last executing test programs: 5.995860298s ago: executing program 1 (id=704): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000040)={0x2b, 0x6, 0x0, {0x3, 0x2, 0x2, 0x0, ':&'}}, 0x2b) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r2, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000180)="ae4c0b850cb1e19bf6a55a7a9058bcca5a5f8453d5cfeec0a19e74f7a8836b1fffadcf0d04797c82df5d8548ba26d5399820de645fb5a42112dd7f83cddfa1d1e902ba6378f6d8bf584fd34fe38b45dbca0960c3ebc3be5b666ab1be77ec5a2bf280caa50d70106cf53bb474bf703697729a2bcc67bb3594d19f8c4285ff3cc28e41e5e1d6c982c636d4c1af464b038065a40c33c5103e717d4a212987ef8b18c00e04098a228d4d577bd1a66e1409036d469f928e15737aa79fa4c9b7b14be5044385b48a4b4d5000cfa3817ad42536ef688bde4a336a02961b1d4af60065e53a9d8cbb3ef24c9b6aef75b921f17853d48e00", 0xf3, 0x0, 0x0, 0x1, r1}]) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x190, 0x0, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_TUPLE_REPLY={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}]}, @CTA_PROTOINFO={0x40, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x3c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x44}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x7}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x5}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x7}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0xfe}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x5, 0x5}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x2a, 0x7}}]}}, @CTA_NAT_SRC={0xa0, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x23}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3c}}]}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}]}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x101}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}]}]}, 0x190}, 0x1, 0x0, 0x0, 0xc0ca65196127d0d0}, 0x40855) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000580)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xec, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xd, 0x41}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xa}, @device_a, @broadcast, @random="f028b37c0b60", {0x9, 0x2}}, 0x36, @val={0x8c, 0x18, {0xc52, "371c0eae282c", @long="a9737be8b1291e28ec50bec4c1ad5485"}}}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x31f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe0}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x997}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x74ab1592a050e704}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x254}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x0, 0x8, 0xffff]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r5 = add_key(&(0x7f0000000800)='.dead\x00', &(0x7f0000000840)={'syz', 0x3}, &(0x7f0000000880)="eeac048ef6f80200157f6a4e8ca7db488249aa212af53a7e2b087e9c47821548866321c3b4c81952945b4d5ed318de2e5474ee07a344a2bc24ea1772ad089a17c3931586", 0x44, 0xfffffffffffffffd) keyctl$setperm(0x5, r5, 0x10000010) ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000900)=0x1000) fcntl$setown(r1, 0x8, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), r1) r6 = memfd_secret(0x80000) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, r3, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x3b}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff09}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x200}]}]}, 0x34}}, 0x4040800) setsockopt(r6, 0xfffffffb, 0x619, &(0x7f0000000a80)="9eea1abf5118a18a00d7ca726eb58957dc34ce72fb26f2c6aea1c4f35f479b185945966c2e108767e3a260bb7a347a0ebad328b4742428582f22cfd8aeb60607dd4e1114281ebd02b1f26c53466cdf505275b02be0856eff29fe280ab044de97587030f0eab37e5f978a7e4f62e2d28132eb642f3575512dde350f7cdf77032e2000b2cc53c4ec3ba048c5e8b64d6b0a6146627ee0dfb1bcdc4847d895f4df4f92d63336f4a13e189799a2e6295cb33585a16c540928429feb5b5b616362de269cd1d99a6af9", 0xc6) newfstatat(0xffffffffffffff9c, &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) keyctl$get_persistent(0x16, r7, r5) sendmmsg$inet(r1, &(0x7f0000001140)=[{{&(0x7f0000000c40)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000001040)=[{&(0x7f0000000c80)="11491186d0a1106c060a2961dcbcae68ffa250d8e8e9f3b554e2e2fca39c9bade0f623ebe9e0136b109bcb66ca3178586fb6d91011649751c1814358a4a0dd367297f4fcde2ef2778a1d9e5ef8213cbd19b714b604b108ecbe94f8862b9af8fad602b06439a72930884d8b61aca0f79311ae674679e9", 0x76}, {&(0x7f0000000d00)="c0b6ea60613fd81e3d1995cf9a59fa9452250bc938c445e2d9612221e5bbb5c73cab0dcb64736be17fb96e180473b2eb66635f8b562218a459c72988af8d8a570c5c4648b2c84f6e1bf8c8853bef0f04dbda6b5d807374687dad1a5fc5cbfe80807192b58d20f0426227e88d54b136112e7c59caf90f6b14f3c74ebc6e5ffe5bbe6c6e548d0c2e20bc26258a2af40ec3a37a12ca43fc0e17c66af5b086", 0x9d}, {&(0x7f0000000dc0)="b6ec391513a0598125f1332b2e", 0xd}, {&(0x7f0000000e00)="765c0b7d9645d34f51c99267d8a5d776afa89d3f74b9dd1aaa85266d80ae9347909d08b1c392a61ad5b4201f0f6026d06ae43c4812e18ed5ba41158dcf2476a147ecd5baf90cf420c8c85f05fd9b89782365e5a6430d25a499154be9d9a5990e17cf71be88", 0x65}, {&(0x7f0000000e80)="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", 0xfc}, {&(0x7f0000000f80)="db7daa27b0802b671b527073119cbf884bf1427377aa16fd254ef95224969766a47956e0c41d79f7971b2db7977c776655a2b4b78b95719771832baa5cc64f58bb336a3247d3e09cb02414edf17185013bde551870578f4b21ac12d333305630a09a78d9331eda75bef7f956384b83ec8089613708a48717ac8e5009", 0x7c}, {&(0x7f0000001000)="d55dd47c950e76eaad94b7553da4d7104f314f2be14d", 0x16}], 0x7, &(0x7f00000010c0)=[@ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x800}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80}}], 0x60}}], 0x1, 0xe08e5c8c75c7db11) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000001180)={0x2b, 0x4, 0x0, {0x5, 0x4, 0x3, 0x0, [0x0, 0x0, 0x0]}}, 0x2b) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001200), r1) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r8, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x1c, r9, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048846}, 0x48800) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000001300)=0x2) ioctl$EXT4_IOC_GETSTATE(r8, 0x40046629, &(0x7f0000001340)) ioctl$FS_IOC_GETFSUUID(r6, 0x80111500, &(0x7f0000001380)) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001580)={&(0x7f0000001440)={0x120, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfcc9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xf2f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000000}}]}, 0x120}}, 0x44008040) 5.969983998s ago: executing program 1 (id=705): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x8, 0xfffffffffffffffd, 0x81, 0x1, 0x0, 0x4002004c4, 0x6, 0xffffffffffffffff, 0x8, 0x9, 0x2, 0x4, 0xb, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.909218869s ago: executing program 1 (id=706): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xd) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000000)) ioctl$KVM_CLEAR_DIRTY_LOG(r0, 0xc018aec0, &(0x7f0000000440)={0x10200, 0x100, 0x400, &(0x7f0000000040)=[0xff, 0x3, 0x8, 0x5, 0xfffffffffffffff9, 0x7, 0x6, 0x3, 0xffffffffffffabbb, 0x5, 0x6, 0x6, 0x3, 0x28, 0x7, 0xffffffffffffffff, 0xffffffffffff0000, 0x800, 0xb7b, 0x0, 0xe50a, 0x3, 0x4, 0x689, 0x7, 0x2, 0x2, 0x4e07, 0x8001, 0x6, 0x0, 0x0, 0x5831, 0xc13, 0xb86, 0x3, 0x3, 0x4bb, 0x4, 0x5, 0x5, 0x6, 0x8, 0xa419, 0xffff, 0x7ff, 0x4, 0x200, 0x40, 0xd, 0x1ff, 0x8, 0x9, 0x7, 0x59, 0x8, 0x1, 0x7, 0x6, 0x4, 0xc48, 0x400, 0x6, 0x8, 0x8, 0x8, 0x3ff, 0x1000, 0x80000001, 0x5, 0x7, 0x3, 0x2a6c6e88, 0x3, 0x20, 0x400, 0x1, 0x4, 0x8, 0x6d82, 0x6, 0xa, 0xfffffffffffffff8, 0xfffffffffffffffb, 0x10f, 0xff7e, 0x3ff, 0x5, 0x7, 0x4, 0x7e, 0x9, 0x5, 0x84, 0xe05, 0x5e9, 0x7fffffffffffffff, 0xa, 0x1, 0x100000001, 0x3, 0x1, 0x5, 0x2, 0x5, 0x10000, 0x4, 0x80000001, 0x3, 0x6, 0x8000000000000001, 0x81, 0xde1, 0xd, 0x4, 0x0, 0x1, 0x1000, 0x8, 0x101, 0x2ab, 0x6, 0x2, 0x0, 0x800, 0xb86, 0x7, 0x8]}) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r0, 0x8010aebb, &(0x7f0000000480)={0x80ad004, 0x110000}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000000500), &(0x7f0000000540)=0x4) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000580)={0x2, 0x2}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f00000005c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000015c0)={{0x0, 0x2, 0x8, 0x401, 0x5, 0xa15, 0xfffffffeffffffff, 0x7, 0x8, 0x10000, 0x8000, 0x5, 0x48c, 0xffffffffffff3e3c, 0x9}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000025c0)={r5, r6, "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", "835503375ee10836e1d128a897b6cc1be3dd3788ad1919c9da0d2b9cf2d4db1640e7a8f25680f3c58627b7f8cb5da115393fdf9f415d11deea7d54f61bd3599f5cfe603e80f42edc23f58eaf53f6000743ae60fcbe53d5e548089259cf48be5837f31c7a3ae0100c37f90ab1593e1fccd92bcfe9b2acb65f1d8e7ca1d199ec3cd04e30ddc822b284c87f1158935be281f15dd4e355b986bfb71c17a5bc8aae63f566787856fa338f17d719a93bd7f7b8d8a17e6c1aa3abfd65201902627bb4fb16b280afd5bd4f430971385d00625c91558118017979058acd56adb00ce1948ec442ccb94008a0ebc4ebdb301695b3a38ecdf416861b891ee04d302d9899d7fe891b8e25785c09dfadbd8f12b38ec452dae7589b9eaff1319a6901d35a66b592224f9443c963ec0407613fe1bdf69f46163c447e92ee0ff0ea7b5a6a4cbb49324eb8ca86ed67fa6f07d410788f11bf9b327e38a4da594cd9159832757dcb771b68e3c301f27d8feba5100e98832f9040127f77972a22d32aba76191634c198bd5bbaf6c95c4daf61b2777b79e429a6b8811ce137cef842928242ca140d7fa331604154633dd5e7b7fd145926cc40b5447fe0f4f96502fc661cadbee8ea78e927fa9f025eebd13fd9e2d4ea3ad289995fb6a885deb6ccd047adf5a5bfa3e01500161f86c5037d3ba261fefe45f71b9ab5570259975b2d115b7252f93c9e67f1059d9f6a20a13c0a9ffb8dc12a2583cf0d2e40413a79ac7343928bf2892a16667566370af633c39dc793e35a5052e822177f1092b9aa15c57774ee2d3a88212abacbcd7b39d1d3bdc7a34e3728907dd6ccd64eb4411c420b56fcf817eeff199a42f036b69785e3902daa3d41ca2b4ae65af9a06c701a0b4669f9d1ad016d5f45d128ba71cd181ee85a51716ee574d6d6d2fd3b5a38276e2c99de066d974d3ec903b7e15a612bfdd5668710f11e0a0e87e7e0c13d12b613ba30bf8f6e286f8b98ec389b5a2eda760e335f275e18270a44c353ca89b40ba1315d685f75bcd4bec66aade7854d00695198c6be4e381b8561075eea02db7e8a3cf3bf79a4bbd0a57e901cd07baf928ebd28328bfb3414951fcaa71c0b84c34d3a70bf149024a6d97fe5c0aff016f8c8f07db4cbe9f3eb87a8bbf67f388370384d6a1e40936732e676e6594cc9d2c14a0089624f1f44d03bc4b987c0e301545af19d15d47bd0c2677b5fe864742c9e2522b8148c0aca7cc46c742949d2554777152a96ac109b30e1dc09aa8ee336d3070f4dcb38b26af70ca55b0d6c3904bc270ed3d6abdbbba0bd08258ac7c1489f21de346eef7efda80cd9fb82f08635bb77d6eaffba866fe9822aefcba3c2308f45ff6041ce28f258ffcbab6baf338551aea0c8aa783e93d9c0c89f7d4a94e502ba02e3d4e4d95ae57a7747868e1e544643fbd3db91d35bb8beb7c248b24e40b06641390819a070fb85eafe7010c9e1b28ef4dad5f074e6acfebd1969a97af65603271d44aa4e62ad3f38368d458da6e3c8109d735a8a8cd30187beda7d453c01acdaaf691c868b82cd9ccee9b2e42500d2a672dc5b8bbdabc1416258f1e0853d5ff9ec2bd6fea0539175aaa0299fedd91269b444061535e1e239d2ac33400518e43fa80df1fd628453f85c193c478e4b997e843cf9733a8c21c6712989a60ad879eeb1210dd46b38768adf743e09dd8aaa78da2c85dd7e16424fca3238880c184ca580284084b1b9d0dc238f3814dd3cd6aff832eecf95519dd1f366dd7d4ba43908f139185eb26ab092c5dbd882bb542e53e1ea427b2699ae7e2e28e1f049511ca983e3ccafde6a3fa6978386c504536b9701c976420ffc9472239acb3fa457c1c1540134099cf0f1c110e4f25e86978760907cba66222173aae61d13938e103561d75cc192a5113508e5a9dd59c4c63ea09a290dd85631015db89e646276b3befbd8fed88fa053ca8ce87e6476a4d378cfb901bbfaa47ad376355a904097b5c98f1d7f2dfa01bc899e3052e5b7b13d664f5de8a1582f49fa3951a8e30f08d94c23e1d35b3d437651da4e310d8bfa64c91703859cdd96d3b4d67243e86ba702ad638c67374f5a4282b77913048dcf832d773b2d38dcb49396d987b1736ee8e54b247b30e459c6a2f6f9df609fe23972b20cde9d15d4fe7072d61c8d9c2022dc3263c1d0693f243373aa001eaf16acc12707a83d693c9960942f723b46b6554a52ccd8cff1689a0fc740ded2cd509052f88a6ccd40c8e35cb9913f5b78d860409a6b357555154b9d98ba31753b67dad10b083c682f1d4a64c9f85098f71e0a2b0877a8b3c97ed3dc1cffcdc968451404a898d1c972be3c9f10e4f591f95bcca8fa9514644f1ea8e4b209047ae7372460c66603770abacd02444779ad9821b95d1816b87a6f2cdbfde5c823048c0910db7fbeff3c5f19e805b7b433401293c95a5eb643da843d3127485e779ce2d545b96b62a7937c6c313d7c5563ac5409a6b4c2d5852d2a9b60078bf2f3c4f901ba8264cf6074a41ee5e76868236806aabab361642dec71810c75fb514a5b9679abcd550d8f47aee75566823ddc39a7bb2ef966a82fe9c11bf6693db8bfaa5024f22bfa4bfec79e87b938e0bba6bb4f19f5ca5beac4842bf23294ee7e6c18dd342d8f947b5577f07caefa1cc7e3126685b8f67a8fec09180d878a0b607bd65dfc7175c309411ef5d97a684e3f9a98090c9dd6c6fd9a06d20faf2e6021c8e8f07ff354088b11cfca723f1b8f9927170d764759c19dc2c40ab0cb030a2af156065ce8f7fdb23fc652c65edc5a9e67886603bdced757bdd8ccff6cb3919f3297b6b766412a18b8ffd529b7059e7db807dc7a8b0e4989e2d48d7d29badbaca8486405470c0320be26865ae55b41dd9bd7d402da06a545a3bcb2e79537c2b79a30f4010f84cb65eacaca0855c14c6d9532c63d7b5830e174c6960929d81dfb51e1c7763f5c70a2d568c576ae8c43c469321939093e4f757ce3206429b032c01c469e898ba8d73a87d9582a62a46a0b0b0838001060f2564cbeb614b021a41ce693281347e0fe23cc5545b26d1bb97e9cc28db347c4429cd9328790e842a82c1167e99a5e956032cadaceb66b68c0a07c41c150c08dc03d0067e41610d7d6c00f627fe7485361fe06f2e1551594fb5ac2e9741088f16fa566094426a27adb2868cfcd7b076567a8203096099e7d9787312cf3835f61d63f7c081d7d0e6a0fa2f8a03f00da52754c01ed8e5b806d02545940691d625f23bc9a2e536158cb2465e128e0e4dd59c5a58202d69bec4cebf6f7adc3bd5c6e3b0f3f6f07fc309d1fc30a78080bf7e7bbd775f133c846a52e80a8a5eb6d2b0232f5d0ff04267e3a7f36886334d3bb6e0eb0ea2001064c9218552822f0583ded0c0526f95a65a05ef6b466a182e4cd666d829dfba60c7b335e81568d4f570cad882d0c8e713b1baad37928ede780de4110416378b941c9c9fd4ee86180de64ba7f24b7f5cd004a5ae72db85a75efdf550915b5f0e492102c9fbad276e837dec2e34d071fff68e021f5773120e5e6864bfbb0c45ce2be8ef1b976c171dc6b51cd6302aef33f4638ff9f5f7021ace6d768ece80e467a5d999d0336ba061787599cef38110c9d5a5e8a98f3aa609d521560126282ecf4b13db2698bed482b9db3b5b1827d4f02424e7eec1e8eae642afe8686f30e1499be02ce1bd8cbe6f2941a41719dac036f5c822152d7c80dab327a2e22f11c565ae981bf171a0e5c650ed961b3b26d9c07973d0f49b3861c2400dd0852f7cff102b026eccb8ce72ddffd3dfd48e2483404cfe5982fb0631d038eb37d505d96d20420c85f6f3dab4126f1bf2eb68c2483dce3f1fb89199587eb0c863cf407fd101f30a5b466f236f15a854fd2ab55d46b0594b4b448854dfa892f18dce6afa34dd16c849a9f9239bfd32cabc9e7d4e34bedca00371ecbddaa0b3b00b1002ddd7ca9abaef99f1ba032726c7497a6ec50f25c8a356f5d139939ed5fdbbb9af62af261b3ef59e55adc1f7125438406786cc613972b19dbd25abbc333031b5dd1b21458a1c0e5051e4a8131c48bd5c502fb2c92a728117114790be7cde6908e728a3a5eefc98575ac17322b0e929debbc1f6fb8b2b5a625f943ef4143689e0636b44337f4e42905416049da806e18189267d7ed324d46b0d605f038d7e5f8d5bdd37cfc4a751419d7564e8b2e90e673215d9af8825a4796f8a0e015e15fcedea1ac268929750a51b23c86df28f993411a015875c08e9c69cd94b8d528ecbd5449507a7880c713369e129c5296dda00af23e1589ed175713c87f213fb26ebb0a4a4c9d8cb694fe85072d5e8970f580d6b722aa7cf30596265876162152c27ead5bdd34856cb7d42a30898271cc22be09a2162a5b41d4e5d0167bc206f8703e35cad54e85a288e58f9c4337261500661e0bc5f15a91a05f457640f668092d78bdd349768a2b452c482c1a9092406ad6c89f7e2895bd796278200cb585406ea4006ea91321f6651f3112416f8df5f81a218485b7868673d04793f0c474d806f50c26a70095ef01691e7cbcf7845218569681c142d87f6cc8ebe2e50181055db3d78f77b8847a427262a45405efef4213804b3db4bdc639bebdd7cf6186bd314c8b110c03089cac5a2850fa73b61326349f9d7e554a5d19f6c399bc162b06142efea0c44235514c8694bf0aa612ffe025472ecd29807eb21d181b8e186b10ace988d3c742db22a76b885c49d09c70246dd381c7e3c83921005a782b13b289a8086eacf0e796dfdb74780ad64fefb1c158131816c21986d9a7b06d474f7227c70193fb886e9c098a407be6a8b263dda1d3640dc6a600bf9ba33fe16507ef6efc05ccf392e0db84175fbc55407edac8c5751d6c35bdab4d0f41f18ccd05a2901055ecd398de58466b79ef92152189ffadccf7075339a8be01737d9787a3c56ae3a6c920bc1f32a204e1740315110f14a34970f7ff306a3920676ca5939648578d4949358f75a9a1ef3f001d21a9e1f5d549dff2e8f93656e25d302d41334b9c0cfbf173197a9fc07133ce19e84745bcec874f5c3bbdc59099e27e359f1f8871cebfc6f4555753f58903cf54a16e4165a3ee04892c3d0269be11381d151ff9882d78b724fc4064904c579e6c147daa902ab3faacc279d5ad37ef3cf72b16015d6ccba25fb5a378ad845faeddccd1c067a89db8b6a60562a29fb199f1fcc904255b4e2f42424c13b794c5d3c964d7d4112c05a7e21ded22b06ae776381746764b07fa3ff2bbba5f33329fdd35c3f41ba3f72e61b1c5f36ff9a6b1ef2f887e2bb6786ba0417dde64edea499f97281ae42f40ab45484951ddac047d0281b89a527db8a4b7190b2126d058517aae14208b4072aecdcfec15fb1c7237d2f0e2"}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000035c0), 0x2, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000005780)={0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005940)={{{@in=@multicast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@multicast1}}, &(0x7f0000005a40)=0xe8) read$FUSE(0xffffffffffffffff, &(0x7f0000005a80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000007b40)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@initdev}}, &(0x7f0000007c40)=0xe8) stat(&(0x7f0000007c80)='./file0\x00', &(0x7f0000007cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000007e80), &(0x7f0000007ec0)=0x0, &(0x7f0000007f00)) r14 = getegid() lstat(&(0x7f0000007f40)='./file0\x00', &(0x7f0000007f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000008000)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r17 = getgid() fstat(r1, &(0x7f000000a240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f000000a3c0)={0x0, 0x0}, &(0x7f000000a400)=0xc) syz_fuse_handle_req(r7, &(0x7f0000003600)="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", 0x2000, &(0x7f000000a580)={&(0x7f0000005600)={0x50, 0x0, 0x8, {0x7, 0x2b, 0x7b, 0xffffffffa0000000, 0x16bb, 0x2, 0x646, 0xd, 0x0, 0x0, 0x10, 0x6}}, &(0x7f0000005680)={0x18, 0x0, 0x5, {0x81}}, &(0x7f00000056c0)={0x18, 0x0, 0x40, {0x2}}, &(0x7f0000005700)={0x18, 0x0, 0x9, {0xbdde}}, &(0x7f0000005740)={0x18, 0x0, 0x6, {0x80000001}}, &(0x7f00000057c0)={0x28, 0x0, 0x9, {{0x5, 0x3b6, 0x0, r8}}}, &(0x7f0000005800)={0x60, 0x0, 0x7, {{0x3, 0x7, 0x7, 0x8c6, 0x1, 0x9, 0x1, 0xbb02}}}, &(0x7f0000005880)={0x18, 0xe79d3923fdda3eb8, 0xb23f, {0x9}}, &(0x7f00000058c0)={0x11, 0x0, 0x5, {'\x00'}}, &(0x7f0000005900)={0x20, 0x0, 0x9, {0x0, 0x1}}, &(0x7f0000007ac0)={0x78, 0x0, 0x7, {0x0, 0x3, 0x0, {0x4, 0x4, 0xffffffff, 0x6, 0x1, 0x1, 0x5c, 0x80000000, 0x1, 0x6000, 0x9, r9, r10, 0x0, 0xa20a}}}, &(0x7f0000007d40)={0x90, 0xffffffffffffffda, 0xf6, {0x1, 0x3, 0x2, 0x400, 0x6, 0x5, {0x1, 0x0, 0xa2, 0x7, 0x7, 0x3, 0x2, 0x1, 0x2, 0xd000, 0x2, r11, r12, 0x5, 0x1000}}}, &(0x7f0000007e00)={0x50, 0x0, 0x69e4, [{0x3, 0x0, 0x1, 0x9, '\x00'}, {0x2, 0x6, 0x1, 0x40a9, '\x00'}]}, &(0x7f000000a040)={0x1f0, 0x0, 0x6, [{{0x6, 0x0, 0x2, 0x754c, 0xb46, 0xe, {0x4, 0xa37, 0xf31, 0x9, 0x6, 0x7, 0x7ff, 0x2, 0x300c, 0x4000, 0x2, r13, r14, 0x9, 0x2}}, {0x6, 0xffffffff, 0x1, 0x7fff, '\x00'}}, {{0x1, 0x3, 0x9, 0x800, 0x8, 0x0, {0x1, 0x205, 0x5156, 0x6, 0x40, 0x8000, 0x7, 0xfffffffb, 0x78, 0x1000, 0x0, 0xee01, r15, 0x7ff, 0x3}}, {0x0, 0x8, 0x1, 0x76b, '\x00'}}, {{0x4, 0x2, 0xb790, 0x800, 0xc03d, 0x0, {0x5, 0x4, 0x1, 0x8, 0xf016, 0x5, 0x0, 0x8, 0x6, 0x1000, 0x1, r16, r17, 0x10001, 0x8001}}, {0x3, 0x6, 0x1, 0xb3, '\x00'}}]}, &(0x7f000000a2c0)={0xa0, 0x0, 0xffffffffffff8395, {{0x5, 0x3, 0x1, 0x0, 0x1000, 0x4, {0x1, 0x3, 0xfff, 0xffffffffffffffff, 0x80, 0x3, 0x8, 0x489, 0x6, 0xc000, 0x3, 0x0, r18, 0x4, 0x5}}, {0x0, 0x14}}}, &(0x7f000000a380)={0x20, 0x0, 0x6, {0x3, 0x4, 0x7ff, 0x4}}, &(0x7f000000a440)={0x130, 0x0, 0x2, {0x0, 0x6, 0x0, '\x00', {0x7ff, 0xbb, 0x8000000000000000, 0x6, r19, 0xee00, 0x1000, '\x00', 0xd, 0x154, 0x8000000000000001, 0x8d, {0x200000000000000}, {0xfffffffffffffbff, 0xffffd367}, {0x2, 0xc6f87c3}, {0xb2c8, 0x1}, 0xe2f, 0x8, 0x568e, 0x69760314}}}}) r20 = userfaultfd(0x80800) ioctl$UFFDIO_COPY(r20, 0xc028aa03, &(0x7f000000a640)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x3000}) r21 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r21, 0x29, 0x1c, &(0x7f000000a680)={@dev}, &(0x7f000000a6c0)=0x14) 5.856158779s ago: executing program 1 (id=707): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="3f000400000059d11ccc"], 0x0, 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1004, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000bfe000/0x400000)=nil) close_range(r3, r1, 