avc: denied { accept } for pid=2647 comm="syz.3.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.434519][ T45] usb 7-1: USB disconnect, device number 4 [ 101.444547][ T45] usblp0: removed [ 101.449390][ T2658] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 101.449418][ T2658] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:147 [ 101.450028][ T495] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 101.479463][ T495] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 101.489904][ T495] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 101.499755][ T495] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 101.623990][ T495] usb 6-1: USB disconnect, device number 24 [ 101.632793][ T1214] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 101.782841][ T1214] usb 4-1: Using ep0 maxpacket: 32 [ 101.789918][ T1214] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 101.798351][ T1214] usb 4-1: config 0 has no interface number 0 [ 101.805698][ T1214] usb 4-1: config 0 interface 184 has no altsetting 0 [ 101.815025][ T1214] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 101.824527][ T1214] usb 4-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 101.832872][ T1214] usb 4-1: Product: syz [ 101.837252][ T1214] usb 4-1: Manufacturer: syz [ 101.841948][ T1214] usb 4-1: SerialNumber: syz [ 101.854411][ T1214] usb 4-1: config 0 descriptor?? [ 101.864538][ T1214] smsc75xx v1.0.0 [ 101.953216][ T2680] support for cryptoloop has been removed. Use dm-crypt instead. [ 102.305762][ T2694] fuse: Unknown parameter 'grou00000000000000000000' [ 102.367432][ T2701] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 102.374774][ T2701] rust_binder: Write failure EINVAL in pid:178 [ 102.397135][ T2703] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:180 [ 102.399751][ T2705] SELinux: policydb version 1353147038 does not match my version range 15-33 [ 102.404255][ T2703] rust_binder: Error while translating object. [ 102.412693][ T2705] SELinux: failed to load policy [ 102.421531][ T2703] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 102.432657][ T2703] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:180 [ 102.462728][ T2709] rust_kernel: panicked at rust/kernel/sync/poll.rs:54:18: [ 102.462728][ T2709] null pointer dereference occurred [ 102.484309][ T1214] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 102.486020][ T2709] ------------[ cut here ]------------ [ 102.495433][ T1214] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 102.500719][ T2709] kernel BUG at rust/helpers/bug.c:7! [ 102.501370][ T2709] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 102.511382][ T36] audit: type=1400 audit(2000000012.020:429): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 102.515294][ T2709] CPU: 0 UID: 0 PID: 2709 Comm: syz.5.753 Not tainted 6.12.30-syzkaller-g9d80e3254812 #0 0af3bb1b2b1f0d17039a87b1bb907b41f79d5270 [ 102.515319][ T2709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 102.515329][ T2709] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 102.515353][ T2709] Code: 3e ca e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 ed f7 bf 1e 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 a7 33 f6 92 90 90 90 90 90 90 90 90 90 [ 102.515368][ T2709] RSP: 0018:ffffc9000bb5f1b0 EFLAGS: 00010246 [ 102.515384][ T2709] RAX: 000000000000005a RBX: 1ffff9200176be38 RCX: 5e6bcc3a9b6f2000 [ 102.515397][ T2709] RDX: ffffc900011f1000 RSI: 0000000000006ba1 RDI: 0000000000006ba2 [ 102.515408][ T2709] RBP: ffffc9000bb5f1b0 R08: ffffc9000bb5eea7 R09: 1ffff9200176bdd4 [ 102.515420][ T2709] R10: dffffc0000000000 R11: fffff5200176bdd5 R12: 0000000000000000 [ 102.515432][ T2709] R13: dffffc0000000000 R14: ffffc9000bb5f1e0 R15: ffffc9000bb5f210 [ 102.515446][ T2709] FS: 00007ffaa53f76c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 102.523087][ T36] audit: type=1400 audit(2000000012.020:430): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.544116][ T2709] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.544145][ T2709] CR2: 0000200000003fe0 CR3: 0000000124c66000 CR4: 00000000003526b0 [ 102.544161][ T2709] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 102.544171][ T2709] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 102.544183][ T2709] Call Trace: [ 102.544190][ T2709] [ 102.544198][ T2709] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 102.544232][ T2709] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 102.558714][ T36] audit: type=1400 audit(2000000012.020:431): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.567614][ T2709] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 102.567657][ T2709] ? p9pdu_vwritef+0x2720/0x2720 [ 102.567681][ T2709] ? radix_tree_node_alloc+0x1af/0x400 [ 102.567700][ T2709] ? _RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0xa2/0xf0 [ 102.567727][ T2709] ? __asan_memcpy+0x5a/0x80 [ 102.567746][ T2709] _RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0xec/0xf0 [ 102.567773][ T2709] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0x10/0x10 [ 102.573594][ T36] audit: type=1400 audit(2000000012.020:432): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.592636][ T2709] ? p9pdu_writef+0xdb/0x130 [ 102.592669][ T2709] ? p9pdu_vwritef+0x2720/0x2720 [ 102.592695][ T2709] _RNvNtCs9jEwPDbx20M_4core9panicking30panic_null_pointer_dereference+0x49/0x4c [ 102.599491][ T36] audit: type=1400 audit(2000000012.020:433): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 102.606779][ T2709] _RNvMNtNtCs43vyB533jt3_6kernel4sync4pollNtB2_9PollTable8from_ptr+0x40/0x40 [ 102.606813][ T2709] ? _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xce/0x570 [ 102.606845][ T2709] _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xe2/0x570 [ 102.606871][ T2709] ? p9_client_prepare_req+0x732/0xa10 [ 102.606894][ T2709] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 102.606922][ T2709] ? __kasan_check_write+0x18/0x20 [ 102.606944][ T2709] ? _raw_spin_lock+0x8c/0x120 [ 102.606969][ T2709] ? tun_chr_poll+0x127/0x770 [ 102.619140][ T2712] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.622898][ T2709] ? _raw_spin_lock+0x8c/0x120 [ 102.622934][ T2709] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 102.622966][ T2709] p9_fd_request+0x440/0x500 [ 102.931862][ T2709] p9_client_rpc+0x2f9/0xb40 [ 102.936470][ T2709] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 102.944717][ T2709] ? p9_fid_create+0x3d0/0x3d0 [ 102.949486][ T2709] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 102.957752][ T2709] ? p9_conn_create+0x4c9/0x570 [ 102.962609][ T2709] ? p9_fd_create+0x2f3/0x4c0 [ 102.967272][ T2709] p9_client_create+0x96a/0x1190 [ 102.972196][ T2709] ? __cfi_p9_client_create+0x10/0x10 [ 102.977555][ T2709] ? kasan_save_alloc_info+0x40/0x50 [ 102.982856][ T2709] ? __kasan_kmalloc+0x96/0xb0 [ 102.987635][ T2709] ? kstrdup+0x7b/0x140 [ 102.991785][ T2709] ? __kasan_check_write+0x18/0x20 [ 102.996890][ T2709] v9fs_session_init+0x1e1/0x1820 [ 103.001971][ T2709] ? __cfi_v9fs_session_init+0x10/0x10 [ 103.007495][ T2709] ? kasan_save_alloc_info+0x40/0x50 [ 103.012789][ T2709] ? __kasan_kmalloc+0x96/0xb0 [ 103.017574][ T2709] ? v9fs_mount+0xbd/0xa00 [ 103.022088][ T2709] v9fs_mount+0xd7/0xa00 [ 103.026329][ T2709] ? __cfi_v9fs_mount+0x10/0x10 [ 103.031177][ T2709] ? selinux_capable+0x38/0x50 [ 103.035942][ T2709] legacy_get_tree+0x103/0x1b0 [ 103.040700][ T2709] ? __cfi_v9fs_mount+0x10/0x10 [ 103.045550][ T2709] vfs_get_tree+0x9e/0x290 [ 103.049993][ T2709] do_new_mount+0x251/0xb40 [ 103.054499][ T2709] ? security_capable+0xcf/0xf0 [ 103.059355][ T2709] path_mount+0x688/0x1050 [ 103.063766][ T2709] ? putname+0x113/0x150 [ 103.068007][ T2709] __se_sys_mount+0x2bd/0x480 [ 103.072681][ T2709] ? __x64_sys_mount+0xf0/0xf0 [ 103.077451][ T2709] ? __kasan_check_write+0x18/0x20 [ 103.082561][ T2709] ? fpregs_restore_userregs+0x11d/0x260 [ 103.088187][ T2709] __x64_sys_mount+0xc3/0xf0 [ 103.092778][ T2709] x64_sys_call+0x2021/0x2ee0 [ 103.097461][ T2709] do_syscall_64+0x58/0xf0 [ 103.102004][ T2709] ? clear_bhb_loop+0x50/0xa0 [ 103.106671][ T2709] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 103.112563][ T2709] RIP: 0033:0x7ffaa6d8e929 [ 103.116989][ T2709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.136594][ T2709] RSP: 002b:00007ffaa53f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 103.145018][ T2709] RAX: ffffffffffffffda RBX: 00007ffaa6fb5fa0 RCX: 00007ffaa6d8e929 [ 103.152984][ T2709] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 0000000000000000 [ 103.161100][ T2709] RBP: 00007ffaa6e10b39 R08: 0000200000000240 R09: 0000000000000000 [ 103.169080][ T2709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.177047][ T2709] R13: 0000000000000000 R14: 00007ffaa6fb5fa0 R15: 00007ffd5102ae38 [ 103.185037][ T2709] [ 103.188067][ T2709] Modules linked in: [ 103.192194][ T2709] ---[ end trace 0000000000000000 ]--- [ 103.198584][ T2709] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 103.203957][ T2709] Code: 3e ca e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 ed f7 bf 1e 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 a7 33 f6 92 90 90 90 90 90 90 90 90 90 [ 103.223663][ T2709] RSP: 0018:ffffc9000bb5f1b0 EFLAGS: 00010246 [ 103.231615][ T2709] RAX: 000000000000005a RBX: 1ffff9200176be38 RCX: 5e6bcc3a9b6f2000 [ 103.239640][ T2709] RDX: ffffc900011f1000 RSI: 0000000000006ba1 RDI: 0000000000006ba2 [ 103.253936][ T1611] usb 3-1: USB disconnect, device number 27 [ 103.258584][ T2709] RBP: ffffc9000bb5f1b0 R08: ffffc9000bb5eea7 R09: 1ffff9200176bdd4 [ 103.271439][ T2709] R10: dffffc0000000000 R11: fffff5200176bdd5 R12: 0000000000000000 [ 103.279545][ T2709] R13: dffffc0000000000 R14: ffffc9000bb5f1e0 R15: ffffc9000bb5f210 [ 103.287636][ T2709] FS: 00007ffaa53f76c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 103.296748][ T2709] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.303388][ T2709] CR2: 000055557b18e4a8 CR3: 0000000124c66000 CR4: 00000000003526b0 [ 103.311397][ T2709] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 103.319590][ T2709] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 103.327700][ T2709] Kernel panic - not syncing: Fatal exception [ 103.334148][ T2709] Kernel Offset: disabled [ 103.338466][ T2709] Rebooting in 86400 seconds..