last executing test programs: 1m6.873082242s ago: executing program 0 (id=770): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) timerfd_create(0x0, 0x80800) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) connect$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, @any, 0x2}, 0xa) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fd4000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f00000007c0)="650f2204f08133000000000f20c035000000800f22c0660f383f36b9600900000f32f30f6f530066b833010f00d8c4e1b72a7100660fc5ef0764650f7932", 0x3e}], 0x1, 0x6, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x8, 0x8b, 0xb4, 0x2]}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) 1m6.849359532s ago: executing program 0 (id=771): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x3) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') 1m6.838615132s ago: executing program 0 (id=772): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 1m6.785047112s ago: executing program 0 (id=773): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x22200a1, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0xe64, 0x3, @mcast2, 0x1}, 0xffffffffffffff79) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='.\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="80010000", @ANYRES16=r2, @ANYBLOB="efc3032c7000fddbdf2508000000580007800800010002000000080002000200000008000100ffff000008000100f8ffffff080002002c0000000c0003007f00000000000000080002000700000008000200160b000008000200030000000800010001010000140104800900010073797a31000000002400078008000300410a00000800030006000000080001001100000008000100030000000900010073797a30000000002400078008000100050000000800020001000000080002000200000008000200010000003c000780080002000200000008000100130000000800010002000000080004000f0000000800040000000000080001001800000008000400040000004c00078008000400070000000800010012000000080002000700000008010400060000000800030076000000080001000b0000000800040009000000080002003400000014000780a0a9f86b0400000008000400"], 0x180}, 0x1, 0x0, 0x0, 0x20004004}, 0x400c800) setpriority(0x1, 0xffffffffffffffff, 0xd1f4) sendto$inet6(r0, &(0x7f0000000180)="91532797cf490fb7af49d73cb1a060c70c982e9187babe712aa404ae7c63dc8a0ae50270602658a4b34e9714337bbc26cb37cb46c51ab4aa8a14885843ddfd7d08ced2dbc9aace73065125fe77eb4a644215175276398001cbe25d0187e11c02807dca72d0443d658cce52d5fd3a9bb5669c11", 0x73, 0x4004051, &(0x7f0000000240)={0xa, 0x4e20, 0x7, @private1, 0x6}, 0x1c) r3 = open$dir(&(0x7f0000000100)='./file0/../file0\x00', 0x2000, 0x52) mkdirat(r3, &(0x7f0000000140)='./file0\x00', 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x81080, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r4 = userfaultfd(0x801) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000104c05c405000000000001090224000100000000090400000103000000092100000001220500090581000000000000"], 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xc) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2000000, &(0x7f00000001c0)=ANY=[@ANYBLOB=',msize=0']) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="002207000000a3c42da07fb163374f9d066ea398ee9909f73b141f68b27a2fccef275313f035555c30"], 0x0}, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x1, 0x15, "3c907452d4a8299f46b993f4c399ac636da021a257"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x6}}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2ec37000) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 1m3.744367611s ago: executing program 0 (id=804): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165042, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0) write(r0, &(0x7f0000000400)="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", 0x678) 1m3.585604952s ago: executing program 0 (id=805): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000009c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010004000000fedbdf250e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900001c0000000000010000000000"], 0x4c}}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000040)={0x8, 0x5, 0x8, 0x8}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 1m3.522053353s ago: executing program 32 (id=805): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000009c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010004000000fedbdf250e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900001c0000000000010000000000"], 0x4c}}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000040)={0x8, 0x5, 0x8, 0x8}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 3.749588817s ago: executing program 3 (id=1605): r0 = socket$igmp6(0xa, 0x3, 0x2) recvmmsg(r0, &(0x7f0000004240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x21, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x1b) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)) pread64(r1, &(0x7f0000001200)=""/4091, 0x1a, 0xd37) 3.681050807s ago: executing program 3 (id=1606): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3000000) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') 3.680076677s ago: executing program 3 (id=1607): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x2800, 0x20, 0x0, 0x0, 0xc, 0x2, 0x9e8e, 0x5, 0x4, 0x0}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x28011, r0, 0x1465e000) 3.676108757s ago: executing program 3 (id=1608): r0 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') openat2(r1, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x8}, 0x18) (async) openat2(r1, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x8}, 0x18) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f00000000c0)={'nr0\x00'}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) (async) ptrace(0x10, r3) ptrace$setsig(0x4203, r3, 0x6, &(0x7f0000000000)={0xd, 0x8, 0x8}) r4 = syz_open_procfs(r3, &(0x7f0000000080)='net/udp6\x00') preadv(r4, &(0x7f0000000240), 0x0, 0x344df5e8, 0x20000) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x400001000001fe) (async) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x400001000001fe) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, 0x0) mmap(&(0x7f000001a000/0x2000)=nil, 0x2000, 0x3000002, 0x11, r2, 0x5f454000) 3.653785197s ago: executing program 3 (id=1609): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x2, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x2, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x57e, 0x2009, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0xfe, 0x5, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x10, 0x8, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0xfd, 0x0, 0x7}}]}}}]}}]}}, 0x0) (async) r1 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x57e, 0x2009, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0xfe, 0x5, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x10, 0x8, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0xfd, 0x0, 0x7}}]}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\vU'], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x44, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x44000800) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x4) (async) ioctl$TCFLSH(r4, 0x400455c8, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x7800, 0x7800, 0x4, 0x5, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x67, 0x0, 0x4, 0x2f, 0x0, @private=0xa010100, @rand_addr=0x64010100}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x7800, 0x7800, 0x4, 0x5, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x67, 0x0, 0x4, 0x2f, 0x0, @private=0xa010100, @rand_addr=0x64010100}}}}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r3) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x3ec, r6, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_NODE={0x124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x57, 0x3, "aa16d965921fe5960878027474442b0effe574114ed2356dec050ae69f746e977dddd5428a2913396e8613877a1cfe50921b4bf44d1508a8b6b08724da0bc1f22c62dbad22744728fab935750f8f0d114c7b72"}, @TIPC_NLA_NODE_ID={0x67, 0x3, "ebd4cf61a487f3b93ebfb6dbfeba4a175c4adeeddcf9a667aa177f8e8e23b86828d770777f9c66102b74db03bf1c9739cb05908b557a47e59ef31bbd317563fa74c831430e4a136b8372e1f7890d903bd897f56f50d670d69cd1d19b21013e1bb4606c"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "a60aff76051387079c32faab26c08c85f7459b26c3fce07510"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7a31}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x59780978}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x249b}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe0dd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}}}}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA={0xd8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff4b67}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6ac}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0xb0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xeff1}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xab36}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2f0e4b0d}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x427f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x96b2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf936}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}]}]}, 0x3ec}, 0x1, 0x0, 0x0, 0x10000000}, 0x1000c818) 1.51550786s ago: executing program 4 (id=1629): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0]) 1.445042851s ago: executing program 4 (id=1630): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x5b2, &(0x7f0000000cc0)=ANY=[@ANYBLOB="12010000085b6d40351210002c2c010203010902a005020400508009043f0c01cb5e346009050700200006de000904"], 0x0) (async) r1 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r1, 0x0, 0x0, 0x4000) (async, rerun: 64) syz_usb_connect(0x2, 0x34, 0x0, 0x0) (async, rerun: 64) gettid() (async, rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110a, 0xfffffffffffffffe}) (rerun: 64) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') read$FUSE(r4, &(0x7f00000012c0)={0x2020}, 0x2020) (async) write(r3, &(0x7f0000000480)="534287ac770767f7429748b7bad1a664a6cc00", 0x13) (async) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000040)={0x40f1, 0x2}) (async) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0x4b564d01, 0x0, 0xfffffffffffffffd}]}) r8 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) r10 = syz_open_dev$hidraw(&(0x7f0000000180), 0x10000, 0x105002) ioctl$HIDIOCGRDESCSIZE(r10, 0x80044801, &(0x7f0000000200)) (async) fchdir(r9) (async) r11 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) ioprio_set$pid(0x1, 0x0, 0x0) (async) sendfile(r11, r11, 0x0, 0x1000000201005) (async, rerun: 32) getrlimit(0xa, &(0x7f0000000100)) (async, rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 1.442903571s ago: executing program 4 (id=1632): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000300)=""/225) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0x1100, 0x1}, @flat=@binder={0x73622a85, 0x10b, 0x1}, @fda={0x66646185, 0x9, 0x2, 0x18}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1.432694591s ago: executing program 4 (id=1633): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) wait4(r0, &(0x7f0000000080), 0x4, &(0x7f00000000c0)) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000180)={'ipvs\x00'}, &(0x7f00000001c0)=0x1e) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) waitid$P_PIDFD(0x3, r2, 0x0, 0x1, &(0x7f0000000240)) pidfd_send_signal(0xffffffffffffffff, 0x26, &(0x7f0000000300)={0x1f, 0x6, 0x2}, 0x0) fcntl$getflags(r2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x10c000, 0x100) r4 = syz_open_procfs$namespace(r0, &(0x7f00000003c0)='ns/ipc\x00') fsopen(&(0x7f0000000400)='esdfs\x00', 0x1) ptrace$setsig(0x4203, r0, 0x8ca, &(0x7f0000000440)={0x18, 0x5, 0xb}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r3) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r5, 0x8, 0x70bd2c, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x28004081}, 0x8840) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) r6 = getpid() syz_pidfd_open(r6, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r3, 0xc004aea7, &(0x7f0000000600)=0x9) ioctl$F2FS_IOC_RESIZE_FS(r4, 0x4008f510, &(0x7f0000000640)=0xaa08) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) tkill(0xffffffffffffffff, 0x38) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setuid(r1) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f00000006c0)) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000700)={@multicast2, @multicast1, @rand_addr=0x64010100}, 0xc) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$F2FS_IOC_RESIZE_FS(r8, 0x4008f510, &(0x7f0000000740)=0x6) socket$key(0xf, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000800)={'syztnl2\x00', &(0x7f0000000780)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x8e, 0x6, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8, 0x400, 0x1}}) setsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000840)={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, r9}, 0xc) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x64, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r0}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PID={0x8, 0x1c, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x20008000) 1.409124401s ago: executing program 4 (id=1635): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0x8fe69000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000040)={0x0, 'ip_vti0\x00', {0x1}, 0x3}) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timerfd_gettime(r3, 0x0) r4 = fcntl$dupfd(r2, 0x0, r1) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x80400, 0x0) syz_clone3(&(0x7f0000000480)={0x200800, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0, {0x25}, &(0x7f0000000300)=""/53, 0x35, &(0x7f0000000340)=""/197, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r8) setuid(r8) statx(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x100, 0x1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r3, &(0x7f0000000700)={&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000180)="13251549a74e64250ddcce8473dbfa808c18c06b330692c4efdfd7cbec55aa2d2f823978cf18592934f15f9efdcfa48affd0269914c9ae63565d56943fec7bbde55b607cf1afd5f02ab8747bb1e157608986ebfa68db2b493bf330f4c4b94c3144132fd9a84365d9bb72ee", 0x6b}], 0x1, &(0x7f0000000640)=[@rights={{0x34, 0x1, 0x1, [r2, r2, r2, r4, r2, r1, r0, r2, r1]}}, @rights={{0x18, 0x1, 0x1, [r5, r1]}}, @cred={{0x1c, 0x1, 0x2, {r6, r8, r9}}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r1, r1]}}], 0x90, 0x10}, 0x4022) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='vlan0\x00'}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000057b000/0x400000)=nil) madvise(&(0x7f00001e2000/0x400000)=nil, 0x400000, 0x17) 1.352249941s ago: executing program 2 (id=1637): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) mmap$binder(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x7ff) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x200400) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) ptrace$getregset(0x4205, r1, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000740)={0x0}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) 1.272244512s ago: executing program 4 (id=1638): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) (async) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000080)={0xad4, 0xb8c, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05dd000000000000010902240001000010b109040000410301010009210101000122050009058103ff030c00006e0d36c198c8a1a79dccd5"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='@\b\"'], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000010480)=0x2) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (async, rerun: 32) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='}.