0x2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="3f000400000059d11ccc"], 0x0, 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1004, 0x0) (async) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000bfe000/0x400000)=nil) (async) close_range(r3, r1, 0x2) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) 4.921408075s ago: executing program 1 (id=717): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000280)={0x7, 0x0, [{0x80000001, 0x7, 0x80, 0x2, 0x5}, {0xb, 0x1ab, 0x6, 0x5, 0x2}, {0x7, 0x1, 0x7, 0x2, 0x2ea5}, {0xa, 0x10, 0x5, 0x7, 0x1}, {0x40000001, 0xfffffffe, 0x6, 0x1, 0x10000}, {0x40000000, 0x8, 0x32f, 0x6, 0x4}, {0xd, 0x9, 0x8, 0xffffffff, 0x4}]}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace(0x4207, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001f80)=ANY=[@ANYBLOB="5c0000000201010100000000000000000200000a14001980080001000a0100000800020008060000240001800c00027505000100110000001400018008000100e0000001080002007f00003b06ad0604807faa80050001002f000000"], 0x5c}, 0x1, 0x0, 0x0, 0x840}, 0x8c4) fchdir(r1) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000a00)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x16, &(0x7f00000000c0)=[{0x8, 0x7f, 0x7}], 0x1, 0xfffffffffffffffa, 0x11, 0x0, 0x3, 0x30}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000180)=0x4000000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000018c0)='/sys/kernel/fscaps', 0x40, 0x40) connect$bt_sco(r5, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000140)={0x7fff, 0x9bc, &(0x7f0000000000)="7790b59fea7e61d3a13999a61c72b8043b33f68755033ce9dbc4a6ae43a521777962d2496ee69f9ac01b06e11581e16267ca515a0c5f4d0553608c6cf10a2fddae6c514f60aa8b17f546b2d84a023d3852dfc333b0dab24d87e6e73d", &(0x7f0000000080)="d7da953e4628a7119925b33295e36fe7736686c03bc4f908ded5bb1b1bd133da4b757f595ea0fb5cbbb74e641ef5eb9da783086ba6c9cc62a11ee8faba4df1e0448cd96874e9bb7041455b5f27540e11f922e60bf024fe375ada856f746bed87bf9e6c98c43e292b453c4268ae060d569baa849456a9f51acd0d63713298525e43fbdabafc6c25f0776347902490e7cc96b7a38e6ec5e8d9e0b677a5", 0x5c, 0x9c}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000006c0), 0x10001, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) 4.752890107s ago: executing program 1 (id=718): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f00000004c0)={[{@mode={'mode', 0x3d, 0x8000000000000000}}]}) r0 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000005000)) (async) recvmmsg$unix(r0, &(0x7f0000004e00)=[{{&(0x7f0000000140), 0x6e, &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}}, {{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f00000015c0)=[{&(0x7f0000000340)=""/156, 0x9c}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/164, 0xa4}, {&(0x7f0000000440)=""/104, 0x68}], 0x4, &(0x7f0000001600)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000001680)=@abs, 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001700)=""/224, 0xe0}, {&(0x7f0000001800)=""/37, 0x25}, {&(0x7f0000001840)=""/180, 0xb4}, {&(0x7f0000005080)=""/231, 0xe7}, {&(0x7f0000001a00)=""/224, 0xe0}, {&(0x7f0000001b00)=""/96, 0x60}], 0x6}}, {{&(0x7f0000001c00)=@abs, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000002400)=""/4096, 0x1000}], 0x1, &(0x7f0000001cc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000001dc0)=@abs, 0x6e, &(0x7f0000002040)=[{&(0x7f0000001e40)=""/108, 0x6c}, {&(0x7f0000001ec0)=""/239, 0xef}, {&(0x7f0000001fc0)=""/109, 0x6d}], 0x3, &(0x7f0000002080)=[@rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}}, {{&(0x7f00000021c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000002240)=""/124, 0x7c}, {&(0x7f00000022c0)=""/169, 0xa9}, {&(0x7f0000003400)=""/206, 0xce}, {&(0x7f0000003500)=""/208, 0xd0}, {&(0x7f0000003600)=""/97, 0x61}, {&(0x7f0000003680)=""/100, 0x64}], 0x6, &(0x7f0000002380)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003780), 0x6e, &(0x7f0000004a00)=[{&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000004800)=""/62, 0x3e}, {&(0x7f0000004840)=""/20, 0x14}, {&(0x7f0000004880)=""/255, 0xff}, {&(0x7f0000004980)=""/32, 0x20}, {&(0x7f00000049c0)=""/54, 0x36}], 0x6}}, {{&(0x7f0000004a80)=@abs, 0x6e, &(0x7f0000004d00)=[{&(0x7f0000004b00)=""/130, 0x82}, {&(0x7f0000004bc0)=""/182, 0xb6}, {&(0x7f0000004c80)=""/125, 0x7d}], 0x3, &(0x7f0000004d40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}], 0x8, 0x20, &(0x7f0000005040)={0x0, 0x3938700}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x737f0c77864bf3b9, 0x408) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) (async) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) (async) sendmmsg$sock(r4, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f0000000fc0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c505f1678a3165181261067da7d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c422d1c07b63988d3377dfe6634b1e184", 0xef}, {&(0x7f0000000ac0)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000000b80)="3b3d07b7091f697381965e2e7909f9f6f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910baf212596b2a4a23aab8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f", 0x70}], 0x4}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d80)="d51927d7b27f39aa725cb19a990f66ac9aae2f7d92045a4c05e60f4dc5dc6c4e4ac8449b9915fb289bf1692a4c7d9440950ee716b680274b3c53048b6a2aeca47c5e6987db6b4fb364fa1e1709caa0696b9e02eabc8757ef2dd6a17f3efa", 0x5e}, {&(0x7f0000000e00)="96bc7002996addfa3b96a5e4de4cf18b08fa24022c9e", 0x16}, {&(0x7f0000000e40)="1304235350b0171b15c5c7a6c9861d", 0xf}, {&(0x7f0000000e80)="048dc9fb57afe301fd6f4184903098607627504035b7aa74e71b85eaa192909644d18f5695718d3c3532f6ed73c2422e87", 0x31}], 0x4}}], 0x2, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.100095761s ago: executing program 3 (id=720): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48801, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000000)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x2, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x138}, @flat=@weak_handle={0x77682a85, 0x1100}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, &(0x7f0000000040)={0x0, 0x28, 0x40}}, 0x40}], 0x0, 0x0, 0x0}) 4.098194851s ago: executing program 3 (id=721): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000440)='\xa1\xc4\xe8g\bv\xe3\x90\x8e\x14c\xfew\xd3J\xb2\n\xe7\xb37\xb4K\xd4+\xd7Mz\x9d;iC\xc3\xefV\xcf\xe7\x0f\xeaR4\xebh\xe2\xd4') mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x85b83000) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='n\']g-\x00') 4.097377941s ago: executing program 3 (id=722): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x4, 0x184862) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000280)={r2, 0x3, r0, 0x2, 0x80000}) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523720fd4002002cfc03d81a8ca55b39c01802c4dae4162e43ac61b7ad3300", [0x2, 0x7]}}) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='msdos\x00', 0x808081, 0x0) 4.096304761s ago: executing program 3 (id=723): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = signalfd4(r0, &(0x7f0000000000)={[0x4]}, 0x8, 0x80000) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001180)={0x0, "2791755ddf47325e7e0356379cbf1774"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000002180)={r5, 0x1, 0x0, [0x2, 0x5, 0x6, 0x9, 0x696], [0x8, 0x9, 0xffffffff, 0xf1ca, 0x4, 0x4, 0x0, 0x1, 0x8, 0x9, 0xff, 0xe, 0xfffffffffffffffa, 0x7bc, 0x620780d0, 0xc, 0x2c, 0x4, 0x8, 0x8001, 0x3, 0x6, 0xb5, 0x9, 0x0, 0x2, 0x7f, 0x3, 0xf, 0x5, 0x5, 0x9, 0x4, 0x80000000, 0x200, 0xfffffffffffff328, 0x4a, 0x8000, 0x0, 0x9, 0x4, 0x0, 0x9, 0x1, 0x64b, 0xe, 0x9, 0x1, 0x2, 0xfffffffffffffa61, 0x9, 0x2, 0x0, 0x4, 0x0, 0x8, 0x2, 0x8, 0x0, 0x4, 0x8, 0x5, 0x3, 0x2, 0x6b, 0xfff, 0x1, 0x1, 0x6, 0x7, 0x6, 0x2, 0x9, 0x1, 0x1, 0xffffffff00000000, 0x1, 0x5, 0x401, 0x6, 0xffffffffffffff6e, 0xfffffffffffeffff, 0x1ff, 0x9, 0x5, 0x6, 0x209, 0x0, 0x9, 0x8000000000000000, 0x5, 0x7f, 0x3, 0x0, 0x62, 0x81, 0xd, 0xd, 0x629, 0x8, 0x11, 0x6, 0x8, 0x2, 0x2, 0x5, 0x2, 0x1, 0x5, 0x129d, 0x81, 0x1, 0x6, 0x3fffc00000000000, 0x101, 0x800, 0xffffffffffffffff, 0xfffffffffffffffb, 0x4, 0x8000000000000001, 0xbd]}) (async) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000bfe000/0x400000)=nil) syz_kvm_add_vcpu$x86(r7, &(0x7f0000000080)={0x0, &(0x7f0000000480)=[@wr_drn={0x6e, 0x20, {0x4, 0x2974}}, @wr_drn={0x6e, 0x20, {0x5, 0xffffffffffff5ef6}}, @wr_crn={0x46, 0x20, {0x3, 0x5}}, @out_dx={0xaa, 0x28, {0x2b09, 0x3, 0x9}}, @wrmsr={0x1e, 0x20, {0x400000b6, 0x3}}, @out_dx={0xaa, 0x28, {0x1465, 0x0, 0x7}}, @rdmsr={0x32, 0x18, {0x85d}}, @wrmsr={0x1e, 0x20, {0x2f7, 0x2}}, @wrmsr={0x1e, 0x20, {0x831, 0x7ff}}, @out_dx={0xaa, 0x28, {0xb09, 0x3, 0x8001}}, @wr_crn={0x46, 0x20, {0x7, 0x8b1}}, @out_dx={0xaa, 0x28, {0x5cb2, 0x7, 0x7}}, @wrmsr={0x1e, 0x20, {0x80a, 0x3}}, @in_dx={0x82, 0x20, {0x9701, 0x1}}, @wr_crn={0x46, 0x20, {0x3, 0xc6}}], 0x1f8}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={0x0, 0x0, r2, 0x40001, 0x80000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = syz_usb_connect(0x0, 0x5bf, &(0x7f0000000680)={{0x12, 0x1, 0x140, 0x8b, 0xc7, 0xc3, 0x8, 0x2c7c, 0x195, 0x89e5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5ad, 0x3, 0x5, 0x4, 0x10, 0x6, [{{0x9, 0x4, 0x80, 0x2, 0x2, 0xff, 0xff, 0xff, 0x9, [@generic={0xa1, 0x7, "16e39b22cb82633682518c993e8b56fee57cd70bed106ee045e3cc4a9269c4b2d2e9b249357f144891ef078b824b838ff264b16a1c5820c9cc36de68e526ae5601b45a78df89c1680024f81572dbd74266087769472a3893745a6e11a380baf4caea7500eb3f1ffea7476a7a7cd2359bac190e687e93d2e1fbf8e820a5e7143ae277184ba8a9c7713562a400398eb26d500d1245b5e824093d0c86ee196214"}], [{{0x9, 0x5, 0x7, 0x1c, 0x20, 0x3, 0x2, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x101, 0x0, 0x100}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x5c, 0xc7, 0x83, [@generic={0x4b, 0x7, "d6930934ebbc625df6f0f8efa8c25fadf2288af52ade95d797029c77fce3f5b7f3cce5372e7366b6c30757244d2f1e10cfef8b86baa8e80f019e64a2f328bc7520f55da042e4992fb8"}]}}]}}, {{0x9, 0x4, 0x19, 0x4, 0x6, 0xff, 0x5d, 0x1, 0x7f, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "c2"}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0x7fffffff, 0x9, 0x1000, 0x90}, {0x6, 0x24, 0x1a, 0x400, 0x4}, [@mdlm_detail={0xb6, 0x24, 0x13, 0x86, "ef1a6260c34b02728eb11a7a2e7f29f387470d6b1ee0cb36a80554c9400ee0ed0e04e76d346a2e2237d70a195bf4928e9ff95696715e3c62463dc71dea9fe1b30614551af3f3f7e4dd456aff8ba19d96914f866efafa58c80858dabf10ba01ddd5cfb048c122826c7e702a1bcad525a8c8a81509a8c15966fab5c1275c5a7a7c10d46603472cb442f1b519b96000e7a90eb9aef8a5a3453d0940c3e1b82d07dfd04d2648fff29cc02f24575f3ec7ac8f9c2b"}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0xc3, 0x8, 0x9}]}], [{{0x9, 0x5, 0x3, 0x3, 0x10, 0x4, 0xb6, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x9}]}}, {{0x9, 0x5, 0x2, 0x3, 0x10, 0x2, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x1}]}}, {{0x9, 0x5, 0x1, 0x1, 0x3ff, 0x7, 0xac, 0x8, [@generic={0x31, 0x11, "7b81a7010e2220a6e198b7325b22c0d1dad40242aca1c3700ce9f7710a6f613d267f262a537ce494179234eca87421"}]}}, {{0x9, 0x5, 0x0, 0x12, 0x20, 0xa, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xa}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0xf, 0xdb, 0xa8, [@generic={0x45, 0x3, "b9d6364aeadd56f021f1b0276bae1b90128f7dd65535ffaa1a26807719c84e74efe47a081e603207a38f4326bbe42dc8fc82e7389bd9b8b92d6616bf021eb5e5efd155"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x4, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80}]}}]}}, {{0x9, 0x4, 0xe4, 0xa, 0x8, 0xb2, 0x22, 0xa1, 0x9a, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "86c8f697da"}, {0x5, 0x24, 0x0, 0x3ff}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x8001, 0x8, 0x7}, {0x6, 0x24, 0x1a, 0x8}, [@dmm={0x7, 0x24, 0x14, 0x6b, 0xff13}]}], [{{0x9, 0x5, 0x0, 0x1, 0x3ff, 0x9, 0x81, 0x46, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x64, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xf1, 0x2}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x8, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x43, 0x4, 0x1}]}}, {{0x9, 0x5, 0x4, 0x4, 0x20, 0x1, 0x9, 0x5, [@generic={0x39, 0x9, "d62440d4dbff779fa59287470078e6b7a38b5d72d821e15959c98195b628707103ed6dee0b8c3f62af4d4630d2bd1e0e616057d5cb1d23"}]}}, {{0x9, 0x5, 0x1, 0x8, 0x200, 0x80, 0x9, 0xb2, [@generic={0xbe, 0x2, "131c8e22b23e577364f6401fc806e45f3f37608112c8a09aed3d71d7f19e42fb3d52c5796d9ef642c44b70546d53e067a0957315b5fea34b05bc2bc7acae08509c36f1b65b54c65c6e8618702d54c75c1c7ef5566eb0bb81388d5506cf02b7061c719bccce4712c4b772a0f6f0fdd3510cdf5d0c1b75428f9449761cb72790bf31b55f5a1b1b61f7ac77b9b32d3ea086b5e4c79c4188510311d54726885cf1c092d5f591913330075b2a0aa4115679bcecf1ec0ebf1a8c942ddeb564"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x4, 0x4, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x7}]}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x2, 0x43, 0x8, [@generic={0xef, 0x11, "b127d4c6bccffbd3602826f200d5aa0afb0d07f8ecdb9a2393f34632bae666021fed0e5b0b8c0c1bd91d41365d1b8a905a606b3dd0de4a7d0e7b666214de9795aa408ce1cf60ddece182af74b6dd8aebd2da0fb987b4fed3f1cb02aaf2565e8f2747e6102116cd1eea15951e1d8aa2d4d028732c1ca57800a5d19e0ddbab6503163ae7767a7fe18957feacea8bfd60fee4283b80d6f71fde32daf15cb8141edb0e78e94a8b87e764d21396414509ab68bfaad818d667a8dddb7a5be7f49ebd3f1eb570d8e3010b8b1791771d4050f497eb7b7096e86da0994b13c76b7022366db8d1f61db9fb1dbc5e496abbd9"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xe, 0x2}]}}, {{0x9, 0x5, 0x7, 0x2, 0x3ff, 0xf3, 0x3, 0xff, [@generic={0x60, 0x22, "c5fc88b2d26452791ead10c19a63ff70111a3d093c427ac9c7bae17d05717938bb7f52570057d9d5e86fb9fa80c5a3a23852d61cc796442a8145f0c5b82b0003901d93ae58fba7fac619fe4264e8733ba50385c273e5e6bf53c57fe2dcd7"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x7f, 0x6, 0xbd, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x8}]}}]}}]}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x310, 0x40, 0x60, 0x8, 0x20}, 0x15, &(0x7f00000002c0)={0x5, 0xf, 0x15, 0x1, [@generic={0x10, 0x10, 0x3, "c4a5910f097dc2edf95d71f7ba"}]}, 0x1, [{0x94, &(0x7f0000000300)=@string={0x94, 0x3, "597216744485784cbd0b92dad1b1cef1d4fb0ac1f3103267e9727a45aaccd23d45e964ef3c6e848b68082f05f0da6ff1e5ff405502e724860dcdd6643dc81f1445f5203f6ddd39c442eea5933e9545aa9755a0f50837238bfcbd3676c97b9903ca5e44d7f271a14038893edca0524e93f7d6504e94befdc6e8d57509ce71034c59e639e3ddfd76401fbe0350c02754352cf4"}}]}) syz_usb_control_io$lan78xx(r8, &(0x7f0000000d00)={0x14, &(0x7f0000000c80)={0x40, 0x24, 0x13, {0x13, 0x8, "7a714b2048ecfcbc0bf3ec787f2953e9ff"}}, &(0x7f0000000cc0)={0x0, 0x3, 0x21, @string={0x21, 0x3, "7ef41b330a68a971aae54e22b96189c1b363bf1928108b51307c8fa9e8758a"}}}, &(0x7f0000000ec0)={0x34, &(0x7f0000000d40)={0x0, 0xc, 0x32, "b8f10ac5586027d05234a7685e3070304816160e10ddfd61fc97b827504e876e56b907491091f77522504eb5590b1301c497"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000e00)={0xc0, 0xa1, 0x4, 0x3}, &(0x7f0000000e40)={0x40, 0xa0, 0x4, 0x8000}, &(0x7f0000000e80)={0xc0, 0xa2, 0x2f, "54d51172db3c5d5e25e9010e97cd3a4fba1ad97b6c56bd8ee9edc346353ed9661f57138d9b3f701b6c66111c4795c0"}}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x7, 0x6, 0x0, 0x4, 0x7, 0x0, 0x8, 0x8}, {0x6000, 0x10000, 0xc, 0x0, 0x3, 0x0, 0xfd, 0x0, 0x7, 0xff, 0x1}, {0x2000, 0x8080000, 0x10, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0xeeef0000, 0xffff1000, 0x3, 0x9, 0x1, 0x0, 0x9, 0x0, 0xc, 0x0, 0x4}, {0x0, 0xeeee0000, 0xb, 0x0, 0xfd, 0x4, 0x0, 0x0, 0x0, 0x3f}, {0x100000, 0x0, 0x0, 0x78, 0x2, 0x70, 0x2, 0x80, 0x0, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x3, 0x0, 0xa1, 0x6, 0x0, 0x4, 0x8}, {0x2, 0x1, 0xd, 0x0, 0x80, 0x7, 0x1, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000, 0x1}, 0xddf8ffdb, 0x0, 0x20000, 0x110, 0x0, 0xf801, 0x0, [0xe6a6, 0x0, 0x1, 0x1]}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) write$bt_hci(r1, &(0x7f0000000040)={0x1, @create_logical_link={{0x438, 0x21}, {0xc8, {0x9, 0x8, 0x1, 0x3, 0x2, 0x3}, {0x3, 0x1, 0x3b, 0x5, 0x2, 0xda4c}}}}, 0x25) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x28011, r0, 0xffff8000) 3.096251298s ago: executing program 3 (id=724): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1006, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000001c0)={@remote, r4}, 0x14) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000140)) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000080)={'syzkaller0\x00', 0x400}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f00000002c0)={'ipvlan0\x00', 0x400}) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001000010000000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB='\b\x00'], 0x2c}], 0x1}, 0x0) sendmsg$AUDIT_SET(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, 0x3e9, 0x8, 0x70bd2d, 0x25dfdbff, {0xdd6c73dff9c1670, 0x0, 0x2, r5, 0x9567, 0x401, 0x4, 0x10000, 0x0, 0xf}, ["", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000340)={{r8, r9+60000000}, {0x0, 0x989680}}, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x442, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000040)={0x3, 0x4, 0xdddd0000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_syzos_vm$x86(r11, &(0x7f0000c00000/0x400000)=nil) r13 = dup(r12) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(r11, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000300)="b8c1000f00d0670f7825004000003eff2f0f08f30fc7b4f9ff65f36cf22e0f32660f38df82f1ff0f01c8f30f58160000", 0x2a}], 0x1, 0x20, 0x0, 0x0) syz_kvm_setup_cpu$x86(r13, r12, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x8}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 950.925703ms ago: executing program 2 (id=758): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='attr/sockcreate\x00') ftruncate(r0, 0x3119c976) mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) (async) mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x93) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, 0x1, {[0x0, 0x0, 0x200, 0x0, 0x2, 0x2]}}, 0x5c) (async) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, 0x1, {[0x0, 0x0, 0x200, 0x0, 0x2, 0x2]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x37}}, 0x1, {[0x7]}}, 0x5c) (async) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x37}}, 0x1, {[0x7]}}, 0x5c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') copy_file_range(r3, &(0x7f0000000080)=0xfffffffffffffff9, r3, 0x0, 0xfffffffffffffffc, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000000)={0x1}) 949.593243ms ago: executing program 2 (id=759): r0 = getpid() (async) unshare(0x60000600) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x0, 0x80, 0x6, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0x80, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x3d}}}}}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) bind$inet(r4, &(0x7f0000000140)={0x2, 0x810, @broadcast}, 0x10) (async) sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b", @ANYRES32=r2, @ANYRES8=r4, @ANYRES16=r1, @ANYRESDEC=r0, @ANYRESOCT=r4, @ANYBLOB="83d0324a5b4b25f20e69a921cf7502c3fcfbcd16f53056c73279d866758b73254f39cacc707c8110187e87a4d12328e150e0446cca91f48f419b4cd269e3e7cb5d6b519248b3a7a4fce2955543dd68cd8b584808f4be2ca7bce8a041c1ea2499e02d6c91fb14e63f4b251545512e6ba25f82253db47e2951ee2b193b5e35f5ace8193ac494fd0600000000000000661247c233ffb182896e00a55258ad22f1cebbedaddc687c8c9e819f1cd25a3def12958bd4fa270100000000000000000000db3f11ce00000000bd6584bba6b016c541b17786bfa401c151a0552e45166f6e4f1e9a6a8d04e71d75c62699a6b3ee5bc65afe2d82d739951e225c2b231e165e98ad31ea7cffda144df62fef40639bf4953f7bbd2a3f856901b8159549ff2fc9183cce4d6acd9f38868417d4d3baacff9931c1b78c5d25a51f08c964a923637c278ac6e748fd622dbc2d913b0fa52108bc5feae174f5906f88bea6cd9d445d9213a5"], 0x20}], 0x1}, 0x0) (async) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) (async) syz_usb_control_io$hid(r5, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00222200000096010006010083000000002a90a027b3ff82e875988b147043022effffb3"], 0x0}, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000680)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x737f0c77864bf3b9, 