last executing test programs: 1m14.001625681s ago: executing program 1 (id=559): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x1ce, 0x0, &(0x7f0000000580)="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"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000001040)=0x2, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0xac, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs={0x40046307, 0x3}, @acquire_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x200a82, 0x0) 1m13.898973322s ago: executing program 1 (id=561): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x40) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0xa9, 0x3, 0x26, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @mcast2, 0x20, 0x7800, 0x1, 0xfffffffc}}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xd}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x5) recvmmsg(r0, &(0x7f0000001200)=[{{&(0x7f0000000340)=@ax25={{}, [@default, @bcast, @netrom, @remote, @remote, @null, @default, @default]}, 0x80, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/240, 0xf0}, {&(0x7f00000004c0)=""/87, 0x57}, {&(0x7f0000000540)}, {&(0x7f0000000580)=""/89, 0x59}, {&(0x7f0000000600)=""/91, 0x5b}, {&(0x7f0000000680)=""/69, 0x45}, {&(0x7f0000000700)=""/224, 0xe0}, {&(0x7f0000000800)=""/33, 0x21}, {&(0x7f0000000840)=""/10, 0xa}, {&(0x7f0000000880)=""/174, 0xae}], 0xa, &(0x7f0000000a00)=""/157, 0x9d}, 0x9}, {{&(0x7f0000000ac0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000b40)=""/12, 0xc}, {&(0x7f0000000b80)=""/221, 0xdd}], 0x2, &(0x7f0000000cc0)=""/175, 0xaf}, 0xef18}, {{0x0, 0x0, &(0x7f0000000d80)}, 0x8}, {{&(0x7f0000000dc0)=@hci, 0x80, &(0x7f0000001100)=[{&(0x7f0000000e40)=""/200, 0xc8}, {&(0x7f0000000f40)=""/222, 0xde}, {&(0x7f0000001040)=""/41, 0x29}, {&(0x7f0000001080)=""/97, 0x61}], 0x4, &(0x7f0000001140)=""/181, 0xb5}, 0xd89}], 0x4, 0x12001, &(0x7f0000001300)={0x77359400}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f00000014c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x4020800}, 0xc, &(0x7f0000001480)={&(0x7f00000013c0)={0xa8, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004840) 1m13.879981243s ago: executing program 1 (id=562): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x9, 0x4, 0x5, 0x1}, 0x10) write(r0, &(0x7f0000000040)="f5af60c4f3989aff45701a354c2e1182efa4c33f110322a129537600cf951fa6610d2d461bcee26246c3d48b7355268b32e94bfcee9cd9c77c197dcc0355bb89d679ddb10d24bf020d5ed9ecf3d24b20d0055d913532f6b1c96226c2d47c51dc7799b6c1a9e571d5564cbb7363b97ba1aec8a20b76e741a89f6e47a3d95883ebb208c95115b92647f6e3acb9e127c26e78d2641f8fce33448f6f0121f50416bba82e8dc5fd0cf00ef6cd246461658df0c1f7a5f04509020cd348", 0xba) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000100)={'geneve0\x00', 0x3}) sendmsg$nl_generic(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20010}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, 0x11, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@typed={0xc8, 0x4b, 0x0, 0x0, @binary="61d520b5b529bffcd6186d62b498a18171b80a63d65e59bc144b5d0c83d62e1682209a25bf7d721df2467264729784b464a1eb18c38af5f917ce9f07ed7fc58e2055455455fa1246dc0adcbc57e702a91037ec9912d7e0ddb5074b8f5192d9a8e13570fbe1e28c8f7a48bdfceab270757f39d314fd7c3b53ef765ad427b1df157b0ac2aeb5f8bf36bf590ae3993adb8256e17c9ba89eaef6ce74994a77040522c6483a85fb0fc3f9ccb3110a475f563c695a856672ddbe2a804593e9040f7cff4a9ed361"}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20040005}, 0x8041) close_range(r1, r1, 0x0) r2 = socket$inet6(0xa, 0x5, 0xfffffffd) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000300)={@private0, 0x46}) quotactl_fd$Q_QUOTAON(r2, 0x3, 0xee00, &(0x7f0000000340)='./file0\x00') r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f00000003c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r5 = getpgid(0x0) fcntl$lock(r4, 0x1, &(0x7f0000000440)={0x0, 0x1, 0xfffffffffffffffc, 0x2b8, r5}) r6 = dup2(r4, r4) write$cgroup_subtree(r6, &(0x7f0000000480)={[{0x2d, 'blkio'}, {0x2b, 'devices'}]}, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f00000008c0)={r7, 0x5, 0xffff, 0x1}) connect$inet(r6, &(0x7f0000000cc0)={0x2, 0x4e21, @local}, 0x10) ioctl$SNDRV_TIMER_IOCTL_CREATE(r6, 0xc02054a5, &(0x7f0000000d00)={0xe6d8, r1, 'id1\x00'}) write$hidraw(r8, &(0x7f0000000d80)="3505d2ee78359fcfb95c8ef98ed88ce43c8d37d2d75ceb77df24dbffae1ac122458d056037fd00db528316b75ae9cb7ea569613cb39235ed18a7641eef55c547b8c399e2a1654835b596a1591769cbbbcfd8466ac5b384308f942586cc3663b20e32e0ef4fdbecdf98bf38aa19e968031bb41aa3b564257e2a0c126b38ebcbe6a906e431e3ba737e5766b927f0e3a6d99b7308f98a148910cbd1351d5e90c0f9b10dbb86acf4272852e6f3628c6f3ac3d3d3346f7d8c20e97fef1f980bb12c1fa4ac3cb4762ef4db8c6cf3e309adab5b9573d55c0b3ee318c6f3df5064220ef93d28dc3457c37ca145c66fd83446a5f57abaff85307c6e30", 0xf8) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000e80)={'wlan0\x00'}) ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f0000000ec0)={0x3, 0x100, 0x4}) r9 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000f00)={0x28, 0x0, 0x0, @my=0x0}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r9, 0x28, 0x0, &(0x7f0000000f40)=0x7fffffff, 0x8) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000fc0)={'gre0\x00', 0x0}) ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f0000001000)=0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000010c0)={'ip6_vti0\x00', &(0x7f0000001040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x6, 0x2, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x7800, 0x7, 0xd}}) sendmsg$nl_xfrm(r8, &(0x7f0000001480)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001440)={&(0x7f0000001100)=@acquire={0x33c, 0x17, 0x100, 0x70bd28, 0x25dfdbfe, {{@in6=@loopback, 0x4d4, 0x3c}, @in=@private=0xa010102, {@in=@remote, @in6=@rand_addr=' \x01\x00', 0x4e20, 0x5, 0x4e23, 0x7, 0xa, 0x80, 0x0, 0x32, r10, 0xee00}, {{@in=@dev={0xac, 0x14, 0x14, 0x2a}, @in6=@mcast2, 0x4e21, 0x5, 0x4e22, 0x2, 0xa, 0x20, 0x80, 0x32, 0x0, r11}, {0x0, 0x9, 0x3, 0xc, 0x1, 0x8, 0xa410, 0x3}, {0x6, 0xfffffffffffffff7, 0xfffffffffffffffe, 0x8}, 0x2, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x5, 0x7, 0x6, 0x70bd2a}, [@policy_type={0xa, 0x10, {0x1}}, @algo_auth={0x147, 0x1, {{'sha224-neon\x00'}, 0x7f8, "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"}}, @policy={0xac, 0x7, {{@in=@private=0xa010102, @in6=@private0, 0x4e23, 0x1, 0x4e21, 0xff, 0x2, 0x80, 0x0, 0x2b, r12, 0xee00}, {0x1, 0x4, 0xefbe, 0x4, 0x60a4, 0x6, 0xa449, 0x8852}, {0x4, 0x8, 0x2, 0x1}, 0x77d1, 0x0, 0x2, 0x1, 0x2, 0x1}}, @policy_type={0xa, 0x10, {0x1}}, @tfcpad={0x8, 0x16, 0x1}]}, 0x33c}}, 0x6810) 1m13.809767534s ago: executing program 1 (id=563): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x18, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000300)=[@acquire={0x40046305, 0x2}, @decrefs, @exit_looper, @release={0x40046306, 0x3}, @acquire_done={0x40106309, 0x1}], 0xfd, 0x0, &(0x7f0000000340)="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"}) 1m13.809312274s ago: executing program 1 (id=564): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x100, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x3c4d}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x1) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r0, 0x4004af77, &(0x7f0000000140)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x30400, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x40, 0x58, 0x3, 0x50000000}]}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000240)={"76b4ca4010602200b3fffdfbbe229c1263beb475e9dce039042ac1c9444c214327fc228f39044c42383ee2cc0b2d597a7b0fb9bc5fcbd0c2eb3a4d70e866afa845ce427ec19f6ded4f105b2d73ed77938cdcf1ac7043b18be886c26685bf4fb0872de914003262a070b61a6621d3c5c4fe3015a596069c31943d9acd7aabb6120d6f087f1a985fdd7284fc9afb842c73ea237bad869ddda83096e44bf4a8ed5208c9dc0ac6a7d444e3b40e7fa96a78d08c069bf3deb734aec2033adf2aae88ea2d8986b53e06b91245d4eca45fc1181ade48fbe6873722f9e72e156587963f3efbd95021992c5fb5618ec3152579af6161209f7963bb42ec87c24f5cf882c8269b70dfdf14587472067a01e27a056665d2fd5823b7e3910b9cb396947735da2591e559eb076198068997aac7adaac1284b27ed8c55d24a9df7c41b1585d5402490c5f8929366f1021560e46c291f1f747b0953f5b698c78660190ab445c5e540d6e1f9c45196f548af5d3f9bbbe15df0441807d352f61117317a1b97ffaa6adaf65ca0fcc631463e9fddc983d72a0ed7ead022e472775d993c1be5bd36694192be76557c9bebf69218dc7b9ab219851561a519b3470dde579a4b997cd4e753829c6968cb536eed10a545f4d7d193852254df58a82f265d957ff17d4bb7663d2119a5a6b79f2317381e08c3bb57d71a0f2730959692373b42f269996bca94dd03f1013e360b2c64eaddae9342c8b0dacce70b6ff178626ed927651d91b5afba7a5fd12bf3d39ea1874b4dc5fe9360a54ab8465174fce2cf223692f24ac9d879813459e30db935e90ec774ec2f196f7fce8c55bdc43a8d5192f93279cac2f4d4962845496455d8987a855e15c8d6e2d849fe8a57e2a132cffa72712683e8dc2584ed66a841d79f384956144626c55825e5e9af1800c797f33178ec4eb2ea87d253a52c4ee483e064acaa984858abaefdcd6eb023c5c04d77de18da43005902c90c434ab919e6a9ad4f0eb4b2bb4f99ab52b3b10fffd1f0a0814d3f126f8288a693915d5e72418f03cf197c8c79d0e4d9284494522d557ccc48cf0253b763452a22d8033b5b3d677c1ff700e943d64365690a8cf51dee40db26ee178dbef0519b08566dc0adf73275b4ae130a7c53cec998c25bb7b32bf59789b561b24c95d29ea1240967eaa05c9730b0faa718c3793adaa1d3d346c8fc2270d017d0e5b2e2961a3e6c35d11cae00580cfa15f4cf2959a69481690148e6e4342d1cf28cfdb1076a2f58765e43393959911d38d42da90470abdaf3fe14223c300e7129cbfc057db6aae242ac66b89909915d5977d209fb4e5df922057c4a66c5c6b44c8e1d91eed3af6874745bb695263c5876fee2b6f30e254a1e0c10f8c1dfc9294bb165ba73a1af53add530172e3f5e17c3ea9a90609064b441d1ea9e2940ebfe39c3e2117698"}) execve(&(0x7f0000000640)='./file0\x00', &(0x7f0000000780)={[&(0x7f0000000680)='ethtool\x00', &(0x7f00000006c0)='\x00', &(0x7f0000000700)='\x00', &(0x7f0000000740)='\x00']}, &(0x7f0000000a40)={[&(0x7f00000007c0)=':+\x00', &(0x7f0000000800)='^\x00', &(0x7f0000000840)='/dev/ppp\x00', &(0x7f0000000880)='/dev/ppp\x00', &(0x7f00000008c0)='/dev/ppp\x00', &(0x7f0000000900)='\x00', &(0x7f0000000940)='ethtool\x00', &(0x7f0000000980)='/dev/ppp\x00', &(0x7f00000009c0)='ethtool\x00', &(0x7f0000000a00)='{.#!\xb9\x00']}) close_range(r2, r2, 0x2) r4 = getuid() statx(0xffffffffffffffff, &(0x7f0000002dc0)='./file0\x00', 0x7631825e37cf5ff9, 0x2, &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000002f80)={0x2020, 0x0, 0x0, 0x0}, 0x2020) statx(0xffffffffffffffff, &(0x7f0000004fc0)='./file0\x00', 0x0, 0x2, &(0x7f0000005000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000052c0)='./file0\x00', &(0x7f0000005300)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000005380)='./file0/file0\x00', &(0x7f00000053c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) statx(0xffffffffffffff9c, &(0x7f0000005540)='./file0\x00', 0x0, 0x1, &(0x7f0000005580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000ac0)="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", 0x2000, &(0x7f00000057c0)={&(0x7f0000002ac0)={0x50, 0x0, 0x2, {0x7, 0x2b, 0x1, 0x2000000, 0x2, 0x8, 0xa9, 0xffff, 0x0, 0x0, 0x8, 0xa}}, &(0x7f0000002b40)={0x18, 0xfffffffffffffffe, 0xdf5, {0x8000000000000001}}, &(0x7f0000002b80)={0x18, 0xfffffffffffffffe, 0xffff}, &(0x7f0000002bc0)={0x18, 0x0, 0x7fffffff}, &(0x7f0000002c00)={0x18, 0xfffffffffffffffe, 0x9, {0x9}}, &(0x7f0000002c40)={0x28, 0x0, 0xffffffffffffffff, {{0x0, 0x5, 0x2}}}, &(0x7f0000002c80)={0x60, 0x0, 0x84f7, {{0x4, 0x1, 0x9, 0x5, 0x56d0, 0xb10, 0xf, 0x2}}}, &(0x7f0000002d00)={0x18, 0x0, 0xda, {0x34a}}, &(0x7f0000002d40)={0x13, 0x0, 0xa3, {':+\x00'}}, &(0x7f0000002d80)={0x20, 0x0, 0x1, {0x0, 0x4}}, &(0x7f0000002f00)={0x78, 0x0, 0xffffffffffffffff, {0x9, 0x1, 0x0, {0x4, 0x0, 0xd9, 0x3, 0x3, 0x6, 0x2, 0xffff8000, 0x0, 0x0, 0x5, r4, r5, 0xffffffff, 0xffffa18c}}}, &(0x7f0000005100)={0x90, 0x0, 0x9, {0x3, 0x0, 0xc, 0x80000001, 0x2, 0x8, {0x6, 0x4, 0x5e, 0x8000000000000001, 0xfea, 0x34, 0x0, 0xf1, 0x3000, 0xc000, 0x9, r6, r7, 0xfffffffb, 0x7fffffff}}}, &(0x7f00000051c0)={0xb8, 0x0, 0x8, [{0x6, 0x5, 0x1, 0x9, '&'}, {0x6, 0x8f53, 0x1, 0x5, '}'}, {0x2, 0x8, 0x1, 0x80000000, '%'}, {0x1, 0xf56, 0x9, 0x3, '/dev/ppp\x00'}, {0x1, 0x0, 0x1, 0xfffffdc9, '$'}]}, &(0x7f0000005280)={0x10, 0x0, 0x5f}, &(0x7f0000005440)={0xa0, 0xffffffffffffffda, 0x100, {{0x1, 0x1, 0x2, 0x8, 0x4, 0x54, {0x5, 0x800, 0x7, 0x5, 0xa, 0x1, 0x0, 0x3ff, 0x204, 0x4000, 0x5, r8, r9, 0x1, 0xb}}, {0x0, 0x1}}}, &(0x7f0000005500)={0x20, 0x0, 0xfffffffffffff592, {0x8, 0x0, 0x9, 0x842}}, &(0x7f0000005680)={0x130, 0x0, 0xfffffffffffffffa, {0x5, 0x4, 0x0, '\x00', {0x230, 0x0, 0x4, 0x1, 0xffffffffffffffff, r10, 0x4000, '\x00', 0x8, 0x2, 0xa9, 0x2, {0x8000000000000001, 0x2}, {0x2}, {0x1, 0x2}, {0x8, 0xfffffffe}, 0x8, 0xffffffff, 0x3, 0x50}}}}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000005980)={'pimreg1\x00', &(0x7f0000005880)=@ethtool_dump={0x3f, 0x8, 0x2, 0xcd, "7c67b72cb442f6a6debe7fac58f7041be62014ed7e107ca83bb1f50e34af9426378d9b5b321ee1ab497e66d04bca752879d639bdbc9675178243166a4b69ff14200367d2e0ab9ff20de7dda60b287e8dd0238cbfee9ef36e64c7d8a14afe24e126d351efbae4b4de8eb11575b621758aaedf87fa85144790844e5cab64be31ec9f1238cd3f2733420aa6e840c0836af64275ab3dd110a456713b7ef5c678ea4dc6bcc541d5714929d64a4e1c950ac027096a38c645aa3caf5e7ea6a49df21ea7db361c691df00c5020e429238b"}}) ioctl(r2, 0x1, &(0x7f00000059c0)="58ed1026d56bc9dc3931fc3a6584f88a0a1920b86d27bfc13581a0f51a066278b287fab2e558dc5a67aafb93f82b08b528b55cf6d33c72c02df048dd6fbbf8cf1433") ioctl$VHOST_VDPA_GET_VRING_GROUP(0xffffffffffffffff, 0xc008af7b, &(0x7f0000005a40)={0x0, 0xb9}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000005a80), r11) timer_create(0x7, &(0x7f0000005b40)={0x0, 0x2b, 0x1, @thr={&(0x7f0000005ac0)="3ee1cc6376aa05d6ddfb16e1026979a36b8155", &(0x7f0000005b00)="602c59a25b91394948ba7b14c0c5a56b8c4f7593"}}, &(0x7f0000005b80)) r12 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(r12, 0x0, 0x487, &(0x7f0000005bc0)={{0x88, @loopback, 0x4e21, 0x2, 'sh\x00', 0x20, 0x8000, 0x4e}, {@loopback, 0x4e20, 0x4, 0xa, 0xfffffffa, 0x2}}, 0x44) setsockopt$inet_msfilter(r12, 0x0, 0x29, &(0x7f0000005c40)={@loopback, @loopback, 0x0, 0x1, [@local]}, 0x14) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000005c80)=@arm64={0x4, 0x7, 0x8, '\x00', 0x6}) llistxattr(&(0x7f0000005cc0)='./file0\x00', &(0x7f0000005d00)=""/4096, 0x1000) 1m13.710175305s ago: executing program 1 (id=566): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x7, 0xfffffffffffffffe, 0x8, 0x0, 0x7, 0x2000000000044, 0x0, 0x8000000000000, 0x5, 0x0, 0x9, 0x0, 0x0, 0x7, 0x1], 0x6000, 0x3c2a10}) (async) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x6, &(0x7f0000000000)={0xd, 0x8, 0x8}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (rerun: 32) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000340)={{0x0, 0x0, 0xfffffffffffffe6d, {0xdddd0000, 0x100000}}, "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", "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"}) (async, rerun: 32) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000440)={{0x0, 0x0, 0x80}}) (async, rerun: 32) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00') 1m13.642638746s ago: executing program 32 (id=566): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x7, 0xfffffffffffffffe, 0x8, 0x0, 0x7, 0x2000000000044, 0x0, 0x8000000000000, 0x5, 0x0, 0x9, 0x0, 0x0, 0x7, 0x1], 0x6000, 0x3c2a10}) (async) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x6, &(0x7f0000000000)={0xd, 0x8, 0x8}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (rerun: 32) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000340)={{0x0, 0x0, 0xfffffffffffffe6d, {0xdddd0000, 0x100000}}, "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", "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"}) (async, rerun: 32) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000440)={{0x0, 0x0, 0x80}}) (async, rerun: 32) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00') 1m1.312292383s ago: executing program 3 (id=694): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffe}]}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x400, &(0x7f00000000c0)=ANY=[@ANYBLOB='context']) 1m1.308930263s ago: executing program 3 (id=695): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) unshare(0x8040600) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0x8, &(0x7f0000000040)="11a3a309", 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f00000002c0)=[@acquire_done={0x40106309, 0x3}], 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000000)={0x0, 0x3b, 0xffff}) 1m1.233836544s ago: executing program 3 (id=696): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x7, 0x7fffffff}) fcntl$lock(r1, 0x5, &(0x7f0000000140)={0x0, 0x1, 0x4, 0x7}) mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r0, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0xb}, 0xd}, 0x1c) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x4e20, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800008}, 0x1c) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000040), 0x0, 0x48000, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240), 0x20082, 0x0) write$vga_arbiter(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB='trylock none'], 0xd) recvmmsg(r3, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000440)=""/47, 0x2f}, {&(0x7f0000001b40)=""/4092, 0xffc}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000003500)=""/4084, 0xff4}, {&(0x7f0000000480)=""/51, 0x33}], 0x5}, 0x6}, {{0x0, 0x0, 0x0}, 0x42}], 0x2, 0x97e3f8282987422f, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="01002dbd7000fedbdf2501000000000000000741000000140018", @ANYRES16=r7, @ANYBLOB='0\x00\x00\x00'], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x181c02, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$FICLONERANGE(r9, 