\x00') (rerun: 32) 1.146400133s ago: executing program 2 (id=1639): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0xdc) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) 1.081014573s ago: executing program 2 (id=1640): r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x100000000, 0x482802) socket$tipc(0x1e, 0x2, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/133, 0x85}], 0x1) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48801, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) close(r1) 737.829145ms ago: executing program 2 (id=1643): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x109000, 0x0) pwrite64(r1, 0x0, 0x0, 0x7) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r2, 0x29, 0x1b, &(0x7f0000000100)="8684b94757eabab5369768b6c57c8b04f3ef434b", 0x14) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) r3 = socket(0x10, 0x2, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=ANY=[@ANYBLOB="240000001e000503"], 0x24}, 0x1, 0x0, 0x0, 0x4a841}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100fdfffffffcde7edd340000000e000100"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000080), 0x0, 0x90, 0x0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) syz_clone(0x4300080, &(0x7f0000000080)="4fa22cb32bad31e565ce696527d2e32e5d18d2fdbd7524adefaad163e1dd61592acd759f16d4e19752aaa0cf057a06e5435a823925de8334bf14e05a8c275646b114943a5ccbe2c5c4e757170f40058cec106ea8f9746b5f240ea3a1524c45303dadec1657dbfe920e340edaca7cf1958e657a5f848a539adc62dfad4e86bb26ddb2126f9aa9bb7c155dc78ad866526064b85934a7d3397214164ce7742b162577e7043fcaaed53f593db79a221b85e555c8047bff536ea20c2cf409219c6389188da5adae10c717eb218f18297a58520d9bf382027c2458eee1f49ebdeb206b925d09fe50ff255b239bf85f122f93fb147fba451883", 0xf6, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="748a25ce654dbbf7a6b97564008a9269e92470d0c1b9ca302323ec04") 671.803136ms ago: executing program 2 (id=1645): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) (async) syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0xff0a, 0x0) (async, rerun: 64) r1 = add_key$keyring(&(0x7f0000003c40), &(0x7f0000003c80)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) (async, rerun: 32) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) r3 = syz_open_procfs(0x0, &(0x7f0000000e00)='maps\x00') (async) sendto(r2, &(0x7f0000000300)="4625bb7328291e27241d5e90a0e4f786d5e28b5af9798b0011691dc45f020e74dfe695eaa8b21bf696c4172679af9fbebebeadf3f63f3cff51e31835d1e764bc726794dbf68c7dff17b92f01be4a847434477d29bda8268314722bf3db3c942259e42b7483ddd643b5adb4669476e969a786b2dce51872be184927eb5046aa12290af71829b2b0b16e346e743d869b125c5ac9ce1b90179eb66a7fc54ba9411187dd8beefef3aa382637103d99a2076f7d615475c100cf3dccf2eccacf20aa5dfa577ab1980dfa4304cf95e68602ee8e573defef035bbf9f34cbc01345", 0xdd, 0x2004c845, &(0x7f0000000440)=@sco={0x1f, @none}, 0xc6) (async) r4 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) close(r3) (async, rerun: 64) syz_usb_control_io(r4, 0x0, 0x0) (rerun: 64) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x163342, 0x0) read(r3, &(0x7f0000001400)=""/255, 0xff) (async, rerun: 64) write(r5, &(0x7f0000000400)="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", 0x1f000) (async, rerun: 64) request_key(&(0x7f0000001340)='asymmetric\x00', &(0x7f0000001380)={'syz', 0x1}, &(0x7f00000013c0)='ntfs\x00', r1) sendmsg(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000003cc0)='+', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x20000850) (async) pidfd_send_signal(r3, 0x23, &(0x7f00000028c0)={0x16, 0xffffffff, 0x1324}, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000001400)=0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="380400001100010400000000000000000a00000008000200", @ANYRES32, @ANYBLOB="1c040080170413"], 0x438}}, 0x0) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000014c0)={0x0, 0x4, 0x8, 0x1}) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) (async) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x3b48, &(0x7f00000002c0)={0x0, 0xc5fa, 0x10000, 0x1, 0xc3}, 0x0, 0x0) vmsplice(r10, &(0x7f00000000c0)=[{&(0x7f0000000240)="3dd951", 0x3}], 0x1, 0x0) (async) write$FUSE_INIT(r11, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}}, 0x50) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f00000018c0)={{}, r7, 0x10, @inherit={0x50, &(0x7f0000001440)=ANY=[@ANYBLOB="00000000000000000100000000000000ba00000000000000040000000000000029000000000000000600000000000000e003000000000000ff070000000000003b150000000000008270000000000000"]}, @devid=r9}) (async, rerun: 64) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ntfs\x00', 0xa220c0, 0x0) (async, rerun: 64) writev(0xffffffffffffffff, &(0x7f0000001280)=[{&(0x7f0000000140)="da96bd2000df23de0332a7bc80de57bf932c772c73c58240d95212571011172c1cd41d8ee436e8ab483c251b4b03c9dce9b759c0895418565c2572a6fabe71ff368add26268106b4627c5b717667bcf6c35c65277b9fa0631b1875aff524b644af2f640a11ad6e8329e4a8c0c3158d506e12a54896479b302fcf3ca94439b6a326240defe538925023d33d733196afd6889a2ffe164f85f25fe4e165a9e2e7eb9e5314c3b392a0677d11c6e922", 0xad}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="903429b3d64f158ad788a587d3f91113cb3764bdec874a3a5f386b726acf148ce46fe86a79dfdad4775ee9f90db91f7ac4d8be5f41fbf2c8e1724cdbdb6c72ddb942", 0x42}, {&(0x7f0000003d00)="ba8d39456db98ff7ebfcbf9d6f88a0feecfb582d27c61146b4fde9c51f9941b552cabc4e4c3139a5bc0ce87e8633f1fa69de2b7b724b7849a4daa7c35bb1717a873a8439a7213f67cb2f24ed29e0f1fc204054779c40f2a0bbbc9d8fdaa3b3941633333473092a279dcc33660f85da79c3ca58bcaf1e1557e9119a055d7cee1f55d9404ef0b68675aa8579bc8519761f9be84795576870d39adf0f1884ef450a34bcbce8ddc0e75a492d9dfa415599b36ef5296718b17cfe0892db16440ea1cc5dcc4cba70cc8d9c6dbb0a11688d7064b591e1d76232b371df11ec6767", 0xdd}, {&(0x7f0000000080)="402e85aa989108ba628459dd3b44e9fab72cb016c71f", 0x16}, {&(0x7f0000002940)="0d0ead8267954dfba150fe03fb06d6c8b5f06eab274e4a4a4d3fc91eab5d46777c16cf39de185aa488bb0470b3e4d1a72d9dca3651e0ee2b7a20791a17efed6f82a6ec9e4af59338e0df1912ca6da15344041282953f552b67e9f09e19d508d155e694dc0a457dca7eae5dd6a6c9987f0ec739cca6ec2470c7c3e1684b078440f2173f8c480e993e7f7b", 0x8a}, {&(0x7f0000002a00)="32969fe6484924a3142ce20bd06247054076b4589771307d5db007dc4096b2b533a83529da5bed4921041a536b493444b10fe4f68f9973deae5dec44228b7883e780ae90d53d24f779628503c48855ec57bab281600e73cceea1cb8764168147a982", 0x62}, {&(0x7f0000002a80)="141fabd90a027fbd3e3b9b80e395bb4d3ee552556a3fd8bd2e396cf5a36cda0f2a7f2b01c109fef7a434afc8a7b1f3b8590726bb1d7a14016ad8b228e2a3fef891ab119b72f51550c931d2dda3f682a50919173aeb35531ea8646b1160f0b924c461bbde8862469b2f782460d6acc6960a0913d93bbf9b18b7ca836651ec096136923504e92e44e7d3f0c88210b7e6cee4acdf80d9143890af049a1a61789794378e039d7a4a", 0xa6}, {&(0x7f0000002b40)="a7fc045c19652ff111559d881df5c4c2670f51ccc3dbd02028df8917c6f27ed9a7899e906bf9fbc5e6eaaea34ac243e1019d786c34ab0a09b51aef67ff78b0f18321ee73b92e2103ceb4ffdc39100b5d25511a1d337313a7368e2a5754393b7477bf21f3dbe149918809ba5e5594675c0bda2c85f20ce04e4aea679281a2c1b27a812f48a3bc20db4e5e1b6986b69cb3bce5d77b4115c71fc623fd76ccd6f0cf62dba53da37c74ca42db94c730b0ad811e4206b5fcde3d39709c199878ae4a84a3685c9c6eff66a62cf608d929b2459f2b7ffa28", 0xd4}, {&(0x7f0000002c40)="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", 0x1000}], 0xa) 671.631726ms ago: executing program 2 (id=1646): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) (async) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) rt_sigaction(0x4, &(0x7f00000004c0)={&(0x7f0000000440)="c44241b6fc3ef0408160bb841e97fbc421a9db9297c80000c462f9237e0ec42241096aa8260f01f9f6892d00000000430fc4890a0000009bc421a96db290474df23b9967a554eb", 0x4, 0x0, {[0x8]}}, 0x0, 0x8, &(0x7f0000000500)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x43, 0x92, 0xd5, 0x20, 0x54c, 0x6c3, 0xeb7a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x87, 0x70, 0x7, [{{0x9, 0x4, 0xcb, 0x1, 0x0, 0x4f, 0x3e, 0xaf, 0xb5}}]}}]}}, 0x0) unshare(0x22000600) inotify_rm_watch(0xffffffffffffffff, 0x0) (async) inotify_rm_watch(0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x4) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) (async) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r2 = openat$incfs(r1, &(0x7f00000000c0)='.pending_reads\x00', 0x80040, 0x42) read$rfkill(r2, 0x0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x208003, 0x0) 609.983026ms ago: executing program 3 (id=1648): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449", 0x80) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) mlockall(0x7) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x100, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3138, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000400)={0x2c, &(0x7f0000000100)={0x0, 0xbf7a04cb866db8e9, 0x23, {0x23, 0x23, "7a763b3b8fc367b52206a1ca550a9ce9f5d14b3ddfd1b296ee0bfc96b334d4a9a7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000180)={r2, 0x0, 0x0, 0x100000000}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getpeername(r6, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0xc0086202, &(0x7f0000000080)=0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0xe, 0x80, 0x2, 0x3, 0xb819, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x2, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2e, 0x7, 0xe661, 0x8002, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0x402, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0xa, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x8, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0xa, 0x5, 0x5, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x4, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x3, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0xfffffffe, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x4, 0x4, 0xffffffff, 0x80000000, 0x7, 0x4, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x9, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$ASHMEM_SET_SIZE(r8, 0x40087703, 0x8000000000000001) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x44801) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) ioprio_set$pid(0x0, 0xffffffffffffffff, 0x4004) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0xffffffffffffff8b, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x2, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x138}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x40}], 0x0, 0x0, 0x0}) lseek(r0, 0x101, 0x4) 105.815649ms ago: executing program 1 (id=1654): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) (async) r4 = syz_clone(0xa5102000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r4, r0, 0x7, r1, &(0x7f0000000180)={r2, r1, 0xfffffffc}) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) (async) r5 = getpid() (async) r6 = syz_clone(0x20820000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r7 = getpgrp(r0) ptrace$pokeuser(0x6, r7, 0xd, 0x6) (async) kcmp(r5, r6, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) (async) r8 = getpgid(r5) prlimit64(r8, 0xe, &(0x7f0000000140)={0xe, 0x800000000088}, 0x0) (async) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000000)={0x3fa, 0x2}, 0x4) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000200), 0x802, 0x0) ppoll(&(0x7f0000000dc0)=[{r12, 0x4}], 0x1, 0x0, 0x0, 0x0) (async) sendmsg$nl_generic(r11, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="740400001e0002002abd7000fddbdf250e0000002c002d80080021007f00000108001700feffffff040033800800db000000000008000300", @ANYRES32, @ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="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"], 0x474}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) (async) r14 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r14, 0x6, 0x7, 0x0, &(0x7f0000000040)) sendto$packet(r9, &(0x7f0000000240)="1003", 0x2, 0x0, &(0x7f00000001c0)={0x11, 0x0, r13}, 0x14) (async) ioprio_set$pid(0x2, 0x0, 0x4004) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) 82.645789ms ago: executing program 1 (id=1655): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e1f, 0x6, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_int(r0, 0x11a, 0x3, &(0x7f0000000700)=0x4, 0x4) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f00000001c0)={0x4, 0x1}, 0x2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg$sock(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000800) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000180)={0x1}) 1.69652ms ago: executing program 1 (id=1656): prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffd000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffe000/0x2000)=nil) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xa8ca3411d1c26009, 0x810, r0, 0x98b2f000) 306.05µs ago: executing program 1 (id=1657): r0 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000001580)={0x0, "e5cf9087c0bc4eecd575619bf7fe717b09a75040d67944bdf74658aa573ec7ec5fd9ecb3bf2ad2cceb6d2f7879709ab2db2fcfa073f7ab9055774346282c82cc", 0x17}, 0x48, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000001600)='a`h', 0x3) (async, rerun: 32) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (rerun: 32) read(r1, &(0x7f0000000040)=""/141, 0x8d) (async, rerun: 64) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x80100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0) (async, rerun: 64) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xdb9, 0x0, 0x0, 0x4}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) (async, rerun: 64) close(0xffffffffffffffff) (async, rerun: 64) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)={[&(0x7f0000000200)='fscrypt:']}, &(0x7f0000000500)={[&(0x7f00000002c0)='fscrypt:', &(0x7f0000000300)='logon\x00', &(0x7f0000000340)='logon\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='-%-\x00', &(0x7f0000000400)='&(%\\i-\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)='e8dab99234bb312e', &(0x7f00000004c0)='}&))\x00']}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000580)={0xfffffffa}, 0x4) (async) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) sendfile(r1, r1, 0x0, 0x7ffff000) 179.54µs ago: executing program 1 (id=1658): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_NMI(r0, 0xae9a) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000000)={0x1}) 0s ago: executing program 1 (id=1659): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom0\x00', 0x804, 0x0) (async) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x140, 0x0) (async) ioctl$KVM_CAP_X86_USER_SPACE_MSR(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000fc0)={0xa8, 0x700}) (async) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2046) (async) write$selinux_load(r1, 0x0, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x122, 0x0, 0x3}]}) (async) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) (async) ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000000100)={r3, 0x1, 0x800}) kernel console output (not intermixed with test programs): it(96.078:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3433 comm="syz.4.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc078f6c9 code=0x50000 [ 96.144901][ T36] audit: type=1326 audit(96.078:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3433 comm="syz.4.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc078f6c9 code=0x50000 [ 96.167184][ T36] audit: type=1326 audit(96.078:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3433 comm="syz.4.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc078f6c9 code=0x50000 [ 96.189495][ T36] audit: type=1326 audit(96.078:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3433 comm="syz.4.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc078f6c9 code=0x50000 [ 96.236598][ T3444] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 96.236635][ T3444] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:520 [ 96.246729][ T9] usb 2-1: USB disconnect, device number 30 [ 96.789606][ T334] kernel write not supported for file /user (pid: 334 comm: kworker/0:4) [ 96.848527][ T9] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 96.913114][ T3484] netlink: 'syz.2.834': attribute type 4 has an invalid length. [ 97.010088][ T331] usbhid 5-1:0.0: can't add hid device: -71 [ 97.016158][ T331] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 97.025297][ T331] usb 5-1: USB disconnect, device number 2 [ 97.033248][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 97.044164][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 97.053143][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.064052][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 97.076236][ T9] usb 4-1: string descriptor 0 read error: -22 [ 97.083227][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 97.093256][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.106865][ T9] usb 4-1: 0:2 : does not exist [ 97.137462][ T334] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 97.267455][ T334] usb 2-1: device descriptor read/64, error -71 [ 97.311486][ T3509] netlink: 'syz.2.844': attribute type 1 has an invalid length. [ 97.354988][ T3517] 9pnet_fd: Insufficient options for proto=fd [ 97.361392][ T3516] 9pnet_fd: Insufficient options for proto=fd [ 97.531293][ T334] usb 2-1: device descriptor read/64, error -71 [ 97.550351][ T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 97.553953][ T3535] rust_binder: Write failure EFAULT in pid:557 [ 97.568919][ T9] usb 4-1: Warning! Unlikely big volume range (=20196), cval->res is probably wrong. [ 97.584832][ T9] usb 4-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/20196/1 [ 97.595759][ T9] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 97.606168][ T9] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 97.616851][ T9] usb 4-1: USB disconnect, device number 41 [ 97.787589][ T334] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 97.797496][ T701] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 97.907462][ T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 97.917544][ T334] usb 2-1: device descriptor read/64, error -71 [ 97.927471][ T701] usb 5-1: device descriptor read/64, error -71 [ 98.059976][ T9] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 98.069136][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.077152][ T9] usb 4-1: Product: syz [ 98.081334][ T9] usb 4-1: Manufacturer: syz [ 98.085936][ T9] usb 4-1: SerialNumber: syz [ 98.129110][ T36] kauditd_printk_skb: 15101 callbacks suppressed [ 98.129129][ T36] audit: type=1400 audit(98.108:15635): avc: denied { map } for pid=3544 comm="syz.2.859" path="socket:[18448]" dev="sockfs" ino=18448 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 98.160135][ T334] usb 2-1: device descriptor read/64, error -71 [ 98.173281][ T3549] netlink: 'syz.2.860': attribute type 11 has an invalid length. [ 98.181127][ T701] usb 5-1: device descriptor read/64, error -71 [ 98.267971][ T334] usb usb2-port1: attempt power cycle [ 98.375070][ T36] audit: type=1400 audit(98.348:15636): avc: denied { create } for pid=3570 comm="syz.2.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 98.417469][ T701] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 98.494069][ T3539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.502622][ T3539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.512183][ T3539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.520877][ T3539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.547472][ T701] usb 5-1: device descriptor read/64, error -71 [ 98.607455][ T334] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 98.628358][ T334] usb 2-1: device descriptor read/8, error -71 [ 98.730390][ T9] (unnamed net_device) (uninitialized): Assigned a random MAC address: 5a:c5:05:f7:31:d7 [ 98.741843][ T9] rtl8150 4-1:1.0: eth1: rtl8150 is detected [ 98.749728][ T9] usb 4-1: USB disconnect, device number 42 [ 98.768787][ T334] usb 2-1: device descriptor read/8, error -71 [ 98.787451][ T701] usb 5-1: device descriptor read/64, error -71 [ 98.897597][ T701] usb usb5-port1: attempt power cycle [ 98.912466][ T36] audit: type=1400 audit(98.888:15637): avc: denied { accept } for pid=3577 comm="syz.2.