0x408) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x926136, 0x325040) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) (async) r9 = eventfd2(0x3, 0x1) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000240)={r9, 0x7ff, 0x2, r9}) (async) ioctl$KVM_SET_IRQCHIP(r8, 0xae64, 0x0) (async) ioctl$KVM_SET_PIT2(r8, 0xae71, &(0x7f00000002c0)={[{0x10000, 0x2, 0x0, 0x0, 0x0, 0xfa, 0x0, 0xff, 0x88, 0x6, 0x0, 0x0, 0x100000000000000}, {0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x10, 0x8000003bc}, {0x10000, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x5, 0x5, 0xfd, 0x0, 0xfe, 0x0, 0x800}]}) (async) ioctl$BLKOPENZONE(r6, 0x40101286, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) 915.808793ms ago: executing program 2 (id=760): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x60000001}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="300000001c0021002dbd7000000000000700000005000000020002000a0002"], 0x30}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44081}, 0x8000) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x4508) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000000)={0x0, r4}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@register_looper, @acquire_done={0x40106309, 0x2}, @acquire={0x40046305, 0x3}, @clear_death={0x400c630f, 0x1}, @clear_death={0x400c630f, 0x1}, @clear_death, @decrefs], 0xff28, 0x0, 0x0}) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000280)={0x2b, @multicast2, 0x4e20, 0x3, 'rr\x00', 0x1a, 0x6, 0x70}, 0x2c) 847.798923ms ago: executing program 2 (id=761): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000000000010ef17097300000000000109022400010000200009040000010900030009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, 0x0, 0x48) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x0, 0x7, 0x7, "c47aa9d3", "538aa7d2"}}, 0x0}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101880, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vxcan1\x00', 0x2}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000080)={'dummy0\x00', 0x400}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) 280.413527ms ago: executing program 2 (id=766): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x4}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0xfd, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000100001000000001c0000000c00000000000000000000000c001600060000000000000000000000ec"], 0x2c}], 0x1}, 0x0) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000880)="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", 0x2b4}, {&(0x7f0000000780)="7d87549fd6e506db8227c192ade2364cd555d3bdb38314a12868143d93b2314d1144a69dfa2d04b9d1d495d7ff790a5307f432275e936e98c0dfd1c0aa0c6df2fe50674c60a214018dd7bcc96c0c10826fd234fbc3b48fd4b30d6ffc2f97546094eca61c53bec989b8556428b45f9f3b8c1464b8e7d1c3a060b55b987e4a727450cdcf54d813ec058aba5e3fd8f1fed8031ea0e8191e27240541495f32f73db4a754bbd31ee119939f2fcdef69a03a39fe2d4682", 0xb4}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001040)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e018566", 0x55}], 0x1}}], 0x2, 0x480e0) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r7, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)={0x70, 0x3, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x80000001}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x3}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x9}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0xffffffff}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xb}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x3}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x4}}]}, 0x70}, 0x1, 0x0, 0x0, 0x145060e4340cabf0}, 0x84) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x41, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x80) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='befs\x00', 0x1000004, &(0x7f00000000c0)='f\x87K|z') ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000000c0)={0x58, 0x0, &(0x7f0000000380)=[@increfs_done={0x40106308, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$TIOCGPKT(r6, 0x80045438, &(0x7f0000000480)) 280.052667ms ago: executing program 0 (id=767): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48801, 0x0) (async, rerun: 32) r1 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) getsockopt$sock_int(r1, 0x1, 0x1b, 0x0, &(0x7f0000000100)) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) 279.513977ms ago: executing program 0 (id=768): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x6, @mcast2, 0x6}, 0x1c) r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x4}, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="800037bbfa9ba1ce", 0x8, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000540)=0x9, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, 0x80}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x202, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setsockopt$packet_int(r1, 0x107, 0x12, &(0x7f0000000100)=0xfffffa5c, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f00000012c0)={0x1, 0x0, [{0xda0, 0x0, 0x100}]}) read(r0, &(0x7f0000001400)=""/4046, 0xffd8) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000200)={0x3, 0x0, [{0xb, 0x7ff, 0x4, 0x5, 0x4, 0x10000, 0x328}, {0x6, 0x8000, 0x2, 0x4, 0x80000000, 0x3}, {0xb, 0x1b68, 0x4, 0x80, 0x7, 0x3, 0x8}]}) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00') ftruncate(r4, 0x2) 272.530997ms ago: executing program 2 (id=769): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000) r1 = syz_io_uring_setup(0x280808d2, &(0x7f00000000c0)={0x0, 0xf1fd, 0x3010, 0x3}, &(0x7f0000000040), &(0x7f0000000080)) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x44, &(0x7f00000001c0)=ANY=[]) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x4) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000340), 0x0, 0x0) r5 = dup2(r4, r4) read$FUSE(r5, &(0x7f00000047c0)={0x2020}, 0x2020) poll(&(0x7f0000000000)=[{r1, 0xd010}], 0x1, 0x9) r6 = inotify_init1(0x80800) inotify_add_watch(r6, &(0x7f0000000040)='.\x00', 0xc0000484) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000026c0)='./file0\x00', 0x117100, 0x0) preadv2(r7, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00002a6000/0x400000)=nil) fadvise64(r0, 0x81, 0xc, 0x2) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_linger(r8, 0x1, 0x3d, &(0x7f00000001c0), 0x8) madvise(&(0x7f00001e2000/0x400000)=nil, 0x400000, 0x17) 170.029918ms ago: executing program 0 (id=770): mlockall(0x7) (async) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x800000000088}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = fsopen(&(0x7f0000000040)='securityfs\x00', 0x0) r4 = fcntl$dupfd(r2, 0x406, r3) (async) ioprio_set$pid(0x2, 0x0, 0x0) (async) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000000)=0x14, 0x4) (async) getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) (async) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001e00010026bd706e6e24139e074c2100"], 0x40}}, 0x90) getsockname$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, &(0x7f0000000180)=0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@clone_children}]}) (async) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) sendfile(r1, r1, 0x0, 0x7ffff000) (async) ioctl$SNAPSHOT_FREE(r4, 0x3305) 100.100019ms ago: executing program 0 (id=771): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001900010000000000fbdbcf251d"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x24, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) getpgrp(0xffffffffffffffff) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) listen(r4, 0x9) close_range(r3, 0xffffffffffffffff, 0x0) 60.204749ms ago: executing program 0 (id=772): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x14b20000}, 0x1c) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 46.340949ms ago: executing program 3 (id=773): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x1000, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f00000000c0)={0x8, 0x1}, 0x0) r2 = syz_open_procfs(r1, &(0x7f00000001c0)='net/dev_mcast\x00') exit(0xfe) unlinkat(r2, &(0x7f0000000080)='./file0\x00', 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x4, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000200)={0xeeee0000, 0x8000}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000180)=[@exit_looper], 0x0, 0x0, 0x0}) keyctl$describe(0x6, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x7) dup3(r3, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000040)=[@decrefs], 0x0, 0x0, 0x0}) 0s ago: executing program 0 (id=774): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_readahead}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x80) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)={0x240, 0x188, 0x16}, 0x18) r7 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='-:-%-(\'\xb9^/$]&\x00', r7) sendfile(r6, r6, 0x0, 0x7a680000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) syz_io_uring_setup(0x4504, &(0x7f0000000240)={0x0, 0x0, 0x13290, 0x100002, 0xef}, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r8, &(0x7f0000000b40)=[{{&(0x7f0000000580)={0xa, 0x4e24, 0xc, @local, 0x3}, 0x1c, 0x0}}], 0x1, 0x20040010) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) eventfd(0x800007) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0xfffffffffffffffb, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x62, 0x2, 0x9}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 131025][ T31] usb 1-1: config 0 descriptor?? [ 22.140816][ T385] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 22.143474][ T386] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 22.152790][ T385] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:23 [ 22.158317][ T386] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:23 [ 22.190026][ T389] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 22.376284][ T31] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 22.389800][ T31] usb 1-1: USB disconnect, device number 2 [ 22.396243][ T31] usblp0: removed [ 22.459544][ T335] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 22.599604][ T331] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 22.609524][ T335] usb 3-1: Using ep0 maxpacket: 16 [ 22.615789][ T335] usb 3-1: config 0 has no interfaces? [ 22.622019][ T335] usb 3-1: config 0 has no interfaces? [ 22.628147][ T335] usb 3-1: config 0 has no interfaces? [ 22.634594][ T335] usb 3-1: string descriptor 0 read error: -71 [ 22.640897][ T335] usb 3-1: New USB device found, idVendor=0403, idProduct=e80c, bcdDevice=fb.ba [ 22.650019][ T335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 22.658519][ T335] usb 3-1: rejected 3 configurations due to insufficient available bus power [ 22.667460][ T335] usb 3-1: no configuration chosen from 3 choices [ 22.674523][ T335] usb 3-1: USB disconnect, device number 2 [ 22.749564][ T331] usb 2-1: Using ep0 maxpacket: 16 [ 22.755817][ T331] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 22.767049][ T331] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 22.776934][ T331] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 22.790664][ T331] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 22.799717][ T331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 22.807710][ T331] usb 2-1: SerialNumber: syz [ 22.814633][ T378] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 22.859548][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 22.897506][ T394] 9pnet_fd: Insufficient options for proto=fd [ 23.009544][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 23.015827][ T31] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 23.024387][ T31] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 23.024387][ T378] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 23.024426][ T378] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:13 [ 23.033220][ T31] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 23.050988][ T331] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 23.053235][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 23.070508][ T331] usb 2-1: USB disconnect, device number 2 [ 23.082905][ T31] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 23.091580][ T407] SELinux: security_context_str_to_sid () failed with errno=-22 [ 23.094070][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 23.118842][ T31] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 23.128032][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.139326][ T31] usb 1-1: config 0 descriptor?? [ 23.209531][ T335] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 23.325886][ T434] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 23.326036][ T434] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:44 [ 23.346483][ T436] __vm_enough_memory: pid: 436, comm: syz.2.35, bytes: 18014402804453376 not enough memory for the allocation [ 23.356044][ T31] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 23.378707][ T335] usb 4-1: Using ep0 maxpacket: 16 [ 23.387597][ T335] usb 4-1: unable to get BOS descriptor or descriptor too short [ 23.398633][ T335] usb 4-1: config 7 has an invalid interface number: 72 but max is 0 [ 23.406990][ T335] usb 4-1: config 7 has no interface number 0 [ 23.413216][ T335] usb 4-1: config 7 interface 72 has no altsetting 0 [ 23.422246][ T335] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=f9.87 [ 23.431527][ T335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.439636][ T335] usb 4-1: Product: syz [ 23.444032][ T335] usb 4-1: Manufacturer: syz [ 23.448642][ T335] usb 4-1: SerialNumber: syz [ 23.502796][ T446] tmpfs: Bad value for 'nr_blocks' [ 23.529540][ T331] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 23.656468][ T400] netlink: 57 bytes leftover after parsing attributes in process `syz.3.22'. [ 23.669382][ T335] cdc_acm 4-1:7.72: Zero length descriptor references [ 23.676487][ T335] cdc_acm 4-1:7.72: probe with driver cdc_acm failed with error -22 [ 23.680680][ T331] usb 2-1: config 0 interface 0 has no altsetting 0 [ 23.685553][ T335] usb 4-1: USB disconnect, device number 2 [ 23.693151][ T331] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 23.711611][ T331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.729827][ T331] usb 2-1: config 0 descriptor?? [ 23.769616][ T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 23.909718][ T10] usb 1-1: USB disconnect, device number 3 [ 23.916265][ T10] usblp0: removed [ 23.929533][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 23.935842][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.946866][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 23.956658][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 23.969961][ T31] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 23.978997][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.987796][ T31] usb 3-1: config 0 descriptor?? [ 24.137172][ T331] acrux 0003:1A34:0802.0001: invalid report_count 30242 [ 24.144215][ T331] acrux 0003:1A34:0802.0001: item 0 2 1 9 parsing failed [ 24.151471][ T331] acrux 0003:1A34:0802.0001: parse failed [ 24.157241][ T331] acrux 0003:1A34:0802.0001: probe with driver acrux failed with error -22 [ 24.199114][ T451] netlink: 16 bytes leftover after parsing attributes in process `syz.3.41'. [ 24.208449][ T451] SELinux: security_context_str_to_sid () failed with errno=-22 [ 24.228029][ T453] binder: Unknown parameter 'fscontext?}' [ 24.234798][ T455] binder: Unknown parameter 'fscontext?}' [ 24.341616][ T463] overlayfs: conflicting options: userxattr,verity=require [ 24.342291][ T424] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:31 [ 24.351089][ T331] usb 2-1: USB disconnect, device number 3 [ 24.398870][ T448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.407462][ T448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.609517][ T335] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 24.620011][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 24.625955][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 24.634702][ T31] usb 3-1: USB disconnect, device number 3 [ 24.679552][ T45] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 24.759552][ T335] usb 4-1: Using ep0 maxpacket: 8 [ 24.766079][ T335] usb 4-1: unable to get BOS descriptor or descriptor too short [ 24.774452][ T335] usb 4-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 24.787268][ T335] usb 4-1: config 1 interface 0 has no altsetting 0 [ 24.795397][ T335] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.40 [ 24.804703][ T335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.813000][ T335] usb 4-1: Product: syz [ 24.817202][ T335] usb 4-1: Manufacturer: syz [ 24.821820][ T335] usb 4-1: SerialNumber: syz [ 24.829558][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 24.835682][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 24.845847][ T45] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 24.856043][ T45] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 24.865138][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.875441][ T45] usb 1-1: Product: syz [ 24.877980][ T36] kauditd_printk_skb: 122 callbacks suppressed [ 24.877995][ T36] audit: type=1400 audit(1761954402.359:196): avc: denied { ioctl } for pid=470 comm="syz.1.47" path="socket:[4502]" dev="sockfs" ino=4502 ioctlcmd=0x48e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 24.882367][ T45] usb 1-1: Manufacturer: syz [ 24.886239][ T471] rust_binder: Error while translating object. [ 24.911003][ T45] usb 1-1: SerialNumber: syz [ 24.915660][ T471] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 24.926290][ T471] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:33 [ 24.950282][ T473] SELinux: Context system_u:object_r:checkpolicy_exec_t:s0 is not valid (left unmapped). [ 24.950290][ T36] audit: type=1400 audit(1761954402.439:197): avc: denied { relabelfrom } for pid=472 comm="syz.1.48" name="NETLINK" dev="sockfs" ino=4510 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 24.993048][ T36] audit: type=1400 audit(1761954402.479:198): avc: denied { relabelto } for pid=472 comm="syz.1.48" name="NETLINK" dev="sockfs" ino=4510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:checkpolicy_exec_t:s0" [ 24.993515][ T473] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 25.028685][ T473] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:35 [ 25.029694][ T36] audit: type=1400 audit(1761954402.519:199): avc: denied { accept } for pid=464 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 25.047852][ T465] rust_binder: Write failure EFAULT in pid:34 [ 25.058704][ T36] audit: type=1400 audit(1761954402.519:200): avc: denied { getopt } for pid=464 comm="syz.3.45" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 25.066262][ T335] usbhid 4-1:1.0: can't add hid device: -22 [ 25.091888][ T335] usbhid 4-1:1.0: probe with driver usbhid failed with error -22 [ 25.101596][ T335] usb 4-1: USB disconnect, device number 3 [ 25.138099][ T36] audit: type=1400 audit(1761954402.619:201): avc: denied { getopt } for pid=480 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 25.138173][ T481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.50'. [ 25.158323][ T467] rust_binder: Read failure Err(EAGAIN) in pid:5 [ 25.170361][ T45] usb 1-1: 0:2 : does not exist [ 25.191265][ T45] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 25.208010][ T45] usb 1-1: USB disconnect, device number 4 [ 25.218360][ T401] udevd[401]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 25.238877][ T36] audit: type=1400 audit(1761954402.719:202): avc: denied { mount } for pid=480 comm="syz.2.50" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 25.273711][ T36] audit: type=1400 audit(1761954402.759:203): avc: denied { create } for pid=483 comm="syz.1.