last executing test programs: 51.636437809s ago: executing program 0 (id=143): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000700000/0x3000)=nil, 0x3000, 0x300000f, 0x10, 0xffffffffffffffff, 0x8000000) r2 = syz_io_uring_complete(r1) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x11', 0x2) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_usb_disconnect(r6) syz_usb_connect(0x4, 0x24, &(0x7f0000000100)=ANY=[], 0x0) ioctl$EVIOCRMFF(r6, 0xc0085504, &(0x7f0000000140)) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x3) r7 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="070000000000e4da63f1b184ca06dbeef624076bf6cefd00"]) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0xc0086202, &(0x7f0000000300)=0x1) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), 0x0) close_range(r3, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0xffffffffffffffff, 0x2b) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='\x01\b\x00\x00\x00\x00\x00\x00') ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x800, 0x66, 0x4, 0x10000, 0x2, 0x3, 0x7f, 0x3, 0x5, 0x5, 0x6, 0x7, 0x5, 0x22, 0x7fffffffffffffff, 0x4b], 0x8000000, 0x30880}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='projid_map\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6}]}) creat(0x0, 0x0) 50.899412991s ago: executing program 0 (id=146): ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd) r2 = syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r2, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 47.333934671s ago: executing program 0 (id=159): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) (async) ioctl$TCFLSH(r0, 0x400455c8, 0x0) (async) ioctl$TIOCVHANGUP(r0, 0x5437, 0x100000) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300060000000903000038000000fcffffff0e000000000020000005"], 0x38) (async) close(r2) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) (async) ioctl$TCXONC(r1, 0x40045436, 0x2) (async) r3 = geteuid() (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0c812bbd7000fcdbde251400000008000ecd6500090000000800eab8bdc000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000080) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x2c, r7, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000080) (async) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r7, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0) (async) recvmmsg(r8, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/167, 0xa7}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/4096, 0x1000}], 0x4}, 0xffffffff}], 0x1, 0x2100, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) (async) setreuid(r3, 0xee00) syz_usb_connect$uac1(0x3, 0xd8, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x3, 0x1, 0x4, 0x20, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x3}, [@output_terminal={0x9, 0x24, 0x3, 0xf4, 0x100, 0x5, 0x6, 0x1}, @selector_unit={0x7, 0x24, 0x5, 0x4, 0x8c, "824e"}, @selector_unit={0xb, 0x24, 0x5, 0x5, 0x1, "099755da19d8"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x2ff, 0x2, 0x10, 0xff, 0x0, 0xd}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x33, 0x3}, @as_header={0x7, 0x24, 0x1, 0x2, 0x3}, @as_header={0x7, 0x24, 0x1, 0x40, 0x3, 0x3}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2, 0x2, 0x83, 0x9, "ef29e2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x5, 0x80, 0xf, {0x7, 0x25, 0x1, 0x2, 0x2, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xb, 0x3, 0xd3, 0x9a, 'G'}, @as_header={0x7, 0x24, 0x1, 0x4, 0x2, 0x4}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x3ff, 0xe000, 0x5, "bdf75566347270"}]}, {{0x9, 0x5, 0x82, 0x9, 0x57f, 0x1, 0x8, 0x5, {0x7, 0x25, 0x1, 0x1, 0xa, 0x14}}}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x201, 0x9, 0xa3, 0x5, 0xff, 0x8}, 0x5, &(0x7f00000003c0)={0x5, 0xf, 0x5}, 0x8, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x403}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x424}}, {0xe9, &(0x7f0000000540)=@string={0xe9, 0x3, "3aedf5d7724f74a3def917b941c841759612320b26a1539e6dd1420df58caf804f63d88c3e4ac12f4c7297387635782fcfcb5d3359aa2a2ced7165a11542bf4b9d0a873db759991d8e47e1742dccea8a81506c51c040a1ea65d3d16e50c396a1c18c2c7c91a0f91b6a3555a6fd03c50bcfa3c427cde723442c7aa7673e3c93805917f667ddfb01c9d26afdce40f00762048b0ed5dbaa28d9982e80510a388e6c7ffeedf69b6650edebc4a49f49709d4330c3697ae9ad1e43e9e8cc63b1ac06cbb441b8eaa67ed7d9657d5fab96fecca9bff25ae4fa6dc5d291436d39d6d9d4e9eb379275fb9c0d"}}, {0xc6, &(0x7f0000000640)=@string={0xc6, 0x3, "44ca04eecb29f1ecd032eea6a7984fcab96746c2f15d64eaeee570f059db591260bc3aa494227a80f6feb69bb27d06bd22f5acc08d2ab5fe7fa04cba2d0d55a503df49fba7db169dee2140d7502cbcc2f03f25f99766ffce7e6a46ed1651f3760ec5805f1712ca1efe7f14b40360a235aceea709a154446355e670809435a25053b666d9d64ee8186a536bd8615a5e383e035532be97f9e123980de422ba726e88544038ecfac6aef5a31a5584a2f373f045fa56fa9d1ad9bea8bf2f4bb47b3825c7894c"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xc0a}}, {0x3f, &(0x7f0000000740)=@string={0x3f, 0x3, "fe5f41886cddb66b9bf8315980af96646f6e3cf39bb888d0efde271b7e1e99642f0cdf1f2a157fb1e9ad0ffba251391ddbb2a6d392e1409dc6e86b74fa"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x410}}, {0x30, &(0x7f00000007c0)=@string={0x30, 0x3, "d796d95672707c091998cb029123c1c22e667d60eb9c867af421cf48143fd55065f690b779011718a578cca54d65"}}]}) (async) r9 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r9, 0x0, 0x0) 47.075951015s ago: executing program 0 (id=163): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x12b) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendmmsg$sock(r1, 0x0, 0x0, 0x824) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r1, &(0x7f00000001c0)='./file0/file0\x00', r2, &(0x7f0000000040)='./file0\x00', 0x0) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1410c0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20102, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) fgetxattr(r6, 0x0, 0x0, 0x0) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000d80)={{0x0, 0x0, 0x80}}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) 46.78433685s ago: executing program 0 (id=170): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x101000, 0x800, 0x3, 0x1}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async, rerun: 32) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r4, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x60) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x81, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000004c0)=0x2) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async, rerun: 64) io_setup(0x5, &(0x7f0000000080)=0x0) (async, rerun: 64) r7 = eventfd2(0x5, 0x800) (async, rerun: 32) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) (rerun: 32) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000040)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x810408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r8, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r10 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ioctl$HIDIOCGUSAGES(r10, 0xd01c4813, &(0x7f0000000d40)={{0x2, 0x200, 0xfffffffd, 0x9, 0x6, 0x2}, 0x395, [0x1, 0x5, 0x7f, 0x6, 0x0, 0xfffffff9, 0x6, 0x3, 0x0, 0x7fff, 0x0, 0x10000, 0x1d6, 0x1, 0xff, 0xb, 0x9, 0x6, 0x1, 0x0, 0x96, 0xffffffff, 0x7, 0x2, 0x4, 0x5, 0x53, 0x5, 0xfe, 0x80, 0xe, 0xb4, 0xffffffff, 0x7, 0x1ff, 0x4, 0xd9, 0x7, 0xff, 0x6, 0x800, 0xa5a, 0x4000, 0x9, 0x71, 0x200, 0x5, 0x9, 0xfffffff7, 0xf, 0x8000, 0x6, 0x9, 0x581500ab, 0x0, 0x3, 0x400, 0x4, 0x1, 0x9, 0x6, 0x1, 0x0, 0x5, 0x6, 0x5, 0x2, 0x4, 0x800, 0x0, 0x2, 0x9, 0x5, 0x4, 0x2, 0x9, 0xe, 0x9, 0x2, 0x81, 0x1, 0xf3, 0x3, 0x209, 0x100, 0x1000, 0x1, 0x6, 0x2, 0xc82a, 0x4000000, 0xa, 0x7, 0x4, 0x3, 0x2, 0x40, 0x100, 0x6, 0x1, 0xffff, 0xfffffffa, 0xf, 0x8f, 0x7, 0x6f81, 0x9, 0x2, 0x3, 0xd0800000, 0x8, 0x9, 0x6, 0x7f, 0x5eba, 0xdcd, 0x68, 0xf, 0x7, 0x5, 0xe, 0x2, 0x2b, 0x4, 0x6eb, 0x4, 0x9, 0x8, 0x6, 0x0, 0x4, 0xffff, 0x7, 0x0, 0xb, 0x5b4a5d87, 0x5, 0x4, 0x4, 0x7, 0x0, 0x4, 0xfffffff5, 0xa, 0x1000, 0x6, 0x30000, 0x1, 0x200b1ea5, 0x7, 0x9, 0xb, 0x7f, 0x7, 0x9, 0xd6, 0xb17, 0xffffffff, 0x4, 0xe, 0x519, 0x5, 0xb, 0x7, 0xa, 0x0, 0x7, 0x0, 0x9, 0x0, 0x7f, 0xffffffff, 0x7ff, 0x5, 0xfffffff5, 0xf, 0x1010, 0x6, 0x3, 0x81, 0x7, 0x8, 0xd, 0x2, 0x3, 0x0, 0x46b, 0x6, 0x54, 0x1, 0xfffffffd, 0x6, 0x5, 0x80000001, 0x7, 0x4, 0x6, 0x1, 0x7, 0x4, 0x3, 0xac, 0x4, 0x8a900000, 0x8, 0xad, 0xfffff801, 0xffffff49, 0x8001, 0x400, 0x5, 0x7e0, 0x1, 0xc, 0x8, 0xffffffff, 0x9, 0x4, 0x20e, 0x4, 0x101, 0x33af, 0x1, 0xb, 0x2, 0xffff, 0x2, 0xe9, 0x6, 0x0, 0xb4b80000, 0x3ff, 0x6, 0x7, 0x13, 0xfffffff7, 0x80000001, 0x6, 0x8, 0x10001, 0x5, 0x8c6, 0x4aa, 0x8, 0xffffffcf, 0x5, 0xff, 0x5, 0x6, 0x8000, 0xe, 0x4, 0x2, 0x2, 0x1, 0x4, 0x9, 0xe2, 0x83, 0x4, 0xfffffffb, 0x5, 0x3, 0x2, 0x4, 0x2, 0x4, 0x1, 0x0, 0x2, 0x6d, 0x8131, 0x10000, 0xa42, 0x8ea, 0x0, 0x9, 0x6ad3d576, 0x80000001, 0x0, 0x3, 0x7fffffff, 0x9, 0x47, 0x4, 0x1, 0xed, 0x3, 0xffffffff, 0x2, 0x3, 0x1, 0x9, 0x3371, 0x1000, 0xfffffffe, 0xfffffff9, 0x6b2f, 0x4e9f, 0x8, 0x0, 0x2, 0x6, 0xae, 0x2, 0x6, 0x7, 0x5, 0x2, 0x7, 0x9, 0x8, 0x83, 0x9, 0x0, 0x134, 0x9, 0x4, 0x4, 0x1, 0x6a4, 0x4, 0xe, 0x35, 0x6, 0x200, 0x7, 0x10001, 0x3, 0x200, 0xc, 0x2, 0xff, 0x0, 0x5, 0xab, 0xfff, 0x2, 0x8, 0x0, 0x6, 0x1, 0x4, 0x81, 0x5, 0x21e85071, 0x0, 0x80000000, 0x0, 0x9, 0x8000000, 0x4, 0x1, 0x5, 0xb, 0x1000, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x5123, 0xb, 0x5, 0x764, 0x2, 0x9, 0xe, 0xc3, 0x78b7, 0x1, 0x7, 0x7, 0x0, 0x5, 0x7, 0x4, 0x854, 0x3, 0x8, 0x1, 0x9, 0x1, 0x2, 0x8, 0x19580000, 0x9, 0x5, 0x5, 0x1ff, 0x7, 0x9, 0x1, 0x8, 0xffff779f, 0x5, 0x6, 0x7fff, 0x5, 0x4, 0x0, 0xb, 0x80, 0x1, 0x6, 0x6, 0x1, 0x6, 0x8, 0x0, 0x0, 0x1, 0xfffff801, 0x7ff, 0x0, 0x555, 0x3ff, 0x2, 0x9, 0x8e07, 0x8daf, 0x8, 0x3, 0xef46, 0x665, 0xd, 0x4ba, 0x80, 0x340, 0x67, 0x2, 0x9, 0x7e, 0x3, 0x8, 0x9, 0x9, 0x1, 0xf2, 0x5, 0x2df, 0x6, 0x1, 0x321, 0x7, 0x4, 0x0, 0xe, 0x6, 0xd9, 0x3, 0xffffffff, 0xffff8000, 0xdb, 0xd12f, 0x3, 0x4, 0x6, 0x2000, 0xc39, 0x2, 0x0, 0x8, 0x7f, 0x400, 0x4, 0x95, 0x4, 0x1ff, 0x5, 0x3ff, 0x100, 0x1, 0x6, 0x17, 0x8, 0x7, 0x2, 0x4, 0x6, 0x81, 0x7, 0x4, 0x9, 0x200, 0x4, 0x6, 0xf, 0x9, 0xfffff801, 0x8, 0x8, 0x6, 0x7f, 0x2, 0xfffffff6, 0x6a9, 0x5, 0x800, 0x9, 0x7, 0x6, 0x7fff, 0x7, 0x3ff, 0x0, 0x8c94, 0x9, 0xe39, 0x5, 0x13, 0x8, 0x5, 0xc, 0x2, 0x3ff, 0xe3, 0x1ff, 0x5, 0x58, 0x7, 0x101, 0x3, 0x50, 0x4, 0x0, 0x0, 0x3, 0xce, 0x5, 0x8, 0x1f3, 0xc0000000, 0xffffff80, 0x8, 0x7, 0x7, 0x2, 0xa, 0x3, 0x9, 0x3, 0x6, 0xb, 0x200, 0x9, 0xc435, 0x7ff, 0x1, 0x2, 0xe10, 0x1, 0xffff, 0x0, 0x9, 0x0, 0x9, 0x81, 0x2, 0xb, 0xd7, 0x3, 0x2, 0x1, 0xd41, 0xf, 0xffffff89, 0x6, 0x4, 0x4, 0x0, 0x0, 0x8, 0x6, 0xfffffff7, 0x9, 0xf0f, 0xffffff45, 0x2, 0x7, 0x400, 0x8e, 0x6, 0x8, 0x0, 0x4, 0x1, 0x1, 0x4574, 0x6, 0x0, 0x3ff, 0x2, 0x8, 0x0, 0x2, 0x3, 0x4, 0xae0, 0x2, 0x5, 0xffffffff, 0x4, 0x9, 0x2, 0x1000, 0x537b, 0x4, 0x2, 0xb4ba, 0x81, 0x8000, 0x1, 0x6, 0x2, 0x1ff, 0xe12, 0xffffffff, 0x8, 0x4, 0x3, 0x3, 0x7, 0x9, 0x9, 0x400, 0xffff590a, 0xb, 0x0, 0x86500000, 0x5, 0xffffffff, 0x10, 0x0, 0x8, 0x7, 0x10000, 0x3, 0x6, 0x9, 0x4, 0x652, 0x4, 0x7ff, 0x1, 0x3f4, 0xff, 0x3f0, 0xb5c9, 0xbe32, 0x2, 0xdac1, 0x8, 0x6a2, 0x1, 0x7, 0x3, 0x5, 0x7, 0x2, 0xffff, 0x6, 0x6, 0x4, 0xc, 0x1, 0xb080, 0x6ed646d9, 0x1, 0x5, 0x161c8876, 0x8, 0x4, 0x2, 0x7fffffff, 0x5, 0xfffffff9, 0x0, 0x42712e0f, 0x7c, 0x401, 0x4, 0x5, 0xfffff209, 0x1, 0x2, 0x0, 0x20000000, 0xd, 0x2, 0x9, 0x9, 0x6dd5bea6, 0x2, 0x4, 0x5e, 0x4, 0xb, 0x0, 0x5, 0xffff, 0x7, 0x1d, 0x19, 0xa87, 0xfffffff7, 0x8c, 0xe6, 0x1ce0418, 0x9, 0x3, 0x158, 0x8, 0xf, 0x7fff, 0x6, 0xff, 0xfffffff8, 0x200, 0xb, 0x1b4, 0x0, 0x6, 0xf, 0x5, 0x7, 0xffffffff, 0x9, 0x10000, 0x400, 0x3, 0x10001, 0x6d, 0x6, 0xa663, 0x7, 0x2, 0xd, 0x1, 0x3, 0x3, 0x4, 0x3, 0x101, 0x2, 0xea, 0x8, 0x7fffffff, 0x6, 0x0, 0x80000000, 0x7fffffff, 0x7, 0x5, 0x1ec, 0xfffffff7, 0x6, 0x1, 0x1, 0x1, 0x5, 0x800, 0x8, 0x200, 0x4, 0xfffffffe, 0x0, 0x6, 0xa1, 0x1, 0x0, 0xc765, 0x5659, 0x4451, 0x401, 0x6, 0xffffffff, 0x5, 0x9, 0x6, 0x80000000, 0x6, 0x8, 0xa, 0x6, 0x1, 0x3ff, 0x1000, 0x0, 0x8, 0x7, 0x2, 0x3, 0x7fff, 0x7fff, 0xa1, 0x7, 0x4, 0x3ffa, 0xffffffb5, 0x4, 0x9, 0x1, 0x2, 0x2, 0x1000, 0x4, 0x2, 0x9, 0x1, 0xfffffff8, 0x2, 0x2, 0xf, 0x1, 0x0, 0x3, 0x1, 0x0, 0x4, 0x3, 0x6, 0x7, 0xfffffff9, 0x7, 0x0, 0x2f1, 0x4, 0x1f32, 0x33da, 0x322e, 0x9, 0x8, 0x9, 0xdb, 0xffff, 0x1000, 0x4, 0x3, 0x5, 0xa00, 0x5, 0x9, 0x10001, 0x3, 0x8, 0x0, 0x4, 0xfffffff9, 0x3ff, 0x1, 0x80000000, 0x7, 0xffffffff, 0x3, 0x7fff, 0x7, 0x4ed3, 0x9, 0x100, 0x40, 0x5, 0xac1, 0x0, 0x3, 0x0, 0xba, 0x10000, 0xfffff2ab, 0x80, 0x1, 0x88, 0x1, 0xfff, 0x2, 0x5, 0x4, 0x8, 0x1, 0x4, 0xa, 0xff, 0x400, 0xfffffeff, 0xc, 0x3, 0xbd, 0x6, 0x5, 0x9, 0x7, 0xfffffc00, 0x101, 0x3ff, 0xff, 0x4, 0xe59, 0x3, 0x8, 0xf6d, 0x8, 0x0, 0x4, 0x1ff, 0x37d, 0x627e, 0x8, 0x3, 0x35, 0x6c, 0x4, 0x7, 0x0, 0x4, 0x2, 0x101, 0x9, 0x6, 0x1ff, 0x4, 0x4, 0xfffffffe, 0x3ff, 0xdf, 0xd, 0xd, 0xa, 0x2, 0x3, 0x8000, 0x0, 0x4, 0x3, 0xb5, 0x0, 0x2, 0x0, 0x7, 0x0, 0xfffffff7, 0xffff, 0xf56, 0x3, 0x1, 0x81, 0x0, 0x400, 0x1, 0xfffffff2, 0x20000000, 0x6, 0x9, 0xfffff058, 0x10, 0x8000, 0x8, 0x9, 0x100, 0x3ff, 0x0, 0x101, 0xbd, 0xfff, 0x1000, 0x7, 0x1, 0x7fff, 0x2, 0xa, 0x5, 0x4, 0x6, 0x8, 0xffffffff, 0x4, 0xffff0001, 0xa28, 0x6, 0x0, 0x75be660b, 0x3, 0x5, 0x5, 0x1, 0x9, 0xfffe0000, 0x7, 0x6, 0x0, 0x3, 0xe, 0x8, 0x7fffffff, 0x74, 0x0, 0x81, 0x0, 0x6, 0x3, 0x4, 0x80000000, 0x2, 0x7, 0x1, 0x9, 0x8, 0x9, 0x7, 0x4, 0x800, 0xfffffff8, 0x8, 0xb94, 0x3, 0x4, 0x5, 0x81, 0xffffffad, 0xfffffffd, 0x6, 0x9, 0x423, 0xdfd1, 0x5]}) dup2(r10, r8) (async, rerun: 64) io_cancel(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xaac4f0cb25ff976d, 0x2, r2, &(0x7f00000001c0)="1596e9b8e47a1c75aaed02c3bd83f4d7f6381aa9ea38cabe624f9154b1447fa4692f4411b95edb49fc86cecc9b393a", 0x2f, 0x1, 0x0, 0x3, r7}, &(0x7f0000000240)) (async, rerun: 64) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) pselect6(0x40, &(0x7f0000000180)={0xfffffdfffffffffd, 0xffffffff, 0x0, 0x0, 0xffffffffffffff01}, 0x0, 0x0, 0x0, 0x0) 46.667078572s ago: executing program 0 (id=173): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000240)=ANY=[], 0x64}}, 0x20000804) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r2, &(0x7f0000001300)=[{0x0}, {0x0}, {&(0x7f0000001580)=""/4101, 0x1005}], 0x3, 0x1, 0x3, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{}, {0x8000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6}, {0xd000, 0x80a0000}, {0x2000}, {0xffff1000}, {}, {}, 0xddfdffdb, 0x0, 0x0, 0x78, 0x0, 0x8500}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3700e7d6cf9fee1a88009c72dae8d54c747d661fb2480e97160c3af70467ca0dab1526b49e8ed5640f4c58e6a54528e9d2adbabb6ccbde0e1da3c375e27bd5e53fb02000000ffffb1d8ac5d59fdc16294001f07495c8a3e10be91cf3ae6d18d8414bd29719afa5ef7bd58dd0348788ef59f2f468e5dbb31219f077c", 0x80, 0x4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) r3 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5016, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0xa0}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f0000000680)={0xfffffffa, {{0xa, 0x4e20, 0x804, @dev={0xfe, 0x80, '\x00', 0x44}, 0x4}}, {{0xa, 0x4e22, 0x2fb2, @private2, 0x200}}}, 0x108) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x22, &(0x7f00000003c0)=0x77, 0x38) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000d40)="b1", 0x1}], 0x1}}], 0x1, 0xc0) sendto$inet(r6, &(0x7f0000000300)="09268a9234f8b358387f1f6588b94b481241ded8974895abfab7511e6e9532120200000000000086b7c4fff5575470f7385a78182eeaea563a905780232726ffbcb5e8d06ec5161ab4b4317995652dc20915e12a020fe3e2bf05b39e5c14312c2f7efc25b5575a7697a9240b578ac6971c54aec0b1ee3d84056a80e7878b37568b295a57f59a9f599bd5ccf5a12920e47c2d37f9140a41ed0ec9392f997cf6", 0xffffffffffffff7f, 0x4000080, 0x0, 0xfffffffffffffff7) write$UHID_DESTROY(r4, &(0x7f0000000200), 0x7) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="0e02000009"], 0xc) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640100004a000102"], 0x164}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x7, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x16, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 46.579022363s ago: executing program 32 (id=173): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000240)=ANY=[], 0x64}}, 0x20000804) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r2, &(0x7f0000001300)=[{0x0}, {0x0}, {&(0x7f0000001580)=""/4101, 0x1005}], 0x3, 0x1, 0x3, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{}, {0x8000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6}, {0xd000, 0x80a0000}, {0x2000}, {0xffff1000}, {}, {}, 0xddfdffdb, 0x0, 0x0, 0x78, 0x0, 0x8500}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3700e7d6cf9fee1a88009c72dae8d54c747d661fb2480e97160c3af70467ca0dab1526b49e8ed5640f4c58e6a54528e9d2adbabb6ccbde0e1da3c375e27bd5e53fb02000000ffffb1d8ac5d59fdc16294001f07495c8a3e10be91cf3ae6d18d8414bd29719afa5ef7bd58dd0348788ef59f2f468e5dbb31219f077c", 0x80, 0x4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) r3 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5016, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0xa0}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f0000000680)={0xfffffffa, {{0xa, 0x4e20, 0x804, @dev={0xfe, 0x80, '\x00', 0x44}, 0x4}}, {{0xa, 0x4e22, 0x2fb2, @private2, 0x200}}}, 0x108) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x22, &(0x7f00000003c0)=0x77, 0x38) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000d40)="b1", 0x1}], 0x1}}], 0x1, 0xc0) sendto$inet(r6, &(0x7f0000000300)="09268a9234f8b358387f1f6588b94b481241ded8974895abfab7511e6e9532120200000000000086b7c4fff5575470f7385a78182eeaea563a905780232726ffbcb5e8d06ec5161ab4b4317995652dc20915e12a020fe3e2bf05b39e5c14312c2f7efc25b5575a7697a9240b578ac6971c54aec0b1ee3d84056a80e7878b37568b295a57f59a9f599bd5ccf5a12920e47c2d37f9140a41ed0ec9392f997cf6", 0xffffffffffffff7f, 0x4000080, 0x0, 0xfffffffffffffff7) write$UHID_DESTROY(r4, &(0x7f0000000200), 0x7) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="0e02000009"], 0xc) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640100004a000102"], 0x164}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x7, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x16, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 2.002521506s ago: executing program 4 (id=569): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11a) (async, rerun: 32) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) (async, rerun: 32) r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000200)='wchan\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000340)=""/228, 0xe4}], 0x1, 0xfffffff6, 0x9) (async, rerun: 64) listen(r1, 0xfffffff8) (rerun: 64) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="0401000010000100000000000000000004000000ed004780"], 0x104}], 0x1}, 0x0) (async) read$FUSE(r2, &(0x7f0000000980)={0x2020}, 0x2020) 1.920092758s ago: executing program 4 (id=571): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000000)='(\x0f\x00') r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000080)="b1f175dd", 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000380)={0x60, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x5, 0x0, 0x0, 0x0, 0x74, 0x2, 0xa, 0x54}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x3000, 0x2}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 1.852212449s ago: executing program 2 (id=573): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, 0x4000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x12, r1, 0xab445000) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x37, 0x0, 0x101}}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0xb, 0x0, &(0x7f0000000080)) 1.526952084s ago: executing program 3 (id=574): setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000000)=0x1002, 0x4) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x30) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x4) syz_clone(0x0, &(0x7f0000000140)="c2fea4aace85bf5d8c99a4a0cf2d199c8a7dcccdd34de0c2a32e77c1b96ef8265d06aac11e9edf90cadf61b3b2d28305e5b9469d7f88e85a9515a6e3abbf2bb054a332e734a5db5c96fb034629fb7dbab9b38f8140b737007833aa14345cb0beaf11b47d0294c689d09bed307363e562169334219baffa3312d2635070c5e6e982f6786130ed1217b3af4129729a4cfc4cbaabd986d5de2500aea4c1280ea1e3c3cef2700b01916f21bdb9ee36f56a3c", 0xb0, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="1f41f4cf399feb9142aba2e97da4a9ad28518e9c700ecfa0608134a8314a45c59008da2e570ed729b569353cb13fadd794b47fe1d63aef628cb3b7d9a6711d464e4bdb314c1f5077331e2f0f162861dd2a58f4") r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1000) ioctl$KVM_CAP_VM_TYPES(r2, 0x4068aea3, &(0x7f0000000340)={0xeb, 0x0, 0xa}) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000003c0), 0xd769f060b0caa1e, 0x0) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000400)={0x0, 0x1, 0x40}) setsockopt$inet6_tcp_buf(r3, 0x6, 0xe, &(0x7f0000000440)="8d5c621297e8f78592268017d0fcd2f24fb781218c5b47babeb8564c2d2cbc3fde56bdc96c7e86b1bd7993879ab63187fa49a3a1d8fbac", 0x37) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000480)={0x3a, 0x6, 0x0, {0x5, 0x4, 0x11, 0x0, '/selinux/enforce\x00'}}, 0x3a) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f00000004c0)={0x8, 0x5, [{0xfffffffb, 0x0, 0x4}, {0xdbd, 0x0, 0x8}, {0x2, 0x0, 0x4}, {0x8, 0x0, 0x401}, {0x83, 0x0, 0x1}, {0x3d, 0x0, 0x10000}, {0x7, 0x0, 0xd}, {0x4, 0x0, 0xf}]}) ioctl$BLKCRYPTOGENERATEKEY(r3, 0xc030128a, &(0x7f00000005c0)={&(0x7f0000000580)=""/42, 0x2a}) r4 = fcntl$dupfd(r2, 0x406, r1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000600)={0xaa, 0x254}) read$FUSE(r4, &(0x7f0000000640)={0x2020, 0x0, 0x0}, 0x2020) r6 = geteuid() stat(&(0x7f0000002680)='./file0\x00', &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000002740)={0xb0, 0x0, r5, [{{0x5, 0x3, 0x2, 0x8000000000000000, 0x4, 0x827, {0x2, 0x800, 0x4, 0x8000000000000001, 0x7, 0x9a1d36b, 0xc, 0x8, 0x4, 0x8000, 0x2, r6, r7, 0x5, 0x1}}, {0x6, 0x9, 0x4, 0x5, '*!