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 99.007469][ T334] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 99.028488][ T334] usb 2-1: device descriptor read/8, error -71 [ 99.158595][ T334] usb 2-1: device descriptor read/8, error -71 [ 99.237726][ T701] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 99.259160][ T701] usb 5-1: device descriptor read/8, error -71 [ 99.267576][ T334] usb usb2-port1: unable to enumerate USB device [ 99.388515][ T701] usb 5-1: device descriptor read/8, error -71 [ 99.477829][ T9] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 99.627573][ T701] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 99.628707][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 99.646048][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 99.659132][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=00dd, bcdDevice= 0.00 [ 99.666493][ T701] usb 5-1: device descriptor read/8, error -71 [ 99.668399][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.683278][ T9] usb 4-1: config 0 descriptor?? [ 99.808586][ T701] usb 5-1: device descriptor read/8, error -71 [ 99.917581][ T701] usb usb5-port1: unable to enumerate USB device [ 99.977428][ T36] audit: type=1400 audit(99.948:15638): avc: denied { bind } for pid=3612 comm="syz.1.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 100.031516][ T36] audit: type=1400 audit(100.008:15639): avc: denied { getopt } for pid=3618 comm="syz.1.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 100.096498][ T9] wacom 0003:056A:00DD.0011: unknown main item tag 0x0 [ 100.103436][ T9] wacom 0003:056A:00DD.0011: unknown main item tag 0x0 [ 100.110444][ T9] wacom 0003:056A:00DD.0011: unknown main item tag 0x0 [ 100.117304][ T9] wacom 0003:056A:00DD.0011: unknown main item tag 0x0 [ 100.124382][ T9] wacom 0003:056A:00DD.0011: unknown main item tag 0x0 [ 100.131551][ T9] wacom 0003:056A:00DD.0011: Unknown device_type for 'HID 056a:00dd'. Assuming pen. [ 100.146106][ T9] wacom 0003:056A:00DD.0011: hidraw0: USB HID v1.01 Device [HID 056a:00dd] on usb-dummy_hcd.3-1/input0 [ 100.161368][ T36] audit: type=1400 audit(100.138:15640): avc: denied { create } for pid=3622 comm="syz.1.885" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 100.182007][ T9] input: Wacom Bamboo Connect Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00DD.0011/input/input20 [ 100.250990][ T36] audit: type=1326 audit(100.228:15641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3628 comm="syz.1.886" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f21f458f6c9 code=0x0 [ 100.288500][ T36] audit: type=1400 audit(100.268:15642): avc: denied { map } for pid=3636 comm="syz.1.888" path="socket:[18679]" dev="sockfs" ino=18679 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 100.311171][ T36] audit: type=1400 audit(100.268:15643): avc: denied { read accept } for pid=3636 comm="syz.1.888" path="socket:[18679]" dev="sockfs" ino=18679 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 100.410464][ T3651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.892'. [ 100.434869][ T3653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.893'. [ 100.443978][ T3653] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=3653 comm=syz.2.893 [ 100.488359][ T3665] netlink: 'syz.2.897': attribute type 15 has an invalid length. [ 100.496169][ T3665] netlink: 24 bytes leftover after parsing attributes in process `syz.2.897'. [ 100.521683][ T3668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.530243][ T3668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.567593][ T653] usb 4-1: USB disconnect, device number 43 [ 100.602861][ T3676] binder: Bad value for 'stats' [ 100.625601][ T36] audit: type=1400 audit(100.598:15644): avc: denied { setattr } for pid=3677 comm="syz.4.901" name="ttyS3" dev="devtmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 100.735555][ T3682] /dev/nbd4: Can't lookup blockdev [ 100.747487][ T701] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 100.803096][ T3686] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3686 comm=syz.4.905 [ 100.815968][ T3686] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3686 comm=syz.4.905 [ 100.879902][ T46] Bluetooth: hci1: Frame reassembly failed (-84) [ 101.128243][ T3710] rust_binder: Write failure EFAULT in pid:576 [ 101.161908][ T3719] rust_binder: Write failure EFAULT in pid:578 [ 101.226900][ T3729] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.233446][ T3729] rust_binder: Failed to allocate buffer. len:1176, is_oneway:true [ 101.239995][ T3729] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 101.248083][ T3729] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:582 [ 101.286847][ T3733] 9pnet_fd: p9_fd_create_unix (3733): problem connecting socket: ./file0: -111 [ 101.305571][ T3733] 9pnet_fd: p9_fd_create_unix (3733): problem connecting socket: ./file0: -111 [ 101.314886][ T3733] 9pnet_fd: p9_fd_create_unix (3733): problem connecting socket: ./file0: -111 [ 101.333402][ T3733] 9pnet_fd: p9_fd_create_unix (3733): problem connecting socket: ./file0: -111 [ 101.342657][ T3732] fuse: Bad value for 'fd' [ 102.604466][ T3769] fuse: Bad value for 'fd' [ 102.917457][ T556] Bluetooth: hci1: command 0x1003 tx timeout [ 102.923544][ T572] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 103.353501][ T13] Bluetooth: hci1: Frame reassembly failed (-84) [ 103.466919][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 103.466937][ T36] audit: type=1400 audit(103.438:15656): avc: denied { write } for pid=3795 comm="syz.1.941" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.512132][ T3800] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 103.907463][ T333] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 104.057454][ T333] usb 5-1: Invalid ep0 maxpacket: 64 [ 104.077459][ T701] usb 2-1: device descriptor read/64, error -71 [ 104.187469][ T333] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 104.327464][ T701] usb 2-1: device descriptor read/64, error -71 [ 104.337453][ T333] usb 5-1: Invalid ep0 maxpacket: 64 [ 104.342864][ T333] usb usb5-port1: attempt power cycle [ 104.567453][ T701] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 104.687474][ T333] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 104.707491][ T701] usb 2-1: device descriptor read/64, error -71 [ 104.707859][ T333] usb 5-1: Invalid ep0 maxpacket: 64 [ 104.847500][ T333] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 104.867840][ T333] usb 5-1: Invalid ep0 maxpacket: 64 [ 104.873267][ T333] usb usb5-port1: unable to enumerate USB device [ 104.947457][ T701] usb 2-1: device descriptor read/64, error -71 [ 105.057523][ T701] usb usb2-port1: attempt power cycle [ 105.397459][ T556] Bluetooth: hci1: command 0x1003 tx timeout [ 105.397463][ T701] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 105.397583][ T572] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 105.428461][ T701] usb 2-1: device descriptor read/8, error -71 [ 105.558653][ T701] usb 2-1: device descriptor read/8, error -71 [ 105.797594][ T701] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 105.818484][ T701] usb 2-1: device descriptor read/8, error -71 [ 105.944062][ T36] audit: type=1326 audit(105.919:15657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3811 comm="syz.2.948" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68ce98f6c9 code=0x0 [ 105.967439][ T701] usb 2-1: device descriptor read/8, error -71 [ 106.077558][ T701] usb usb2-port1: unable to enumerate USB device [ 106.138416][ T3818] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.158177][ T3820] rust_binder: Write failure EFAULT in pid:629 [ 106.201791][ T3825] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.208861][ T3825] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 106.215324][ T3825] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 106.223284][ T3825] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:634 [ 106.296260][ T36] audit: type=1400 audit(106.269:15658): avc: denied { mounton } for pid=3826 comm="syz.3.953" path="/210/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 106.296340][ T3827] overlayfs: failed to resolve 'fowner<00000000000000000000': -2 [ 106.342182][ T36] audit: type=1400 audit(106.319:15659): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 106.359292][ T3830] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.362486][ T3830] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 106.368949][ T3830] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 106.376955][ T3830] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:639 [ 106.480672][ T3834] random: crng reseeded on system resumption [ 106.504452][ T36] audit: type=1400 audit(106.479:15660): avc: denied { ioctl } for pid=3833 comm="syz.1.956" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 106.548762][ T3837] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:574 [ 106.657469][ T653] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 106.704717][ T3841] rust_binder: validate_parent_fixup: new_min_offset=52, sg_entry.length=0 [ 106.704746][ T3841] rust_binder: Error while translating object. [ 106.713704][ T3841] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 106.720186][ T3841] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:45 [ 106.773268][ T3848] rust_binder: Write failure EFAULT in pid:52 [ 106.802691][ T3852] rust_binder: Write failure EFAULT in pid:54 [ 106.809874][ T3852] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 106.816087][ T3852] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:54 [ 106.829596][ T653] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 106.862375][ T653] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 106.877517][ T333] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 106.880342][ T653] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 106.897431][ T653] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.915601][ T653] usb 4-1: Product: syz [ 106.920202][ T653] usb 4-1: Manufacturer: syz [ 106.924824][ T653] usb 4-1: SerialNumber: syz [ 106.935430][ T653] usb 4-1: config 0 descriptor?? [ 106.941443][ T3859] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:59 [ 106.959596][ T653] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -90 [ 106.978764][ T3864] 9pnet_fd: Insufficient options for proto=fd [ 107.032870][ T36] audit: type=1400 audit(107.009:15661): avc: denied { map } for pid=3867 comm="syz.4.969" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 107.033413][ T3868] netlink: 'syz.4.969': attribute type 1 has an invalid length. [ 107.063103][ T333] usb 2-1: device descriptor read/64, error -71 [ 107.078869][ T36] audit: type=1400 audit(107.009:15662): avc: denied { execute } for pid=3867 comm="syz.4.969" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 107.085119][ T3868] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:62 [ 107.270593][ T3873] rust_binder: Write failure EINVAL in pid:65 [ 107.307524][ T333] usb 2-1: device descriptor read/64, error -71 [ 107.514822][ T3883] binder: Unknown parameter 'fscontext?}' [ 107.557492][ T333] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 107.687451][ T333] usb 2-1: device descriptor read/64, error -71 [ 107.861761][ T36] audit: type=1400 audit(107.839:15663): avc: denied { append } for pid=3889 comm="syz.4.977" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 107.937497][ T333] usb 2-1: device descriptor read/64, error -71 [ 108.047523][ T333] usb usb2-port1: attempt power cycle [ 108.097452][ T653] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 108.249782][ T653] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 108.258895][ T653] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.266900][ T653] usb 5-1: Product: syz [ 108.271092][ T653] usb 5-1: Manufacturer: syz [ 108.275697][ T653] usb 5-1: SerialNumber: syz [ 108.397488][ T333] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 108.418472][ T333] usb 2-1: device descriptor read/8, error -71 [ 108.538675][ T36] audit: type=1400 audit(108.519:15664): avc: denied { accept } for pid=3897 comm="syz.2.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 108.557902][ T333] usb 2-1: device descriptor read/8, error -71 [ 108.797462][ T333] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 108.818464][ T333] usb 2-1: device descriptor read/8, error -71 [ 108.948589][ T333] usb 2-1: device descriptor read/8, error -71 [ 109.057548][ T333] usb usb2-port1: unable to enumerate USB device [ 109.207207][ T3916] fuse: Unknown parameter '00000000000000000000003' [ 109.412651][ T333] usb 4-1: USB disconnect, device number 44 [ 109.432401][ T3918] netlink: 16 bytes leftover after parsing attributes in process `syz.3.985'. [ 109.582733][ T3921] binder: Unknown parameter 'seclabelM' [ 109.599056][ T3923] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 4294967293 [ 109.607071][ T3923] rust_binder: Write failure EINVAL in pid:580 [ 109.670667][ T36] audit: type=1400 audit(109.649:15665): avc: denied { mount } for pid=3928 comm="syz.1.989" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 109.694167][ T3931] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 109.705829][ T3931] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:588 [ 109.772576][ T36] audit: type=1400 audit(109.749:15666): avc: denied { nlmsg_read } for pid=3934 comm="syz.1.992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 109.801829][ T36] audit: type=1400 audit(109.769:15667): avc: denied { read } for pid=3934 comm="syz.1.992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 109.829598][ T3940] netlink: 'syz.1.993': attribute type 4 has an invalid length. [ 109.837331][ T3940] netlink: 17 bytes leftover after parsing attributes in process `syz.1.993'. [ 110.160045][ T701] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 110.211484][ T36] audit: type=1400 audit(110.189:15668): avc: denied { name_bind } for pid=3965 comm="syz.2.1000" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 110.297386][ T701] usb 2-1: device descriptor read/64, error -71 [ 110.537180][ T701] usb 2-1: device descriptor read/64, error -71 [ 110.567145][ T9] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 110.718147][ T9] usb 4-1: config index 0 descriptor too short (expected 8230, got 38) [ 110.726464][ T9] usb 4-1: config 2 has an invalid interface number: 253 but max is 0 [ 110.734667][ T9] usb 4-1: config 2 has no interface number 0 [ 110.740783][ T9] usb 4-1: config 2 interface 253 has no altsetting 0 [ 110.748971][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=950d, bcdDevice=4e.de [ 110.758173][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.766166][ T9] usb 4-1: Product: syz [ 110.770354][ T9] usb 4-1: Manufacturer: syz [ 110.774946][ T9] usb 4-1: SerialNumber: syz [ 110.787043][ T701] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 110.862915][ T333] usb 5-1: USB disconnect, device number 11 [ 110.917028][ T701] usb 2-1: device descriptor read/64, error -71 [ 110.994109][ T9] usb 4-1: USB disconnect, device number 45 [ 111.156888][ T701] usb 2-1: device descriptor read/64, error -71 [ 111.266880][ T701] usb usb2-port1: attempt power cycle [ 111.606652][ T701] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 111.620065][ T36] audit: type=1400 audit(111.600:15669): avc: denied { watch_reads } for pid=3996 comm="syz.2.1011" path="/382" dev="tmpfs" ino=2065 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 111.642875][ T701] usb 2-1: device descriptor read/8, error -71 [ 111.719897][ T4008] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=4008 comm=syz.3.1015 [ 111.734103][ T4008] kernel profiling enabled (shift: 7) [ 111.769793][ T36] audit: type=1400 audit(111.750:15670): avc: denied { watch } for pid=4010 comm="syz.3.1016" path="/219/file0" dev="tmpfs" ino=1204 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 111.781200][ T701] usb 2-1: device descriptor read/8, error -71 [ 111.797447][ T4012] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1014'. [ 111.860780][ T4014] /dev/rnullb0: Can't open blockdev [ 111.882017][ T4019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1018'. [ 111.966501][ T4029] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.036626][ T701] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 112.067416][ T701] usb 2-1: device descriptor read/8, error -71 [ 112.197366][ T701] usb 2-1: device descriptor read/8, error -71 [ 112.216365][ T31] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 112.306454][ T701] usb usb2-port1: unable to enumerate USB device [ 112.367364][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 112.378353][ T31] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 112.387426][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.396065][ T31] usb 4-1: config 0 descriptor?? [ 112.401491][ T4032] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 112.812188][ T31] hid-generic 0003:04F3:0755.0012: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 112.842528][ T4040] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 112.842550][ T4040] rust_binder: Read failure Err(EFAULT) in pid:599 [ 112.844985][ T4039] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 112.857203][ T4039] rust_binder: Read failure Err(EFAULT) in pid:599 [ 112.996047][ T36] audit: type=1400 audit(112.980:15671): avc: denied { mount } for pid=4044 comm="syz.1.1027" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 113.025281][ T333] usb 4-1: USB disconnect, device number 46 [ 113.127859][ T4054] overlayfs: failed to clone lowerpath [ 113.159633][ T4058] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 113.159658][ T4058] rust_binder: Read failure Err(EFAULT) in pid:609 [ 113.190960][ T36] audit: type=1400 audit(369.163:15672): avc: denied { accept } for pid=4061 comm="syz.1.