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 25.289442][ T484] netlink: 'syz.1.51': attribute type 12 has an invalid length. [ 25.302105][ T484] SELinux: security_context_str_to_sid () failed with errno=-22 [ 25.303338][ T36] audit: type=1400 audit(1761954402.759:204): avc: denied { getopt } for pid=483 comm="syz.1.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 25.344416][ T486] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:45 [ 25.344739][ T486] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 25.354431][ T486] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:45 [ 25.392702][ T36] audit: type=1400 audit(1761954402.879:205): avc: denied { read write } for pid=489 comm="syz.1.53" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 25.479515][ T331] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 25.612726][ T496] binder: Bad value for 'max' [ 25.629542][ T331] usb 3-1: Using ep0 maxpacket: 32 [ 25.635999][ T331] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 25.638589][ T498] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 25.644232][ T331] usb 3-1: config 0 has no interface number 0 [ 25.644374][ T498] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:38 [ 25.655200][ T331] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 25.680646][ T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.688743][ T331] usb 3-1: Product: syz [ 25.693029][ T331] usb 3-1: Manufacturer: syz [ 25.697626][ T331] usb 3-1: SerialNumber: syz [ 25.703040][ T331] usb 3-1: config 0 descriptor?? [ 25.710736][ T331] smsc95xx v2.0.0 [ 25.726626][ T506] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 25.762499][ T510] __vm_enough_memory: pid: 510, comm: syz.3.59, bytes: 18014402804453376 not enough memory for the allocation [ 25.802467][ T516] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 25.830207][ T524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.839213][ T524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.848761][ T524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.857869][ T524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.873842][ T524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.885279][ T524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.914098][ T532] netlink: 25 bytes leftover after parsing attributes in process `syz.3.66'. [ 25.986130][ T538] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:14 [ 26.008755][ T544] binder: Unknown parameter '18446744073709551615' [ 26.059508][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 26.131436][ T548] Invalid logical block size (1) [ 26.209513][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 26.216125][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.227050][ T10] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 26.236883][ T10] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 26.248180][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 26.257605][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.265808][ T10] usb 2-1: Product: 䶪쮢慓怔麱＞㒈洢ొᐍ箊閭㣻㭮谂뜸ᔻ喏䩰匞໼曀甼⇯庽龜墿穝糒卾裔Ꝗ黻쥳鶧好笌螤厇苶᝹㚤崩돿᯹锡呍蘧湝ಹ퐴׃⋐⿶治廱緍햳턢㔬衕⚏ᴓ텦飷汔헕霦ꎿ餮曹䖈䞇鞼梬懎ℇሄꕡ磌壐 [ 26.293923][ T10] usb 2-1: Manufacturer: ꇂꩥ溛㕃㲢♝弲傓ⶾ䎾㌊੤猞⭀곺曌ṁ雞琕苎පꕈ㓾쿶䦻蛩刈땃竩鮤褐ꭖ驛찫帏ἵ攅㠻휡⧺ꏑᑖƃ禋爵黯◽쉖㇂ᗣ东̈⁓飀쇡䮐푀ఔ㉤븿㒖餳䷌㷋큉ﮌ [ 26.318236][ T10] usb 2-1: SerialNumber: В [ 26.389529][ T45] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 26.419731][ T539] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 26.539540][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 26.545818][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.556811][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.566585][ T45] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 26.576049][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.585002][ T45] usb 1-1: config 0 descriptor?? [ 26.589542][ T539] usb 4-1: Using ep0 maxpacket: 8 [ 26.597139][ T539] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 26.605492][ T539] usb 4-1: config 179 has no interface number 0 [ 26.611823][ T539] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 26.622913][ T539] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 26.634154][ T539] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 26.645300][ T539] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 26.657170][ T539] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 26.671182][ T539] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 26.680294][ T539] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.689216][ T552] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22 [ 26.802313][ T45] savu 0003:1E7D:2D5A.0002: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 26.818684][ T331] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 26.829705][ T331] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 26.839103][ T331] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 26.850020][ T331] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 26.861072][ T331] usb 3-1: USB disconnect, device number 4 [ 26.900003][ T539] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input4 [ 27.039497][ T10] cdc_ncm 2-1:1.0: bind() failure [ 27.043183][ T560] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:63 [ 27.045154][ T560] __vm_enough_memory: pid: 560, comm: syz.1.75, bytes: 18014402804453376 not enough memory for the allocation [ 27.050239][ T10] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 27.073372][ T10] cdc_ncm 2-1:1.1: bind() failure [ 27.083899][ T10] usb 2-1: USB disconnect, device number 4 [ 27.101785][ T335] usb 4-1: USB disconnect, device number 4 [ 27.101916][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 27.116213][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 27.116464][ T335] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 27.428140][ T588] rust_binder: Write failure EFAULT in pid:87 [ 27.446564][ T591] rust_binder: Error in use_page_slow: ESRCH [ 27.446587][ T591] rust_binder: use_range failure ESRCH [ 27.453081][ T591] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true [ 27.458637][ T591] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 27.466830][ T591] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:89 [ 27.515693][ T602] Zero length message leads to an empty skb [ 27.550026][ T607] rust_binder: inc_ref_done called when no active inc_refs [ 27.561762][ T611] veth0_virt_wifi: entered allmulticast mode [ 27.575556][ T611] veth0_virt_wifi: left allmulticast mode [ 27.607391][ T616] rust_binder: Failed to allocate buffer. len:224, is_oneway:true [ 27.644400][ T626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.667291][ T626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.763682][ T642] batadv_slave_1: entered promiscuous mode [ 27.770840][ T641] batadv_slave_1: left promiscuous mode [ 27.839617][ T10] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 27.850720][ T647] incfs: Options parsing error. -22 [ 27.856009][ T647] incfs: mount failed -22 [ 27.879513][ T539] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 27.969523][ T10] usb 2-1: device descriptor read/64, error -71 [ 28.029894][ T539] usb 4-1: too many configurations: 72, using maximum allowed: 8 [ 28.043382][ T539] usb 4-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 28.052642][ T539] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.061610][ T539] usb 4-1: config 0 descriptor?? [ 28.209987][ T10] usb 2-1: device descriptor read/64, error -71 [ 28.267891][ T45] usb 4-1: USB disconnect, device number 5 [ 28.469513][ T10] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 28.609501][ T10] usb 2-1: device descriptor read/64, error -71 [ 28.762235][ T650] SELinux: failed to load policy [ 28.768080][ T650] SELinux: failed to load policy [ 28.773499][ T650] SELinux: failed to load policy [ 28.778694][ T650] SELinux: failed to load policy [ 28.783995][ T650] SELinux: failed to load policy [ 28.789128][ T650] SELinux: failed to load policy [ 28.804050][ T650] SELinux: failed to load policy [ 28.809817][ T650] SELinux: failed to load policy [ 28.814937][ T650] SELinux: failed to load policy [ 28.820156][ T650] SELinux: failed to load policy [ 28.859505][ T10] usb 2-1: device descriptor read/64, error -71 [ 28.915011][ T664] process 'syz.0.109' launched '/dev/fd/4' with NULL argv: empty string added [ 28.951630][ T668] netlink: 'syz.0.111': attribute type 4 has an invalid length. [ 28.959372][ T668] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.111'. [ 28.969234][ T668] rust_binder: Write failure EFAULT in pid:43 [ 28.979655][ T10] usb usb2-port1: attempt power cycle [ 29.009837][ T335] usb 1-1: USB disconnect, device number 5 [ 29.059572][ T45] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 29.210616][ T45] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 29.222260][ T45] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 29.233263][ T670] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 29.240763][ T45] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 29.252061][ T45] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 29.261139][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.270181][ T655] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 29.349529][ T10] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 29.370693][ T10] usb 2-1: device descriptor read/8, error -71 [ 29.410582][ T670] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 29.422300][ T670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 29.433264][ T670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 29.443083][ T670] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 29.456035][ T670] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 29.465096][ T670] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.473667][ T670] usb 3-1: config 0 descriptor?? [ 29.500596][ T10] usb 2-1: device descriptor read/8, error -71 [ 29.739590][ T10] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 29.760563][ T10] usb 2-1: device descriptor read/8, error -71 [ 29.881324][ T670] plantronics 0003:047F:FFFF.0003: item fetching failed at offset 14/15 [ 29.889900][ T670] plantronics 0003:047F:FFFF.0003: parse failed [ 29.896269][ T670] plantronics 0003:047F:FFFF.0003: probe with driver plantronics failed with error -22 [ 29.900607][ T10] usb 2-1: device descriptor read/8, error -71 [ 30.019617][ T10] usb usb2-port1: unable to enumerate USB device [ 30.130435][ T10] usb 3-1: USB disconnect, device number 5 [ 30.363902][ T36] kauditd_printk_skb: 46 callbacks suppressed [ 30.363918][ T36] audit: type=1400 audit(1761954407.849:252): avc: denied { create } for pid=677 comm="syz.0.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 30.431708][ T655] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 30.441593][ T36] audit: type=1400 audit(1761954407.929:253): avc: denied { create } for pid=677 comm="syz.0.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 30.469120][ T36] audit: type=1400 audit(1761954407.939:254): avc: denied { sys_admin } for pid=677 comm="syz.0.114" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 30.502621][ T36] audit: type=1400 audit(1761954407.989:255): avc: denied { execute } for pid=679 comm="syz.0.115" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.534190][ T36] audit: type=1400 audit(1761954408.019:256): avc: denied { ioctl } for pid=683 comm="syz.0.116" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 30.591087][ T36] audit: type=1400 audit(1761954408.079:257): avc: denied { write } for pid=688 comm="syz.0.118" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 30.639700][ T45] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 30.647441][ T45] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input5 [ 30.668167][ T45] usb 4-1: USB disconnect, device number 6 [ 30.690147][ T36] audit: type=1400 audit(1761954408.179:258): avc: denied { append } for pid=699 comm="syz.0.122" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.776617][ T703] rust_binder: 704 RLIMIT_NICE not set [ 30.776708][ T703] rust_binder: inc_ref_done called when no active inc_refs [ 30.782323][ T703] rust_binder: inc_ref_done called when no active inc_refs [ 30.823890][ T713] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 30.840055][ T715] __vm_enough_memory: pid: 715, comm: syz.2.128, bytes: 18014402804453376 not enough memory for the allocation [ 30.868194][ T718] rust_binder: Error while translating object. [ 30.868229][ T718] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 30.874496][ T718] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:125 [ 30.894548][ T722] fuse: Bad value for 'user_id' [ 30.908487][ T722] fuse: Bad value for 'user_id' [ 30.929669][ T10] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 30.989553][ T670] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 31.019016][ T723] rust_binder: Write failure EFAULT in pid:129 [ 31.037688][ T725] fuse: Bad value for 'fd' [ 31.080450][ T10] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x2 has invalid maxpacket 512, setting to 8 [ 31.091137][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 31.142122][ T670] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 31.151237][ T670] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.159247][ T670] usb 2-1: Product: syz [ 31.163440][ T670] usb 2-1: Manufacturer: syz [ 31.168034][ T670] usb 2-1: SerialNumber: syz [ 31.309579][ T45] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 31.459505][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 31.465728][ T45] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 31.474130][ T45] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 31.482835][ T45] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 31.491832][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 31.501494][ T45] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 31.511158][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 31.524169][ T45] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 31.533279][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.542923][ T45] usb 4-1: config 0 descriptor?? [ 31.750725][ T36] audit: type=1400 audit(1761954409.239:259): avc: denied { unmount } for pid=736 comm="syz.2.134" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 31.770429][ T45] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 31.783315][ T45] usb 4-1: USB disconnect, device number 7 [ 31.789887][ T45] usblp0: removed [ 32.239546][ T45] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 32.336091][ T36] audit: type=1400 audit(1761954409.819:260): avc: denied { listen } for pid=745 comm="syz.2.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.355414][ T36] audit: type=1400 audit(1761954409.819:261): avc: denied { create } for pid=745 comm="syz.2.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 32.389500][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 32.400257][ T45] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 32.408807][ T45] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 32.417657][ T45] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 32.426791][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 32.436689][ T45] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 32.446527][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 32.459662][ T45] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 32.468707][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.477659][ T45] usb 4-1: config 0 descriptor?? [ 32.691722][ T45] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 33.026344][ T765] fuse: Bad value for 'fd' [ 33.243170][ T45] usb 4-1: USB disconnect, device number 8 [ 33.251496][ T45] usblp0: removed [ 33.688297][ T10] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.40 [ 33.697482][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.700889][ T777] can: request_module (can-proto-3) failed. [ 33.707611][ T10] usb 1-1: can't set config #1, error -71 [ 33.721824][ T10] usb 1-1: USB disconnect, device number 6 [ 33.770601][ T331] usb 2-1: USB disconnect, device number 9 [ 33.803882][ T791] rust_binder: 108: no such ref 1 [ 33.809089][ T792] rust_binder: 108: no such ref 1 [ 33.814397][ T791] rust_binder: Write failure EFAULT in pid:108 [ 33.814451][ T792] rust_binder: Write failure EFAULT in pid:108 [ 33.915877][ T807] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.922215][ T807] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:97 [ 33.956208][ T810] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 34.104782][ T824] overlayfs: failed to clone upperpath [ 34.140092][ T827] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.140918][ T827] rust_binder: 120: no such ref 0 [ 34.152735][ T827] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 34.159846][ T827] rust_binder: 120: no such ref 4294967295 [ 34.165981][ T827] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:120 [ 34.176507][ T830] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.219534][ T331] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 34.281354][ T846] fuse: Bad value for 'fd' [ 34.305062][ T851] overlayfs: failed to clone upperpath [ 34.324645][ T856] binder: Bad value for 'stats' [ 34.346767][ T863] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.347870][ T863] rust_binder: Failed to allocate buffer. len:4200, is_oneway:false [ 34.354537][ T863] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 34.362723][ T863] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:132 [ 34.379498][ T331] usb 1-1: Using ep0 maxpacket: 16 [ 34.388152][ T873] capability: warning: `syz.2.178' uses deprecated v2 capabilities in a way that may be insecure [ 34.390253][ T331] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 34.421089][ T331] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.421394][ T877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.432838][ T331] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 34.449619][ T331] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 34.458819][ T331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.467361][ T331] usb 1-1: Product: syz [ 34.471557][ T331] usb 1-1: Manufacturer: syz [ 34.476145][ T331] usb 1-1: SerialNumber: syz [ 34.596279][ T883] netlink: 'syz.2.181': attribute type 4 has an invalid length. [ 34.604000][ T883] netlink: 'syz.2.181': attribute type 5 has an invalid length. [ 34.611736][ T883] netlink: 'syz.2.181': attribute type 1 has an invalid length. [ 34.682505][ T813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.689524][ T45] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 34.691084][ T813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.849524][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 34.856084][ T45] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 34.863819][ T45] usb 2-1: can't read configurations, error -61 [ 34.908518][ T331] usb 1-1: 0:2 : does not exist [ 34.999542][ T45] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 35.149525][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 35.156257][ T45] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 35.163979][ T45] usb 2-1: can't read configurations, error -61 [ 35.170473][ T45] usb usb2-port1: attempt power cycle [ 35.509527][ T45] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 35.517653][ T813] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 35.517684][ T813] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:83 [ 35.530428][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 35.533620][ T331] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 35.540924][ T45] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 35.551473][ T331] usb 1-1: USB disconnect, device number 7 [ 35.553703][ T45] usb 2-1: can't read configurations, error -61 [ 35.565264][ T555] udevd[555]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.699533][ T45] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 35.719854][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 35.726455][ T45] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 35.734100][ T45] usb 2-1: can't read configurations, error -61 [ 35.740490][ T45] usb usb2-port1: unable to enumerate USB device [ 35.833546][ T900] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.833543][ T901] rust_binder: 112: no such ref 0 [ 35.833563][ T901] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 35.852141][ T901] rust_binder: 112: no such ref 2 [ 35.857291][ T901] rust_binder: Error while translating object. [ 35.857323][ T901] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 35.863648][ T901] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:112 [ 35.928738][ T909] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.938398][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 35.938426][ T36] audit: type=1400 audit(1761954413.419:280): avc: denied { write } for pid=908 comm="syz.3.