^.'}}]}, 0xb0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002840), r4) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000002980)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002940)={&(0x7f0000002880)={0x94, r8, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local}, 0x401}}}}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}]}]}, 0x94}}, 0x40001) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000006, 0x8010, r2, 0x4a91a000) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r3, 0x4068aea3, &(0x7f00000029c0)={0xbc, 0x0, 0x7}) getsockopt(r4, 0xc0b, 0x6, &(0x7f0000002a40)=""/107, &(0x7f0000002ac0)=0x6b) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002b00), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r9, &(0x7f0000002b40)={0x2d, 0x6, 0x0, {0x1, 0x5, 0x4, 0x0, ')}/@'}}, 0x2d) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000002c80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002bc0)={0x54, 0x1, 0x4, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x6}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xfffffff8}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xfffffffa}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x2b53}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x15f205ce}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000010}, 0x15) process_mrelease(0xffffffffffffffff, 0x0) 1.460183706s ago: executing program 3 (id=575): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES16=r2, @ANYRESHEX=r0], 0x34}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.459844516s ago: executing program 3 (id=576): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@flag='rw'}]}) (async) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x1) 1.459304996s ago: executing program 3 (id=577): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x2, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4, 0x0, &(0x7f0000000500)=[@enter_looper={0x40086303}], 0x0, 0x1000000000000, 0x0}) 1.435530366s ago: executing program 3 (id=578): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f000000c740)={{0x2, 0x4e22, @multicast1}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, 0x48, {0x2, 0x4e22, @rand_addr=0x64010101}, 'erspan0\x00'}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r3) (async) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) r4 = socket$tipc(0x1e, 0x5, 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0x1, 0x488081) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r2, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000e00)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) (async) r5 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r5) gettid() getsockopt$IP6T_SO_GET_REVISION_MATCH(r5, 0x29, 0x44, &(0x7f0000000080)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x50, 0x0, &(0x7f0000002040)="7797f473010e3c6f412193d01ca46e5d1fd37e1ff088862e47734ac7eb2e436321311317afe07822a299d63328f5c10a5f99166b47868f357ba1edd6b402c7022a1fe37f5f729dd812db18dad930f670"}) 1.266659959s ago: executing program 1 (id=579): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x145480, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000040)=0xd, 0x7) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000e40)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000280)=@ccm_128={{0x304}, "d9bd5d93fcd1006d", "6a94e62d8a03567f9d69029fc4a684f4", "b032950d", "d56e24bc6c025e7b"}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, "2474000000000da1", "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", "5005f500", "7c5cec21291a43fe"}, 0x38) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0xffff0000, 0xeeee8000, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x5002, 0x8080000, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x100000}, {0x11000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x84}, {0xeeee8000, 0x80a0000, 0xf}, {0x6000, 0x0, 0x0, 0x82}, {0x6000}, {0x1, 0xfffe}, 0x10d, 0x0, 0xf000, 0x90, 0x0, 0x100, 0x900, [0x0, 0x0, 0x0, 0x4]}) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f0000000180)={r8, r4, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r10 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000000c0)={'veth0_to_bond\x00', &(0x7f0000000000)=@ethtool_cmd={0x4e, 0x2, 0x3, 0x3ff, 0x3f, 0x7, 0x1, 0x3, 0x6, 0x3, 0x101, 0x142f, 0x8, 0x3, 0x0, 0xa, [0x4000000, 0xff]}}) read(r0, &(0x7f0000000040)=""/123, 0x7b) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000380)={0x1, 0x1, 0x0, 0x0, 0x0, 0x8000000}) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000100)=""/107, 0x6b}, {&(0x7f0000000180)=""/249, 0xf9}], 0x2) 1.148126111s ago: executing program 1 (id=580): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffc}}, [@tmpl={0x144, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0xfffffffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@mcast1, 0x4, 0x3c}, 0x2, @in6=@dev}, {{@in=@empty, 0x4d2, 0x6c}, 0x0, @in=@local}, {{@in6=@local, 0x0, 0x3c}, 0x0, @in=@empty, 0xffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x4}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x84) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r4, r6, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x3002, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x7, 0x0, 0x1, 0x0, 0x10008, 0x8, 0x4, 0x72, 0x7, 0xfa, '\x00', 0x3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x76, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0xeeee8002, 0x110000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc0046209, 0x0) 1.086510322s ago: executing program 1 (id=581): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$FUSE_GETXATTR(r1, &(0x7f0000000780)={0x18, 0x0, 0x0, {0x2d0}}, 0x18) write$uinput_user_dev(r1, &(0x7f0000000240)={'syz0\x00', {0x508, 0x7, 0x7, 0x1}, 0x4e, [0x5f11bec3, 0x3, 0x5, 0x40, 0x0, 0x3, 0x0, 0x7d, 0x80000000, 0x5, 0x0, 0x6, 0x0, 0x0, 0x4000000, 0x2, 0x1a4, 0xfffff605, 0x3, 0x0, 0x46e9, 0x7ff, 0xe2b, 0x7, 0x681c1eb5, 0x11e, 0x0, 0x2, 0x0, 0xe9, 0x0, 0xffff, 0x9, 0x4, 0x0, 0x3, 0x0, 0x0, 0x5de82a4e, 0x0, 0x0, 0x20000, 0x4, 0xfffffffe, 0x1, 0x0, 0x8000, 0x7, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff7, 0x0, 0xf685, 0x0, 0x1ab9, 0x0, 0x2, 0x0, 0xfffffffb, 0x1c15d73a, 0x2], [0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x61c5fb46, 0x10000, 0x0, 0x4, 0x10001, 0x75, 0x0, 0x4, 0x0, 0x2000000d, 0x80000000, 0x0, 0x61c2, 0x9, 0x0, 0x9, 0x2, 0xff, 0x2, 0x10001, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x9, 0x441238ca, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x0, 0xc50, 0x3, 0x9f5, 0x0, 0xa02, 0x1c75, 0xf51, 0x6, 0x40, 0x0, 0x21, 0x20000, 0x2, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0xfffffffd, 0xc, 0x0, 0x200, 0xcc0, 0x401, 0x6, 0x6, 0x0, 0x1000000, 0xffffff7f, 0x80, 0x921, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x800003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x4, 0x0, 0x6574, 0x7, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0xffffffff, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x3ff, 0x8, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0x4ad, 0x0, 0x0, 0x80000001, 0x3, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x40, 0x8000010, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x800, 0x5, 0xd, 0x0, 0x40000000, 0x0, 0x4, 0x45d, 0x4, 0x0, 0xfff, 0xb2, 0xa, 0xb]}, 0x45c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000400)) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) close_range(r4, r4, 0x0) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r1, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e23, @loopback}, 0x10) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder0\x00', 0x802, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0x20}}, 0x40816) bind$tipc(r6, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f00000003c0)='cgroup.stat\x00', 0x275a, 0x0) read$FUSE(r8, &(0x7f0000002800)={0x2020}, 0x2045) connect$unix(r1, &(0x7f0000000700)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x10}], 0x5b, 0x0, 0x0}) 1.066285922s ago: executing program 4 (id=582): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20020000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xac, 0x0, 0x8, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x809b}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_ESTABLISHED={0x8}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x100000}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0xe3a}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0xffffff33}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x3ff}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x63b8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, 0x0, &(0x7f0000000040)=0xffffffffffffff67) (async) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='system.posix_acl_access\x00') (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001800090200ffe6000000000002"], 0x20}}, 0x0) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000000), 0x4800, &(0x7f0000000080)) 992.067933ms ago: executing program 4 (id=583): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x30, 0x0, 0x121, 0x70bd2c, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x24a}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r2, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xa, 0x20}}}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x324}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x40) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000002c0)={0x2c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x17}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xe01d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x810) syz_usb_control_io(r0, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000008c0)={0x84, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0xa}, &(0x7f0000000680)={0x40, 0xb, 0x2, "ae4a"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x7b26}, &(0x7f0000000700)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x17, 0x6, @local}, &(0x7f0000000780)={0x40, 0x19, 0x2, 'Ce'}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x96}, 0x0, 0x0, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x7f}}) 989.935373ms ago: executing program 2 (id=584): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x13d, @local, 0x7}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c40000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000000000000000000000000114000400fc000000000000130000000000000001080007400000000030000e802c00018014000300fe80000000000000000000000000000c14000400fc000000000000000000000000000001"], 0xc4}}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x810408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x9, {0xff00000000000002, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x1, 0x8000, 0x0, r5, r6, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)={[&(0x7f0000000180)='./binderfs/binder1\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='\x00']}, &(0x7f0000000380)={[&(0x7f0000000340)='/dev/fuse\x00']}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$FUSE_LSEEK(r7, &(0x7f0000000400)={0x18, 0x0, r4, {0x91b}}, 0x18) dup2(r7, r2) close_range(r0, 0xffffffffffffffff, 0x0) 586.238271ms ago: executing program 3 (id=585): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, &(0x7f0000000000)={0x40, 0x7, 0xa9, {0xa9, 0xd, "15d1ad5e654eb80b9dbe5a4aec00368b6b419d26657e09650846d587f3a90839a26d8a3062299955aafdc5b06bb0d1b3081d751f418ffff38498f20bde3bfbc8984de84d3a93f5c5fa17d95fc2109697091ae72fd8305f2e67e817546bbf53641fddd48dc4eab52b4b863fe03be158be2dd203684c6af03d31cd3922a5b067ca882aa28f3e66a7b588fd5e3c16d01d063417dbcda80d432f382efea3ee3f5bd6ad85c4ccc420f0"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1d, @string={0x1d, 0x3, "feb1301b371659569005c6e831c6a998d729c53396692ecbeb8417"}}, &(0x7f0000000100)={0x0, 0x22, 0xd, {[@global=@item_012={0x1, 0x1, 0x9, '_'}, @local=@item_012={0x2, 0x2, 0x3, "8a76"}, @main=@item_012={0x2, 0x0, 0x0, "8dcc"}, @global=@item_4={0x3, 0x1, 0x9, "9e31a53a"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8f6, 0xbf, 0x1, {0x22, 0x253}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x20, 0xd, 0x5c, "5bee090b7d9e01925fd156149d5134fd7715aca815a33fc969ba79f923d7713806ec403fb4ce24e142553893850200fff129666b94aca389d0f5fb93d7e684317a28f55790c9162d76f7b562af9bad8b0931ecc2cf85280afc70ea5b"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000340)={0x20, 0x1, 0xad, "c50749c6486b8d260457e0702d80a60839359aa559c4de09645a1b30092cbe7a9a61cacd6946019df6248d63b0f77aebd80aee21287e7fd6255268006bc03b3520e0c5766d94140308ebde4c8c3e626c349ddf480e17320027f934cca59d9ab752b222857202a7607508d2cb0be5134df3e1cd32370eb135bc28e0dd3e1b9829fd3094942473a04313e7b23cb722c9c31fa78c85190421eecbd20dd1e2bd86d2c60b5eb7cbd8d92eb1d01fb2ab"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x4}}) writev(r0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000200)="100e670873968ef09ad2dc91a457ec22b19fc326b944f5c4c818", 0x1a}], 0x2) close_range(r0, r0, 0x0) 519.760071ms ago: executing program 4 (id=586): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000100)='\xafdew/\x1b\x8b\xa2\xf8\xb1f\xb0\xaf\xad~\xa9\x12au\xee\x17\b\xf9\x7fF\xefmg\xb3\xfa\xf9\x92\xff\xe1\f\x9bc\xdbz\x06\xe9\xa8\xcbc1O\xaf\x85p\xd6\xbf1\xbb\xf2\xf1\x17A\x1b\vn\x97\xcd\xa8~\x0fI\xae\x8a\x9dGi\x16\xbf\x9f\x93\xb2\xaa5\x8c\xdcx\xc2\xa2L\xdf\xe7\xf7\'\xe45\x93q!\xbf\x1a\"\xa5c\x94D;\xe6\xd5&\xbb\xbeX\xd1\xac\x16\xc6\x9aq\x8a\f\xe9}t\xdf\xed\xda\xda\x9f\x95\xc7jH\x87\xce)\x18>F\x96\x9c\x00I\xe8Y\x1c\x19\xb5O\x88\xb8\xe7\x1c\xd3\x17\x15\\\xc1\xcd\xf6\xda\xe4\x9bddK\xc3\xba\xb1D\xde\xa6\x9f\xfc\x9f\xf5\xd8\xbf\xf8sh+\xbc\x1fWU\x1dW!\x1f\xed\xca\x935\x85w\xa0\"%\x1d\xaf0+.\x83V&\xb8K\xbe\xa8U)\x03G\x1b\x8el\x99\x8b\xc3\xc1\x9e >O\x95;\x02\xea\x18\xdbi\x89\xef\x8a\x88\xaf\x1ck') (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) (async, rerun: 64) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b819d56f4aa3fe1aaf904aa07b7b748ab54c9b47531624c0ca3cc3e9246587e7cea8af062e15c1c27d8e9d9328114f2bda697decbedc50cc278f543faa13098717d9f379121225b179faeebe79be6a82dea4403a3bc7990b1cfee9e5a1aaf11b32facecc76bc0ad86f4fa184dd6e451992a564475498a4e85e9484c9a357c08060637ee267f307d605e87225cb4175be29", 0xc1}], 0x1}, 0x0) (async, rerun: 64) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r1, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xc1}], 0x1) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000340)=[@code={0x1, 0x4d, {"0f216e0f20e035010000000f22e064420f01c8c4c141f623c423114c20fb66400f3841d5660fc7b700000000673e0f01c5420fc71bb9820100000f32"}}, @code={0x1, 0x68, {"66440f3833363626360f0159b2650f2c88950f0000b9800000c00f3235008000000f30b968060000b835399b58ba000000000f302e440f01cac4c3f56b5da083b805000000b9000000000f01d9451b750066b81e008ed0"}}, @uexit={0x0, 0x18, 0x7}, @code={0x1, 0x86, {"c44181ea3d1ca4000066baf80cb814e6b687ef66bafc0cb852db2e0aef66baf80cb80016858def66bafc0cb800000000ef260f09c7442400fe000000c744240200000000ff1c2466bad104ed460f232ec4c21537f7460f01c8c744240025e24ba4c744240200000000c7442406000000000f011c24"}}, @cpuid={0x2, 0x18, {0xfff, 0xc2}}, @cpuid={0x2, 0x18, {0x1, 0x22}}, @code={0x1, 0x61, {"43c07bafc5c74424000a000000c7442402a0680000c7442406000000000f011424410f30660f3882520667440f068fc878c26cde0f00c4c27918efc443a50c9e0100000000652e430f01f526470f793f"}}, @uexit={0x0, 0x18, 0x5}, @cpuid={0x2, 0x18, {0x8, 0x5}}, @cpuid={0x2, 0x18, {0x7fff, 0x7}}], 0x22c}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 464.272952ms ago: executing program 4 (id=587): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='personality\x00') exit(0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000100)=""/222, 0xde}], 0x1) 238.387806ms ago: executing program 1 (id=588): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) listen(r1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) ioprio_set$pid(0x1, 0x0, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x40) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000085"]) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0xff}, {0x3000, 0x1, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3, 0x0, 0x0, 0x4}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26, 0xff}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, 0x1e, 0x1, 0x70bd25, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800) writev(r2, &(0x7f0000000600)=[{&(0x7f00000003c0)="b464", 0x2}], 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='auxv\x00') modify_ldt$read(0x0, &(0x7f00000000c0)=""/164, 0xa4) 208.524626ms ago: executing program 1 (id=589): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x801, 0x0) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x3, 0x3, 0x0, 0x4, 0x2}) setrlimit(0x40000000000008, &(0x7f0000000000)={0x20, 0x200000}) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x10010, 0xffffffffffffffff, 0x0) (async) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) (async) r2 = socket(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x19, 0x0, 0x0) (async) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x110a, 0x1}) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x400, 0x70bd2f, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x44810}, 0x40000) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x18, 0x0, &(0x7f0000000700)=[@increfs={0x40046305}, @increfs, @decrefs], 0x0, 0x0, 0x0}) 143.974038ms ago: executing program 1 (id=590): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder0\x00', 0x1, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$sock_int(r4, 0x1, 0x2c, &(0x7f0000000240), 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="2100000000000000610500000000000009000000000000a300"]) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001780)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r5, &(0x7f0000009a80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x5, &(0x7f0000001e80)=[{&(0x7f0000001c00)=""/188, 0xbc}, {&(0x7f0000001cc0)=""/101, 0x65}, {&(0x7f0000001ec0)=""/4112, 0x1010}, {&(0x7f0000001d40)=""/179, 0xbc}], 0x4}, 0x454a}], 0x3, 0x42, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000440)=ANY=[@ANYBLOB="01000002000000009e00000000040800000000000014197f11f4ee4c3d23cbe246fe36bcb3e0b526c09afb81929e562c9ee0196c61e2eaf50e17d7967d9bc41e4d73f958975672fe8ce769fa12331a0168d3cc6ac3bcb0b40600437c844f4918a45f18a24f6202a9dcb40314e1dba3cba28b342c6c8b65d6db476d21123a0ff3ded41534aabc1768b569f8e80b18196fbd49a20f1cfbf89d0dbbc50099a3a85370c803b712827e8faef36d"]) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = getuid() setuid(r9) r10 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000080)="b1f175dd", 0x4) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x110a, 0x1}) 143.593427ms ago: executing program 2 (id=591): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) (async) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$rfkill(r2, 0x0, 0x0) (async) mmap(&(0x7f0000395000/0x4000)=nil, 0x4000, 0x8, 0x4000010, r2, 0x446a6000) (async) r3 = syz_clone(0x30230200, &(0x7f00000000c0)="05b2b55dc29fdaff7e3b1d91dfa7df9eb65800d46d6cfb4075c130633f9e53f00d5e90d403781aa8e475c31f8c7eb77f0141ad6b838d538c6f29db6d675b5bf3101405d543a65c3a0735f56f5200287c315ab29a02e9a1d1f860842439b258298754e012b80b7cca851caf21cdcde36086a9b936788db73ded2e8d4042db2c740d22365026f781ceca5179d93d4f258722c916f0cfef47efc6100e8063c4161987c4e85727bf35d4f1a13dad70b86580e1a1292b623b4355713579c58ccd23e69e6f93e651a807a3a4384b31ba43464eb2ed74a6bd76467d71c1e65a860682f3319d758efb6d93d50965a17c7c1750db5c82d4f70074d8cc6c", 