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 113.196164][ T4062] erspan0: entered allmulticast mode [ 113.222248][ T4062] erspan0: entered promiscuous mode [ 113.228166][ T4061] erspan0: left promiscuous mode [ 113.233189][ T4061] erspan0: left allmulticast mode [ 113.261110][ T36] audit: type=1400 audit(369.233:15673): avc: denied { execute } for pid=4066 comm="syz.1.1035" path="/selinux/load" dev="selinuxfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 113.396069][ T4074] rust_binder: Write failure EFAULT in pid:624 [ 113.396922][ T4074] rust_binder: Write failure EFAULT in pid:624 [ 113.407774][ T4076] rust_binder: Write failure EFAULT in pid:624 [ 113.481993][ T4080] /dev/rnullb0: Can't open blockdev [ 113.514313][ T4086] netlink: 'syz.1.1041': attribute type 4 has an invalid length. [ 113.522132][ T4086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1041'. [ 113.531251][ T4087] netlink: 'syz.1.1041': attribute type 4 has an invalid length. [ 113.539277][ T4087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1041'. [ 113.795867][ T333] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 113.865862][ T653] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 113.945832][ T333] usb 4-1: Using ep0 maxpacket: 16 [ 113.952011][ T333] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.962117][ T333] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 113.972351][ T333] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 113.981431][ T333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.989483][ T333] usb 4-1: Product: syz [ 113.993665][ T333] usb 4-1: Manufacturer: syz [ 114.004609][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 114.004625][ T36] audit: type=1326 audit(369.983:15677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3985 comm="syz.4.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc078f6c9 code=0x7fc00000 [ 114.033633][ T333] usb 4-1: SerialNumber: syz [ 114.035833][ T653] usb 2-1: Using ep0 maxpacket: 32 [ 114.054168][ T4101] devtmpfs: Unknown parameter 'fuse' [ 114.060040][ T653] usb 2-1: config 0 interface 0 has no altsetting 0 [ 114.069706][ T653] usb 2-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 114.081687][ T653] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.090810][ T4101] devtmpfs: Unknown parameter 'fuse' [ 114.102265][ T653] usb 2-1: config 0 descriptor?? [ 114.107792][ T4103] netlink: 'syz.2.1048': attribute type 27 has an invalid length. [ 114.118285][ T4103] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 114.247054][ T333] usb 4-1: 0:2 : does not exist [ 114.254344][ T333] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 114.277174][ T333] usb 4-1: USB disconnect, device number 47 [ 114.294950][ T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 114.295290][ T4128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1054'. [ 114.337198][ T4127] mmap: syz.4.1054 (4127): VmData 29339648 exceed data ulimit 68. Update limits or use boot option ignore_rlimit_data. [ 114.361940][ T4138] rust_binder: Write failure EINVAL in pid:104 [ 114.532876][ T653] lenovo 0003:17EF:6009.0013: unknown main item tag 0x0 [ 114.533278][ T4144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.545932][ T653] lenovo 0003:17EF:6009.0013: unknown main item tag 0x0 [ 114.547315][ T4144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.555121][ T653] lenovo 0003:17EF:6009.0013: unknown main item tag 0x0 [ 114.563688][ T4144] 9pnet_fd: Insufficient options for proto=fd [ 114.583236][ T653] lenovo 0003:17EF:6009.0013: unknown main item tag 0x0 [ 114.591474][ T653] lenovo 0003:17EF:6009.0013: unknown main item tag 0x0 [ 114.606027][ T653] lenovo 0003:17EF:6009.0013: hidraw0: USB HID v4.06 Device [HID 17ef:6009] on usb-dummy_hcd.1-1/input0 [ 114.733395][ T333] usb 2-1: USB disconnect, device number 47 [ 115.265938][ T4170] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 115.265970][ T4170] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:643 [ 115.345881][ T31] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 115.507052][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.517414][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 115.528477][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 115.539348][ T31] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 115.553842][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.563003][ T653] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 115.570611][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.578704][ T31] usb 4-1: Product: syz [ 115.582915][ T31] usb 4-1: Manufacturer: syz [ 115.585883][ T333] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 115.587631][ T31] usb 4-1: SerialNumber: syz [ 115.601338][ T4166] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 115.725872][ T653] usb 2-1: device descriptor read/64, error -71 [ 115.737239][ T333] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 115.745415][ T333] usb 5-1: config 0 has no interface number 0 [ 115.751629][ T333] usb 5-1: config 0 interface 41 has no altsetting 0 [ 115.759894][ T333] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 115.769199][ T333] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.777240][ T333] usb 5-1: Product: syz [ 115.781430][ T333] usb 5-1: Manufacturer: syz [ 115.786095][ T333] usb 5-1: SerialNumber: syz [ 115.791444][ T333] usb 5-1: config 0 descriptor?? [ 115.965866][ T653] usb 2-1: device descriptor read/64, error -71 [ 116.205887][ T653] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 116.335838][ T653] usb 2-1: device descriptor read/64, error -71 [ 116.575890][ T653] usb 2-1: device descriptor read/64, error -71 [ 116.614238][ T31] cdc_ncm 4-1:1.0: bind() failure [ 116.620470][ T31] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 116.627425][ T31] cdc_ncm 4-1:1.1: bind() failure [ 116.685941][ T653] usb usb2-port1: attempt power cycle [ 116.826245][ T333] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 116.836942][ T333] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 116.846404][ T333] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 116.855854][ T333] usb 5-1: USB disconnect, device number 12 [ 116.924548][ T4166] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 116.924636][ T4166] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 116.931420][ T4166] rust_binder: validate_parent_fixup: new_min_offset=60, sg_entry.length=0 [ 116.937881][ T4166] rust_binder: Error while translating object. [ 116.946518][ T4166] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 116.952693][ T4166] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:704 [ 116.962802][ T9] usb 4-1: USB disconnect, device number 48 [ 117.025875][ T653] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 117.046810][ T653] usb 2-1: device descriptor read/8, error -71 [ 117.176841][ T653] usb 2-1: device descriptor read/8, error -71 [ 117.415911][ T653] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 117.436976][ T653] usb 2-1: device descriptor read/8, error -71 [ 117.505006][ T36] audit: type=1400 audit(373.473:15678): avc: denied { ioctl } for pid=4218 comm="syz.3.1081" path="socket:[21089]" dev="sockfs" ino=21089 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 117.529978][ T36] audit: type=1400 audit(373.473:15679): avc: denied { accept } for pid=4218 comm="syz.3.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 117.576983][ T653] usb 2-1: device descriptor read/8, error -71 [ 117.685991][ T653] usb usb2-port1: unable to enumerate USB device [ 118.286792][ T4249] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1091'. [ 118.296829][ T4249] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1091'. [ 118.383204][ T4262] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 118.383642][ T4262] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 118.392073][ T4263] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 118.395887][ T4262] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 118.404281][ T4263] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 118.411005][ T4262] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:713 [ 118.421037][ T4263] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:713 [ 118.437309][ T4265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1098'. [ 118.442147][ T36] audit: type=1400 audit(374.413:15680): avc: denied { nlmsg_write } for pid=4266 comm="syz.1.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 118.516468][ T36] audit: type=1400 audit(374.493:15681): avc: denied { create } for pid=4272 comm="syz.3.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 118.554254][ T4283] netlink: 'syz.3.1105': attribute type 27 has an invalid length. [ 118.698632][ T4292] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 118.761323][ T4295] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 118.915894][ T556] Bluetooth: hci1: command 0x1003 tx timeout [ 118.925862][ T572] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 119.045963][ T653] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 119.120187][ T4300] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 119.120210][ T4300] rust_binder: Read failure Err(EFAULT) in pid:656 [ 119.129023][ T4299] Invalid logical block size (14) [ 119.197608][ T653] usb 4-1: not running at top speed; connect to a high speed hub [ 119.206695][ T653] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.217029][ T653] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 119.227709][ T653] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 119.236821][ T653] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.244915][ T653] usb 4-1: Product: 㳎⛏酅烽䆠艓ᵢឰ똡㐽꾔吽笶霍֭♕䦀哞赌朗訖᫺蝻ؾ䧣Ꮉ삿ﲱ䣬樀箁遪䂳晄쨜ྂ犦⊔줋싁厫৺貗돒箕̷鉕ᜋ䟔㣧꣈뜡ッ薞ᨂ哫帐񀾓Ᾰ㳸뾹㫊놦튻奊ߒ颂骑ᘠ瘈柜영놞Π癷斳㏭씝谝濢䆚 [ 119.273075][ T653] usb 4-1: Manufacturer: 柺⋍폨獊雅⦼畂㢑皒䵇㕂쐭竏皁ᔳ籘彨᪠ힵꔙ꫗픍㭉￧罥ᓤ琭悠ㄝ掫⟦렰䃍춤鮊ꖰХꈤﬞᢔሸᄊ䙏 [ 119.289166][ T653] usb 4-1: SerialNumber: 㚄ﺞ볚宨暊◜㴛ꑵᴇ귯ጒ蕉敧艀✸鰮ﴻﯨꔚ娖ꁠ೪醕胔롕闹饭뱁ኮ慠霑梻賕瓶悍ୣ룖⺳닮䣱풏瓸ナᮗ⼿恺㉚螦叇廻猹꒮葯ᇹᡫ酩設㜍὘䣅В詾褲䪛癣뉸酫 [ 119.372524][ T330] Bluetooth: hci1: Frame reassembly failed (-84) [ 119.459547][ T4315] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1117'. [ 119.468826][ T4315] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1117'. [ 119.478562][ T36] audit: type=1326 audit(375.453:15682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4314 comm="syz.4.1117" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbcc078f6c9 code=0x0 [ 119.658222][ T4318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1118'. [ 119.667894][ T36] audit: type=1400 audit(375.643:15683): avc: denied { map } for pid=4317 comm="syz.2.1118" path="socket:[22015]" dev="sockfs" ino=22015 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 120.499754][ T330] Bluetooth: hci2: Frame reassembly failed (-84) [ 121.395882][ T4350] Bluetooth: hci1: command 0x1003 tx timeout [ 121.395882][ T572] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 121.665862][ T9] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 121.728133][ T653] usb 4-1: 0:2 : does not exist [ 121.738490][ T653] usb 4-1: USB disconnect, device number 49 [ 121.738889][ T4362] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 121.751594][ T4362] rust_binder: 733: no such ref 3 [ 121.816965][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.826786][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 121.839682][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 121.850704][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 121.860475][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 121.873398][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=005c, bcdDevice= 0.00 [ 121.881778][ T36] audit: type=1400 audit(377.853:15684): avc: denied { link } for pid=4370 comm="syz.3.1138" name="file1" dev="tmpfs" ino=1343 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 121.882700][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.905080][ T4371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 121.913262][ T4371] rust_binder: 737: no such ref 0 [ 121.914397][ T9] usb 2-1: config 0 descriptor?? [ 121.924105][ T4371] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 121.936829][ T4371] rust_binder: 737: no such ref 2 [ 121.942036][ T4371] rust_binder: Error while translating object. [ 121.942073][ T4371] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 121.948331][ T4371] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:737 [ 122.335074][ T9] hid-generic 0003:046D:005C.0014: hidraw0: USB HID v0.00 Device [HID 046d:005c] on usb-dummy_hcd.1-1/input0 [ 122.417237][ T4386] overlayfs: failed to resolve './file2': -2 [ 122.515949][ T572] Bluetooth: hci2: command 0x1003 tx timeout [ 122.515990][ T556] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 122.553416][ T9] usb 2-1: USB disconnect, device number 52 [ 122.879350][ T4389] rust_binder: 742: no such ref 2 [ 123.024655][ T4406] tipc: Started in network mode [ 123.029596][ T4406] tipc: Node identity 4, cluster identity 4711 [ 123.035826][ T4406] tipc: Node number set to 4 [ 123.111804][ T4427] binder: Unknown parameter 'permit_directio' [ 123.136329][ T4432] fuse: Bad value for 'fd' [ 123.142321][ T4432] overlayfs: failed to clone upperpath [ 123.173688][ T653] hid-generic 00C8:000F:0004.0015: unexpected long global item [ 123.182008][ T4436] input: syz0 as /devices/virtual/input/input24 [ 123.189038][ T653] hid-generic 00C8:000F:0004.0015: probe with driver hid-generic failed with error -22 [ 123.322559][ T4455] rust_binder: Write failure EFAULT in pid:159 [ 123.665866][ T333] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 123.802536][ T4467] 9pnet_fd: Insufficient options for proto=fd [ 123.809243][ T4467] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.825877][ T333] usb 2-1: Using ep0 maxpacket: 16 [ 123.838607][ T333] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.848909][ T333] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 123.859244][ T333] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 123.868339][ T333] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.876340][ T333] usb 2-1: Product: syz [ 123.880513][ T333] usb 2-1: Manufacturer: syz [ 123.885120][ T333] usb 2-1: SerialNumber: syz [ 124.092022][ T4465] /dev/rnullb0: Can't open blockdev [ 124.099737][ T333] usb 2-1: 0:2 : does not exist [ 124.106899][ T333] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 124.116800][ T333] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 124.126647][ T333] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 124.136408][ T333] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 124.147112][ T333] usb 2-1: USB disconnect, device number 53 [ 124.181037][ T4472] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:163 [ 124.245049][ T4478] rust_binder: Write failure EFAULT in pid:169 [ 124.275953][ T9] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 124.437008][ T9] usb 4-1: config index 0 descriptor too short (expected 10500, got 36) [ 124.445492][ T9] usb 4-1: config 111 has too many interfaces: 238, using maximum allowed: 32 [ 124.454436][ T9] usb 4-1: config 111 has an invalid descriptor of length 244, skipping remainder of the config [ 124.465139][ T9] usb 4-1: config 111 has 0 interfaces, different from the descriptor's value: 238 [ 124.474626][ T9] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 124.483789][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.752589][ T4501] input: syz0 as /devices/virtual/input/input25 [ 124.858789][ T4521] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 124.897074][ T9] usb 4-1: string descriptor 0 read error: -71 [ 124.912490][ T9] usb 4-1: USB disconnect, device number 50 [ 124.956910][ T4530] rust_binder: Write failure EFAULT in pid:726 [ 125.072653][ T4532] /dev/loop0: Can't lookup blockdev [ 125.089610][ T4532] x_tables: duplicate entry at hook 2 [ 125.116483][ T4532] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 125.150751][ T36] audit: type=1400 audit(381.123:15685): avc: denied { create } for pid=4536 comm="syz.1.