0x4020940d, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r7, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x111}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8100}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0x0) write$cgroup_subtree(r11, &(0x7f0000000040)=ANY=[], 0x9) ioctl$sock_FIOGETOWN(r11, 0x8903, &(0x7f0000000000)) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000100)=ANY=[@ANYRES8=r8, @ANYRES8=r1, @ANYRES16=r10], 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/89, 0x59, 0x2, 0x3d}, @fd, @fda={0x66646185, 0x2, 0x1, 0x3f}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 58.111181471s ago: executing program 3 (id=727): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x402e42, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000014280100"/20], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xb3) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) chdir(&(0x7f0000000340)='./file0\x00') r4 = syz_clone(0x0, 0x0, 0x60, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r4, &(0x7f0000000100)='pagemap\x00') close_range(r3, 0xffffffffffffffff, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f00008c8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="b805000000b9270000000f01d9f3460fc7306747c00df61f0000fcc46251400d0000010066460f7e73d7643645f4c421145472b3b9f00200000f32c442791ed2470f1c7599", 0x45}], 0x1, 0x45, &(0x7f00000000c0), 0x0) 58.031800263s ago: executing program 3 (id=728): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x98, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x8ac87bf8664556cc, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/122, 0x7a, 0x2, 0x31}, @ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/143, 0x8f, 0x2, 0x3e}}, &(0x7f0000000080)={0x0, 0x18, 0x40}}, 0x2440}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000003c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/184, 0xb8, 0x1, 0x3}, @fda={0x66646185, 0x2, 0x1, 0x27}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000440)={0x0, 0x28, 0x48}}}, @register_looper, @register_looper], 0x0, 0x0, &(0x7f00000002c0)}) 57.928796274s ago: executing program 3 (id=731): ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x8, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x80088d0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendfile(r0, r0, 0x0, 0x7ffff000) 57.815416456s ago: executing program 33 (id=731): ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x8, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x80088d0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendfile(r0, r0, 0x0, 0x7ffff000) 4.350549604s ago: executing program 4 (id=1363): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) ioctl$BLKCRYPTOIMPORTKEY(r0, 0xc0401289, &(0x7f0000000140)={&(0x7f0000000040)="a21e61e6c88a95841fde23e4dfcc148a1d32990de4b1a127597cdf7557c9af509cff80a6038df6c6e58cb08352af2f3808753b25af108ad75f1afadc84639aac", 0x40, &(0x7f0000000100)=""/23, 0x17}) preadv2(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000080)=""/88, 0x58}], 0x1, 0xfffffff9, 0x7, 0xd) 4.338006165s ago: executing program 4 (id=1364): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x14, 0x0, 0x1, 0xfffffffc}, {0x6}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x1000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000040)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2000000000000001) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200410a00040000000000008000f4"], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'bridge0\x00'}) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x2) ioctl$TCFLSH(r3, 0x400455c8, 0x0) 3.381317079s ago: executing program 0 (id=1379): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r1, &(0x7f0000000280)='ns/uts\x00') ioctl$SIOCSIFHWADDR(r0, 0x5460, &(0x7f0000000540)={'veth0_macvtap\x00', @link_local}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000001, 0x10, r0, 0x8000000) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6a3, 0xccb, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x8, "01"}]}}, 0x0}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4c4c3294abd26aaf3fb0066bad004b000f303c70fae6e2fc0c00f2d130f01f1260f01ca660f3881b4493c000000c4c2459d78ad", 0x3d}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'team0\x00', &(0x7f0000000280)=@ethtool_rxfh_indir={0x38, 0x1, [0xf]}}) write$cgroup_subtree(r0, &(0x7f0000000100)={[{0x2b, 'hugetlb'}, {0x2b, 'perf_event'}, {0x0, 'pids'}, {0x2d, 'cpu'}, {0x2b, 'net_cls'}, {0x2b, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2b, 'pids'}, {0x0, 'freezer'}]}, 0x49) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) read(r8, &(0x7f0000000080)=""/88, 0x58) 2.210022057s ago: executing program 4 (id=1380): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) userfaultfd(0x80000) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000340)=ANY=[], 0x2b08}}, 0x4004006) timer_settime(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "2697312e4e898ca7", "35e23ca3a988def7dfbd438c536346cd", "11398f4a", "50cc97386065eda9"}, 0x28) recvmmsg(r2, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x2004}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/106, 0x6a}], 0x1}, 0x4}], 0x2, 0x40000002, 0x0) r4 = signalfd4(r0, &(0x7f0000000000)={[0xfffffffffffffffc]}, 0x8, 0x800) r5 = openat(r4, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r5, &(0x7f0000000040), 0x0, 0x0, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000340)=[@increfs, @request_death={0x400c630e, 0x3}], 0x0, 0x0, 0x0}) 1.837377322s ago: executing program 5 (id=1383): r0 = syz_open_dev$usbmon(&(0x7f0000002500), 0x8, 0x2) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020}, 0x2020) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000000)={'sit0\x00', {0x2, 0x0, @local}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x1, &(0x7f0000002480)=""/227, 0xe3, 0x2, 0x29}, @fd, @ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 1.769410014s ago: executing program 5 (id=1384): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}]}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r1, &(0x7f0000000980)={0x2020}, 0x2020) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) (async) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}]}) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') (async) read$FUSE(r1, &(0x7f0000000980)={0x2020}, 0x2020) (async) 1.708697204s ago: executing program 5 (id=1385): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x6000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$poke(0x5, r5, &(0x7f0000000000), 0x8) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000300)=&(0x7f0000000240)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x40}, {{@in6=@mcast1, 0x4, 0x3c}, 0x2, @in6=@dev}, {{@in=@rand_addr=0x64010101, 0x0, 0x3c}, 0x0, @in=@empty, 0xffffffff}, {{@in=@multicast1, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x4}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x84) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0xeeee0000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000980)={0x6, 0x0, [{0x0, 0x96, &(0x7f00000006c0)=""/150}, {0xf000, 0x4b, &(0x7f0000000780)=""/75}, {0xe6e68000, 0x26, &(0x7f00000003c0)=""/38}, {0xeeee8000, 0x8, &(0x7f0000000800)=""/8}, {0x0, 0x53, &(0x7f0000000840)=""/83}, {0x1000, 0xa1, &(0x7f00000008c0)=""/161}]}) r7 = socket$can_raw(0x1d, 0x3, 0x1) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c000000fd", @ANYRES16=0x0, @ANYBLOB="000029bd7000fddbdf250200000008000200010040000500050003000000050005000300000005000600010000000800030000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004050) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000a80)=ANY=[@ANYBLOB="82010000000002008060ac3b877b3d75a19e02c433e9d612a141461b963a329b962d6f3a85e6cd6cc0f74ac9d08c7177f6c0928126c7765600bb56b33ca98b24a5e62bc318130678b93184f6531fd99e901c5d9f20f178521162ab81f1f79cc2a14276c1a27169fd4fcdd3fc2baac7e0e6d9e856822369ca51520f29d6321c38080144db57e3f48a2bb9b19c157206e41aa495dc63e7ac3c3a92c9711085f692fe00b13cc1ec1c12899a4f14000000000000"]) getsockopt$CAN_RAW_LOOPBACK(r7, 0x65, 0x3, &(0x7f0000000040), &(0x7f0000000180)=0x4) r10 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r10, 0x29, 0x2a, &(0x7f0000034000)={0xc, {{0xa, 0x1, 0x3, @mcast2, 0x10000000}}}, 0x88) getsockopt$inet6_buf(r10, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 1.707964875s ago: executing program 5 (id=1386): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000400)='net/ip6_tables_matches\x00') pread64(r3, &(0x7f0000001b80)=""/4084, 0xff4, 0x7f) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB='max=\x00']) 1.663340385s ago: executing program 4 (id=1387): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x161200, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000280)=0x13) 1.650862985s ago: executing program 4 (id=1388): ioprio_set$uid(0x3, 0x0, 0x2004) r0 = userfaultfd(0x80001) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f00000003c0)=0x200) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000006c0)={'bridge_slave_0\x00', 0x600}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, 0x0, 0x0) r6 = getuid() mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x10820, &(0x7f0000002500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',msize=0x0000000000000006,version=9p2000,async,fowner=', @ANYRESDEC=r6, @ANYBLOB=',dont_apprUise,mask=^MAY_EXEC,\x00']) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) rt_tgsigqueueinfo(0x0, 0x0, 0x17, &(0x7f0000000600)={0x26, 0x7, 0x80000000}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x14, &(0x7f0000000140)="a754fc53c4e4fa1379cb2728ca41bcfdd7263c746624139564ef3b535295e33fe883e8afd0093c6a0067dfb6", 0x2c) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x14000, 0x7, &(0x7f00006cc000/0x14000)=nil) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x109102, 0x0) read$FUSE(r8, &(0x7f00000004c0)={0x2020}, 0x2020) write$FUSE_INIT(r8, 0x0, 0x0) r9 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r9, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r10, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000380)="ec5879bcae4ebf1dcf85134d8b5e05505209abff506d2f73957fa39fbdbc84a722e85b7aa2dd37976eaa5b831df72f213796242fbd571621cc5d7cdf0257b01ea7a5119e8f9d6ed2b82920a14886fc0c"}) 1.593725826s ago: executing program 5 (id=1389): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000008cb06a78100000000000109022400010000300009040000020300020009211c000001220b0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40900, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000014f000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000005740)={{0x1, 0x0, 0x80, {0x0, 0x8081000}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="65660fc736b9230200000f320fc5b0040000000f0f10970fe8fa640f01cfc4e21d4501c744240000000000c74424021c320000c744240600000000c4e17de69222ad2eec0e476e04b8200fae82ef66bafc0c66b8004066ef66b8296c", 0x5c}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.505918918s ago: executing program 4 (id=1390): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x1000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2000000000000001) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x400000ff, 0x0, 0x1000}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth1_to_bond\x00', 0x0}) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x8044, &(0x7f00000003c0)={0x11, 0xd, r8, 0x1, 0x7, 0x6, @random="eb68e3f58965"}, 0x14) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'bridge0\x00'}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) ioctl$TCFLSH(r6, 0x400455c8, 0x0) 920.348146ms ago: executing program 2 (id=1392): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, 0x0) syz_clone3(0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x118b, 0x200000000000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40000) poll(0x0, 0x0, 0xfd) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x8}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000040)={0x1f, 0x0, 0x381, 0x0, 0x0, 0x9e25}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 609.784781ms ago: executing program 2 (id=1393): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001bc0), 0x0, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x10}], 0x5b, 0x0, 0x0}) 608.177581ms ago: executing program 2 (id=1394): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) (async, rerun: 32) syz_clone3(&(0x7f0000003440)={0x88000000, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[0xffffffffffffffff], 0x1}, 0x58) (async, rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x44, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000380)="e1c194c07314197567609163a955a737cfdca424e4fc4ea388b431c78b32749341c73f7b7c51446e6bbf7f1de6a8ca5eb7372e3b24ef390ae15b6574683711fa3caff8f4fb3d0ca15b91526634d34eb3"}) 595.144791ms ago: executing program 2 (id=1395): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) userfaultfd(0xc0000) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x21}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) 575.460442ms ago: executing program 2 (id=1396): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x161200, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000280)=0x13) 521.433262ms ago: executing program 2 (id=1397): r0 = epoll_create1(0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) ioctl$KVM_CAP_STEAL_TIME(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003b6bc040950b2b774ca2180203010902120001000001000904"], 0x0) eventfd2(0x8, 0x80001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') syz_fuse_handle_req(r3, &(0x7f0000000240)="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", 0x2000, &(0x7f0000009600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, 0x0) syz_usb_ep_read(r2, 0x8, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, r4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000000c0), 0x12) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) read$FUSE(r7, &(0x7f0000000080)={0x2020}, 0x2020) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x71d, 0x2000) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000180)={0x0, 0x7, 0x1, 0x9ba, 0x196, 0x6, &(0x7f00000001c0)="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"}) writev(r0, &(0x7f0000000800), 0x0) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io(r9, &(0x7f0000000b00)={0x18, &(0x7f0000000a00)={0x40, 0x30, 0x11, {0x11, 0xf, "b4de389fadd599cb9286690595295c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_read(r9, 0x5, 0x3a, &(0x7f0000002280)=""/58) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) 409.988604ms ago: executing program 0 (id=1398): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000000440)="f30fc7340366baf80cb84bbee38aef66bafc0cec3ef30fc770d966baf80cb8a04aa989ef66bafc0cedc4c125fa2166b8e6008ec8c4e3055ca4aaf00f000000c4c2f9aa0766baf80cb808da688aef66bafc0cb8d254e399ef0f004103", 0x5c}], 0x1, 0x10, 0x0, 0x0) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000003c0)=0x6121, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x1) write(r0, &(0x7f0000000480)="4d4287ac770767f7429748", 0xb) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r4, 0x82307202, 0x0) r5 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000000)={0x1, 0x2, [{0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0x10000, 0x1000000000000}]}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000040)=0x2) 393.273454ms ago: executing program 0 (id=1399): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000000)=0x8, 0x4) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r2, &(0x7f00000002c0)={0x2020}, 0x2020) setsockopt$packet_int(r1, 0x107, 0x14, 0x0, 0x0) read(r0, &(0x7f0000000080)=""/93, 0xffffff6c) 229.662857ms ago: executing program 0 (id=1400): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000580001c0"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92, 0x80a0000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)={[0x202a4, 0x7, 0x8000, 0x800000000005, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x1, 0x8000000000000000, 0xff], 0x0, 0x41845}) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x1, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020409100000000000004c9e00000002001300027f0000000000000000004105000600200000000a000000000000000005000201080f00e0001f080000000000092000000000000200010020e9ffeeffff0702000098a805000500ea0000000a"], 0x80}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x393, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', &(0x7f0000000140), 0x804800, &(0x7f0000000000)=ANY=[]) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x5, 0xeb1a8a5aac802bed, 0xdddd1000, 0x1000, &(0x7f0000000000/0x1000)=nil}) 155.987988ms ago: executing program 0 (id=1401): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = userfaultfd(0x801) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x4) r4 = openat$cgroup_pressure(r3, &(0x7f00000001c0)='io.pressure\x00', 0x2, 0x0) close_range(r1, r4, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x7, 0x0, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000040)=ANY=[@ANYBLOB="636f79424c0d56a72269358edd1994c3f9d26e746578743d73797374656d5f752c"]) 30.89945ms ago: executing program 0 (id=1402): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffffffffffed) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)=')}%!:\xb9+\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000094}]}) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x14) r5 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x3, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000000}}}, 0x108) r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') read$FUSE(r8, &(0x7f00000021c0)={0x2020}, 0x2040) syz_open_procfs(0x0, 0x0) r9 = socket(0x1e, 0x1, 0x0) connect$tipc(r9, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) write$binfmt_misc(r9, &(0x7f0000000340), 0x2000011a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth0_vlan\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e24, 0x3, 0x4e22, 0x0, 0xa, 0xa0, 0x80, 0x0, r10, 0xffffffffffffffff}, {0xffff, 0x7, 0x9, 0xc9e5, 0x0, 0xc9, 0xfb}, {0x7, 0xc8, 0x3, 0x1}, 0xa66, 0x0, 0x1, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x4d4, 0x6c}, 0x2, @in6=@mcast2, 0x3500, 0x2, 0x6, 0x6, 0x7288, 0x2, 0x6}}, 0xe8) sendmsg$TIPC_NL_NODE_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x1bc}, 0x1, 0x0, 0x0, 0x48004}, 0x4004008) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) unlinkat(r11, &(0x7f0000000040)='.