0xf9, &(0x7f0000000040), &(0x7f00000001c0), &(0x7f0000000200)="2bea6e4d24f194f63c6241cb1437a7fbbc0697c3a17e8a6357c2d53f6612a7d41f57c60ab9c506584a31655da20e4df70b7ee8b4920ed15dfffd4419b3fc7116c3feb8cee2e6c9ab4827a74de24f5bcefbf01cf92803b832030fce4088233dde1379dd904b2c6f5a033e0f6ace") sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x7235) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@local, 0x800, 0x0, 0x3, 0x1}, 0x63) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r0, 0xfffff000) (rerun: 32) 97.870558ms ago: executing program 2 (id=592): mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf39, 0x0) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000000080)={{0x2, 0x1, 0x1, 0x2f, 0x2fda1733, 0xfffffffe}, 0x53, [0x0, 0x9, 0x400, 0xa519478, 0x8001, 0x800, 0x7, 0x4, 0xfffffff9, 0x9, 0x200, 0x1ff, 0x7bf8, 0xfffffffb, 0x7, 0xb, 0x7169, 0x1000, 0x2, 0x7, 0x2, 0xa, 0x0, 0x5, 0x9, 0x200, 0x8, 0x7, 0x2, 0x3, 0x5, 0x9, 0x6, 0x2, 0x5, 0x4, 0x3, 0x4, 0x101, 0x9, 0x2, 0x101, 0x200, 0x9, 0x3ff, 0x4, 0x2, 0x3, 0x7, 0xe, 0x4edf, 0x3162d293, 0xad, 0x3, 0x0, 0x8, 0xc, 0x0, 0x3, 0x5, 0x0, 0x8000, 0xc4ea, 0xd, 0x8, 0x6, 0x8, 0xb, 0xd2, 0x800, 0x9, 0x0, 0x8e78, 0x1, 0x3, 0x4, 0x59, 0x8, 0x8, 0x9, 0x0, 0x7, 0x42, 0xbf5, 0x2, 0x1ff, 0x30000, 0xdcf, 0x40, 0x8, 0x80, 0x8, 0xffffffff, 0xf, 0x9, 0x2, 0x0, 0x9, 0x2, 0x2, 0x2, 0x1ff, 0xf, 0x9, 0x4, 0x101, 0x5, 0x0, 0x7, 0x3, 0x4, 0x0, 0xfff, 0x2, 0x7, 0x5, 0x3, 0x1, 0xfffffffe, 0x94, 0x0, 0x7, 0x6255, 0x7, 0x7, 0x10000, 0x7, 0x100, 0x0, 0x401, 0x0, 0x1000, 0x1bb, 0xe60, 0x18000000, 0x2, 0x2, 0xff, 0x1, 0x200, 0x2, 0x0, 0x949e, 0x6, 0x6, 0x3, 0x9, 0x1, 0xffff, 0x3, 0x1000, 0x9, 0xfeab, 0x28, 0x4, 0x3, 0x7f, 0xfff, 0x2, 0x3f1, 0xfffffffd, 0x3426, 0xffffffff, 0x2, 0xb, 0x9, 0x0, 0x3, 0x7, 0x3, 0x8, 0x7, 0x4, 0x1, 0xffff7e38, 0x800, 0x9, 0xfffffff8, 0xffff, 0xe2f, 0x1, 0x3, 0x9, 0xcf6e, 0x30a, 0x1a, 0xc, 0x2, 0x3, 0x3, 0x3, 0xb, 0x0, 0x8, 0x0, 0xfffffff3, 0x2, 0xc, 0x1, 0x4, 0x8, 0xffffff00, 0x3, 0x1, 0x7, 0x100, 0x3, 0xff, 0x6, 0x0, 0x3, 0x9, 0x7, 0x6, 0x8, 0x0, 0x1, 0xfffffffd, 0x81, 0x7, 0x9, 0x10, 0x9, 0x1, 0x2, 0x200, 0x98, 0x4, 0x8, 0x1, 0x1, 0x6, 0x200, 0x7, 0x4, 0x2, 0x800, 0x4, 0x1000, 0x3, 0x9, 0xfffffffc, 0xa, 0x6, 0x7, 0xab, 0x85, 0x5, 0x7f, 0x8, 0x1, 0x1, 0xc, 0xcfcf, 0x6, 0x4, 0x1000, 0xd619, 0x1, 0x0, 0x97, 0x7, 0xffff, 0x3, 0x7, 0x7, 0x7, 0x10, 0x5, 0xc, 0x4, 0x8, 0xb2, 0x7, 0xfff, 0xcc, 0x4, 0xffffffff, 0x6, 0x1000, 0x100, 0x9, 0x0, 0xf, 0xfffffffc, 0x0, 0x1a, 0x6, 0x3, 0x8, 0x7f, 0x5, 0x1, 0x4, 0x0, 0x3, 0xf39b, 0x100, 0x8, 0xb, 0xffffff00, 0xffffffff, 0xe, 0xfff, 0x80, 0x4, 0x4, 0xfffffff8, 0x9, 0x42e, 0x3, 0x80, 0x4, 0x3, 0xfff, 0x4, 0x0, 0xab, 0x2, 0xbbb, 0xffffff80, 0xfffffffa, 0x6, 0x6, 0xf79, 0xffffff6c, 0x0, 0x653f, 0x366, 0x6, 0x4, 0x10, 0xc23f, 0x0, 0x2, 0x89, 0x2, 0x3, 0x20000000, 0x8001, 0x521, 0x0, 0x4, 0x77e, 0x8, 0x93, 0x465, 0x8, 0x4, 0x2, 0x9, 0x7, 0xbf, 0x8, 0x9, 0x679, 0x4000, 0x2, 0x401, 0x0, 0xeb, 0xa, 0x1, 0x0, 0x9, 0x5, 0x200, 0xfffffff7, 0x5, 0x6, 0x2, 0x6, 0x0, 0x4, 0x2, 0x5, 0x1, 0x8, 0x7, 0xf74f, 0x8, 0x8000, 0x3ff, 0x200, 0x80, 0xf9, 0x1000, 0x8, 0x7fffffff, 0xffff8000, 0x5, 0x1, 0x6, 0x9739, 0x9, 0x8d1, 0xfff, 0x101, 0x0, 0x10000, 0x5, 0xa, 0x8, 0x0, 0x1, 0x8, 0xc0d5, 0x5, 0xe2, 0x5, 0x4e1a2ced, 0x7, 0x1, 0x2, 0x4, 0x4, 0xfffffd8c, 0x4, 0x6, 0x1, 0x300, 0x7, 0x3, 0x80000001, 0x1, 0xe, 0x9, 0x3, 0x9, 0x0, 0xffff0001, 0x2, 0x5, 0x7fff, 0x7ff, 0x400, 0x6, 0x1, 0x9, 0x3, 0x800, 0x9, 0x2, 0x9631, 0x9, 0x40, 0xfffffffc, 0xdd, 0xffffffff, 0x1ff, 0x2, 0x0, 0xd4db, 0x74c, 0x3, 0x2, 0x1, 0x4, 0x5, 0x8001, 0x8, 0xfff, 0x2, 0x3, 0x4, 0x9, 0x4, 0x100, 0x7, 0x40, 0xfffffff7, 0x7, 0x2, 0x10000, 0x98, 0x8, 0xb, 0x8, 0x19b, 0x3, 0x10001, 0x10, 0x7fffffff, 0x81, 0x10, 0x2, 0x81, 0x2, 0x8, 0xfffffffc, 0xffffc7f6, 0x5, 0x3, 0x1, 0x5, 0x2, 0x7fffffff, 0x401, 0x80, 0x5, 0x800, 0xdbff, 0x571f452d, 0x3, 0x5, 0x80000000, 0x7, 0x1, 0xfffffffa, 0x3, 0x2b54, 0x5, 0x3, 0x52b, 0x40, 0x100, 0x3, 0x3, 0x4, 0x4, 0x9, 0x0, 0x5, 0x8, 0x6, 0x9, 0x7, 0xcafc, 0x3, 0x3, 0x8, 0x1c000, 0x5, 0x1, 0x0, 0xa, 0x3, 0x8, 0x800, 0x3c, 0x8, 0x4, 0x5, 0xac4, 0x1, 0x0, 0x0, 0xe19, 0x9, 0x20189843, 0x1, 0x7, 0x2, 0x7, 0x9, 0x8, 0x3, 0x2, 0x0, 0x3, 0x4, 0x9, 0x6, 0x0, 0x1, 0x3, 0x7, 0x7, 0x7fffffff, 0x7fff, 0xd2, 0x9, 0x1, 0x8, 0x1, 0x3, 0x6, 0x2, 0x1ff, 0x4cd, 0x4385, 0x2, 0x101, 0x2, 0xffff, 0x9, 0x259, 0x253, 0x2, 0x1, 0x9, 0x40, 0x1, 0x6, 0x1, 0x4, 0x10, 0xfffffffa, 0x494d, 0x8, 0xd, 0xcf0f, 0x7, 0x10001, 0x9, 0x7f, 0x78e9, 0x0, 0x4, 0x5, 0x7363477c, 0x2, 0x32d, 0x9, 0x5, 0x0, 0x1, 0xfff, 0x1, 0x5, 0x5, 0x7fffffff, 0x332, 0x3, 0x2, 0x5, 0xff, 0x9, 0x2, 0x3, 0xfffffffa, 0x4, 0x4, 0x1, 0x8, 0x6, 0x200, 0xfffffffb, 0x4, 0xe1, 0xffff, 0x80, 0x21a, 0x8, 0x7f, 0x6, 0xd, 0xb, 0x6, 0x7, 0x7, 0x2, 0x6, 0x1, 0x9, 0xb7, 0x401, 0xc, 0x2eac, 0x3233f88, 0x7fc806cd, 0x1, 0x2, 0xfffffff8, 0x8, 0x4, 0xfffffff7, 0x3, 0x8000, 0x2703, 0x9, 0x7, 0xf, 0x96, 0x1, 0x7fffffff, 0x4, 0xfffffff7, 0x80000000, 0x4, 0x400, 0x2, 0x8b, 0x3, 0x800, 0xa3, 0x7, 0x6, 0x2, 0x0, 0x7fffffff, 0x7, 0xd7, 0x9, 0x5, 0x1, 0x5, 0x1, 0x0, 0xe, 0x4, 0x7e34903f, 0x7, 0x5, 0x2, 0x401, 0x7fffffff, 0x0, 0x6, 0xc, 0x1, 0x4, 0x7, 0x9, 0x0, 0x7ff, 0xfffff1ab, 0x9, 0x80000001, 0x0, 0xea, 0x3900000, 0x3, 0x6, 0x9, 0x9, 0xfffffffd, 0x1fa, 0x5166, 0x7, 0x2, 0x10, 0x4, 0x16, 0x3, 0x2, 0x1, 0x80000001, 0x89, 0x3, 0x23, 0x5, 0x9, 0x10, 0x6, 0x0, 0x5, 0x4, 0x0, 0x79a0, 0x7, 0xff, 0x5, 0x7, 0x6, 0xd, 0x6, 0x501, 0x5, 0x3a1f, 0x0, 0x4, 0x4, 0xa, 0x1, 0x0, 0x3, 0x800, 0x5, 0x0, 0x8, 0x3, 0x6, 0x4, 0x4, 0x7, 0x2a41, 0x3, 0xfffffff8, 0x95dd, 0x1, 0x8001, 0x7, 0x80, 0x3, 0x1, 0xffffffff, 0x2, 0x9, 0x100, 0x0, 0x5, 0x80, 0x80, 0x5, 0x1040, 0x3, 0xffffffff, 0xffffffff, 0x6, 0x2, 0x7, 0x6, 0x401, 0x4, 0x8, 0x6, 0x0, 0x9, 0x9, 0x6, 0x0, 0x3ff, 0x5, 0x7, 0x4, 0x719, 0xfff, 0x40, 0x4, 0x3f0, 0x5, 0x0, 0x1, 0x3, 0x8, 0xffffffff, 0x9, 0x6, 0xe, 0x7, 0x2, 0x4, 0x0, 0x9, 0x0, 0x7, 0x2, 0x7f, 0x4, 0xfffffffc, 0xc, 0x8000, 0x2, 0x73bc, 0x7000, 0xd, 0x7, 0x6, 0x6, 0x0, 0x10000, 0xc4ac, 0x4, 0x1, 0x1, 0x2, 0x6, 0x0, 0x60000000, 0x0, 0x1, 0x8, 0x6, 0x7, 0x4, 0x3, 0xfffffff8, 0x93, 0x5c6d, 0xfffffff7, 0x5, 0x1, 0xa9b3, 0x9, 0x4, 0x4, 0x2, 0x0, 0xd, 0x80000000, 0x4, 0x3a, 0x1ff, 0x10, 0x3ff, 0x1, 0x401, 0x1ff, 0x1ff, 0x885, 0xfff, 0x9, 0x4, 0x81, 0x8001, 0x2, 0x80000001, 0x0, 0xf9da, 0x7268, 0xe, 0x1, 0x9, 0xfaa, 0x4, 0x9, 0x0, 0x58, 0x7, 0x24, 0x7, 0x5, 0x0, 0x5, 0xfffffffa, 0x6, 0x7, 0x1, 0x0, 0x8001, 0x2, 0xf6, 0x5, 0x6, 0x60, 0x5, 0x94, 0x8, 0x7, 0x4, 0x1000, 0xffffffff, 0x9, 0x0, 0x4, 0x7f, 0x1, 0x3d, 0x5, 0x9, 0x6, 0x2, 0xe76, 0xdbc9, 0xa, 0x4, 0x5, 0x5, 0x9, 0x6, 0x7, 0x0, 0x10000, 0x2, 0x5, 0x8, 0xfffffa91, 0x7, 0xa902, 0x9, 0x6, 0x8, 0x65, 0x4644, 0xa, 0x3, 0x9e80, 0x81, 0x4, 0x9, 0x8, 0x2, 0x7, 0x4, 0x3ff, 0x198c, 0x85, 0x0, 0xb, 0x7, 0x0, 0x7fff, 0x3, 0xfffffffd, 0x0, 0x6, 0x8, 0x6, 0x9, 0xfffffffe, 0x0, 0x3, 0x400, 0x7, 0x6, 0x80000001, 0x6, 0x2, 0x5, 0x4, 0x0, 0x0, 0x800, 0xfc6, 0x401, 0x9, 0x28a1, 0x8, 0x8, 0x3, 0x5, 0x40, 0x9, 0xffff0001, 0x7, 0x9, 0xb, 0x3, 0x7, 0xa14c, 0x263, 0x0, 0xa]}) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00') 71.791308ms ago: executing program 2 (id=593): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) (async, rerun: 32) syz_open_procfs$userns(r0, &(0x7f0000000000)) (rerun: 32) setns(r1, 0x24020000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000080), 0x800) mount$binder(0x0, 0x0, 0x0, 0x20c411, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async, rerun: 64) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20000040) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 0s ago: executing program 2 (id=594): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x3ff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x1}, 0xe) syz_io_uring_setup(0x766f, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x2}, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x202, 0x0) write$UHID_INPUT(r4, &(0x7f00000010c0)={0x8, {"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", 0x1000}}, 0x1006) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) close_range(r0, r3, 0x0) kernel console output (not intermixed with test programs): w high-speed USB device number 2 using dummy_hcd [ 29.544523][ T45] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 29.634940][ T64] usb 4-1: device descriptor read/64, error -71 [ 29.682364][ T333] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 29.694500][ T45] usb 1-1: device descriptor read/64, error -71 [ 29.874557][ T64] usb 4-1: device descriptor read/64, error -71 [ 29.884555][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 29.934520][ T45] usb 1-1: device descriptor read/64, error -71 [ 29.937127][ T345] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:22 [ 29.943533][ T345] rust_binder: Write failure EINVAL in pid:22 [ 29.991856][ T354] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 29.998060][ T354] rust_binder: Read failure Err(EFAULT) in pid:31 [ 30.016779][ T354] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.055848][ T10] usb 3-1: config 0 has no interfaces? [ 30.069612][ T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 30.078793][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.086845][ T10] usb 3-1: Product: syz [ 30.091399][ T10] usb 3-1: Manufacturer: syz [ 30.096037][ T10] usb 3-1: SerialNumber: syz [ 30.101743][ T10] usb 3-1: config 0 descriptor?? [ 30.114526][ T64] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 30.174518][ T45] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 30.244526][ T64] usb 4-1: device descriptor read/64, error -71 [ 30.274527][ T86] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 30.304837][ T45] usb 1-1: device descriptor read/64, error -71 [ 30.309228][ T331] netlink: 'syz.2.9': attribute type 4 has an invalid length. [ 30.319897][ T330] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9'. [ 30.328971][ T330] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.375458][ T357] usb 3-1: USB disconnect, device number 2 [ 30.424489][ T86] usb 2-1: Using ep0 maxpacket: 8 [ 30.430717][ T86] usb 2-1: config 2 has an invalid interface number: 83 but max is 0 [ 30.438937][ T86] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 30.449284][ T86] usb 2-1: config 2 has no interface number 0 [ 30.455652][ T86] usb 2-1: config 2 interface 83 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 30.466724][ T86] usb 2-1: config 2 interface 83 altsetting 1 bulk endpoint 0x7 has invalid maxpacket 0 [ 30.476674][ T86] usb 2-1: config 2 interface 83 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 30.489819][ T86] usb 2-1: config 2 interface 83 has no altsetting 0 [ 30.494482][ T64] usb 4-1: device descriptor read/64, error -71 [ 30.498506][ T86] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.b5 [ 30.511902][ T86] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.519965][ T86] usb 2-1: Product: syz [ 30.524137][ T86] usb 2-1: Manufacturer: syz [ 30.528760][ T86] usb 2-1: SerialNumber: syz [ 30.554758][ T45] usb 1-1: device descriptor read/64, error -71 [ 30.604715][ T64] usb usb4-port1: attempt power cycle [ 30.664572][ T45] usb usb1-port1: attempt power cycle [ 30.739196][ T356] batadv_slave_0: entered promiscuous mode [ 30.749234][ T355] batadv_slave_0: left promiscuous mode [ 30.838362][ T86] usb 2-1: USB disconnect, device number 2 [ 30.939482][ T366] overlayfs: missing 'lowerdir' [ 30.944532][ T64] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 30.945236][ T366] netlink: 'syz.2.20': attribute type 63 has an invalid length. [ 30.959865][ T366] netlink: 5 bytes leftover after parsing attributes in process `syz.2.20'. [ 30.968742][ T366] gretap0: entered allmulticast mode [ 30.974304][ T366] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 30.975724][ T64] usb 4-1: device descriptor read/8, error -71 [ 31.014509][ T45] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 31.035819][ T45] usb 1-1: device descriptor read/8, error -71 [ 31.125543][ T64] usb 4-1: device descriptor read/8, error -71 [ 31.165623][ T45] usb 1-1: device descriptor read/8, error -71 [ 31.356973][ T382] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:35 [ 31.357112][ T382] rust_binder: Write failure EINVAL in pid:35 [ 31.374702][ T64] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 31.404504][ T45] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 31.413114][ T64] usb 4-1: device descriptor read/8, error -71 [ 31.432076][ T45] usb 1-1: device descriptor read/8, error -71 [ 31.444547][ T358] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 31.471395][ T391] overlayfs: workdir and upperdir must be separate subtrees [ 31.545489][ T64] usb 4-1: device descriptor read/8, error -71 [ 31.567129][ T45] usb 1-1: device descriptor read/8, error -71 [ 31.568771][ T395] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.573859][ T393] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:47 [ 31.604488][ T358] usb 3-1: Using ep0 maxpacket: 32 [ 31.619904][ T358] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.630827][ T358] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 31.639919][ T358] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.648683][ T358] usb 3-1: config 0 descriptor?? [ 31.655588][ T64] usb usb4-port1: unable to enumerate USB device [ 31.674541][ T45] usb usb1-port1: unable to enumerate USB device [ 31.814483][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 31.964515][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 31.970676][ T31] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 31.983628][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 31.990291][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 31.999389][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.008194][ T31] usb 2-1: config 0 descriptor?? [ 32.057846][ T358] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 32.064913][ T358] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 32.071742][ T358] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 32.078592][ T358] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 32.085431][ T358] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 32.093158][ T358] arvo 0003:1E7D:30D4.0001: hidraw0: USB HID v0.05 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 32.252643][ T36] kauditd_printk_skb: 97 callbacks suppressed [ 32.252661][ T36] audit: type=1400 audit(1750784092.470:171): avc: denied { create } for pid=399 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 32.284114][ T358] arvo 0003:1E7D:30D4.0001: couldn't init struct arvo_device [ 32.284223][ T36] audit: type=1400 audit(1750784092.470:172): avc: denied { setopt } for pid=399 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 32.314531][ T358] arvo 0003:1E7D:30D4.0001: couldn't install keyboard [ 32.337570][ T358] arvo 0003:1E7D:30D4.0001: probe with driver arvo failed with error -5 [ 32.342702][ T413] FAT-fs (rnullb0): bogus number of reserved sectors [ 32.342787][ T36] audit: type=1400 audit(1750784092.560:173): avc: denied { mounton } for pid=412 comm="syz.0.33" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 32.376349][ T413] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 32.413361][ T36] audit: type=1400 audit(1750784092.630:174): avc: denied { ioctl } for pid=420 comm="syz.0.36" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 32.458724][ T31] logitech 0003:046D:C286.0002: hidraw0: USB HID v0.03 Device [HID 046d:c286] on usb-dummy_hcd.1-1/input0 [ 32.481765][ T86] usb 3-1: USB disconnect, device number 3 [ 32.490670][ T31] logitech 0003:046D:C286.0002: no inputs found [ 32.534518][ T36] audit: type=1400 audit(1750784092.750:175): avc: denied { getopt } for pid=435 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 32.538437][ T438] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=33 sclass=netlink_tcpdiag_socket pid=438 comm=syz.3.41 [ 32.573854][ T36] audit: type=1400 audit(1750784092.790:176): avc: denied { create } for pid=437 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 32.644011][ T394] rust_binder: Write failure EINVAL in pid:47 [ 32.644145][ T393] rust_binder: Error in use_page_slow: ESRCH [ 32.650532][ T393] rust_binder: use_range failure ESRCH [ 32.660378][ T393] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 32.666396][ T393] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 32.674385][ T393] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:47 [ 32.792726][ T36] audit: type=1400 audit(1750784093.010:177): avc: denied { bind } for pid=442 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 32.814494][ T31] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 32.821366][ T36] audit: type=1400 audit(1750784093.010:178): avc: denied { listen } for pid=442 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 32.848037][ T36] audit: type=1400 audit(1750784093.010:179): avc: denied { connect } for pid=442 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 32.868207][ T36] audit: type=1400 audit(1750784093.010:180): avc: denied { write } for pid=442 comm="syz.0.42" path="socket:[4402]" dev="sockfs" ino=4402 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 32.962606][ T453] rust_binder: Error while translating object. [ 32.962641][ T453] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 32.969307][ T453] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:27 [ 32.981535][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 33.000892][ T31] usb 4-1: config 0 has no interfaces? [ 33.011284][ T31] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 33.025105][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.033992][ T31] usb 4-1: config 0 descriptor?? [ 33.201474][ T45] usb 2-1: USB disconnect, device number 3 [ 33.257326][ T472] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.272800][ T472] rust_binder: Write failure EFAULT in pid:58 [ 33.304585][ T86] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 33.324488][ T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 33.369052][ T438] rust_binder: Error in use_page_slow: ESRCH [ 33.369080][ T438] rust_binder: use_range failure ESRCH [ 33.375374][ T438] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 33.380924][ T438] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 33.389156][ T438] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:30 [ 33.402288][ T357] usb 4-1: USB disconnect, device number 6 [ 33.484637][ T31] usb 1-1: device descriptor read/64, error -71 [ 33.505096][ T86] usb 3-1: Using ep0 maxpacket: 16 [ 33.511505][ T86] usb 3-1: config 4 has an invalid interface number: 15 but max is 0 [ 33.519960][ T86] usb 3-1: config 4 has no interface number 0 [ 33.526518][ T86] usb 3-1: config 4 interface 15 has no altsetting 0 [ 33.535654][ T86] usb 3-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.44 [ 33.544962][ T86] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.552961][ T86] usb 3-1: Product: syz [ 33.557245][ T86] usb 3-1: Manufacturer: syz [ 33.561859][ T86] usb 3-1: SerialNumber: syz [ 33.681965][ T482] rust_binder: Write failure EINVAL in pid:63 [ 33.724462][ T31] usb 1-1: device descriptor read/64, error -71 [ 33.777501][ T460] rust_binder: Write failure EINVAL in pid:37 [ 33.805661][ T86] usb 3-1: USB disconnect, device number 4 [ 33.965116][ T484] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 144, limit: 160, size: 254) [ 33.965144][ T484] rust_binder: Error while translating object. [ 33.976148][ T484] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.982440][ T484] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:34 [ 33.994493][ T31] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 34.115911][ T489] rust_binder: Write failure EINVAL in pid:39 [ 34.140452][ T491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.57'. [ 34.155718][ T31] usb 1-1: device descriptor read/64, error -71 [ 34.166746][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 34.394515][ T31] usb 1-1: device descriptor read/64, error -71 [ 34.414943][ T497] erofs: (device rnullb0): erofs_read_superblock: cannot find valid erofs superblock [ 34.425695][ T498] erofs: (device rnullb0): erofs_read_superblock: cannot find valid erofs superblock [ 34.504544][ T31] usb usb1-port1: attempt power cycle [ 34.579978][ T513] SELinux: security_context_str_to_sid () failed with errno=-22 [ 34.844540][ T31] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 34.865939][ T31] usb 1-1: device descriptor read/8, error -71 [ 34.904510][ T86] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 34.995622][ T31] usb 1-1: device descriptor read/8, error -71 [ 35.054512][ T86] usb 3-1: Invalid ep0 maxpacket: 32 [ 35.184531][ T86] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 35.234542][ T31] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 35.255518][ T31] usb 1-1: device descriptor read/8, error -71 [ 35.334565][ T86] usb 3-1: Invalid ep0 maxpacket: 32 [ 35.338128][ T517] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 35.339959][ T517] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 35.340085][ T86] usb usb3-port1: attempt power cycle [ 35.349871][ T517] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:77 [ 35.385483][ T31] usb 1-1: device descriptor read/8, error -71 [ 35.504703][ T31] usb usb1-port1: unable to enumerate USB device [ 35.694489][ T86] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 35.714806][ T86] usb 3-1: Invalid ep0 maxpacket: 32 [ 35.844485][ T86] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 35.864952][ T86] usb 3-1: Invalid ep0 maxpacket: 32 [ 35.870375][ T86] usb usb3-port1: unable to enumerate USB device [ 36.234490][ T493] Bluetooth: hci0: command 0x1003 tx timeout [ 36.251067][ T527] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 36.259579][ T527] overlayfs: missing 'lowerdir' [ 36.264544][ T492] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 36.274988][ T527] can0: slcan on ptm1. [ 36.357302][ T526] can0 (unregistered): slcan off ptm1. [ 36.714466][ T86] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 36.874445][ T86] usb 2-1: Using ep0 maxpacket: 32 [ 36.890474][ T86] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.911448][ T86] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 36.934316][ T86] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.953705][ T86] usb 2-1: config 0 descriptor?? [ 37.192387][ T548] binder: Bad value for 'stats' [ 37.265836][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 37.265855][ T36] audit: type=1400 audit(1750784097.490:205): avc: denied { bind } for pid=549 comm="syz.3.