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 125.154606][ T4537] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.189745][ T4539] ./cgroup: Can't lookup blockdev [ 125.262593][ T4541] kvm: kvm [4540]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0xc1) = 0x5 [ 125.271053][ T4541] kvm: kvm [4540]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0xc2) = 0x5 [ 125.281645][ T4541] kvm: kvm [4540]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x11e) = 0x5 [ 125.292355][ T4541] kvm: kvm [4540]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x186) = 0x5 [ 125.300856][ T4541] kvm: kvm [4540]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x187) = 0x5 [ 125.309645][ T4543] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.311240][ T4541] kvm_intel: kvm [4540]: vcpu2, guest rIP: 0x9136 Unhandled WRMSR(0x1d9) = 0x5 [ 125.362350][ T4541] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 125.509919][ T36] audit: type=1400 audit(381.483:15686): avc: denied { setattr } for pid=4560 comm="syz.4.1201" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 125.543631][ T4564] cgroup: Unknown subsys name 'perf_event' [ 125.597869][ T4568] kvm: emulating exchange as write [ 125.919419][ T36] audit: type=1400 audit(381.893:15687): avc: denied { write } for pid=4583 comm="syz.1.1210" path="socket:[23154]" dev="sockfs" ino=23154 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 125.945905][ T9] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 126.106920][ T9] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 126.118193][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 126.130174][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 126.140855][ T4599] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 126.144108][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 126.160062][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 126.169179][ T9] usb 5-1: SerialNumber: syz [ 126.176639][ T9] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 126.378351][ T4577] EXT4-fs: Conflicting test_dummy_encryption options [ 126.427009][ T334] usb 5-1: USB disconnect, device number 13 [ 126.495877][ T9] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 126.534675][ T4606] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 126.535033][ T4606] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 126.541527][ T4606] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 126.549655][ T4606] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:781 [ 126.646942][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 126.665778][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 126.675461][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 126.689900][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 126.694924][ T4613] x_tables: unsorted underflow at hook 2 [ 126.699021][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 126.712789][ T9] usb 2-1: Product: syz [ 126.717003][ T9] usb 2-1: Manufacturer: syz [ 126.721649][ T9] usb 2-1: SerialNumber: syz [ 126.805881][ T31] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 126.931962][ T9] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 54 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 126.935890][ T31] usb 4-1: device descriptor read/64, error -71 [ 127.019198][ T4635] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 127.019231][ T4635] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 127.027475][ T4635] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:205 [ 127.128467][ T4644] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 127.137888][ T4644] rust_binder: Error while translating object. [ 127.144356][ T4644] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 127.150589][ T4644] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:211 [ 127.185890][ T31] usb 4-1: device descriptor read/64, error -71 [ 127.257256][ T701] usb 2-1: USB disconnect, device number 54 [ 127.265735][ T701] usblp0: removed [ 127.345785][ T36] audit: type=1400 audit(383.313:15688): avc: denied { create } for pid=4661 comm="syz.4.1236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 127.435950][ T31] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 127.443696][ T13] Bluetooth: hci1: Frame reassembly failed (-84) [ 127.575846][ T31] usb 4-1: device descriptor read/64, error -71 [ 127.816098][ T31] usb 4-1: device descriptor read/64, error -71 [ 127.903387][ T36] audit: type=1400 audit(383.873:15689): avc: denied { accept } for pid=4694 comm="syz.2.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 127.926091][ T31] usb usb4-port1: attempt power cycle [ 127.987060][ T4699] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1250'. [ 128.105972][ T334] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 128.145975][ T36] audit: type=1400 audit(384.123:15690): avc: denied { sys_module } for pid=4711 comm="syz.4.1255" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 128.258343][ T334] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 128.265875][ T31] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 128.267442][ T334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.283003][ T334] usb 2-1: Product: syz [ 128.286911][ T31] usb 4-1: device descriptor read/8, error -71 [ 128.287182][ T334] usb 2-1: Manufacturer: syz [ 128.297946][ T334] usb 2-1: SerialNumber: syz [ 128.395875][ T701] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 128.416798][ T31] usb 4-1: device descriptor read/8, error -71 [ 128.546852][ T701] usb 5-1: config 1 has an invalid interface number: 253 but max is 1 [ 128.555059][ T701] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.565177][ T701] usb 5-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 128.574150][ T701] usb 5-1: config 1 has no interface number 2 [ 128.580277][ T701] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.591164][ T701] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 128.600995][ T701] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 128.610855][ T701] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 128.623820][ T701] usb 5-1: config 1 interface 1 has no altsetting 0 [ 128.632044][ T701] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 128.641171][ T701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.649193][ T701] usb 5-1: Product: syz [ 128.653381][ T701] usb 5-1: Manufacturer: syz [ 128.658022][ T701] usb 5-1: SerialNumber: syz [ 128.664626][ T701] cdc_ncm 5-1:1.253: CDC Union missing and no IAD found [ 128.671775][ T31] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 128.679433][ T701] cdc_ncm 5-1:1.253: bind() failure [ 128.696810][ T31] usb 4-1: device descriptor read/8, error -71 [ 128.826921][ T31] usb 4-1: device descriptor read/8, error -71 [ 128.935930][ T31] usb usb4-port1: unable to enumerate USB device [ 129.077853][ T334] usb 5-1: USB disconnect, device number 14 [ 129.210549][ T4718] veth0: entered promiscuous mode [ 129.215712][ T4718] veth0: left promiscuous mode [ 129.475900][ T556] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 129.476116][ T572] Bluetooth: hci1: command 0x1003 tx timeout [ 129.585863][ T4721] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.586387][ T4721] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.593211][ T4721] rust_binder: Failed to allocate buffer. len:1136, is_oneway:false [ 129.599683][ T4721] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 129.607715][ T4721] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:785 [ 129.655478][ T4729] netlink: 'syz.4.1261': attribute type 8 has an invalid length. [ 129.702653][ T4734] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.768042][ T4736] kvm: kvm [4735]: vcpu0, guest rIP: 0x9121 Unhandled WRMSR(0xc1) = 0x60000003 [ 129.783733][ T4736] kvm: kvm [4735]: vcpu0, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x60000307 [ 129.798961][ T4736] kvm: kvm [4735]: vcpu0, guest rIP: 0x9121 Unhandled WRMSR(0xc1) = 0x1000005d8 [ 129.808169][ T4736] kvm: kvm [4735]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0xc1) = 0x100 [ 129.816816][ T4736] kvm: kvm [4735]: vcpu0, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x104 [ 129.996589][ T4749] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.999793][ T9] hid (null): unknown global tag 0xd [ 130.011652][ T9] hid (null): invalid report_count 1229697475 [ 130.019830][ T9] hid-generic 7FFF:0101:000B.0016: unknown main item tag 0xd [ 130.027296][ T9] hid-generic 7FFF:0101:000B.0016: unknown main item tag 0x6 [ 130.034674][ T9] hid-generic 7FFF:0101:000B.0016: unknown global tag 0xd [ 130.041812][ T9] hid-generic 7FFF:0101:000B.0016: item 0 2 1 13 parsing failed [ 130.049630][ T9] hid-generic 7FFF:0101:000B.0016: probe with driver hid-generic failed with error -22 [ 130.235860][ T701] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 130.274518][ T36] audit: type=1400 audit(386.243:15691): avc: denied { accept } for pid=4754 comm="syz.2.1271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 130.387542][ T701] usb 5-1: config 1 interface 0 has no altsetting 0 [ 130.395556][ T701] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.40 [ 130.404758][ T701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.412794][ T701] usb 5-1: Product: Ⰺ [ 130.416972][ T701] usb 5-1: Manufacturer: Т [ 130.421491][ T701] usb 5-1: SerialNumber: Г [ 130.632840][ T701] usbhid 5-1:1.0: can't add hid device: -71 [ 130.639178][ T701] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 130.648052][ T701] usb 5-1: USB disconnect, device number 15 [ 130.881194][ T701] usb 2-1: USB disconnect, device number 55 [ 130.978791][ T4761] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:767 [ 131.094325][ T4765] rust_binder: 770: no such ref 3 [ 131.109103][ T4765] rust_binder: 770: no such ref 1 [ 131.114160][ T4765] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:770 [ 131.355899][ T31] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 131.515855][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 131.522202][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.533148][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.542914][ T31] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 131.551967][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.561068][ T31] usb 2-1: config 0 descriptor?? [ 131.795846][ T556] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 131.795855][ T572] Bluetooth: hci1: command 0x1003 tx timeout [ 131.976006][ T31] kone 0003:1E7D:2CED.0017: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.1-1/input0 [ 132.017772][ T4826] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 132.018140][ T4826] rust_binder: 265: no such ref 0 [ 132.030363][ T4826] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 132.038796][ T4826] rust_binder: 265: no such ref 2 [ 132.044050][ T4826] rust_binder: Error while translating object. [ 132.044107][ T4826] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 132.050527][ T4826] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:265 [ 132.055490][ T36] audit: type=1400 audit(388.023:15692): avc: denied { accept } for pid=4832 comm="syz.2.1288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 132.144393][ T4846] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 132.144417][ T4846] rust_binder: Read failure Err(EFAULT) in pid:267 [ 132.169571][ T4848] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 132.176699][ T4848] SELinux: Context system_u:object_r:boot_t:s0 is not valid (left unmapped). [ 132.192427][ T36] audit: type=1400 audit(388.163:15693): avc: denied { relabelto } for pid=4847 comm="syz.4.1293" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 132.218707][ T36] audit: type=1400 audit(388.163:15694): avc: denied { associate } for pid=4847 comm="syz.4.1293" name="rnullb0" dev="devtmpfs" ino=31 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:boot_t:s0" [ 132.245618][ T36] audit: type=1400 audit(388.193:15695): avc: denied { read write } for pid=4847 comm="syz.4.1293" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 132.272109][ T36] audit: type=1400 audit(388.193:15696): avc: denied { open } for pid=4847 comm="syz.4.1293" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 132.300920][ T36] audit: type=1400 audit(388.193:15697): avc: denied { map } for pid=4847 comm="syz.4.1293" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 132.327251][ T36] audit: type=1400 audit(388.193:15698): avc: denied { execute } for pid=4847 comm="syz.4.1293" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 132.355119][ T36] audit: type=1400 audit(388.253:15699): avc: denied { mounton } for pid=4847 comm="syz.4.1293" path="/syzcgroup/cpu/syz4/cgroup.procs" dev="cgroup" ino=369 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 132.396634][ T4858] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1296'. [ 132.406067][ T4858] netlink: 35 bytes leftover after parsing attributes in process `syz.4.1296'. [ 132.415054][ T4858] netlink: 'syz.4.1296': attribute type 6 has an invalid length. [ 132.422860][ T4858] netlink: 'syz.4.1296': attribute type 5 has an invalid length. [ 132.430804][ T4858] netlink: 35 bytes leftover after parsing attributes in process `syz.4.1296'. [ 132.442933][ T4858] __vm_enough_memory: pid: 4858, comm: syz.4.1296, bytes: 2203318222848 not enough memory for the allocation [ 132.470610][ T4860] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:273 [ 132.975699][ T4864] netlink: 'syz.2.1299': attribute type 27 has an invalid length. [ 133.022033][ T4869] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 133.022110][ T4868] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 133.028800][ T4868] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 133.086514][ T4869] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:279 [ 133.869093][ T36] audit: type=1400 audit(389.843:15700): avc: denied { execute } for pid=4921 comm="syz.4.1318" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=25622 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 133.955602][ T4928] overlayfs: failed to clone upperpath [ 133.973271][ T4930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1322'. [ 134.050611][ T31] kone 0003:1E7D:2CED.0017: couldn't init struct kone_device [ 134.058365][ T31] kone 0003:1E7D:2CED.0017: couldn't install mouse [ 134.065630][ T31] kone 0003:1E7D:2CED.0017: probe with driver kone failed with error -5 [ 134.075089][ T31] usb 2-1: USB disconnect, device number 56 [ 134.105889][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 134.115466][ T4942] __vm_enough_memory: pid: 4942, comm: syz.1.1327, bytes: 18014402804453376 not enough memory for the allocation [ 134.286975][ T9] usb 5-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 134.296168][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.305909][ T9] usb 5-1: config 0 descriptor?? [ 134.512351][ T4947] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 134.563225][ T4948] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 134.715102][ T9] ortek 0003:05A4:2000.0018: unknown main item tag 0x0 [ 134.730077][ T9] ortek 0003:05A4:2000.0018: unknown main item tag 0x0 [ 134.737086][ T9] ortek 0003:05A4:2000.0018: unknown main item tag 0x0 [ 134.744083][ T9] ortek 0003:05A4:2000.0018: unknown main item tag 0x0 [ 134.754366][ T9] ortek 0003:05A4:2000.0018: hidraw0: USB HID vff.fb Device [HID 05a4:2000] on usb-dummy_hcd.4-1/input0 [ 134.915251][ T9] usb 5-1: USB disconnect, device number 16 [ 135.362645][ T4966] fuse: Unknown parameter 'groupid' [ 135.428935][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 135.428954][ T36] audit: type=1400 audit(391.403:15702): avc: denied { remove_name } for pid=4975 comm="syz.4.1339" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 135.457974][ T36] audit: type=1400 audit(391.403:15703): avc: denied { unlink } for pid=4975 comm="syz.4.1339" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 135.544337][ T4973] input: syz1 as /devices/virtual/input/input26 [ 135.552831][ T4973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.562233][ T4973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.625859][ T45] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 135.735846][ T701] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 135.886938][ T701] usb 5-1: config 1 has an invalid descriptor of length 220, skipping remainder of the config [ 135.897285][ T701] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 135.906855][ T701] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 135.915938][ T701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 135.923922][ T701] usb 5-1: SerialNumber: syz [ 136.069296][ T4988] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 136.116771][ T4991] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 136.117227][ T4991] rust_binder: 811: no such ref 2 [ 136.131980][ T4994] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 136.208652][ T701] usb 5-1: invalid UAC_HEADER (v1) [ 136.220326][ T701] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 136.238065][ T701] usb 5-1: USB disconnect, device number 17 [ 136.241362][ T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 136.415877][ T31] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 136.568278][ T31] usb 4-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 136.577457][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.585443][ T31] usb 4-1: Product: syz [ 136.589776][ T31] usb 4-1: Manufacturer: syz [ 136.594386][ T31] usb 4-1: SerialNumber: syz [ 136.600087][ T31] usb 4-1: config 0 descriptor?? [ 136.665864][ T45] usb 2-1: device descriptor read/64, error -71 [ 136.725682][ T5012] binder: Bad value for 'stats' [ 136.915834][ T45] usb 2-1: device descriptor read/64, error -71 [ 136.965846][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 137.116927][ T9] usb 5-1: config 0 has no interfaces? [ 137.123931][ T9] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 137.133171][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.141233][ T9] usb 5-1: Product: syz [ 137.145409][ T9] usb 5-1: Manufacturer: syz [ 137.150043][ T9] usb 5-1: SerialNumber: syz [ 137.156003][ T45] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 137.164223][ T9] r8152-cfgselector 5-1: Unknown version 0x0000 [ 137.170558][ T9] r8152-cfgselector 5-1: config 0 descriptor?? [ 137.186783][ T5014] fuse: Bad value for 'group_id' [ 137.191765][ T5014] fuse: Bad value for 'group_id' [ 137.295849][ T45] usb 2-1: device descriptor read/64, error -71 [ 137.404766][ T5012] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 137.409031][ T36] audit: type=1400 audit(393.383:15704): avc: denied { setopt } for pid=4996 comm="syz.3.