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 35.945522][ T909] rust_binder: Error while translating object. [ 35.970270][ T909] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 35.976520][ T909] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:121 [ 36.007726][ T913] SELinux: security_context_str_to_sid () failed with errno=-22 [ 36.066902][ T922] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:85 [ 36.067299][ T36] audit: type=1400 audit(1761954413.549:281): avc: denied { create } for pid=921 comm="syz.0.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 36.071453][ T922] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 36.076517][ T36] audit: type=1400 audit(1761954413.559:282): avc: denied { write } for pid=921 comm="syz.0.197" path="socket:[7041]" dev="sockfs" ino=7041 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 36.097075][ T922] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:85 [ 36.165278][ T932] netlink: 104 bytes leftover after parsing attributes in process `syz.0.200'. [ 36.184684][ T36] audit: type=1400 audit(1761954413.669:283): avc: denied { ioctl } for pid=931 comm="syz.0.200" path="socket:[7330]" dev="sockfs" ino=7330 ioctlcmd=0x9365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.236193][ T36] audit: type=1400 audit(1761954413.719:284): avc: denied { append } for pid=931 comm="syz.0.200" name="001" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 36.239912][ T934] binder: Unknown parameter 'r@oc *\p<IkK' [ 36.275643][ T936] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.293625][ T36] audit: type=1400 audit(1761954413.779:285): avc: denied { mount } for pid=937 comm="syz.3.202" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 36.312396][ T940] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.324473][ T940] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 36.331110][ T940] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 36.339181][ T940] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:142 [ 36.399829][ T941] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 36.409106][ T941] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 36.417204][ T941] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:142 [ 37.163207][ T967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.210'. [ 37.197926][ T967] 9pnet_fd: Insufficient options for proto=fd [ 37.205030][ T968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.210'. [ 37.229355][ T36] audit: type=1400 audit(1761954414.709:286): avc: denied { ioctl } for pid=972 comm="syz.3.211" path="socket:[7095]" dev="sockfs" ino=7095 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 37.262531][ T973] netlink: 60 bytes leftover after parsing attributes in process `syz.3.211'. [ 37.265587][ T36] audit: type=1400 audit(1761954414.709:287): avc: denied { bpf } for pid=972 comm="syz.3.211" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 37.278069][ T979] rust_binder: 104: no such ref 0 [ 37.330667][ T982] syz.3.211 (982): attempted to duplicate a private mapping with mremap. This is not supported. [ 37.410637][ T985] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 37.496564][ T997] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.497731][ T997] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 37.504396][ T997] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 37.512805][ T997] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:154 [ 37.513119][ T998] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.544562][ T1001] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:111 [ 37.769522][ T539] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 37.819525][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 37.929524][ T539] usb 2-1: Using ep0 maxpacket: 32 [ 37.935722][ T539] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 37.943860][ T539] usb 2-1: config 0 has no interface number 0 [ 37.951519][ T539] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 37.960613][ T539] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.968593][ T539] usb 2-1: Product: syz [ 37.972800][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 37.977947][ T539] usb 2-1: Manufacturer: syz [ 37.982596][ T539] usb 2-1: SerialNumber: syz [ 37.989671][ T10] usb 4-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 37.998964][ T539] usb 2-1: config 0 descriptor?? [ 38.004227][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.012579][ T10] usb 4-1: Product: syz [ 38.016760][ T10] usb 4-1: Manufacturer: syz [ 38.019630][ T36] audit: type=1400 audit(1761954415.499:288): avc: denied { relabelfrom } for pid=1017 comm="syz.2.227" name="" dev="pipefs" ino=7575 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 38.021476][ T10] usb 4-1: SerialNumber: syz [ 38.048644][ T539] smsc95xx v2.0.0 [ 38.061280][ T36] audit: type=1400 audit(1761954415.549:289): avc: denied { write } for pid=1019 comm="syz.2.228" name="/" dev="configfs" ino=2566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 38.256880][ T1010] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:165 [ 38.257050][ T1010] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.271348][ T10] snd-usb-audio 4-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 38.290754][ T10] usb 4-1: USB disconnect, device number 9 [ 38.293349][ T401] udevd[401]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:222.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.332497][ T1023] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.441469][ T1032] netlink: 'syz.0.232': attribute type 4 has an invalid length. [ 38.455613][ T1032] netlink: 17 bytes leftover after parsing attributes in process `syz.0.232'. [ 38.456156][ T539] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 38.476097][ T539] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 38.497182][ T10] hid (null): unknown global tag 0xe [ 38.502610][ T10] hid (null): invalid report_size 38876 [ 38.509883][ T10] hid-generic 0006:0200:000E.0004: unknown global tag 0xe [ 38.517142][ T10] hid-generic 0006:0200:000E.0004: item 0 2 1 14 parsing failed [ 38.525251][ T10] hid-generic 0006:0200:000E.0004: probe with driver hid-generic failed with error -22 [ 38.779514][ T10] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 38.869885][ T1050] erofs: dax options not supported [ 38.876134][ T1050] input: syz0 as /devices/virtual/input/input8 [ 38.940996][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 38.949664][ T10] usb 1-1: config 1 has an invalid interface number: 6 but max is 2 [ 38.957753][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 38.968219][ T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 38.977357][ T10] usb 1-1: config 1 has no interface number 1 [ 38.983800][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 38.996921][ T10] usb 1-1: too many endpoints for config 1 interface 6 altsetting 6: 50, using maximum allowed: 30 [ 39.008187][ T10] usb 1-1: config 1 interface 6 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 50 [ 39.021729][ T10] usb 1-1: config 1 interface 6 has no altsetting 0 [ 39.030351][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 39.039488][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.047531][ T10] usb 1-1: Product: ф [ 39.051684][ T10] usb 1-1: Manufacturer: 笵 [ 39.056302][ T10] usb 1-1: SerialNumber: 唢̱\뮸駼놼輳䖁穂೿펵판㝒䰫뷢ᨠ镙 [ 39.270560][ T10] usb 1-1: 0:2 : does not exist [ 39.278018][ T10] usb 1-1: USB disconnect, device number 8 [ 39.286875][ T401] udevd[401]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.955799][ T1084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.249'. [ 39.966031][ T1084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.249'. [ 40.019541][ T670] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 40.170641][ T670] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 40.181694][ T670] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 40.192553][ T670] usb 1-1: New USB device found, idVendor=0404, idProduct=0755, bcdDevice= 0.00 [ 40.201686][ T670] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.210529][ T670] usb 1-1: config 0 descriptor?? [ 40.215815][ T1071] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 40.426076][ T670] usbhid 1-1:0.0: can't add hid device: -71 [ 40.432094][ T670] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 40.440790][ T670] usb 1-1: USB disconnect, device number 9 [ 40.469578][ T45] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 40.620642][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.631943][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.641823][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 40.654729][ T45] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 40.663817][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.672495][ T45] usb 4-1: config 0 descriptor?? [ 40.908199][ T998] rust_binder: Failed to allocate buffer. len:1136, is_oneway:true [ 40.908227][ T998] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 40.916234][ T998] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:140 [ 40.964818][ T1134] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 40.974148][ T1134] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:142 [ 41.020048][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 41.020066][ T36] audit: type=1400 audit(1761954418.509:301): avc: denied { getopt } for pid=1142 comm="syz.0.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 41.079477][ T45] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 41.087036][ T45] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 41.094713][ T45] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 41.102403][ T45] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 41.109996][ T45] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 41.117519][ T45] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 41.125180][ T45] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 41.132855][ T45] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 41.140469][ T45] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 41.147987][ T45] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 41.157344][ T45] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 41.164991][ T36] audit: type=1400 audit(1761954418.649:302): avc: denied { bind } for pid=1150 comm="syz.0.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 41.184680][ T45] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 41.192121][ T45] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 41.199554][ T45] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 41.206948][ T45] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 41.214604][ T45] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 41.227107][ T45] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 41.372760][ T1158] 9pnet_fd: Insufficient options for proto=fd [ 41.390758][ T45] usb 4-1: USB disconnect, device number 10 [ 41.419511][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 41.481681][ T1171] fuse: Bad value for 'fd' [ 41.570486][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.581504][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.591274][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 41.604231][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 41.613282][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.622005][ T10] usb 1-1: config 0 descriptor?? [ 41.944639][ T539] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 41.957793][ T1193] netlink: 28 bytes leftover after parsing attributes in process `syz.2.283'. [ 41.958835][ T539] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 41.977022][ T539] usb 2-1: USB disconnect, device number 14 [ 42.030332][ T10] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 42.039589][ T10] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 42.290555][ T539] usb 1-1: USB disconnect, device number 10 [ 42.384822][ T1210] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.384919][ T1210] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:236 [ 42.501068][ T1220] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.566586][ T36] audit: type=1326 audit(1761954420.049:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1227 comm="syz.3.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593218efc9 code=0x7ffc0000 [ 42.596318][ T36] audit: type=1326 audit(1761954420.049:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1227 comm="syz.3.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593218efc9 code=0x7ffc0000 [ 42.619667][ T36] audit: type=1326 audit(1761954420.059:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1227 comm="syz.3.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f593218efc9 code=0x7ffc0000 [ 42.642976][ T36] audit: type=1326 audit(1761954420.059:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1227 comm="syz.3.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593218efc9 code=0x7ffc0000 [ 42.666284][ T36] audit: type=1326 audit(1761954420.059:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1227 comm="syz.3.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f593218efc9 code=0x7ffc0000 [ 42.690097][ T36] audit: type=1326 audit(1761954420.059:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1227 comm="syz.3.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593218efc9 code=0x7ffc0000 [ 42.713532][ T36] audit: type=1326 audit(1761954420.059:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1227 comm="syz.3.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f593218efc9 code=0x7ffc0000 [ 42.743289][ T36] audit: type=1326 audit(1761954420.059:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1227 comm="syz.3.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f593218efc9 code=0x7ffc0000 [ 42.774770][ T1241] netlink: 72 bytes leftover after parsing attributes in process `syz.3.296'. [ 42.937523][ T1275] netlink: 56 bytes leftover after parsing attributes in process `syz.0.310'. [ 42.964000][ T1277] rust_binder: Write failure EFAULT in pid:168 [ 42.964030][ T1277] rust_binder: Write failure EFAULT in pid:168 [ 43.008877][ T1288] overlayfs: failed to clone upperpath [ 43.147820][ T1321] netlink: 76 bytes leftover after parsing attributes in process `syz.0.325'. [ 43.156961][ T1321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.325'. [ 43.169261][ T1321] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 43.169324][ T1321] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:188 [ 43.569511][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 43.719487][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 43.723324][ T1344] 9pnet_fd: Insufficient options for proto=fd [ 43.725771][ T10] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 43.738866][ T10] usb 1-1: config 0 has no interface number 0 [ 43.746465][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 43.755579][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.763629][ T10] usb 1-1: Product: syz [ 43.767800][ T10] usb 1-1: Manufacturer: syz [ 43.772416][ T10] usb 1-1: SerialNumber: syz [ 43.777753][ T10] usb 1-1: config 0 descriptor?? [ 43.783940][ T10] smsc95xx v2.0.0 [ 43.810972][ T1348] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.906367][ T1352] netlink: 'syz.2.335': attribute type 4 has an invalid length. [ 43.913796][ T1355] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 43.920591][ T1355] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 43.928682][ T1355] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:275 [ 44.184662][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 44.204551][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 44.580528][ T1374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1374 comm=syz.2.343 [ 44.655373][ T1376] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.655746][ T1376] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.673348][ T1378] rust_binder: Failed to allocate buffer. len:4160, is_oneway:false [ 44.679878][ T1378] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 44.687883][ T1378] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:281 [ 44.697322][ T1378] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 44.706446][ T1378] rust_binder: Read failure Err(EFAULT) in pid:281 [ 44.725543][ T1383] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.808511][ T1387] kvm: emulating exchange as write [ 44.899623][ T1392] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.900135][ T1392] rust_binder: Error while translating object. [ 44.906707][ T1392] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 44.913011][ T1392] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:295 [ 44.936892][ T1394] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 44.953388][ T1394] rust_binder: Write failure EINVAL in pid:297 [ 45.016329][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 45.033344][ T10] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 45.080421][ T1401] cgroup2: Unknown parameter 'freezer' [ 45.249527][ T539] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 45.400620][ T539] usb 2-1: config 0 interface 0 has no altsetting 0 [ 45.407415][ T539] usb 2-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 45.416774][ T539] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.425307][ T539] usb 2-1: config 0 descriptor?? [ 45.722283][ T670] usb 1-1: USB disconnect, device number 11 [ 45.793493][ T1415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.354'. [ 45.833328][ T539] logitech-hidpp-device 0003:046D:C262.0007: unknown main item tag 0x0 [ 45.841714][ T539] logitech-hidpp-device 0003:046D:C262.0007: item fetching failed at offset 4/5 [ 45.851198][ T539] logitech-hidpp-device 0003:046D:C262.0007: hidpp_probe:parse failed [ 45.859407][ T539] logitech-hidpp-device 0003:046D:C262.0007: probe with driver logitech-hidpp-device failed with error -22 [ 46.033566][ T36] kauditd_printk_skb: 61 callbacks suppressed [ 46.033582][ T36] audit: type=1326 audit(1761954423.519:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1456 comm="syz.2.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833bf8efc9 code=0x7ffc0000 [ 46.065523][ T1458] rust_binder: Write failure EFAULT in pid:217 [ 46.066977][ T539] usb 2-1: USB disconnect, device number 15 [ 46.078959][ T36] audit: type=1326 audit(1761954423.519:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1456 comm="syz.2.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833bf8efc9 code=0x7ffc0000 [ 46.105627][ T36] audit: type=1326 audit(1761954423.519:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1456 comm="syz.2.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f833bf8efc9 code=0x7ffc0000 [ 46.129245][ T36] audit: type=1326 audit(1761954423.519:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1456 comm="syz.2.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833bf8efc9 code=0x7ffc0000 [ 46.152591][ T36] audit: type=1326 audit(1761954423.519:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1456 comm="syz.2.