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 37.266103][ T551] rust_binder: Error while translating object. [ 37.291092][ T551] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 37.297350][ T551] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:54 [ 37.370897][ T86] arvo 0003:1E7D:30D4.0003: unknown main item tag 0x0 [ 37.386851][ T86] arvo 0003:1E7D:30D4.0003: unknown main item tag 0x0 [ 37.393705][ T86] arvo 0003:1E7D:30D4.0003: unknown main item tag 0x0 [ 37.402029][ T86] arvo 0003:1E7D:30D4.0003: unknown main item tag 0x0 [ 37.409038][ T86] arvo 0003:1E7D:30D4.0003: unknown main item tag 0x0 [ 37.421590][ T86] arvo 0003:1E7D:30D4.0003: hidraw0: USB HID v0.05 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 37.434790][ T36] audit: type=1400 audit(1750784097.660:206): avc: denied { read } for pid=559 comm="syz.0.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 37.471774][ T564] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:46 [ 37.526476][ T563] rust_binder: Write failure EINVAL in pid:46 [ 37.573017][ T86] arvo 0003:1E7D:30D4.0003: couldn't init struct arvo_device [ 37.586657][ T86] arvo 0003:1E7D:30D4.0003: couldn't install keyboard [ 37.594448][ T86] arvo 0003:1E7D:30D4.0003: probe with driver arvo failed with error -5 [ 37.693478][ T36] audit: type=1400 audit(1750784097.910:207): avc: denied { load_policy } for pid=566 comm="syz.2.84" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 37.718623][ T568] SELinux: failed to load policy [ 37.726750][ T567] can0: slcan on ttyS3. [ 37.733306][ T36] audit: type=1400 audit(1750784097.950:208): avc: denied { read } for pid=149 comm="dhcpcd" name="n16" dev="tmpfs" ino=940 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.754894][ T36] audit: type=1400 audit(1750784097.950:209): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=940 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.777786][ T36] audit: type=1400 audit(1750784097.950:210): avc: denied { getattr } for pid=149 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=940 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.782972][ T31] usb 2-1: USB disconnect, device number 4 [ 37.816082][ T36] audit: type=1400 audit(1750784098.030:211): avc: denied { search } for pid=569 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 37.841355][ T36] audit: type=1400 audit(1750784098.040:212): avc: denied { read } for pid=571 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 37.842714][ T567] can0 (unregistered): slcan off ttyS3. [ 37.895155][ T36] audit: type=1400 audit(1750784098.040:213): avc: denied { open } for pid=571 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 37.930623][ T36] audit: type=1400 audit(1750784098.040:214): avc: denied { getattr } for pid=571 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 37.972862][ T582] exFAT-fs (rnullb0): invalid boot record signature [ 37.979604][ T582] exFAT-fs (rnullb0): failed to read boot sector [ 37.986219][ T582] exFAT-fs (rnullb0): failed to recognize exfat type [ 38.072367][ T601] rust_binder: Write failure EINVAL in pid:66 [ 38.251265][ T625] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.299212][ T633] random: crng reseeded on system resumption [ 38.320568][ T637] rust_binder: Failed to allocate buffer. len:16, is_oneway:true [ 38.455281][ T650] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 38.472790][ T650] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:81 [ 38.472838][ T650] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.507647][ T650] rust_binder: Read failure Err(EFAULT) in pid:81 [ 38.533705][ T657] rust_binder: Fixups oob 154 158 203 174 [ 38.543052][ T657] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 38.553164][ T657] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 38.570943][ T657] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:55 [ 38.613101][ T670] overlayfs: failed to resolve './file0': -2 [ 38.784918][ T684] x_tables: duplicate underflow at hook 1 [ 38.805970][ T684] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 39.102494][ T707] rust_binder: Error while translating object. [ 39.102542][ T707] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 39.139257][ T707] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:81 [ 39.230024][ T710] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.394461][ T9] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 39.585935][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 39.608636][ T720] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 39.608690][ T720] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:123 [ 39.609488][ T9] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 39.654647][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.675947][ T9] usb 4-1: Product: syz [ 39.680166][ T9] usb 4-1: Manufacturer: syz [ 39.694455][ T9] usb 4-1: SerialNumber: syz [ 39.699963][ T9] usb 4-1: config 0 descriptor?? [ 39.709316][ T9] hub 4-1:0.0: bad descriptor, ignoring hub [ 39.715453][ T9] hub 4-1:0.0: probe with driver hub failed with error -5 [ 40.239273][ T726] /dev/rnullb0: Can't open blockdev [ 40.347262][ T735] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:88 [ 40.379399][ T737] rust_binder: Write failure EINVAL in pid:101 [ 40.444450][ T64] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 40.459565][ T742] rust_binder: Write failure EINVAL in pid:104 [ 40.604490][ T64] usb 2-1: Using ep0 maxpacket: 16 [ 40.624780][ T64] usb 2-1: unable to get BOS descriptor or descriptor too short [ 40.634730][ T64] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 40.642411][ T64] usb 2-1: can't read configurations, error -71 [ 41.474512][ T64] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 41.624451][ T64] usb 2-1: Using ep0 maxpacket: 16 [ 41.630874][ T64] usb 2-1: config 0 has an invalid interface number: 27 but max is 0 [ 41.639310][ T64] usb 2-1: config 0 has no interface number 0 [ 41.645735][ T64] usb 2-1: config 0 interface 27 has no altsetting 0 [ 41.654128][ T64] usb 2-1: New USB device found, idVendor=04a5, idProduct=4027, bcdDevice=f2.12 [ 41.663657][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.671938][ T64] usb 2-1: Product: syz [ 41.684498][ T64] usb 2-1: Manufacturer: syz [ 41.690354][ T64] usb 2-1: SerialNumber: syz [ 41.701337][ T64] usb 2-1: config 0 descriptor?? [ 41.883363][ T761] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 41.916850][ T64] pl2303 2-1:0.27: required endpoints missing [ 41.937785][ T64] usb 2-1: USB disconnect, device number 6 [ 42.330109][ T9] usb 4-1: USB disconnect, device number 7 [ 42.443480][ T770] overlayfs: failed to resolve './file1': -2 [ 42.516526][ T36] kauditd_printk_skb: 37 callbacks suppressed [ 42.516545][ T36] audit: type=1400 audit(1750784102.740:252): avc: denied { create } for pid=773 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 42.549703][ T36] audit: type=1400 audit(1750784102.770:253): avc: denied { setopt } for pid=773 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 42.570807][ T36] audit: type=1400 audit(1750784102.770:254): avc: denied { bind } for pid=773 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 42.594107][ T36] audit: type=1400 audit(1750784102.770:255): avc: denied { name_bind } for pid=773 comm="syz.1.139" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 42.620042][ T36] audit: type=1400 audit(1750784102.770:256): avc: denied { node_bind } for pid=773 comm="syz.1.139" saddr=fe80::aa src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 42.643684][ T36] audit: type=1400 audit(1750784102.770:257): avc: denied { setopt } for pid=773 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 42.764497][ T477] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 42.804490][ T9] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 42.925976][ T477] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.937045][ T477] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.947619][ T477] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 42.957052][ T477] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.966202][ T477] usb 3-1: config 0 descriptor?? [ 42.985964][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 43.014850][ T9] usb 4-1: config 1 interface 0 altsetting 73 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 43.030593][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 43.040080][ T9] usb 4-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.40 [ 43.050683][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.058931][ T9] usb 4-1: Product: syz [ 43.063194][ T9] usb 4-1: Manufacturer: ꯑ螟ﶻ쐌뻖૊ᦝይ䡕뻿퇙㚨 [ 43.071554][ T9] usb 4-1: SerialNumber: syz [ 43.281374][ T776] rust_binder: Write failure EINVAL in pid:75 [ 43.281544][ T776] rust_binder: Read failure Err(EAGAIN) in pid:75 [ 43.291045][ T9] usbhid 4-1:1.0: can't add hid device: -71 [ 43.303621][ T9] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 43.312566][ T9] usb 4-1: USB disconnect, device number 8 [ 43.344463][ T31] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 43.495564][ T31] usb 2-1: config 9 has an invalid interface number: 217 but max is 2 [ 43.503793][ T31] usb 2-1: config 9 has an invalid interface number: 18 but max is 2 [ 43.511944][ T31] usb 2-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 43.520683][ T31] usb 2-1: config 9 has an invalid interface number: 156 but max is 2 [ 43.528904][ T31] usb 2-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 43.537662][ T31] usb 2-1: config 9 has an invalid interface number: 53 but max is 2 [ 43.545786][ T31] usb 2-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 43.554520][ T31] usb 2-1: config 9 has 4 interfaces, different from the descriptor's value: 3 [ 43.563471][ T31] usb 2-1: config 9 has no interface number 0 [ 43.569599][ T31] usb 2-1: config 9 has no interface number 1 [ 43.575708][ T31] usb 2-1: config 9 has no interface number 2 [ 43.581804][ T31] usb 2-1: config 9 has no interface number 3 [ 43.582194][ T477] usb 3-1: string descriptor 0 read error: -22 [ 43.589190][ T31] usb 2-1: config 9 interface 217 altsetting 8 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 43.605229][ T31] usb 2-1: config 9 interface 217 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 43.618402][ T31] usb 2-1: too many endpoints for config 9 interface 18 altsetting 93: 173, using maximum allowed: 30 [ 43.629438][ T31] usb 2-1: config 9 interface 18 altsetting 93 endpoint 0x5 has an invalid bInterval 255, changing to 11 [ 43.640713][ T31] usb 2-1: config 9 interface 18 altsetting 93 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 43.651723][ T31] usb 2-1: config 9 interface 18 altsetting 93 has a duplicate endpoint with address 0x1, skipping [ 43.662480][ T31] usb 2-1: config 9 interface 18 altsetting 93 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 43.673502][ T31] usb 2-1: config 9 interface 18 altsetting 93 has an invalid descriptor for endpoint zero, skipping [ 43.684434][ T31] usb 2-1: config 9 interface 18 altsetting 93 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 43.695557][ T31] usb 2-1: config 9 interface 18 altsetting 93 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 43.706734][ T31] usb 2-1: config 9 interface 18 altsetting 93 has 8 endpoint descriptors, different from the interface descriptor's value: 173 [ 43.720081][ T31] usb 2-1: config 9 interface 156 altsetting 24 has a duplicate endpoint with address 0x8, skipping [ 43.731160][ T31] usb 2-1: config 9 interface 156 altsetting 24 has a duplicate endpoint with address 0xE, skipping [ 43.742225][ T31] usb 2-1: config 9 interface 156 altsetting 24 has a duplicate endpoint with address 0xC, skipping [ 43.754253][ T31] usb 2-1: config 9 interface 156 altsetting 24 has an invalid descriptor for endpoint zero, skipping [ 43.765573][ T31] usb 2-1: config 9 interface 156 altsetting 24 has a duplicate endpoint with address 0x8, skipping [ 43.776550][ T31] usb 2-1: config 9 interface 156 altsetting 24 has a duplicate endpoint with address 0x5, skipping [ 43.787539][ T31] usb 2-1: config 9 interface 156 altsetting 24 has a duplicate endpoint with address 0x5, skipping [ 43.798538][ T31] usb 2-1: config 9 interface 156 altsetting 24 endpoint 0x7 has invalid wMaxPacketSize 0 [ 43.808711][ T31] usb 2-1: config 9 interface 156 altsetting 24 has a duplicate endpoint with address 0x5, skipping [ 43.822661][ T31] usb 2-1: config 9 interface 156 altsetting 24 has a duplicate endpoint with address 0x7, skipping [ 43.834950][ T31] usb 2-1: config 9 interface 156 altsetting 24 bulk endpoint 0x6 has invalid maxpacket 32 [ 43.845090][ T31] usb 2-1: config 9 interface 156 altsetting 24 has a duplicate endpoint with address 0x8, skipping [ 43.857475][ T31] usb 2-1: config 9 interface 53 altsetting 49 has a duplicate endpoint with address 0xC, skipping [ 43.868252][ T31] usb 2-1: config 9 interface 53 altsetting 49 has a duplicate endpoint with address 0x2, skipping [ 43.878991][ T31] usb 2-1: config 9 interface 53 altsetting 49 has an invalid descriptor for endpoint zero, skipping [ 43.889958][ T31] usb 2-1: config 9 interface 53 altsetting 49 has a duplicate endpoint with address 0x2, skipping [ 43.900704][ T31] usb 2-1: config 9 interface 53 altsetting 49 has a duplicate endpoint with address 0xC, skipping [ 43.914338][ T31] usb 2-1: config 9 interface 53 altsetting 49 has a duplicate endpoint with address 0x6, skipping [ 43.922608][ T36] audit: type=1400 audit(1750784104.140:258): avc: denied { create } for pid=794 comm="syz.3.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 43.925246][ T31] usb 2-1: config 9 interface 53 altsetting 49 has a duplicate endpoint with address 0xC, skipping [ 43.955151][ T31] usb 2-1: config 9 interface 217 has no altsetting 0 [ 43.961944][ T31] usb 2-1: config 9 interface 18 has no altsetting 0 [ 43.968697][ T31] usb 2-1: config 9 interface 156 has no altsetting 0 [ 43.975568][ T31] usb 2-1: config 9 interface 53 has no altsetting 0 [ 43.983745][ T31] usb 2-1: New USB device found, idVendor=12d1, idProduct=dbdf, bcdDevice=fa.46 [ 43.986125][ T772] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.993035][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.997049][ T477] uclogic 0003:256C:006D.0004: failed retrieving string descriptor #100: -71 [ 43.999550][ T31] usb 2-1: Product: ဇ [ 44.016298][ T477] uclogic 0003:256C:006D.0004: failed retrieving pen parameters: -71 [ 44.016322][ T477] uclogic 0003:256C:006D.0004: failed probing pen v1 parameters: -71 [ 44.024806][ T31] usb 2-1: Manufacturer: ⾷視んﲢ뼿ꕽ瘝避季杖ǣ娂꤬늏̛䅲僚ꓠ쫎㵵㙜귫嬑▫錡ᵉ鳘麧郸閝֌ꀒ殰壯讶຦㗹ꏩ檀й੥荍撧䎎蟔宊㼺酘㻽벧ⷳᎍ풟鬔둭饰次ꚠ䖟茤無 [ 44.029150][ T477] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 44.036789][ T31] usb 2-1: SerialNumber: Г [ 44.075033][ T477] uclogic 0003:256C:006D.0004: probe with driver uclogic failed with error -71 [ 44.088864][ T477] usb 3-1: USB disconnect, device number 9 [ 44.094563][ T799] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 44.769574][ T36] audit: type=1400 audit(1750784104.990:259): avc: denied { write } for pid=801 comm="syz.3.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 44.791945][ T802] syz.3.147 uses obsolete (PF_INET,SOCK_PACKET) [ 44.963257][ T36] audit: type=1400 audit(1750784105.180:260): avc: denied { ioctl } for pid=803 comm="syz.2.148" path="socket:[6028]" dev="sockfs" ino=6028 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 45.155803][ T820] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.244475][ T86] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 45.325562][ T36] audit: type=1400 audit(1750784105.550:261): avc: denied { create } for pid=833 comm="syz.1.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 45.414463][ T86] usb 3-1: device descriptor read/64, error -71 [ 45.654458][ T86] usb 3-1: device descriptor read/64, error -71 [ 45.894481][ T86] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 46.024484][ T86] usb 3-1: device descriptor read/64, error -71 [ 46.264504][ T86] usb 3-1: device descriptor read/64, error -71 [ 46.374595][ T86] usb usb3-port1: attempt power cycle [ 46.714491][ T86] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 46.735610][ T86] usb 3-1: device descriptor read/8, error -71 [ 46.865640][ T86] usb 3-1: device descriptor read/8, error -71 [ 47.097781][ T31] usb 2-1: USB disconnect, device number 7 [ 47.115227][ T86] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 47.165539][ T86] usb 3-1: device descriptor read/8, error -71 [ 47.316397][ T86] usb 3-1: device descriptor read/8, error -71 [ 47.425980][ T86] usb usb3-port1: unable to enumerate USB device [ 47.652074][ T841] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.664671][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 47.664692][ T36] audit: type=1400 audit(1750784107.890:266): avc: denied { attach_queue } for pid=840 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 47.664790][ T841] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.829955][ T847] process 'syz.0.159' launched './file0' with NULL argv: empty string added [ 47.855948][ T851] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.856574][ T36] audit: type=1400 audit(1750784108.080:267): avc: denied { append } for pid=850 comm="syz.1.162" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 47.859065][ T851] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.904195][ T36] audit: type=1400 audit(1750784108.120:268): avc: denied { mount } for pid=855 comm="syz.0.163" name="/" dev="configfs" ino=2093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 47.905008][ T852] rust_binder: Write failure EINVAL in pid:181 [ 47.911993][ T856] ======================================================= [ 47.911993][ T856] WARNING: The mand mount option has been deprecated and [ 47.911993][ T856] and is ignored by this kernel. Remove the mand [ 47.911993][ T856] option from the mount to silence this warning. [ 47.911993][ T856] ======================================================= [ 47.933330][ T36] audit: type=1400 audit(1750784108.130:269): avc: denied { mounton } for pid=855 comm="syz.0.163" path="/33/file0" dev="configfs" ino=2093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 48.092814][ T36] audit: type=1400 audit(1750784108.310:270): avc: denied { ioctl } for pid=864 comm="syz.1.167" path="socket:[7233]" dev="sockfs" ino=7233 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.116029][ T867] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.131099][ T867] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.163583][ T869] rust_binder: Write failure EFAULT in pid:96 [ 48.170667][ T869] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 48.184599][ T869] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:96 [ 48.201109][ T36] audit: type=1400 audit(1750784108.420:271): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 48.267038][ T13] bridge_slave_1: left allmulticast mode [ 48.272809][ T13] bridge_slave_1: left promiscuous mode [ 48.282772][ T876] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.282975][ T876] rust_binder: Error while translating object. [ 