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 137.535843][ T45] usb 2-1: device descriptor read/64, error -71 [ 137.608370][ T36] audit: type=1400 audit(393.583:15705): avc: denied { load_policy } for pid=4996 comm="syz.3.1347" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 137.608460][ T4997] SELinux: failed to load policy [ 137.638137][ T31] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 137.648327][ T45] usb usb2-port1: attempt power cycle [ 137.653810][ T31] asix 4-1:0.0: probe with driver asix failed with error -71 [ 137.662303][ T31] usb 4-1: USB disconnect, device number 55 [ 137.995854][ T45] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 138.016815][ T45] usb 2-1: device descriptor read/8, error -71 [ 138.034520][ T31] r8152-cfgselector 5-1: USB disconnect, device number 18 [ 138.105110][ T5045] input: syz0 as /devices/virtual/input/input27 [ 138.153960][ T45] usb 2-1: device descriptor read/8, error -71 [ 138.165098][ T5051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5051 comm=syz.3.1365 [ 138.255011][ T5067] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 138.283078][ T5070] SELinux: failed to load policy [ 138.288700][ T5070] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1371'. [ 138.323266][ T5077] /dev/rnullb0: Can't open blockdev [ 138.396034][ T45] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 138.426969][ T45] usb 2-1: device descriptor read/8, error -71 [ 138.475850][ T31] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 138.510905][ T5095] fuseblk: Unknown parameter 'bl`~0+0000000L00000400' [ 138.556935][ T45] usb 2-1: device descriptor read/8, error -71 [ 138.625921][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 138.632155][ T31] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 138.640546][ T31] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 138.649385][ T31] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 138.658375][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 138.668214][ T45] usb usb2-port1: unable to enumerate USB device [ 138.674585][ T31] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 138.684641][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 138.697678][ T31] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 138.706753][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.716221][ T31] usb 5-1: config 0 descriptor?? [ 138.775938][ T701] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 138.921925][ T5059] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1369'. [ 138.925895][ T701] usb 4-1: Using ep0 maxpacket: 16 [ 138.932420][ T5060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.938063][ T701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.944770][ T5060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.955501][ T701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.974931][ T701] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 138.985432][ T31] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 138.997907][ T31] usb 5-1: USB disconnect, device number 19 [ 139.004167][ T701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.013132][ T31] usblp0: removed [ 139.018576][ T701] usb 4-1: config 0 descriptor?? [ 139.136328][ T5122] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1386'. [ 139.159925][ T5127] fuse: Unknown parameter 'rootmodo' [ 139.183110][ T5129] netlink: 'syz.2.1389': attribute type 27 has an invalid length. [ 139.226944][ T701] playstation 0003:054C:05C4.0019: unbalanced collection at end of report description [ 139.245083][ T701] playstation 0003:054C:05C4.0019: Parse failed [ 139.259273][ T701] playstation 0003:054C:05C4.0019: probe with driver playstation failed with error -22 [ 139.274547][ T701] usb 4-1: USB disconnect, device number 56 [ 139.313457][ T5151] binder: Bad value for 'max' [ 139.439149][ T36] audit: type=1400 audit(395.413:15706): avc: denied { relabelfrom } for pid=5181 comm="syz.2.1408" name="" dev="pipefs" ino=26429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 139.461381][ T36] audit: type=1401 audit(395.413:15707): op=setxattr invalid_context="" [ 139.495999][ T13] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 139.504633][ T13] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 139.521402][ T5149] SELinux: security_context_str_to_sid () failed with errno=-22 [ 139.529249][ T9] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 139.572713][ T5189] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.585193][ T5193] binder: Unknown parameter ')BPq' [ 139.606385][ T5197] SELinux: security_context_str_to_sid () failed with errno=-22 [ 139.650253][ T5204] 9pnet_fd: Insufficient options for proto=fd [ 139.743789][ T5211] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 139.752201][ T5212] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 139.760296][ T5211] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 140.045860][ T45] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 140.196172][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 140.202471][ T45] usb 4-1: config 0 has no interfaces? [ 140.209528][ T45] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 140.218674][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.226737][ T45] usb 4-1: Product: syz [ 140.231007][ T45] usb 4-1: Manufacturer: syz [ 140.235626][ T45] usb 4-1: SerialNumber: syz [ 140.241199][ T45] usb 4-1: config 0 descriptor?? [ 140.355942][ T9] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 140.516011][ T334] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 140.591958][ T36] audit: type=1326 audit(396.563:15708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.2.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ce98f6c9 code=0x7ffc0000 [ 140.614912][ T36] audit: type=1326 audit(396.563:15710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.2.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ce98f6c9 code=0x7ffc0000 [ 140.638657][ T36] audit: type=1326 audit(396.563:15709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.2.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ce98f6c9 code=0x7ffc0000 [ 140.661843][ T36] audit: type=1326 audit(396.563:15711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.2.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ce98f6c9 code=0x7ffc0000 [ 140.686867][ T36] audit: type=1326 audit(396.573:15712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.2.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f68ce98f6c9 code=0x7ffc0000 [ 140.692454][ T5242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.710221][ T36] audit: type=1326 audit(396.573:15713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.2.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ce98f6c9 code=0x7ffc0000 [ 140.720775][ T5242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.741640][ T36] audit: type=1326 audit(396.573:15714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.2.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f68ce98f6c9 code=0x7ffc0000 [ 140.771642][ T36] audit: type=1326 audit(396.573:15715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.2.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ce98f6c9 code=0x7ffc0000 [ 140.796394][ T36] audit: type=1326 audit(396.573:15716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.2.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f68ce98f6c9 code=0x7ffc0000 [ 140.820075][ T36] audit: type=1326 audit(396.573:15717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.2.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68ce98f6c9 code=0x7ffc0000 [ 140.904844][ T5259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1432'. [ 140.914153][ T5259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1432'. [ 140.925841][ T31] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 141.086814][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 141.097798][ T31] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 141.106856][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.116163][ T31] usb 2-1: config 0 descriptor?? [ 141.121385][ T5243] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 141.535067][ T31] hid-generic 0003:04F3:0755.001A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 141.675392][ T5278] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5278 comm=syz.2.1437 [ 141.732994][ T331] usb 2-1: USB disconnect, device number 61 [ 142.446100][ T5287] netlink: 252 bytes leftover after parsing attributes in process `syz.4.1440'. [ 142.455188][ T5287] IPv6: NLM_F_CREATE should be specified when creating new route [ 142.463791][ T5287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1440'. [ 142.515849][ T334] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 142.665840][ T334] usb 2-1: Using ep0 maxpacket: 32 [ 142.672073][ T701] usb 4-1: USB disconnect, device number 57 [ 142.672144][ T334] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 142.694437][ T334] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 142.705597][ T334] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 142.716944][ T334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 142.726650][ T334] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 142.736315][ T334] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 142.749294][ T334] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 142.759820][ T334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.769587][ T334] usb 2-1: config 0 descriptor?? [ 142.775849][ T31] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 142.903278][ T5316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.903551][ T5316] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 142.935851][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 142.943629][ T31] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 142.952725][ T31] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 142.961595][ T31] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 142.970724][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 142.980972][ T31] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 142.982477][ T334] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 62 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 142.990999][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 143.013849][ T334] usb 2-1: USB disconnect, device number 62 [ 143.017873][ T31] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 143.022182][ T334] usblp0: removed [ 143.031152][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.036761][ T5326] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 143.049835][ T31] usb 5-1: config 0 descriptor?? [ 143.065576][ T5328] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1454'. [ 143.075027][ T5328] loop7: detected capacity change from 0 to 7 [ 143.081687][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 143.090862][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 143.098864][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 143.108054][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 143.115983][ T5328] loop7: unable to read partition table [ 143.121771][ T5328] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 143.123720][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 143.144420][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 143.152518][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 143.161702][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 143.169907][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 143.179087][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 143.187320][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 143.196505][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 143.204570][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 143.213720][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 143.257892][ T31] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 143.270309][ T31] usb 5-1: USB disconnect, device number 20 [ 143.276993][ T31] usblp0: removed [ 143.385927][ T701] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 143.425881][ T334] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 143.536861][ T701] usb 4-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 143.545995][ T701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.554718][ T701] usb 4-1: config 0 descriptor?? [ 143.565913][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 143.585845][ T334] usb 2-1: Using ep0 maxpacket: 32 [ 143.592132][ T334] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 143.600534][ T334] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 143.609185][ T334] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 143.618245][ T334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 143.628135][ T334] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 143.638126][ T334] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 143.651222][ T334] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 143.660426][ T334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.670671][ T334] usb 2-1: config 0 descriptor?? [ 143.673182][ T5345] 9pnet_fd: Insufficient options for proto=fd [ 143.695839][ T331] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 143.845827][ T331] usb 5-1: Using ep0 maxpacket: 32 [ 143.852099][ T331] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 143.860782][ T331] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 143.869834][ T331] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 143.882167][ T331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 143.892026][ T334] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 63 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 143.904197][ T331] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 143.914026][ T331] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 143.927159][ T331] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 143.936348][ T331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.945297][ T331] usb 5-1: config 0 descriptor?? [ 143.967773][ T701] thrustmaster 0003:044F:B65A.001B: hidraw0: USB HID v1.01 Device [HID 044f:b65a] on usb-dummy_hcd.3-1/input0 [ 143.995833][ T701] thrustmaster 0003:044F:B65A.001B: no inputs found [ 144.155591][ T331] usblp 5-1:0.0: usblp1: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 144.167836][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 144.179353][ T333] usb 4-1: USB disconnect, device number 58 [ 144.235441][ T701] usb 2-1: USB disconnect, device number 63 [ 144.247327][ T701] usblp0: removed [ 144.317520][ T5363] netlink: 'syz.2.1467': attribute type 4 has an invalid length. [ 144.390122][ T5371] overlayfs: failed to clone lowerpath [ 144.407819][ T5373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1470'. [ 144.586360][ T5381] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.593472][ T5381] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.600602][ T5381] bridge_slave_0: entered allmulticast mode [ 144.607243][ T5381] bridge_slave_0: entered promiscuous mode [ 144.614009][ T5381] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.621282][ T5381] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.628471][ T5381] bridge_slave_1: entered allmulticast mode [ 144.634905][ T5381] bridge_slave_1: entered promiscuous mode [ 144.707364][ T5381] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.714489][ T5381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.721786][ T5381] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.728833][ T5381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.755958][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.765490][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.775935][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.782999][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.793781][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.800835][ T330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.831154][ T5381] veth0_vlan: entered promiscuous mode [ 144.844829][ T5381] veth1_macvtap: entered promiscuous mode [ 144.883513][ T5397] SELinux: security_context_str_to_sid () failed with errno=-22 [ 144.957399][ T329] tipc: Left network mode [ 144.962560][ T329] veth1_macvtap: left promiscuous mode [ 144.968111][ T329] veth0_vlan: left promiscuous mode [ 145.165913][ T331] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 145.327038][ T331] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.337208][ T331] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 145.346532][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.355037][ T331] usb 3-1: config 0 descriptor?? [ 145.561187][ T5406] netlink: 'syz.2.1477': attribute type 4 has an invalid length. [ 145.570298][ T5407] netlink: 'syz.2.1477': attribute type 4 has an invalid length. [ 145.621864][ T701] usb 5-1: USB disconnect, device number 21 [ 145.636519][ T701] usblp1: removed [ 145.666608][ T331] usb 3-1: USB disconnect, device number 19 [ 145.848937][ T5443] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 145.848960][ T5443] rust_binder: Read failure Err(EFAULT) in pid:933 [ 146.135963][ T331] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 146.204594][ T36] kauditd_printk_skb: 54 callbacks suppressed [ 146.204610][ T36] audit: type=1400 audit(402.173:15772): avc: denied { relabelfrom } for pid=5454 comm="syz.2.1491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 146.242563][ T36] audit: type=1400 audit(402.173:15773): avc: denied { relabelto } for pid=5454 comm="syz.2.1491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 146.295857][ T331] usb 4-1: Using ep0 maxpacket: 8 [ 146.302037][ T331] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 146.310186][ T331] usb 4-1: config 0 has no interface number 0 [ 146.318023][ T331] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice= 4.16 [ 146.327124][ T331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.335119][ T331] usb 4-1: Product: syz [ 146.339323][ T331] usb 4-1: Manufacturer: syz [ 146.343925][ T331] usb 4-1: SerialNumber: syz [ 146.351744][ T331] usb 4-1: config 0 descriptor?? [ 146.369624][ T5459] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.401249][ T5459] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:827 [ 146.447219][ T5468] rust_binder: inc_ref_done called when no active inc_refs [ 146.467092][ T5468] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.467269][ T5471] rust_binder: inc_ref_done called when no active inc_refs [ 146.500123][ T5473] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 146.507595][ T5473] rust_binder: Error while translating object. [ 146.516684][ T5473] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 146.517029][ T5475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.522898][ T5473] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:22 [ 146.534490][ T5475] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:832 [ 146.568958][ T5477] /dev/rnullb0: Can't open blockdev [ 146.612368][ T331] usb 4-1: USB disconnect, device number 59 [ 146.636840][ T36] audit: type=1400 audit(402.613:15774): avc: denied { audit_write } for pid=5487 comm="syz.1.1504" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 