\x00', 0x0) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x54, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x40004) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 0s ago: executing program 5 (id=1403): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x1, 0xa0, 0x7, 0x5}]}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000200)={0x14, &(0x7f0000000080)={0x40, 0x6, 0x23, {0x23, 0xd, "d917c632be6504bd9dedc319c2d436ecac3899a4ab87eaaa86caa7af6e3f337a42"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x44, &(0x7f0000000640)={0x0, 0x15, 0xd9, "6debd50532ee56c1aa93eb88431a88a947446751ea85eab8fefef0908c9a3805a5a24da8f565f7d6292dc94a18b857f56956bce687683e9ebfb0acd46b583a3413ecea4873622010cc9ed850dc788999bcb22a8524df443912b1299e4236a31e3aeb24d2b2a2bcb19ad59e8634a565be74ad36b2c136b39c0c62b6ffdc03bf17dd7e047044d65bf9c99b5b2c83f35c20598071019ba3cc643ce8d55111bae1408c25e92557f70433d37f80698eb5dc324aaafdedd6bf0eb1423cd329d7bc43a5e6a0bf8868f6ccf972e495bff226108a35cdfff1fef8b29a4c"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000440)={0x0, 0x8, 0x1}, &(0x7f0000000480)={0x20, 0x80, 0x1c, {0x9, 0x683, 0x10000, 0x7, 0x500a, 0x6, 0x3, 0x1, 0x9, 0x2, 0x4, 0x829c}}, &(0x7f00000004c0)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000500)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000540)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000000580)={0x20, 0x89, 0x2, 0x1}}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="002204", 0x7f8) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0\x00', 0x176) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc9a, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0xfffffffffffffce6}}, 0x10}], 0x0, 0x0, 0x0}) r3 = syz_usb_connect(0x2, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x3a, 0x37, 0x5, 0x20, 0x781, 0x5, 0x5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xe6, 0x2, 0x2, 0x5b, 0xbd, 0x97, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000004c0)={0x24, &(0x7f0000000240)={0x40, 0x0, 0x3, "c59ce2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000200)={0x10, &(0x7f0000000140)={0x20, 0x12, 0x1, "f8"}, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000980)={0x34, &(0x7f00000006c0)={0x40, 0x14, 0x1, "f6"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, &(0x7f00000007c0)={0x2c, &(0x7f0000000340)={0x20, 0x24, 0xb8, {0xb8, 0x2, "9c51df87aa5f91c281a83f8b551349c24f9ab3a6e0c597fd91df938592e0d92b63c18acb67e51bfeb10476c38b6d88ead0301cbb3c92d85be25b010e64173e2052cdef276f42e421680a371c3d03cfcf4c9659973c812f891ecb2a03d05dba40eb5a78f79938bc3e1f857ba725431442e71970defc94bff222efac55d77f7438eee11eae33fd85070e32b987ff29618a43e9b4e1f4350e15a35cc5993174173dd1bd3ce4311322c166f5a15d58a55118d4e62220861d"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x448}}, &(0x7f0000000400)={0x0, 0xf, 0x2d, {0x5, 0xf, 0x2d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xdf, "fa4b5e32152474e0968154505988f9de"}, @ssp_cap={0x14, 0x10, 0xa, 0xfb, 0x2, 0x3, 0xf000, 0x0, [0x3fc0, 0x1fe0000]}]}}, &(0x7f0000000740)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x2, 0x0, 0x0, "ab0e6ed5", "2285e4b8"}}, &(0x7f0000000780)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe, 0x1, 0x1, 0x40, 0x7, 0x8, 0x2}}}, &(0x7f0000000cc0)={0x84, &(0x7f0000000800)={0x40, 0x16, 0xf1, "45b4c0311463708aad96bbfe07905e5afc12966766db673a7d554d462ca00a2c9591301e5b9c21fdebfcad8fd1a7c0c2dd89c80827cd4cc8c42902dfa29422245fafd20f62d170325b9172ba2beec0a8ff5c463e201469dcc2ac79b15ec1fa2c3ba3665dd9780e7d81315ef188bc0c1a5da92d1f7b4ae83c65c1f28226b4028554e1c3d4235422d5dea1c8ccc40da56693697c275d1c90913d06320ec3afc51f83ecf15a1dd49bc1ad101dc56391e708bab217e3834aa32b781df7f81c902404aea6a218e46094f1a01d56c7fe665c1f462a596b5e38964a667afb4808683569b5f8188d22217410e4dddc322b18402498"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000940)={0x0, 0x8, 0x1}, &(0x7f0000000980)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f00000009c0)={0x20, 0x0, 0x4, {0x140, 0x2}}, &(0x7f0000000a00)={0x40, 0x7, 0x2}, &(0x7f0000000a40)={0x40, 0x9, 0x1, 0xfe}, &(0x7f0000000a80)={0x40, 0xb, 0x2, "1cf9"}, &(0x7f0000000ac0)={0x40, 0xf, 0x2, 0x40}, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, &(0x7f0000000b40)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000b80)={0x40, 0x19, 0x2, '$\v'}, &(0x7f0000000bc0)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000c00)={0x40, 0x1c, 0x1, 0x5d}, &(0x7f0000000c40)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000c80)={0x40, 0x21, 0x1, 0x7d}}) kernel console output (not intermixed with test programs): root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 82.400836][ T2328] binder: Unknown parameter 'context' [ 82.406109][ T36] audit: type=1326 audit(1750565376.710:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2327 comm="syz.3.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ff18e929 code=0x7ffc0000 [ 82.426920][ T2330] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.430233][ T36] audit: type=1326 audit(1750565376.710:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2327 comm="syz.3.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe5ff18e929 code=0x7ffc0000 [ 82.431256][ T2330] rust_binder: inc_ref_done called when no active inc_refs [ 82.462218][ T45] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 82.479634][ T45] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 82.497566][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 82.507105][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 82.523772][ T45] usb 3-1: SerialNumber: syz [ 82.533530][ T2311] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 82.536398][ T2332] tipc: Started in network mode [ 82.545700][ T2332] tipc: Node identity 111, cluster identity 4711 [ 82.552640][ T2332] tipc: Node number set to 273 [ 82.746458][ T2311] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 82.787552][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 82.787931][ T325] Bluetooth: hci0: command 0x1003 tx timeout [ 82.797744][ T567] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 82.937507][ T567] usb 4-1: device descriptor read/64, error -71 [ 83.157915][ T2311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.166828][ T2311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.176120][ T45] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 83.184541][ T567] usb 4-1: device descriptor read/64, error -71 [ 83.237612][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 83.379329][ T2311] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 83.387531][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 83.403275][ T9] usb 5-1: config 23 has an invalid interface number: 179 but max is 0 [ 83.411804][ T9] usb 5-1: config 23 contains an unexpected descriptor of type 0x2, skipping [ 83.420882][ T9] usb 5-1: config 23 contains an unexpected descriptor of type 0x2, skipping [ 83.430020][ T9] usb 5-1: config 23 has no interface number 0 [ 83.436380][ T9] usb 5-1: config 23 interface 179 altsetting 12 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 83.437938][ T567] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 83.447850][ T9] usb 5-1: config 23 interface 179 altsetting 12 has a duplicate endpoint with address 0x9, skipping [ 83.466272][ T9] usb 5-1: config 23 interface 179 altsetting 12 endpoint 0x6 has an invalid bInterval 139, changing to 7 [ 83.478139][ T9] usb 5-1: config 23 interface 179 altsetting 12 has a duplicate endpoint with address 0xC, skipping [ 83.489502][ T9] usb 5-1: config 23 interface 179 altsetting 12 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 83.500879][ T9] usb 5-1: config 23 interface 179 altsetting 12 has a duplicate endpoint with address 0xD, skipping [ 83.512749][ T9] usb 5-1: config 23 interface 179 altsetting 12 has a duplicate endpoint with address 0xD, skipping [ 83.517178][ T2349] netlink: 44 bytes leftover after parsing attributes in process `syz.0.703'. [ 83.524467][ T9] usb 5-1: config 23 interface 179 altsetting 12 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 83.545218][ T9] usb 5-1: config 23 interface 179 altsetting 12 endpoint 0x83 has an invalid bInterval 153, changing to 7 [ 83.557026][ T9] usb 5-1: config 23 interface 179 altsetting 12 endpoint 0x83 has invalid maxpacket 26601, setting to 1024 [ 83.569164][ T9] usb 5-1: config 23 interface 179 altsetting 12 has a duplicate endpoint with address 0x5, skipping [ 83.580276][ T9] usb 5-1: config 23 interface 179 altsetting 12 has a duplicate endpoint with address 0xF, skipping [ 83.591466][ T9] usb 5-1: config 23 interface 179 altsetting 12 has 16 endpoint descriptors, different from the interface descriptor's value: 15 [ 83.605173][ T9] usb 5-1: config 23 interface 179 has no altsetting 0 [ 83.614462][ T9] usb 5-1: New USB device found, idVendor=19d2, idProduct=fff7, bcdDevice=db.50 [ 83.617545][ T567] usb 4-1: device descriptor read/64, error -71 [ 83.623844][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.638054][ T9] usb 5-1: Product: щ [ 83.642297][ T9] usb 5-1: Manufacturer: ࠠ [ 83.647139][ T9] usb 5-1: SerialNumber: 䙩᜾䚱モ썱䉄癎滤쫉黴מ뉀趹罃ഋ뫠ᕋ궤粿统눕齴橭┤⒰䐨엾邠ָ儍믰ꤏ筯뤭茻ꀞﭩ䊸⸒ꈘ､엺놵↖ߒ⊻ [ 83.867582][ T567] usb 4-1: device descriptor read/64, error -71 [ 83.888383][ T9] usb 5-1: USB disconnect, device number 2 [ 83.982388][ T567] usb usb4-port1: attempt power cycle [ 84.327595][ T567] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 84.348809][ T567] usb 4-1: device descriptor read/8, error -71 [ 84.431747][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 84.478676][ T567] usb 4-1: device descriptor read/8, error -71 [ 84.727542][ T567] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 84.758824][ T567] usb 4-1: device descriptor read/8, error -71 [ 84.888562][ T567] usb 4-1: device descriptor read/8, error -71 [ 84.941358][ T305] usb 3-1: USB disconnect, device number 20 [ 85.002519][ T567] usb usb4-port1: unable to enumerate USB device [ 85.668038][ T2424] selinux_netlink_send: 55 callbacks suppressed [ 85.668065][ T2424] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=10260 sclass=netlink_tcpdiag_socket pid=2424 comm=syz.3.727 [ 85.812215][ T13] bridge_slave_1: left allmulticast mode [ 85.834784][ T13] bridge_slave_1: left promiscuous mode [ 85.848727][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.880576][ T13] bridge_slave_0: left allmulticast mode [ 85.906406][ T13] bridge_slave_0: left promiscuous mode [ 85.921833][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.130449][ T13] tipc: Left network mode [ 86.142739][ T13] veth1_macvtap: left promiscuous mode [ 86.148488][ T13] veth0_vlan: left promiscuous mode [ 86.268234][ T2439] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.275298][ T2439] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.282689][ T2439] bridge_slave_0: entered allmulticast mode [ 86.289413][ T2439] bridge_slave_0: entered promiscuous mode [ 86.296177][ T2439] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.303641][ T2439] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.310919][ T2439] bridge_slave_1: entered allmulticast mode [ 86.317347][ T2439] bridge_slave_1: entered promiscuous mode [ 86.385432][ T2439] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.392563][ T2439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.400028][ T2439] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.407198][ T2439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.439157][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.446638][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.456782][ T327] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.463885][ T327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.471660][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 86.477825][ T325] Bluetooth: hci0: command 0x1003 tx timeout [ 86.485674][ T327] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.492973][ T327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.500504][ T305] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 86.532722][ T2439] veth0_vlan: entered promiscuous mode [ 86.549238][ T2439] veth1_macvtap: entered promiscuous mode [ 86.570869][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 86.570891][ T36] audit: type=1400 audit(1750565380.880:439): avc: denied { setcheckreqprot } for pid=2459 comm="syz.4.742" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 86.679217][ T305] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 86.690591][ T305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.693013][ T2471] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 86.702784][ T305] usb 3-1: config 0 descriptor?? [ 86.707822][ T2471] rust_binder: Write failure EINVAL in pid:9 [ 86.807633][ T422] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 86.837584][ T2480] tipc: Started in network mode [ 86.842503][ T2480] tipc: Node identity 6ab7578ae189, cluster identity 4711 [ 86.850408][ T2480] tipc: Enabled bearer , priority 0 [ 86.857929][ T2480] tipc: Resetting bearer [ 86.875086][ T2480] tipc: Disabling bearer [ 86.922916][ T36] audit: type=1400 audit(1750565381.230:440): avc: denied { create } for pid=2439 comm="syz-executor" name="#13" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 86.943995][ T36] audit: type=1400 audit(1750565381.230:441): avc: denied { link } for pid=2439 comm="syz-executor" name="#13" dev="tmpfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 86.967655][ T422] usb 5-1: device descriptor read/64, error -71 [ 86.967938][ T36] audit: type=1400 audit(1750565381.230:442): avc: denied { rename } for pid=2439 comm="syz-executor" name="#14" dev="tmpfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 87.003283][ T36] audit: type=1400 audit(1750565381.230:443): avc: denied { connect } for pid=2490 comm="syz.0.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 87.016134][ T2494] rust_binder: Write failure EINVAL in pid:16 [ 87.033518][ T36] audit: type=1400 audit(1750565381.340:444): avc: denied { search } for pid=2493 comm="syz.0.755" name="/" dev="configfs" ino=1163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 87.106212][ T327] Bluetooth: hci0: Frame reassembly failed (-84) [ 87.116686][ T305] usb 3-1: Cannot set MAC address [ 87.122467][ T305] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 87.138952][ T305] usb 3-1: USB disconnect, device number 21 [ 87.217727][ T422] usb 5-1: device descriptor read/64, error -71 [ 87.457536][ T422] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 87.588583][ T422] usb 5-1: device descriptor read/64, error -71 [ 87.717255][ T2517] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:328 [ 87.718260][ T2517] input: syz0 as /devices/virtual/input/input14 [ 87.828059][ T422] usb 5-1: device descriptor read/64, error -71 [ 87.856990][ T2521] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:331 [ 87.857642][ T2522] rust_binder: Error while translating object. [ 87.867406][ T2522] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 87.874104][ T2522] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:331 [ 87.948691][ T422] usb usb5-port1: attempt power cycle [ 88.010627][ T2539] fuse: Bad value for 'fd' [ 88.050885][ T36] audit: type=1400 audit(1750565382.360:445): avc: denied { getopt } for pid=2545 comm="syz.0.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 88.297555][ T422] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 88.319367][ T422] usb 5-1: device descriptor read/8, error -71 [ 88.459285][ T422] usb 5-1: device descriptor read/8, error -71 [ 88.707904][ T422] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 88.729579][ T422] usb 5-1: device descriptor read/8, error -71 [ 88.853079][ T2586] netlink: 'syz.0.785': attribute type 4 has an invalid length. [ 88.870115][ T422] usb 5-1: device descriptor read/8, error -71 [ 88.934018][ T36] audit: type=1400 audit(1750565383.240:446): avc: denied { create } for pid=2595 comm="syz.0.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 88.977755][ T422] usb usb5-port1: unable to enumerate USB device [ 89.107549][ T325] Bluetooth: hci0: command 0x1003 tx timeout [ 89.107704][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 89.438323][ T2601] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 89.445772][ T2601] rust_binder: Write failure EINVAL in pid:24 [ 89.864160][ T36] audit: type=1400 audit(1750565384.170:447): avc: denied { setattr } for pid=2613 comm="syz.0.795" path="socket:[18005]" dev="sockfs" ino=18005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 89.894542][ T36] audit: type=1400 audit(1750565384.200:448): avc: denied { setopt } for pid=2613 comm="syz.0.