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f833bf8efc9 code=0x7ffc0000 [ 46.175968][ T36] audit: type=1326 audit(1761954423.519:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1456 comm="syz.2.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833bf8efc9 code=0x7ffc0000 [ 46.199475][ T36] audit: type=1326 audit(1761954423.519:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1456 comm="syz.2.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f833bf8efc9 code=0x7ffc0000 [ 46.222692][ T36] audit: type=1326 audit(1761954423.519:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1456 comm="syz.2.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833bf8efc9 code=0x7ffc0000 [ 46.245987][ T36] audit: type=1326 audit(1761954423.519:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1456 comm="syz.2.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f833bf8efc9 code=0x7ffc0000 [ 46.269230][ T36] audit: type=1326 audit(1761954423.519:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1456 comm="syz.2.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833bf8efc9 code=0x7ffc0000 [ 46.586234][ T1476] rust_binder: 149: no such ref 2 [ 46.591360][ T1476] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:149 [ 46.591880][ T1477] rust_binder: 149: no such ref 2 [ 46.606604][ T1477] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:149 [ 46.683173][ T1483] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.872358][ T1490] rust_binder: 223: no such ref 0 [ 47.023862][ T1511] raw_sendmsg: syz.2.387 forgot to set AF_INET. Fix it! [ 47.104810][ T1529] fuse: Unknown parameter 'Ge [ 47.104810][ T1529] 8o6]9lCMV!-iny9֥nܹ00000000000000000005' [ 47.142131][ T1534] binder: Unknown parameter 'fd' [ 47.147263][ T1534] binder: Unknown parameter 'fd' [ 47.152615][ T1534] binder: Unknown parameter 'fd' [ 47.157706][ T1534] binder: Unknown parameter 'fd' [ 47.163864][ T1534] binder: Unknown parameter 'fd' [ 47.173317][ T1534] binder: Unknown parameter 'fd' [ 47.178411][ T1534] binder: Unknown parameter 'fd' [ 47.183663][ T1534] binder: Unknown parameter 'fd' [ 47.188718][ T1534] binder: Unknown parameter 'fd' [ 47.193976][ T1534] binder: Unknown parameter 'fd' [ 47.199035][ T1534] binder: Unknown parameter 'fd' [ 47.205020][ T1534] binder: Unknown parameter 'fd' [ 47.210231][ T1534] binder: Unknown parameter 'fd' [ 47.215323][ T1534] binder: Unknown parameter 'fd' [ 47.220572][ T1534] binder: Unknown parameter 'fd' [ 47.225666][ T1534] binder: Unknown parameter 'fd' [ 47.230914][ T1534] binder: Unknown parameter 'fd' [ 47.236012][ T1534] binder: Unknown parameter 'fd' [ 47.242151][ T1534] binder: Unknown parameter 'fd' [ 47.251263][ T1534] binder: Unknown parameter 'fd' [ 47.256345][ T1534] binder: Unknown parameter 'fd' [ 47.261656][ T1534] binder: Unknown parameter 'fd' [ 47.266675][ T1534] binder: Unknown parameter 'fd' [ 47.271714][ T1534] binder: Unknown parameter 'fd' [ 47.276782][ T1534] binder: Unknown parameter 'fd' [ 47.281818][ T1534] binder: Unknown parameter 'fd' [ 47.286876][ T1534] binder: Unknown parameter 'fd' [ 47.291897][ T1534] binder: Unknown parameter 'fd' [ 47.296898][ T1534] binder: Unknown parameter 'fd' [ 47.301905][ T1534] binder: Unknown parameter 'fd' [ 47.306872][ T1534] binder: Unknown parameter 'fd' [ 47.311983][ T1534] binder: Unknown parameter 'fd' [ 47.316990][ T1534] binder: Unknown parameter 'fd' [ 47.322032][ T1534] binder: Unknown parameter 'fd' [ 47.327074][ T1534] binder: Unknown parameter 'fd' [ 47.339531][ T1534] binder: Unknown parameter 'fd' [ 47.344523][ T1534] binder: Unknown parameter 'fd' [ 47.359544][ T1534] binder: Unknown parameter 'fd' [ 47.364523][ T1534] binder: Unknown parameter 'fd' [ 47.369610][ T1534] binder: Unknown parameter 'fd' [ 47.374586][ T1534] binder: Unknown parameter 'fd' [ 47.389555][ T1534] binder: Unknown parameter 'fd' [ 47.394549][ T1534] binder: Unknown parameter 'fd' [ 47.409561][ T1534] binder: Unknown parameter 'fd' [ 47.414544][ T1534] binder: Unknown parameter 'fd' [ 47.425306][ T1534] binder: Unknown parameter 'fd' [ 47.430372][ T1534] binder: Unknown parameter 'fd' [ 47.435378][ T1534] binder: Unknown parameter 'fd' [ 47.440410][ T1534] binder: Unknown parameter 'fd' [ 47.445403][ T1534] binder: Unknown parameter 'fd' [ 47.455245][ T1534] binder: Unknown parameter 'fd' [ 47.461473][ T1534] binder: Unknown parameter 'fd' [ 47.466568][ T1534] binder: Unknown parameter 'fd' [ 47.471849][ T1534] binder: Unknown parameter 'fd' [ 47.477150][ T1534] binder: Unknown parameter 'fd' [ 47.482472][ T1534] binder: Unknown parameter 'fd' [ 47.487187][ T1541] devpts: called with bogus options [ 47.487542][ T1534] binder: Unknown parameter 'fd' [ 47.497887][ T1534] binder: Unknown parameter 'fd' [ 47.506545][ T1534] binder: Unknown parameter 'fd' [ 47.512046][ T1534] binder: Unknown parameter 'fd' [ 47.520770][ T1534] binder: Unknown parameter 'fd' [ 47.529366][ T1534] binder: Unknown parameter 'fd' [ 47.535388][ T1534] binder: Unknown parameter 'fd' [ 47.561063][ T1550] netlink: 'syz.2.399': attribute type 27 has an invalid length. [ 47.569360][ T1550] fuseblk: Bad value for 'fd' [ 47.575641][ T1553] netlink: 'syz.2.399': attribute type 27 has an invalid length. [ 47.595265][ T1543] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.595716][ T1543] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 47.606150][ T1543] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 47.614238][ T1543] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:325 [ 47.678345][ T1567] netlink: 188 bytes leftover after parsing attributes in process `syz.1.405'. [ 47.746843][ T1581] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.747172][ T1581] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 47.753706][ T1581] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 47.761878][ T1581] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:340 [ 47.879419][ T1593] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 4294967293 [ 47.897255][ T1593] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:349 [ 47.949897][ T1602] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.959528][ T45] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 47.980434][ T1604] rust_binder: Error while translating object. [ 47.980471][ T1604] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 47.980628][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.986695][ T1604] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:243 [ 48.002604][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.009935][ T1606] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 48.011923][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.018304][ T1606] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 48.026268][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.032620][ T1606] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:358 [ 48.042132][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.057446][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.063882][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.070314][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.076714][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.083136][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.089975][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.096376][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.102816][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.109228][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.115657][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.122077][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.128470][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.134911][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.140911][ T45] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 48.141505][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.147718][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 48.147746][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 48.147765][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 48.147797][ T45] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 48.162657][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.166046][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.186617][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.201879][ T45] usb 2-1: config 0 descriptor?? [ 48.211253][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.234222][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.240732][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.247156][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.253606][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.260057][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.266477][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.272919][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.279338][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.285784][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.292235][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.298654][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.305094][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.311540][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.317959][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.324399][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.330834][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.337264][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.343718][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.350160][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.356581][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.363044][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.369511][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.375925][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.382383][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.388801][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.395241][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.401767][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.408185][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.414651][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.421099][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.427525][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.433980][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.440421][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.446827][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.453382][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.459823][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.466246][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.472706][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.479118][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.485576][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.492090][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.498623][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.505108][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.522523][ T1611] rust_binder: Error while translating object. [ 48.529049][ T1611] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 48.535284][ T1611] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:246 [ 48.554572][ T1613] exFAT-fs (rnullb0): invalid boot record signature [ 48.570673][ T1613] exFAT-fs (rnullb0): failed to read boot sector [ 48.577003][ T1613] exFAT-fs (rnullb0): failed to recognize exfat type [ 48.617059][ T45] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 48.624614][ T45] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 48.632068][ T45] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 48.639483][ T45] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 48.646848][ T45] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 48.654596][ T45] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 48.664242][ T45] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 48.792765][ T1623] rust_binder: Error while translating object. [ 48.792788][ T1623] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 48.799100][ T1623] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:361 [ 48.880931][ T539] usb 2-1: USB disconnect, device number 16 [ 48.969519][ T335] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 49.129516][ T335] usb 1-1: Using ep0 maxpacket: 32 [ 49.136185][ T1618] netlink: 'syz.0.424': attribute type 1 has an invalid length. [ 49.143931][ T1618] netlink: 'syz.0.424': attribute type 2 has an invalid length. [ 49.393332][ T1632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.429'. [ 49.403752][ T1632] rust_binder: inc_ref_done called when no active inc_refs [ 49.403787][ T1632] rust_binder: Failed to allocate buffer. len:1168, is_oneway:false [ 49.849509][ T45] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 49.889505][ T539] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 50.010559][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.021613][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.031484][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 50.044466][ T45] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 50.051834][ T539] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 50.053583][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.068158][ T539] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.073028][ T45] usb 2-1: config 0 descriptor?? [ 50.081592][ T539] usb 4-1: config 0 descriptor?? [ 50.294187][ T539] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 50.304778][ T539] asix 4-1:0.0: probe with driver asix failed with error -71 [ 50.315500][ T539] usb 4-1: USB disconnect, device number 11 [ 50.400045][ T1697] netlink: 'syz.3.454': attribute type 6 has an invalid length. [ 50.492444][ T45] usbhid 2-1:0.0: can't add hid device: -71 [ 50.498619][ T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 50.509880][ T45] usb 2-1: USB disconnect, device number 17 [ 50.545098][ T1706] rust_binder: Write failure EFAULT in pid:186 [ 50.556405][ T1708] netlink: 'syz.1.458': attribute type 22 has an invalid length. [ 50.593037][ T1695] overlay: ./file1 is not a directory [ 50.739539][ T539] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 50.889493][ T539] usb 4-1: Using ep0 maxpacket: 16 [ 50.889499][ T45] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 50.903353][ T539] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.914270][ T539] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.924048][ T539] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 50.936874][ T539] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 50.945940][ T539] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.954673][ T539] usb 4-1: config 0 descriptor?? [ 51.050791][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.061857][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.071806][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 51.084861][ T45] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 51.093992][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.106682][ T45] usb 2-1: config 0 descriptor?? [ 51.315578][ T1710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.324186][ T1710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.363468][ T539] microsoft 0003:045E:07DA.0009: No inputs registered, leaving [ 51.372761][ T539] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 51.384377][ T539] microsoft 0003:045E:07DA.0009: no inputs found [ 51.390955][ T539] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway [ 51.565728][ T1701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.574290][ T1701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.583437][ T539] usb 4-1: USB disconnect, device number 12 [ 51.687135][ T335] usb 1-1: unable to get BOS descriptor or descriptor too short [ 51.712935][ T335] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 51.729505][ T335] usb 1-1: can't read configurations, error -71 [ 51.736334][ T45] usbhid 2-1:0.0: can't add hid device: -71 [ 51.746514][ T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 51.761145][ T45] usb 2-1: USB disconnect, device number 18 [ 51.900467][ T1724] rust_binder: Write failure EFAULT in pid:261 [ 51.900869][ T1724] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:261 [ 51.909923][ T1724] input: syz1 as /devices/virtual/input/input13 [ 51.944500][ T1726] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:263 [ 51.968788][ T1733] rust_binder: Got transaction with invalid offset. [ 51.977962][ T1733] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 51.984751][ T1733] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:270 [ 52.084298][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 52.084316][ T36] audit: type=1400 audit(1761954429.569:410): avc: denied { read } for pid=1737 comm="syz.0.470" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 52.112440][ T1738] binder: Unknown parameter 'defcontextK C}yG} ̑kN4T 01777777777777777777777' [ 52.122538][ T36] audit: type=1400 audit(1761954429.569:411): avc: denied { open } for pid=1737 comm="syz.0.470" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 52.198044][ T36] audit: type=1400 audit(1761954429.679:412): avc: denied { ioctl } for pid=1745 comm="syz.3.473" path="socket:[11671]" dev="sockfs" ino=11671 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 52.286057][ T36] audit: type=1400 audit(1761954429.769:413): avc: denied { read } for pid=1761 comm="syz.1.478" name="usbmon7" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 52.309363][ T36] audit: type=1400 audit(1761954429.769:414): avc: denied { open } for pid=1761 comm="syz.1.478" path="/dev/usbmon7" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 52.333301][ T36] audit: type=1400 audit(1761954429.769:415): avc: denied { ioctl } for pid=1761 comm="syz.1.478" path="/dev/usbmon7" dev="devtmpfs" ino=111 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 52.479497][ T45] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 52.555678][ T1793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.556012][ T1793] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:298 [ 52.609549][ T539] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 52.628529][ T1798] cgroup2: Unknown parameter 'faordynds|Ph0' [ 52.635541][ T45] usb 4-1: device descriptor read/64, error -71 [ 52.783119][ T36] audit: type=1326 audit(1761954430.269:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1799 comm="syz.0.488" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd39278efc9 code=0x0 [ 52.789491][ T539] usb 2-1: Using ep0 maxpacket: 16 [ 52.812066][ T539] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 52.821948][ T539] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 52.831629][ T539] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 52.842053][ T539] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 52.851145][ T539] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 52.859151][ T539] usb 2-1: SerialNumber: syz [ 52.865784][ T1769] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 52.889583][ T45] usb 4-1: device descriptor read/64, error -71 [ 53.091438][ T539] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12 [ 53.104244][ T539] usb 2-1: USB disconnect, device number 19 [ 53.130036][ T45] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 53.188996][ T36] audit: type=1400 audit(1761954430.669:417): avc: denied { write } for pid=1809 comm="syz.1.491" name="usbmon7" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 53.218255][ T1816] syz.1.493 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 53.231327][ T1816] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.269538][ T45] usb 4-1: device descriptor read/64, error -71 [ 53.284860][ T1817] rust_binder: Failed to allocate buffer. len:4200, is_oneway:false [ 53.284879][ T1817] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 53.294010][ T1817] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:216 [ 53.392998][ T1819] overlayfs: failed to resolve './bus': -2 [ 53.488684][ T36] audit: type=1400 audit(1761954430.969:418): avc: denied { ioctl } for pid=1823 comm="syz.2.496" path="socket:[12100]" dev="sockfs" ino=12100 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.519529][ T45] usb 4-1: device descriptor read/64, error -71 [ 53.633179][ T45] usb usb4-port1: attempt power cycle [ 53.891127][ T1021] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 53.984080][ T45] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 54.005759][ T45] usb 4-1: device descriptor read/8, error -71 [ 54.057350][ T1021] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 54.067543][ T1021] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 54.080833][ T1021] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 54.089923][ T1021] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.100238][ T1021] usb 1-1: config 0 descriptor?? [ 54.106062][ T1021] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 54.139874][ T45] usb 4-1: device descriptor read/8, error -71 [ 54.396927][ T45] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 54.418684][ T45] usb 4-1: device descriptor read/8, error -71 [ 54.553422][ T45] usb 4-1: device descriptor read/8, error -71 [ 54.665224][ T45] usb usb4-port1: unable to enumerate USB device [ 54.895076][ T36] audit: type=1400 audit(1761954432.337:419): avc: denied { map } for pid=1879 comm="syz.2.512" path="socket:[12443]" dev="sockfs" ino=12443 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 54.932178][ T1885] 9pnet_fd: Insufficient options for proto=fd [ 55.038651][ T45] usb 1-1: USB disconnect, device number 14 [ 55.119795][ T1910] proc: Unknown parameter 'g8id' [ 55.134809][ T1912] binder: Unknown parameter 'fscontext?