146.688534][ T5484] kvm_pr_unimpl_wrmsr: 17 callbacks suppressed [ 146.688557][ T5484] kvm: kvm [5483]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 146.703558][ T5484] kvm: kvm [5483]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 146.725135][ T5484] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 2 [ 146.732466][ T5484] rust_binder: Write failure EINVAL in pid:26 [ 146.788746][ T5500] No source specified [ 146.836681][ T701] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 146.985961][ T701] usb 5-1: Using ep0 maxpacket: 32 [ 146.992196][ T701] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 147.000599][ T701] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 147.009247][ T701] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 147.018463][ T701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 147.028183][ T701] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 147.037916][ T701] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 147.051554][ T701] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 147.060827][ T701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.070088][ T701] usb 5-1: config 0 descriptor?? [ 147.134879][ T5508] fuse: Unknown parameter 'group_Sd' [ 147.147764][ T5513] rust_binder: Write failure EFAULT in pid:38 [ 147.280456][ T701] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 147.299371][ T701] usb 5-1: USB disconnect, device number 22 [ 147.306297][ T701] usblp0: removed [ 147.435897][ T45] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 147.516013][ T5530] random: crng reseeded on system resumption [ 147.525911][ T331] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 147.539407][ T5530] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1518'. [ 147.550265][ T5530] random: crng reseeded on system resumption [ 147.585844][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 147.592127][ T45] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 147.600564][ T45] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 147.616999][ T45] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 147.625981][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 147.635620][ T45] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 147.646011][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 147.659171][ T45] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 147.668253][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.677587][ T45] usb 4-1: config 0 descriptor?? [ 147.700644][ T331] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 147.710058][ T331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.718359][ T331] usb 2-1: Product: syz [ 147.722616][ T331] usb 2-1: Manufacturer: syz [ 147.725869][ T701] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 147.727951][ T331] usb 2-1: SerialNumber: syz [ 147.885140][ T45] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 60 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 147.895949][ T701] usb 5-1: Using ep0 maxpacket: 32 [ 147.902401][ T45] usb 4-1: USB disconnect, device number 60 [ 147.909472][ T701] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 147.917999][ T45] usblp0: removed [ 147.922124][ T701] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 147.931503][ T701] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 147.940511][ T701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 147.950176][ T701] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 147.960892][ T701] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 147.973960][ T701] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 147.983126][ T701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.992097][ T701] usb 5-1: config 0 descriptor?? [ 148.005842][ T333] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 148.156805][ T333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 148.167834][ T333] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 148.176896][ T333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.185626][ T333] usb 3-1: config 0 descriptor?? [ 148.190857][ T5547] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 148.200580][ T701] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 148.375830][ T45] usb 4-1: new low-speed USB device number 61 using dummy_hcd [ 148.405868][ T333] hid-generic 0003:04F3:0755.001C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 148.421732][ T333] usb 3-1: USB disconnect, device number 20 [ 148.439247][ T5554] loop7: detected capacity change from 0 to 7 [ 148.446011][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 148.449361][ T5552] fido_id[5552]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 148.455161][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 148.477254][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 148.486413][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 148.494255][ T826] loop7: unable to read partition table [ 148.495536][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 148.509594][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 148.518775][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 148.526780][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 148.535989][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 148.543824][ T5554] loop7: unable to read partition table [ 148.549585][ T45] usb 4-1: Invalid ep0 maxpacket: 32 [ 148.549714][ T5554] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 148.555863][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 148.577491][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 148.585530][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 148.594689][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 148.602712][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 148.611882][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 148.620018][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 148.629213][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 148.637291][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 148.646501][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 148.715827][ T45] usb 4-1: new low-speed USB device number 62 using dummy_hcd [ 148.744611][ T331] cdc_ncm 2-1:1.0: failed to get mac address [ 148.865829][ T45] usb 4-1: Invalid ep0 maxpacket: 32 [ 148.871235][ T45] usb usb4-port1: attempt power cycle [ 148.915826][ T333] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 148.929404][ T10] usb 5-1: USB disconnect, device number 23 [ 148.938307][ T10] usblp0: removed [ 148.944986][ T331] cdc_ncm 2-1:1.0: bind() failure [ 148.950876][ T331] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 148.957671][ T331] cdc_ncm 2-1:1.1: bind() failure [ 148.983471][ T5563] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.983496][ T5563] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.990369][ T5563] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.997785][ T5563] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 149.004279][ T5563] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 149.010734][ T5563] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 149.017190][ T5563] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 149.023736][ T5563] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 149.030245][ T5563] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 149.036929][ T5563] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 149.065867][ T333] usb 3-1: Using ep0 maxpacket: 32 [ 149.078606][ T333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.089531][ T333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.102078][ T333] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 149.111232][ T333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.119814][ T333] usb 3-1: config 0 descriptor?? [ 149.126552][ T333] hub 3-1:0.0: USB hub found [ 149.146870][ T5522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.153647][ T5568] /dev/rnullb0: Can't open blockdev [ 149.155465][ T5522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.169814][ T5522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.178367][ T5522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.187759][ T5522] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 149.188379][ T10] usb 2-1: USB disconnect, device number 64 [ 149.215842][ T45] usb 4-1: new low-speed USB device number 63 using dummy_hcd [ 149.236284][ T45] usb 4-1: Invalid ep0 maxpacket: 32 [ 149.325768][ T333] hub 3-1:0.0: 1 port detected [ 149.365859][ T45] usb 4-1: new low-speed USB device number 64 using dummy_hcd [ 149.386184][ T45] usb 4-1: Invalid ep0 maxpacket: 32 [ 149.391580][ T45] usb usb4-port1: unable to enumerate USB device [ 149.711275][ T5571] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 149.711416][ T5571] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 149.718083][ T5571] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:851 [ 149.741668][ T5573] veth1_macvtap: left promiscuous mode [ 149.756324][ T5573] macsec0: entered promiscuous mode [ 149.761519][ T5573] macsec0: entered allmulticast mode [ 149.768092][ T5573] veth1_macvtap: entered promiscuous mode [ 149.773912][ T5573] veth1_macvtap: entered allmulticast mode [ 149.779856][ T5573] macsec0: left promiscuous mode [ 149.784887][ T5573] macsec0: left allmulticast mode [ 149.789950][ T5573] veth1_macvtap: left allmulticast mode [ 149.877068][ T5583] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 149.877167][ T5584] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 149.884452][ T5583] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 149.905995][ T5586] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 149.929026][ T10] hub 3-1:0.0: activate --> -90 [ 150.588373][ T5630] loop7: detected capacity change from 0 to 7 [ 150.604718][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 150.613645][ T5630] loop7: unable to read partition table [ 150.630851][ T5632] tmpfs: Unknown parameter 'nrDesO' [ 150.638632][ T5630] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 150.738322][ T5558] netlink: 'syz.2.1524': attribute type 27 has an invalid length. [ 150.791354][ T5558] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:76 [ 150.859046][ T10] usb 3-1-port1: cannot reset (err = -71) [ 150.875850][ T333] usb 3-1: USB disconnect, device number 21 [ 150.890939][ T10] usb 3-1-port1: attempt power cycle [ 151.235363][ T5657] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1557'. [ 151.330532][ T36] audit: type=1400 audit(407.303:15775): avc: denied { append } for pid=5663 comm="syz.4.1559" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 151.335985][ T45] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 151.380236][ T5666] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 151.380266][ T5666] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:78 [ 151.384311][ T5667] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 151.399054][ T5667] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:78 [ 151.420623][ T5672] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:81 [ 151.506660][ T5677] rust_binder: 87: no such ref 1 [ 151.520708][ T5677] rust_binder: 87: no such ref 2 [ 151.525770][ T5677] rust_binder: 87: no such ref 3 [ 151.525826][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 151.531979][ T45] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 151.544285][ T45] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 151.552933][ T45] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 151.558209][ T5678] rust_binder: Write failure EFAULT in pid:87 [ 151.562597][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 151.578511][ T45] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 151.588248][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 151.601291][ T45] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 151.610451][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.619351][ T45] usb 2-1: config 0 descriptor?? [ 151.625856][ T334] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 151.776910][ T334] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 151.787969][ T334] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 151.797125][ T334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.806250][ T334] usb 5-1: config 0 descriptor?? [ 151.812659][ T5669] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 151.823506][ T5680] netlink: 182 bytes leftover after parsing attributes in process `syz.3.1565'. [ 151.832735][ T45] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 65 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 151.847026][ T45] usb 2-1: USB disconnect, device number 65 [ 151.852820][ T5683] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 151.853154][ T5683] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 238) [ 151.858412][ T45] usblp0: removed [ 151.859872][ T5683] rust_binder: Error while translating object. [ 151.874717][ T5683] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 151.881145][ T5683] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:969 [ 151.903867][ T5685] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 151.915065][ T5685] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 151.921531][ T5685] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 151.929664][ T5685] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:971 [ 152.139413][ T5692] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 152.200135][ T5693] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 152.206655][ T5693] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 152.214622][ T5693] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:978 [ 152.230643][ T334] usb 5-1: string descriptor 0 read error: -71 [ 152.248192][ T334] usbhid 5-1:0.0: can't add hid device: -71 [ 152.254148][ T334] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 152.262819][ T334] usb 5-1: USB disconnect, device number 24 [ 152.285878][ T45] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 152.335129][ T5703] binder: Binderfs stats mode cannot be changed during a remount [ 152.343321][ T5703] binder: Binderfs stats mode cannot be changed during a remount [ 152.415864][ T45] usb 2-1: device descriptor read/64, error -71 [ 152.665842][ T45] usb 2-1: device descriptor read/64, error -71 [ 152.735844][ T334] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 152.886959][ T334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 152.897991][ T334] usb 3-1: New USB device found, idVendor=056a, idProduct=005b, bcdDevice= 0.00 [ 152.907052][ T334] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.915977][ T334] usb 3-1: config 0 descriptor?? [ 152.918196][ T45] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 152.921314][ T5714] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 153.042497][ T5731] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.043695][ T10] hid (null): unknown global tag 0xd [ 153.045966][ T45] usb 2-1: device descriptor read/64, error -71 [ 153.050233][ T10] hid (null): bogus close delimiter [ 153.058567][ T5731] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:990 [ 153.062756][ T10] hid-generic 0009:000A:3982.001D: unexpected long global item [ 153.083989][ T10] hid-generic 0009:000A:3982.001D: probe with driver hid-generic failed with error -22 [ 153.105880][ T5733] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.157661][ T5733] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:992 [ 153.164533][ T5733] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 153.173819][ T5733] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 153.181845][ T5733] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:992 [ 153.203722][ T5736] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.213151][ T5736] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 153.219632][ T5736] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 153.227748][ T5736] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:995 [ 153.257788][ T36] audit: type=1400 audit(409.233:15776): avc: denied { append } for pid=5739 comm="syz.3.1587" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 153.293654][ T45] usb 2-1: device descriptor read/64, error -71 [ 153.337110][ T334] usbhid 3-1:0.0: can't add hid device: -71 [ 153.343196][ T334] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 153.351867][ T334] usb 3-1: USB disconnect, device number 26 [ 153.405933][ T45] usb usb2-port1: attempt power cycle [ 153.530801][ T5749] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.530931][ T5749] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 153.537575][ T5749] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 153.545672][ T5749] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1006 [ 153.567526][ T5755] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.632472][ T5768] rust_binder: Failed to allocate buffer. len:18446744073709551504, is_oneway:true [ 153.640685][ T5768] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 153.650058][ T5768] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1008 [ 153.756038][ T45] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 153.786772][ T45] usb 2-1: device descriptor read/8, error -71 [ 153.875854][ T334] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 153.916859][ T45] usb 2-1: device descriptor read/8, error -71 [ 154.035834][ T334] usb 5-1: Using ep0 maxpacket: 8 [ 154.041947][ T334] usb 5-1: config 0 has an invalid interface number: 193 but max is 1 [ 154.050209][ T334] usb 5-1: config 0 has an invalid interface number: 4 but max is 1 [ 154.058238][ T334] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.068331][ T334] usb 5-1: config 0 has no interface number 0 [ 154.074402][ T334] usb 5-1: config 0 has no interface number 1 [ 154.080513][ T334] usb 5-1: config 0 interface 193 altsetting 147 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 154.093786][ T334] usb 