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 89.967502][ T567] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 90.127495][ T567] usb 5-1: Using ep0 maxpacket: 8 [ 90.138741][ T567] usb 5-1: config 5 has an invalid interface number: 143 but max is 2 [ 90.147049][ T567] usb 5-1: config 5 has an invalid interface number: 6 but max is 2 [ 90.167518][ T567] usb 5-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 90.176256][ T567] usb 5-1: config 5 has an invalid descriptor of length 166, skipping remainder of the config [ 90.197529][ T567] usb 5-1: config 5 has no interface number 1 [ 90.203655][ T567] usb 5-1: config 5 has no interface number 2 [ 90.209816][ T567] usb 5-1: config 5 interface 143 altsetting 30 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 90.227646][ T567] usb 5-1: too many endpoints for config 5 interface 6 altsetting 7: 122, using maximum allowed: 30 [ 90.245390][ T567] usb 5-1: config 5 interface 6 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 122 [ 90.259755][ T567] usb 5-1: too many endpoints for config 5 interface 0 altsetting 5: 36, using maximum allowed: 30 [ 90.277428][ T567] usb 5-1: config 5 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 36 [ 90.290696][ T567] usb 5-1: config 5 interface 143 has no altsetting 0 [ 90.297837][ T567] usb 5-1: config 5 interface 6 has no altsetting 0 [ 90.304541][ T567] usb 5-1: config 5 interface 0 has no altsetting 0 [ 90.313907][ T567] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=fc.f3 [ 90.323208][ T567] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.331510][ T567] usb 5-1: Product: syz [ 90.335704][ T567] usb 5-1: Manufacturer: syz [ 90.340595][ T567] usb 5-1: SerialNumber: syz [ 90.548428][ T2608] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 90.548468][ T2608] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:25 [ 90.569118][ T567] usb 5-1: MIDIStreaming interface descriptor not found [ 90.588581][ T567] usb 5-1: USB disconnect, device number 7 [ 90.758101][ T306] udevd[306]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:5.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 91.132221][ T2646] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 91.132249][ T2646] rust_binder: Read failure Err(EFAULT) in pid:351 [ 91.367538][ T961] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 91.527520][ T961] usb 3-1: Using ep0 maxpacket: 32 [ 91.538258][ T961] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 91.546393][ T961] usb 3-1: config 0 has no interface number 0 [ 91.558868][ T961] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 91.568113][ T961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.576141][ T961] usb 3-1: Product: syz [ 91.580632][ T961] usb 3-1: Manufacturer: syz [ 91.585265][ T961] usb 3-1: SerialNumber: syz [ 91.592211][ T961] usb 3-1: config 0 descriptor?? [ 91.599565][ T961] smsc95xx v2.0.0 [ 92.015952][ T961] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 92.037535][ T961] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 92.057533][ T961] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 92.077555][ T961] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 92.100696][ T961] usb 3-1: USB disconnect, device number 22 [ 92.147537][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 92.269926][ T2673] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 92.351585][ T2678] fuse: Bad value for 'user_id' [ 92.356486][ T2678] fuse: Bad value for 'user_id' [ 92.390569][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 92.390592][ T36] audit: type=1400 audit(1750565386.700:453): avc: denied { remount } for pid=2679 comm="syz.4.820" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 92.470205][ T36] audit: type=1400 audit(1750565386.780:454): avc: denied { create } for pid=2682 comm="syz.0.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 92.510001][ T36] audit: type=1400 audit(1750565386.820:455): avc: denied { connect } for pid=2693 comm="syz.5.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.536314][ T2694] loop2: detected capacity change from 0 to 7 [ 92.543130][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 92.552564][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 92.560780][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 92.570008][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 92.578070][ T2694] loop2: unable to read partition table [ 92.583801][ T2694] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 92.594801][ T2694] rust_binder: Write failure EINVAL in pid:40 [ 92.603383][ T961] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 92.747507][ T567] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 92.767526][ T961] usb 3-1: Using ep0 maxpacket: 8 [ 92.773764][ T961] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.785054][ T961] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.795471][ T961] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.809216][ T961] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 92.818909][ T961] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.828060][ T961] usb 3-1: config 0 descriptor?? [ 92.897520][ T567] usb 5-1: Using ep0 maxpacket: 32 [ 92.903894][ T567] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 92.915855][ T567] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 92.927272][ T567] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 92.938697][ T567] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 92.948022][ T567] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.957882][ T567] usb 5-1: config 0 descriptor?? [ 92.963445][ T2686] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 92.978351][ T567] hub 5-1:0.0: USB hub found [ 93.172935][ T2686] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2686 comm=syz.4.822 [ 93.187380][ T567] hub 5-1:0.0: 2 ports detected [ 93.238173][ T961] hid-rmi 0003:06CB:81A7.0009: unknown main item tag 0x0 [ 93.245308][ T961] hid-rmi 0003:06CB:81A7.0009: unknown main item tag 0x0 [ 93.252463][ T961] hid-rmi 0003:06CB:81A7.0009: unknown main item tag 0x0 [ 93.259591][ T961] hid-rmi 0003:06CB:81A7.0009: unknown main item tag 0x0 [ 93.266784][ T961] hid-rmi 0003:06CB:81A7.0009: unknown main item tag 0x0 [ 93.273988][ T961] hid-rmi 0003:06CB:81A7.0009: unknown main item tag 0x0 [ 93.281112][ T961] hid-rmi 0003:06CB:81A7.0009: unknown main item tag 0x0 [ 93.288219][ T961] hid-rmi 0003:06CB:81A7.0009: unknown main item tag 0x0 [ 93.295289][ T961] hid-rmi 0003:06CB:81A7.0009: unknown main item tag 0x0 [ 93.302416][ T961] hid-rmi 0003:06CB:81A7.0009: unknown main item tag 0x0 [ 93.309565][ T961] hid-rmi 0003:06CB:81A7.0009: unknown main item tag 0x0 [ 93.317790][ T961] hid-rmi 0003:06CB:81A7.0009: hidraw0: USB HID v0.1c Device [HID 06cb:81a7] on usb-dummy_hcd.2-1/input0 [ 93.392562][ T567] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 93.398986][ T567] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 93.408188][ T567] usbhid 5-1:0.0: can't add hid device: -71 [ 93.414186][ T567] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 93.437977][ T567] usb 5-1: USB disconnect, device number 8 [ 93.579602][ T961] usb 3-1: USB disconnect, device number 23 [ 93.641851][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 93.965144][ T2737] tmpfs: Unsupported parameter 'mpol' [ 93.971358][ T2737] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 93.971391][ T2737] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.070580][ T36] audit: type=1400 audit(1750565388.380:456): avc: denied { name_bind } for pid=2760 comm="syz.0.848" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 94.269676][ T2775] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 94.307533][ T961] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 94.363639][ T2783] rust_binder: Error while translating object. [ 94.363687][ T2783] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 94.369953][ T2783] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:376 [ 94.478979][ T961] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.498736][ T961] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.509073][ T961] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 94.518207][ T961] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 94.526252][ T961] usb 5-1: SerialNumber: syz [ 94.637548][ T567] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 94.732550][ T2759] rust_binder: Write failure EFAULT in pid:62 [ 94.735022][ T961] usb 5-1: 0:2 : does not exist [ 94.748852][ T961] usb 5-1: USB disconnect, device number 9 [ 94.787585][ T567] usb 3-1: Using ep0 maxpacket: 16 [ 94.794238][ T567] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.805333][ T567] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.815181][ T567] usb 3-1: config 0 interface 0 has no altsetting 0 [ 94.821887][ T567] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 94.830996][ T567] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.839890][ T567] usb 3-1: config 0 descriptor?? [ 94.918267][ T617] udevd[617]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 95.251439][ T567] kye 0003:0458:0138.000A: unknown main item tag 0x4 [ 95.258388][ T567] kye 0003:0458:0138.000A: unexpected long global item [ 95.261131][ T2793] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:65 [ 95.265477][ T567] kye 0003:0458:0138.000A: parse failed [ 95.271255][ T2793] input: syz0 as /devices/virtual/input/input17 [ 95.278365][ T567] kye 0003:0458:0138.000A: probe with driver kye failed with error -22 [ 95.287555][ T2793] rust_binder: Read failure Err(EFAULT) in pid:65 [ 95.453387][ T36] audit: type=1400 audit(1750565389.760:457): avc: denied { read } for pid=2785 comm="syz.2.857" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 95.458429][ T2786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.459982][ T36] audit: type=1400 audit(1750565389.760:458): avc: denied { open } for pid=2785 comm="syz.2.857" path="/124/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 95.460029][ T36] audit: type=1400 audit(1750565389.760:459): avc: denied { ioctl } for pid=2785 comm="syz.2.857" path="/124/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0xae62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 95.543189][ T2786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.554993][ T422] usb 3-1: USB disconnect, device number 24 [ 95.667577][ T325] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 95.667873][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 95.673970][ T567] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 95.827546][ T567] usb 5-1: device descriptor read/64, error -71 [ 95.997577][ T422] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 96.077515][ T567] usb 5-1: device descriptor read/64, error -71 [ 96.098543][ T36] audit: type=1400 audit(1750565390.410:460): avc: denied { mounton } for pid=2853 comm="syz.2.885" path="/proc/381/cgroup" dev="proc" ino=18960 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 96.147487][ T422] usb 6-1: Using ep0 maxpacket: 8 [ 96.154735][ T422] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.168315][ T422] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.178741][ T422] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.192181][ T422] usb 6-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 96.205108][ T422] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.218499][ T422] usb 6-1: config 0 descriptor?? [ 96.327677][ T567] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 96.467533][ T567] usb 5-1: device descriptor read/64, error -71 [ 96.630384][ T422] hid-rmi 0003:06CB:81A7.000B: unknown main item tag 0x0 [ 96.637689][ T422] hid-rmi 0003:06CB:81A7.000B: unknown main item tag 0x0 [ 96.644888][ T422] hid-rmi 0003:06CB:81A7.000B: unknown main item tag 0x0 [ 96.652134][ T422] hid-rmi 0003:06CB:81A7.000B: unknown main item tag 0x0 [ 96.659427][ T422] hid-rmi 0003:06CB:81A7.000B: unknown main item tag 0x0 [ 96.666622][ T422] hid-rmi 0003:06CB:81A7.000B: unknown main item tag 0x0 [ 96.673894][ T422] hid-rmi 0003:06CB:81A7.000B: unknown main item tag 0x0 [ 96.681137][ T422] hid-rmi 0003:06CB:81A7.000B: unknown main item tag 0x0 [ 96.688432][ T422] hid-rmi 0003:06CB:81A7.000B: unknown main item tag 0x0 [ 96.695638][ T422] hid-rmi 0003:06CB:81A7.000B: unknown main item tag 0x0 [ 96.702910][ T422] hid-rmi 0003:06CB:81A7.000B: unknown main item tag 0x0 [ 96.711491][ T422] hid-rmi 0003:06CB:81A7.000B: hidraw0: USB HID v0.1c Device [HID 06cb:81a7] on usb-dummy_hcd.5-1/input0 [ 96.717539][ T567] usb 5-1: device descriptor read/64, error -71 [ 96.839171][ T567] usb usb5-port1: attempt power cycle [ 96.959745][ T961] usb 6-1: USB disconnect, device number 2 [ 96.997234][ T2876] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 97.006289][ T2876] rust_binder: Write failure EFAULT in pid:387 [ 97.026984][ T2884] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:395 [ 97.179837][ T567] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 97.207563][ T2896] FAULT_INJECTION: forcing a failure. [ 97.207563][ T2896] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 97.220864][ T2896] CPU: 1 UID: 0 PID: 2896 Comm: syz.2.897 Not tainted 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473 [ 97.220900][ T2896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 97.220920][ T2896] Call Trace: [ 97.220928][ T2896] [ 97.220937][ T2896] __dump_stack+0x21/0x30 [ 97.220979][ T2896] dump_stack_lvl+0x10c/0x190 [ 97.221001][ T2896] ? __cfi_dump_stack_lvl+0x10/0x10 [ 97.221023][ T2896] ? kstrtoull+0x13b/0x1e0 [ 97.221040][ T2896] dump_stack+0x19/0x20 [ 97.221060][ T2896] should_fail_ex+0x3d9/0x530 [ 97.221080][ T2896] should_fail+0xf/0x20 [ 97.221100][ T2896] should_fail_usercopy+0x1e/0x30 [ 97.221127][ T2896] _copy_from_user+0x22/0xb0 [ 97.221158][ T2896] ___sys_sendmsg+0x159/0x2a0 [ 97.221194][ T2896] ? __sys_sendmsg+0x280/0x280 [ 97.221229][ T2896] ? proc_fail_nth_write+0x17e/0x210 [ 97.221252][ T2896] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 97.221281][ T2896] __x64_sys_sendmsg+0x1eb/0x2c0 [ 97.221297][ T2896] ? fput+0x1a5/0x240 [ 97.221326][ T2896] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 97.221349][ T2896] ? ksys_write+0x1ef/0x250 [ 97.221378][ T2896] ? __kasan_check_read+0x15/0x20 [ 97.221406][ T2896] x64_sys_call+0x2a4c/0x2ee0 [ 97.221437][ T2896] do_syscall_64+0x58/0xf0 [ 97.221465][ T2896] ? clear_bhb_loop+0x35/0x90 [ 97.221491][ T2896] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 97.221517][ T2896] RIP: 0033:0x7f7721d8e929 [ 97.221538][ T2896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.221553][ T2896] RSP: 002b:00007f7722bc8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.221574][ T2896] RAX: ffffffffffffffda RBX: 00007f7721fb5fa0 RCX: 00007f7721d8e929 [ 97.221588][ T2896] RDX: 0000000004004840 RSI: 00002000000014c0 RDI: 0000000000000003 [ 97.221599][ T2896] RBP: 00007f7722bc8090 R08: 0000000000000000 R09: 0000000000000000 [ 97.221610][ T2896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.221621][ T2896] R13: 0000000000000000 R14: 00007f7721fb5fa0 R15: 00007fffe8f91438 [ 97.221636][ T2896] [ 97.222526][ T567] usb 5-1: device descriptor read/8, error -71 [ 97.521554][ T36] audit: type=1400 audit(1750565391.830:461): avc: denied { append } for pid=2899 comm="syz.5.899" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 97.544725][ T2900] netlink: 8 bytes leftover after parsing attributes in process `syz.5.899'. [ 97.558092][ T2901] kvm: kvm [2899]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x1000000000000000 [ 97.569401][ T2903] rust_binder: Write failure EINVAL in pid:53 [ 97.569528][ T2901] kvm: kvm [2899]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x1000000000000000 [ 97.589328][ T2901] kvm: kvm [2899]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x1000000000000000 [ 97.593097][ T567] usb 5-1: device descriptor read/8, error -71 [ 97.601500][ T2901] kvm: kvm [2899]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x1000000000000000 [ 97.626062][ T2901] kvm: kvm [2899]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x1000000000000000 [ 97.636860][ T2901] kvm: kvm [2899]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x1000000000000000 [ 97.647518][ T2901] kvm: kvm [2899]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x1000000000000000 [ 97.658142][ T2901] kvm: kvm [2899]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x1000000000000000 [ 97.669079][ T2901] kvm: kvm [2899]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x1000000000000000 [ 97.680206][ T2901] kvm: kvm [2899]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x1000000000000000 [ 97.786543][ T36] audit: type=1400 audit(1750565392.090:462): avc: denied { relabelfrom } for pid=2916 comm="syz.5.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 97.807481][ T2917] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:58 [ 97.807682][ T36] audit: type=1400 audit(1750565392.120:463): avc: denied { relabelto } for pid=2916 comm="syz.5.