48.288708][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.289580][ T877] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:101 [ 48.304583][ T876] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 48.313980][ T13] bridge_slave_0: left allmulticast mode [ 48.330566][ T876] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:189 [ 48.361992][ T13] bridge_slave_0: left promiscuous mode [ 48.391079][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.424485][ T36] audit: type=1400 audit(1750784108.640:272): avc: denied { listen } for pid=884 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.461511][ T36] audit: type=1400 audit(1750784108.650:273): avc: denied { read } for pid=884 comm="syz.1.175" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 48.488825][ T889] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.504482][ T36] audit: type=1400 audit(1750784108.650:274): avc: denied { open } for pid=884 comm="syz.1.175" path="/61/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 48.552556][ T36] audit: type=1400 audit(1750784108.650:275): avc: denied { ioctl } for pid=884 comm="syz.1.175" path="/61/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 48.628467][ T13] veth1_macvtap: left promiscuous mode [ 48.634037][ T13] veth0_vlan: left promiscuous mode [ 48.729205][ T905] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.784663][ T914] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.796539][ T895] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.812065][ T895] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.819327][ T895] bridge_slave_0: entered allmulticast mode [ 48.825848][ T895] bridge_slave_0: entered promiscuous mode [ 48.833185][ T895] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.840407][ T895] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.848325][ T895] bridge_slave_1: entered allmulticast mode [ 48.855180][ T895] bridge_slave_1: entered promiscuous mode [ 48.919658][ T925] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 48.940411][ T895] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.947534][ T895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.954856][ T895] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.961895][ T895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.994543][ T477] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 49.023870][ T895] veth0_vlan: entered promiscuous mode [ 49.036379][ T895] veth1_macvtap: entered promiscuous mode [ 49.079207][ T933] SELinux: failed to load policy [ 49.088810][ T933] rust_binder: Error in use_page_slow: ESRCH [ 49.088834][ T933] rust_binder: use_range failure ESRCH [ 49.095999][ T933] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 49.101616][ T933] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 49.110147][ T933] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:139 [ 49.134517][ T477] usb 4-1: device descriptor read/64, error -71 [ 49.171028][ T939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.191'. [ 49.175630][ T935] SELinux: security_context_str_to_sid () failed with errno=-22 [ 49.180388][ T939] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:141 [ 49.242317][ T944] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742) [ 49.251664][ T944] rust_binder: Error while translating object. [ 49.264142][ T944] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.270565][ T944] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:6 [ 49.384955][ T477] usb 4-1: device descriptor read/64, error -71 [ 49.514517][ T357] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 49.634523][ T477] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 49.664453][ T357] usb 5-1: Using ep0 maxpacket: 8 [ 49.670681][ T357] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 49.679244][ T357] usb 5-1: config 179 has no interface number 0 [ 49.685568][ T357] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 49.696859][ T357] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 49.708790][ T357] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 49.720569][ T357] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 49.721746][ T946] binder: Bad value for 'max' [ 49.732225][ T357] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 49.750644][ T357] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 49.761006][ T357] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.774523][ T944] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 49.781935][ T477] usb 4-1: device descriptor read/64, error -71 [ 49.986257][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input5 [ 50.034517][ T477] usb 4-1: device descriptor read/64, error -71 [ 50.084509][ T357] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 50.154906][ T477] usb usb4-port1: attempt power cycle [ 50.187656][ T944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.196445][ T944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.244472][ T357] usb 2-1: Using ep0 maxpacket: 8 [ 50.251245][ T357] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 163, changing to 11 [ 50.262779][ T357] usb 2-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 50.264487][ T31] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 50.275792][ T357] usb 2-1: config 1 interface 0 has no altsetting 0 [ 50.291456][ T357] usb 2-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.40 [ 50.300620][ T357] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.308744][ T357] usb 2-1: Product: syz [ 50.312989][ T357] usb 2-1: Manufacturer: syz [ 50.317664][ T357] usb 2-1: SerialNumber: syz [ 50.406019][ T358] usb 5-1: USB disconnect, device number 2 [ 50.406136][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 50.420334][ T358] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 50.420363][ C0] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 50.432315][ T31] usb 3-1: config 226 has an invalid descriptor of length 0, skipping remainder of the config [ 50.448569][ T31] usb 3-1: config 226 has 0 interfaces, different from the descriptor's value: 2 [ 50.461658][ T31] usb 3-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=d8.f5 [ 50.471469][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.479537][ T31] usb 3-1: Product: syz [ 50.483720][ T31] usb 3-1: Manufacturer: syz [ 50.488603][ T31] usb 3-1: SerialNumber: syz [ 50.504494][ T477] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 50.526272][ T477] usb 4-1: device descriptor read/8, error -71 [ 50.655543][ T477] usb 4-1: device descriptor read/8, error -71 [ 50.696686][ T953] overlayfs: missing 'lowerdir' [ 50.696686][ T952] overlayfs: missing 'lowerdir' [ 50.710120][ T31] usb 3-1: USB disconnect, device number 14 [ 50.728751][ T357] usbhid 2-1:1.0: can't add hid device: -71 [ 50.734765][ T357] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 50.745072][ T357] usb 2-1: USB disconnect, device number 8 [ 50.894609][ T477] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 50.915656][ T477] usb 4-1: device descriptor read/8, error -71 [ 50.948102][ T962] bpf: Bad value for 'uid' [ 50.978403][ T964] random: crng reseeded on system resumption [ 51.045501][ T477] usb 4-1: device descriptor read/8, error -71 [ 51.154632][ T477] usb usb4-port1: unable to enumerate USB device [ 51.268388][ T977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.203'. [ 51.534463][ T357] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 51.652540][ T985] binder: Unknown parameter 'ǭ' [ 51.684566][ T357] usb 2-1: Using ep0 maxpacket: 16 [ 51.690916][ T357] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 51.699160][ T357] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.709392][ T357] usb 2-1: config 0 has no interface number 0 [ 51.717043][ T357] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 51.726141][ T357] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.734127][ T357] usb 2-1: Product: syz [ 51.738312][ T357] usb 2-1: Manufacturer: syz [ 51.742920][ T357] usb 2-1: SerialNumber: syz [ 51.748237][ T357] usb 2-1: config 0 descriptor?? [ 51.929616][ T995] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 51.938443][ T995] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 51.955988][ T45] usb 2-1: USB disconnect, device number 9 [ 52.014456][ T31] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 52.061183][ T1004] rust_binder: Write failure EINVAL in pid:39 [ 52.082278][ T1008] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.165662][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.188967][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 52.202183][ T1015] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.204231][ T31] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 52.226159][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 52.234288][ T31] usb 4-1: SerialNumber: syz [ 52.278796][ T1015] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.316616][ T1020] rust_binder: Write failure EINVAL in pid:165 [ 52.341556][ T1022] rust_binder: Write failure EFAULT in pid:167 [ 52.446151][ T987] rtc_cmos 00:00: Alarms can be up to one day in the future [ 52.462591][ T986] rtc_cmos 00:00: Alarms can be up to one day in the future [ 52.472420][ T31] usb 4-1: 0:2 : does not exist [ 52.479863][ T64] rtc_cmos 00:00: Alarms can be up to one day in the future [ 52.494059][ T31] usb 4-1: unit 5 not found! [ 52.499982][ T64] rtc_cmos 00:00: Alarms can be up to one day in the future [ 52.515742][ T31] usb 4-1: USB disconnect, device number 13 [ 52.524259][ T64] rtc_cmos 00:00: Alarms can be up to one day in the future [ 52.535795][ T64] rtc_cmos 00:00: Alarms can be up to one day in the future [ 52.536007][ T434] udevd[434]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 52.543105][ T64] rtc rtc0: __rtc_set_alarm: err=-22 [ 52.724500][ T357] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 52.875586][ T357] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.893485][ T357] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.903361][ T357] usb 2-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.00 [ 52.912606][ T357] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.921646][ T357] usb 2-1: config 0 descriptor?? [ 53.095554][ T1053] netlink: 'syz.3.231': attribute type 12 has an invalid length. [ 53.113566][ T36] kauditd_printk_skb: 30 callbacks suppressed [ 53.113586][ T36] audit: type=1400 audit(1750784113.330:306): avc: denied { mounton } for pid=1052 comm="syz.3.231" path="/38/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 53.245014][ T1063] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 53.258539][ T1063] SELinux: failed to load policy [ 53.356748][ T357] wacom 0003:056A:00E5.0005: unknown main item tag 0x0 [ 53.375651][ T357] wacom 0003:056A:00E5.0005: hidraw0: USB HID vfd.fd Device [HID 056a:00e5] on usb-dummy_hcd.1-1/input0 [ 53.545974][ T1088] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 53.546001][ T1088] rust_binder: Read failure Err(EFAULT) in pid:129 [ 53.586987][ T1027] rust_binder: Write failure EFAULT in pid:232 [ 53.692016][ T1094] rust_binder: Write failure EINVAL in pid:199 [ 53.725528][ T31] usb 2-1: USB disconnect, device number 10 [ 54.196968][ T1098] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:69 [ 54.197427][ T1098] rust_binder: Error while translating object. [ 54.206706][ T1098] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 54.212907][ T1098] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:69 [ 54.265396][ T1103] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1103 comm=syz.1.247 [ 54.302137][ T1105] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.333519][ T1110] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:74 [ 54.342607][ T36] audit: type=1400 audit(1750784114.560:307): avc: denied { bind } for pid=1107 comm="syz.4.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 54.381432][ T1112] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.382507][ T1112] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 54.391555][ T1112] rust_binder: Read failure Err(EFAULT) in pid:242 [ 54.446361][ T36] audit: type=1400 audit(1750784114.670:308): avc: denied { map } for pid=1122 comm="syz.3.256" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 54.476972][ T36] audit: type=1400 audit(1750784114.670:309): avc: denied { execute } for pid=1122 comm="syz.3.256" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 54.478711][ T1124] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 54.528248][ T1124] rust_binder: Write failure EINVAL in pid:76 [ 54.531316][ T1124] rust_binder: Write failure EFAULT in pid:76 [ 54.559695][ T1130] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 54.638591][ T1144] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:148 [ 54.661778][ T36] audit: type=1400 audit(1750784114.880:310): avc: denied { read } for pid=1117 comm="syz.1.254" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 54.675207][ T1148] netlink: 'syz.4.263': attribute type 5 has an invalid length. [ 54.712889][ T36] audit: type=1400 audit(1750784114.880:311): avc: denied { open } for pid=1117 comm="syz.1.254" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 54.713261][ T1148] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.263'. [ 54.772757][ T1153] /dev/nbd1: Can't lookup blockdev [ 54.822625][ T1160] rust_binder: Write failure EINVAL in pid:154 [ 54.838636][ T1164] can0: slcan on ttyS3. [ 54.866151][ T1167] syzkaller0: entered promiscuous mode [ 54.873632][ T1167] syzkaller0: entered allmulticast mode [ 54.908422][ T1164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.270'. [ 54.925699][ T1163] can0 (unregistered): slcan off ttyS3. [ 54.973519][ T36] audit: type=1400 audit(1750784115.190:312): avc: denied { accept } for pid=1178 comm="syz.2.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.032932][ T36] audit: type=1400 audit(1750784115.230:313): avc: denied { bind } for pid=1182 comm="syz.1.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.057894][ T1190] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 55.057930][ T1190] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:160 [ 55.144548][ T357] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 55.314460][ T357] usb 5-1: device descriptor read/64, error -71 [ 55.420201][ T36] audit: type=1400 audit(1750784115.640:314): avc: denied { bind } for pid=1201 comm="syz.3.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 55.449480][ T1202] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 55.471896][ T1202] rust_binder: Write failure EINVAL in pid:165 [ 55.524641][ T477] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 55.584451][ T357] usb 5-1: device descriptor read/64, error -71 [ 55.705711][ T477] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 55.717462][ T477] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 55.728778][ T477] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 55.738883][ T477] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 55.752170][ T477] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 55.761511][ T477] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.772021][ T477] usb 2-1: config 0 descriptor?? [ 55.834531][ T357] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 55.974450][ T357] usb 5-1: device descriptor read/64, error -71 [ 56.076443][ T1224] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 56.076474][ T1224] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:222 [ 56.184486][ T477] plantronics 0003:047F:FFFF.0006: ignoring exceeding usage max [ 56.194707][ T1230] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 56.207534][ T477] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 56.223614][ T357] usb 5-1: device descriptor read/64, error -71 [ 56.231269][ T477] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 56.334606][ T357] usb usb5-port1: attempt power cycle [ 56.454552][ T64] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 56.605564][ T64] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 56.615307][ T64] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 56.625038][ T31] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 56.632684][ T64] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 56.646985][ T64] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 56.656078][ T64] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 56.664150][ T64] usb 3-1: Product: syz [ 56.668332][ T64] usb 3-1: Manufacturer: syz [ 56.672934][ T64] usb 3-1: SerialNumber: syz [ 56.684477][ T357] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 56.705545][ T357] usb 5-1: device descriptor read/8, error -71 [ 56.785707][ T36] audit: type=1400 audit(1750784117.010:315): avc: denied { append } for pid=1182 comm="syz.1.274" name="001" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 56.809374][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 56.824693][ T45] usb 2-1: USB disconnect, device number 11 [ 56.832143][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.842393][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 56.855742][ T357] usb 5-1: device descriptor read/8, error -71 [ 56.865081][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 56.874638][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.886939][ T64] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 56.897801][ T31] usb 4-1: Product: syz [ 56.901972][ T31] usb 4-1: Manufacturer: syz [ 56.907653][ T31] usb 4-1: SerialNumber: syz [ 56.986919][ T1242] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 56.987100][ T1242] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:263 [ 57.046361][ T1243] rust_binder: Error while translating object. [ 57.055611][ T1243] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 57.061817][ T1243] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:263 [ 57.072073][ T1243] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:263 [ 57.104494][ T357] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 57.135579][ T357] usb 5-1: device descriptor read/8, error -71 [ 57.154549][ T477] usb 3-1: USB disconnect, device number 15 [ 57.161354][ T477] usblp0: removed [ 57.265639][ T357] usb 5-1: device descriptor read/8, error -71 [ 57.374578][ T357] usb usb5-port1: unable to enumerate USB device [ 57.521182][ T31] usb 4-1: cannot find UAC_HEADER [ 57.532796][ T31] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 57.542594][ T31] usb 4-1: USB disconnect, device number 14 [ 57.543025][ T434] udevd[434]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 57.776993][ T1254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.291'. [ 57.934473][ T45] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 58.084440][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 58.090777][ T45] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 58.099097][ T45] usb 3-1: config 0 has no interface number 0 [ 58.105368][ T45] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 58.114561][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.126587][ T45] usb 3-1: config 0 descriptor?? [ 58.284458][ T477] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 58.334022][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 58.334039][ T36] audit: type=1400 audit(1750784118.550:318): avc: denied { write } for pid=1250 comm="syz.2.290" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 58.340154][ T357] usb 3-1: USB disconnect, device number 16 [ 58.359967][ T36] audit: type=1400 audit(1750784118.560:319): avc: denied { map } for pid=1250 comm="syz.2.290" path="socket:[10484]" dev="sockfs" ino=10484 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 58.387870][ T36] audit: type=1400 audit(1750784118.560:320): avc: denied { read accept } for pid=1250 comm="syz.2.290" path="socket:[10484]" dev="sockfs" ino=10484 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 58.445521][ T477] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 58.457527][ T477] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 58.468848][ T477] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 58.478663][ T477] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 58.491639][ T477] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 58.500812][ T477] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.512467][ T477] usb 4-1: config 0 descriptor?? [ 58.592677][ T1276] exFAT-fs (rnullb0): invalid boot record signature [ 58.599401][ T1276] exFAT-fs (rnullb0): failed to read boot sector [ 58.605844][ T1276] exFAT-fs (rnullb0): failed to recognize exfat type [ 58.627308][ T1278] tipc: Trying to set illegal importance in message [ 58.728723][ T36] audit: type=1400 audit(1750784118.950:321): avc: denied { ioctl } for pid=1285 comm="syz.4.302" path="socket:[10575]" dev="sockfs" ino=10575 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 58.756102][ T36] audit: type=1400 audit(1750784118.960:322): avc: denied { setcheckreqprot } for pid=1285 comm="syz.4.302" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 58.855118][ T36] audit: type=1400 audit(1750784119.080:323): avc: denied { create } for pid=1283 comm="syz.1.