}' [ 55.151025][ T1914] rust_binder: Read failure Err(EAGAIN) in pid:333 [ 55.189220][ T1922] overlayfs: missing 'lowerdir' [ 55.272752][ T1924] netlink: 'syz.1.531': attribute type 4 has an invalid length. [ 55.280551][ T1925] netlink: 'syz.1.531': attribute type 4 has an invalid length. [ 55.293797][ T1925] tmpfs: Bad value for 'huge' [ 55.320221][ T1930] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.320470][ T1930] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 55.327029][ T1930] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 55.335079][ T1930] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:394 [ 55.346495][ T1925] netlink: 84 bytes leftover after parsing attributes in process `syz.1.531'. [ 55.365237][ T1925] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1925 comm=syz.1.531 [ 55.379647][ T1934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.382013][ T1934] rust_binder: Failed to allocate buffer. len:1152, is_oneway:true [ 55.388654][ T1934] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 55.396713][ T1934] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:398 [ 55.406223][ T1934] rust_binder: Write failure EFAULT in pid:398 [ 55.481406][ T1939] overlayfs: workdir and upperdir must be separate subtrees [ 55.510094][ T45] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 55.647179][ T1979] exFAT-fs (rnullb0): invalid boot record signature [ 55.653941][ T1979] exFAT-fs (rnullb0): failed to read boot sector [ 55.660335][ T1979] exFAT-fs (rnullb0): failed to recognize exfat type [ 55.684803][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 55.691086][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 55.697786][ T45] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 55.706950][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.715597][ T45] usb 1-1: config 0 descriptor?? [ 55.915959][ T1991] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 55.930746][ T1922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.939278][ T1922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.240782][ T45] usbhid 1-1:0.0: can't add hid device: -71 [ 56.246790][ T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 56.255446][ T45] usb 1-1: USB disconnect, device number 15 [ 56.561637][ T2017] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:251 [ 56.837537][ T2033] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 56.877053][ T1021] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 56.928405][ T539] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 57.041301][ T1021] usb 2-1: Using ep0 maxpacket: 8 [ 57.047743][ T1021] usb 2-1: unable to get BOS descriptor or descriptor too short [ 57.060438][ T1021] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice=19.01 [ 57.069674][ T1021] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.076776][ T2040] overlayfs: failed to resolve './cgroup': -2 [ 57.077765][ T1021] usb 2-1: Product: syz [ 57.087937][ T1021] usb 2-1: Manufacturer: syz [ 57.092633][ T1021] usb 2-1: SerialNumber: syz [ 57.098086][ T539] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.109030][ T539] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.119295][ T539] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 57.132322][ T539] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 57.141483][ T539] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.150103][ T539] usb 4-1: config 0 descriptor?? [ 57.226079][ T45] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 57.329272][ T1021] usb 2-1: USB disconnect, device number 20 [ 57.359479][ T45] usb 1-1: device descriptor read/64, error -71 [ 57.573093][ T539] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 57.580585][ T539] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 57.587993][ T539] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 57.595548][ T539] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 57.603026][ T539] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 57.610456][ T539] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 57.616085][ T45] usb 1-1: device descriptor read/64, error -71 [ 57.618041][ T539] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 57.631876][ T539] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 57.639572][ T539] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 57.647017][ T539] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 57.654451][ T539] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 57.654461][ T2046] sit0: entered promiscuous mode [ 57.658022][ T2046] netlink: 'syz.2.573': attribute type 1 has an invalid length. [ 57.661939][ T539] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 57.677515][ T2046] netlink: 1 bytes leftover after parsing attributes in process `syz.2.573'. [ 57.681913][ T539] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 57.701614][ T539] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 57.709074][ T539] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 57.716659][ T539] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 57.729731][ T539] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 57.804658][ T2069] fuseblk: Bad value for 'fd' [ 57.831489][ T539] usb 4-1: USB disconnect, device number 17 [ 57.875160][ T2079] mmap: syz.1.584 (2079) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 57.892791][ T45] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 57.905123][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 57.905134][ T36] audit: type=1400 audit(1761954435.266:425): avc: denied { mount } for pid=2087 comm="syz.2.587" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 57.933011][ T2089] veth1_macvtap: left promiscuous mode [ 57.938694][ T2089] macsec0: entered promiscuous mode [ 57.943989][ T2089] macsec0: entered allmulticast mode [ 57.954559][ T2088] veth1_macvtap: entered promiscuous mode [ 57.963531][ T2088] veth1_macvtap: entered allmulticast mode [ 57.969691][ T2088] macsec0: left promiscuous mode [ 57.974693][ T2088] macsec0: left allmulticast mode [ 57.979876][ T2088] veth1_macvtap: left allmulticast mode [ 57.986732][ T2088] binder: Unknown parameter 'subj_type' [ 58.025998][ T45] usb 1-1: device descriptor read/64, error -71 [ 58.128468][ T670] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 58.271925][ T45] usb 1-1: device descriptor read/64, error -71 [ 58.282210][ T670] usb 2-1: Using ep0 maxpacket: 16 [ 58.288377][ T670] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 58.296585][ T670] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 58.306690][ T670] usb 2-1: config 0 has no interface number 0 [ 58.314025][ T670] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 58.323061][ T670] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.331102][ T670] usb 2-1: Product: syz [ 58.335272][ T670] usb 2-1: Manufacturer: syz [ 58.339842][ T670] usb 2-1: SerialNumber: syz [ 58.344998][ T670] usb 2-1: config 0 descriptor?? [ 58.350782][ T670] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 58.357219][ T670] usb 2-1: No valid video chain found. [ 58.384776][ T45] usb usb1-port1: attempt power cycle [ 58.559008][ T670] usb 2-1: USB disconnect, device number 21 [ 58.732950][ T45] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 58.754400][ T45] usb 1-1: device descriptor read/8, error -71 [ 58.887495][ T45] usb 1-1: device descriptor read/8, error -71 [ 59.088417][ T36] audit: type=1326 audit(1761954436.418:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2113 comm="syz.1.599" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3cabf8efc9 code=0x0 [ 59.131989][ T45] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 59.153583][ T45] usb 1-1: device descriptor read/8, error -71 [ 59.286690][ T45] usb 1-1: device descriptor read/8, error -71 [ 59.294528][ T2116] netlink: 'syz.3.600': attribute type 4 has an invalid length. [ 59.302236][ T2116] netlink: 17 bytes leftover after parsing attributes in process `syz.3.600'. [ 59.331891][ T36] audit: type=1400 audit(1761954436.653:427): avc: denied { getopt } for pid=2120 comm="syz.2.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.352236][ T2125] can0: slcan on ptm0. [ 59.355750][ T36] audit: type=1400 audit(1761954436.682:428): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 59.381087][ T36] audit: type=1400 audit(1761954436.682:429): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.414272][ T45] usb usb1-port1: unable to enumerate USB device [ 59.423999][ T36] audit: type=1400 audit(1761954436.682:430): avc: denied { read } for pid=149 comm="dhcpcd" name="n15" dev="tmpfs" ino=2566 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.445867][ T36] audit: type=1400 audit(1761954436.682:431): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2566 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.477730][ T36] audit: type=1400 audit(1761954436.682:432): avc: denied { getattr } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2566 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.507470][ T36] audit: type=1400 audit(1761954436.711:433): avc: denied { read } for pid=2132 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.531322][ T36] audit: type=1400 audit(1761954436.711:434): avc: denied { open } for pid=2132 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.633347][ T670] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 59.786663][ T670] usb 4-1: Using ep0 maxpacket: 32 [ 59.793122][ T670] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 59.803240][ T670] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 59.813335][ T670] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice=f0.78 [ 59.822427][ T670] usb 4-1: New USB device strings: Mfr=164, Product=131, SerialNumber=0 [ 59.830786][ T670] usb 4-1: Product: syz [ 59.834980][ T670] usb 4-1: Manufacturer: syz [ 59.840131][ T670] usb 4-1: config 0 descriptor?? [ 60.085050][ T2162] capability: warning: `syz.0.609' uses 32-bit capabilities (legacy support in use) [ 60.195351][ T539] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 60.349722][ T539] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.360723][ T539] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.370646][ T539] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 60.383808][ T539] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 60.393006][ T539] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.416525][ T539] usb 2-1: config 0 descriptor?? [ 60.417190][ T670] usb 4-1: USB disconnect, device number 18 [ 60.481483][ T2034] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 60.482549][ T2180] can0 (unregistered): slcan off ptm0. [ 60.644889][ T2034] usb 1-1: Using ep0 maxpacket: 16 [ 60.653020][ T2034] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 60.663420][ T2034] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 60.676117][ T2034] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 60.685298][ T2034] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.693596][ T2034] usb 1-1: Product: syz [ 60.698022][ T2034] usb 1-1: Manufacturer: syz [ 60.702693][ T2034] usb 1-1: SerialNumber: syz [ 60.838431][ T539] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 60.845947][ T539] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 60.853617][ T539] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 60.861054][ T539] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 60.868450][ T539] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 60.875889][ T539] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 60.883327][ T539] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 60.890754][ T539] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 60.898160][ T539] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 60.905580][ T539] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 60.912996][ T539] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 60.921221][ T539] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 60.929483][ T539] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 60.936985][ T539] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 60.944412][ T539] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 60.951987][ T539] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 60.963072][ T539] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 61.056334][ T2225] netlink: 'syz.2.618': attribute type 63 has an invalid length. [ 61.064206][ T2225] netlink: 5 bytes leftover after parsing attributes in process `syz.2.618'. [ 61.113571][ T670] usb 2-1: USB disconnect, device number 22 [ 61.173939][ T2235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.621'. [ 61.337941][ T2165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.346453][ T2165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.355074][ T2165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.363661][ T2165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.374922][ T2165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.383674][ T2165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.392914][ T2034] usb 1-1: 0:2 : does not exist [ 61.653764][ T2255] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 61.726535][ T2259] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.726657][ T2259] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 61.751762][ T2261] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.752226][ T2261] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 61.758739][ T2261] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 61.766799][ T2261] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:275 [ 61.777460][ T2034] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 61.952961][ T2034] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 61.962225][ T2034] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.976522][ T2034] usb 4-1: Product: syz [ 61.980714][ T2034] usb 4-1: Manufacturer: syz [ 61.986161][ T2274] overlayfs: conflicting options: userxattr,verity=require [ 61.994197][ T2034] usb 4-1: SerialNumber: syz [ 62.128316][ T2298] rust_binder: 297: no such ref 0 [ 62.133620][ T2298] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 62.141019][ T2298] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 62.163226][ T2300] syz.1.644 uses obsolete (PF_INET,SOCK_PACKET) [ 62.170563][ T2300] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.170892][ T2300] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 62.177372][ T2300] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 62.185495][ T2300] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:299 [ 62.206715][ T2251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.224541][ T2251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.232672][ T2251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.243228][ T2304] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.243383][ T2251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.257854][ T2304] rust_binder: Failed to allocate buffer. len:1152, is_oneway:true [ 62.257890][ T2304] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 62.258772][ T2251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.265914][ T2304] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:303 [ 62.276257][ T2251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.292725][ T2305] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.300853][ T2251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.316828][ T2251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.324986][ T2251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.333855][ T2251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.385207][ T2034] rtl8150 4-1:1.0: couldn't reset the device [ 62.391325][ T2034] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 62.401549][ T2034] usb 4-1: USB disconnect, device number 19 [ 62.694510][ T2034] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 62.848299][ T2034] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 62.858123][ T2034] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 62.867887][ T2034] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 62.877521][ T2034] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 62.888697][ T2034] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 62.897741][ T2034] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.905745][ T2034] usb 4-1: Product: syz [ 62.909937][ T2034] usb 4-1: Manufacturer: syz [ 62.914516][ T2034] usb 4-1: SerialNumber: syz [ 62.919697][ T2034] usb 4-1: config 0 descriptor?? [ 62.925345][ T2034] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 63.164530][ T2034] ums-isd200 4-1:0.0: probe with driver ums-isd200 failed with error -22 [ 63.179971][ T45] usb 1-1: USB disconnect, device number 20 [ 63.193150][ T2324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'. [ 63.278984][ T2329] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.279794][ T2329] rust_binder: Failed to allocate buffer. len:5168, is_oneway:false [ 63.286780][ T2329] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 63.287555][ T2331] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 63.294992][ T2329] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:317 [ 63.304326][ T2331] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:360 [ 63.333429][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 63.333446][ T36] audit: type=1400 audit(1761954440.574:448): avc: denied { listen } for pid=2330 comm="syz.0.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.371538][ T36] audit: type=1400 audit(1761954440.613:449): avc: denied { read } for pid=2334 comm="syz.0.