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 97.857554][ T567] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 97.878589][ T567] usb 5-1: device descriptor read/8, error -71 [ 97.925672][ T2923] FAULT_INJECTION: forcing a failure. [ 97.925672][ T2923] name failslab, interval 1, probability 0, space 0, times 1 [ 97.938988][ T2923] CPU: 0 UID: 0 PID: 2923 Comm: syz.5.907 Not tainted 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473 [ 97.939021][ T2923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 97.939033][ T2923] Call Trace: [ 97.939039][ T2923] [ 97.939046][ T2923] __dump_stack+0x21/0x30 [ 97.939073][ T2923] dump_stack_lvl+0x10c/0x190 [ 97.939094][ T2923] ? __cfi_dump_stack_lvl+0x10/0x10 [ 97.939116][ T2923] dump_stack+0x19/0x20 [ 97.939136][ T2923] should_fail_ex+0x3d9/0x530 [ 97.939156][ T2923] should_failslab+0xac/0x100 [ 97.939182][ T2923] kmem_cache_alloc_node_noprof+0x45/0x3b0 [ 97.939203][ T2923] ? __alloc_skb+0x10c/0x370 [ 97.939227][ T2923] __alloc_skb+0x10c/0x370 [ 97.939248][ T2923] netlink_alloc_large_skb+0xf7/0x1b0 [ 97.939274][ T2923] netlink_sendmsg+0x586/0xaf0 [ 97.939301][ T2923] ? __cfi_netlink_sendmsg+0x10/0x10 [ 97.939327][ T2923] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 97.939354][ T2923] ? security_socket_sendmsg+0x33/0xd0 [ 97.939376][ T2923] ? __cfi_netlink_sendmsg+0x10/0x10 [ 97.939401][ T2923] ____sys_sendmsg+0xa15/0xa70 [ 97.939428][ T2923] ? __sys_sendmsg_sock+0x50/0x50 [ 97.939456][ T2923] ? import_iovec+0x81/0xb0 [ 97.939482][ T2923] ___sys_sendmsg+0x220/0x2a0 [ 97.939509][ T2923] ? __sys_sendmsg+0x280/0x280 [ 97.939535][ T2923] ? proc_fail_nth_write+0x17e/0x210 [ 97.939552][ T2923] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 97.939575][ T2923] __x64_sys_sendmsg+0x1eb/0x2c0 [ 97.939591][ T2923] ? fput+0x1a5/0x240 [ 97.939617][ T2923] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 97.939639][ T2923] ? ksys_write+0x1ef/0x250 [ 97.939662][ T2923] ? __kasan_check_read+0x15/0x20 [ 97.939682][ T2923] x64_sys_call+0x2a4c/0x2ee0 [ 97.939706][ T2923] do_syscall_64+0x58/0xf0 [ 97.939728][ T2923] ? clear_bhb_loop+0x35/0x90 [ 97.939755][ T2923] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 97.939781][ T2923] RIP: 0033:0x7f498278e929 [ 97.939796][ T2923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.939812][ T2923] RSP: 002b:00007f498364b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.939831][ T2923] RAX: ffffffffffffffda RBX: 00007f49829b5fa0 RCX: 00007f498278e929 [ 97.939845][ T2923] RDX: 0000000004004840 RSI: 00002000000014c0 RDI: 0000000000000003 [ 97.939857][ T2923] RBP: 00007f498364b090 R08: 0000000000000000 R09: 0000000000000000 [ 97.939868][ T2923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.939880][ T2923] R13: 0000000000000000 R14: 00007f49829b5fa0 R15: 00007fffcaa72828 [ 97.939895][ T2923] [ 98.218506][ T567] usb 5-1: device descriptor read/8, error -71 [ 98.327571][ T567] usb usb5-port1: unable to enumerate USB device [ 98.362723][ T2928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.910'. [ 98.364605][ T36] audit: type=1400 audit(1750565392.670:464): avc: denied { setattr } for pid=2926 comm="syz.2.910" path="socket:[20497]" dev="sockfs" ino=20497 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 98.504596][ T2938] rust_binder: Got transaction with invalid offset. [ 98.504649][ T2938] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 98.511398][ T2938] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:66 [ 98.525229][ T2936] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 98.534374][ T2936] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:429 [ 98.727598][ T567] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 98.764839][ T36] audit: type=1400 audit(1750565393.070:465): avc: denied { listen } for pid=2954 comm="syz.5.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 98.814421][ T36] audit: type=1400 audit(1750565393.120:466): avc: denied { read } for pid=2957 comm="syz.5.921" name="/" dev="configfs" ino=1163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 98.837082][ T36] audit: type=1400 audit(1750565393.120:467): avc: denied { open } for pid=2957 comm="syz.5.921" path="/" dev="configfs" ino=1163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 98.862849][ T2960] FAT-fs (rnullb0): bogus number of reserved sectors [ 98.863850][ T36] audit: type=1400 audit(1750565393.170:468): avc: denied { mounton } for pid=2959 comm="syz.2.922" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 98.871520][ T2960] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 98.905349][ T62] Bluetooth: hci0: Frame reassembly failed (-84) [ 98.917534][ T567] usb 5-1: Using ep0 maxpacket: 8 [ 98.923889][ T567] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.935494][ T567] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.945322][ T567] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.958568][ T567] usb 5-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 98.967960][ T567] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.976769][ T567] usb 5-1: config 0 descriptor?? [ 99.157823][ T544] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 99.309412][ T544] usb 3-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 99.320184][ T544] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 99.329839][ T544] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.343445][ T544] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 99.389113][ T567] hid-rmi 0003:06CB:81A7.000C: unknown main item tag 0x0 [ 99.396218][ T567] hid-rmi 0003:06CB:81A7.000C: unknown main item tag 0x0 [ 99.403836][ T567] hid-rmi 0003:06CB:81A7.000C: unknown main item tag 0x0 [ 99.411287][ T567] hid-rmi 0003:06CB:81A7.000C: unknown main item tag 0x0 [ 99.420237][ T567] hid-rmi 0003:06CB:81A7.000C: unknown main item tag 0x0 [ 99.427339][ T567] hid-rmi 0003:06CB:81A7.000C: unknown main item tag 0x0 [ 99.434863][ T567] hid-rmi 0003:06CB:81A7.000C: unknown main item tag 0x0 [ 99.442615][ T567] hid-rmi 0003:06CB:81A7.000C: unknown main item tag 0x0 [ 99.450406][ T567] hid-rmi 0003:06CB:81A7.000C: unknown main item tag 0x0 [ 99.457699][ T567] hid-rmi 0003:06CB:81A7.000C: unknown main item tag 0x0 [ 99.464795][ T567] hid-rmi 0003:06CB:81A7.000C: unknown main item tag 0x0 [ 99.472478][ T36] audit: type=1400 audit(1750565393.780:469): avc: denied { read } for pid=2997 comm="syz.0.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 99.473242][ T567] hid-rmi 0003:06CB:81A7.000C: hidraw0: USB HID v0.1c Device [HID 06cb:81a7] on usb-dummy_hcd.4-1/input0 [ 99.546240][ T2965] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.859452][ T567] usb 5-1: USB disconnect, device number 14 [ 100.169521][ T36] audit: type=1326 audit(1750565394.480:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3044 comm="syz.0.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f838c58e929 code=0x7fc00000 [ 100.744724][ T3090] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.745719][ T3087] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 100.947579][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 100.947591][ T325] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 101.143164][ T3100] overlayfs: failed to clone upperpath [ 101.247430][ T3095] rust_binder: Read failure Err(EFAULT) in pid:82 [ 101.339203][ T3105] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:88 [ 101.434709][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 101.568752][ T3118] binder: Bad value for 'max' [ 101.847588][ T961] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 101.943876][ T422] usb 3-1: USB disconnect, device number 25 [ 101.969506][ T3128] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 101.997515][ T961] usb 5-1: Using ep0 maxpacket: 8 [ 102.013101][ T961] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.024484][ T961] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.034506][ T961] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.049534][ T961] usb 5-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 102.065652][ T961] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.079698][ T961] usb 5-1: config 0 descriptor?? [ 102.493528][ T961] hid-rmi 0003:06CB:81A7.000D: unknown main item tag 0x0 [ 102.500673][ T961] hid-rmi 0003:06CB:81A7.000D: unknown main item tag 0x0 [ 102.507810][ T402] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 102.515756][ T961] hid-rmi 0003:06CB:81A7.000D: unknown main item tag 0x0 [ 102.523386][ T961] hid-rmi 0003:06CB:81A7.000D: unknown main item tag 0x0 [ 102.530664][ T961] hid-rmi 0003:06CB:81A7.000D: unknown main item tag 0x0 [ 102.538040][ T961] hid-rmi 0003:06CB:81A7.000D: unknown main item tag 0x0 [ 102.545315][ T961] hid-rmi 0003:06CB:81A7.000D: unknown main item tag 0x0 [ 102.552666][ T961] hid-rmi 0003:06CB:81A7.000D: unknown main item tag 0x0 [ 102.559973][ T961] hid-rmi 0003:06CB:81A7.000D: unknown main item tag 0x0 [ 102.567072][ T961] hid-rmi 0003:06CB:81A7.000D: unknown main item tag 0x0 [ 102.574433][ T961] hid-rmi 0003:06CB:81A7.000D: unknown main item tag 0x0 [ 102.587912][ T961] hid-rmi 0003:06CB:81A7.000D: hidraw0: USB HID v0.1c Device [HID 06cb:81a7] on usb-dummy_hcd.4-1/input0 [ 102.668623][ T402] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 102.679726][ T402] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.696258][ T402] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 102.717495][ T402] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.726460][ T402] usb 3-1: config 0 descriptor?? [ 102.772964][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 102.772982][ T36] audit: type=1326 audit(1750565398.080:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3158 comm="syz.0.991" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f838c58e929 code=0x0 [ 102.835707][ T961] usb 5-1: USB disconnect, device number 15 [ 103.138824][ T3152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.147653][ T3152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.269779][ T402] savu 0003:1E7D:2D5A.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 103.507559][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 103.507634][ T325] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 103.617511][ T422] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 103.638515][ T36] audit: type=1400 audit(1750565398.950:475): avc: denied { nlmsg_read } for pid=3173 comm="syz.0.996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 103.769492][ T422] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.780879][ T422] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.791410][ T422] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 103.804531][ T422] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 103.806056][ T3183] overlayfs: failed to clone upperpath [ 103.813779][ T422] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.828627][ T422] usb 5-1: config 0 descriptor?? [ 103.847537][ T544] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 103.872235][ T3152] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 103.872280][ T3152] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:458 [ 103.997628][ T544] usb 6-1: Using ep0 maxpacket: 16 [ 104.014156][ T544] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.024518][ T544] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 46, using maximum allowed: 30 [ 104.035454][ T544] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 46 [ 104.048716][ T544] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 104.057957][ T544] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.067568][ T544] usb 6-1: config 0 descriptor?? [ 104.238977][ T422] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 104.250920][ T422] plantronics 0003:047F:FFFF.000F: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 104.361841][ T544] usb 6-1: string descriptor 0 read error: -71 [ 104.385647][ T544] usb 6-1: USB disconnect, device number 3 [ 104.899931][ T3213] binder: Bad value for 'stats' [ 104.938096][ T3215] binder: Unknown parameter '' [ 105.290852][ T961] usb 3-1: USB disconnect, device number 26 [ 105.537768][ C1] plantronics 0003:047F:FFFF.000F: usb_submit_urb(ctrl) failed: -1 [ 105.667534][ T402] usb 5-1: reset high-speed USB device number 16 using dummy_hcd [ 105.807532][ T402] usb 5-1: device descriptor read/64, error -32 [ 106.047588][ T402] usb 5-1: device descriptor read/64, error -32 [ 106.126834][ T3261] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4232, size: 4195) [ 106.126860][ T3261] rust_binder: Error while translating object. [ 106.137700][ T3261] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 106.144243][ T3261] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:104 [ 106.938098][ T961] usb 5-1: USB disconnect, device number 16 [ 107.206178][ T3280] binder: Bad value for 'max' [ 107.258886][ T3290] 9pnet_fd: Insufficient options for proto=fd [ 107.267769][ T335] Bluetooth: hci0: command 0x1003 tx timeout [ 107.268102][ T325] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 107.275873][ T3290] can0: slcan on ttyS3. [ 107.284446][ T36] audit: type=1400 audit(1750565402.590:476): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 107.306863][ T36] audit: type=1400 audit(1750565402.600:477): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.328400][ T36] audit: type=1400 audit(1750565402.610:478): avc: denied { read } for pid=149 comm="dhcpcd" name="n15" dev="tmpfs" ino=3281 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 107.347553][ T53] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 107.350279][ T325] Bluetooth: hci1: command 0x1003 tx timeout [ 107.362436][ T36] audit: type=1400 audit(1750565402.610:479): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=3281 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 107.386131][ T36] audit: type=1400 audit(1750565402.610:480): avc: denied { getattr } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=3281 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 107.431897][ T36] audit: type=1400 audit(1750565402.740:481): avc: denied { read } for pid=3306 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.454956][ T36] audit: type=1400 audit(1750565402.740:482): avc: denied { open } for pid=3306 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.480195][ T36] audit: type=1400 audit(1750565402.740:483): avc: denied { getattr } for pid=3306 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.485184][ T3290] can0 (unregistered): slcan off ttyS3. [ 107.706047][ T3317] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 107.867534][ T961] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 107.888013][ T3354] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 107.896839][ T3354] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 108.037548][ T961] usb 5-1: Using ep0 maxpacket: 8 [ 108.043853][ T961] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.055253][ T961] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.065252][ T961] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.078778][ T961] usb 5-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 108.087864][ T961] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.096481][ T961] usb 5-1: config 0 descriptor?? [ 108.207507][ T567] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 108.266353][ T3361] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1050'. [ 108.313858][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 108.313886][ T36] audit: type=1400 audit(1750565403.620:491): avc: denied { map } for pid=3367 comm="syz.0.1053" path="socket:[22450]" dev="sockfs" ino=22450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 108.357509][ T567] usb 3-1: Using ep0 maxpacket: 16 [ 108.363653][ T567] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 108.372405][ T567] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.382539][ T567] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.392827][ T567] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 108.401967][ T567] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.410030][ T567] usb 3-1: Product: syz [ 108.414226][ T567] usb 3-1: Manufacturer: syz [ 108.418879][ T567] usb 3-1: SerialNumber: syz [ 108.505114][ T961] hid-rmi 0003:06CB:81A7.0010: unknown main item tag 0x0 [ 108.512279][ T961] hid-rmi 0003:06CB:81A7.0010: unknown main item tag 0x0 [ 108.519383][ T961] hid-rmi 0003:06CB:81A7.0010: unknown main item tag 0x0 [ 108.526456][ T961] hid-rmi 0003:06CB:81A7.0010: unknown main item tag 0x0 [ 108.533552][ T961] hid-rmi 0003:06CB:81A7.0010: unknown main item tag 0x0 [ 108.540654][ T961] hid-rmi 0003:06CB:81A7.0010: unknown main item tag 0x0 [ 108.547782][ T961] hid-rmi 0003:06CB:81A7.0010: unknown main item tag 0x0 [ 108.554865][ T961] hid-rmi 0003:06CB:81A7.0010: unknown main item tag 0x0 [ 108.561955][ T961] hid-rmi 0003:06CB:81A7.0010: unknown main item tag 0x0 [ 108.569423][ T961] hid-rmi 0003:06CB:81A7.0010: unknown main item tag 0x0 [ 108.576488][ T961] hid-rmi 0003:06CB:81A7.0010: unknown main item tag 0x0 [ 108.584568][ T961] hid-rmi 0003:06CB:81A7.0010: hidraw0: USB HID v0.1c Device [HID 06cb:81a7] on usb-dummy_hcd.4-1/input0 [ 108.625970][ T567] usb 3-1: 0:2 : does not exist [ 108.740507][ T66] usb 5-1: USB disconnect, device number 17 [ 108.833499][ T3357] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:475 [ 108.833912][ T3357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.851669][ T3357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.091486][ T567] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 109.102695][ T567] usb 3-1: USB disconnect, device number 27 [ 109.199958][ T3381] overlayfs: failed to clone upperpath [ 109.269724][ T617] udevd[617]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 109.497558][ T66] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 109.648775][ T66] usb 5-1: config 0 has an invalid interface number: 230 but max is 0 [ 109.657166][ T66] usb 5-1: config 0 has no interface number 0 [ 109.663356][ T66] usb 5-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 109.674453][ T66] usb 5-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 109.685926][ T66] usb 5-1: config 0 interface 230 has no altsetting 0 [ 109.694939][ T66] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 109.704090][ T66] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.712122][ T66] usb 5-1: Product: syz [ 109.716374][ T66] usb 5-1: Manufacturer: syz [ 109.721001][ T66] usb 5-1: SerialNumber: syz [ 109.726528][ T66] usb 5-1: config 0 descriptor?? [ 109.732349][ T3386] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 109.739858][ T3386] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 109.748492][ T66] ums-usbat 5-1:0.230: USB Mass Storage device detected [ 109.756262][ T66] ums-usbat 5-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 109.917532][ T422] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 110.067560][ T325] Bluetooth: hci0: command 0x1003 tx timeout [ 110.067599][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 110.074857][ T422] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.091813][ T422] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 110.101650][ T422] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.116193][ T422] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.125460][ T422] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.133519][ T422] usb 3-1: Product: syz [ 110.137728][ T422] usb 3-1: Manufacturer: syz [ 110.142328][ T422] usb 3-1: SerialNumber: syz [ 110.447523][ T567] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 110.551067][ T422] cdc_ncm 3-1:1.0: bind() failure [ 110.557235][ T422] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 110.565485][ T422] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 110.574792][ T422] usb 3-1: USB disconnect, device number 28 [ 110.610430][ T567] usb 6-1: unable to get BOS descriptor or descriptor too short [ 110.620221][ T567] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 110.627874][ T567] usb 6-1: can't read configurations, error -71 [ 110.840454][ T3419] netlink: 'syz.0.1068': attribute type 4 has an invalid length. [ 110.848432][ T3419] netlink: 'syz.0.1068': attribute type 7 has an invalid length. [ 110.854082][ T327] Bluetooth: hci0: Frame reassembly failed (-84) [ 110.856858][ T3419] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1068'. [ 110.911394][ T36] audit: type=1400 audit(1750565406.220:492): avc: denied { listen } for pid=3425 comm="syz.0.