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 58.878643][ T1290] overlayfs: failed to resolve './file0': -2 [ 58.888465][ T36] audit: type=1400 audit(1750784119.110:324): avc: denied { write } for pid=1291 comm="syz.2.304" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 58.928427][ T477] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 58.954780][ T477] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 58.970452][ T477] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 59.185438][ T1271] rust_binder: validate_parent_fixup: new_min_offset=18446744072635809810, sg_entry.length=0 [ 59.185468][ T1271] rust_binder: Error while translating object. [ 59.196019][ T1271] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 59.202269][ T1271] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:172 [ 59.212954][ T31] usb 4-1: USB disconnect, device number 15 [ 59.392868][ T36] audit: type=1400 audit(1750784119.610:325): avc: denied { mount } for pid=1304 comm="syz.4.308" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 59.436516][ T36] audit: type=1400 audit(1750784119.650:326): avc: denied { unmount } for pid=895 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 59.486254][ T36] audit: type=1400 audit(1750784119.700:327): avc: denied { remount } for pid=1309 comm="syz.4.310" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 59.525124][ T1313] rust_binder: Error while translating object. [ 59.525165][ T1313] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 59.531477][ T1313] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:130 [ 59.603310][ T1318] bpf: Bad value for 'uid' [ 59.684782][ T1327] cgroup: fork rejected by pids controller in /syz4 [ 60.336597][ T1444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.336697][ T1444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.344048][ T1444] rust_binder: Write failure EFAULT in pid:275 [ 60.351071][ T1444] rust_binder: Write failure EINVAL in pid:275 [ 60.402726][ T305] bridge_slave_1: left allmulticast mode [ 60.436633][ T305] bridge_slave_1: left promiscuous mode [ 60.449388][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.465070][ T305] bridge_slave_0: left allmulticast mode [ 60.477739][ T305] bridge_slave_0: left promiscuous mode [ 60.497805][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.718434][ T305] veth1_macvtap: left promiscuous mode [ 60.724031][ T305] veth0_vlan: left promiscuous mode [ 60.757364][ T1454] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000efff30303078 not found [ 60.765639][ T1454] rust_binder: Write failure EINVAL in pid:180 [ 60.784575][ T1451] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.799648][ T1451] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.807046][ T1451] bridge_slave_0: entered allmulticast mode [ 60.813445][ T1451] bridge_slave_0: entered promiscuous mode [ 60.820123][ T1451] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.827284][ T1451] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.839386][ T1451] bridge_slave_1: entered allmulticast mode [ 60.845894][ T1451] bridge_slave_1: entered promiscuous mode [ 60.909072][ T1451] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.916186][ T1451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.923466][ T1451] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.930529][ T1451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.951683][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.959283][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.969632][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.976742][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.989186][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.996314][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.023305][ T1451] veth0_vlan: entered promiscuous mode [ 61.037092][ T1451] veth1_macvtap: entered promiscuous mode [ 61.086309][ T1473] rust_binder: Write failure EINVAL in pid:4 [ 61.094536][ T31] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 61.139004][ T1475] rust_binder: Error while translating object. [ 61.139036][ T1475] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 61.145506][ T1475] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:6 [ 61.199713][ T1480] binder: Bad value for 'max' [ 61.234497][ T45] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 61.242620][ T31] usb 3-1: device descriptor read/64, error -71 [ 61.256473][ T1484] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.269260][ T1487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1487 comm=syz.4.338 [ 61.359528][ T1496] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:25 [ 61.367957][ T1498] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.385554][ T45] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 61.404587][ T45] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 61.415356][ T45] usb 4-1: config 220 has no interface number 2 [ 61.422548][ T45] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 61.436284][ T1500] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.436281][ T45] usb 4-1: config 220 interface 0 has no altsetting 0 [ 61.436308][ T45] usb 4-1: config 220 interface 76 has no altsetting 0 [ 61.456747][ T45] usb 4-1: config 220 interface 1 has no altsetting 0 [ 61.465016][ T45] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 61.472019][ T1500] rust_binder: Error while translating object. [ 61.474129][ T1500] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 61.474304][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.484456][ T1500] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:284 [ 61.490101][ T45] usb 4-1: Product: syz [ 61.511379][ T31] usb 3-1: device descriptor read/64, error -71 [ 61.517780][ T45] usb 4-1: Manufacturer: syz [ 61.522553][ T45] usb 4-1: SerialNumber: syz [ 61.743021][ T45] usb 4-1: selecting invalid altsetting 0 [ 61.752545][ T45] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 61.766424][ T45] usb 4-1: No valid video chain found. [ 61.774480][ T31] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 61.788838][ T45] usb 4-1: USB disconnect, device number 16 [ 61.819934][ T1522] bpf: Bad value for 'mode' [ 61.876305][ T1524] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 61.876335][ T1524] rust_binder: Read failure Err(EFAULT) in pid:203 [ 61.917204][ T31] usb 3-1: device descriptor read/64, error -71 [ 61.938271][ T1528] batadv_slave_1: entered promiscuous mode [ 62.015229][ T1527] batadv_slave_1: left promiscuous mode [ 62.174486][ T31] usb 3-1: device descriptor read/64, error -71 [ 62.214175][ T1539] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.243280][ T1544] kvm: Disabled LAPIC found during irq injection [ 62.284564][ T31] usb usb3-port1: attempt power cycle [ 62.324456][ T357] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 62.454462][ T357] usb 4-1: device descriptor read/64, error -71 [ 62.624662][ T31] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 62.645681][ T31] usb 3-1: device descriptor read/8, error -71 [ 62.694516][ T357] usb 4-1: device descriptor read/64, error -71 [ 62.775909][ T31] usb 3-1: device descriptor read/8, error -71 [ 62.934587][ T357] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 63.024706][ T31] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 63.045544][ T31] usb 3-1: device descriptor read/8, error -71 [ 63.064540][ T357] usb 4-1: device descriptor read/64, error -71 [ 63.175620][ T31] usb 3-1: device descriptor read/8, error -71 [ 63.284565][ T31] usb usb3-port1: unable to enumerate USB device [ 63.304468][ T357] usb 4-1: device descriptor read/64, error -71 [ 63.414651][ T357] usb usb4-port1: attempt power cycle [ 63.754519][ T357] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 63.775553][ T357] usb 4-1: device descriptor read/8, error -71 [ 63.906097][ T357] usb 4-1: device descriptor read/8, error -71 [ 64.144692][ T357] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 64.165689][ T357] usb 4-1: device descriptor read/8, error -71 [ 64.295773][ T357] usb 4-1: device descriptor read/8, error -71 [ 64.404624][ T357] usb usb4-port1: unable to enumerate USB device [ 72.020688][ T1557] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.026717][ T1557] rust_binder: Error while translating object. [ 72.045893][ T1557] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 72.058978][ T1557] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:33 [ 72.145092][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 72.145113][ T36] audit: type=1400 audit(1750784132.370:338): avc: denied { shutdown } for pid=1566 comm="syz.2.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.344451][ T357] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 72.367788][ T45] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 72.508257][ T357] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 72.517906][ T357] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.524450][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 72.532683][ T357] usb 2-1: Product: syz [ 72.537449][ T357] usb 2-1: Manufacturer: syz [ 72.538529][ T45] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 72.556251][ T357] usb 2-1: SerialNumber: syz [ 72.575420][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 72.607789][ T45] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 72.617069][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.626043][ T45] usb 5-1: Product: syz [ 72.630953][ T45] usb 5-1: Manufacturer: syz [ 72.636173][ T45] usb 5-1: SerialNumber: syz [ 72.645323][ T45] usb 5-1: config 0 descriptor?? [ 73.304465][ T357] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 73.316655][ T1593] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 73.454522][ T357] usb 3-1: Using ep0 maxpacket: 8 [ 73.460678][ T357] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.470905][ T357] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x33, changing to 0x3 [ 73.482424][ T357] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 73.493249][ T357] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 73.504524][ T357] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 73.513603][ T357] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.521635][ T357] usb 3-1: Product: syz [ 73.525842][ T357] usb 3-1: Manufacturer: syz [ 73.530440][ T357] usb 3-1: SerialNumber: syz [ 73.535883][ T357] usb 3-1: config 0 descriptor?? [ 73.742696][ T357] usb 3-1: USB disconnect, device number 21 [ 74.584502][ T358] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 74.734447][ T358] usb 4-1: Using ep0 maxpacket: 32 [ 74.740842][ T358] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 74.753909][ T358] usb 4-1: config 0 interface 0 has no altsetting 0 [ 74.760626][ T358] usb 4-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 74.769746][ T358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.778957][ T358] usb 4-1: config 0 descriptor?? [ 75.097016][ T357] usb 5-1: USB disconnect, device number 7 [ 75.118512][ T1624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.385'. [ 75.120504][ T9] usb 2-1: USB disconnect, device number 12 [ 75.159649][ T36] audit: type=1400 audit(1750784135.380:339): avc: denied { write } for pid=1627 comm="syz.1.386" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 75.183315][ T36] audit: type=1400 audit(1750784135.380:340): avc: denied { setopt } for pid=1629 comm="syz.4.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 75.215783][ T358] hid-generic 0003:0403:97C1.0008: hidraw0: USB HID v0.02 Device [HID 0403:97c1] on usb-dummy_hcd.3-1/input0 [ 75.412221][ T9] usb 4-1: USB disconnect, device number 21 [ 75.504583][ T358] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 75.544478][ T357] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 75.594474][ T64] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 75.654438][ T358] usb 3-1: Using ep0 maxpacket: 8 [ 75.660618][ T358] usb 3-1: config 255 has an invalid interface number: 222 but max is 0 [ 75.669349][ T358] usb 3-1: config 255 has no interface number 0 [ 75.675656][ T358] usb 3-1: config 255 interface 222 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 75.688109][ T358] usb 3-1: New USB device found, idVendor=071d, idProduct=1005, bcdDevice=4d.b4 [ 75.697209][ T358] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.705248][ T358] usb 3-1: Product: syz [ 75.709415][ T358] usb 3-1: Manufacturer: syz [ 75.714003][ T358] usb 3-1: SerialNumber: syz [ 75.714461][ T357] usb 5-1: Using ep0 maxpacket: 16 [ 75.725247][ T357] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.736319][ T357] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.744910][ T64] usb 2-1: Using ep0 maxpacket: 8 [ 75.747465][ T357] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 75.753086][ T64] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.760515][ T357] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.772118][ T64] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 75.784605][ T357] usb 5-1: config 0 descriptor?? [ 75.787861][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.800768][ T64] usb 2-1: Product: syz [ 75.804987][ T64] usb 2-1: Manufacturer: syz [ 75.809675][ T64] usb 2-1: SerialNumber: syz [ 75.815238][ T64] usb 2-1: config 0 descriptor?? [ 75.927785][ T9] usb 3-1: USB disconnect, device number 22 [ 76.025066][ T64] usb 2-1: USB disconnect, device number 13 [ 76.197520][ T357] hid (null): global environment stack underflow [ 76.210662][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.218301][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.225754][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.233530][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.241056][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.248584][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.256039][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.263454][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.270910][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.278370][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.285805][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.293217][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.300666][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.308133][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.315591][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.323001][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.330435][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.337882][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.345324][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.352728][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.360322][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.367792][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.375243][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.382662][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.390296][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.397807][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.405277][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.412691][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.421312][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.428766][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.436206][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.443619][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.451087][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.458554][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.466225][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.481844][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.489474][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.497250][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.505133][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.512637][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.520251][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.527711][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.535420][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.542872][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.552723][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.564528][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.572070][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.579794][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.587827][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.597481][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.606723][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.614188][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.621684][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.629137][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.636561][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.643965][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.651397][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.658818][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.666237][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.673649][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.681071][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.688496][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.695914][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.703387][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.710816][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.718261][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.725683][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.733601][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.741037][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.748473][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.755901][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.763395][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.770823][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.778259][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.785708][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.793109][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.800537][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.807999][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.815534][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.822967][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.830397][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.838471][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.845943][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.853377][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.854455][ T64] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 76.860879][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.868537][ T358] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 76.875824][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.890894][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.898483][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.906058][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.913780][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.923229][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.925687][ T1667] input: syz1 as /devices/virtual/input/input11 [ 76.931138][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.951349][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.964532][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.972187][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 76.979873][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 77.038993][ T358] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 77.048709][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.059425][ T36] audit: type=1400 audit(1750784137.280:341): avc: denied { create } for pid=1674 comm="syz.4.