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 63.431783][ T36] audit: type=1400 audit(1761954440.682:450): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 63.456845][ T2337] binder: Unknown parameter '0xffffffffffffffff' [ 63.492628][ T2339] loop5: detected capacity change from 0 to 7 [ 63.580097][ T670] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 63.580628][ T2339] Invalid logical block size (1) [ 63.606230][ T2344] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:371 [ 63.606509][ T2344] rust_binder: 2344 RLIMIT_NICE not set [ 63.622895][ T2344] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 63.628482][ T2344] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 63.636790][ T2344] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:371 [ 63.707869][ T2345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.725550][ T2345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.742901][ T670] usb 2-1: Using ep0 maxpacket: 32 [ 63.749116][ T670] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 63.757620][ T670] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 63.766276][ T670] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 63.775346][ T670] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 63.785034][ T670] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 63.794687][ T670] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 63.807662][ T670] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 63.816706][ T670] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.825229][ T670] usb 2-1: config 0 descriptor?? [ 64.035282][ T670] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 64.047607][ T670] usb 2-1: USB disconnect, device number 23 [ 64.054130][ T670] usblp0: removed [ 64.098762][ T45] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 64.251257][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 64.259208][ T45] usb 1-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 64.268329][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.276395][ T45] usb 1-1: Product: syz [ 64.280543][ T45] usb 1-1: Manufacturer: syz [ 64.285151][ T45] usb 1-1: SerialNumber: syz [ 64.290282][ T45] usb 1-1: config 0 descriptor?? [ 64.485106][ T670] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 64.500174][ T45] usb 1-1: USB disconnect, device number 21 [ 64.637604][ T670] usb 2-1: Using ep0 maxpacket: 32 [ 64.643885][ T670] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 64.652307][ T670] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 64.660933][ T670] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 64.669968][ T670] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 64.679791][ T670] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 64.689457][ T670] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 64.702419][ T670] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 64.711460][ T670] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.719987][ T670] usb 2-1: config 0 descriptor?? [ 64.929425][ T670] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 65.068380][ T2348] rust_binder: Read failure Err(EAGAIN) in pid:373 [ 65.133263][ T2356] SELinux: policydb magic number 0xf974ff8c does not match expected magic number 0xf97cff8c [ 65.133357][ T36] audit: type=1400 audit(1761954442.344:451): avc: denied { load_policy } for pid=2355 comm="syz.0.663" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 65.140022][ T2356] sel_write_load: 55 callbacks suppressed [ 65.140034][ T2356] SELinux: failed to load policy [ 65.184506][ T2356] rust_binder: Error while translating object. [ 65.184560][ T2356] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 65.190957][ T2356] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:379 [ 65.196476][ T2367] netlink: 5 bytes leftover after parsing attributes in process `syz.2.667'. [ 65.218881][ T2371] rust_binder: Write failure EINVAL in pid:381 [ 65.220593][ T2372] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.225816][ T2373] rust_binder: Write failure EINVAL in pid:381 [ 65.277301][ T2390] netlink: 20 bytes leftover after parsing attributes in process `syz.2.675'. [ 65.302297][ T2393] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.466351][ T2034] usb 4-1: USB disconnect, device number 20 [ 65.496193][ T539] usb 2-1: USB disconnect, device number 24 [ 65.503472][ T539] usblp0: removed [ 65.624950][ T36] audit: type=1400 audit(1761954442.836:452): avc: denied { bind } for pid=2436 comm="syz.3.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 65.677327][ T36] audit: type=1400 audit(1761954442.885:453): avc: denied { ioctl } for pid=2442 comm="syz.3.692" path="socket:[15638]" dev="sockfs" ino=15638 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 65.773283][ T2448] binder: Bad value for 'stats' [ 66.028964][ T670] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 66.070327][ T2456] futex_wake_op: syz.1.697 tries to shift op by 144; fix this program [ 66.079503][ T2456] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.102142][ T2459] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:326 [ 66.102691][ T36] audit: type=1326 audit(1761954443.309:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2458 comm="syz.1.698" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3cabf8efc9 code=0x0 [ 66.160771][ T670] usb 4-1: device descriptor read/64, error -71 [ 66.404297][ T670] usb 4-1: device descriptor read/64, error -71 [ 66.647819][ T670] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 66.686827][ T2471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.702'. [ 66.705028][ T36] audit: type=1400 audit(1761954443.900:455): avc: denied { read } for pid=2472 comm="syz.2.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.779692][ T670] usb 4-1: device descriptor read/64, error -71 [ 67.033164][ T670] usb 4-1: device descriptor read/64, error -71 [ 67.144718][ T670] usb usb4-port1: attempt power cycle [ 67.284281][ T36] audit: type=1326 audit(1761954444.463:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2503 comm="syz.2.716" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f833bf8efc9 code=0x0 [ 67.304849][ T2496] rust_binder: Error in use_page_slow: ESRCH [ 67.306956][ T2496] rust_binder: use_range failure ESRCH [ 67.312956][ T2496] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 67.318598][ T2496] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 67.326669][ T2496] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:406 [ 67.337234][ T335] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 67.489313][ T670] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 67.499565][ T335] usb 2-1: Using ep0 maxpacket: 16 [ 67.507268][ T335] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 67.516412][ T335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.524599][ T335] usb 2-1: Product: syz [ 67.528836][ T335] usb 2-1: Manufacturer: syz [ 67.533466][ T335] usb 2-1: SerialNumber: syz [ 67.538416][ T670] usb 4-1: device descriptor read/8, error -71 [ 67.547377][ T335] r8152-cfgselector 2-1: Unknown version 0x0000 [ 67.553949][ T335] r8152-cfgselector 2-1: config 0 descriptor?? [ 67.672912][ T670] usb 4-1: device descriptor read/8, error -71 [ 67.914979][ T670] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 67.936192][ T670] usb 4-1: device descriptor read/8, error -71 [ 68.039255][ T2484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.047873][ T2484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.058741][ T2034] r8152-cfgselector 2-1: USB disconnect, device number 25 [ 68.068840][ T670] usb 4-1: device descriptor read/8, error -71 [ 68.080055][ T2510] netlink: 16 bytes leftover after parsing attributes in process `syz.1.717'. [ 68.178490][ T670] usb usb4-port1: unable to enumerate USB device [ 68.240812][ T36] audit: type=1400 audit(1761954445.420:457): avc: denied { remount } for pid=2513 comm="syz.1.718" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 68.857811][ T2523] __vm_enough_memory: pid: 2523, comm: syz.3.721, bytes: 18014402804453376 not enough memory for the allocation [ 69.241496][ T539] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 69.393233][ T539] usb 4-1: Using ep0 maxpacket: 8 [ 69.399388][ T539] usb 4-1: config 5 has an invalid interface number: 128 but max is 2 [ 69.407642][ T539] usb 4-1: config 5 has an invalid interface number: 25 but max is 2 [ 69.415786][ T539] usb 4-1: config 5 has an invalid interface number: 228 but max is 2 [ 69.423974][ T539] usb 4-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 69.432665][ T539] usb 4-1: config 5 has no interface number 0 [ 69.438745][ T539] usb 4-1: config 5 has no interface number 1 [ 69.444834][ T539] usb 4-1: config 5 has no interface number 2 [ 69.451024][ T539] usb 4-1: config 5 interface 25 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 69.462267][ T539] usb 4-1: config 5 interface 25 altsetting 4 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 69.473177][ T539] usb 4-1: config 5 interface 25 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 69.483971][ T539] usb 4-1: config 5 interface 228 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 69.494929][ T539] usb 4-1: config 5 interface 228 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 69.505890][ T539] usb 4-1: config 5 interface 228 altsetting 10 has a duplicate endpoint with address 0x1, skipping [ 69.516682][ T539] usb 4-1: config 5 interface 228 altsetting 10 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 69.527637][ T539] usb 4-1: config 5 interface 228 altsetting 10 has a duplicate endpoint with address 0xE, skipping [ 69.538424][ T539] usb 4-1: config 5 interface 228 altsetting 10 has a duplicate endpoint with address 0x7, skipping [ 69.549226][ T539] usb 4-1: config 5 interface 228 altsetting 10 has a duplicate endpoint with address 0x4, skipping [ 69.560009][ T539] usb 4-1: config 5 interface 128 has no altsetting 0 [ 69.566797][ T539] usb 4-1: config 5 interface 25 has no altsetting 0 [ 69.573475][ T539] usb 4-1: config 5 interface 228 has no altsetting 0 [ 69.581847][ T539] usb 4-1: Dual-Role OTG device on HNP port [ 69.588068][ T539] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0195, bcdDevice=89.e5 [ 69.597236][ T539] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.605226][ T539] usb 4-1: Product: syz [ 69.609407][ T539] usb 4-1: Manufacturer: syz [ 69.613995][ T539] usb 4-1: SerialNumber: syz [ 69.822862][ T2529] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 69.847033][ T539] usb 4-1: USB disconnect, device number 25 [ 69.897999][ T2534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.724'. [ 69.908329][ T2534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=2534 comm=syz.3.724 [ 70.381941][ T36] audit: type=1400 audit(1761954447.525:458): avc: denied { ioctl } for pid=2539 comm="syz.0.727" path="/142/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.556235][ T36] audit: type=1400 audit(1761954447.693:459): avc: denied { create } for pid=2547 comm="syz.2.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 70.669291][ T2555] loop7: detected capacity change from 0 to 7 [ 70.675657][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 70.684910][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 70.693067][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 70.702240][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 70.710195][ T2555] loop7: unable to read partition table [ 70.715979][ T2555] loop_reread_partitions: partition scan of loop7 (ىCj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 70.724735][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 70.738626][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 70.746691][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 70.755875][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 70.763981][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 70.773377][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 70.782551][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 70.792854][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 70.802055][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 70.810159][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 70.812109][ T2560] rust_binder: Error while translating object. [ 70.819309][ T2560] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 70.819320][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 70.825681][ T2560] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:419 [ 71.132312][ T36] audit: type=1326 audit(1761954448.266:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2581 comm="syz.2.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833bf8efc9 code=0x7ffc0000 [ 71.161178][ T36] audit: type=1326 audit(1761954448.266:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2581 comm="syz.2.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833bf8efc9 code=0x7ffc0000 [ 71.174852][ T2584] netlink: 57 bytes leftover after parsing attributes in process `syz.0.742'. [ 71.184785][ T36] audit: type=1326 audit(1761954448.276:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2581 comm="syz.2.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833bf8efc9 code=0x7ffc0000 [ 71.216662][ T36] audit: type=1326 audit(1761954448.276:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2581 comm="syz.2.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833bf8efc9 code=0x7ffc0000 [ 71.240042][ T36] audit: type=1326 audit(1761954448.276:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2581 comm="syz.2.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f833bf8efc9 code=0x7ffc0000 [ 71.240447][ T2588] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:436 [ 71.263360][ T36] audit: type=1326 audit(1761954448.276:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2581 comm="syz.2.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833bf8efc9 code=0x7ffc0000 [ 71.295985][ T36] audit: type=1326 audit(1761954448.276:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2581 comm="syz.2.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833bf8efc9 code=0x7ffc0000 [ 71.319427][ T36] audit: type=1326 audit(1761954448.276:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2581 comm="syz.2.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833bf8efc9 code=0x7ffc0000 [ 71.803333][ T2608] netlink: 'syz.2.751': attribute type 1 has an invalid length. [ 71.840895][ T2614] netlink: 'syz.2.753': attribute type 1 has an invalid length. [ 71.848596][ T2614] netlink: 'syz.2.753': attribute type 2 has an invalid length. [ 72.079400][ T2637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.760'. [ 72.088312][ T2637] erspan0: default FDB implementation only supports local addresses [ 72.096906][ T2637] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=260 sclass=netlink_route_socket pid=2637 comm=syz.2.760 [ 72.371115][ T2642] rust_binder: Write failure EFAULT in pid:447 [ 72.653577][ T2648] rust_binder: Error while translating object. [ 72.659849][ T2648] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 72.666074][ T2648] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:453 [ 72.666885][ T2651] af_packet: tpacket_rcv: packet too big, clamped from 65532 to 3944. macoff=96 [ 72.697508][ T2651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.766'. [ 72.823537][ T2661] netlink: 'syz.0.770': attribute type 16 has an invalid length. [ 72.831365][ T2661] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.770'. [ 73.007190][ T2675] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI [ 73.019786][ T2675] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 73.028206][ T2675] CPU: 1 UID: 0 PID: 2675 Comm: syz.0.774 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 73.039654][ T2675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 73.049710][ T2675] RIP: 0010:iter_file_splice_write+0xace/0x11b0 [ 73.055956][ T2675] Code: 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 67 d6 e6 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 43 d6 e6 ff 4c 8b 1b 48 8b 3c 24 [ 73.075729][ T2675] RSP: 0018:ffffc9000e4d7820 EFLAGS: 00010202 [ 73.081804][ T2675] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff8881389f4c00 [ 73.089770][ T2675] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 7ffffffffffffffe [ 73.097842][ T2675] RBP: ffffc9000e4d7a40 R08: ffff8881f6f72240 R09: 1ffff1103edee448 [ 73.105807][ T2675] R10: 1ffff1103edee44b R11: 0000000000000fd8 R12: dffffc0000000000 [ 73.113786][ T2675] R13: 7ffffffffffffffe R14: ffff888117762838 R15: ffff888117762828 [ 73.113934][ T2678] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 73.121766][ T2675] FS: 00007fd3936786c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 73.121794][ T2675] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.121808][ T2675] CR2: 000000110c2a01b2 CR3: 0000000136866000 CR4: 00000000003526b0 [ 73.131363][ T2678] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:472 [ 73.140089][ T2675] Call Trace: [ 73.140105][ T2675] [ 73.140118][ T2675] ? __cfi_iter_file_splice_write+0x10/0x10 [ 73.140150][ T2675] ? __kmalloc_noprof+0x271/0x530 [ 73.140167][ T2675] ? security_capable+0xcf/0xf0 [ 73.186147][ T2675] ? __kasan_check_write+0x18/0x20 [ 73.191270][ T2675] ? __cfi_iter_file_splice_write+0x10/0x10 [ 73.197153][ T2675] direct_splice_actor+0x279/0x4b0 [ 73.202258][ T2675] splice_direct_to_actor+0x4fb/0xbc0 [ 73.207633][ T2675] ? __cfi_direct_splice_actor+0x10/0x10 [ 73.213256][ T2675] ? __cfi_splice_direct_to_actor+0x10/0x10 [ 73.219154][ T2675] do_splice_direct+0x182/0x270 [ 73.223998][ T2675] ? __cfi_do_splice_direct+0x10/0x10 [ 73.229353][ T2675] ? __cfi_direct_file_splice_eof+0x10/0x10 [ 73.235238][ T2675] ? security_file_permission+0x2e/0xc0 [ 73.240775][ T2675] ? rw_verify_area+0xac/0x230 [ 73.245524][ T2675] do_sendfile+0x5c8/0xfb0 [ 73.249923][ T2675] ? vfs_writev+0xcf0/0xcf0 [ 73.254418][ T2675] ? __se_sys_futex+0x28f/0x300 [ 73.259260][ T2675] __x64_sys_sendfile64+0x193/0x1f0 [ 73.264448][ T2675] ? __cfi___x64_sys_sendfile64+0x10/0x10 [ 73.270156][ T2675] ? switch_fpu_return+0x12/0x20 [ 73.275084][ T2675] x64_sys_call+0xa26/0x2ee0 [ 73.279675][ T2675] do_syscall_64+0x58/0xf0 [ 73.284098][ T2675] ? clear_bhb_loop+0x50/0xa0 [ 73.288782][ T2675] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 73.294673][ T2675] RIP: 0033:0x7fd39278efc9 [ 73.299093][ T2675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.318688][ T2675] RSP: 002b:00007fd393678038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 73.327094][ T2675] RAX: ffffffffffffffda RBX: 00007fd3929e6090 RCX: 00007fd39278efc9 [ 73.335058][ T2675] RDX: 0000000000000000 RSI: 000000000000000a RDI: 000000000000000a [ 73.343016][ T2675] RBP: 00007fd392811f91 R08: 0000000000000000 R09: 0000000000000000 [ 73.350978][ T2675] R10: 000000007a680000 R11: 0000000000000246 R12: 0000000000000000 [ 73.358934][ T2675] R13: 00007fd3929e6128 R14: 00007fd3929e6090 R15: 00007fff4cbf09f8 [ 73.366896][ T2675] [ 73.369913][ T2675] Modules linked in: [ 73.374053][ T2675] ---[ end trace 0000000000000000 ]--- [ 73.379620][ T2675] RIP: 0010:iter_file_splice_write+0xace/0x11b0 [ 73.386317][ T2675] Code: 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 67 d6 e6 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 43 d6 e6 ff 4c 8b 1b 48 8b 3c 24 [ 73.406146][ T2675] RSP: 0018:ffffc9000e4d7820 EFLAGS: 00010202 [ 73.412312][ T2675] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff8881389f4c00 [ 73.420390][ T2675] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 7ffffffffffffffe [ 73.428427][ T2675] RBP: ffffc9000e4d7a40 R08: ffff8881f6f72240 R09: 1ffff1103edee448 [ 73.436510][ T2675] R10: 1ffff1103edee44b R11: 0000000000000fd8 R12: dffffc0000000000 [ 73.444509][ T2675] R13: 7ffffffffffffffe R14: ffff888117762838 R15: ffff888117762828 [ 73.452528][ T2675] FS: 00007fd3936786c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 73.461498][ T2675] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.468112][ T2675] CR2: 000000110c2a01b2 CR3: 0000000136866000 CR4: 00000000003526b0 [ 73.476122][ T2675] Kernel panic - not syncing: Fatal exception [ 73.482505][ T2675] Kernel Offset: disabled [ 73.486822][ T2675] Rebooting in 86400 seconds..