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 110.948615][ T3433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=3433 comm=syz.0.1073 [ 111.082948][ T62] Bluetooth: hci1: Frame reassembly failed (-84) [ 111.457616][ T567] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 111.607524][ T567] usb 6-1: Using ep0 maxpacket: 8 [ 111.614398][ T567] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.625521][ T567] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.635302][ T567] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.648113][ T567] usb 6-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 111.657156][ T567] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.665825][ T567] usb 6-1: config 0 descriptor?? [ 112.030123][ T66] ums-usbat 5-1:0.230: probe with driver ums-usbat failed with error -5 [ 112.073980][ T567] hid-rmi 0003:06CB:81A7.0011: unknown main item tag 0x0 [ 112.081120][ T567] hid-rmi 0003:06CB:81A7.0011: unknown main item tag 0x0 [ 112.088229][ T567] hid-rmi 0003:06CB:81A7.0011: unknown main item tag 0x0 [ 112.095293][ T567] hid-rmi 0003:06CB:81A7.0011: unknown main item tag 0x0 [ 112.102383][ T567] hid-rmi 0003:06CB:81A7.0011: unknown main item tag 0x0 [ 112.109507][ T567] hid-rmi 0003:06CB:81A7.0011: unknown main item tag 0x0 [ 112.116556][ T567] hid-rmi 0003:06CB:81A7.0011: unknown main item tag 0x0 [ 112.123713][ T567] hid-rmi 0003:06CB:81A7.0011: unknown main item tag 0x0 [ 112.130800][ T567] hid-rmi 0003:06CB:81A7.0011: unknown main item tag 0x0 [ 112.137898][ T567] hid-rmi 0003:06CB:81A7.0011: unknown main item tag 0x0 [ 112.144957][ T567] hid-rmi 0003:06CB:81A7.0011: unknown main item tag 0x0 [ 112.152947][ T567] hid-rmi 0003:06CB:81A7.0011: hidraw0: USB HID v0.1c Device [HID 06cb:81a7] on usb-dummy_hcd.5-1/input0 [ 112.329129][ T567] usb 6-1: USB disconnect, device number 5 [ 112.867542][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 112.867563][ T335] Bluetooth: hci0: command 0x1003 tx timeout [ 112.913761][ T3466] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 112.925273][ T3466] syz.5.1085: attempt to access beyond end of device [ 112.925273][ T3466] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 112.925965][ T9] usb 5-1: USB disconnect, device number 18 [ 112.939723][ T36] audit: type=1400 audit(1750565408.250:493): avc: denied { map } for pid=3465 comm="syz.5.1085" path="socket:[22937]" dev="sockfs" ino=22937 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 112.969888][ T3466] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 112.991731][ T36] audit: type=1400 audit(1750565408.300:494): avc: denied { write } for pid=3470 comm="syz.5.1087" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 113.015083][ T36] audit: type=1400 audit(1750565408.300:495): avc: denied { write } for pid=3470 comm="syz.5.1087" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.036993][ T36] audit: type=1400 audit(1750565408.300:496): avc: denied { remove_name } for pid=3470 comm="syz.5.1087" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.060129][ T36] audit: type=1400 audit(1750565408.300:497): avc: denied { unlink } for pid=3470 comm="syz.5.1087" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 113.107559][ T325] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 113.107635][ T53] Bluetooth: hci1: command 0x1003 tx timeout [ 113.186228][ T36] audit: type=1400 audit(1750565408.490:498): avc: denied { shutdown } for pid=3487 comm="syz.5.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 113.223932][ T36] audit: type=1326 audit(1750565408.530:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3489 comm="syz.5.1095" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f498278e929 code=0x0 [ 113.246829][ T36] audit: type=1326 audit(1750565408.530:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3489 comm="syz.5.1095" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f498278e929 code=0x0 [ 113.374503][ T3505] SELinux: security_context_str_to_sid () failed with errno=-22 [ 113.383879][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 113.407572][ T567] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 113.462332][ T36] audit: type=1400 audit(1750565408.770:501): avc: denied { getopt } for pid=3506 comm="syz.4.1100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 113.557527][ T567] usb 3-1: Using ep0 maxpacket: 8 [ 113.563852][ T567] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.574820][ T567] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.584606][ T567] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.597685][ T567] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 113.606961][ T567] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.615638][ T567] usb 3-1: config 0 descriptor?? [ 114.025086][ T567] hid-rmi 0003:06CB:81A7.0012: unknown main item tag 0x0 [ 114.032243][ T567] hid-rmi 0003:06CB:81A7.0012: unknown main item tag 0x0 [ 114.039373][ T567] hid-rmi 0003:06CB:81A7.0012: unknown main item tag 0x0 [ 114.046665][ T567] hid-rmi 0003:06CB:81A7.0012: unknown main item tag 0x0 [ 114.054221][ T567] hid-rmi 0003:06CB:81A7.0012: unknown main item tag 0x0 [ 114.061339][ T567] hid-rmi 0003:06CB:81A7.0012: unknown main item tag 0x0 [ 114.068524][ T567] hid-rmi 0003:06CB:81A7.0012: unknown main item tag 0x0 [ 114.068537][ T3521] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:131 [ 114.068967][ T3520] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 114.075602][ T567] hid-rmi 0003:06CB:81A7.0012: unknown main item tag 0x0 [ 114.075636][ T567] hid-rmi 0003:06CB:81A7.0012: unknown main item tag 0x0 [ 114.092615][ T3520] rust_binder: Error in use_page_slow: EBUSY [ 114.097158][ T567] hid-rmi 0003:06CB:81A7.0012: unknown main item tag 0x0 [ 114.102607][ T3520] rust_binder: use_range failure EBUSY [ 114.110515][ T567] hid-rmi 0003:06CB:81A7.0012: unknown main item tag 0x0 [ 114.115771][ T3520] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 114.135624][ T3520] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 114.137596][ T567] hid-rmi 0003:06CB:81A7.0012: hidraw0: USB HID v0.1c Device [HID 06cb:81a7] on usb-dummy_hcd.2-1/input0 [ 114.143399][ T3520] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 114.178079][ T3520] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:131 [ 114.215425][ T3530] netlink: 'syz.0.1109': attribute type 32 has an invalid length. [ 114.311699][ T305] usb 3-1: USB disconnect, device number 29 [ 114.319182][ T3539] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 114.326559][ T3539] rust_binder: Write failure EINVAL in pid:138 [ 114.343828][ T3543] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:140 [ 114.438934][ T3549] tipc: Started in network mode [ 114.452979][ T3549] tipc: Node identity 111, cluster identity 4711 [ 114.459336][ T3549] tipc: Node number set to 273 [ 114.717562][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 114.833683][ T36] audit: type=1400 audit(1750565410.140:502): avc: denied { attach_queue } for pid=3554 comm="syz.2.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 114.844098][ T3558] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1119'. [ 114.877531][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 114.885502][ T9] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 114.898907][ T9] usb 5-1: config 0 has no interface number 0 [ 114.906155][ T9] usb 5-1: config 0 interface 2 has no altsetting 0 [ 114.918248][ T9] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 114.927379][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.935739][ T9] usb 5-1: Product: syz [ 114.940022][ T9] usb 5-1: Manufacturer: syz [ 114.944757][ T9] usb 5-1: SerialNumber: syz [ 114.952654][ T9] usb 5-1: config 0 descriptor?? [ 115.139245][ T3578] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.146416][ T3578] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.153577][ T3578] bridge_slave_0: entered allmulticast mode [ 115.160022][ T3578] bridge_slave_0: entered promiscuous mode [ 115.167349][ T3578] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.174946][ T3578] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.182351][ T3578] bridge_slave_1: entered allmulticast mode [ 115.188775][ T3578] bridge_slave_1: entered promiscuous mode [ 115.204024][ T13] bridge_slave_1: left allmulticast mode [ 115.209746][ T13] bridge_slave_1: left promiscuous mode [ 115.215411][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.223858][ T13] bridge_slave_0: left allmulticast mode [ 115.224119][ T36] audit: type=1400 audit(1750565410.530:503): avc: denied { read } for pid=3552 comm="syz.4.1117" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 115.229658][ T13] bridge_slave_0: left promiscuous mode [ 115.251618][ T36] audit: type=1400 audit(1750565410.530:504): avc: denied { open } for pid=3552 comm="syz.4.1117" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 115.257303][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.294948][ T9] snd-usb-audio 5-1:0.2: probe with driver snd-usb-audio failed with error -2 [ 115.306102][ T9] usb 5-1: USB disconnect, device number 19 [ 115.397621][ T3578] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.404723][ T3578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.412059][ T3578] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.419136][ T3578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.426982][ T13] tipc: Left network mode [ 115.428108][ T325] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 115.431459][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 115.448660][ T13] veth1_macvtap: left promiscuous mode [ 115.454489][ T13] veth0_vlan: left promiscuous mode [ 115.478368][ T617] udevd[617]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 115.538077][ T327] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.545491][ T327] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.563245][ T327] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.570394][ T327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.580982][ T327] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.588070][ T327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.622175][ T3578] veth0_vlan: entered promiscuous mode [ 115.637469][ T3578] veth1_macvtap: entered promiscuous mode [ 116.147928][ T305] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 116.257510][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 116.297527][ T305] usb 5-1: Using ep0 maxpacket: 32 [ 116.303863][ T305] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.314058][ T305] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 116.324502][ T305] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 116.333721][ T305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.341901][ T305] usb 5-1: Product: syz [ 116.346142][ T305] usb 5-1: Manufacturer: syz [ 116.350764][ T305] usb 5-1: SerialNumber: syz [ 116.417485][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 116.423856][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.434887][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.444705][ T9] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 116.453789][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.462585][ T9] usb 3-1: config 0 descriptor?? [ 116.640658][ T305] usb 5-1: 0:2 : does not exist [ 116.647796][ T305] usb 5-1: USB disconnect, device number 20 [ 116.808362][ T617] udevd[617]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 116.867662][ T544] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 116.877673][ T3614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.886218][ T3614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.018691][ T544] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 117.027023][ T544] usb 6-1: config 1 has no interface number 0 [ 117.035533][ T544] usb 6-1: config 1 interface 105 has no altsetting 0 [ 117.044180][ T544] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 117.053775][ T544] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.062155][ T544] usb 6-1: Product: syz [ 117.066547][ T544] usb 6-1: Manufacturer: syz [ 117.071670][ T544] usb 6-1: SerialNumber: syz [ 117.282468][ T544] aqc111 6-1:1.105: probe with driver aqc111 failed with error -71 [ 117.296298][ T544] usb 6-1: USB disconnect, device number 6 [ 117.507493][ T305] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 117.677479][ T305] usb 5-1: Using ep0 maxpacket: 16 [ 117.684753][ T305] usb 5-1: config 1 interface 0 altsetting 129 bulk endpoint 0x1 has invalid maxpacket 1024 [ 117.695297][ T305] usb 5-1: config 1 interface 0 has no altsetting 0 [ 117.703911][ T305] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 117.713384][ T305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.721676][ T305] usb 5-1: Product: syz [ 117.726067][ T305] usb 5-1: Manufacturer: ࠠ [ 117.730988][ T305] usb 5-1: SerialNumber: syz [ 117.740788][ T3622] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 117.891165][ T3628] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1143'. [ 117.953477][ T3629] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:181 [ 117.964087][ T305] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 129 proto 1 vid 0x0525 pid 0xA4A8 [ 117.989146][ T305] usb 5-1: USB disconnect, device number 21 [ 118.004898][ T305] usblp0: removed [ 118.715599][ T3631] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3631 comm=syz.4.1144 [ 118.800506][ T3634] SELinux: failed to load policy [ 118.806330][ T3635] rust_binder: Read failure Err(EAGAIN) in pid:4 [ 118.808736][ T36] audit: type=1400 audit(1750565414.110:505): avc: denied { load_policy } for pid=3632 comm="syz.5.1146" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 118.894638][ T36] audit: type=1400 audit(1750565414.110:506): avc: granted { setsecparam } for pid=3633 comm="syz.0.1145" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 119.035687][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 119.071884][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 119.098826][ T9] usb 3-1: USB disconnect, device number 30 [ 119.637602][ T3662] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 119.637638][ T3662] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:506 [ 119.709286][ T3670] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.750261][ T62] Bluetooth: hci0: Frame reassembly failed (-84) [ 119.799336][ T36] audit: type=1400 audit(1750565415.110:507): avc: denied { create } for pid=3675 comm="syz.2.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 119.820183][ T66] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 119.820260][ T36] audit: type=1400 audit(1750565415.110:508): avc: denied { write } for pid=3675 comm="syz.2.