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 77.064466][ T358] usb 2-1: config 0 has no interface number 0 [ 77.080389][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 77.093648][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 77.100426][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.101309][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 77.118800][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 77.124537][ T64] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 77.134769][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 77.139393][ T358] usb 2-1: config 0 interface 41 has no altsetting 0 [ 77.149397][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 77.162420][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 77.165657][ T64] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 77.174297][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 77.179850][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.188603][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 77.199433][ T358] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 77.203137][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 77.221411][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 77.221821][ T358] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.238712][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 77.239260][ T64] usb 3-1: config 0 descriptor?? [ 77.246643][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 77.259823][ T358] usb 2-1: Product: syz [ 77.260550][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 77.291797][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 77.295332][ T358] usb 2-1: Manufacturer: syz [ 77.304913][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 77.308542][ T358] usb 2-1: SerialNumber: syz [ 77.318259][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 77.324045][ T358] usb 2-1: config 0 descriptor?? [ 77.331766][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 77.339509][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 77.347803][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 77.355671][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 77.363629][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 77.371462][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 77.379408][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 77.387139][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 77.395195][ T357] hid-generic 0003:6161:4D15.0009: unknown main item tag 0x0 [ 77.402758][ T357] hid-generic 0003:6161:4D15.0009: collection stack underflow [ 77.410644][ T357] hid-generic 0003:6161:4D15.0009: item 0 1 0 12 parsing failed [ 77.419465][ T357] hid-generic 0003:6161:4D15.0009: probe with driver hid-generic failed with error -22 [ 77.436955][ T357] usb 5-1: USB disconnect, device number 8 [ 77.542133][ T1665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.552653][ T1665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.716205][ T64] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 77.725779][ T64] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 77.743238][ T64] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 77.764582][ T357] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 77.924449][ T357] usb 5-1: Using ep0 maxpacket: 16 [ 77.932421][ T357] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 77.941516][ T357] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 77.951246][ T357] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 77.960973][ T357] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 77.970905][ T357] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 77.980950][ T357] usb 5-1: config 1 interface 0 has no altsetting 0 [ 77.987714][ T357] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 77.996819][ T357] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.010083][ T357] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 78.174213][ T358] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 78.261210][ T357] scsi host1: usb-storage 5-1:1.0 [ 78.469623][ T64] usb 5-1: USB disconnect, device number 9 [ 79.024467][ T64] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 79.174451][ T64] usb 4-1: Using ep0 maxpacket: 32 [ 79.180970][ T64] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.192393][ T64] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.202621][ T64] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 79.212211][ T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.221712][ T64] usb 4-1: config 0 descriptor?? [ 79.588669][ T1707] kvm: kvm [1706]: vcpu0, guest rIP: 0x97 Unhandled WRMSR(0xc1) = 0x60000000000 [ 79.598270][ T1707] kvm: kvm [1706]: vcpu0, guest rIP: 0x97 Unhandled WRMSR(0xc2) = 0x60000000000 [ 79.612486][ T1707] kvm: kvm [1706]: vcpu0, guest rIP: 0x97 Unhandled WRMSR(0x11e) = 0x60000000000 [ 79.627491][ T1707] kvm: kvm [1706]: vcpu0, guest rIP: 0x97 Unhandled WRMSR(0x186) = 0x60000000000 [ 79.636496][ T358] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 79.636866][ T1707] kvm: kvm [1706]: vcpu0, guest rIP: 0x97 Unhandled WRMSR(0x187) = 0x60000000000 [ 79.651225][ T358] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 79.668371][ T64] hid-generic 0003:0403:6030.000B: unknown main item tag 0x0 [ 79.686732][ T64] hid-generic 0003:0403:6030.000B: hidraw1: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 79.703516][ T358] usb 2-1: USB disconnect, device number 14 [ 79.874721][ T86] usb 3-1: USB disconnect, device number 23 [ 79.896699][ T36] audit: type=1400 audit(1750784140.120:342): avc: denied { create } for pid=1712 comm="syz.4.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 80.024572][ T86] usb 3-1: new low-speed USB device number 24 using dummy_hcd [ 80.174485][ T358] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 80.175692][ T86] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 80.190593][ T86] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 80.198757][ T86] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 80.213325][ T86] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 80.227919][ T86] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 80.237997][ T86] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 80.248104][ T86] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 80.263400][ T86] usb 3-1: string descriptor 0 read error: -22 [ 80.269704][ T86] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 80.279008][ T86] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.295182][ T86] usb 3-1: config 0 descriptor?? [ 80.309844][ T86] hub 3-1:0.0: bad descriptor, ignoring hub [ 80.316022][ T86] hub 3-1:0.0: probe with driver hub failed with error -5 [ 80.323935][ T86] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input12 [ 80.360180][ T1721] netlink: 'syz.1.425': attribute type 4 has an invalid length. [ 80.369937][ T1721] netlink: 'syz.1.425': attribute type 4 has an invalid length. [ 80.380104][ T358] usb 5-1: unable to get BOS descriptor or descriptor too short [ 80.388303][ T358] usb 5-1: not running at top speed; connect to a high speed hub [ 80.399872][ T358] usb 5-1: config 8 has an invalid interface number: 24 but max is 0 [ 80.408275][ T358] usb 5-1: config 8 has no interface number 0 [ 80.414433][ T358] usb 5-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid maxpacket 1535, setting to 64 [ 80.425357][ T358] usb 5-1: config 8 interface 24 has no altsetting 0 [ 80.433494][ T358] usb 5-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 80.442618][ T358] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.450661][ T358] usb 5-1: Product: syz [ 80.454914][ T358] usb 5-1: Manufacturer: syz [ 80.459537][ T358] usb 5-1: SerialNumber: syz [ 80.465170][ T1716] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 80.522009][ T379] usb 3-1: USB disconnect, device number 24 [ 80.677679][ T358] usb 5-1: USB disconnect, device number 10 [ 81.131730][ T358] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 81.139902][ T358] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 81.284483][ T379] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 81.434469][ T379] usb 3-1: Using ep0 maxpacket: 32 [ 81.442374][ T379] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 81.451622][ T379] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.459771][ T379] usb 3-1: Product: syz [ 81.463957][ T379] usb 3-1: Manufacturer: syz [ 81.468597][ T379] usb 3-1: SerialNumber: syz [ 81.474194][ T379] usb 3-1: config 0 descriptor?? [ 81.744497][ T86] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 81.787835][ T357] usb 4-1: USB disconnect, device number 22 [ 81.894488][ T86] usb 5-1: Using ep0 maxpacket: 32 [ 81.904096][ T86] usb 5-1: config index 0 descriptor too short (expected 539, got 27) [ 81.917111][ T86] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 55, changing to 7 [ 81.933668][ T86] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 8496, setting to 1024 [ 81.946522][ T86] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 81.955637][ T86] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.963741][ T86] usb 5-1: Product: syz [ 81.969309][ T86] usb 5-1: Manufacturer: syz [ 81.974421][ T86] usb 5-1: SerialNumber: syz [ 81.982544][ T86] usb 5-1: config 0 descriptor?? [ 81.990163][ T86] hub 5-1:0.0: bad descriptor, ignoring hub [ 81.996220][ T86] hub 5-1:0.0: probe with driver hub failed with error -5 [ 82.264476][ T357] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 82.294560][ T86] usb 5-1: USB disconnect, device number 11 [ 82.414462][ T357] usb 4-1: Using ep0 maxpacket: 32 [ 82.420838][ T357] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.431842][ T357] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 82.440932][ T357] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.449700][ T357] usb 4-1: config 0 descriptor?? [ 82.785130][ T1771] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.848199][ T1777] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.858009][ T357] arvo 0003:1E7D:30D4.000D: unknown main item tag 0x0 [ 82.871420][ T357] arvo 0003:1E7D:30D4.000D: unknown main item tag 0x0 [ 82.878286][ T357] arvo 0003:1E7D:30D4.000D: unknown main item tag 0x0 [ 82.885382][ T357] arvo 0003:1E7D:30D4.000D: unknown main item tag 0x0 [ 82.892575][ T357] arvo 0003:1E7D:30D4.000D: unknown main item tag 0x0 [ 82.895949][ T1779] capability: warning: `syz.4.448' uses 32-bit capabilities (legacy support in use) [ 82.909385][ T357] arvo 0003:1E7D:30D4.000D: hidraw0: USB HID v0.05 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 82.940604][ T1784] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.956682][ T1785] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 82.963191][ T1785] rust_binder: Read failure Err(EFAULT) in pid:113 [ 83.057227][ T357] arvo 0003:1E7D:30D4.000D: couldn't init struct arvo_device [ 83.071259][ T36] audit: type=1400 audit(1750784143.280:343): avc: denied { append } for pid=1790 comm="syz.4.451" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 83.093919][ T357] arvo 0003:1E7D:30D4.000D: couldn't install keyboard [ 83.100850][ T86] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 83.109209][ T357] arvo 0003:1E7D:30D4.000D: probe with driver arvo failed with error -5 [ 83.166887][ T1799] netlink: 'syz.4.453': attribute type 4 has an invalid length. [ 83.176850][ T1799] netlink: 'syz.4.453': attribute type 4 has an invalid length. [ 83.199547][ T1801] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.199991][ T1801] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:129 [ 83.207000][ T1801] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:129 [ 83.259317][ T358] usb 4-1: USB disconnect, device number 23 [ 83.267170][ T86] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 83.282559][ T86] usb 2-1: config 0 has no interface number 0 [ 83.288728][ T86] usb 2-1: config 0 interface 41 has no altsetting 0 [ 83.296920][ T86] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 83.306021][ T86] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.314031][ T86] usb 2-1: Product: syz [ 83.318245][ T86] usb 2-1: Manufacturer: syz [ 83.322850][ T86] usb 2-1: SerialNumber: syz [ 83.328484][ T86] usb 2-1: config 0 descriptor?? [ 83.810170][ T36] audit: type=1400 audit(1750784144.030:344): avc: denied { watch watch_reads } for pid=1805 comm="syz.3.456" path="/97" dev="tmpfs" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 83.833099][ T36] audit: type=1400 audit(1750784144.040:345): avc: denied { read } for pid=1805 comm="syz.3.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.867699][ T1808] 9pnet_fd: Insufficient options for proto=fd [ 83.936406][ T36] audit: type=1400 audit(1750784144.160:346): avc: denied { search } for pid=1776 comm="syz.1.447" name="/" dev="configfs" ino=2093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 83.958646][ T36] audit: type=1400 audit(1750784144.160:347): avc: denied { read } for pid=1776 comm="syz.1.447" name="/" dev="configfs" ino=2093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 83.989865][ T36] audit: type=1400 audit(1750784144.160:348): avc: denied { open } for pid=1776 comm="syz.1.447" path="/" dev="configfs" ino=2093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 84.040459][ T86] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 84.059414][ T86] usb 2-1: USB disconnect, device number 15 [ 84.079030][ T10] usb 3-1: USB disconnect, device number 25 [ 84.122673][ T1825] netlink: 'syz.3.463': attribute type 4 has an invalid length. [ 84.133962][ T1825] netlink: 'syz.3.463': attribute type 4 has an invalid length. [ 84.443685][ T36] audit: type=1400 audit(1750784144.660:349): avc: denied { shutdown } for pid=1836 comm="syz.4.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.490922][ T1840] FAT-fs (rnullb0): invalid media value (0x44) [ 84.497324][ T1840] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 84.564467][ T358] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 84.606874][ T1850] 9pnet_fd: Insufficient options for proto=fd [ 84.613371][ T1850] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.613922][ T1850] rust_binder: Error in use_page_slow: ESRCH [ 84.620417][ T1850] rust_binder: use_range failure ESRCH [ 84.624467][ T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 84.626523][ T1850] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 84.639560][ T1850] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 84.647774][ T1850] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:338 [ 84.669615][ T1853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.690189][ T1853] rust_binder: Error while translating object. [ 84.696815][ T1853] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 84.703062][ T1853] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:340 [ 84.713360][ T1853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.714579][ T358] usb 3-1: Using ep0 maxpacket: 32 [ 84.737653][ T358] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.748681][ T358] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 84.757813][ T358] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.768177][ T358] usb 3-1: config 0 descriptor?? [ 84.775916][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 84.782202][ T10] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 84.790563][ T10] usb 4-1: config 0 has no interface number 0 [ 84.796813][ T10] usb 4-1: config 0 interface 196 has no altsetting 0 [ 84.805074][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 84.814206][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.822279][ T10] usb 4-1: Product: syz [ 84.826548][ T10] usb 4-1: Manufacturer: syz [ 84.831173][ T10] usb 4-1: SerialNumber: syz [ 84.836749][ T10] usb 4-1: config 0 descriptor?? [ 84.877573][ T36] audit: type=1400 audit(1750784145.100:350): avc: denied { mount } for pid=1858 comm="syz.1.473" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 85.023286][ T1869] overlayfs: failed to resolve 'fowner<00000000000000000000': -2 [ 85.031978][ T36] audit: type=1400 audit(1750784145.250:351): avc: denied { remount } for pid=1868 comm="syz.1.477" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 85.168101][ T10] ipheth 4-1:0.196: Unable to find endpoints [ 85.175663][ T10] usb 4-1: USB disconnect, device number 24 [ 85.185152][ T358] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 85.200079][ T358] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 85.207295][ T358] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 85.214173][ T358] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 85.226990][ T358] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 85.238411][ T358] arvo 0003:1E7D:30D4.000E: hidraw0: USB HID v0.05 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 85.379434][ T36] audit: type=1400 audit(1750784145.600:352): avc: denied { write } for pid=1878 comm="syz.1.480" path="socket:[15472]" dev="sockfs" ino=15472 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 85.403212][ T358] arvo 0003:1E7D:30D4.000E: couldn't init struct arvo_device [ 85.417844][ T1886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.430852][ T358] arvo 0003:1E7D:30D4.000E: couldn't install keyboard [ 85.433983][ T1890] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.438511][ T1890] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 85.443858][ T358] arvo 0003:1E7D:30D4.000E: probe with driver arvo failed with error -5 [ 85.445266][ T1890] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:153 [ 85.454926][ T1886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.512047][ T36] audit: type=1400 audit(1750784145.730:353): avc: denied { watch watch_reads } for pid=1897 comm="syz.1.484" path="/127/file0" dev="tmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 85.605524][ T477] usb 3-1: USB disconnect, device number 26 [ 85.864467][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 86.014476][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 86.021315][ T10] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 86.031363][ T10] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 86.042820][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.057916][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.058268][ T36] audit: type=1326 audit(1750784146.280:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1906 comm="syz.4.488" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f05f318e929 code=0x0 [ 86.066150][ T10] usb 2-1: Product: 嫏녷璷盢⫲郠ඁ玴㸜治᱾벱옜韲됔ᎸⲨ꺜☓鬢ჟᩃ膹럃ꝶ찐僤槐릊琫࿰㞉懵큪ꦝၾ隽䗖黆ꮂ⟳澟迾柆 ꁱ㐜㕿멍놁갊嗅緺粙㽌䰜䕾ধ젓ᐥ቏욬㊘탪ᇴ凸㒨솮鳫䔛踥歈䠘疔ꡂᷖ릪먲遛Ⴃ㙰兄쫸෮ꋺﮛ獐烒駹擒짐袇㹺橴◘戝닡䉴 [ 86.132462][ T10] usb 2-1: Manufacturer: 㹛짵듈瓙䞙ࢫ惟땓茿㉼巇乕⳶䍝ꐔ㩡瑒릀鉋൱蕇ዺ鍠匩슏ሆ㣵ꥩ册솗㬶㍝뮺瘫槎甞읟₈䒵록炋䒑뽪돖벫솯滜婇鷟⻧㾉㓁廳鋹茚ꪨ瘊ꯞ맹ㅡ䋶襳ꋌ㭔⩡烙ཱྀ⒈蔡稘旪ና⍊ማ淎ﶴṎ蟋훲ㆵ➿窄㣬妲畹⎑ၳ㫡糇㖟艗퓄갡煚뿒蓄៧䯌廗 [ 86.165238][ T10] usb 2-1: SerialNumber: ᧛䥪ㄟⶳ뜑ఌ䎡虥憹͊杹㐓澿芄 [ 86.174804][ T10] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 86.183573][ T10] usb 2-1: no configuration chosen from 1 choice [ 86.325504][ T36] audit: type=1400 audit(1750784146.550:355): avc: denied { audit_read } for pid=1920 comm="syz.4.491" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 86.436800][ T1934] fuse: Bad value for 'fd' [ 86.579909][ T1938] rtc_cmos 00:00: Alarms can be up to one day in the future [ 86.601386][ T1940] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.613685][ T1940] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.620457][ T1940] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 86.634844][ T1940] rust_binder: Write failure EINVAL in pid:193 [ 86.944457][ T358] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 86.979521][ T1945] input: syz0 as /devices/virtual/input/input14 [ 87.104488][ T358] usb 5-1: Using ep0 maxpacket: 32 [ 87.111733][ T358] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.123104][ T358] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 87.132415][ T358] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.144613][ T358] usb 5-1: config 0 descriptor?? [ 87.554937][ T358] arvo 0003:1E7D:30D4.000F: unknown main item tag 0x0 [ 87.561781][ T358] arvo 0003:1E7D:30D4.000F: unknown main item tag 0x0 [ 87.568607][ T358] arvo 0003:1E7D:30D4.000F: unknown main item tag 0x0 [ 87.575438][ T358] arvo 0003:1E7D:30D4.000F: unknown main item tag 0x0 [ 87.582210][ T358] arvo 0003:1E7D:30D4.000F: unknown main item tag 0x0 [ 87.589854][ T358] arvo 0003:1E7D:30D4.000F: hidraw0: USB HID v0.05 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 87.639188][ T36] audit: type=1400 audit(1750784147.860:356): avc: denied { mounton } for pid=1949 comm="syz.3.502" path="/proc/300/cgroup" dev="proc" ino=14974 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 87.676083][ T1952] binder: Unknown parameter '' [ 87.688045][ T1954] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 87.695501][ T1954] rust_binder: Write failure EINVAL in pid:323 [ 87.754246][ T358] arvo 0003:1E7D:30D4.000F: couldn't init struct arvo_device [ 87.767893][ T358] arvo 0003:1E7D:30D4.000F: couldn't install keyboard [ 87.775744][ T358] arvo 0003:1E7D:30D4.000F: probe with driver arvo failed with error -5 [ 87.934441][ T64] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 87.955983][ T358] usb 5-1: USB disconnect, device number 12 [ 88.085630][ T64] usb 4-1: config 0 interface 0 altsetting 236 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 88.098669][ T64] usb 4-1: config 0 interface 0 has no altsetting 0 [ 88.106654][ T64] usb 4-1: New USB device found, idVendor=2001, idProduct=b301, bcdDevice=45.a9 [ 88.115798][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.123790][ T64] usb 4-1: Product: syz [ 88.128246][ T64] usb 4-1: Manufacturer: syz [ 88.132888][ T64] usb 4-1: SerialNumber: syz [ 88.139981][ T64] r8152-cfgselector 4-1: Unknown version 0x0000 [ 88.146280][ T64] r8152-cfgselector 4-1: config 0 descriptor?? [ 88.153144][ T64] r8152 4-1:0.0: Expected endpoints are not found [ 88.356009][ T64] r8152-cfgselector 4-1: USB disconnect, device number 25 [ 88.477586][ T1960] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 88.566899][ T1963] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 88.573372][ T1963] rust_binder: Read failure Err(EFAULT) in pid:329 [ 88.583099][ T1963] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 88.589119][ T64] usb 2-1: USB disconnect, device number 16 [ 88.590406][ T1963] rust_binder: Read failure Err(EFAULT) in pid:329 [ 88.679538][ T36] audit: type=1400 audit(1750784148.900:357): avc: denied { create } for pid=1976 comm="syz.2.