5-1: config 0 interface 4 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 154.095839][ T701] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 154.106786][ T334] usb 5-1: config 0 interface 193 has no altsetting 0 [ 154.106815][ T334] usb 5-1: config 0 interface 4 has no altsetting 0 [ 154.131046][ T334] usb 5-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=7d.6a [ 154.133964][ T5776] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 154.140129][ T334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.141511][ T5776] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 154.146582][ T334] usb 5-1: Product: syz [ 154.146602][ T334] usb 5-1: Manufacturer: syz [ 154.171334][ T334] usb 5-1: SerialNumber: syz [ 154.175880][ T45] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 154.184190][ T334] usb 5-1: config 0 descriptor?? [ 154.189211][ T36] audit: type=1400 audit(410.153:15777): avc: denied { remount } for pid=5779 comm="syz.1.1602" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 154.255828][ T701] usb 3-1: Using ep0 maxpacket: 16 [ 154.262240][ T701] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.277304][ T701] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.287114][ T701] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 154.288305][ T5783] fuse: Bad value for 'fd' [ 154.299925][ T701] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 154.299957][ T701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.323213][ T701] usb 3-1: config 0 descriptor?? [ 154.411730][ T5770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.422450][ T5770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.440120][ T334] usb 5-1: unknown interface protocol 0x4f, assuming v1 [ 154.449135][ T334] usb 5-1: 193:2 : does not exist [ 154.456102][ T334] usb 5-1: unknown interface protocol 0x5, assuming v1 [ 154.465641][ T334] usb 5-1: 4:0 : does not exist [ 154.475008][ T334] usb 5-1: USB disconnect, device number 25 [ 154.489252][ T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.193/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 154.527480][ T5802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.536155][ T5802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.546036][ T5802] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1024 [ 154.546156][ T13] Bluetooth: hci1: Frame reassembly failed (-84) [ 154.548087][ T5802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5802 comm=syz.3.1609 [ 154.595815][ T45] usb 2-1: device not accepting address 69, error -71 [ 154.602771][ T45] usb usb2-port1: unable to enumerate USB device [ 154.680174][ T5805] loop9: detected capacity change from 0 to 7 [ 154.686578][ T5805] buffer_io_error: 6 callbacks suppressed [ 154.686593][ T5805] Buffer I/O error on dev loop9, logical block 0, async page read [ 154.700248][ T5805] Buffer I/O error on dev loop9, logical block 0, async page read [ 154.708164][ T5805] loop9: unable to read partition table [ 154.713833][ T5805] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 154.713833][ T5805] ) failed (rc=-5) [ 154.715890][ T341] Buffer I/O error on dev loop9, logical block 0, async page read [ 154.736390][ T341] Buffer I/O error on dev loop9, logical block 0, async page read [ 154.739298][ T701] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 154.745736][ T341] Buffer I/O error on dev loop9, logical block 0, async page read [ 154.760678][ T10] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 154.765994][ T701] microsoft 0003:045E:07DA.001E: ignoring exceeding usage max [ 154.768881][ T341] Buffer I/O error on dev loop9, logical block 0, async page read [ 154.780692][ T701] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 154.786670][ T341] Buffer I/O error on dev loop9, logical block 0, async page read [ 154.793675][ T701] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 154.806837][ T701] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 154.813255][ T5809] fuse: Unknown parameter '' [ 154.814121][ T701] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 154.820044][ T5809] rust_binder: Error while translating object. [ 154.826474][ T5809] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 154.832722][ T5809] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:114 [ 154.843901][ T701] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 154.866242][ T701] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 154.873571][ T701] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 154.880843][ T701] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 154.888157][ T701] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 154.895447][ T701] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 154.898548][ T5816] rust_binder: inc_ref_done called when no active inc_refs [ 154.905060][ T701] microsoft 0003:045E:07DA.001E: No inputs registered, leaving [ 154.922490][ T701] microsoft 0003:045E:07DA.001E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 154.935873][ T10] usb 4-1: device descriptor read/64, error -71 [ 154.945818][ T701] microsoft 0003:045E:07DA.001E: no inputs found [ 154.955517][ T701] microsoft 0003:045E:07DA.001E: could not initialize ff, continuing anyway [ 154.978042][ T701] usb 3-1: USB disconnect, device number 27 [ 155.001007][ T36] audit: type=1326 audit(410.973:15778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5826 comm="syz.4.1617" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbcc078f6c9 code=0x0 [ 155.023371][ T36] audit: type=1326 audit(410.983:15779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5826 comm="syz.4.1617" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbcc078f6c9 code=0x0 [ 155.175935][ T10] usb 4-1: device descriptor read/64, error -71 [ 155.185874][ T31] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 155.316103][ T331] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 155.336943][ T31] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 155.345275][ T31] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 155.355598][ T31] usb 2-1: config 220 has no interface number 2 [ 155.361881][ T31] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 155.375033][ T31] usb 2-1: config 220 interface 0 has no altsetting 0 [ 155.381853][ T31] usb 2-1: config 220 interface 76 has no altsetting 0 [ 155.388752][ T701] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 155.396382][ T31] usb 2-1: config 220 interface 1 has no altsetting 0 [ 155.404595][ T31] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 155.413721][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.421731][ T31] usb 2-1: Product: syz [ 155.425853][ T10] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 155.425947][ T31] usb 2-1: Manufacturer: syz [ 155.438061][ T31] usb 2-1: SerialNumber: syz [ 155.465828][ T331] usb 5-1: Using ep0 maxpacket: 16 [ 155.472175][ T331] usb 5-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 155.483255][ T331] usb 5-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 155.496532][ T331] usb 5-1: config 0 interface 0 has no altsetting 0 [ 155.503246][ T331] usb 5-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 155.512330][ T331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.521028][ T331] usb 5-1: config 0 descriptor?? [ 155.555892][ T10] usb 4-1: device descriptor read/64, error -71 [ 155.556935][ T701] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.572404][ T701] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 155.582013][ T701] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 155.591113][ T701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 155.599141][ T701] usb 3-1: SerialNumber: syz [ 155.762094][ T31] usb 2-1: selecting invalid altsetting 0 [ 155.767998][ T31] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 155.774394][ T31] usb 2-1: No valid video chain found. [ 155.782707][ T31] usb 2-1: USB disconnect, device number 70 [ 155.795910][ T10] usb 4-1: device descriptor read/64, error -71 [ 155.806621][ T5834] rust_binder: Error while translating object. [ 155.806697][ T5834] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 155.812927][ T5834] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:122 [ 155.825156][ T701] usb 3-1: 0:2 : does not exist [ 155.841350][ T701] usb 3-1: USB disconnect, device number 28 [ 155.851134][ T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 155.905928][ T10] usb usb4-port1: attempt power cycle [ 155.928244][ T331] uclogic 0003:28BD:0075.001F: interface is invalid, ignoring [ 156.127908][ T701] usb 5-1: USB disconnect, device number 26 [ 156.245846][ T10] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 156.266957][ T10] usb 4-1: device descriptor read/8, error -71 [ 156.289249][ T5848] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.289803][ T5848] rust_binder: 906: no such ref 1 [ 156.301368][ T5848] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 156.339512][ T5850] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 156.354750][ T5850] rust_binder: Write failure EINVAL in pid:124 [ 156.355190][ T5851] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 156.362359][ T5851] rust_binder: Write failure EFAULT in pid:906 [ 156.397610][ T10] usb 4-1: device descriptor read/8, error -71 [ 156.467159][ T5860] rust_binder: 132: no such ref 2 [ 156.595909][ T572] Bluetooth: hci1: command 0x1003 tx timeout [ 156.601985][ T556] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 156.645876][ T10] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 156.661468][ T5866] binder: Unknown parameter '0x0000000000000000' [ 156.669065][ T10] usb 4-1: device descriptor read/8, error -71 [ 156.705865][ T5873] rust_binder: Error while translating object. [ 156.705926][ T5873] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 156.715367][ T5873] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:469 [ 156.780159][ T5882] 8021q: VLANs not supported on ip_vti0 [ 156.806936][ T10] usb 4-1: device descriptor read/8, error -71 [ 156.915969][ T10] usb usb4-port1: unable to enumerate USB device [ 157.125869][ T65] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 157.296943][ T65] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 157.307942][ T65] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 157.322172][ T65] usb 5-1: New USB device found, idVendor=056a, idProduct=00dd, bcdDevice= 0.00 [ 157.331419][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.340370][ T65] usb 5-1: config 0 descriptor?? [ 157.446116][ T5907] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1643'. [ 157.455836][ T5907] /dev/rnullb0: Can't open blockdev [ 157.624385][ T5930] SELinux: ebitmap: truncated map [ 157.641417][ T5930] SELinux: failed to load policy [ 157.650603][ T5930] netlink: 'syz.1.1649': attribute type 27 has an invalid length. [ 157.745839][ T701] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 157.755597][ T65] wacom 0003:056A:00DD.0020: unknown main item tag 0x0 [ 157.766317][ T65] wacom 0003:056A:00DD.0020: unknown main item tag 0x0 [ 157.773280][ T65] wacom 0003:056A:00DD.0020: unknown main item tag 0x0 [ 157.780366][ T65] wacom 0003:056A:00DD.0020: unknown main item tag 0x0 [ 157.787463][ T65] wacom 0003:056A:00DD.0020: unknown main item tag 0x0 [ 157.794685][ T65] wacom 0003:056A:00DD.0020: Unknown device_type for 'HID 056a:00dd'. Assuming pen. [ 157.809279][ T65] wacom 0003:056A:00DD.0020: hidraw0: USB HID v1.01 Device [HID 056a:00dd] on usb-dummy_hcd.4-1/input0 [ 157.827865][ T5936] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 157.828148][ T5936] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 157.835368][ T65] input: Wacom Bamboo Connect Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00DD.0020/input/input29 [ 157.905856][ T701] usb 3-1: Using ep0 maxpacket: 32 [ 157.912161][ T701] usb 3-1: config 8 has an invalid interface number: 203 but max is 0 [ 157.920503][ T701] usb 3-1: config 8 has no interface number 0 [ 157.926687][ T701] usb 3-1: config 8 interface 203 has no altsetting 0 [ 157.950318][ T701] usb 3-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a [ 157.966323][ T65] usb 5-1: USB disconnect, device number 27 [ 157.969189][ T10] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 157.973656][ T701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.992562][ T701] usb 3-1: Product: syz [ 157.997058][ T5940] /dev/rnullb0: Can't open blockdev [ 158.002644][ T701] usb 3-1: Manufacturer: syz [ 158.007857][ T701] usb 3-1: SerialNumber: syz [ 158.127056][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 158.136216][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.145025][ T10] usb 4-1: config 0 descriptor?? [ 158.161446][ T5962] ------------[ cut here ]------------ [ 158.167017][ T5962] WARNING: CPU: 0 PID: 5962 at mm/page_alloc.c:5234 __alloc_pages_noprof+0xe8/0x7b0 [ 158.176543][ T5962] Modules linked in: [ 158.180506][ T5962] CPU: 0 UID: 0 PID: 5962 Comm: syz.1.1659 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 158.192123][ T5962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 158.202270][ T5962] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 158.208235][ T5962] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 32 0f ee 05 00 0f 85 be 00 00 00 c6 05 25 0f ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 158.227930][ T5962] RSP: 0018:ffffc9000fe77560 EFLAGS: 00010246 [ 158.231656][ T701] usb 3-1: USB disconnect, device number 29 [ 158.234055][ T5962] RAX: 0000000000000000 RBX: 0000000000000016 RCX: 0000000000000000 [ 158.248050][ T5962] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000fe77618 [ 158.256103][ T5962] RBP: ffffc9000fe776a0 R08: ffffc9000fe77617 R09: 0000000000000000 [ 158.264125][ T5962] R10: ffffc9000fe77600 R11: fffff52001fceec3 R12: ffffc9000fe775a0 [ 158.272181][ T5962] R13: dffffc0000000000 R14: 1ffff92001fceeb0 R15: 0000000000000000 [ 158.280570][ T5962] FS: 00007f21f53606c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 158.289737][ T5962] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 158.296384][ T5962] CR2: 0000200000002000 CR3: 000000013fe18000 CR4: 00000000003526b0 [ 158.304399][ T5962] Call Trace: [ 158.307780][ T5962] [ 158.310738][ T5962] ? vfs_write+0x3c0/0xf30 [ 158.315175][ T5962] ? ksys_write+0x141/0x250 [ 158.319721][ T5962] ? x64_sys_call+0x271c/0x2ee0 [ 158.324627][ T5962] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 158.330405][ T5962] ? hashtab_init+0xdb/0x1f0 [ 158.335141][ T5962] ___kmalloc_large_node+0x81/0x220 [ 158.340417][ T5962] ? hashtab_init+0xdb/0x1f0 [ 158.345052][ T5962] __kmalloc_large_node_noprof+0x1e/0xe0 [ 158.350736][ T5962] ? hashtab_init+0xdb/0x1f0 [ 158.355386][ T5962] __kmalloc_noprof+0x336/0x530 [ 158.360295][ T5962] ? kasan_save_alloc_info+0x40/0x50 [ 158.365615][ T5962] hashtab_init+0xdb/0x1f0 [ 158.370073][ T5962] ? common_read+0x16d/0x480 [ 158.374689][ T5962] symtab_init+0x44/0x70 [ 158.378969][ T5962] common_read+0x1de/0x480 [ 158.383418][ T5962] ? hashtab_init+0xdb/0x1f0 [ 158.388050][ T5962] ? __cfi_common_read+0x10/0x10 [ 158.393040][ T5962] ? hashtab_init+0x105/0x1f0 [ 158.397783][ T5962] policydb_read+0xaab/0x28c0 [ 158.402489][ T5962] ? __kasan_kmalloc+0x96/0xb0 [ 158.407286][ T5962] ? __cfi_policydb_read+0x10/0x10 [ 158.412422][ T5962] ? security_load_policy+0x128/0x12f0 [ 158.417955][ T5962] security_load_policy+0x162/0x12f0 [ 158.423294][ T5962] ? irqentry_exit+0x4a/0x60 [ 158.427931][ T5962] ? exc_page_fault+0x66/0xc0 [ 158.432641][ T5962] ? asm_exc_page_fault+0x2b/0x30 [ 158.438031][ T5962] ? __cfi_security_load_policy+0x10/0x10 [ 158.443776][ T5962] ? rep_movs_alternative+0x4a/0xa0 [ 158.449011][ T5962] sel_write_load+0x298/0x5e0 [ 158.453714][ T5962] ? handle_mm_fault+0x169b/0x1b90 [ 158.458865][ T5962] ? __cfi_sel_write_load+0x10/0x10 [ 158.464093][ T5962] ? bpf_lsm_file_permission+0xd/0x20 [ 158.469519][ T5962] ? __cfi_sel_write_load+0x10/0x10 [ 158.474758][ T5962] vfs_write+0x3c0/0xf30 [ 158.479062][ T5962] ? __cfi_vfs_write+0x10/0x10 [ 158.483851][ T5962] ? __kasan_check_write+0x18/0x20 [ 158.489018][ T5962] ? mutex_lock+0x92/0x1c0 [ 158.493464][ T5962] ? __cfi_mutex_lock+0x10/0x10 [ 158.498345][ T5962] ? __fget_files+0x2c5/0x340 [ 158.503052][ T5962] ksys_write+0x141/0x250 [ 158.507429][ T5962] ? __cfi_ksys_write+0x10/0x10 [ 158.512309][ T5962] ? __kasan_check_read+0x15/0x20 [ 158.517371][ T5962] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 158.523457][ T5962] __x64_sys_write+0x7f/0x90 [ 158.528258][ T5962] x64_sys_call+0x271c/0x2ee0 [ 158.533021][ T5962] do_syscall_64+0x58/0xf0 [ 158.537511][ T5962] ? clear_bhb_loop+0x50/0xa0 [ 158.542209][ T5962] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 158.548239][ T5962] RIP: 0033:0x7f21f458f6c9 [ 158.552716][ T5962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.572358][ T5962] RSP: 002b:00007f21f5360038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 158.580832][ T5962] RAX: ffffffffffffffda RBX: 00007f21f47e6180 RCX: 00007f21f458f6c9 [ 158.588842][ T5962] RDX: 0000000000002046 RSI: 0000200000000000 RDI: 0000000000000003 [ 158.596890][ T5962] RBP: 00007f21f4611f91 R08: 0000000000000000 R09: 0000000000000000 [ 158.604895][ T5962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.612892][ T5962] R13: 00007f21f47e6218 R14: 00007f21f47e6180 R15: 00007ffde89a6818 [ 158.620901][ T5962] [ 158.623933][ T5962] ---[ end trace 0000000000000000 ]--- [ 158.629937][ T5962] SELinux: failed to load policy [ 158.636333][ T10] ryos 0003:1E7D:3138.0021: unknown main item tag 0x2 [ 158.644674][ T10] ryos 0003:1E7D:3138.0021: hidraw0: USB HID v1.01 Device [HID 1e7d:3138] on usb-dummy_hcd.3-1/input0 [ 158.846614][ T5925] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 158.846820][ T5925] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 158.853375][ T5925] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:1028 [ 158.863414][ T10] usb 4-1: USB disconnect, device number 69