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 119.911406][ T3690] rust_binder: Failed to allocate buffer. len:144, is_oneway:true [ 119.931956][ T3697] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 119.940080][ T3697] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:525 [ 119.976337][ T36] audit: type=1400 audit(1750565415.280:509): avc: denied { mounton } for pid=3702 comm="syz.4.1170" path="/69/bus" dev="tmpfs" ino=385 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 119.987504][ T66] usb 6-1: Using ep0 maxpacket: 8 [ 120.015694][ T66] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.027049][ T66] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.038800][ T66] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.051949][ T66] usb 6-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 120.061065][ T66] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.070811][ T66] usb 6-1: config 0 descriptor?? [ 120.207519][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 120.357525][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 120.363890][ T9] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 120.372135][ T9] usb 3-1: config 0 has no interface number 0 [ 120.378289][ T9] usb 3-1: config 0 interface 184 has no altsetting 0 [ 120.386607][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 120.395807][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.404012][ T9] usb 3-1: Product: syz [ 120.408288][ T9] usb 3-1: Manufacturer: syz [ 120.412902][ T9] usb 3-1: SerialNumber: syz [ 120.418408][ T9] usb 3-1: config 0 descriptor?? [ 120.424251][ T9] smsc75xx v1.0.0 [ 120.479061][ T66] hid-rmi 0003:06CB:81A7.0013: unknown main item tag 0x0 [ 120.486236][ T66] hid-rmi 0003:06CB:81A7.0013: unknown main item tag 0x0 [ 120.493389][ T66] hid-rmi 0003:06CB:81A7.0013: unknown main item tag 0x0 [ 120.500501][ T66] hid-rmi 0003:06CB:81A7.0013: unknown main item tag 0x0 [ 120.507659][ T66] hid-rmi 0003:06CB:81A7.0013: unknown main item tag 0x0 [ 120.514738][ T66] hid-rmi 0003:06CB:81A7.0013: unknown main item tag 0x0 [ 120.521848][ T66] hid-rmi 0003:06CB:81A7.0013: unknown main item tag 0x0 [ 120.529014][ T66] hid-rmi 0003:06CB:81A7.0013: unknown main item tag 0x0 [ 120.536130][ T66] hid-rmi 0003:06CB:81A7.0013: unknown main item tag 0x0 [ 120.543247][ T66] hid-rmi 0003:06CB:81A7.0013: unknown main item tag 0x0 [ 120.550498][ T66] hid-rmi 0003:06CB:81A7.0013: unknown main item tag 0x0 [ 120.558531][ T66] hid-rmi 0003:06CB:81A7.0013: hidraw0: USB HID v0.1c Device [HID 06cb:81a7] on usb-dummy_hcd.5-1/input0 [ 120.738605][ T305] usb 6-1: USB disconnect, device number 7 [ 121.025763][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 121.036966][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 121.127542][ T2461] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 121.271892][ T36] audit: type=1400 audit(1750565416.580:510): avc: denied { setopt } for pid=3718 comm="syz.5.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 121.298394][ T2461] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 121.306954][ T2461] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 121.311798][ T3721] SELinux: security_context_str_to_sid (sytem_uGز讄[VEU![ک5 initial count (2850433972 ns). Using initial count to start timer. [ 129.856930][ T36] audit: type=1400 audit(1750565425.160:515): avc: denied { map } for pid=4035 comm="syz.4.1276" path="socket:[28628]" dev="sockfs" ino=28628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 129.881923][ T36] audit: type=1400 audit(1750565425.160:516): avc: denied { read } for pid=4035 comm="syz.4.1276" path="socket:[28628]" dev="sockfs" ino=28628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 129.929578][ T36] audit: type=1400 audit(1750565425.240:517): avc: denied { shutdown } for pid=4041 comm="syz.4.1277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 130.018367][ T4045] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 130.027502][ T4049] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.032907][ T4045] kvm_pr_unimpl_wrmsr: 23 callbacks suppressed [ 130.032923][ T4045] kvm: kvm [4043]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x186) = 0xa82e3309a94fdf94 [ 130.079441][ T4051] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:287 [ 130.704446][ T36] audit: type=1400 audit(1750565426.010:518): avc: denied { mounton } for pid=4064 comm="syz.5.1286" path="/107/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 130.707515][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 130.737543][ T335] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 130.748803][ T36] audit: type=1400 audit(1750565426.060:519): avc: denied { unmount } for pid=2439 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 130.846748][ T36] audit: type=1400 audit(1750565426.150:520): avc: denied { setopt } for pid=4073 comm="syz.5.1289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 130.866810][ T4074] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 130.866834][ T4074] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 130.875526][ T4074] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:305 [ 130.906219][ T4080] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1290'. [ 130.906943][ T36] audit: type=1400 audit(1750565426.210:521): avc: denied { create } for pid=4079 comm="syz.5.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 130.962578][ T4088] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.963373][ T4089] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.963926][ T4090] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:295 [ 130.991987][ T36] audit: type=1400 audit(1750565426.300:522): avc: denied { connect } for pid=4091 comm="syz.4.1293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 131.186609][ T62] Bluetooth: hci0: Frame reassembly failed (-84) [ 131.458212][ T4105] binder: Unknown parameter 'defcontext01777777777777777777777' [ 131.535827][ T4109] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 131.862372][ T4115] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 131.904288][ T4120] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 131.919589][ T4120] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 131.931307][ T4120] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 132.187538][ T961] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 132.239531][ T4138] rust_binder: Write failure EFAULT in pid:123 [ 132.274496][ T4143] SELinux: failed to load policy [ 132.286098][ T4143] rust_binder: Write failure EFAULT in pid:128 [ 132.309020][ T4145] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 132.337539][ T961] usb 5-1: Using ep0 maxpacket: 8 [ 132.351596][ T961] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.362556][ T961] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.372344][ T961] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.385222][ T961] usb 5-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 132.394363][ T961] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.403451][ T961] usb 5-1: config 0 descriptor?? [ 132.812310][ T961] hid-rmi 0003:06CB:81A7.0017: unknown main item tag 0x0 [ 132.819447][ T961] hid-rmi 0003:06CB:81A7.0017: unknown main item tag 0x0 [ 132.826490][ T961] hid-rmi 0003:06CB:81A7.0017: unknown main item tag 0x0 [ 132.833671][ T961] hid-rmi 0003:06CB:81A7.0017: unknown main item tag 0x0 [ 132.840755][ T961] hid-rmi 0003:06CB:81A7.0017: unknown main item tag 0x0 [ 132.847834][ T961] hid-rmi 0003:06CB:81A7.0017: unknown main item tag 0x0 [ 132.855077][ T961] hid-rmi 0003:06CB:81A7.0017: unknown main item tag 0x0 [ 132.862165][ T961] hid-rmi 0003:06CB:81A7.0017: unknown main item tag 0x0 [ 132.869513][ T961] hid-rmi 0003:06CB:81A7.0017: unknown main item tag 0x0 [ 132.876563][ T961] hid-rmi 0003:06CB:81A7.0017: unknown main item tag 0x0 [ 132.883649][ T961] hid-rmi 0003:06CB:81A7.0017: unknown main item tag 0x0 [ 132.891333][ T961] hid-rmi 0003:06CB:81A7.0017: hidraw0: USB HID v0.1c Device [HID 06cb:81a7] on usb-dummy_hcd.4-1/input0 [ 133.059602][ T961] usb 5-1: USB disconnect, device number 28 [ 133.187627][ T335] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 133.187675][ T325] Bluetooth: hci0: command 0x1003 tx timeout [ 133.233280][ T4158] SELinux: security_context_str_to_sid () failed with errno=-22 [ 133.268352][ T4165] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 19) [ 133.268373][ T4165] rust_binder: Error while translating object. [ 133.278905][ T4165] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 133.285169][ T4165] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:596 [ 133.295882][ T4165] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:596 [ 133.310458][ T36] audit: type=1400 audit(1750565428.620:523): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 133.362886][ T4169] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 133.363343][ T4169] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 133.369878][ T4169] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 133.377976][ T4169] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:600 [ 133.507557][ T335] Bluetooth: hci1: command 0x1003 tx timeout [ 133.507584][ T53] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 133.766240][ T4185] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 133.770533][ T4185] rust_binder: Error while translating object. [ 133.777121][ T4185] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 133.783686][ T4185] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:327 [ 134.087553][ T66] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 134.177502][ T544] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 134.215215][ T4205] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 134.215515][ T4205] rust_binder: Error while translating object. [ 134.222346][ T4205] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 134.228808][ T4205] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:602 [ 134.247490][ T66] usb 6-1: Using ep0 maxpacket: 8 [ 134.262972][ T66] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.274182][ T66] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.284171][ T66] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 134.297494][ T66] usb 6-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 134.306871][ T66] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.315905][ T66] usb 6-1: config 0 descriptor?? [ 134.327496][ T544] usb 5-1: Using ep0 maxpacket: 32 [ 134.334475][ T544] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 134.345806][ T544] usb 5-1: config 1 interface 0 has no altsetting 0 [ 134.353908][ T544] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.40 [ 134.363140][ T544] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.371189][ T544] usb 5-1: Product: ꘸렾婰徳觍뇜騞跓鷑䌌儊剝聖䲹⌔䒨ॸ芄︎೫眲蹥픜利ⅺ꿁乂剏뷉侟啋䬃돘艟ᄢ◌㶍ඤ휨䶇 [ 134.393436][ T544] usb 5-1: Manufacturer: 㠢ꙹ疍睡깫뀦듣硫ᨰ∿炾聞֍岍ⶔ쳪釵ꐴꍫъ㎗㜩饴甬ㅐ䛦ၛ備瀃稗뱒斤麘৐귑㷅체趽㸜熒琢㭕睅滟⒩接뭜첡认搬᫖罟⾡㍏⢪న閛菶ρ촫劭䅂坠㶦榩栕砦趈큕䩈孾 [ 134.420682][ T544] usb 5-1: SerialNumber: 郪ነ火ljὧ嗛㘊苚섢㻪欻몵䀙◚礲쳪駥ﲖ闀罽䀭䕛챤텾䡧붠륩䛫ǂ홪尕Ꟙ腉‸ฝ [ 134.442339][ T4214] rust_binder: Read failure Err(EAGAIN) in pid:611 [ 134.539313][ T4221] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 134.725754][ T66] hid-rmi 0003:06CB:81A7.0018: unknown main item tag 0x0 [ 134.739377][ T66] hid-rmi 0003:06CB:81A7.0018: unknown main item tag 0x0 [ 134.746471][ T66] hid-rmi 0003:06CB:81A7.0018: unknown main item tag 0x0 [ 134.753711][ T66] hid-rmi 0003:06CB:81A7.0018: unknown main item tag 0x0 [ 134.760831][ T66] hid-rmi 0003:06CB:81A7.0018: unknown main item tag 0x0 [ 134.767955][ T66] hid-rmi 0003:06CB:81A7.0018: unknown main item tag 0x0 [ 134.775027][ T66] hid-rmi 0003:06CB:81A7.0018: unknown main item tag 0x0 [ 134.782132][ T66] hid-rmi 0003:06CB:81A7.0018: unknown main item tag 0x0 [ 134.789237][ T66] hid-rmi 0003:06CB:81A7.0018: unknown main item tag 0x0 [ 134.796295][ T66] hid-rmi 0003:06CB:81A7.0018: unknown main item tag 0x0 [ 134.803399][ T66] hid-rmi 0003:06CB:81A7.0018: unknown main item tag 0x0 [ 134.811270][ T66] hid-rmi 0003:06CB:81A7.0018: hidraw0: USB HID v0.1c Device [HID 06cb:81a7] on usb-dummy_hcd.5-1/input0 [ 134.846580][ T544] usbhid 5-1:1.0: can't add hid device: -71 [ 134.852705][ T544] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 134.861964][ T544] usb 5-1: USB disconnect, device number 29 [ 134.949885][ T66] usb 6-1: USB disconnect, device number 11 [ 135.392059][ T36] audit: type=1400 audit(1750565430.700:524): avc: denied { link } for pid=4224 comm="syz.2.1342" name="file1" dev="tmpfs" ino=1116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 135.787501][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 135.937483][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 135.943971][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.955198][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.965359][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 135.974746][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.984581][ T9] usb 6-1: config 0 descriptor?? [ 135.991064][ T9] hub 6-1:0.0: USB hub found [ 136.197557][ T9] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 136.407718][ T4238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.417293][ T4238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.459498][ T4238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.468263][ T4238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.479042][ T4238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.488501][ T4238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.567394][ T66] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 136.645105][ T4246] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 136.645474][ T4246] rust_binder: Write failure EINVAL in pid:147 [ 136.669122][ T4249] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1352'. [ 136.690821][ T36] audit: type=1400 audit(1750565432.000:525): avc: denied { create } for pid=4248 comm="syz.0.1352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 136.712166][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 136.718191][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 136.729354][ T66] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 136.740512][ T66] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.750510][ T66] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 136.757974][ T9] usb 6-1: USB disconnect, device number 12 [ 136.763623][ T66] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 136.778566][ T66] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.787226][ T66] usb 3-1: config 0 descriptor?? [ 136.867522][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 136.867539][ T335] Bluetooth: hci0: command 0x1003 tx timeout [ 137.195107][ T66] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 137.202892][ T66] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 137.210370][ T66] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 137.217847][ T66] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 137.225705][ T66] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 137.233188][ T66] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 137.240633][ T66] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 137.248302][ T66] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 137.256084][ T66] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 137.263640][ T66] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 137.271272][ T66] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 137.279009][ T66] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 137.286680][ T66] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 137.294516][ T66] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 137.302387][ T66] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 137.310253][ T66] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 137.319646][ T66] plantronics 0003:047F:FFFF.0019: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 137.416863][ T36] audit: type=1400 audit(1750565432.720:526): avc: denied { add_name } for pid=4226 comm="syz.2.1343" name="incremental-fs" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.439964][ T4227] rust_binder: Write failure EFAULT in pid:623 [ 137.447722][ T9] usb 3-1: USB disconnect, device number 34 [ 137.462793][ T36] audit: type=1400 audit(1750565432.720:527): avc: denied { create } for pid=4226 comm="syz.2.1343" name="incremental-fs" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 137.488075][ T36] audit: type=1400 audit(1750565432.750:528): avc: denied { associate } for pid=4226 comm="syz.2.1343" name="incremental-fs" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 137.515756][ T4262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1356'. [ 137.716102][ T4267] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 137.718048][ T4267] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:344 [ 137.974806][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 138.508967][ T36] audit: type=1400 audit(1750565433.820:529): avc: denied { mount } for pid=4272 comm="syz.4.1361" name="/" dev="ramfs" ino=31510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 138.532644][ T36] audit: type=1400 audit(1750565433.840:530): avc: denied { unmount } for pid=2093 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 138.555381][ T4275] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.412559][ T36] audit: type=1326 audit(1750565434.720:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4281 comm="syz.4.1364" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f058838e929 code=0x0 [ 139.467861][ T12] Bluetooth: hci2: Frame reassembly failed (-84) [ 139.474328][ T12] Bluetooth: hci2: Frame reassembly failed (-84) [ 139.667599][ T4284] Bluetooth: hci0: command 0x1003 tx timeout [ 139.667625][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 139.758640][ T36] audit: type=1400 audit(1750565435.070:532): avc: denied { bind } for pid=4289 comm="syz.0.