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 89.004501][ T64] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 89.154463][ T64] usb 3-1: Using ep0 maxpacket: 32 [ 89.160764][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.171748][ T358] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 89.179379][ T64] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 89.188895][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.197878][ T64] usb 3-1: config 0 descriptor?? [ 89.344426][ T358] usb 4-1: Using ep0 maxpacket: 16 [ 89.350640][ T358] usb 4-1: config 0 has an invalid interface number: 236 but max is 0 [ 89.359407][ T358] usb 4-1: config 0 has an invalid descriptor of length 218, skipping remainder of the config [ 89.370305][ T358] usb 4-1: config 0 has no interface number 0 [ 89.376537][ T358] usb 4-1: config 0 interface 236 altsetting 194 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 89.389872][ T358] usb 4-1: config 0 interface 236 has no altsetting 0 [ 89.396733][ T358] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 89.405941][ T358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.415594][ T358] usb 4-1: config 0 descriptor?? [ 89.440151][ T305] Bluetooth: hci0: Frame reassembly failed (-84) [ 89.446698][ T305] Bluetooth: hci0: Frame reassembly failed (-84) [ 89.520128][ T2010] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 89.527039][ T2012] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 89.533992][ T2012] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:390 [ 89.603818][ T2014] kvm: pic: non byte write [ 89.615507][ T64] arvo 0003:1E7D:30D4.0010: unknown main item tag 0x0 [ 89.622414][ T64] arvo 0003:1E7D:30D4.0010: unknown main item tag 0x0 [ 89.629292][ T64] arvo 0003:1E7D:30D4.0010: unknown main item tag 0x0 [ 89.636198][ T64] arvo 0003:1E7D:30D4.0010: unknown main item tag 0x0 [ 89.643057][ T358] usb 4-1: string descriptor 0 read error: -71 [ 89.649304][ T64] arvo 0003:1E7D:30D4.0010: unknown main item tag 0x0 [ 89.657254][ T358] usb 4-1: USB disconnect, device number 26 [ 89.664593][ T64] arvo 0003:1E7D:30D4.0010: hidraw0: USB HID v0.05 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 89.814752][ T64] arvo 0003:1E7D:30D4.0010: couldn't init struct arvo_device [ 89.822244][ T64] arvo 0003:1E7D:30D4.0010: couldn't install keyboard [ 89.830845][ T64] arvo 0003:1E7D:30D4.0010: probe with driver arvo failed with error -5 [ 90.016401][ T64] usb 3-1: USB disconnect, device number 27 [ 90.141338][ T2019] rust_binder: Write failure EINVAL in pid:306 [ 90.141404][ T2019] rust_binder: Write failure EINVAL in pid:306 [ 90.148577][ T2019] rust_binder: Read failure Err(EAGAIN) in pid:306 [ 90.148591][ T2020] rust_binder: Read failure Err(EAGAIN) in pid:306 [ 90.174079][ T2022] bpf: Bad value for 'mode' [ 90.198566][ T36] audit: type=1400 audit(1750784150.420:358): avc: denied { mounton } for pid=2023 comm="syz.3.526" path="/111/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 90.221129][ T36] audit: type=1400 audit(1750784150.420:359): avc: denied { read } for pid=2023 comm="syz.3.526" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 90.242591][ T36] audit: type=1400 audit(1750784150.420:360): avc: denied { open } for pid=2023 comm="syz.3.526" path="/111/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 90.265062][ T36] audit: type=1400 audit(1750784150.490:361): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 91.163537][ T2041] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2008132661 (4016265322 ns) > initial count (280545400 ns). Using initial count to start timer. [ 91.189777][ T2051] incfs: Error accessing: ./file0. [ 91.195121][ T2051] incfs: mount failed -20 [ 91.201212][ T36] audit: type=1326 audit(1750784151.420:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2050 comm="syz.1.533" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbeb818e929 code=0x0 [ 91.270893][ T36] audit: type=1400 audit(1750784151.490:363): avc: denied { create } for pid=2052 comm="syz.3.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 91.298428][ T36] audit: type=1400 audit(1750784151.520:364): avc: denied { getopt } for pid=2054 comm="syz.3.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.341077][ T2055] kvm: pic: non byte write [ 91.504600][ T492] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 91.504682][ T493] Bluetooth: hci0: command 0x1003 tx timeout [ 91.550911][ T36] audit: type=1326 audit(1750784151.770:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2058 comm="syz.2.536" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f656e18e929 code=0x0 [ 91.712303][ T2075] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 91.719839][ T2075] rust_binder: Write failure EINVAL in pid:217 [ 91.904455][ T64] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 92.064527][ T64] usb 4-1: Using ep0 maxpacket: 32 [ 92.071306][ T64] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.082343][ T64] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 92.091432][ T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.102700][ T64] usb 4-1: config 0 descriptor?? [ 92.173649][ T2085] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.174152][ T2085] rust_binder: Error in use_page_slow: ESRCH [ 92.180697][ T2085] rust_binder: use_range failure ESRCH [ 92.186764][ T2085] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 92.192253][ T2085] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 92.200322][ T2085] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:414 [ 92.294193][ T2094] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.304031][ T2094] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 92.319223][ T2094] rust_binder: Write failure EINVAL in pid:423 [ 92.363683][ T2100] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 92.370012][ T2100] rust_binder: Read failure Err(EFAULT) in pid:429 [ 92.420935][ T2106] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 92.493769][ T36] audit: type=1326 audit(1750784152.710:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2073 comm="syz.4.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f318e929 code=0x7fc00000 [ 92.514555][ T64] arvo 0003:1E7D:30D4.0011: unknown main item tag 0x0 [ 92.517187][ T36] audit: type=1326 audit(1750784152.710:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2073 comm="syz.4.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f05f318e929 code=0x7fc00000 [ 92.541155][ T64] arvo 0003:1E7D:30D4.0011: unknown main item tag 0x0 [ 92.555316][ T64] arvo 0003:1E7D:30D4.0011: unknown main item tag 0x0 [ 92.562199][ T64] arvo 0003:1E7D:30D4.0011: unknown main item tag 0x0 [ 92.569893][ T64] arvo 0003:1E7D:30D4.0011: unknown main item tag 0x0 [ 92.577943][ T64] arvo 0003:1E7D:30D4.0011: hidraw0: USB HID v0.05 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 92.612056][ T2115] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.634862][ T2116] raw_sendmsg: syz.4.553 forgot to set AF_INET. Fix it! [ 92.645600][ T2118] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 92.712561][ T64] arvo 0003:1E7D:30D4.0011: couldn't init struct arvo_device [ 92.720696][ T64] arvo 0003:1E7D:30D4.0011: couldn't install keyboard [ 92.728085][ T2126] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.730541][ T2129] binder: Bad value for 'stats' [ 92.735328][ T2126] rust_binder: Error while translating object. [ 92.737765][ T64] arvo 0003:1E7D:30D4.0011: probe with driver arvo failed with error -5 [ 92.742909][ T2126] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 92.770463][ T2126] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:227 [ 92.774855][ T2131] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.807286][ T2133] input: syz0 as /devices/virtual/input/input15 [ 92.814911][ T2133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.844480][ T2137] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.855749][ T2137] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 92.862582][ T2137] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:230 [ 92.872744][ T2142] SELinux: security_context_str_to_sid () failed with errno=-22 [ 92.909611][ T2145] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 92.916437][ T64] usb 4-1: USB disconnect, device number 27 [ 92.945653][ T2150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.568'. [ 92.985505][ T2154] netlink: 228 bytes leftover after parsing attributes in process `syz.4.569'. [ 93.017064][ T2161] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 93.101209][ T2165] rust_binder: Write failure EFAULT in pid:383 [ 93.138751][ T2161] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:241 [ 93.541592][ T2182] rust_binder: Write failure EINVAL in pid:345 [ 93.907048][ T2193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.582'. [ 94.624465][ T477] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 94.766079][ T2215] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.775670][ T477] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.798150][ T477] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.808290][ T477] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 94.821836][ T477] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.831879][ T477] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.848833][ T477] usb 4-1: config 0 descriptor?? [ 94.865912][ T2225] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.932603][ T2234] rust_kernel: panicked at rust/kernel/sync/poll.rs:54:18: [ 94.932603][ T2234] null pointer dereference occurred [ 94.953071][ T2234] ------------[ cut here ]------------ [ 94.958642][ T2234] kernel BUG at rust/helpers/bug.c:7! [ 94.968903][ T2234] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 94.975940][ T2234] CPU: 1 UID: 0 PID: 2234 Comm: syz.2.594 Not tainted 6.12.30-syzkaller-g9d80e3254812 #0 0af3bb1b2b1f0d17039a87b1bb907b41f79d5270 [ 94.989359][ T2234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 94.999473][ T2234] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 95.004849][ T2234] Code: 3e ca e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 0c fd 9d 32 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 46 39 d4 be 90 90 90 90 90 90 90 90 90 [ 95.024607][ T2234] RSP: 0018:ffffc90010b571b0 EFLAGS: 00010246 [ 95.030730][ T2234] RAX: 000000000000005a RBX: 1ffff9200216ae38 RCX: 79f9923704559100 [ 95.038800][ T2234] RDX: ffffc900029b6000 RSI: 00000000000035aa RDI: 00000000000035ab [ 95.046816][ T2234] RBP: ffffc90010b571b0 R08: ffffc90010b56ea7 R09: 1ffff9200216add4 [ 95.054836][ T2234] R10: dffffc0000000000 R11: fffff5200216add5 R12: 0000000000000000 [ 95.062869][ T2234] R13: dffffc0000000000 R14: ffffc90010b571e0 R15: ffffc90010b57210 [ 95.070904][ T2234] FS: 00007f656f0046c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 95.079890][ T2234] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.086524][ T2234] CR2: 0000200000001000 CR3: 000000013839c000 CR4: 00000000003526b0 [ 95.094562][ T2234] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 95.102590][ T2234] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 95.110615][ T2234] Call Trace: [ 95.113937][ T2234] [ 95.116906][ T2234] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 95.124421][ T2234] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 95.132455][ T2234] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 95.146089][ T2234] ? p9pdu_vwritef+0x2720/0x2720 [ 95.151106][ T2234] ? radix_tree_node_alloc+0x1af/0x400 [ 95.156646][ T2234] ? _RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0xa2/0xf0 [ 95.164968][ T2234] ? __asan_memcpy+0x5a/0x80 [ 95.169697][ T2234] _RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0xec/0xf0 [ 95.177862][ T2234] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0x10/0x10 [ 95.186701][ T2234] ? p9pdu_writef+0xdb/0x130 [ 95.191376][ T2234] ? p9pdu_vwritef+0x2720/0x2720 [ 95.196394][ T2234] _RNvNtCs9jEwPDbx20M_4core9panicking30panic_null_pointer_dereference+0x49/0x4c [ 95.205578][ T2234] _RNvMNtNtCs43vyB533jt3_6kernel4sync4pollNtB2_9PollTable8from_ptr+0x40/0x40 [ 95.214509][ T2234] ? _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xce/0x570 [ 95.222402][ T2234] _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xe2/0x570 [ 95.230111][ T2234] ? p9_client_prepare_req+0x732/0xa10 [ 95.235653][ T2234] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 95.244067][ T2234] ? __kasan_check_write+0x18/0x20 [ 95.249250][ T2234] ? _raw_spin_lock+0x8c/0x120 [ 95.254096][ T2234] ? __cfi__raw_spin_lock+0x10/0x10 [ 95.259156][ T477] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 95.259352][ T2234] ? __kasan_check_write+0x18/0x20 [ 95.271861][ T2234] ? _raw_spin_lock+0x8c/0x120 [ 95.274176][ T477] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 95.276681][ T2234] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 95.276729][ T2234] p9_fd_request+0x38d/0x500 [ 95.276752][ T2234] p9_client_rpc+0x2f9/0xb40 [ 95.295456][ T477] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 95.297007][ T2234] ? bt_sock_poll+0x477/0x7b0 [ 95.312076][ T477] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 95.313675][ T2234] ? p9_fid_create+0x3d0/0x3d0 [ 95.325918][ T2234] ? __cfi_sock_poll+0x10/0x10 [ 95.330733][ T2234] ? p9_conn_create+0x4c9/0x570 [ 95.335642][ T2234] ? p9_fd_create+0x2f3/0x4c0 [ 95.337865][ T477] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 95.340362][ T2234] p9_client_create+0x96a/0x1190 [ 95.352713][ T2234] ? __cfi_p9_client_create+0x10/0x10 [ 95.357818][ T477] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 95.358152][ T2234] ? kasan_save_alloc_info+0x40/0x50 [ 95.370820][ T2234] ? __kasan_kmalloc+0x96/0xb0 [ 95.372325][ T477] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 95.375644][ T2234] ? kstrdup+0x7b/0x140 [ 95.375675][ T2234] ? __kasan_check_write+0x18/0x20 [ 95.375702][ T2234] v9fs_session_init+0x1e1/0x1820 [ 95.375731][ T2234] ? __cfi_v9fs_session_init+0x10/0x10 [ 95.386549][ T477] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 95.387256][ T2234] ? kasan_save_alloc_info+0x40/0x50 [ 95.398157][ T477] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 95.402874][ T2234] ? __kasan_kmalloc+0x96/0xb0 [ 95.422596][ T477] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 95.422948][ T2234] ? v9fs_mount+0xbd/0xa00 [ 95.433417][ T477] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 95.435254][ T2234] v9fs_mount+0xd7/0xa00 [ 95.441950][ T477] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 95.447054][ T2234] ? __cfi_v9fs_mount+0x10/0x10 [ 95.455829][ T477] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 95.458687][ T2234] ? selinux_capable+0x38/0x50 [ 95.471719][ T477] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 95.475735][ T2234] legacy_get_tree+0x103/0x1b0 [ 95.475766][ T2234] ? __cfi_v9fs_mount+0x10/0x10 [ 95.475795][ T2234] vfs_get_tree+0x9e/0x290 [ 95.486606][ T477] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 95.487933][ T2234] do_new_mount+0x251/0xb40 [ 95.487973][ T2234] ? security_capable+0xcf/0xf0 [ 95.494035][ T477] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 95.497257][ T2234] path_mount+0x688/0x1050 [ 95.497311][ T2234] ? putname+0x113/0x150 [ 95.514447][ T477] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 95.521412][ T2234] __se_sys_mount+0x2bd/0x480 [ 95.521453][ T2234] ? __x64_sys_mount+0xf0/0xf0 [ 95.536017][ T477] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 95.537481][ T2234] ? __kasan_check_write+0x18/0x20 [ 95.544471][ T477] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 95.546922][ T2234] ? fpregs_restore_userregs+0x11d/0x260 [ 95.546953][ T2234] __x64_sys_mount+0xc3/0xf0 [ 95.556672][ T477] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 95.559420][ T2234] x64_sys_call+0x2021/0x2ee0 [ 95.575733][ T477] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 95.577020][ T2234] do_syscall_64+0x58/0xf0 [ 95.593343][ T477] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 95.596434][ T2234] ? clear_bhb_loop+0x50/0xa0 [ 95.596467][ T2234] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 95.596491][ T2234] RIP: 0033:0x7f656e18e929 [ 95.596521][ T2234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.596543][ T2234] RSP: 002b:00007f656f004038 EFLAGS: 00000246 [ 95.604479][ T477] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 95.608301][ T2234] ORIG_RAX: 00000000000000a5 [ 95.608316][ T2234] RAX: ffffffffffffffda RBX: 00007f656e3b5fa0 RCX: 00007f656e18e929 [ 95.620807][ T477] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 95.623311][ T2234] RDX: 0000200000000080 RSI: 0000200000000300 RDI: 0000000000000000 [ 95.623332][ T2234] RBP: 00007f656e210b39 R08: 0000200000000340 R09: 0000000000000000 [ 95.665755][ T477] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 95.669031][ T2234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.669053][ T2234] R13: 0000000000000000 R14: 00007f656e3b5fa0 R15: 00007fffb554eaf8 [ 95.687629][ T477] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 95.692372][ T2234] [ 95.692385][ T2234] Modules linked in: [ 95.713121][ T477] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 95.716286][ T2234] ---[ end trace 0000000000000000 ]--- [ 95.732043][ T477] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 95.746065][ T2234] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 95.756656][ T2234] Code: 3e ca e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 0c fd 9d 32 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 46 39 d4 be 90 90 90 90 90 90 90 90 90 [ 95.776445][ T477] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 95.785944][ T477] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 95.793544][ T477] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 95.801064][ T477] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 95.801394][ T2234] RSP: 0018:ffffc90010b571b0 EFLAGS: 00010246 [ 95.809353][ T477] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 95.811515][ T2234] [ 95.816506][ T477] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 95.833421][ T2234] RAX: 000000000000005a RBX: 1ffff9200216ae38 RCX: 79f9923704559100 [ 95.833854][ T477] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 95.850584][ T477] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 95.851695][ T2234] RDX: ffffc900029b6000 RSI: 00000000000035aa RDI: 00000000000035ab [ 95.858093][ T477] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 95.873162][ T2234] RBP: ffffc90010b571b0 R08: ffffc90010b56ea7 R09: 1ffff9200216add4 [ 95.873558][ T477] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 95.889065][ T2234] R10: dffffc0000000000 R11: fffff5200216add5 R12: 0000000000000000 [ 95.889139][ T477] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 95.897330][ T2234] R13: dffffc0000000000 R14: ffffc90010b571e0 R15: ffffc90010b57210 [ 95.913072][ T2234] FS: 00007f656f0046c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 95.917927][ T477] plantronics 0003:047F:FFFF.0012: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 95.938288][ T2234] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.945115][ T2234] CR2: 0000000000000000 CR3: 000000013839c000 CR4: 00000000003526b0 [ 95.953185][ T2234] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 95.961516][ T2234] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 95.969807][ T2234] Kernel panic - not syncing: Fatal exception [ 95.976225][ T2234] Kernel Offset: disabled [ 95.980552][ T2234] Rebooting in 86400 seconds..