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 139.795596][ T4297] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:162 [ 139.812859][ T36] audit: type=1400 audit(1750565435.120:533): avc: denied { append } for pid=4298 comm="syz.0.1370" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 139.887881][ T4305] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.892688][ T4305] rust_binder: Write failure EINVAL in pid:170 [ 139.977544][ T66] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 139.991389][ T53] Bluetooth: hci1: command 0x1003 tx timeout [ 139.991405][ T335] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 140.104167][ T4317] rust_binder: Write failure EFAULT in pid:182 [ 140.159102][ T66] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 140.179524][ T66] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.188752][ T66] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 140.197027][ T66] usb 6-1: SerialNumber: syz [ 140.278301][ T4323] tipc: Started in network mode [ 140.283490][ T4323] tipc: Node identity ac1414aa, cluster identity 4711 [ 140.290803][ T4323] tipc: Enabled bearer , priority 10 [ 140.377492][ T31] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 140.527467][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 140.534417][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.545425][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.555237][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.568117][ T31] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 140.577192][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.585931][ T31] usb 3-1: config 0 descriptor?? [ 140.808491][ T66] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 140.995120][ T31] hid-rmi 0003:06CB:81A7.001A: unknown main item tag 0x0 [ 141.002442][ T31] hid-rmi 0003:06CB:81A7.001A: unknown main item tag 0x0 [ 141.011062][ T31] hid-rmi 0003:06CB:81A7.001A: unknown main item tag 0x0 [ 141.018280][ T31] hid-rmi 0003:06CB:81A7.001A: unknown main item tag 0x0 [ 141.025421][ T31] hid-rmi 0003:06CB:81A7.001A: unknown main item tag 0x0 [ 141.032638][ T31] hid-rmi 0003:06CB:81A7.001A: unknown main item tag 0x0 [ 141.039795][ T31] hid-rmi 0003:06CB:81A7.001A: unknown main item tag 0x0 [ 141.047140][ T31] hid-rmi 0003:06CB:81A7.001A: unknown main item tag 0x0 [ 141.054306][ T31] hid-rmi 0003:06CB:81A7.001A: unknown main item tag 0x0 [ 141.061490][ T31] hid-rmi 0003:06CB:81A7.001A: unknown main item tag 0x0 [ 141.068654][ T31] hid-rmi 0003:06CB:81A7.001A: unknown main item tag 0x0 [ 141.076637][ T31] hid-rmi 0003:06CB:81A7.001A: hidraw0: USB HID v0.1c Device [HID 06cb:81a7] on usb-dummy_hcd.2-1/input0 [ 141.212880][ T4288] binder: Unknown parameter 'processor : 0 [ 141.212880][ T4288] vendor_id : GenuineIntel [ 141.212880][ T4288] cpu family : 6 [ 141.212880][ T4288] model : 79 [ 141.212880][ T4288] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 141.212880][ T4288] stepping : 0 [ 141.212880][ T4288] microcode : 0xffffffff [ 141.212880][ T4288] cpu MHz : 2199.998 [ 141.212880][ T4288] cache size : 56320 KB [ 141.212880][ T4288] physical id : 0 [ 141.212880][ T4288] siblings : 2 [ 141.212880][ T4288] core id : 0 [ 141.212880][ T4288] cpu cores : 1 [ 141.212880][ T4288] apicid : 0 [ 141.212880][ T4288] initial apicid : 0 [ 141.212880][ T4288] fpu : yes [ 141.212880][ T4288] fpu_exception : yes [ 141.212880][ T4288] cpuid level : 13 [ 141.212880][ T4288] wp : yes [ 141.212880][ T4288] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 141.212880][ T4288] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 141.235316][ T31] usb 3-1: USB disconnect, device number 35 [ 141.399874][ T2461] usb 6-1: USB disconnect, device number 13 [ 141.406275][ T2461] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 141.416191][ T544] tipc: Node number set to 2886997162 [ 141.507498][ T325] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 141.509797][ T335] Bluetooth: hci2: command 0x1003 tx timeout [ 141.541201][ T4377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.542661][ T4377] rust_binder: Write failure EINVAL in pid:359 [ 141.784154][ T4407] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.912723][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 141.912742][ T36] audit: type=1400 audit(1750565437.220:536): avc: denied { write } for pid=4408 comm="syz.5.1383" name="usbmon8" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 141.949082][ T36] audit: type=1400 audit(1750565437.220:537): avc: denied { ioctl } for pid=4408 comm="syz.5.1383" path="/dev/usbmon8" dev="devtmpfs" ino=115 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 141.979531][ T4411] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 142.016658][ T4416] SELinux: failed to load policy [ 142.027501][ T31] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 142.048831][ T4420] binder: Bad value for 'max' [ 142.106978][ T4424] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.187498][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 142.202298][ T31] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 142.205238][ T62] Bluetooth: hci0: Frame reassembly failed (-84) [ 142.214061][ T31] usb 3-1: config 1 interface 0 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 32 [ 142.230342][ T31] usb 3-1: config 1 interface 0 altsetting 13 bulk endpoint 0x3 has invalid maxpacket 1023 [ 142.240928][ T31] usb 3-1: config 1 interface 0 has no altsetting 0 [ 142.249028][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 142.258136][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.266146][ T31] usb 3-1: Product: 앏伦೭ⴋ鴁┢拏秆僦袔䥀縎哮臶럃寏豦᥮ꀰר鴴ᆍ侍划蟈ጚꀅ觀堳俞殿퀄毚⤥䰷 [ 142.279671][ T31] usb 3-1: Manufacturer: с [ 142.284208][ T31] usb 3-1: SerialNumber: 乔㤥툾䋤뾊⻍皥㙉엖蓇ᘹ䞵ꏂ卌䓆ሴ鈎鼗뭟蓟⧳澡㏠脸遛䧀吵弆叶ꕩ餞ד⦒脄슼엲噒큦틴⎑佦䛪轈䵻ᡟ [ 142.301718][ T4407] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 142.308960][ T4407] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 142.357506][ T567] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 142.507484][ T567] usb 6-1: Using ep0 maxpacket: 8 [ 142.513684][ T567] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.524899][ T567] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.534730][ T567] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 142.547888][ T567] usb 6-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 142.556953][ T567] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.565880][ T567] usb 6-1: config 0 descriptor?? [ 142.735054][ T4407] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 142.735087][ T4407] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:635 [ 142.745197][ T4429] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.756046][ T4430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.769401][ T4430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.783281][ T31] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 142.796619][ T31] usb 3-1: USB disconnect, device number 36 [ 142.830981][ T4435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.980272][ T567] hid-rmi 0003:06CB:81A7.001B: unknown main item tag 0x0 [ 142.987413][ T567] hid-rmi 0003:06CB:81A7.001B: unknown main item tag 0x0 [ 142.994538][ T567] hid-rmi 0003:06CB:81A7.001B: unknown main item tag 0x0 [ 143.001641][ T567] hid-rmi 0003:06CB:81A7.001B: unknown main item tag 0x0 [ 143.008735][ T567] hid-rmi 0003:06CB:81A7.001B: unknown main item tag 0x0 [ 143.015776][ T567] hid-rmi 0003:06CB:81A7.001B: unknown main item tag 0x0 [ 143.022866][ T567] hid-rmi 0003:06CB:81A7.001B: unknown main item tag 0x0 [ 143.030090][ T567] hid-rmi 0003:06CB:81A7.001B: unknown main item tag 0x0 [ 143.037142][ T567] hid-rmi 0003:06CB:81A7.001B: unknown main item tag 0x0 [ 143.044232][ T567] hid-rmi 0003:06CB:81A7.001B: unknown main item tag 0x0 [ 143.051346][ T567] hid-rmi 0003:06CB:81A7.001B: unknown main item tag 0x0 [ 143.059110][ T567] hid-rmi 0003:06CB:81A7.001B: hidraw0: USB HID v0.1c Device [HID 06cb:81a7] on usb-dummy_hcd.5-1/input0 [ 143.102973][ T4440] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 143.103009][ T4440] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:646 [ 143.112670][ T4440] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 143.121841][ T4440] rust_binder: Read failure Err(EFAULT) in pid:646 [ 143.155942][ T4447] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.221299][ T544] usb 6-1: USB disconnect, device number 14 [ 143.417481][ T567] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 143.570443][ T567] usb 3-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 143.579647][ T567] usb 3-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 143.588041][ T567] usb 3-1: Product: syz [ 143.592533][ T567] usb 3-1: Manufacturer: syz [ 143.597168][ T567] usb 3-1: SerialNumber: syz [ 143.602718][ T567] usb 3-1: config 0 descriptor?? [ 143.688270][ T4461] binder: Unknown parameter 'coyBLV"i5ntext' [ 143.726813][ T4464] rust_kernel: panicked at /syzkaller/managers/ci2-android-6-12-rust/kernel/rust/kernel/page_size_compat.rs:60:5: [ 143.726813][ T4464] attempt to add with overflow [ 143.749333][ T4464] ------------[ cut here ]------------ [ 143.754872][ T4464] kernel BUG at rust/helpers/bug.c:7! [ 143.760782][ T4464] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 143.761964][ T36] audit: type=1400 audit(1750565439.070:538): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 143.767762][ T4464] CPU: 1 UID: 0 PID: 4464 Comm: syz.0.1402 Not tainted 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473 [ 143.767792][ T4464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 143.789684][ T36] audit: type=1400 audit(1750565439.070:539): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.802948][ T4464] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 143.802995][ T4464] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 c3 d7 c7 99 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 89 13 8e 15 90 90 90 90 90 90 90 90 90 [ 143.813723][ T36] audit: type=1400 audit(1750565439.070:540): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.834340][ T4464] RSP: 0018:ffffc9000c35f3f0 EFLAGS: 00010246 [ 143.834372][ T4464] RAX: 000000000000008c RBX: 1ffff9200186be80 RCX: 96d0ea67f647f300 [ 143.834389][ T4464] RDX: ffffc90002a76000 RSI: 000000000000388a RDI: 000000000000388b [ 143.834405][ T4464] RBP: ffffc9000c35f3f0 R08: ffffc9000c35f0e7 R09: 1ffff9200186be1c [ 143.834422][ T4464] R10: dffffc0000000000 R11: fffff5200186be1d R12: 0000000000000000 [ 143.840387][ T36] audit: type=1400 audit(1750565439.070:541): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.859328][ T4464] R13: dffffc0000000000 R14: ffffc9000c35f420 R15: ffffc9000c35f450 [ 143.859350][ T4464] FS: 00007ff6965c56c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 143.859370][ T4464] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 143.859385][ T4464] CR2: 000000110c30dc4f CR3: 000000014247c000 CR4: 00000000003526b0 [ 143.881144][ T36] audit: type=1400 audit(1750565439.070:542): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 143.886710][ T4464] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 143.895015][ T36] audit: type=1400 audit(1750565439.070:543): avc: denied { append open } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 143.902657][ T4464] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 143.902680][ T4464] Call Trace: [ 143.902688][ T4464] [ 143.902698][ T4464] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 143.911756][ T36] audit: type=1400 audit(1750565439.070:544): avc: denied { getattr } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 143.918636][ T4464] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 143.939525][ T36] audit: type=1400 audit(1750565439.220:545): avc: denied { ioctl } for pid=4465 comm="syz.5.1403" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 143.947119][ T4464] ? kernel_text_address+0xa9/0xe0 [ 144.104368][ T4464] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 144.117929][ T4464] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 144.124093][ T4464] ? arch_stack_walk+0x10b/0x170 [ 144.127536][ T2461] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 144.129042][ T4464] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 144.143811][ T4464] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 144.151719][ T4464] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0xb2/0xc0 [ 144.161622][ T4464] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0x10/0x10 [ 144.172220][ T4464] _RNvXs1_CscPPBqWtAqum_11ashmem_rustNtB5_6AshmemNtNtCs43vyB533jt3_6kernel10miscdevice10MiscDevice4mmap+0xe44/0xfb0 [ 144.184474][ T4464] ? mas_wr_store_type+0x8eb/0x1ad0 [ 144.189679][ T4464] ? __cfi__RNvXs1_CscPPBqWtAqum_11ashmem_rustNtB5_6AshmemNtNtCs43vyB533jt3_6kernel10miscdevice10MiscDevice4mmap+0x10/0x10 [ 144.202537][ T4464] ? mas_preallocate+0x56e/0xc60 [ 144.207489][ T4464] ? __cfi_mas_preallocate+0x10/0x10 [ 144.212790][ T4464] ? kasan_save_alloc_info+0x40/0x50 [ 144.218079][ T4464] ? __asan_memset+0x39/0x50 [ 144.222673][ T4464] mmap_region+0x1371/0x1bd0 [ 144.227297][ T4464] ? __cfi_mmap_region+0x10/0x10 [ 144.232244][ T4464] ? __futex_queue+0x19a/0x340 [ 144.237116][ T4464] ? __kasan_check_read+0x15/0x20 [ 144.242144][ T4464] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 144.248407][ T4464] ? file_mmap_ok+0x147/0x1a0 [ 144.253088][ T4464] do_mmap+0xb6d/0x13c0 [ 144.257245][ T4464] ? __cfi_do_mmap+0x10/0x10 [ 144.261839][ T4464] ? down_write_killable+0xe9/0x2d0 [ 144.267038][ T4464] ? __cfi_down_write_killable+0x10/0x10 [ 144.272680][ T4464] vm_mmap_pgoff+0x38f/0x4e0 [ 144.277274][ T4464] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 144.277623][ T335] Bluetooth: hci0: command 0x1003 tx timeout [ 144.282386][ T4464] ? __fget_files+0x2c5/0x340 [ 144.282422][ T4464] ksys_mmap_pgoff+0x166/0x1e0 [ 144.288425][ T325] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 144.293065][ T4464] __x64_sys_mmap+0x121/0x140 [ 144.308609][ T4464] x64_sys_call+0x13bf/0x2ee0 [ 144.313316][ T4464] do_syscall_64+0x58/0xf0 [ 144.317756][ T4464] ? clear_bhb_loop+0x35/0x90 [ 144.322457][ T4464] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 144.328374][ T4464] RIP: 0033:0x7ff69578e929 [ 144.332817][ T4464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.352447][ T4464] RSP: 002b:00007ff6965c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 144.360881][ T4464] RAX: ffffffffffffffda RBX: 00007ff6959b5fa0 RCX: 00007ff69578e929 [ 144.368868][ T4464] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000701000 [ 144.376851][ T4464] RBP: 00007ff695810b39 R08: 0000000000000003 R09: 0000000000000000 [ 144.384831][ T4464] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 144.392813][ T4464] R13: 0000000000000000 R14: 00007ff6959b5fa0 R15: 00007ffd098d11d8 [ 144.400800][ T4464] [ 144.403821][ T4464] Modules linked in: [ 144.408631][ T4464] ---[ end trace 0000000000000000 ]--- [ 144.408998][ T2461] usb 6-1: config 0 has an invalid interface number: 230 but max is 0 [ 144.419850][ T4451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.422802][ T2461] usb 6-1: config 0 has no interface number 0 [ 144.432664][ T4451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.439677][ T2461] usb 6-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 144.445626][ T4464] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 144.456779][ T2461] usb 6-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 144.467078][ T4464] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 c3 d7 c7 99 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 89 13 8e 15 90 90 90 90 90 90 90 90 90 [ 144.475713][ T2461] usb 6-1: config 0 interface 230 has no altsetting 0 [ 144.494439][ T4464] RSP: 0018:ffffc9000c35f3f0 EFLAGS: 00010246 [ 144.508688][ T4464] RAX: 000000000000008c RBX: 1ffff9200186be80 RCX: 96d0ea67f647f300 [ 144.512964][ T2461] usb 6-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 144.516821][ T4464] RDX: ffffc90002a76000 RSI: 000000000000388a RDI: 000000000000388b [ 144.525890][ T2461] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.534358][ T4464] RBP: ffffc9000c35f3f0 R08: ffffc9000c35f0e7 R09: 1ffff9200186be1c [ 144.542896][ T2461] usb 6-1: Product: syz [ 144.550277][ T4464] R10: dffffc0000000000 R11: fffff5200186be1d R12: 0000000000000000 [ 144.554137][ T2461] usb 6-1: Manufacturer: syz [ 144.566974][ T2461] usb 6-1: SerialNumber: syz [ 144.572766][ T4464] R13: dffffc0000000000 R14: ffffc9000c35f420 R15: ffffc9000c35f450 [ 144.573871][ T567] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 144.580949][ T4464] FS: 00007ff6965c56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 144.592034][ T567] asix 3-1:0.0: probe with driver asix failed with error -71 [ 144.600638][ T2461] usb 6-1: config 0 descriptor?? [ 144.611028][ T567] usb 3-1: USB disconnect, device number 37 [ 144.616361][ T4464] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 144.626457][ T4464] CR2: 00007f4982771d60 CR3: 000000014247c000 CR4: 00000000003526b0 [ 144.634762][ T4464] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 144.644900][ T4464] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 144.653112][ T4466] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 144.653120][ T4464] Kernel panic - not syncing: Fatal exception [ 144.666756][ T4464] Kernel Offset: disabled [ 144.671139][ T4464] Rebooting in 86400 seconds..